#!/bin/sh
set -eu
exec 9>/run/lock/guardasenha-update.lock
flock -n 9 || exit 0
# Do not replace assets while a desktop user has the vault open.
if pgrep -f '^/opt/guardasenha-desktop/guardasenha([[:space:]]|$)' >/dev/null; then
  echo 'GuardaSenha em uso; atualização adiada para a próxima verificação.'
  exit 0
fi
export DEBIAN_FRONTEND=noninteractive
apt-get -o Dir::Etc::sourcelist=/etc/apt/sources.list.d/guardasenha.sources \
  -o Dir::Etc::sourceparts=- -o APT::Get::List-Cleanup=0 \
  -o Acquire::Retries=2 update
# APT verifies InRelease and package hashes; do not allow unsigned packages,
# downgrades or removals. Install only an upgrade of the existing application.
apt-get -o DPkg::Lock::Timeout=120 -o Dpkg::Options::=--force-confold \
  --assume-yes --no-remove --only-upgrade install guardasenha
