Pre/post upgrade hooks

[matpen]

I would be interested in pre/post upgrade hooks.

My use case is as follows: on my VPS I employ tripwire as an intrusion detection system, which requires confirmation of all system changes, listed in a text file. As of now, I am forced to

• check tripwire for changes (there should be none)
• upgrade the system manually
• run tripwire and confirm all changes done by the upgrade process

Ideally I would automate this process as follows:

• before the update runs, my hook get called, and checks if there are any changes to the system
• if there are changes, the hook fails, and the update is interrupted
• if there are no changes (like it should be), the update proceeds
• if the update is successful, another hook gets called which updates the tripwire database

Is there any way to approach the above?

[matpen]

Sorry to bump... but is there anyone who can answer the above? Or maybe provide some pointers for a pull request?

[vmspike]

@matpen , DPkg::Pre-Invoke or Dpkg::Pre-Install-Pkgs with DPkg::Post-Invoke can be what you're looking for: https://wiki.debian.org/AptConf