qubes-dom0-update: prevent concurrent execution

fixes: QubesOS/qubes-issues#6345
QubesOS · Jul 5, 2024 · 18fd950 · 18fd950
1 parent f6b35ff
commit 18fd950
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/dom0-updates/qubes-dom0-update b/dom0-updates/qubes-dom0-update
@@ -187,6 +187,15 @@ if [ "$ID" != 0 ] && [ -z "$GUI" ] && [ -z "$CHECK_ONLY" ] ; then
     exit 1
 fi
 
+LOCKFILE="/var/run/qubes/qubes-dom0-update.lock"
+exec 9>"${LOCKFILE}"
+[ "$ID" == 0 ] && chgrp qubes "${LOCKFILE}" && chmod g+w "${LOCKFILE}"
+flock -n 9
+if [[ ${?} -ne 0 ]]; then
+    echo "Another instance of qubes-dom0-update is already running!"
+    exit 1
+fi
+
 if [ "$GUI" == "1" ] && [ ${#PKGS[@]} -ne 0 ]; then
     echo "ERROR: GUI mode can be used only for updates" >&2
     exit 1