[deb/rpm] restart endpoint with tamper protection after elastic-agent (#8637)

* fix: use rpm from local build

(cherry picked from commit 249885f)

# Conflicts:
#	dev-tools/packaging/templates/linux/postinstall.sh.tmpl
#	testing/integration/endpoint_security_test.go

Author: pkoutsovasilis

dev-tools/packaging/templates/linux/postinstall.sh.tmpl

@@ -13,6 +13,37 @@ if test -L "$symlink"; then
     unlink "$symlink"
 fi
 
+<<<<<<< HEAD
+=======
+SERVICE_NAME="ElasticEndpoint"
+should_restart_endpoint=false
+
+echo "Checking if $SERVICE_NAME is installed"
+if systemctl list-unit-files --type=service | grep -q "^${SERVICE_NAME}.service"; then
+
+    installed_endpoint_version="$(/opt/Elastic/Endpoint/elastic-endpoint version)"
+    archive_endpoint_version="$("$new_endpoint_component_bin" version)"
+
+    echo "${SERVICE_NAME} is installed at version ${installed_endpoint_version}"
+    if ! systemctl is-active --quiet "$SERVICE_NAME"; then
+        echo "$SERVICE_NAME is installed but not running"
+        if [[ "$installed_endpoint_version" == "$archive_endpoint_version" ]]; then
+            echo "New endpoint and installed endpoint versions are the same: \"${installed_endpoint_version}\""
+            should_restart_endpoint=true
+        else
+            echo "New endpoint version  \"${archive_endpoint_version}\" is different than the one that's already
+            installed  \"${installed_endpoint_version}\""
+        fi
+    else
+        # Endpoint can already be running if tamper protection is not enabled
+        echo "$SERVICE_NAME is already running"
+    fi
+else
+    echo "$SERVICE_NAME is not installed"
+fi
+
+
+>>>>>>> 249885f9f ([deb/rpm] restart endpoint with tamper protection after elastic-agent  (#8637))
 # create symlink to the new agent
 echo "create symlink "$symlink" to "$new_agent_dir/elastic-agent""
 ln -s "$new_agent_dir/elastic-agent" "$symlink"
@@ -22,4 +53,9 @@ echo "systemd enable/restart elastic-agent"
 systemctl daemon-reload 2> /dev/null
 systemctl enable elastic-agent 2> /dev/null || true
 systemctl restart elastic-agent 2> /dev/null || true
+# restart endpoint if needed
+if [ "$should_restart_endpoint" = true ]; then
+    echo "Starting $SERVICE_NAME after elastic-agent"
+    systemctl restart "$SERVICE_NAME" 2> /dev/null || true
+fi
 exit 0