From 81147f1fbbec8b657a96b28c53380910184c40db Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Tue, 28 Oct 2025 02:59:00 -0400
Subject: [PATCH] rotate-session-ticket-keys: skip when synced

---
 rotate-session-ticket-keys | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/rotate-session-ticket-keys b/rotate-session-ticket-keys
index ad17703..e10fd4c 100755
--- a/rotate-session-ticket-keys
+++ b/rotate-session-ticket-keys
@@ -4,6 +4,15 @@ set -o errexit -o nounset -o pipefail
 
 cd /etc/session-ticket-keys
 
+exec {fd}>sync-lock
+flock $fd
+
+if [[ -f synced ]]; then
+    echo skipping rotation due to sync
+    rm synced
+    exit 0
+fi
+
 rsync -tI 2.key 1.key
 rsync -tI 3.key 2.key
 rsync -tI 4.key 3.key