]> git.ipfire.org Git - people/mfischer/ipfire-2.x.git/blame - config/rootfiles/core/167/update.sh
Core Update 167: Ship and apply sysctl changes
[people/mfischer/ipfire-2.x.git] / config / rootfiles / core / 167 / update.sh
CommitLineData
64a21318
MT
1#!/bin/bash
2############################################################################
3# #
4# This file is part of the IPFire Firewall. #
5# #
6# IPFire is free software; you can redistribute it and/or modify #
7# it under the terms of the GNU General Public License as published by #
8# the Free Software Foundation; either version 3 of the License, or #
9# (at your option) any later version. #
10# #
11# IPFire is distributed in the hope that it will be useful, #
12# but WITHOUT ANY WARRANTY; without even the implied warranty of #
13# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14# GNU General Public License for more details. #
15# #
16# You should have received a copy of the GNU General Public License #
17# along with IPFire; if not, write to the Free Software #
18# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
19# #
20# Copyright (C) 2022 IPFire-Team <info@ipfire.org>. #
21# #
22############################################################################
23#
24. /opt/pakfire/lib/functions.sh
25/usr/local/bin/backupctrl exclude >/dev/null 2>&1
26
12cb09eb 27core=167
64a21318
MT
28
29# Remove old core updates from pakfire cache to save space...
30for (( i=1; i<=$core; i++ )); do
31 rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
32done
33
34# Remove files
fa0a7c03
PM
35rm -rvf \
36 /bin/setserial \
b45c5276 37 /etc/dracut.conf \
fa0a7c03
PM
38 /etc/fonts/conf.d/30-urw-aliases.conf \
39 /etc/grub.d/README \
40 /etc/rc.d/init.d/networking/red.up/99-geoip-database \
41 /etc/udev/rules.d/99-fuse.rules \
42 /lib/firmware/amd-ucode/microcode_amd.bin.asc \
43 /lib/firmware/amd-ucode/microcode_amd_fam15h.bin.asc \
44 /lib/firmware/amd-ucode/microcode_amd_fam16h.bin.asc \
45 /lib/firmware/amd-ucode/microcode_amd_fam17h.bin.asc \
46 /lib/firmware/ath10k/QCA4019/hw1.0/notice_ath10k_firmware-5.txt \
47 /lib/firmware/ath10k/QCA6174/hw2.1/notice_ath10k_firmware-5.txt \
48 /lib/firmware/ath10k/QCA6174/hw3.0/notice_ath10k_firmware-4.txt \
49 /lib/firmware/ath10k/QCA6174/hw3.0/notice_ath10k_firmware-6.txt \
50 /lib/firmware/ath10k/QCA9377/hw1.0/notice_ath10k_firmware-5.txt \
51 /lib/firmware/ath10k/QCA9377/hw1.0/notice_ath10k_firmware-6.txt \
52 /lib/firmware/ath10k/QCA9887/hw1.0/notice_ath10k_firmware-5.txt \
53 /lib/firmware/ath10k/QCA9888/hw2.0/notice_ath10k_firmware-5.txt \
54 /lib/firmware/ath10k/QCA988X/hw2.0/notice_ath10k_firmware-4.txt \
55 /lib/firmware/ath10k/QCA988X/hw2.0/notice_ath10k_firmware-5.txt \
56 /lib/firmware/ath10k/QCA9984/hw1.0/notice_ath10k_firmware-5.txt \
57 /lib/firmware/ath10k/QCA99X0/hw2.0/notice_ath10k_firmware-5.txt \
58 /lib/firmware/atusb/ChangeLog \
59 /lib/firmware/check_whence.py \
60 /lib/firmware/cis/src \
61 /lib/firmware/copy-firmware.sh \
62 /lib/firmware/cxgb4/t4fw-1.20.8.0.bin \
63 /lib/firmware/cxgb4/t4fw-1.24.3.0.bin \
64 /lib/firmware/cxgb4/t5fw-1.20.8.0.bin \
65 /lib/firmware/cxgb4/t5fw-1.24.3.0.bin \
66 /lib/firmware/cxgb4/t6fw-1.20.8.0.bin \
67 /lib/firmware/cxgb4/t6fw-1.24.3.0.bin \
68 /lib/firmware/GPL-2 \
69 /lib/firmware/GPL-3 \
70 /lib/firmware/isci/README \
71 /lib/firmware/LICENCE.* \
72 /lib/firmware/Makefile \
7827c5fb
PM
73 /lib/firmware/mellanox/ \
74 /lib/firmware/mrvl/prestera/ \
fa0a7c03
PM
75 /lib/firmware/qca/NOTICE.txt \
76 /lib/firmware/qcom/NOTICE.txt \
7827c5fb
PM
77 /lib/firmware/qcom/sdm845/ \
78 /lib/firmware/qcom/sm8250 \
fa0a7c03
PM
79 /lib/firmware/README \
80 /lib/firmware/WHENCE \
81 /lib/kbd/keymaps/i386/qwerty/fi-latin1.map.gz \
82 /lib/kbd/keymaps/i386/qwerty/fi-latin9.map.gz \
83 /lib/ld-2.29.so \
84 /lib/ld-2.31.so \
85 /lib/ld-2.32.so \
86 /lib/libcap.so \
87 /lib/libhistory.so.5 \
88 /lib/libhistory.so.5.2 \
89 /lib/libip4tc.so.0 \
90 /lib/libip4tc.so.0.1.0 \
91 /lib/libip6tc.so.0 \
92 /lib/libip6tc.so.0.1.0 \
93 /lib/libiptc.so \
94 /lib/libiptc.so.0 \
95 /lib/libiptc.so.0.0.0 \
96 /lib/libnss_nis-2.31.so \
97 /lib/libnss_nisplus-2.31.so \
98 /lib/libnss_nisplus.so.2 \
99 /lib/libnss_nis.so.2 \
100 /lib/libproc-3.2.8.so \
101 /lib/libreadline.so.5 \
102 /lib/libreadline.so.5.2 \
103 /lib/libsysfs.so \
104 /lib/libsysfs.so.1 \
105 /lib/libsysfs.so.1.0.3 \
106 /lib/udev/bluetooth_serial \
107 /lib/udev/rules.d/24-bluetooth.rules \
108 /lib/xtables/libxt_IMQ.so \
219a9984 109 /opt/pakfire/pakfire-2007.key \
fa0a7c03
PM
110 /sbin/mount.fuse \
111 /sbin/raw \
112 /sbin/xfs_scrub \
113 /sbin/xfs_scrub_all \
114 /srv/web/ipfire/cgi-bin/bluetooth.cgi \
115 /usr/bin/ez-ipupdate \
116 /usr/bin/fusermount \
117 /usr/bin/gawk-5.1.0 \
118 /usr/bin/gcov-dump \
119 /usr/bin/getunimap \
b45c5276 120 /usr/bin/mkinitrd \
fa0a7c03
PM
121 /usr/bin/mtools \
122 /usr/bin/pango-querymodules \
123 /usr/bin/perl5.30.0 \
124 /usr/bin/setlogcons \
125 /usr/bin/setvesablank \
13eaaa56 126 /usr/bin/tailf \
fa0a7c03
PM
127 /usr/bin/ulockmgr_server \
128 /usr/include/python2.7 \
129 /usr/lib/cairo \
b45c5276 130 /usr/lib/dracut \
fa0a7c03
PM
131 /usr/lib/findutils/bigram \
132 /usr/lib/findutils/code \
133 /usr/lib/gawk/testext.so \
134 /usr/lib/itcl4.2.1 \
135 /usr/lib/libasan.so.5 \
136 /usr/lib/libasan.so.5.0.0 \
137 /usr/lib/libbfd-2.32.so \
138 /usr/lib/libbfd-2.34.so \
139 /usr/lib/libbfd-2.35.1.so \
140 /usr/lib/libbind9-9.16.22.so \
4eb92c5a 141 /usr/lib/libbind9-9.16.26.so \
fa0a7c03
PM
142 /usr/lib/libbind9.so.161 \
143 /usr/lib/libbind9.so.161.0.4 \
144 /usr/lib/libblkid.so \
145 /usr/lib/libdns-9.16.22.so \
4eb92c5a 146 /usr/lib/libdns-9.16.26.so \
fa0a7c03
PM
147 /usr/lib/libdnssec.so.7 \
148 /usr/lib/libdnssec.so.7.0.0 \
149 /usr/lib/libdns.so.* \
150 /usr/lib/libevent-2.1.so.6 \
151 /usr/lib/libevent-2.1.so.6.0.2 \
152 /usr/lib/libevent_core-2.1.so.6 \
153 /usr/lib/libevent_core-2.1.so.6.0.2 \
154 /usr/lib/libevent_extra-2.1.so.6 \
155 /usr/lib/libevent_extra-2.1.so.6.0.2 \
156 /usr/lib/libevent_openssl-2.1.so.6 \
157 /usr/lib/libevent_openssl-2.1.so.6.0.2 \
158 /usr/lib/libevent_openssl.so \
159 /usr/lib/libevent_pthreads-2.1.so.6 \
160 /usr/lib/libevent_pthreads-2.1.so.6.0.2 \
161 /usr/lib/libevent_pthreads.so \
162 /usr/lib/libexpat.so \
163 /usr/lib/libexslt.so \
164 /usr/lib/libffi.so.6 \
165 /usr/lib/libffi.so.6.0.4 \
166 /usr/lib/libffi.so.7 \
167 /usr/lib/libffi.so.7.1.0 \
168 /usr/lib/libfuse.so \
169 /usr/lib/libfuse.so.2 \
170 /usr/lib/libfuse.so.2.9.7 \
171 /usr/lib/libgdbm_compat.so \
172 /usr/lib/libgdbm_compat.so.3 \
173 /usr/lib/libgdbm_compat.so.3.0.0 \
174 /usr/lib/libgdbm.so \
175 /usr/lib/libgdbm.so.3 \
176 /usr/lib/libgdbm.so.3.0.0 \
177 /usr/lib/libgd.so \
178 /usr/lib/libgd.so.2 \
179 /usr/lib/libgd.so.2.0.0 \
180 /usr/lib/libgettextlib-0.19.8.1.so \
181 /usr/lib/libgettextsrc-0.19.8.1.so \
182 /usr/lib/libhistory.so.6 \
183 /usr/lib/libhistory.so.6.3 \
184 /usr/lib/libhogweed.so.5 \
185 /usr/lib/libhogweed.so.5.0 \
186 /usr/lib/libidn.so \
187 /usr/lib/libidn.so.11 \
188 /usr/lib/libidn.so.11.6.18 \
189 /usr/lib/libirs-9.16.22.so \
190 /usr/lib/libisc-9.16.22.so \
4eb92c5a 191 /usr/lib/libisc-9.16.26.so \
fa0a7c03 192 /usr/lib/libisccc-9.16.22.so \
4eb92c5a 193 /usr/lib/libisccc-9.16.26.so \
fa0a7c03
PM
194 /usr/lib/libisccc.so.161 \
195 /usr/lib/libisccc.so.161.0.1 \
196 /usr/lib/libisccfg-9.16.22.so \
4eb92c5a 197 /usr/lib/libisccfg-9.16.26.so \
fa0a7c03
PM
198 /usr/lib/libisccfg.so.163 \
199 /usr/lib/libisccfg.so.163.0.8 \
200 /usr/lib/libisc.so.1100 \
201 /usr/lib/libisc.so.1100.3.2 \
202 /usr/lib/libisc.so.1104 \
203 /usr/lib/libisc.so.1104.0.0 \
204 /usr/lib/libisc.so.1105 \
205 /usr/lib/libisc.so.1105.1.1 \
206 /usr/lib/libisc.so.1107 \
207 /usr/lib/libisc.so.1107.0.5 \
208 /usr/lib/libixml.so \
209 /usr/lib/libknot.so.10 \
210 /usr/lib/libknot.so.10.0.0 \
211 /usr/lib/libknot.so.11 \
212 /usr/lib/libknot.so.11.0.0 \
213 /usr/lib/libknot.so.9 \
214 /usr/lib/libknot.so.9.0.0 \
215 /usr/lib/liblber-2.3.so.0 \
216 /usr/lib/liblber-2.3.so.0.2.8 \
217 /usr/lib/libldap-2.3.so.0 \
218 /usr/lib/libldap-2.3.so.0.2.8 \
219 /usr/lib/libldap_r-2.3.so.0 \
220 /usr/lib/libldap_r-2.3.so.0.2.8 \
221 /usr/lib/libloc.so.0 \
222 /usr/lib/libloc.so.0.0.0 \
223 /usr/lib/liblua-5.3.so \
224 /usr/lib/liblua.so \
225 /usr/lib/liblwres.so.161 \
226 /usr/lib/liblwres.so.161.0.4 \
227 /usr/lib/libmpfr.so.4 \
228 /usr/lib/libmpfr.so.4.1.5 \
229 /usr/lib/libmpx.so.2 \
230 /usr/lib/libmpx.so.2.0.1 \
231 /usr/lib/libmpxwrappers.so.2 \
232 /usr/lib/libmpxwrappers.so.2.0.1 \
233 /usr/lib/libnettle.so.7 \
234 /usr/lib/libnettle.so.7.0 \
235 /usr/lib/libns-9.16.22.so \
4eb92c5a 236 /usr/lib/libns-9.16.26.so \
fa0a7c03
PM
237 /usr/lib/libopcodes-2.32.so \
238 /usr/lib/libopcodes-2.34.so \
239 /usr/lib/libopcodes-2.35.1.so \
240 /usr/lib/libpcre2-posix.so.2 \
241 /usr/lib/libpcre2-posix.so.2.0.3 \
242 /usr/lib/libpng12.so \
243 /usr/lib/libpng12.so.0 \
244 /usr/lib/libpng12.so.0.57.0 \
245 /usr/lib/libpng.so.3 \
246 /usr/lib/libpng.so.3.57.0 \
247 /usr/lib/libpoppler.so.100 \
248 /usr/lib/libpoppler.so.100.0.0 \
249 /usr/lib/libpoppler.so.110 \
250 /usr/lib/libpoppler.so.110.0.0 \
251 /usr/lib/libpoppler.so.111 \
252 /usr/lib/libpoppler.so.111.0.0 \
253 /usr/lib/libpoppler.so.66 \
254 /usr/lib/libpoppler.so.66.0.0 \
255 /usr/lib/libqpdf.so.17 \
256 /usr/lib/libqpdf.so.17.0.0 \
257 /usr/lib/libreadline.so.6 \
258 /usr/lib/libreadline.so.6.3 \
4eb92c5a 259 /usr/lib/librrd.so.8.2.1 \
fa0a7c03
PM
260 /usr/lib/libsensors.so.4 \
261 /usr/lib/libsensors.so.4.4.0 \
262 /usr/lib/libsqlite3.so \
263 /usr/lib/libthreadutil.so \
264 /usr/lib/libthreadutil.so.6 \
265 /usr/lib/libthreadutil.so.6.0.3 \
266 /usr/lib/libulockmgr.so \
267 /usr/lib/libulockmgr.so.1 \
268 /usr/lib/libulockmgr.so.1.0.1 \
269 /usr/lib/libupnp.so \
270 /usr/lib/libuuid.so \
271 /usr/lib/libxml2.so \
272 /usr/lib/libxslt.so \
273 /usr/lib/pango \
274 /usr/lib/perl5/site_perl/5.30.0 \
275 /usr/lib/perl5/site_perl/5.32.1/Net/IP.pm \
276 /usr/lib/python3.8/ensurepip/_bundled/pip-19.2.3-py2.py3-none-any.whl \
277 /usr/lib/python3.8/idlelib/Icons/idle.icns \
278 /usr/lib/python3.8/lib2to3/Grammar3.8.1.final.0.pickle \
279 /usr/lib/python3.8/lib2to3/PatternGrammar3.8.1.final.0.pickle \
280 /usr/lib/sqlite3.34.0 \
281 /usr/lib/squid/basic_nis_auth \
282 /usr/lib/squid/ext_time_quota_acl \
283 /usr/lib/tcl8/8.4/platform-1.0.14.tm \
284 /usr/lib/tcl8/8.4/platform-1.0.15.tm \
285 /usr/lib/tcl8/8.5/msgcat-1.6.0.tm \
286 /usr/lib/tcl8/8.5/tcltest-2.4.0.tm \
287 /usr/lib/tcl8/8.6/http-2.8.9.tm \
288 /usr/lib/tcl8/8.6/tdbc/sqlite3-1.0.4.tm \
289 /usr/lib/tcl8/8.6/tdbc/sqlite3-1.1.2.tm \
290 /usr/lib/tdbc1.1.2 \
291 /usr/lib/tdbcmysql1.1.2 \
292 /usr/lib/tdbcodbc1.1.2 \
293 /usr/lib/tdbcpostgres1.1.2 \
294 /usr/lib/thread2.8.6 \
295 /usr/libexec/xtables-addons \
c60f6b38 296 /usr/local/bin/convert-ovpn \
bfde1c5a 297 /usr/local/bin/ovpn-ccd-convert \
fa0a7c03
PM
298 /usr/local/bin/rebuild-initrd \
299 /usr/local/bin/xt_geoip_build \
300 /usr/local/bin/xt_geoip_update \
301 /usr/sbin/batctl \
302 /usr/sbin/fbset \
13eaaa56 303 /usr/sbin/fdformat \
fa0a7c03
PM
304 /usr/sbin/update-usbids.sh \
305 /usr/sbin/uuidd \
306 /usr/share/doc/fireinfo \
307 /usr/share/GeoIP \
308 /usr/share/zoneinfo/posix/US/Pacific-New \
309 /usr/share/zoneinfo/right/US/Pacific-New \
310 /usr/share/zoneinfo/US/Pacific-New \
311 /var/lib/GeoIP
64a21318 312
219a9984 313# Delete old 2007 Pakfire key from GPG keyring
90f03efe
PM
314GNUPGHOME="/opt/pakfire/etc/.gnupg" gpg --batch --yes --delete-keys 179740DC4D8C47DC63C099C74BDE364C64D96617
315
64a21318 316# Stop services
451cf016 317/etc/init.d/ipsec stop
64a21318
MT
318
319# Extract files
320extract_files
321
322# update linker config
323ldconfig
324
1091a629
PM
325# Add new 2022 Pakfire key to GPG keyring
326GNUPGHOME="/opt/pakfire/etc/.gnupg" gpg --import /opt/pakfire/pakfire-2022.key
327
64a21318
MT
328# Update Language cache
329/usr/local/bin/update-lang-cache
330
331# Filesytem cleanup
332/usr/local/bin/filesystem-cleanup
333
ca4822a1
PM
334# Hardlink any identical files to save space
335hardlink -c -vv /lib/firmware
336
b45c5276
MT
337# Regenerate all initrds
338dracut --regenerate-all --force
339
b28f36fa
MT
340# Rebuild IPS rules
341perl -e "require '/var/ipfire/ids-functions.pl'; &IDS::oinkmaster();"
342/etc/init.d/suricata reload
343
c9b5a475
PM
344# Apply sysctl changes
345/etc/init.d/sysctl start
346
64a21318 347# Start services
da4ff2f6 348/etc/init.d/apache restart
6410997d 349/etc/init.d/sshd restart
451cf016
PM
350if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then
351 /etc/init.d/ipsec start
352fi
64a21318 353
f1269489
PM
354# Nano is now part of the core system, remove Pakfire metadata for it
355if [ -e "/opt/pakfire/db/installed/meta-nano" ] && [ -e "/opt/pakfire/db/meta/meta-nano" ]; then
356 rm -vf \
357 /opt/pakfire/db/installed/meta-nano \
358 /opt/pakfire/db/meta/meta-nano \
359 /opt/pakfire/db/rootfiles/nano
360fi
361
64a21318
MT
362# This update needs a reboot...
363touch /var/run/need_reboot
364
365# Finish
366/etc/init.d/fireinfo start
367sendprofile
368
369# Update grub config to display new core version
370if [ -e /boot/grub/grub.cfg ]; then
371 grub-mkconfig -o /boot/grub/grub.cfg
372fi
373
374sync
375
376# Don't report the exitcode last command
377exit 0