[ipfire-2.x.git] / config / rootfiles / core / 90 / update.sh

#!/bin/bash
############################################################################
#                                                                          #
# This file is part of the IPFire Firewall.                                #
#                                                                          #
# IPFire is free software; you can redistribute it and/or modify           #
# it under the terms of the GNU General Public License as published by     #
# the Free Software Foundation; either version 3 of the License, or        #
# (at your option) any later version.                                      #
#                                                                          #
# IPFire is distributed in the hope that it will be useful,                #
# but WITHOUT ANY WARRANTY; without even the implied warranty of           #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
# GNU General Public License for more details.                             #
#                                                                          #
# You should have received a copy of the GNU General Public License        #
# along with IPFire; if not, write to the Free Software                    #
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
#                                                                          #
# Copyright (C) 2014 IPFire-Team <info@ipfire.org>.                        #
#                                                                          #
############################################################################
#
. /opt/pakfire/lib/functions.sh
/usr/local/bin/backupctrl exclude >/dev/null 2>&1


function find_device() {
	local mountpoint="${1}"

	local root
	local dev mp fs flags rest
	while read -r dev mp fs flags rest; do
		# Skip unwanted entries
		[ "${dev}" = "rootfs" ] && continue

		if [ "${mp}" = "${mountpoint}" ] && [ -b "${dev}" ]; then
			root="$(basename "${dev}")"
			break
		fi
	done < /proc/mounts

	# Get the actual device from the partition that holds /
	while [ -n "${root}" ]; do
		if [ -e "/sys/block/${root}" ]; then
			echo "${root}"
			return 0
		fi

		# Remove last character
		root="${root::-1}"
	done

	return 1
}


#
# Remove old core updates from pakfire cache to save space...
core=90
for (( i=1; i<=${core}; i++ ))
do
	rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
done

#
# Do some sanity checks.
case $(uname -r) in
	*-ipfire-versatile )
		/usr/bin/logger -p syslog.emerg -t ipfire \
			"core-update-${core}: ERROR cannot update. versatile support is dropped."
		# Report no error to pakfire. So it does not try to install it again.
		exit 0
		;;
	*-ipfire* )
		# Ok.
		;;
	* )
		/usr/bin/logger -p syslog.emerg -t ipfire \
			"core-update-${core}: ERROR cannot update. No IPFire Kernel."
		exit 1
	;;
esac


#
#
KVER="xxxKVERxxx"

# Check diskspace on root
ROOTSPACE=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`

if [ $ROOTSPACE -lt 100000 ]; then
	/usr/bin/logger -p syslog.emerg -t ipfire \
		"core-update-${core}: ERROR cannot update because not enough free space on root."
	exit 2
fi


echo
echo Update Kernel to $KVER ...
#
# Remove old kernel, configs, initrd, modules, dtb's ...
#
rm -rf /boot/System.map-*
rm -rf /boot/config-*
rm -rf /boot/ipfirerd-*
rm -rf /boot/initramfs-*
rm -rf /boot/vmlinuz-*
rm -rf /boot/uImage-ipfire-*
rm -rf /boot/uInit-ipfire-*
rm -rf /boot/dtb-*-ipfire-*
rm -rf /lib/modules

case "$(uname -m)" in
	armv*)
		# Backup uEnv.txt if exist
		if [ -e /boot/uEnv.txt ]; then
			cp -vf /boot/uEnv.txt /boot/uEnv.txt.org
		fi

		# work around the u-boot folder detection bug
		mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
		mkdir -pv /boot/dtb-$KVER-ipfire-multi
		;;
esac

#
#Stop services
/etc/init.d/snort stop
/etc/init.d/squid stop
/etc/init.d/ipsec stop
/etc/init.d/apache stop

#
#Extract files
tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p --numeric-owner -C /

# Check diskspace on boot
BOOTSPACE=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`

if [ $BOOTSPACE -lt 1000 ]; then
	case $(uname -r) in
		*-ipfire-kirkwood )
			# Special handling for old kirkwood images.
			# (install only kirkwood kernel)
			rm -rf /boot/*
			# work around the u-boot folder detection bug
			mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
			tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p \
				--numeric-owner -C / --wildcards 'boot/*-kirkwood*'
			;;
		* )
			/usr/bin/logger -p syslog.emerg -t ipfire \
				"core-update-${core}: FATAL-ERROR space run out on boot. System is not bootable..."
			/etc/init.d/apache start
			exit 4
			;;
	esac
fi

# Create GeoIP related files if they do not exist yet.
if [ ! -e "/var/ipfire/firewall/geoipblock" ]; then
	touch /var/ipfire/firewall/geoipblock
	chown nobody:nobody /var/ipfire/firewall/geoipblock

	# Insert default value into file.
	echo "GEOIPBLOCK_ENABLED=off" >> /var/ipfire/firewall/geoipblock
fi
if [ ! -e "/var/ipfire/fwhosts/customgeoipgrp" ]; then
	touch /var/ipfire/fwhosts/customgeoipgrp
	chown nobody:nobody /var/ipfire/fwhosts/customgeoipgrp
fi

# Download/Update GeoIP databases.
/usr/local/bin/xt_geoip_update

# Update Language cache
perl -e "require '/var/ipfire/lang.pl'; &Lang::BuildCacheLang"

#
# Start services
#
/etc/init.d/apache start
/etc/init.d/squid start
/etc/init.d/snort start
if [ `grep "ENABLED=on" /var/ipfire/vpn/settings` ]; then
	/etc/init.d/ipsec start
fi

case "$(uname -m)" in
	i?86)
	case "$(find_device "/")" in
		xvd* )
			echo Skip remove grub2 files, because pygrub fail.
			rm -f /boot/grub/*
			echo config will recreated by linux-pae install.
			;;
		* )
			#
			# Update to GRUB2 config
			#
			grub-mkconfig > /boot/grub/grub.cfg
			;;
	esac
esac

# Force (re)install pae kernel if pae is supported
rm -rf /opt/pakfire/db/*/meta-linux-pae
if [ ! "$(grep "^flags.* pae " /proc/cpuinfo)" == "" ]; then
	ROOTSPACE=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
	BOOTSPACE=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
	if [ $BOOTSPACE -lt 12000 -o $ROOTSPACE -lt 90000 ]; then
		/usr/bin/logger -p syslog.emerg -t ipfire \
			"core-update-${core}: WARNING not enough space for pae kernel."
	else
		echo "Name: linux-pae" > /opt/pakfire/db/installed/meta-linux-pae
		echo "ProgVersion: 0" >> /opt/pakfire/db/installed/meta-linux-pae
		echo "Release: 0"     >> /opt/pakfire/db/installed/meta-linux-pae
		echo "Name: linux-pae" > /opt/pakfire/db/meta/meta-linux-pae
		echo "ProgVersion: 0" >> /opt/pakfire/db/meta/meta-linux-pae
		echo "Release: 0"     >> /opt/pakfire/db/meta/meta-linux-pae
	fi
fi

#
# After pakfire has ended run it again and update the lists and do upgrade
#
echo '#!/bin/bash'                                        >  /tmp/pak_update
echo 'while [ "$(ps -A | grep " update.sh")" != "" ]; do' >> /tmp/pak_update
echo '    sleep 1'                                        >> /tmp/pak_update
echo 'done'                                               >> /tmp/pak_update
echo 'while [ "$(ps -A | grep " pakfire")" != "" ]; do'   >> /tmp/pak_update
echo '    sleep 1'                                        >> /tmp/pak_update
echo 'done'                                               >> /tmp/pak_update
echo '/opt/pakfire/pakfire update -y --force'             >> /tmp/pak_update
echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
echo '/usr/bin/logger -p syslog.emerg -t ipfire "Core-upgrade finished. If you use a customized grub/uboot config"' >> /tmp/pak_update
echo '/usr/bin/logger -p syslog.emerg -t ipfire "Check it before reboot !!!"' >> /tmp/pak_update
echo '/usr/bin/logger -p syslog.emerg -t ipfire " *** Please reboot... *** "' >> /tmp/pak_update
echo 'touch /var/run/need_reboot ' >> /tmp/pak_update
#
killall -KILL pak_update
chmod +x /tmp/pak_update
/tmp/pak_update &

sync

#
#Finish
(
	/etc/init.d/fireinfo start
	sendprofile
) >/dev/null 2>&1 &

echo
echo Please wait until pakfire has ended...
echo

# Don't report the exitcode last command
exit 0
Commit	Line	Data
0778b991 AF	1	#!/bin/bash
	2	############################################################################
	3	# #
	4	# This file is part of the IPFire Firewall. #
	5	# #
	6	# IPFire is free software; you can redistribute it and/or modify #
	7	# it under the terms of the GNU General Public License as published by #
	8	# the Free Software Foundation; either version 3 of the License, or #
	9	# (at your option) any later version. #
	10	# #
	11	# IPFire is distributed in the hope that it will be useful, #
	12	# but WITHOUT ANY WARRANTY; without even the implied warranty of #
	13	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
	14	# GNU General Public License for more details. #
	15	# #
	16	# You should have received a copy of the GNU General Public License #
	17	# along with IPFire; if not, write to the Free Software #
	18	# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
	19	# #
	20	# Copyright (C) 2014 IPFire-Team <info@ipfire.org>. #
	21	# #
	22	############################################################################
	23	#
	24	. /opt/pakfire/lib/functions.sh
	25	/usr/local/bin/backupctrl exclude >/dev/null 2>&1
	26
	27
	28	function find_device() {
	29	local mountpoint="${1}"
	30
	31	local root
	32	local dev mp fs flags rest
	33	while read -r dev mp fs flags rest; do
	34	# Skip unwanted entries
	35	[ "${dev}" = "rootfs" ] && continue
	36
	37	if [ "${mp}" = "${mountpoint}" ] && [ -b "${dev}" ]; then
	38	root="$(basename "${dev}")"
	39	break
	40	fi
	41	done < /proc/mounts
	42
	43	# Get the actual device from the partition that holds /
	44	while [ -n "${root}" ]; do
	45	if [ -e "/sys/block/${root}" ]; then
	46	echo "${root}"
	47	return 0
	48	fi
	49
	50	# Remove last character
	51	root="${root::-1}"
	52	done
	53
	54	return 1
	55	}
	56
	57
	58	#
	59	# Remove old core updates from pakfire cache to save space...
	60	core=90
	61	for (( i=1; i<=${core}; i++ ))
	62	do
	63	rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
	64	done
65
66	#
67	# Do some sanity checks.
68	case $(uname -r) in
69	*-ipfire-versatile )
70	/usr/bin/logger -p syslog.emerg -t ipfire \
71	"core-update-${core}: ERROR cannot update. versatile support is dropped."
72	# Report no error to pakfire. So it does not try to install it again.
73	exit 0
74	;;
75	-ipfire )
76	# Ok.
77	;;
78	* )
79	/usr/bin/logger -p syslog.emerg -t ipfire \
80	"core-update-${core}: ERROR cannot update. No IPFire Kernel."
81	exit 1
82	;;
83	esac
84
85
86	#
87	#
88	KVER="xxxKVERxxx"
89
90	# Check diskspace on root
91	ROOTSPACE=`df / -Pk \| sed "s\| * \| \|g" \| cut -d" " -f4 \| tail -n 1`
92
93	if [ $ROOTSPACE -lt 100000 ]; then
94	/usr/bin/logger -p syslog.emerg -t ipfire \
95	"core-update-${core}: ERROR cannot update because not enough free space on root."
96	exit 2
97	fi
98
99
100	echo
101	echo Update Kernel to $KVER ...
102	#
103	# Remove old kernel, configs, initrd, modules, dtb's ...
104	#
105	rm -rf /boot/System.map-*
106	rm -rf /boot/config-*
107	rm -rf /boot/ipfirerd-*
108	rm -rf /boot/initramfs-*
109	rm -rf /boot/vmlinuz-*
110	rm -rf /boot/uImage-ipfire-*
111	rm -rf /boot/uInit-ipfire-*
112	rm -rf /boot/dtb--ipfire-
113	rm -rf /lib/modules
114
115	case "$(uname -m)" in
116	armv*)
117	# Backup uEnv.txt if exist
118	if [ -e /boot/uEnv.txt ]; then
119	cp -vf /boot/uEnv.txt /boot/uEnv.txt.org
120	fi
121
122	# work around the u-boot folder detection bug
123	mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
124	mkdir -pv /boot/dtb-$KVER-ipfire-multi
125	;;
126	esac
127
128	#
129	#Stop services
130	/etc/init.d/snort stop
131	/etc/init.d/squid stop
132	/etc/init.d/ipsec stop
133	/etc/init.d/apache stop
134
135	#
136	#Extract files
137	tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p --numeric-owner -C /
138
139	# Check diskspace on boot
140	BOOTSPACE=`df /boot -Pk \| sed "s\| * \| \|g" \| cut -d" " -f4 \| tail -n 1`
141
142	if [ $BOOTSPACE -lt 1000 ]; then
143	case $(uname -r) in
144	*-ipfire-kirkwood )
145	# Special handling for old kirkwood images.
146	# (install only kirkwood kernel)
147	rm -rf /boot/*
148	# work around the u-boot folder detection bug
149	mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
150	tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p \
151	--numeric-owner -C / --wildcards 'boot/-kirkwood'
152	;;
153	* )
154	/usr/bin/logger -p syslog.emerg -t ipfire \
155	"core-update-${core}: FATAL-ERROR space run out on boot. System is not bootable..."
156	/etc/init.d/apache start
157	exit 4
158	;;
159	esac
160	fi
161
46d3a4cb SS	162	# Create GeoIP related files if they do not exist yet.
	163	if [ ! -e "/var/ipfire/firewall/geoipblock" ]; then
	164	touch /var/ipfire/firewall/geoipblock
	165	chown nobody:nobody /var/ipfire/firewall/geoipblock
	166
	167	# Insert default value into file.
	168	echo "GEOIPBLOCK_ENABLED=off" >> /var/ipfire/firewall/geoipblock
	169	fi
	170	if [ ! -e "/var/ipfire/fwhosts/customgeoipgrp" ]; then
	171	touch /var/ipfire/fwhosts/customgeoipgrp
	172	chown nobody:nobody /var/ipfire/fwhosts/customgeoipgrp
	173	fi
	174
	175	# Download/Update GeoIP databases.
	176	/usr/local/bin/xt_geoip_update
	177
0778b991 AF	178	# Update Language cache
	179	perl -e "require '/var/ipfire/lang.pl'; &Lang::BuildCacheLang"
	180
	181	#
	182	# Start services
	183	#
	184	/etc/init.d/apache start
	185	/etc/init.d/squid start
	186	/etc/init.d/snort start
	187	if [ `grep "ENABLED=on" /var/ipfire/vpn/settings` ]; then
	188	/etc/init.d/ipsec start
	189	fi
	190
	191	case "$(uname -m)" in
	192	i?86)
	193	case "$(find_device "/")" in
	194	xvd* )
	195	echo Skip remove grub2 files, because pygrub fail.
	196	rm -f /boot/grub/*
	197	echo config will recreated by linux-pae install.
	198	;;
	199	* )
	200	#
	201	# Update to GRUB2 config
	202	#
	203	grub-mkconfig > /boot/grub/grub.cfg
	204	;;
	205	esac
	206	esac
	207
	208	# Force (re)install pae kernel if pae is supported
	209	rm -rf /opt/pakfire/db/*/meta-linux-pae
	210	if [ ! "$(grep "^flags.* pae " /proc/cpuinfo)" == "" ]; then
	211	ROOTSPACE=`df / -Pk \| sed "s\| * \| \|g" \| cut -d" " -f4 \| tail -n 1`
	212	BOOTSPACE=`df /boot -Pk \| sed "s\| * \| \|g" \| cut -d" " -f4 \| tail -n 1`
	213	if [ $BOOTSPACE -lt 12000 -o $ROOTSPACE -lt 90000 ]; then
	214	/usr/bin/logger -p syslog.emerg -t ipfire \
	215	"core-update-${core}: WARNING not enough space for pae kernel."
	216	else
	217	echo "Name: linux-pae" > /opt/pakfire/db/installed/meta-linux-pae
	218	echo "ProgVersion: 0" >> /opt/pakfire/db/installed/meta-linux-pae
	219	echo "Release: 0" >> /opt/pakfire/db/installed/meta-linux-pae
	220	echo "Name: linux-pae" > /opt/pakfire/db/meta/meta-linux-pae
	221	echo "ProgVersion: 0" >> /opt/pakfire/db/meta/meta-linux-pae
	222	echo "Release: 0" >> /opt/pakfire/db/meta/meta-linux-pae
	223	fi
	224	fi
	225
	226	#
	227	# After pakfire has ended run it again and update the lists and do upgrade
	228	#
	229	echo '#!/bin/bash' > /tmp/pak_update
	230	echo 'while [ "$(ps -A \| grep " update.sh")" != "" ]; do' >> /tmp/pak_update
	231	echo ' sleep 1' >> /tmp/pak_update
	232	echo 'done' >> /tmp/pak_update
	233	echo 'while [ "$(ps -A \| grep " pakfire")" != "" ]; do' >> /tmp/pak_update
	234	echo ' sleep 1' >> /tmp/pak_update
	235	echo 'done' >> /tmp/pak_update
	236	echo '/opt/pakfire/pakfire update -y --force' >> /tmp/pak_update
	237	echo '/opt/pakfire/pakfire upgrade -y' >> /tmp/pak_update
	238	echo '/opt/pakfire/pakfire upgrade -y' >> /tmp/pak_update
	239	echo '/opt/pakfire/pakfire upgrade -y' >> /tmp/pak_update
	240	echo '/usr/bin/logger -p syslog.emerg -t ipfire "Core-upgrade finished. If you use a customized grub/uboot config"' >> /tmp/pak_update
	241	echo '/usr/bin/logger -p syslog.emerg -t ipfire "Check it before reboot !!!"' >> /tmp/pak_update
242	echo '/usr/bin/logger -p syslog.emerg -t ipfire " * Please reboot... * "' >> /tmp/pak_update
243	echo 'touch /var/run/need_reboot ' >> /tmp/pak_update
244	#
245	killall -KILL pak_update
246	chmod +x /tmp/pak_update
247	/tmp/pak_update &
248
249	sync
250
251	#
252	#Finish
253	(
254	/etc/init.d/fireinfo start
255	sendprofile
256	) >/dev/null 2>&1 &
257
258	echo
259	echo Please wait until pakfire has ended...
260	echo
261
262	# Don't report the exitcode last command
263	exit 0
264