]>
git.ipfire.org Git - ipfire-2.x.git/blob - config/rootfiles/core/170/update.sh
2 ############################################################################
4 # This file is part of the IPFire Firewall. #
6 # IPFire is free software; you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation; either version 3 of the License, or #
9 # (at your option) any later version. #
11 # IPFire is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
16 # You should have received a copy of the GNU General Public License #
17 # along with IPFire; if not, write to the Free Software #
18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
20 # Copyright (C) 2022 IPFire-Team <info@ipfire.org>. #
22 ############################################################################
24 .
/opt
/pakfire
/lib
/functions.sh
25 /usr
/local
/bin
/backupctrl exclude
>/dev
/null
2>&1
30 # Set last succesfull installed core.
31 echo $
(($core-1)) > /opt
/pakfire
/db
/core
/mine
32 # force fsck at next boot, this may fix free space on xfs
34 # don't start pakfire again at error
35 killall
-KILL pak_update
36 /usr
/bin
/logger
-p syslog.emerg
-t ipfire \
37 "core-update-${core}: $1"
41 # Remove old core updates from pakfire cache to save space...
42 for (( i
=1; i
<=$core; i
++ )); do
43 rm -f /var
/cache
/pakfire
/core-upgrade-
*-$i.ipfire
47 /etc
/rc.d
/init.d
/unbound stop
48 /etc
/rc.d
/init.d
/suricata stop
52 # Backup uEnv.txt if exist
53 if [ -e /boot
/uEnv.txt
]; then
54 cp -vf /boot
/uEnv.txt
/boot
/uEnv.txt.org
57 # Do some sanity checks prior to the kernel update
63 exit_with_error
"ERROR cannot update. No IPFire Kernel." 1
67 # Check diskspace on root
68 ROOTSPACE
=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
70 if [ $ROOTSPACE -lt 100000 ]; then
71 exit_with_error
"ERROR cannot update because not enough free space on root." 2
75 # Remove the old kernel
97 /lib
/libnss_compat-2.
* \
100 /lib
/libnss_files-2.
* \
101 /lib
/libnss_hesiod-2.
* \
102 /lib
/libntfs-3g.so
.88* \
104 /lib
/libpthread-2.
* \
107 /lib
/libthread_db-1.0.so \
112 /usr
/bin
/screen-4.
* \
114 /usr
/lib
/libbfd-2.36.
* \
115 /usr
/lib
/libbind9-9.16
.2* \
116 /usr
/lib
/libbind9-9.16
.30.so \
118 /usr
/lib
/libdns-9.16
.30.so \
119 /usr
/lib
/libgnutls.so
.30.33.1 \
120 /usr
/lib
/libirs-9.16
.2* \
121 /usr
/lib
/libirs-9.16
.30.so \
122 /usr
/lib
/libisc-9.16
.2* \
123 /usr
/lib
/libisc-9.16
.30.so \
124 /usr
/lib
/libisccc-9.16
.2* \
125 /usr
/lib
/libisccc-9.16
.30.so \
126 /usr
/lib
/libisccfg-9.16
.2* \
127 /usr
/lib
/libisccfg-9.16
.30.so \
129 /usr
/lib
/libldap_r-
* \
130 /usr
/lib
/libns-9.16
.2* \
131 /usr
/lib
/libns-9.16
.30.so \
132 /usr
/lib
/libopenjp2.so
.2.3.
* \
133 /usr
/lib
/libpoppler.so
.11* \
134 /usr
/lib
/libunbound.so
.8.1.17 \
135 /usr
/lib
/perl
5/site_perl
/5.32.1/Bundle
/LWP.pm \
136 /usr
/lib
/perl
5/site_perl
/5.32.1/File
/Listing.pm \
137 /usr
/lib
/perl
5/site_perl
/5.32.1/HTML
/Form.pm \
138 /usr
/lib
/perl
5/site_perl
/5.32.1/HTTP
/Cookies \
139 /usr
/lib
/perl
5/site_perl
/5.32.1/HTTP
/Negotiate.pm \
140 /usr
/lib
/perl
5/site_perl
/5.32.1/*-linux-thread-multi/auto
/Unix
/Syslog
/autosplit.ix \
141 /usr
/lib
/perl
5/site_perl
/5.32.1/*-linux-thread-multi/qd.pl \
142 /usr
/lib
/perl
5/site_perl
/5.32.1/LWP
/media.types \
143 /usr
/lib
/perl
5/site_perl
/5.32.1/LWP
/MediaTypes.pm \
144 /usr
/lib
/perl
5/site_perl
/5.32.1/LWP
/Protocol
/GHTTP.pm \
145 /usr
/lib
/perl
5/site_perl
/5.32.1/LWP
/Protocol
/http10.pm \
146 /usr
/lib
/perl
5/site_perl
/5.32.1/LWP
/Protocol
/https10.pm \
147 /usr
/lib
/perl
5/site_perl
/5.32.1/WWW \
148 /usr
/sbin
/ovpn-ccd-convert \
154 # update linker config
157 # Update Language cache
158 /usr
/local
/bin
/update-lang-cache
161 /usr
/local
/bin
/filesystem-cleanup
163 # Create directory for IPBlocklist feature
164 mkdir
-pv /var
/lib
/ipblocklist
165 chown nobody
:nobody
/var
/lib
/ipblocklist
167 # Rebuild fcrontab from scratch
170 # Update collectd.conf
171 sed -i /etc
/collectd.conf \
172 -e "/LoadPlugin entropy/d"
174 # Stop collectd Sevice
175 /etc
/init.d
/collectd stop
177 # Cleanup old collectd statistics...
178 rm -rvf /var
/log
/rrd
/collectd
/localhost
/processes-mysqld \
179 /var
/log
/rrd
/collectd
/localhost
/processes-snort \
180 /var
/log
/rrd
/collectd
/localhost
/processes-rtorrent \
181 /var
/log
/rrd
/collectd
/localhost
/processes-asterisk \
182 /var
/log
/rrd
/collectd
/localhost
/processes-java \
183 /var
/log
/rrd
/collectd
/localhost
/processes-spamd \
184 /var
/log
/rrd
/collectd
/localhost
/entropy
187 /etc
/init.d
/collectd start
190 /etc
/rc.d
/init.d
/unbound start
191 /etc
/rc.d
/init.d
/suricata start
193 # Harden mount options of /boot
194 sed -E -i "s/\s+\/boot\s+auto\s+defaults\s+/ \/boot auto defaults,nodev,noexec,nosuid /g" /etc
/fstab
196 # Regenerate all initrds
197 dracut
--regenerate-all --force
198 case "$(uname -m)" in
200 mkimage
-A arm
-T ramdisk
-C lzma
-d /boot
/initramfs-
${KVER}-ipfire.img
/boot
/uInit-
${KVER}-ipfire
201 rm /boot
/initramfs-
${KVER}-ipfire.img
204 mkimage
-A arm64
-T ramdisk
-C lzma
-d /boot
/initramfs-
${KVER}-ipfire.img
/boot
/uInit-
${KVER}-ipfire
205 # dont remove initramfs because grub need this to boot.
209 # This update needs a reboot...
210 touch /var
/run
/need_reboot
213 /etc
/init.d
/fireinfo start
216 # remove lm_sensor config after collectd was started
217 # to reserch sensors at next boot with updated kernel
218 rm -f /etc
/sysconfig
/lm_sensors
220 # Upadate Kernel version in uEnv.txt
221 if [ -e /boot
/uEnv.txt
]; then
222 sed -i -e "s/KVER=.*/KVER=${KVER}/g" /boot
/uEnv.txt
225 # Call user update script (needed for some ARM boards)
226 if [ -e /boot
/pakfire-kernel-update
]; then
227 /boot
/pakfire-kernel-update
${KVER}
230 # Update grub config to display new core version
231 if [ -e /boot
/grub
/grub.cfg
]; then
232 grub-mkconfig
-o /boot
/grub
/grub.cfg
237 # Don't report the exitcode last command