2 ############################################################################
4 # This file is part of the IPFire Firewall. #
6 # IPFire is free software; you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation; either version 3 of the License, or #
9 # (at your option) any later version. #
11 # IPFire is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
16 # You should have received a copy of the GNU General Public License #
17 # along with IPFire; if not, write to the Free Software #
18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
20 # Copyright (C) 2023 IPFire-Team <info@ipfire.org>. #
22 ############################################################################
24 .
/opt
/pakfire
/lib
/functions.sh
25 /usr
/local
/bin
/backupctrl exclude
>/dev
/null
2>&1
30 # Set last succesfull installed core.
31 echo $
(($core-1)) > /opt
/pakfire
/db
/core
/mine
32 # force fsck at next boot, this may fix free space on xfs
34 # don't start pakfire again at error
35 killall
-KILL pak_update
36 /usr
/bin
/logger
-p syslog.emerg
-t ipfire \
37 "core-update-${core}: $1"
41 # Remove old core updates from pakfire cache to save space...
42 for (( i
=1; i
<=$core; i
++ )); do
43 rm -f /var
/cache
/pakfire
/core-upgrade-
*-$i.ipfire
47 /etc
/rc.d
/init.d
/apache stop
48 /etc
/rc.d
/init.d
/ntp stop
49 /etc
/rc.d
/init.d
/sshd stop
50 /etc
/rc.d
/init.d
/squid stop
51 /etc
/rc.d
/init.d
/unbound stop
52 /etc
/rc.d
/init.d
/suricata stop
56 # Backup uEnv.txt if exist
57 if [ -e /boot
/uEnv.txt
]; then
58 cp -vf /boot
/uEnv.txt
/boot
/uEnv.txt.org
61 # Do some sanity checks prior to the kernel update
67 exit_with_error
"ERROR cannot update. No IPFire Kernel." 1
71 # Check diskspace on root
72 ROOTSPACE
=$
( df
/ -Pk |
sed "s| * | |g" | cut
-d" " -f4 |
tail -n 1 )
74 if [ $ROOTSPACE -lt 100000 ]; then
75 exit_with_error
"ERROR cannot update because not enough free space on root." 2
79 # Remove the old kernel
92 # Remove any dropped add-ons, if installed
93 for package
in powertop python3-attr python3-pkgconfig
; do
94 if [ -e "/opt/pakfire/db/installed/meta-${package}" ]; then
95 stop_service
"${package}"
96 for i
in $
(</opt
/pakfire
/db
/rootfiles
/${package}); do
100 rm -f "/opt/pakfire/db/installed/meta-${package}"
101 rm -f "/opt/pakfire/db/meta/meta-${package}"
102 rm -f "/opt/pakfire/db/rootfiles/${package}"
110 /etc
/rc.d
/init.d
/lvmetad \
111 /etc
/rc.d
/rcsysinit.d
/S09lvmetad \
112 /lib
/firmware
/liquidio
/lio_23xx_vsw.bin \
113 /usr
/lib
/libbind9-9.16
.38.so \
114 /usr
/lib
/libdns-9.16
.38.so \
115 /usr
/lib
/libirs-9.16
.38.so \
116 /usr
/lib
/libisc-9.16
.38.so \
117 /usr
/lib
/libisccc-9.16
.38.so \
118 /usr
/lib
/libisccfg-9.16
.38.so \
119 /usr
/lib
/libns-9.16
.38.so \
120 /usr
/lib
/libqpdf.so
.28* \
121 /var
/ipfire
/menu.d
/EX-addonsvc.menu \
122 /var
/ipfire
/menu.d
/EX-asterisk.menu \
123 /var
/ipfire
/menu.d
/EX-bluetooth.menu
125 # update linker config
128 # Update Language cache
129 /usr
/local
/bin
/update-lang-cache
132 /usr
/local
/bin
/filesystem-cleanup
134 # Fix permissions of /var/log/pakfire.log
135 chmod -v 644 /var
/log
/pakfire.log
137 # Apply local configuration to sshd_config
138 /usr
/local
/bin
/sshctrl
140 # Reload firewall to fix #13088 as fast as possible
141 /etc
/rc.d
/init.d
/firewall reload
144 if grep -q "ENABLE_IDS=on" /var
/ipfire
/suricata
/settings
; then
145 /etc
/rc.d
/init.d
/suricata start
147 /etc
/rc.d
/init.d
/unbound start
148 /etc
/rc.d
/init.d
/apache start
149 /etc
/rc.d
/init.d
/ntp start
150 if grep -q "ENABLE_SSH=on" /var
/ipfire
/remote
/settings
; then
151 /etc
/init.d
/sshd start
153 if [ -f /var
/ipfire
/proxy
/enable ]; then
154 /etc
/init.d
/squid start
157 # Regenerate all initrds
158 dracut
--regenerate-all --force
159 case "$(uname -m)" in
161 mkimage
-A arm64
-T ramdisk
-C lzma
-d /boot
/initramfs-
${KVER}-ipfire.img
/boot
/uInit-
${KVER}-ipfire
162 # dont remove initramfs because grub need this to boot.
166 # remove lm_sensor config after collectd was started
167 # to re-search sensors at next boot with updated kernel
168 rm -f /etc
/sysconfig
/lm_sensors
170 # Upadate Kernel version in uEnv.txt
171 if [ -e /boot
/uEnv.txt
]; then
172 sed -i -e "s/KVER=.*/KVER=${KVER}/g" /boot
/uEnv.txt
175 # Call user update script (needed for some ARM boards)
176 if [ -e /boot
/pakfire-kernel-update
]; then
177 /boot
/pakfire-kernel-update
${KVER}
180 ## Modify ovpnconfig according to bug 11048 for pass, no-pass modification in ovpnconfig index
181 # Check if ovpnconfig exists and is not empty
182 if [ -s /var
/ipfire
/ovpn
/ovpnconfig
]; then
183 # Make all N2N connections 'no-pass' since they do not use encryption
184 awk '{FS=OFS=","} {if($5=="net") {$43="no-pass"; print $0}}' /var
/ipfire
/ovpn
/ovpnconfig
>> /var
/ipfire
/ovpn
/ovpnconfig.new
186 # Evaluate roadwarrior connection names for *.p12 files
187 for y
in $
(awk -F',' '/host/ { print $3 }' /var
/ipfire
/ovpn
/ovpnconfig
); do
188 # Sort all unencrypted roadwarriors out and set 'no-pass' in [43] index
189 if [[ -n $
(openssl pkcs12
-info -in /var
/ipfire
/ovpn
/certs
/${y}.p12
-noout -password pass
:'' 2>&1 |
grep 'Encrypted') ]]; then
190 awk -v var
="$y" '{FS=OFS=","} {if($3==var) {$43="no-pass"; print $0}}' /var
/ipfire
/ovpn
/ovpnconfig
>> /var
/ipfire
/ovpn
/ovpnconfig.new
192 # Sort all encrypted roadwarriors out and set 'pass' in [43] index
193 if [[ -n $
(openssl pkcs12
-info -in /var
/ipfire
/ovpn
/certs
/${y}.p12
-noout -password pass
:'' 2>&1 |
grep 'error') ]]; then
194 awk -v var
="$y" '{FS=OFS=","} {if($3==var) {$43="pass"; print $0}}' /var
/ipfire
/ovpn
/ovpnconfig
>> /var
/ipfire
/ovpn
/ovpnconfig.new
199 # Replace existing ovpnconfig with updated index
200 mv /var
/ipfire
/ovpn
/ovpnconfig.new
/var
/ipfire
/ovpn
/ovpnconfig
201 # Set correct ownership
202 chown nobody
:nobody
/var
/ipfire
/ovpn
/ovpnconfig
204 # This update needs a reboot...
205 touch /var
/run
/need_reboot
208 /etc
/init.d
/fireinfo start
211 # Update grub config to display new core version
212 if [ -e /boot
/grub
/grub.cfg
]; then
213 grub-mkconfig
-o /boot
/grub
/grub.cfg
218 # Don't report the exitcode last command