]>
git.ipfire.org Git - ipfire-2.x.git/blob - config/rootfiles/core/185/update.sh
2 ############################################################################
4 # This file is part of the IPFire Firewall. #
6 # IPFire is free software; you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation; either version 3 of the License, or #
9 # (at your option) any later version. #
11 # IPFire is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
16 # You should have received a copy of the GNU General Public License #
17 # along with IPFire; if not, write to the Free Software #
18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
20 # Copyright (C) 2024 IPFire-Team <info@ipfire.org>. #
22 ############################################################################
24 .
/opt
/pakfire
/lib
/functions.sh
25 /usr
/local
/bin
/backupctrl exclude
>/dev
/null
2>&1
29 # Remove old core updates from pakfire cache to save space...
30 for (( i
=1; i
<=$core; i
++ )); do
31 rm -f /var
/cache
/pakfire
/core-upgrade-
*-$i.ipfire
36 /etc
/init.d
/squid stop
44 /lib
/firmware
/ath10k
/WCN3990
/hw1.0
/notice.txt_wlanmdsp \
45 /lib
/firmware
/ath11k
/IPQ6018
/hw1.0
/Notice.txt \
46 /lib
/firmware
/ath11k
/IPQ8074
/hw2.0
/Notice.txt \
47 /lib
/firmware
/ath11k
/QCA6390
/hw2.0
/Notice.txt \
48 /lib
/firmware
/ath11k
/QCN9074
/hw1.0
/Notice.txt \
49 /lib
/firmware
/ath11k
/WCN6855
/hw2.0
/Notice.txt \
50 /lib
/firmware
/intel-ucode
/06-86-04 \
51 /lib
/firmware
/intel-ucode
/06-86-05 \
52 /lib
/firmware
/intel-ucode
/06-8f-04 \
54 /srv
/web
/ipfire
/html
/themes
/ipfire-rounded \
55 /usr
/lib
/crda
/pubkeys
/linville.key.pub.pem \
56 /usr
/lib
/grub
/i386-pc
/efiemu
{32,64}.o \
57 /usr
/lib
/grub
/i386-pc
/verifiers.
* \
58 /usr
/lib
/grub
/i386-pc
/verify.
* \
59 /usr
/lib
/grub
/x86_64-efi
/shim_lock.
* \
60 /usr
/lib
/grub
/x86_64-efi
/verifiers.
* \
61 /usr
/lib
/grub
/x86_64-efi
/verify.
* \
62 /usr
/lib
/snort_dynamic
* \
63 /usr
/local
/bin
/snortctrl \
64 /usr
/share
/usb_modeswitch
/1033:0035 \
65 /usr
/share
/vim
/vim7
* \
66 /var
/ipfire
/geoip-functions.pl \
67 /var
/ipfire
/dhcpc
/dhcpcd-hooks
/00-linux \
68 /var
/ipfire
/dhcpc
/dhcpcd-hooks
/02-dump \
69 /var
/lib
/location
/tmp
*
71 # update linker config
74 # Update Language cache
75 /usr
/local
/bin
/update-lang-cache
78 /usr
/local
/bin
/filesystem-cleanup
80 # Apply local configuration to sshd_config
81 /usr
/local
/bin
/sshctrl
83 # Fix permissions of /etc/sudoers.d/
84 chmod -v 750 /etc
/sudoers.d
85 chmod -v 640 /etc
/sudoers.d
/*
89 /etc
/init.d
/sshd restart
90 /etc
/init.d
/suricata restart
91 /etc
/init.d
/unbound restart
93 if [ -f /var
/ipfire
/proxy
/enable ]; then
94 /etc
/init.d
/squid start
96 ## Modify ovpnconfig according to bug 13548 for no-pass entry for N2N client connections
97 # Check if ovpnconfig exists and is not empty
98 if [ -s /var
/ipfire
/ovpn
/ovpnconfig
]; then
99 # Add blank line at top of ovpnconfig otherwise the first roadwarrior entry is treated like a blank line and missed out from update
100 awk 'NR==1{print ""}1' /var
/ipfire
/ovpn
/ovpnconfig
> /var
/ipfire
/ovpn
/tmp_file
&& mv /var
/ipfire
/ovpn
/tmp_file
/var
/ipfire
/ovpn
/ovpnconfig
102 # Make all N2N connections 'no-pass' since they do not use encryption
103 awk '{FS=OFS=","} {if($5=="net") {$43="no-pass"; print $0}}' /var
/ipfire
/ovpn
/ovpnconfig
>> /var
/ipfire
/ovpn
/ovpnconfig.new
105 # Copy all RW connections unchanged to the new ovpnconfig file
106 for y
in $
(awk -F',' '/host/ { print $3 }' /var
/ipfire
/ovpn
/ovpnconfig
); do
107 awk -v var
="$y" '{FS=OFS=","} {if($3==var) {print $0}}' /var
/ipfire
/ovpn
/ovpnconfig
>> /var
/ipfire
/ovpn
/ovpnconfig.new
112 # Replace existing ovpnconfig with updated index
113 mv /var
/ipfire
/ovpn
/ovpnconfig.new
/var
/ipfire
/ovpn
/ovpnconfig
114 # Set correct ownership
115 chown nobody
:nobody
/var
/ipfire
/ovpn
/ovpnconfig
117 # Rebuild initial ramdisks
118 dracut
--regenerate-all --force
120 case "$(uname -m)" in
122 mkimage
-A arm64
-T ramdisk
-C lzma
-d /boot
/initramfs-
${KVER}-ipfire.img
/boot
/uInit-
${KVER}-ipfire
123 # dont remove initramfs because grub need this to boot.
127 # This update needs a reboot...
128 touch /var
/run
/need_reboot
131 /etc
/init.d
/fireinfo start
134 # Update grub config to display new core version
135 if [ -e /boot
/grub
/grub.cfg
]; then
136 grub-mkconfig
-o /boot
/grub
/grub.cfg
141 # Don't report the exitcode last command