2 ############################################################################
4 # This file is part of the IPFire Firewall. #
6 # IPFire is free software; you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation; either version 3 of the License, or #
9 # (at your option) any later version. #
11 # IPFire is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
16 # You should have received a copy of the GNU General Public License #
17 # along with IPFire; if not, write to the Free Software #
18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
20 # Copyright (C) 2014 IPFire-Team <info@ipfire.org>. #
22 ############################################################################
24 .
/opt
/pakfire
/lib
/functions.sh
25 /usr
/local
/bin
/backupctrl exclude
>/dev
/null
2>&1
28 function find_device
() {
29 local mountpoint
="${1}"
32 local dev mp fs flags rest
33 while read -r dev mp fs flags rest
; do
34 # Skip unwanted entries
35 [ "${dev}" = "rootfs" ] && continue
37 if [ "${mp}" = "${mountpoint}" ] && [ -b "${dev}" ]; then
38 root
="$(basename "${dev}")"
43 # Get the actual device from the partition that holds /
44 while [ -n "${root}" ]; do
45 if [ -e "/sys/block/${root}" ]; then
50 # Remove last character
59 # Remove old core updates from pakfire cache to save space...
61 for (( i
=1; i
<=${core}; i
++ ))
63 rm -f /var
/cache
/pakfire
/core-upgrade-
*-$i.ipfire
67 # Do some sanity checks.
70 /usr
/bin
/logger
-p syslog.emerg
-t ipfire \
71 "core-update-${core}: ERROR cannot update. versatile support is dropped."
72 # Report no error to pakfire. So it does not try to install it again.
79 /usr
/bin
/logger
-p syslog.emerg
-t ipfire \
80 "core-update-${core}: ERROR cannot update. No IPFire Kernel."
90 # Check diskspace on root
91 ROOTSPACE
=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
93 if [ $ROOTSPACE -lt 100000 ]; then
94 /usr
/bin
/logger
-p syslog.emerg
-t ipfire \
95 "core-update-${core}: ERROR cannot update because not enough free space on root."
101 echo Update Kernel to
$KVER ...
103 # Remove old kernel, configs, initrd, modules, dtb's ...
105 rm -rf /boot
/System.map-
*
106 rm -rf /boot
/config-
*
107 rm -rf /boot
/ipfirerd-
*
108 rm -rf /boot
/initramfs-
*
109 rm -rf /boot
/vmlinuz-
*
110 rm -rf /boot
/uImage-ipfire-
*
111 rm -rf /boot
/uInit-ipfire-
*
112 rm -rf /boot
/dtb-
*-ipfire-*
115 case "$(uname -m)" in
117 # Backup uEnv.txt if exist
118 if [ -e /boot
/uEnv.txt
]; then
119 cp -vf /boot
/uEnv.txt
/boot
/uEnv.txt.org
122 # work around the u-boot folder detection bug
123 mkdir
-pv /boot
/dtb-
$KVER-ipfire-kirkwood
124 mkdir
-pv /boot
/dtb-
$KVER-ipfire-multi
130 /etc
/init.d
/snort stop
131 /etc
/init.d
/squid stop
132 /etc
/init.d
/ipsec stop
133 /etc
/init.d
/apache stop
137 tar xavf
/opt
/pakfire
/tmp
/files
* --no-overwrite-dir -p --numeric-owner -C /
139 # Check diskspace on boot
140 BOOTSPACE
=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
142 if [ $BOOTSPACE -lt 1000 ]; then
145 # Special handling for old kirkwood images.
146 # (install only kirkwood kernel)
148 # work around the u-boot folder detection bug
149 mkdir
-pv /boot
/dtb-
$KVER-ipfire-kirkwood
150 tar xavf
/opt
/pakfire
/tmp
/files
* --no-overwrite-dir -p \
151 --numeric-owner -C / --wildcards 'boot/*-kirkwood*'
154 /usr
/bin
/logger
-p syslog.emerg
-t ipfire \
155 "core-update-${core}: FATAL-ERROR space run out on boot. System is not bootable..."
156 /etc
/init.d
/apache start
162 # Create GeoIP related files if they do not exist yet.
163 if [ ! -e "/var/ipfire/firewall/geoipblock" ]; then
164 touch /var
/ipfire
/firewall
/geoipblock
165 chown nobody
:nobody
/var
/ipfire
/firewall
/geoipblock
167 # Insert default value into file.
168 echo "GEOIPBLOCK_ENABLED=off" >> /var
/ipfire
/firewall
/geoipblock
170 if [ ! -e "/var/ipfire/fwhosts/customgeoipgrp" ]; then
171 touch /var
/ipfire
/fwhosts
/customgeoipgrp
172 chown nobody
:nobody
/var
/ipfire
/fwhosts
/customgeoipgrp
175 #Fix BUG10812 (openvpn server.conf has wrong collectd logfile path)
176 if grep -q "status /var/log/ovpnserver.log 30" /var
/ipfire
/ovpn
/server.conf
; then
177 sed -i "s/\/var\/log\/ovpnserver.log 30/\/var\/run\/ovpnserver.log 30/" /var
/ipfire
/ovpn
/server.conf
180 # Download/Update GeoIP databases.
181 /usr
/local
/bin
/xt_geoip_update
184 grep -q /usr
/local
/bin
/xt_geoip_update
/var
/spool
/cron
/root.orig ||
cat <<EOF >> /var/spool/cron/root.orig
186 # Update GeoIP database once a month.
187 %monthly,random * * * [ -f "/var/ipfire/red/active" ] && /usr/local/bin/xt_geoip_update >/dev/null 2>&1
190 fcrontab
-z &>/dev
/null
193 # Update Language cache
194 perl
-e "require '/var/ipfire/lang.pl'; &Lang::BuildCacheLang"
199 /etc
/init.d
/apache start
200 /etc
/init.d
/squid start
201 /etc
/init.d
/snort start
202 if [ `grep "ENABLED=on" /var/ipfire/vpn/settings` ]; then
203 /etc
/init.d
/ipsec start
206 case "$(uname -m)" in
208 case "$(find_device "/")" in
210 echo Skip remove grub2 files
, because pygrub fail.
212 echo config will recreated by linux-pae
install.
216 # Update to GRUB2 config
218 grub-mkconfig
> /boot
/grub
/grub.cfg
223 # Force (re)install pae kernel if pae is supported
224 rm -rf /opt
/pakfire
/db
/*/meta-linux-pae
225 if [ ! "$(grep "^flags.
* pae
" /proc/cpuinfo)" == "" ]; then
226 ROOTSPACE
=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
227 BOOTSPACE
=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
228 if [ $BOOTSPACE -lt 12000 -o $ROOTSPACE -lt 90000 ]; then
229 /usr
/bin
/logger
-p syslog.emerg
-t ipfire \
230 "core-update-${core}: WARNING not enough space for pae kernel."
232 echo "Name: linux-pae" > /opt
/pakfire
/db
/installed
/meta-linux-pae
233 echo "ProgVersion: 0" >> /opt
/pakfire
/db
/installed
/meta-linux-pae
234 echo "Release: 0" >> /opt
/pakfire
/db
/installed
/meta-linux-pae
235 echo "Name: linux-pae" > /opt
/pakfire
/db
/meta
/meta-linux-pae
236 echo "ProgVersion: 0" >> /opt
/pakfire
/db
/meta
/meta-linux-pae
237 echo "Release: 0" >> /opt
/pakfire
/db
/meta
/meta-linux-pae
242 # After pakfire has ended run it again and update the lists and do upgrade
244 echo '#!/bin/bash' > /tmp
/pak_update
245 echo 'while [ "$(ps -A | grep " update.sh")" != "" ]; do' >> /tmp
/pak_update
246 echo ' sleep 1' >> /tmp
/pak_update
247 echo 'done' >> /tmp
/pak_update
248 echo 'while [ "$(ps -A | grep " pakfire")" != "" ]; do' >> /tmp
/pak_update
249 echo ' sleep 1' >> /tmp
/pak_update
250 echo 'done' >> /tmp
/pak_update
251 echo '/opt/pakfire/pakfire update -y --force' >> /tmp
/pak_update
252 echo '/opt/pakfire/pakfire upgrade -y' >> /tmp
/pak_update
253 echo '/opt/pakfire/pakfire upgrade -y' >> /tmp
/pak_update
254 echo '/opt/pakfire/pakfire upgrade -y' >> /tmp
/pak_update
255 echo '/usr/bin/logger -p syslog.emerg -t ipfire "Core-upgrade finished. If you use a customized grub/uboot config"' >> /tmp
/pak_update
256 echo '/usr/bin/logger -p syslog.emerg -t ipfire "Check it before reboot !!!"' >> /tmp
/pak_update
257 echo '/usr/bin/logger -p syslog.emerg -t ipfire " *** Please reboot... *** "' >> /tmp
/pak_update
258 echo 'touch /var/run/need_reboot ' >> /tmp
/pak_update
260 killall
-KILL pak_update
261 chmod +x
/tmp
/pak_update
269 /etc
/init.d
/fireinfo start
274 echo Please
wait until pakfire has ended...
277 # Don't report the exitcode last command