Core Update 168: Ship intel-microcodes and rebuild initrds

[people/teissler/ipfire-2.x.git] / config / rootfiles / core / 168 / update.sh

diff --git a/config/rootfiles/core/168/update.sh b/config/rootfiles/core/168/update.sh
index 1a1ad44a982609972899455c6c4abac4554d2cfa..fd475af3cb561bfe438e81e546c8071e0c08c0a6 100644 (file)
--- a/config/rootfiles/core/168/update.sh
+++ b/config/rootfiles/core/168/update.sh
@@ -52,6 +52,8 @@ rm -rvf \
        /usr/lib/libpri.so* \
        /usr/lib/libsolv.so* \
        /usr/lib/libsolvext.so* \
+       /usr/lib/libusb.so \
+       /usr/lib/libusb-0.1.so* \
        /usr/sbin/dnet
 
 # Remove netbpm add-on, if installed
@@ -77,12 +79,21 @@ extract_files
 # update linker config
 ldconfig
 
+# Run IDSv4 converter
+convert-ids-backend-files
+
 # Update Language cache
 /usr/local/bin/update-lang-cache
 
 # Filesytem cleanup
 /usr/local/bin/filesystem-cleanup
 
+# Delete orphaned Oinkmaster and Suricata default ruleset
+rm -vf \
+       /usr/local/bin/oinkmaster.pl \
+       /var/ipfire/suricata/oinkmaster.conf \
+       /var/ipfire/suricata/suricata-default-rules.yaml
+
 # Apply local configuration to sshd_config
 /usr/local/bin/sshctrl
 
@@ -93,7 +104,22 @@ ldconfig
 chmod -v 750 /etc/sudoers.d
 chmod -v 640 /etc/sudoers.d/*
 
+# Rebuild initial ramdisk to apply microcode updates
+dracut --regenerate-all --force
+case "$(uname -m)" in
+        armv*)
+                mkimage -A arm -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire
+                rm /boot/initramfs-${KVER}-ipfire.img
+                ;;
+        aarch64)
+                mkimage -A arm64 -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire
+                # dont remove initramfs because grub need this to boot.
+                ;;
+esac
+
+
 # Start services
+/etc/init.d/fcron restart
 /etc/init.d/sshd restart
 /etc/init.d/vnstatd restart
 /etc/init.d/squid start