]>
Commit | Line | Data |
---|---|---|
77c3824f PM |
1 | #!/bin/bash |
2 | ############################################################################ | |
3 | # # | |
4 | # This file is part of the IPFire Firewall. # | |
5 | # # | |
6 | # IPFire is free software; you can redistribute it and/or modify # | |
7 | # it under the terms of the GNU General Public License as published by # | |
8 | # the Free Software Foundation; either version 3 of the License, or # | |
9 | # (at your option) any later version. # | |
10 | # # | |
11 | # IPFire is distributed in the hope that it will be useful, # | |
12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of # | |
13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # | |
14 | # GNU General Public License for more details. # | |
15 | # # | |
16 | # You should have received a copy of the GNU General Public License # | |
17 | # along with IPFire; if not, write to the Free Software # | |
18 | # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # | |
19 | # # | |
20 | # Copyright (C) 2022 IPFire-Team <info@ipfire.org>. # | |
21 | # # | |
22 | ############################################################################ | |
23 | # | |
24 | . /opt/pakfire/lib/functions.sh | |
25 | /usr/local/bin/backupctrl exclude >/dev/null 2>&1 | |
26 | ||
27 | core=168 | |
28 | ||
29 | # Remove old core updates from pakfire cache to save space... | |
30 | for (( i=1; i<=$core; i++ )); do | |
31 | rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire | |
32 | done | |
33 | ||
d258332f PM |
34 | # Remove files |
35 | rm -rvf \ | |
8de58edc PM |
36 | /lib/firmware/cxgb4/t4fw-1.26.4.0.bin \ |
37 | /lib/firmware/cxgb4/t5fw-1.26.4.0.bin \ | |
38 | /lib/firmware/cxgb4/t6fw-1.26.4.0.bin \ | |
39 | /lib/firmware/intel/ice/ddp-comms/ice_comms-1.3.20.0.pkg \ | |
40 | /lib/firmware/silabs \ | |
28fdd8ed | 41 | /lib/libprocps.so* \ |
d258332f PM |
42 | /usr/bin/dnet-config \ |
43 | /usr/bin/sdparm \ | |
44 | /usr/lib/libart_lgpl_2.so* \ | |
45 | /usr/lib/libdnet.la \ | |
46 | /usr/lib/libdnet.so* \ | |
b86bd4f9 PM |
47 | /usr/lib/libevent-1.4.so* \ |
48 | /usr/lib/libevent_core-1.4.so* \ | |
49 | /usr/lib/libevent_extra-1.4.so* \ | |
0a1d567c | 50 | /usr/lib/liblber-2.4.so* \ |
00c31b29 | 51 | /usr/lib/libnl.so* \ |
d258332f PM |
52 | /usr/lib/libpri.so* \ |
53 | /usr/lib/libsolv.so* \ | |
54 | /usr/lib/libsolvext.so* \ | |
5ecf056d PM |
55 | /usr/lib/libusb.so \ |
56 | /usr/lib/libusb-0.1.so* \ | |
d258332f PM |
57 | /usr/sbin/dnet |
58 | ||
88e01ab8 PM |
59 | # Remove netbpm add-on, if installed |
60 | if [ -e "/opt/pakfire/db/installed/meta-netbpm" ]; then | |
61 | for i in $(</opt/pakfire/db/rootfiles/netbpm); do | |
62 | rm -rfv "/${i}" | |
63 | done | |
64 | fi | |
65 | rm -vf \ | |
66 | /opt/pakfire/db/installed/meta-netbpm \ | |
67 | /opt/pakfire/db/meta/meta-netbpm \ | |
68 | /opt/pakfire/db/rootfiles/netbpm | |
69 | ||
77c3824f | 70 | # Stop services |
5e792900 | 71 | /etc/init.d/squid stop |
159f9214 PM |
72 | /usr/local/bin/openvpnctrl -k |
73 | /usr/local/bin/openvpnctrl -kn2n | |
701e63c2 | 74 | /etc/init.d/suricata stop |
77c3824f PM |
75 | |
76 | # Extract files | |
77 | extract_files | |
78 | ||
79 | # update linker config | |
80 | ldconfig | |
81 | ||
68725035 PM |
82 | # Run IDSv4 converter |
83 | convert-ids-backend-files | |
84 | ||
77c3824f PM |
85 | # Update Language cache |
86 | /usr/local/bin/update-lang-cache | |
87 | ||
88 | # Filesytem cleanup | |
89 | /usr/local/bin/filesystem-cleanup | |
90 | ||
68725035 PM |
91 | # Delete orphaned Oinkmaster and Suricata default ruleset |
92 | rm -vf \ | |
93 | /usr/local/bin/oinkmaster.pl \ | |
94 | /var/ipfire/suricata/oinkmaster.conf \ | |
95 | /var/ipfire/suricata/suricata-default-rules.yaml | |
96 | ||
2f4148cc PM |
97 | # Apply local configuration to sshd_config |
98 | /usr/local/bin/sshctrl | |
99 | ||
d4afd45e PM |
100 | # Apply sysctl changes |
101 | /etc/init.d/sysctl start | |
102 | ||
2784c87b PM |
103 | # Fix permissions of /etc/sudoers.d/ |
104 | chmod -v 750 /etc/sudoers.d | |
105 | chmod -v 640 /etc/sudoers.d/* | |
106 | ||
3e2e9c15 PM |
107 | # Rebuild initial ramdisk to apply microcode updates |
108 | dracut --regenerate-all --force | |
109 | case "$(uname -m)" in | |
110 | armv*) | |
111 | mkimage -A arm -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire | |
112 | rm /boot/initramfs-${KVER}-ipfire.img | |
113 | ;; | |
114 | aarch64) | |
115 | mkimage -A arm64 -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire | |
116 | # dont remove initramfs because grub need this to boot. | |
117 | ;; | |
118 | esac | |
119 | ||
120 | ||
77c3824f | 121 | # Start services |
68725035 | 122 | /etc/init.d/fcron restart |
2f4148cc | 123 | /etc/init.d/sshd restart |
b101f8e8 | 124 | /etc/init.d/vnstatd restart |
5e792900 | 125 | /etc/init.d/squid start |
159f9214 PM |
126 | /usr/local/bin/openvpnctrl -s |
127 | /usr/local/bin/openvpnctrl -sn2n | |
701e63c2 | 128 | /etc/init.d/suricata start |
77c3824f PM |
129 | |
130 | # This update needs a reboot... | |
8de58edc | 131 | touch /var/run/need_reboot |
77c3824f PM |
132 | |
133 | # Finish | |
134 | /etc/init.d/fireinfo start | |
135 | sendprofile | |
136 | ||
137 | # Update grub config to display new core version | |
138 | if [ -e /boot/grub/grub.cfg ]; then | |
139 | grub-mkconfig -o /boot/grub/grub.cfg | |
140 | fi | |
141 | ||
142 | sync | |
143 | ||
144 | # Don't report the exitcode last command | |
145 | exit 0 |