[ipfire-2.x.git] / config / rootfiles / core / 90 / update.sh

#!/bin/bash
############################################################################
#                                                                          #
# This file is part of the IPFire Firewall.                                #
#                                                                          #
# IPFire is free software; you can redistribute it and/or modify           #
# it under the terms of the GNU General Public License as published by     #
# the Free Software Foundation; either version 3 of the License, or        #
# (at your option) any later version.                                      #
#                                                                          #
# IPFire is distributed in the hope that it will be useful,                #
# but WITHOUT ANY WARRANTY; without even the implied warranty of           #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
# GNU General Public License for more details.                             #
#                                                                          #
# You should have received a copy of the GNU General Public License        #
# along with IPFire; if not, write to the Free Software                    #
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
#                                                                          #
# Copyright (C) 2014 IPFire-Team <info@ipfire.org>.                        #
#                                                                          #
############################################################################
#
. /opt/pakfire/lib/functions.sh
/usr/local/bin/backupctrl exclude >/dev/null 2>&1


function find_device() {
	local mountpoint="${1}"

	local root
	local dev mp fs flags rest
	while read -r dev mp fs flags rest; do
		# Skip unwanted entries
		[ "${dev}" = "rootfs" ] && continue

		if [ "${mp}" = "${mountpoint}" ] && [ -b "${dev}" ]; then
			root="$(basename "${dev}")"
			break
		fi
	done < /proc/mounts

	# Get the actual device from the partition that holds /
	while [ -n "${root}" ]; do
		if [ -e "/sys/block/${root}" ]; then
			echo "${root}"
			return 0
		fi

		# Remove last character
		root="${root::-1}"
	done

	return 1
}


#
# Remove old core updates from pakfire cache to save space...
core=90
for (( i=1; i<=${core}; i++ ))
do
	rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
done

#
# Do some sanity checks.
case $(uname -r) in
	*-ipfire-versatile )
		/usr/bin/logger -p syslog.emerg -t ipfire \
			"core-update-${core}: ERROR cannot update. versatile support is dropped."
		# Report no error to pakfire. So it does not try to install it again.
		exit 0
		;;
	*-ipfire* )
		# Ok.
		;;
	* )
		/usr/bin/logger -p syslog.emerg -t ipfire \
			"core-update-${core}: ERROR cannot update. No IPFire Kernel."
		exit 1
	;;
esac


#
#
KVER="xxxKVERxxx"

# Check diskspace on root
ROOTSPACE=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`

if [ $ROOTSPACE -lt 100000 ]; then
	/usr/bin/logger -p syslog.emerg -t ipfire \
		"core-update-${core}: ERROR cannot update because not enough free space on root."
	exit 2
fi


echo
echo Update Kernel to $KVER ...
#
# Remove old kernel, configs, initrd, modules, dtb's ...
#
rm -rf /boot/System.map-*
rm -rf /boot/config-*
rm -rf /boot/ipfirerd-*
rm -rf /boot/initramfs-*
rm -rf /boot/vmlinuz-*
rm -rf /boot/uImage-ipfire-*
rm -rf /boot/uInit-ipfire-*
rm -rf /boot/dtb-*-ipfire-*
rm -rf /lib/modules

case "$(uname -m)" in
	armv*)
		# Backup uEnv.txt if exist
		if [ -e /boot/uEnv.txt ]; then
			cp -vf /boot/uEnv.txt /boot/uEnv.txt.org
		fi

		# work around the u-boot folder detection bug
		mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
		mkdir -pv /boot/dtb-$KVER-ipfire-multi
		;;
esac

#
#Stop services
/etc/init.d/snort stop
/etc/init.d/squid stop
/etc/init.d/ipsec stop
/etc/init.d/apache stop

#
#Extract files
tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p --numeric-owner -C /

# Remove old openssl libraries
rm -vf /usr/lib/libcrypto.so.0.9.8 /usr/lib/libssl.so.0.9.8

# Check diskspace on boot
BOOTSPACE=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`

if [ $BOOTSPACE -lt 1000 ]; then
	case $(uname -r) in
		*-ipfire-kirkwood )
			# Special handling for old kirkwood images.
			# (install only kirkwood kernel)
			rm -rf /boot/*
			# work around the u-boot folder detection bug
			mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
			tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p \
				--numeric-owner -C / --wildcards 'boot/*-kirkwood*'
			;;
		* )
			/usr/bin/logger -p syslog.emerg -t ipfire \
				"core-update-${core}: FATAL-ERROR space run out on boot. System is not bootable..."
			/etc/init.d/apache start
			exit 4
			;;
	esac
fi

# Create GeoIP related files if they do not exist yet.
if [ ! -e "/var/ipfire/firewall/geoipblock" ]; then
	touch /var/ipfire/firewall/geoipblock
	chown nobody:nobody /var/ipfire/firewall/geoipblock

	# Insert default value into file.
	echo "GEOIPBLOCK_ENABLED=off" >> /var/ipfire/firewall/geoipblock
fi
if [ ! -e "/var/ipfire/fwhosts/customgeoipgrp" ]; then
	touch /var/ipfire/fwhosts/customgeoipgrp
	chown nobody:nobody /var/ipfire/fwhosts/customgeoipgrp
fi

#Fix BUG10812 (openvpn server.conf has wrong collectd logfile path)
if grep -q "status /var/log/ovpnserver.log 30" /var/ipfire/ovpn/server.conf; then
	sed -i "s/\/var\/log\/ovpnserver.log 30/\/var\/run\/ovpnserver.log 30/" /var/ipfire/ovpn/server.conf
fi

# Download/Update GeoIP databases.
/usr/local/bin/xt_geoip_update

# Update crontab
grep -q /usr/local/bin/xt_geoip_update /var/spool/cron/root.orig || cat <<EOF >> /var/spool/cron/root.orig

# Update GeoIP database once a month.
%monthly,random * * * [ -f "/var/ipfire/red/active" ] && /usr/local/bin/xt_geoip_update >/dev/null 2>&1
EOF

fcrontab -z &>/dev/null


# Update Language cache
perl -e "require '/var/ipfire/lang.pl'; &Lang::BuildCacheLang"

#
# Start services
#
/etc/init.d/apache start
/etc/init.d/squid start
/etc/init.d/snort start
if [ `grep "ENABLED=on" /var/ipfire/vpn/settings` ]; then
	/etc/init.d/ipsec start
fi

case "$(uname -m)" in
	i?86)
	case "$(find_device "/")" in
		xvd* )
			echo Skip remove grub2 files, because pygrub fail.
			rm -f /boot/grub/*
			echo config will recreated by linux-pae install.
			;;
		* )
			#
			# Update to GRUB2 config
			#
			grub-mkconfig > /boot/grub/grub.cfg
			;;
	esac
esac

# Force (re)install pae kernel if pae is supported
rm -rf /opt/pakfire/db/*/meta-linux-pae
if [ ! "$(grep "^flags.* pae " /proc/cpuinfo)" == "" ]; then
	ROOTSPACE=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
	BOOTSPACE=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
	if [ $BOOTSPACE -lt 12000 -o $ROOTSPACE -lt 90000 ]; then
		/usr/bin/logger -p syslog.emerg -t ipfire \
			"core-update-${core}: WARNING not enough space for pae kernel."
	else
		echo "Name: linux-pae" > /opt/pakfire/db/installed/meta-linux-pae
		echo "ProgVersion: 0" >> /opt/pakfire/db/installed/meta-linux-pae
		echo "Release: 0"     >> /opt/pakfire/db/installed/meta-linux-pae
		echo "Name: linux-pae" > /opt/pakfire/db/meta/meta-linux-pae
		echo "ProgVersion: 0" >> /opt/pakfire/db/meta/meta-linux-pae
		echo "Release: 0"     >> /opt/pakfire/db/meta/meta-linux-pae
	fi
fi

#
# After pakfire has ended run it again and update the lists and do upgrade
#
echo '#!/bin/bash'                                        >  /tmp/pak_update
echo 'while [ "$(ps -A | grep " update.sh")" != "" ]; do' >> /tmp/pak_update
echo '    sleep 1'                                        >> /tmp/pak_update
echo 'done'                                               >> /tmp/pak_update
echo 'while [ "$(ps -A | grep " pakfire")" != "" ]; do'   >> /tmp/pak_update
echo '    sleep 1'                                        >> /tmp/pak_update
echo 'done'                                               >> /tmp/pak_update
echo '/opt/pakfire/pakfire update -y --force'             >> /tmp/pak_update
echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
echo '/usr/bin/logger -p syslog.emerg -t ipfire "Core-upgrade finished. If you use a customized grub/uboot config"' >> /tmp/pak_update
echo '/usr/bin/logger -p syslog.emerg -t ipfire "Check it before reboot !!!"' >> /tmp/pak_update
echo '/usr/bin/logger -p syslog.emerg -t ipfire " *** Please reboot... *** "' >> /tmp/pak_update
echo 'touch /var/run/need_reboot ' >> /tmp/pak_update
#
killall -KILL pak_update
chmod +x /tmp/pak_update
/tmp/pak_update &

sync

#
#Finish
(
	/etc/init.d/fireinfo start
	sendprofile
) >/dev/null 2>&1 &

echo
echo Please wait until pakfire has ended...
echo

# Don't report the exitcode last command
exit 0
Commit	Line	Data
0778b991 AF	1	#!/bin/bash
	2	############################################################################
	3	# #
	4	# This file is part of the IPFire Firewall. #
	5	# #
	6	# IPFire is free software; you can redistribute it and/or modify #
	7	# it under the terms of the GNU General Public License as published by #
	8	# the Free Software Foundation; either version 3 of the License, or #
	9	# (at your option) any later version. #
	10	# #
	11	# IPFire is distributed in the hope that it will be useful, #
	12	# but WITHOUT ANY WARRANTY; without even the implied warranty of #
	13	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
	14	# GNU General Public License for more details. #
	15	# #
	16	# You should have received a copy of the GNU General Public License #
	17	# along with IPFire; if not, write to the Free Software #
	18	# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
	19	# #
	20	# Copyright (C) 2014 IPFire-Team <info@ipfire.org>. #
	21	# #
	22	############################################################################
	23	#
	24	. /opt/pakfire/lib/functions.sh
	25	/usr/local/bin/backupctrl exclude >/dev/null 2>&1
	26
	27
	28	function find_device() {
	29	local mountpoint="${1}"
	30
	31	local root
	32	local dev mp fs flags rest
	33	while read -r dev mp fs flags rest; do
	34	# Skip unwanted entries
	35	[ "${dev}" = "rootfs" ] && continue
	36
	37	if [ "${mp}" = "${mountpoint}" ] && [ -b "${dev}" ]; then
	38	root="$(basename "${dev}")"
	39	break
	40	fi
	41	done < /proc/mounts
	42
	43	# Get the actual device from the partition that holds /
	44	while [ -n "${root}" ]; do
	45	if [ -e "/sys/block/${root}" ]; then
	46	echo "${root}"
	47	return 0
	48	fi
	49
	50	# Remove last character
	51	root="${root::-1}"
	52	done
	53
	54	return 1
	55	}
	56
	57
	58	#
	59	# Remove old core updates from pakfire cache to save space...
	60	core=90
	61	for (( i=1; i<=${core}; i++ ))
	62	do
	63	rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
	64	done
65
66	#
67	# Do some sanity checks.
68	case $(uname -r) in
69	*-ipfire-versatile )
70	/usr/bin/logger -p syslog.emerg -t ipfire \
71	"core-update-${core}: ERROR cannot update. versatile support is dropped."
72	# Report no error to pakfire. So it does not try to install it again.
73	exit 0
74	;;
75	-ipfire )
76	# Ok.
77	;;
78	* )
79	/usr/bin/logger -p syslog.emerg -t ipfire \
80	"core-update-${core}: ERROR cannot update. No IPFire Kernel."
81	exit 1
82	;;
83	esac
84
85
86	#
87	#
88	KVER="xxxKVERxxx"
89
90	# Check diskspace on root
91	ROOTSPACE=`df / -Pk \| sed "s\| * \| \|g" \| cut -d" " -f4 \| tail -n 1`
92
93	if [ $ROOTSPACE -lt 100000 ]; then
94	/usr/bin/logger -p syslog.emerg -t ipfire \
95	"core-update-${core}: ERROR cannot update because not enough free space on root."
96	exit 2
97	fi
98
99
100	echo
101	echo Update Kernel to $KVER ...
102	#
103	# Remove old kernel, configs, initrd, modules, dtb's ...
104	#
105	rm -rf /boot/System.map-*
106	rm -rf /boot/config-*
107	rm -rf /boot/ipfirerd-*
108	rm -rf /boot/initramfs-*
109	rm -rf /boot/vmlinuz-*
110	rm -rf /boot/uImage-ipfire-*
111	rm -rf /boot/uInit-ipfire-*
112	rm -rf /boot/dtb--ipfire-
113	rm -rf /lib/modules
114
115	case "$(uname -m)" in
116	armv*)
117	# Backup uEnv.txt if exist
118	if [ -e /boot/uEnv.txt ]; then
119	cp -vf /boot/uEnv.txt /boot/uEnv.txt.org
120	fi
121
122	# work around the u-boot folder detection bug
123	mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
124	mkdir -pv /boot/dtb-$KVER-ipfire-multi
125	;;
126	esac
127
128	#
129	#Stop services
130	/etc/init.d/snort stop
131	/etc/init.d/squid stop
132	/etc/init.d/ipsec stop
133	/etc/init.d/apache stop
134
135	#
136	#Extract files
137	tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p --numeric-owner -C /
138
45ff420e MT	139	# Remove old openssl libraries
	140	rm -vf /usr/lib/libcrypto.so.0.9.8 /usr/lib/libssl.so.0.9.8
	141
0778b991 AF	142	# Check diskspace on boot
	143	BOOTSPACE=`df /boot -Pk \| sed "s\| * \| \|g" \| cut -d" " -f4 \| tail -n 1`
	144
	145	if [ $BOOTSPACE -lt 1000 ]; then
	146	case $(uname -r) in
	147	*-ipfire-kirkwood )
	148	# Special handling for old kirkwood images.
	149	# (install only kirkwood kernel)
	150	rm -rf /boot/*
	151	# work around the u-boot folder detection bug
	152	mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
	153	tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p \
	154	--numeric-owner -C / --wildcards 'boot/-kirkwood'
	155	;;
	156	* )
	157	/usr/bin/logger -p syslog.emerg -t ipfire \
	158	"core-update-${core}: FATAL-ERROR space run out on boot. System is not bootable..."
	159	/etc/init.d/apache start
	160	exit 4
	161	;;
	162	esac
	163	fi
	164
46d3a4cb SS	165	# Create GeoIP related files if they do not exist yet.
	166	if [ ! -e "/var/ipfire/firewall/geoipblock" ]; then
	167	touch /var/ipfire/firewall/geoipblock
	168	chown nobody:nobody /var/ipfire/firewall/geoipblock
	169
	170	# Insert default value into file.
	171	echo "GEOIPBLOCK_ENABLED=off" >> /var/ipfire/firewall/geoipblock
	172	fi
	173	if [ ! -e "/var/ipfire/fwhosts/customgeoipgrp" ]; then
	174	touch /var/ipfire/fwhosts/customgeoipgrp
	175	chown nobody:nobody /var/ipfire/fwhosts/customgeoipgrp
	176	fi
	177
0a11f876	178	#Fix BUG10812 (openvpn server.conf has wrong collectd logfile path)
69a419b1	179	if grep -q "status /var/log/ovpnserver.log 30" /var/ipfire/ovpn/server.conf; then
0a11f876 AM	180	sed -i "s/\/var\/log\/ovpnserver.log 30/\/var\/run\/ovpnserver.log 30/" /var/ipfire/ovpn/server.conf
	181	fi
	182
46d3a4cb SS	183	# Download/Update GeoIP databases.
	184	/usr/local/bin/xt_geoip_update
	185
db5b5de9 SS	186	# Update crontab
	187	grep -q /usr/local/bin/xt_geoip_update /var/spool/cron/root.orig \|\| cat <<EOF >> /var/spool/cron/root.orig
	188
	189	# Update GeoIP database once a month.
	190	%monthly,random * * * [ -f "/var/ipfire/red/active" ] && /usr/local/bin/xt_geoip_update >/dev/null 2>&1
	191	EOF
	192
	193	fcrontab -z &>/dev/null
	194
	195
0778b991 AF	196	# Update Language cache
	197	perl -e "require '/var/ipfire/lang.pl'; &Lang::BuildCacheLang"
	198
	199	#
	200	# Start services
	201	#
	202	/etc/init.d/apache start
	203	/etc/init.d/squid start
	204	/etc/init.d/snort start
	205	if [ `grep "ENABLED=on" /var/ipfire/vpn/settings` ]; then
	206	/etc/init.d/ipsec start
	207	fi
	208
	209	case "$(uname -m)" in
	210	i?86)
	211	case "$(find_device "/")" in
	212	xvd* )
	213	echo Skip remove grub2 files, because pygrub fail.
	214	rm -f /boot/grub/*
	215	echo config will recreated by linux-pae install.
	216	;;
	217	* )
	218	#
	219	# Update to GRUB2 config
	220	#
	221	grub-mkconfig > /boot/grub/grub.cfg
	222	;;
	223	esac
	224	esac
	225
	226	# Force (re)install pae kernel if pae is supported
	227	rm -rf /opt/pakfire/db/*/meta-linux-pae
	228	if [ ! "$(grep "^flags.* pae " /proc/cpuinfo)" == "" ]; then
	229	ROOTSPACE=`df / -Pk \| sed "s\| * \| \|g" \| cut -d" " -f4 \| tail -n 1`
	230	BOOTSPACE=`df /boot -Pk \| sed "s\| * \| \|g" \| cut -d" " -f4 \| tail -n 1`
	231	if [ $BOOTSPACE -lt 12000 -o $ROOTSPACE -lt 90000 ]; then
	232	/usr/bin/logger -p syslog.emerg -t ipfire \
	233	"core-update-${core}: WARNING not enough space for pae kernel."
	234	else
	235	echo "Name: linux-pae" > /opt/pakfire/db/installed/meta-linux-pae
	236	echo "ProgVersion: 0" >> /opt/pakfire/db/installed/meta-linux-pae
	237	echo "Release: 0" >> /opt/pakfire/db/installed/meta-linux-pae
	238	echo "Name: linux-pae" > /opt/pakfire/db/meta/meta-linux-pae
	239	echo "ProgVersion: 0" >> /opt/pakfire/db/meta/meta-linux-pae
	240	echo "Release: 0" >> /opt/pakfire/db/meta/meta-linux-pae
	241	fi
	242	fi
	243
	244	#
	245	# After pakfire has ended run it again and update the lists and do upgrade
	246	#
	247	echo '#!/bin/bash' > /tmp/pak_update
	248	echo 'while [ "$(ps -A \| grep " update.sh")" != "" ]; do' >> /tmp/pak_update
	249	echo ' sleep 1' >> /tmp/pak_update
	250	echo 'done' >> /tmp/pak_update
	251	echo 'while [ "$(ps -A \| grep " pakfire")" != "" ]; do' >> /tmp/pak_update
	252	echo ' sleep 1' >> /tmp/pak_update
	253	echo 'done' >> /tmp/pak_update
	254	echo '/opt/pakfire/pakfire update -y --force' >> /tmp/pak_update
	255	echo '/opt/pakfire/pakfire upgrade -y' >> /tmp/pak_update
	256	echo '/opt/pakfire/pakfire upgrade -y' >> /tmp/pak_update
	257	echo '/opt/pakfire/pakfire upgrade -y' >> /tmp/pak_update
	258	echo '/usr/bin/logger -p syslog.emerg -t ipfire "Core-upgrade finished. If you use a customized grub/uboot config"' >> /tmp/pak_update
	259	echo '/usr/bin/logger -p syslog.emerg -t ipfire "Check it before reboot !!!"' >> /tmp/pak_update
260	echo '/usr/bin/logger -p syslog.emerg -t ipfire " * Please reboot... * "' >> /tmp/pak_update
261	echo 'touch /var/run/need_reboot ' >> /tmp/pak_update
262	#
263	killall -KILL pak_update
264	chmod +x /tmp/pak_update
265	/tmp/pak_update &
266
267	sync
268
269	#
270	#Finish
271	(
272	/etc/init.d/fireinfo start
273	sendprofile
274	) >/dev/null 2>&1 &
275
276	echo
277	echo Please wait until pakfire has ended...
278	echo
279
280	# Don't report the exitcode last command
281	exit 0
282