config/rootfiles/core/100/update.sh

   1 #!/bin/bash
   2 ############################################################################
   3 #                                                                          #
   4 # This file is part of the IPFire Firewall.                                #
   5 #                                                                          #
   6 # IPFire is free software; you can redistribute it and/or modify           #
   7 # it under the terms of the GNU General Public License as published by     #
   8 # the Free Software Foundation; either version 3 of the License, or        #
   9 # (at your option) any later version.                                      #
  10 #                                                                          #
  11 # IPFire is distributed in the hope that it will be useful,                #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of           #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
  14 # GNU General Public License for more details.                             #
  15 #                                                                          #
  16 # You should have received a copy of the GNU General Public License        #
  17 # along with IPFire; if not, write to the Free Software                    #
  18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
  19 #                                                                          #
  20 # Copyright (C) 2016 IPFire-Team <info@ipfire.org>.                        #
  21 #                                                                          #
  22 ############################################################################
  23 #
  24 . /opt/pakfire/lib/functions.sh
  25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
  26
  27 function find_device() {
  28         local mountpoint="${1}"
  29
  30         local root
  31         local dev mp fs flags rest
  32         while read -r dev mp fs flags rest; do
  33                 # Skip unwanted entries
  34                 [ "${dev}" = "rootfs" ] && continue
  35
  36                 if [ "${mp}" = "${mountpoint}" ] && [ -b "${dev}" ]; then
  37                         root="$(basename "${dev}")"
  38                         break
  39                 fi
  40         done < /proc/mounts
  41
  42         # Get the actual device from the partition that holds /
  43         while [ -n "${root}" ]; do
  44                 if [ -e "/sys/block/${root}" ]; then
  45                         echo "${root}"
  46                         return 0
  47                 fi
  48
  49                 # Remove last character
  50                 root="${root::-1}"
  51         done
  52
  53         return 1
  54 }
  55
  56
  57 core=100
  58
  59 function exit_with_error() {
  60         # Set last succesfull installed core.
  61         echo $(($core-1)) > /opt/pakfire/db/core/mine
  62         /usr/bin/logger -p syslog.emerg -t ipfire \
  63                 "core-update-${core}: $1"
  64         exit $2
  65 }
  66
  67 # Remove old core updates from pakfire cache to save space...
  68 for (( i=1; i<=$core; i++ ))
  69 do
  70         rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
  71 done
  72
  73 #
  74 # Do some sanity checks.
  75 case $(uname -r) in
  76         *-ipfire* )
  77                 # Ok.
  78                 ;;
  79         * )
  80                 exit_with_error "ERROR cannot update. No IPFire Kernel." 1
  81         ;;
  82 esac
  83
  84
  85 #
  86 #
  87 KVER="xxxKVERxxx"
  88
  89 # Check diskspace on root
  90 ROOTSPACE=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
  91
  92 if [ $ROOTSPACE -lt 100000 ]; then
  93         exit_with_error "ERROR cannot update because not enough free space on root." 2
  94         exit 2
  95 fi
  96
  97 echo
  98 echo Update Kernel to $KVER ...
  99 #
 100 # Remove old kernel, configs, initrd, modules, dtb's ...
 101 #
 102 rm -rf /boot/System.map-*
 103 rm -rf /boot/config-*
 104 rm -rf /boot/ipfirerd-*
 105 rm -rf /boot/initramfs-*
 106 rm -rf /boot/vmlinuz-*
 107 rm -rf /boot/uImage-ipfire-*
 108 rm -rf /boot/uInit-ipfire-*
 109 rm -rf /boot/dtb-*-ipfire-*
 110 rm -rf /lib/modules
 111
 112 case "$(uname -m)" in
 113         armv*)
 114                 # Backup uEnv.txt if exist
 115                 if [ -e /boot/uEnv.txt ]; then
 116                         cp -vf /boot/uEnv.txt /boot/uEnv.txt.org
 117                 fi
 118
 119                 # work around the u-boot folder detection bug
 120                 mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
 121                 mkdir -pv /boot/dtb-$KVER-ipfire-multi
 122 #to do add touch for arm kernel and initrd here
 123                 ;;
 124 esac
 125
 126 # Stop services
 127 /etc/init.d/snort stop
 128 /etc/init.d/squid stop
 129 /etc/init.d/dnsmasq stop
 130 /etc/init.d/ipsec stop
 131 /etc/init.d/ntp stop
 132 /etc/init.d/apache stop
 133
 134
 135 # Extract files
 136 tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p --numeric-owner -C /
 137
 138
 139
 140 # Check diskspace on boot
 141 BOOTSPACE=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
 142
 143 if [ $BOOTSPACE -lt 1000 ]; then
 144         case $(uname -r) in
 145                 *-ipfire-kirkwood )
 146                         # Special handling for old kirkwood images.
 147                         # (install only kirkwood kernel)
 148                         rm -rf /boot/*
 149                         # work around the u-boot folder detection bug
 150                         mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
 151                         tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p \
 152                                 --numeric-owner -C / --wildcards 'boot/*-kirkwood*'
 153                         ;;
 154                 * )
 155                         /etc/init.d/apache start
 156                         exit_with_error "FATAL-ERROR space run out on boot. System is not bootable..." 4
 157                         ;;
 158         esac
 159 fi
 160
 161 # restart init because the glibc was updated.
 162 telinit u
 163
 164 # Fix hardening flags in grub
 165 paxctl -mpexs /usr/bin/grub-script-check
 166
 167 # Regenerate IPsec configuration
 168 sudo -u nobody /srv/web/ipfire/cgi-bin/vpnmain.cgi
 169
 170 # Update Language cache
 171 /usr/local/bin/update-lang-cache
 172
 173 #
 174 # Start services
 175 #
 176 /etc/init.d/apache start
 177 /etc/init.d/ntp start
 178 /etc/init.d/dnsmasq start
 179 /etc/init.d/sshd restart
 180 /etc/init.d/squid start
 181 /etc/init.d/snort start
 182 if [ `grep "ENABLED=on" /var/ipfire/vpn/settings` ]; then
 183         /etc/init.d/ipsec start
 184 fi
 185
 186 # Delete old QoS enabled indicator
 187 rm -f /var/ipfire/qos/enable
 188
 189 # Upadate Kernel version uEnv.txt
 190 if [ -e /boot/uEnv.txt ]; then
 191         sed -i -e "s/KVER=.*/KVER=${KVER}/g" /boot/uEnv.txt
 192 fi
 193
 194 # call user update script (needed for some arm boards)
 195 if [ -e /boot/pakfire-kernel-update ]; then
 196         /boot/pakfire-kernel-update ${KVER}
 197 fi
 198
 199 case "$(uname -m)" in
 200         i?86)
 201                 # Force (re)install pae kernel if pae is supported
 202                 rm -rf /opt/pakfire/db/installed/meta-linux-pae
 203                 if [ ! "$(grep "^flags.* pae " /proc/cpuinfo)" == "" ]; then
 204                         ROOTSPACE=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
 205                         BOOTSPACE=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
 206                         if [ $BOOTSPACE -lt 12000 -o $ROOTSPACE -lt 90000 ]; then
 207                                 /usr/bin/logger -p syslog.emerg -t ipfire \
 208                                 "core-update-${core}: WARNING not enough space for pae kernel."
 209                         else
 210                                 echo "Name: linux-pae" > /opt/pakfire/db/installed/meta-linux-pae
 211                                 echo "ProgVersion: 0" >> /opt/pakfire/db/installed/meta-linux-pae
 212                                 echo "Release: 0"     >> /opt/pakfire/db/installed/meta-linux-pae
 213                         fi
 214                 fi
 215                 ;;
 216 esac
 217 #
 218 # After pakfire has ended run it again and update the lists and do upgrade
 219 #
 220 echo '#!/bin/bash'                                        >  /tmp/pak_update
 221 echo 'while [ "$(ps -A | grep " update.sh")" != "" ]; do' >> /tmp/pak_update
 222 echo '    sleep 1'                                        >> /tmp/pak_update
 223 echo 'done'                                               >> /tmp/pak_update
 224 echo 'while [ "$(ps -A | grep " pakfire")" != "" ]; do'   >> /tmp/pak_update
 225 echo '    sleep 1'                                        >> /tmp/pak_update
 226 echo 'done'                                               >> /tmp/pak_update
 227 echo '/opt/pakfire/pakfire update -y --force'             >> /tmp/pak_update
 228 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 229 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 230 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 231 echo '/usr/bin/logger -p syslog.emerg -t ipfire "Core-upgrade finished. If you use a customized grub/uboot config"' >> /tmp/pak_update
 232 echo '/usr/bin/logger -p syslog.emerg -t ipfire "Check it before reboot !!!"' >> /tmp/pak_update
 233 echo '/usr/bin/logger -p syslog.emerg -t ipfire " *** Please reboot... *** "' >> /tmp/pak_update
 234 echo 'touch /var/run/need_reboot ' >> /tmp/pak_update
 235 #
 236 killall -KILL pak_update
 237 chmod +x /tmp/pak_update
 238 /tmp/pak_update &
 239
 240 sync
 241
 242 # This update need a reboot...
 243 touch /var/run/need_reboot
 244
 245 # Finish
 246 /etc/init.d/fireinfo start
 247 sendprofile
 248 # Update grub config to display new core version
 249 if [ -e /boot/grub/grub.cfg ]; then
 250         grub-mkconfig -o /boot/grub/grub.cfg
 251 fi
 252 sync
 253
 254 # Don't report the exitcode last command
 255 exit 0