config/rootfiles/core/120/update.sh

   1 #!/bin/bash
   2 ############################################################################
   3 #                                                                          #
   4 # This file is part of the IPFire Firewall.                                #
   5 #                                                                          #
   6 # IPFire is free software; you can redistribute it and/or modify           #
   7 # it under the terms of the GNU General Public License as published by     #
   8 # the Free Software Foundation; either version 3 of the License, or        #
   9 # (at your option) any later version.                                      #
  10 #                                                                          #
  11 # IPFire is distributed in the hope that it will be useful,                #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of           #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
  14 # GNU General Public License for more details.                             #
  15 #                                                                          #
  16 # You should have received a copy of the GNU General Public License        #
  17 # along with IPFire; if not, write to the Free Software                    #
  18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
  19 #                                                                          #
  20 # Copyright (C) 2017 IPFire-Team <info@ipfire.org>.                        #
  21 #                                                                          #
  22 ############################################################################
  23 #
  24 . /opt/pakfire/lib/functions.sh
  25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
  26
  27 core=120
  28
  29 # Remove old core updates from pakfire cache to save space...
  30 for (( i=1; i<=$core; i++ )); do
  31         rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
  32 done
  33
  34 # Remove forgotten PHP file
  35 rm -f /etc/httpd/conf/conf.d/php5.conf
  36
  37 # Delete old PAM libs and symlinks if presant
  38 if ls /lib | grep -q 'libpam.*'; then
  39     rm -f /lib/libpam*
  40 fi
  41
  42 # Stop services
  43
  44 # Extract files
  45 extract_files
  46
  47 # update linker config
  48 ldconfig
  49
  50 # Update Language cache
  51 /usr/local/bin/update-lang-cache
  52
  53 # Changed and new OpenVPN-2.4 directives will wrote to server.conf and renew CRL while update an core update
  54 if [ -e /var/ipfire/ovpn/server.conf ]; then
  55         /usr/local/bin/openvpnctrl -k
  56
  57         # Update configuration directives
  58         sed -i -e 's/script-security 3 system/script-security 3/' \
  59                 -e '/status .*/ a ncp-disable' /var/ipfire/ovpn/server.conf
  60
  61         # Update the OpenVPN CRL
  62         openssl ca -gencrl -keyfile /var/ipfire/ovpn/ca/cakey.pem \
  63                 -cert /var/ipfire/ovpn/ca/cacert.pem \
  64                 -out /var/ipfire/ovpn/crls/cacrl.pem \
  65                 -config /var/ipfire/ovpn/openssl/ovpn.cnf
  66
  67         /usr/local/bin/openvpnctrl -s
  68 fi
  69
  70 # Start services
  71 /etc/init.d/apache restart
  72 /etc/init.d/unbound restart
  73
  74 # Remove deprecated SSH configuration option
  75 sed -e "/UsePrivilegeSeparation/d" -i /etc/ssh/sshd_config
  76
  77 # Remove any pakfire keys stored in /
  78 rm -rfv /.gnupg
  79
  80 # Move old pakfire keystore into new place
  81 mv -v /root/.gnupg /opt/pakfire/etc/.gnupg
  82
  83 # Import new Pakfire key
  84 /etc/init.d/pakfire start
  85
  86 # This update needs a reboot...
  87 touch /var/run/need_reboot
  88
  89 # Finish
  90 /etc/init.d/fireinfo start
  91 sendprofile
  92
  93 # Update grub config to display new core version
  94 if [ -e /boot/grub/grub.cfg ]; then
  95         grub-mkconfig -o /boot/grub/grub.cfg
  96 fi
  97
  98 sync
  99
 100 # Don't report the exitcode last command
 101 exit 0