Core Update 168: Ship fcrontab and rebuild it from scratch
[ipfire-2.x.git] / config / rootfiles / core / 168 / update.sh
1 #!/bin/bash
2 ############################################################################
3 # #
4 # This file is part of the IPFire Firewall. #
5 # #
6 # IPFire is free software; you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation; either version 3 of the License, or #
9 # (at your option) any later version. #
10 # #
11 # IPFire is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
15 # #
16 # You should have received a copy of the GNU General Public License #
17 # along with IPFire; if not, write to the Free Software #
18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
19 # #
20 # Copyright (C) 2022 IPFire-Team <info@ipfire.org>. #
21 # #
22 ############################################################################
23 #
24 . /opt/pakfire/lib/functions.sh
25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
26
27 core=168
28
29 # Remove old core updates from pakfire cache to save space...
30 for (( i=1; i<=$core; i++ )); do
31 rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
32 done
33
34 # Stop services
35 /etc/init.d/ipsec stop
36 /etc/init.d/squid stop
37 /usr/local/bin/openvpnctrl -k
38 /usr/local/bin/openvpnctrl -kn2n
39 /etc/init.d/suricata stop
40
41 # Remove files
42 rm -rvf \
43 /etc/fcron.daily/suricata \
44 /etc/fcron.weekly/suricata \
45 /lib/firmware/cxgb4/t4fw-1.26.4.0.bin \
46 /lib/firmware/cxgb4/t5fw-1.26.4.0.bin \
47 /lib/firmware/cxgb4/t6fw-1.26.4.0.bin \
48 /lib/firmware/intel/ice/ddp-comms/ice_comms-1.3.20.0.pkg \
49 /lib/firmware/silabs \
50 /lib/libprocps.so* \
51 /usr/bin/dnet-config \
52 /usr/bin/sdparm \
53 /usr/lib/libart_lgpl_2.so* \
54 /usr/lib/libdnet.la \
55 /usr/lib/libdnet.so* \
56 /usr/lib/libevent-1.4.so* \
57 /usr/lib/libevent_core-1.4.so* \
58 /usr/lib/libevent_extra-1.4.so* \
59 /usr/lib/liblber-2.4.so* \
60 /usr/lib/libnl.so* \
61 /usr/lib/libpri.so* \
62 /usr/lib/libsolv.so* \
63 /usr/lib/libsolvext.so* \
64 /usr/lib/libusb.so \
65 /usr/lib/libusb-0.1.so* \
66 /usr/sbin/dnet
67
68 # Remove netbpm add-on, if installed
69 if [ -e "/opt/pakfire/db/installed/meta-netbpm" ]; then
70 for i in $(</opt/pakfire/db/rootfiles/netbpm); do
71 rm -rfv "/${i}"
72 done
73 fi
74 rm -vf \
75 /opt/pakfire/db/installed/meta-netbpm \
76 /opt/pakfire/db/meta/meta-netbpm \
77 /opt/pakfire/db/rootfiles/netbpm
78
79 # Extract files
80 extract_files
81
82 # update linker config
83 ldconfig
84
85 # Run IDSv4 converter
86 convert-ids-backend-files
87
88 # Update Language cache
89 /usr/local/bin/update-lang-cache
90
91 # Filesytem cleanup
92 /usr/local/bin/filesystem-cleanup
93
94 # Delete orphaned Oinkmaster and Suricata default ruleset
95 rm -vf \
96 /usr/local/bin/oinkmaster.pl \
97 /var/ipfire/suricata/oinkmaster.conf \
98 /var/ipfire/suricata/suricata-default-rules.yaml
99
100 # Apply local configuration to sshd_config
101 /usr/local/bin/sshctrl
102
103 # Apply sysctl changes
104 /etc/init.d/sysctl start
105
106 # Fix permissions of /etc/sudoers.d/
107 chmod -v 750 /etc/sudoers.d
108 chmod -v 640 /etc/sudoers.d/*
109
110 # Rebuild initial ramdisk to apply microcode updates
111 dracut --regenerate-all --force
112 case "$(uname -m)" in
113 armv*)
114 mkimage -A arm -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire
115 rm /boot/initramfs-${KVER}-ipfire.img
116 ;;
117 aarch64)
118 mkimage -A arm64 -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire
119 # dont remove initramfs because grub need this to boot.
120 ;;
121 esac
122
123 # Add rd.auto to kernel command line
124 if ! grep -q rd.auto /etc/default/grub; then
125 sed -e "s/panic=10/& rd.auto/" -i /etc/default/grub
126 fi
127
128 # Repair any broken MDRAID arrays
129 /usr/local/bin/repair-mdraid
130
131 # Rebuild fcrontab from scratch
132 /usr/bin/fcrontab -z
133
134 # Start services
135 /etc/init.d/fcron restart
136 /etc/init.d/sshd restart
137 /etc/init.d/vnstatd restart
138 /etc/init.d/squid start
139 /usr/local/bin/openvpnctrl -s
140 /usr/local/bin/openvpnctrl -sn2n
141 /etc/init.d/suricata start
142 if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then
143 /etc/init.d/ipsec start
144 fi
145
146 # This update needs a reboot...
147 touch /var/run/need_reboot
148
149 # Finish
150 /etc/init.d/fireinfo start
151 sendprofile
152
153 # Update grub config to display new core version
154 if [ -e /boot/grub/grub.cfg ]; then
155 grub-mkconfig -o /boot/grub/grub.cfg
156 fi
157
158 sync
159
160 # Don't report the exitcode last command
161 exit 0