config/rootfiles/core/168/update.sh

   1 #!/bin/bash
   2 ############################################################################
   3 #                                                                          #
   4 # This file is part of the IPFire Firewall.                                #
   5 #                                                                          #
   6 # IPFire is free software; you can redistribute it and/or modify           #
   7 # it under the terms of the GNU General Public License as published by     #
   8 # the Free Software Foundation; either version 3 of the License, or        #
   9 # (at your option) any later version.                                      #
  10 #                                                                          #
  11 # IPFire is distributed in the hope that it will be useful,                #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of           #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
  14 # GNU General Public License for more details.                             #
  15 #                                                                          #
  16 # You should have received a copy of the GNU General Public License        #
  17 # along with IPFire; if not, write to the Free Software                    #
  18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
  19 #                                                                          #
  20 # Copyright (C) 2022 IPFire-Team <info@ipfire.org>.                        #
  21 #                                                                          #
  22 ############################################################################
  23 #
  24 . /opt/pakfire/lib/functions.sh
  25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
  26
  27 core=168
  28
  29 # Remove old core updates from pakfire cache to save space...
  30 for (( i=1; i<=$core; i++ )); do
  31         rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
  32 done
  33
  34 # Stop services
  35 /etc/init.d/ipsec stop
  36 /etc/init.d/squid stop
  37 /usr/local/bin/openvpnctrl -k
  38 /usr/local/bin/openvpnctrl -kn2n
  39 /etc/init.d/suricata stop
  40
  41 # Remove files
  42 rm -rvf \
  43         /etc/fcron.daily/suricata \
  44         /etc/fcron.weekly/suricata \
  45         /lib/firmware/cxgb4/t4fw-1.26.4.0.bin \
  46         /lib/firmware/cxgb4/t5fw-1.26.4.0.bin \
  47         /lib/firmware/cxgb4/t6fw-1.26.4.0.bin \
  48         /lib/firmware/intel/ice/ddp-comms/ice_comms-1.3.20.0.pkg \
  49         /lib/firmware/silabs \
  50         /lib/libprocps.so* \
  51         /usr/bin/dnet-config \
  52         /usr/bin/sdparm \
  53         /usr/lib/libart_lgpl_2.so* \
  54         /usr/lib/libdnet.la \
  55         /usr/lib/libdnet.so* \
  56         /usr/lib/libevent-1.4.so* \
  57         /usr/lib/libevent_core-1.4.so* \
  58         /usr/lib/libevent_extra-1.4.so* \
  59         /usr/lib/liblber-2.4.so* \
  60         /usr/lib/libnl.so* \
  61         /usr/lib/libpri.so* \
  62         /usr/lib/libsolv.so* \
  63         /usr/lib/libsolvext.so* \
  64         /usr/lib/libusb.so \
  65         /usr/lib/libusb-0.1.so* \
  66         /usr/sbin/dnet
  67
  68 # Remove netbpm add-on, if installed
  69 if [ -e "/opt/pakfire/db/installed/meta-netbpm" ]; then
  70         for i in $(</opt/pakfire/db/rootfiles/netbpm); do
  71                 rm -rfv "/${i}"
  72         done
  73 fi
  74 rm -vf \
  75         /opt/pakfire/db/installed/meta-netbpm \
  76         /opt/pakfire/db/meta/meta-netbpm \
  77         /opt/pakfire/db/rootfiles/netbpm
  78
  79 # Extract files
  80 extract_files
  81
  82 # update linker config
  83 ldconfig
  84
  85 # Run IDSv4 converter
  86 convert-ids-backend-files
  87
  88 # Update Language cache
  89 /usr/local/bin/update-lang-cache
  90
  91 # Filesytem cleanup
  92 /usr/local/bin/filesystem-cleanup
  93
  94 # Delete orphaned Oinkmaster and Suricata default ruleset
  95 rm -vf \
  96         /usr/local/bin/oinkmaster.pl \
  97         /var/ipfire/suricata/oinkmaster.conf \
  98         /var/ipfire/suricata/suricata-default-rules.yaml
  99
 100 # Apply local configuration to sshd_config
 101 /usr/local/bin/sshctrl
 102
 103 # Apply sysctl changes
 104 /etc/init.d/sysctl start
 105
 106 # Fix permissions of /etc/sudoers.d/
 107 chmod -v 750 /etc/sudoers.d
 108 chmod -v 640 /etc/sudoers.d/*
 109
 110 # Rebuild initial ramdisk to apply microcode updates
 111 dracut --regenerate-all --force
 112 case "$(uname -m)" in
 113         armv*)
 114                 mkimage -A arm -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire
 115                 rm /boot/initramfs-${KVER}-ipfire.img
 116                 ;;
 117         aarch64)
 118                 mkimage -A arm64 -T ramdisk -C lzma -d /boot/initramfs-${KVER}-ipfire.img /boot/uInit-${KVER}-ipfire
 119                 # dont remove initramfs because grub need this to boot.
 120                 ;;
 121 esac
 122
 123 # Add rd.auto to kernel command line
 124 if ! grep -q rd.auto /etc/default/grub; then
 125         sed -e "s/panic=10/& rd.auto/" -i /etc/default/grub
 126 fi
 127
 128 # Repair any broken MDRAID arrays
 129 /usr/local/bin/repair-mdraid
 130
 131 # Rebuild fcrontab from scratch
 132 /usr/bin/fcrontab -z
 133
 134 # Start services
 135 /etc/init.d/fcron restart
 136 /etc/init.d/sshd restart
 137 /etc/init.d/vnstatd restart
 138 /etc/init.d/squid start
 139 /usr/local/bin/openvpnctrl -s
 140 /usr/local/bin/openvpnctrl -sn2n
 141 /etc/init.d/suricata start
 142 if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then
 143        /etc/init.d/ipsec start
 144 fi
 145
 146 # This update needs a reboot...
 147 touch /var/run/need_reboot
 148
 149 # Finish
 150 /etc/init.d/fireinfo start
 151 sendprofile
 152
 153 # Update grub config to display new core version
 154 if [ -e /boot/grub/grub.cfg ]; then
 155         grub-mkconfig -o /boot/grub/grub.cfg
 156 fi
 157
 158 sync
 159
 160 # Don't report the exitcode last command
 161 exit 0