config/rootfiles/core/168/update.sh

   1 #!/bin/bash
   2 ############################################################################
   3 #                                                                          #
   4 # This file is part of the IPFire Firewall.                                #
   5 #                                                                          #
   6 # IPFire is free software; you can redistribute it and/or modify           #
   7 # it under the terms of the GNU General Public License as published by     #
   8 # the Free Software Foundation; either version 3 of the License, or        #
   9 # (at your option) any later version.                                      #
  10 #                                                                          #
  11 # IPFire is distributed in the hope that it will be useful,                #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of           #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
  14 # GNU General Public License for more details.                             #
  15 #                                                                          #
  16 # You should have received a copy of the GNU General Public License        #
  17 # along with IPFire; if not, write to the Free Software                    #
  18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
  19 #                                                                          #
  20 # Copyright (C) 2022 IPFire-Team <info@ipfire.org>.                        #
  21 #                                                                          #
  22 ############################################################################
  23 #
  24 . /opt/pakfire/lib/functions.sh
  25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
  26
  27 core=168
  28
  29 # Remove old core updates from pakfire cache to save space...
  30 for (( i=1; i<=$core; i++ )); do
  31         rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
  32 done
  33
  34 # Remove files
  35 rm -rvf \
  36         /lib/firmware/cxgb4/t4fw-1.26.4.0.bin \
  37         /lib/firmware/cxgb4/t5fw-1.26.4.0.bin \
  38         /lib/firmware/cxgb4/t6fw-1.26.4.0.bin \
  39         /lib/firmware/intel/ice/ddp-comms/ice_comms-1.3.20.0.pkg \
  40         /lib/firmware/silabs \
  41         /lib/libprocps.so* \
  42         /usr/bin/dnet-config \
  43         /usr/bin/sdparm \
  44         /usr/lib/libart_lgpl_2.so* \
  45         /usr/lib/libboost_python38* \
  46         /usr/lib/libdnet.la \
  47         /usr/lib/libdnet.so* \
  48         /usr/lib/libevent-1.4.so* \
  49         /usr/lib/libevent_core-1.4.so* \
  50         /usr/lib/libevent_extra-1.4.so* \
  51         /usr/lib/liblber-2.4.so* \
  52         /usr/lib/libnl.so* \
  53         /usr/lib/libpri.so* \
  54         /usr/lib/libsolv.so* \
  55         /usr/lib/libsolvext.so* \
  56         /usr/lib/libusb.so \
  57         /usr/lib/libusb-0.1.so* \
  58         /usr/sbin/dnet
  59
  60 # Remove netbpm add-on, if installed
  61 if [ -e "/opt/pakfire/db/installed/meta-netbpm" ]; then
  62         for i in $(</opt/pakfire/db/rootfiles/netbpm); do
  63                 rm -rfv "/${i}"
  64         done
  65 fi
  66 rm -vf \
  67         /opt/pakfire/db/installed/meta-netbpm \
  68         /opt/pakfire/db/meta/meta-netbpm \
  69         /opt/pakfire/db/rootfiles/netbpm
  70
  71 # Stop services
  72 /etc/init.d/squid stop
  73 /usr/local/bin/openvpnctrl -k
  74 /usr/local/bin/openvpnctrl -kn2n
  75 /etc/init.d/suricata stop
  76
  77 # Extract files
  78 extract_files
  79
  80 # update linker config
  81 ldconfig
  82
  83 # Run IDSv4 converter
  84 convert-ids-backend-files
  85
  86 # Update Language cache
  87 /usr/local/bin/update-lang-cache
  88
  89 # Filesytem cleanup
  90 /usr/local/bin/filesystem-cleanup
  91
  92 # Delete orphaned Oinkmaster and Suricata default ruleset
  93 rm -vf \
  94         /usr/local/bin/oinkmaster.pl \
  95         /var/ipfire/suricata/oinkmaster.conf \
  96         /var/ipfire/suricata/suricata-default-rules.yaml
  97
  98 # Apply local configuration to sshd_config
  99 /usr/local/bin/sshctrl
 100
 101 # Apply sysctl changes
 102 /etc/init.d/sysctl start
 103
 104 # Fix permissions of /etc/sudoers.d/
 105 chmod -v 750 /etc/sudoers.d
 106 chmod -v 640 /etc/sudoers.d/*
 107
 108 # Start services
 109 /etc/init.d/fcron restart
 110 /etc/init.d/sshd restart
 111 /etc/init.d/vnstatd restart
 112 /etc/init.d/squid start
 113 /usr/local/bin/openvpnctrl -s
 114 /usr/local/bin/openvpnctrl -sn2n
 115 /etc/init.d/suricata start
 116
 117 # This update needs a reboot...
 118 touch /var/run/need_reboot
 119
 120 # Finish
 121 /etc/init.d/fireinfo start
 122 sendprofile
 123
 124 # Update grub config to display new core version
 125 if [ -e /boot/grub/grub.cfg ]; then
 126         grub-mkconfig -o /boot/grub/grub.cfg
 127 fi
 128
 129 sync
 130
 131 # Don't report the exitcode last command
 132 exit 0