config/rootfiles/core/168/update.sh

   1 #!/bin/bash
   2 ############################################################################
   3 #                                                                          #
   4 # This file is part of the IPFire Firewall.                                #
   5 #                                                                          #
   6 # IPFire is free software; you can redistribute it and/or modify           #
   7 # it under the terms of the GNU General Public License as published by     #
   8 # the Free Software Foundation; either version 3 of the License, or        #
   9 # (at your option) any later version.                                      #
  10 #                                                                          #
  11 # IPFire is distributed in the hope that it will be useful,                #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of           #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
  14 # GNU General Public License for more details.                             #
  15 #                                                                          #
  16 # You should have received a copy of the GNU General Public License        #
  17 # along with IPFire; if not, write to the Free Software                    #
  18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
  19 #                                                                          #
  20 # Copyright (C) 2022 IPFire-Team <info@ipfire.org>.                        #
  21 #                                                                          #
  22 ############################################################################
  23 #
  24 . /opt/pakfire/lib/functions.sh
  25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
  26
  27 core=168
  28
  29 # Remove old core updates from pakfire cache to save space...
  30 for (( i=1; i<=$core; i++ )); do
  31         rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
  32 done
  33
  34 # Remove files
  35 rm -rvf \
  36         /lib/firmware/cxgb4/t4fw-1.26.4.0.bin \
  37         /lib/firmware/cxgb4/t5fw-1.26.4.0.bin \
  38         /lib/firmware/cxgb4/t6fw-1.26.4.0.bin \
  39         /lib/firmware/intel/ice/ddp-comms/ice_comms-1.3.20.0.pkg \
  40         /lib/firmware/silabs \
  41         /lib/libprocps.so* \
  42         /usr/bin/dnet-config \
  43         /usr/bin/sdparm \
  44         /usr/lib/libart_lgpl_2.so* \
  45         /usr/lib/libboost_python38* \
  46         /usr/lib/libdnet.la \
  47         /usr/lib/libdnet.so* \
  48         /usr/lib/libevent-1.4.so* \
  49         /usr/lib/libevent_core-1.4.so* \
  50         /usr/lib/libevent_extra-1.4.so* \
  51         /usr/lib/liblber-2.4.so* \
  52         /usr/lib/libnl.so* \
  53         /usr/lib/libpri.so* \
  54         /usr/lib/libsolv.so* \
  55         /usr/lib/libsolvext.so* \
  56         /usr/sbin/dnet
  57
  58 # Remove netbpm add-on, if installed
  59 if [ -e "/opt/pakfire/db/installed/meta-netbpm" ]; then
  60         for i in $(</opt/pakfire/db/rootfiles/netbpm); do
  61                 rm -rfv "/${i}"
  62         done
  63 fi
  64 rm -vf \
  65         /opt/pakfire/db/installed/meta-netbpm \
  66         /opt/pakfire/db/meta/meta-netbpm \
  67         /opt/pakfire/db/rootfiles/netbpm
  68
  69 # Stop services
  70 /etc/init.d/squid stop
  71 /usr/local/bin/openvpnctrl -k
  72 /usr/local/bin/openvpnctrl -kn2n
  73 /etc/init.d/suricata stop
  74
  75 # Extract files
  76 extract_files
  77
  78 # update linker config
  79 ldconfig
  80
  81 # Run IDSv4 converter
  82 convert-ids-backend-files
  83
  84 # Update Language cache
  85 /usr/local/bin/update-lang-cache
  86
  87 # Filesytem cleanup
  88 /usr/local/bin/filesystem-cleanup
  89
  90 # Delete orphaned Oinkmaster and Suricata default ruleset
  91 rm -vf \
  92         /usr/local/bin/oinkmaster.pl \
  93         /var/ipfire/suricata/oinkmaster.conf \
  94         /var/ipfire/suricata/suricata-default-rules.yaml
  95
  96 # Apply local configuration to sshd_config
  97 /usr/local/bin/sshctrl
  98
  99 # Apply sysctl changes
 100 /etc/init.d/sysctl start
 101
 102 # Fix permissions of /etc/sudoers.d/
 103 chmod -v 750 /etc/sudoers.d
 104 chmod -v 640 /etc/sudoers.d/*
 105
 106 # Start services
 107 /etc/init.d/fcron restart
 108 /etc/init.d/sshd restart
 109 /etc/init.d/vnstatd restart
 110 /etc/init.d/squid start
 111 /usr/local/bin/openvpnctrl -s
 112 /usr/local/bin/openvpnctrl -sn2n
 113 /etc/init.d/suricata start
 114
 115 # This update needs a reboot...
 116 touch /var/run/need_reboot
 117
 118 # Finish
 119 /etc/init.d/fireinfo start
 120 sendprofile
 121
 122 # Update grub config to display new core version
 123 if [ -e /boot/grub/grub.cfg ]; then
 124         grub-mkconfig -o /boot/grub/grub.cfg
 125 fi
 126
 127 sync
 128
 129 # Don't report the exitcode last command
 130 exit 0