]> git.ipfire.org Git - ipfire-2.x.git/blob - config/rootfiles/core/38/update.sh
Removed unsupported ipsec debug options and modp768.
[ipfire-2.x.git] / config / rootfiles / core / 38 / update.sh
1 #!/bin/bash
2 ############################################################################
3 # #
4 # This file is part of the IPFire Firewall. #
5 # #
6 # IPFire is free software; you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation; either version 3 of the License, or #
9 # (at your option) any later version. #
10 # #
11 # IPFire is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
15 # #
16 # You should have received a copy of the GNU General Public License #
17 # along with IPFire; if not, write to the Free Software #
18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
19 # #
20 # Copyright (C) 2010 IPFire-Team <info@ipfire.org>. #
21 # #
22 ############################################################################
23 #
24 . /opt/pakfire/lib/functions.sh
25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
26 #
27 KVER="2.6.32.12"
28 ROOT=`grep "root=" /boot/grub/grub.conf | cut -d"=" -f2 | cut -d" " -f1 | tail -n 1`
29 MOUNT=`grep "kernel" /boot/grub/grub.conf | tail -n 1`
30 # Nur den letzten Parameter verwenden
31 echo $MOUNT > /dev/null
32 MOUNT=$_
33 if [ ! $MOUNT == "rw" ]; then
34 MOUNT="ro"
35 fi
36 #
37 # check if we the backup file already exist
38 if [ -e /var/ipfire/backup/core-upgrade_$KVER.tar.bz2 ]; then
39 echo Moving backup to backup-old ...
40 mv -f /var/ipfire/backup/core-upgrade_$KVER.tar.bz2 \
41 /var/ipfire/backup/core-upgrade_$KVER-old.tar.bz2
42 fi
43 echo First we made a backup of all files that was inside of the
44 echo update archive. This may take a while ...
45 # Add some files that are not in the package to backup
46 echo lib/modules >> /opt/pakfire/tmp/ROOTFILES
47 echo boot >> /opt/pakfire/tmp/ROOTFILES
48 echo etc/sysconfig/lm_sensors >> /opt/pakfire/tmp/ROOTFILES
49 echo usr/lib/ipsec >> /opt/pakfire/tmp/ROOTFILES
50 echo usr/libexec/ipsec >> /opt/pakfire/tmp/ROOTFILES
51 tar cjvf /var/ipfire/backup/core-upgrade_$KVER.tar.bz2 \
52 -C / -T /opt/pakfire/tmp/ROOTFILES --exclude='#*' > /dev/null 2>&1
53 echo
54 echo Update Kernel to $KVER ...
55 # Remove old kernel, configs, initrd, modules ...
56 #
57 rm -rf /boot/System.map-*
58 rm -rf /boot/config-*
59 rm -rf /boot/ipfirerd-*
60 rm -rf /boot/vmlinuz-*
61 # Don't remove old xen modules. Kernel may stored outside.
62 rm -rf /lib/modules/*-ipfire
63
64 #
65 # remove openswan libs ...
66 #
67 rm -rf /usr/lib/ipsec
68 rm -rf /usr/libexec/ipsec
69
70 #
71 # Stop Sevices
72 #
73 /etc/init.d/collectd stop
74 /etc/init.d/squid stop
75
76 #
77 # Backup grub.conf
78 #
79 cp -vf /boot/grub/grub.conf /boot/grub/grub.conf.org
80 #
81 # Unpack the updated files
82 #
83 echo
84 echo Unpack the updated files ...
85 #
86 tar xvf /opt/pakfire/tmp/files --preserve --numeric-owner -C / \
87 --no-overwrite-dir
88 #
89 # Modify grub.conf
90 #
91 echo
92 echo Update grub configuration ...
93 sed -i "s|ROOT|$ROOT|g" /boot/grub/grub.conf
94 sed -i "s|KVER|$KVER|g" /boot/grub/grub.conf
95 sed -i "s|MOUNT|$MOUNT|g" /boot/grub/grub.conf
96
97 if [ "$(grep "^serial" /boot/grub/grub.conf.org)" == "" ]; then
98 echo "grub use default console ..."
99 else
100 echo "grub use serial console ..."
101 sed -i -e "s|splashimage|#splashimage|g" /boot/grub/grub.conf
102 sed -i -e "s|#serial|serial|g" /boot/grub/grub.conf
103 sed -i -e "s|#terminal|terminal|g" /boot/grub/grub.conf
104 sed -i -e "s| panic=10 | console=ttyS0,38400n8 panic=10 |g" /boot/grub/grub.conf
105 fi
106 #
107 # Made emergency - initramdisk
108 #
109 echo
110 echo Create new Initramdisks ...
111 cp -f /etc/mkinitcpio.conf /etc/mkinitcpio.conf.org
112 sed -i "s| autodetect | |g" /etc/mkinitcpio.conf
113 mkinitcpio -k $KVER-ipfire -g /boot/ipfirerd-$KVER-emergency.img
114 cp -f /etc/mkinitcpio.conf.org /etc/mkinitcpio.conf
115 #
116 # Made initramdisk
117 #
118 if [ "${ROOT:0:7}" == "/dev/sd" ]; then
119 # Remove ide hook if root is on sda
120 sed -i "s| ide | |g" /etc/mkinitcpio.conf
121 else
122 if [ "${ROOT:0:7}" == "/dev/hd" ]; then
123 # Remove pata & sata hook if root is on hda
124 sed -i "s| pata | |g" /etc/mkinitcpio.conf
125 sed -i "s| sata | |g" /etc/mkinitcpio.conf
126 fi
127 fi
128 mkinitcpio -k $KVER-ipfire -g /boot/ipfirerd-$KVER.img
129 #
130 # ReInstall grub
131 #
132 grub-install --no-floppy ${ROOT::`expr length $ROOT`-1} --recheck
133 #
134 # Rebuild Language
135 #
136 perl -e "require '/var/ipfire/lang.pl'; &Lang::BuildCacheLang"
137 #
138 # Delete old lm-sensor modullist...
139 #
140 rm -rf /etc/sysconfig/lm_sensors
141 #
142 # Cleanup Collectd statistics...
143 #
144 PRECLEAN=`du -sh /var/log/rrd/collectd`
145 #
146 rm -rf /var/log/rrd*/collectd/localhost/processes-*/ps_count*
147 rm -rf /var/log/rrd*/collectd/localhost/processes-*/ps_pagefaults*
148 rm -rf /var/log/rrd*/collectd/localhost/processes-*/ps_stacksize*
149 rm -rf /var/log/rrd*/collectd/localhost/processes-*/ps_state*
150 rm -rf /var/log/rrd*/collectd/localhost/processes-*/ps_vm*
151 #
152 rm -rf /var/log/rrd*/collectd/localhost/interface/if_errors*
153 rm -rf /var/log/rrd*/collectd/localhost/interface/if_packets*
154 #
155 rm -rf /var/log/rrd*/collectd/localhost/disk-*/disk_merged*
156 rm -rf /var/log/rrd*/collectd/localhost/disk-*/disk_ops*
157 rm -rf /var/log/rrd*/collectd/localhost/disk-*/disk_time*
158 POSTCLEAN=`du -sh /var/log/rrd/collectd`
159 #
160 echo Cleaned up collectd directory from $PRECLEAN to $POSTCLEAN size.
161 #
162 # USB Modeswitch conf now called setup, rename ...
163 #
164 if [ -e /etc/usb_modeswitch.conf ]; then
165 mv -f /etc/usb_modeswitch.conf /etc/usb_modeswitch.setup
166 fi
167 #
168 # rebuild qosscript if enabled...
169 if [ -e /var/ipfire/qos/enable ]; then
170 /usr/local/bin/qosctrl stop
171 fi
172 /usr/local/bin/qosctrl generate
173 if [ -e /var/ipfire/qos/enable ]; then
174 /usr/local/bin/qosctrl start
175 fi
176 #
177 #
178 # convert ipsec.conf from openswan to strongswan...
179 mv /var/ipfire/vpn/ipsec.conf /var/ipfire/vpn/ipsec.conf.org
180 cat /var/ipfire/vpn/ipsec.conf.org | \
181 grep -v "disablearrivalcheck=" | \
182 grep -v "klipsdebug=" | \
183 grep -v "leftfirewall=" | \
184 grep -v "charonstart=" | \
185 grep -v "aggrmode=" > /var/ipfire/vpn/ipsec.conf
186 sed -i "s|ipsec[0-9]=||g" /var/ipfire/vpn/ipsec.conf
187 sed -i "s|nat_t ||g" /var/ipfire/vpn/ipsec.conf
188 sed -i "s|klips ||g" /var/ipfire/vpn/ipsec.conf
189 sed -i "s|^conn [A-Za-z].*$|&\n\tleftfirewall=yes|g" /var/ipfire/vpn/ipsec.conf
190 sed -i "s|^config setup$|&\n\tcharonstart=no|g" /var/ipfire/vpn/ipsec.conf
191 chown nobody:nobody /var/ipfire/vpn/ipsec.conf
192 chmod 644 /var/ipfire/vpn/ipsec.conf
193 #
194 #
195 # Start Sevices
196 #
197 /etc/init.d/squid start
198 #
199 # This core-update need a reboot
200 /usr/bin/logger -p syslog.emerg -t core-upgrade-38 "Upgrade finished. If you use a customized grub.cfg"
201 /usr/bin/logger -p syslog.emerg -t core-upgrade-38 "Check it before reboot !!!"
202 /usr/bin/logger -p syslog.emerg -t core-upgrade-38 " *** Please reboot... *** "