2 ############################################################################
4 # This file is part of the IPFire Firewall. #
6 # IPFire is free software; you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation; either version 3 of the License, or #
9 # (at your option) any later version. #
11 # IPFire is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
16 # You should have received a copy of the GNU General Public License #
17 # along with IPFire; if not, write to the Free Software #
18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
20 # Copyright (C) 2014 IPFire-Team <info@ipfire.org>. #
22 ############################################################################
24 .
/opt
/pakfire
/lib
/functions.sh
25 /usr
/local
/bin
/backupctrl exclude
>/dev
/null
2>&1
28 function find_device
() {
29 local mountpoint
="${1}"
32 local dev mp fs flags rest
33 while read -r dev mp fs flags rest
; do
34 # Skip unwanted entries
35 [ "${dev}" = "rootfs" ] && continue
37 if [ "${mp}" = "${mountpoint}" ] && [ -b "${dev}" ]; then
38 root
="$(basename "${dev}")"
43 # Get the actual device from the partition that holds /
44 while [ -n "${root}" ]; do
45 if [ -e "/sys/block/${root}" ]; then
50 # Remove last character
59 # Remove old core updates from pakfire cache to save space...
61 for (( i
=1; i
<=${core}; i
++ ))
63 rm -f /var
/cache
/pakfire
/core-upgrade-
*-$i.ipfire
67 # Do some sanity checks.
70 /usr
/bin
/logger
-p syslog.emerg
-t ipfire \
71 "core-update-${core}: ERROR cannot update. versatile support is dropped."
72 # Report no error to pakfire. So it does not try to install it again.
79 /usr
/bin
/logger
-p syslog.emerg
-t ipfire \
80 "core-update-${core}: ERROR cannot update. No IPFire Kernel."
90 # Check diskspace on root
91 ROOTSPACE
=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
93 if [ $ROOTSPACE -lt 100000 ]; then
94 /usr
/bin
/logger
-p syslog.emerg
-t ipfire \
95 "core-update-${core}: ERROR cannot update because not enough free space on root."
101 echo Update Kernel to
$KVER ...
103 # Remove old kernel, configs, initrd, modules, dtb's ...
105 rm -rf /boot
/System.map-
*
106 rm -rf /boot
/config-
*
107 rm -rf /boot
/ipfirerd-
*
108 rm -rf /boot
/initramfs-
*
109 rm -rf /boot
/vmlinuz-
*
110 rm -rf /boot
/uImage-ipfire-
*
111 rm -rf /boot
/uInit-ipfire-
*
112 rm -rf /boot
/dtb-
*-ipfire-*
115 case "$(uname -m)" in
117 # Backup uEnv.txt if exist
118 if [ -e /boot
/uEnv.txt
]; then
119 cp -vf /boot
/uEnv.txt
/boot
/uEnv.txt.org
122 # work around the u-boot folder detection bug
123 mkdir
-pv /boot
/dtb-
$KVER-ipfire-kirkwood
124 mkdir
-pv /boot
/dtb-
$KVER-ipfire-multi
130 /etc
/init.d
/snort stop
131 /etc
/init.d
/squid stop
132 /etc
/init.d
/ipsec stop
133 /etc
/init.d
/apache stop
137 tar xavf
/opt
/pakfire
/tmp
/files
* --no-overwrite-dir -p --numeric-owner -C /
139 # Remove old openssl libraries
140 rm -vf /usr
/lib
/libcrypto.so
.0.9.8 /usr
/lib
/libssl.so
.0.9.8
142 # Check diskspace on boot
143 BOOTSPACE
=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
145 if [ $BOOTSPACE -lt 1000 ]; then
148 # Special handling for old kirkwood images.
149 # (install only kirkwood kernel)
151 # work around the u-boot folder detection bug
152 mkdir
-pv /boot
/dtb-
$KVER-ipfire-kirkwood
153 tar xavf
/opt
/pakfire
/tmp
/files
* --no-overwrite-dir -p \
154 --numeric-owner -C / --wildcards 'boot/*-kirkwood*'
157 /usr
/bin
/logger
-p syslog.emerg
-t ipfire \
158 "core-update-${core}: FATAL-ERROR space run out on boot. System is not bootable..."
159 /etc
/init.d
/apache start
165 # Create GeoIP related files if they do not exist yet.
166 if [ ! -e "/var/ipfire/firewall/geoipblock" ]; then
167 touch /var
/ipfire
/firewall
/geoipblock
168 chown nobody
:nobody
/var
/ipfire
/firewall
/geoipblock
170 # Insert default value into file.
171 echo "GEOIPBLOCK_ENABLED=off" >> /var
/ipfire
/firewall
/geoipblock
173 if [ ! -e "/var/ipfire/fwhosts/customgeoipgrp" ]; then
174 touch /var
/ipfire
/fwhosts
/customgeoipgrp
175 chown nobody
:nobody
/var
/ipfire
/fwhosts
/customgeoipgrp
178 #Fix BUG10812 (openvpn server.conf has wrong collectd logfile path)
179 if grep -q "status /var/log/ovpnserver.log 30" /var
/ipfire
/ovpn
/server.conf
; then
180 sed -i "s/\/var\/log\/ovpnserver.log 30/\/var\/run\/ovpnserver.log 30/" /var
/ipfire
/ovpn
/server.conf
183 # Download/Update GeoIP databases.
184 /usr
/local
/bin
/xt_geoip_update
187 grep -q /usr
/local
/bin
/xt_geoip_update
/var
/spool
/cron
/root.orig ||
cat <<EOF >> /var/spool/cron/root.orig
189 # Update GeoIP database once a month.
190 %monthly,random * * * [ -f "/var/ipfire/red/active" ] && /usr/local/bin/xt_geoip_update >/dev/null 2>&1
193 fcrontab
-z &>/dev
/null
195 # Generate ddns configuration file
196 sudo
-u nobody
/srv
/web
/ipfire
/cgi-bin
/ddns.cgi
198 # Update Language cache
199 perl
-e "require '/var/ipfire/lang.pl'; &Lang::BuildCacheLang"
204 /etc
/init.d
/apache start
205 /etc
/init.d
/squid start
206 /etc
/init.d
/snort start
207 if [ `grep "ENABLED=on" /var/ipfire/vpn/settings` ]; then
208 /etc
/init.d
/ipsec start
211 case "$(uname -m)" in
213 case "$(find_device "/")" in
215 echo Skip remove grub2 files
, because pygrub fail.
217 echo config will recreated by linux-pae
install.
221 # Update to GRUB2 config
223 grub-mkconfig
> /boot
/grub
/grub.cfg
228 # Force (re)install pae kernel if pae is supported
229 rm -rf /opt
/pakfire
/db
/*/meta-linux-pae
230 if [ ! "$(grep "^flags.
* pae
" /proc/cpuinfo)" == "" ]; then
231 ROOTSPACE
=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
232 BOOTSPACE
=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
233 if [ $BOOTSPACE -lt 12000 -o $ROOTSPACE -lt 90000 ]; then
234 /usr
/bin
/logger
-p syslog.emerg
-t ipfire \
235 "core-update-${core}: WARNING not enough space for pae kernel."
237 echo "Name: linux-pae" > /opt
/pakfire
/db
/installed
/meta-linux-pae
238 echo "ProgVersion: 0" >> /opt
/pakfire
/db
/installed
/meta-linux-pae
239 echo "Release: 0" >> /opt
/pakfire
/db
/installed
/meta-linux-pae
240 echo "Name: linux-pae" > /opt
/pakfire
/db
/meta
/meta-linux-pae
241 echo "ProgVersion: 0" >> /opt
/pakfire
/db
/meta
/meta-linux-pae
242 echo "Release: 0" >> /opt
/pakfire
/db
/meta
/meta-linux-pae
247 # After pakfire has ended run it again and update the lists and do upgrade
249 echo '#!/bin/bash' > /tmp
/pak_update
250 echo 'while [ "$(ps -A | grep " update.sh")" != "" ]; do' >> /tmp
/pak_update
251 echo ' sleep 1' >> /tmp
/pak_update
252 echo 'done' >> /tmp
/pak_update
253 echo 'while [ "$(ps -A | grep " pakfire")" != "" ]; do' >> /tmp
/pak_update
254 echo ' sleep 1' >> /tmp
/pak_update
255 echo 'done' >> /tmp
/pak_update
256 echo '/opt/pakfire/pakfire update -y --force' >> /tmp
/pak_update
257 echo '/opt/pakfire/pakfire upgrade -y' >> /tmp
/pak_update
258 echo '/opt/pakfire/pakfire upgrade -y' >> /tmp
/pak_update
259 echo '/opt/pakfire/pakfire upgrade -y' >> /tmp
/pak_update
260 echo '/usr/bin/logger -p syslog.emerg -t ipfire "Core-upgrade finished. If you use a customized grub/uboot config"' >> /tmp
/pak_update
261 echo '/usr/bin/logger -p syslog.emerg -t ipfire "Check it before reboot !!!"' >> /tmp
/pak_update
262 echo '/usr/bin/logger -p syslog.emerg -t ipfire " *** Please reboot... *** "' >> /tmp
/pak_update
263 echo 'touch /var/run/need_reboot ' >> /tmp
/pak_update
265 killall
-KILL pak_update
266 chmod +x
/tmp
/pak_update
274 /etc
/init.d
/fireinfo start
279 echo Please
wait until pakfire has ended...
282 # Don't report the exitcode last command