config/rootfiles/core/90/update.sh

   1 #!/bin/bash
   2 ############################################################################
   3 #                                                                          #
   4 # This file is part of the IPFire Firewall.                                #
   5 #                                                                          #
   6 # IPFire is free software; you can redistribute it and/or modify           #
   7 # it under the terms of the GNU General Public License as published by     #
   8 # the Free Software Foundation; either version 3 of the License, or        #
   9 # (at your option) any later version.                                      #
  10 #                                                                          #
  11 # IPFire is distributed in the hope that it will be useful,                #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of           #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
  14 # GNU General Public License for more details.                             #
  15 #                                                                          #
  16 # You should have received a copy of the GNU General Public License        #
  17 # along with IPFire; if not, write to the Free Software                    #
  18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
  19 #                                                                          #
  20 # Copyright (C) 2014 IPFire-Team <info@ipfire.org>.                        #
  21 #                                                                          #
  22 ############################################################################
  23 #
  24 . /opt/pakfire/lib/functions.sh
  25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
  26
  27
  28 function find_device() {
  29         local mountpoint="${1}"
  30
  31         local root
  32         local dev mp fs flags rest
  33         while read -r dev mp fs flags rest; do
  34                 # Skip unwanted entries
  35                 [ "${dev}" = "rootfs" ] && continue
  36
  37                 if [ "${mp}" = "${mountpoint}" ] && [ -b "${dev}" ]; then
  38                         root="$(basename "${dev}")"
  39                         break
  40                 fi
  41         done < /proc/mounts
  42
  43         # Get the actual device from the partition that holds /
  44         while [ -n "${root}" ]; do
  45                 if [ -e "/sys/block/${root}" ]; then
  46                         echo "${root}"
  47                         return 0
  48                 fi
  49
  50                 # Remove last character
  51                 root="${root::-1}"
  52         done
  53
  54         return 1
  55 }
  56
  57
  58 #
  59 # Remove old core updates from pakfire cache to save space...
  60 core=90
  61 for (( i=1; i<=${core}; i++ ))
  62 do
  63         rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
  64 done
  65
  66 #
  67 # Do some sanity checks.
  68 case $(uname -r) in
  69         *-ipfire-versatile )
  70                 /usr/bin/logger -p syslog.emerg -t ipfire \
  71                         "core-update-${core}: ERROR cannot update. versatile support is dropped."
  72                 # Report no error to pakfire. So it does not try to install it again.
  73                 exit 0
  74                 ;;
  75         *-ipfire* )
  76                 # Ok.
  77                 ;;
  78         * )
  79                 /usr/bin/logger -p syslog.emerg -t ipfire \
  80                         "core-update-${core}: ERROR cannot update. No IPFire Kernel."
  81                 exit 1
  82         ;;
  83 esac
  84
  85
  86 #
  87 #
  88 KVER="xxxKVERxxx"
  89
  90 # Check diskspace on root
  91 ROOTSPACE=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
  92
  93 if [ $ROOTSPACE -lt 100000 ]; then
  94         /usr/bin/logger -p syslog.emerg -t ipfire \
  95                 "core-update-${core}: ERROR cannot update because not enough free space on root."
  96         exit 2
  97 fi
  98
  99
 100 echo
 101 echo Update Kernel to $KVER ...
 102 #
 103 # Remove old kernel, configs, initrd, modules, dtb's ...
 104 #
 105 rm -rf /boot/System.map-*
 106 rm -rf /boot/config-*
 107 rm -rf /boot/ipfirerd-*
 108 rm -rf /boot/initramfs-*
 109 rm -rf /boot/vmlinuz-*
 110 rm -rf /boot/uImage-ipfire-*
 111 rm -rf /boot/uInit-ipfire-*
 112 rm -rf /boot/dtb-*-ipfire-*
 113 rm -rf /lib/modules
 114
 115 case "$(uname -m)" in
 116         armv*)
 117                 # Backup uEnv.txt if exist
 118                 if [ -e /boot/uEnv.txt ]; then
 119                         cp -vf /boot/uEnv.txt /boot/uEnv.txt.org
 120                 fi
 121
 122                 # work around the u-boot folder detection bug
 123                 mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
 124                 mkdir -pv /boot/dtb-$KVER-ipfire-multi
 125                 ;;
 126 esac
 127
 128 #
 129 #Stop services
 130 /etc/init.d/snort stop
 131 /etc/init.d/squid stop
 132 /etc/init.d/ipsec stop
 133 /etc/init.d/apache stop
 134
 135 # Drop old flag icons, before extracting the new ones.
 136 rm /srv/web/ipfire/html/images/flags/*
 137
 138 #
 139 #Extract files
 140 tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p --numeric-owner -C /
 141
 142 #
 143 # restart init because glibc was updated.
 144 telinit u
 145
 146 # Remove old openssl libraries
 147 rm -vf /usr/lib/libcrypto.so.0.9.8 /usr/lib/libssl.so.0.9.8
 148
 149 # Check diskspace on boot
 150 BOOTSPACE=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
 151
 152 if [ $BOOTSPACE -lt 1000 ]; then
 153         case $(uname -r) in
 154                 *-ipfire-kirkwood )
 155                         # Special handling for old kirkwood images.
 156                         # (install only kirkwood kernel)
 157                         rm -rf /boot/*
 158                         # work around the u-boot folder detection bug
 159                         mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
 160                         tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p \
 161                                 --numeric-owner -C / --wildcards 'boot/*-kirkwood*'
 162                         ;;
 163                 * )
 164                         /usr/bin/logger -p syslog.emerg -t ipfire \
 165                                 "core-update-${core}: FATAL-ERROR space run out on boot. System is not bootable..."
 166                         /etc/init.d/apache start
 167                         exit 4
 168                         ;;
 169         esac
 170 fi
 171
 172 # Create GeoIP related files if they do not exist yet.
 173 if [ ! -e "/var/ipfire/firewall/geoipblock" ]; then
 174         touch /var/ipfire/firewall/geoipblock
 175         chown nobody:nobody /var/ipfire/firewall/geoipblock
 176
 177         # Insert default value into file.
 178         echo "GEOIPBLOCK_ENABLED=off" >> /var/ipfire/firewall/geoipblock
 179 fi
 180 if [ ! -e "/var/ipfire/fwhosts/customgeoipgrp" ]; then
 181         touch /var/ipfire/fwhosts/customgeoipgrp
 182         chown nobody:nobody /var/ipfire/fwhosts/customgeoipgrp
 183 fi
 184
 185 #Fix BUG10812 (openvpn server.conf has wrong collectd logfile path)
 186 if grep -q "status /var/log/ovpnserver.log 30" /var/ipfire/ovpn/server.conf; then
 187         sed -i "s/\/var\/log\/ovpnserver.log 30/\/var\/run\/ovpnserver.log 30/" /var/ipfire/ovpn/server.conf
 188 fi
 189
 190 # Download/Update GeoIP databases.
 191 /usr/local/bin/xt_geoip_update
 192
 193 # Update crontab
 194 grep -q /usr/local/bin/xt_geoip_update /var/spool/cron/root.orig || cat <<EOF >> /var/spool/cron/root.orig
 195
 196 # Update GeoIP database once a month.
 197 %monthly,random * * * [ -f "/var/ipfire/red/active" ] && /usr/local/bin/xt_geoip_update >/dev/null 2>&1
 198 EOF
 199
 200 fcrontab -z &>/dev/null
 201
 202 # Generate ddns configuration file
 203 sudo -u nobody /srv/web/ipfire/cgi-bin/ddns.cgi
 204
 205 # Regenerate IPsec configuration
 206 sudo -u nobody /srv/web/ipfire/cgi-bin/vpnmain.cgi
 207
 208 # Update Language cache
 209 perl -e "require '/var/ipfire/lang.pl'; &Lang::BuildCacheLang"
 210
 211 #
 212 # Start services
 213 #
 214 /etc/init.d/apache start
 215 /etc/init.d/squid start
 216 /etc/init.d/snort start
 217 if [ `grep "ENABLED=on" /var/ipfire/vpn/settings` ]; then
 218         /etc/init.d/ipsec start
 219 fi
 220
 221 case "$(uname -m)" in
 222         i?86)
 223         case "$(find_device "/")" in
 224                 xvd* )
 225                         echo Skip remove grub2 files, because pygrub fail.
 226                         rm -f /boot/grub/*
 227                         echo config will recreated by linux-pae install.
 228                         ;;
 229                 * )
 230                         #
 231                         # Update to GRUB2 config
 232                         #
 233                         grub-mkconfig > /boot/grub/grub.cfg
 234                         ;;
 235         esac
 236 esac
 237
 238 # Upadate Kernel version uEnv.txt
 239 if [ -e /boot/uEnv.txt ]; then
 240         sed -i -e "s/KVER=.*/KVER=${KVER}/g" /boot/uEnv.txt
 241 fi
 242
 243 # call user update script (needed for some arm boards)
 244 if [ -e /boot/pakfire-kernel-update ]; then
 245         /boot/pakfire-kernel-update ${KVER}
 246 fi
 247
 248
 249 # Force (re)install pae kernel if pae is supported
 250 rm -rf /opt/pakfire/db/*/meta-linux-pae
 251 if [ ! "$(grep "^flags.* pae " /proc/cpuinfo)" == "" ]; then
 252         ROOTSPACE=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
 253         BOOTSPACE=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
 254         if [ $BOOTSPACE -lt 12000 -o $ROOTSPACE -lt 90000 ]; then
 255                 /usr/bin/logger -p syslog.emerg -t ipfire \
 256                         "core-update-${core}: WARNING not enough space for pae kernel."
 257         else
 258                 echo "Name: linux-pae" > /opt/pakfire/db/installed/meta-linux-pae
 259                 echo "ProgVersion: 0" >> /opt/pakfire/db/installed/meta-linux-pae
 260                 echo "Release: 0"     >> /opt/pakfire/db/installed/meta-linux-pae
 261                 echo "Name: linux-pae" > /opt/pakfire/db/meta/meta-linux-pae
 262                 echo "ProgVersion: 0" >> /opt/pakfire/db/meta/meta-linux-pae
 263                 echo "Release: 0"     >> /opt/pakfire/db/meta/meta-linux-pae
 264         fi
 265 fi
 266
 267 #
 268 # After pakfire has ended run it again and update the lists and do upgrade
 269 #
 270 echo '#!/bin/bash'                                        >  /tmp/pak_update
 271 echo 'while [ "$(ps -A | grep " update.sh")" != "" ]; do' >> /tmp/pak_update
 272 echo '    sleep 1'                                        >> /tmp/pak_update
 273 echo 'done'                                               >> /tmp/pak_update
 274 echo 'while [ "$(ps -A | grep " pakfire")" != "" ]; do'   >> /tmp/pak_update
 275 echo '    sleep 1'                                        >> /tmp/pak_update
 276 echo 'done'                                               >> /tmp/pak_update
 277 echo '/opt/pakfire/pakfire update -y --force'             >> /tmp/pak_update
 278 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 279 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 280 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 281 echo '/usr/bin/logger -p syslog.emerg -t ipfire "Core-upgrade finished. If you use a customized grub/uboot config"' >> /tmp/pak_update
 282 echo '/usr/bin/logger -p syslog.emerg -t ipfire "Check it before reboot !!!"' >> /tmp/pak_update
 283 echo '/usr/bin/logger -p syslog.emerg -t ipfire " *** Please reboot... *** "' >> /tmp/pak_update
 284 echo 'touch /var/run/need_reboot ' >> /tmp/pak_update
 285 #
 286 killall -KILL pak_update
 287 chmod +x /tmp/pak_update
 288 /tmp/pak_update &
 289
 290 sync
 291
 292 #
 293 #Finish
 294 (
 295         /etc/init.d/fireinfo start
 296         sendprofile
 297 ) >/dev/null 2>&1 &
 298
 299 echo
 300 echo Please wait until pakfire has ended...
 301 echo
 302
 303 # Don't report the exitcode last command
 304 exit 0
 305