config/rootfiles/core/90/update.sh

   1 #!/bin/bash
   2 ############################################################################
   3 #                                                                          #
   4 # This file is part of the IPFire Firewall.                                #
   5 #                                                                          #
   6 # IPFire is free software; you can redistribute it and/or modify           #
   7 # it under the terms of the GNU General Public License as published by     #
   8 # the Free Software Foundation; either version 3 of the License, or        #
   9 # (at your option) any later version.                                      #
  10 #                                                                          #
  11 # IPFire is distributed in the hope that it will be useful,                #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of           #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
  14 # GNU General Public License for more details.                             #
  15 #                                                                          #
  16 # You should have received a copy of the GNU General Public License        #
  17 # along with IPFire; if not, write to the Free Software                    #
  18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
  19 #                                                                          #
  20 # Copyright (C) 2014 IPFire-Team <info@ipfire.org>.                        #
  21 #                                                                          #
  22 ############################################################################
  23 #
  24 . /opt/pakfire/lib/functions.sh
  25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
  26
  27
  28 function find_device() {
  29         local mountpoint="${1}"
  30
  31         local root
  32         local dev mp fs flags rest
  33         while read -r dev mp fs flags rest; do
  34                 # Skip unwanted entries
  35                 [ "${dev}" = "rootfs" ] && continue
  36
  37                 if [ "${mp}" = "${mountpoint}" ] && [ -b "${dev}" ]; then
  38                         root="$(basename "${dev}")"
  39                         break
  40                 fi
  41         done < /proc/mounts
  42
  43         # Get the actual device from the partition that holds /
  44         while [ -n "${root}" ]; do
  45                 if [ -e "/sys/block/${root}" ]; then
  46                         echo "${root}"
  47                         return 0
  48                 fi
  49
  50                 # Remove last character
  51                 root="${root::-1}"
  52         done
  53
  54         return 1
  55 }
  56
  57
  58 #
  59 # Remove old core updates from pakfire cache to save space...
  60 core=90
  61 for (( i=1; i<=${core}; i++ ))
  62 do
  63         rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
  64 done
  65
  66 #
  67 # Do some sanity checks.
  68 case $(uname -r) in
  69         *-ipfire-versatile )
  70                 /usr/bin/logger -p syslog.emerg -t ipfire \
  71                         "core-update-${core}: ERROR cannot update. versatile support is dropped."
  72                 # Report no error to pakfire. So it does not try to install it again.
  73                 exit 0
  74                 ;;
  75         *-ipfire* )
  76                 # Ok.
  77                 ;;
  78         * )
  79                 /usr/bin/logger -p syslog.emerg -t ipfire \
  80                         "core-update-${core}: ERROR cannot update. No IPFire Kernel."
  81                 exit 1
  82         ;;
  83 esac
  84
  85
  86 #
  87 #
  88 KVER="xxxKVERxxx"
  89
  90 # Check diskspace on root
  91 ROOTSPACE=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
  92
  93 if [ $ROOTSPACE -lt 100000 ]; then
  94         /usr/bin/logger -p syslog.emerg -t ipfire \
  95                 "core-update-${core}: ERROR cannot update because not enough free space on root."
  96         exit 2
  97 fi
  98
  99
 100 echo
 101 echo Update Kernel to $KVER ...
 102 #
 103 # Remove old kernel, configs, initrd, modules, dtb's ...
 104 #
 105 rm -rf /boot/System.map-*
 106 rm -rf /boot/config-*
 107 rm -rf /boot/ipfirerd-*
 108 rm -rf /boot/initramfs-*
 109 rm -rf /boot/vmlinuz-*
 110 rm -rf /boot/uImage-ipfire-*
 111 rm -rf /boot/uInit-ipfire-*
 112 rm -rf /boot/dtb-*-ipfire-*
 113 rm -rf /lib/modules
 114
 115 case "$(uname -m)" in
 116         armv*)
 117                 # Backup uEnv.txt if exist
 118                 if [ -e /boot/uEnv.txt ]; then
 119                         cp -vf /boot/uEnv.txt /boot/uEnv.txt.org
 120                 fi
 121
 122                 # work around the u-boot folder detection bug
 123                 mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
 124                 mkdir -pv /boot/dtb-$KVER-ipfire-multi
 125                 ;;
 126 esac
 127
 128 #
 129 #Stop services
 130 /etc/init.d/snort stop
 131 /etc/init.d/squid stop
 132 /etc/init.d/ipsec stop
 133 /etc/init.d/apache stop
 134
 135 #
 136 #Extract files
 137 tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p --numeric-owner -C /
 138
 139 # Check diskspace on boot
 140 BOOTSPACE=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
 141
 142 if [ $BOOTSPACE -lt 1000 ]; then
 143         case $(uname -r) in
 144                 *-ipfire-kirkwood )
 145                         # Special handling for old kirkwood images.
 146                         # (install only kirkwood kernel)
 147                         rm -rf /boot/*
 148                         # work around the u-boot folder detection bug
 149                         mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
 150                         tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p \
 151                                 --numeric-owner -C / --wildcards 'boot/*-kirkwood*'
 152                         ;;
 153                 * )
 154                         /usr/bin/logger -p syslog.emerg -t ipfire \
 155                                 "core-update-${core}: FATAL-ERROR space run out on boot. System is not bootable..."
 156                         /etc/init.d/apache start
 157                         exit 4
 158                         ;;
 159         esac
 160 fi
 161
 162 # Create GeoIP related files if they do not exist yet.
 163 if [ ! -e "/var/ipfire/firewall/geoipblock" ]; then
 164         touch /var/ipfire/firewall/geoipblock
 165         chown nobody:nobody /var/ipfire/firewall/geoipblock
 166
 167         # Insert default value into file.
 168         echo "GEOIPBLOCK_ENABLED=off" >> /var/ipfire/firewall/geoipblock
 169 fi
 170 if [ ! -e "/var/ipfire/fwhosts/customgeoipgrp" ]; then
 171         touch /var/ipfire/fwhosts/customgeoipgrp
 172         chown nobody:nobody /var/ipfire/fwhosts/customgeoipgrp
 173 fi
 174
 175 # Download/Update GeoIP databases.
 176 /usr/local/bin/xt_geoip_update
 177
 178 # Update crontab
 179 grep -q /usr/local/bin/xt_geoip_update /var/spool/cron/root.orig || cat <<EOF >> /var/spool/cron/root.orig
 180
 181 # Update GeoIP database once a month.
 182 %monthly,random * * * [ -f "/var/ipfire/red/active" ] && /usr/local/bin/xt_geoip_update >/dev/null 2>&1
 183 EOF
 184
 185 fcrontab -z &>/dev/null
 186
 187
 188 # Update Language cache
 189 perl -e "require '/var/ipfire/lang.pl'; &Lang::BuildCacheLang"
 190
 191 #
 192 # Start services
 193 #
 194 /etc/init.d/apache start
 195 /etc/init.d/squid start
 196 /etc/init.d/snort start
 197 if [ `grep "ENABLED=on" /var/ipfire/vpn/settings` ]; then
 198         /etc/init.d/ipsec start
 199 fi
 200
 201 case "$(uname -m)" in
 202         i?86)
 203         case "$(find_device "/")" in
 204                 xvd* )
 205                         echo Skip remove grub2 files, because pygrub fail.
 206                         rm -f /boot/grub/*
 207                         echo config will recreated by linux-pae install.
 208                         ;;
 209                 * )
 210                         #
 211                         # Update to GRUB2 config
 212                         #
 213                         grub-mkconfig > /boot/grub/grub.cfg
 214                         ;;
 215         esac
 216 esac
 217
 218 # Force (re)install pae kernel if pae is supported
 219 rm -rf /opt/pakfire/db/*/meta-linux-pae
 220 if [ ! "$(grep "^flags.* pae " /proc/cpuinfo)" == "" ]; then
 221         ROOTSPACE=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
 222         BOOTSPACE=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
 223         if [ $BOOTSPACE -lt 12000 -o $ROOTSPACE -lt 90000 ]; then
 224                 /usr/bin/logger -p syslog.emerg -t ipfire \
 225                         "core-update-${core}: WARNING not enough space for pae kernel."
 226         else
 227                 echo "Name: linux-pae" > /opt/pakfire/db/installed/meta-linux-pae
 228                 echo "ProgVersion: 0" >> /opt/pakfire/db/installed/meta-linux-pae
 229                 echo "Release: 0"     >> /opt/pakfire/db/installed/meta-linux-pae
 230                 echo "Name: linux-pae" > /opt/pakfire/db/meta/meta-linux-pae
 231                 echo "ProgVersion: 0" >> /opt/pakfire/db/meta/meta-linux-pae
 232                 echo "Release: 0"     >> /opt/pakfire/db/meta/meta-linux-pae
 233         fi
 234 fi
 235
 236 #
 237 # After pakfire has ended run it again and update the lists and do upgrade
 238 #
 239 echo '#!/bin/bash'                                        >  /tmp/pak_update
 240 echo 'while [ "$(ps -A | grep " update.sh")" != "" ]; do' >> /tmp/pak_update
 241 echo '    sleep 1'                                        >> /tmp/pak_update
 242 echo 'done'                                               >> /tmp/pak_update
 243 echo 'while [ "$(ps -A | grep " pakfire")" != "" ]; do'   >> /tmp/pak_update
 244 echo '    sleep 1'                                        >> /tmp/pak_update
 245 echo 'done'                                               >> /tmp/pak_update
 246 echo '/opt/pakfire/pakfire update -y --force'             >> /tmp/pak_update
 247 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 248 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 249 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 250 echo '/usr/bin/logger -p syslog.emerg -t ipfire "Core-upgrade finished. If you use a customized grub/uboot config"' >> /tmp/pak_update
 251 echo '/usr/bin/logger -p syslog.emerg -t ipfire "Check it before reboot !!!"' >> /tmp/pak_update
 252 echo '/usr/bin/logger -p syslog.emerg -t ipfire " *** Please reboot... *** "' >> /tmp/pak_update
 253 echo 'touch /var/run/need_reboot ' >> /tmp/pak_update
 254 #
 255 killall -KILL pak_update
 256 chmod +x /tmp/pak_update
 257 /tmp/pak_update &
 258
 259 sync
 260
 261 #
 262 #Finish
 263 (
 264         /etc/init.d/fireinfo start
 265         sendprofile
 266 ) >/dev/null 2>&1 &
 267
 268 echo
 269 echo Please wait until pakfire has ended...
 270 echo
 271
 272 # Don't report the exitcode last command
 273 exit 0
 274