config/rootfiles/core/90/update.sh

   1 #!/bin/bash
   2 ############################################################################
   3 #                                                                          #
   4 # This file is part of the IPFire Firewall.                                #
   5 #                                                                          #
   6 # IPFire is free software; you can redistribute it and/or modify           #
   7 # it under the terms of the GNU General Public License as published by     #
   8 # the Free Software Foundation; either version 3 of the License, or        #
   9 # (at your option) any later version.                                      #
  10 #                                                                          #
  11 # IPFire is distributed in the hope that it will be useful,                #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of           #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
  14 # GNU General Public License for more details.                             #
  15 #                                                                          #
  16 # You should have received a copy of the GNU General Public License        #
  17 # along with IPFire; if not, write to the Free Software                    #
  18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
  19 #                                                                          #
  20 # Copyright (C) 2014 IPFire-Team <info@ipfire.org>.                        #
  21 #                                                                          #
  22 ############################################################################
  23 #
  24 . /opt/pakfire/lib/functions.sh
  25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
  26
  27
  28 function find_device() {
  29         local mountpoint="${1}"
  30
  31         local root
  32         local dev mp fs flags rest
  33         while read -r dev mp fs flags rest; do
  34                 # Skip unwanted entries
  35                 [ "${dev}" = "rootfs" ] && continue
  36
  37                 if [ "${mp}" = "${mountpoint}" ] && [ -b "${dev}" ]; then
  38                         root="$(basename "${dev}")"
  39                         break
  40                 fi
  41         done < /proc/mounts
  42
  43         # Get the actual device from the partition that holds /
  44         while [ -n "${root}" ]; do
  45                 if [ -e "/sys/block/${root}" ]; then
  46                         echo "${root}"
  47                         return 0
  48                 fi
  49
  50                 # Remove last character
  51                 root="${root::-1}"
  52         done
  53
  54         return 1
  55 }
  56
  57
  58 #
  59 # Remove old core updates from pakfire cache to save space...
  60 core=90
  61 for (( i=1; i<=${core}; i++ ))
  62 do
  63         rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
  64 done
  65
  66 #
  67 # Do some sanity checks.
  68 case $(uname -r) in
  69         *-ipfire-versatile )
  70                 /usr/bin/logger -p syslog.emerg -t ipfire \
  71                         "core-update-${core}: ERROR cannot update. versatile support is dropped."
  72                 # Report no error to pakfire. So it does not try to install it again.
  73                 exit 0
  74                 ;;
  75         *-ipfire* )
  76                 # Ok.
  77                 ;;
  78         * )
  79                 /usr/bin/logger -p syslog.emerg -t ipfire \
  80                         "core-update-${core}: ERROR cannot update. No IPFire Kernel."
  81                 exit 1
  82         ;;
  83 esac
  84
  85
  86 #
  87 #
  88 KVER="xxxKVERxxx"
  89
  90 # Check diskspace on root
  91 ROOTSPACE=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
  92
  93 if [ $ROOTSPACE -lt 100000 ]; then
  94         /usr/bin/logger -p syslog.emerg -t ipfire \
  95                 "core-update-${core}: ERROR cannot update because not enough free space on root."
  96         exit 2
  97 fi
  98
  99
 100 echo
 101 echo Update Kernel to $KVER ...
 102 #
 103 # Remove old kernel, configs, initrd, modules, dtb's ...
 104 #
 105 rm -rf /boot/System.map-*
 106 rm -rf /boot/config-*
 107 rm -rf /boot/ipfirerd-*
 108 rm -rf /boot/initramfs-*
 109 rm -rf /boot/vmlinuz-*
 110 rm -rf /boot/uImage-ipfire-*
 111 rm -rf /boot/uInit-ipfire-*
 112 rm -rf /boot/dtb-*-ipfire-*
 113 rm -rf /lib/modules
 114
 115 case "$(uname -m)" in
 116         armv*)
 117                 # Backup uEnv.txt if exist
 118                 if [ -e /boot/uEnv.txt ]; then
 119                         cp -vf /boot/uEnv.txt /boot/uEnv.txt.org
 120                 fi
 121
 122                 # work around the u-boot folder detection bug
 123                 mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
 124                 mkdir -pv /boot/dtb-$KVER-ipfire-multi
 125                 ;;
 126 esac
 127
 128 #
 129 #Stop services
 130 /etc/init.d/snort stop
 131 /etc/init.d/squid stop
 132 /etc/init.d/ipsec stop
 133 /etc/init.d/apache stop
 134
 135 #
 136 #Extract files
 137 tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p --numeric-owner -C /
 138
 139 # Remove old openssl libraries
 140 rm -vf /usr/lib/libcrypto.so.0.9.8 /usr/lib/libssl.so.0.9.8
 141
 142 # Check diskspace on boot
 143 BOOTSPACE=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
 144
 145 if [ $BOOTSPACE -lt 1000 ]; then
 146         case $(uname -r) in
 147                 *-ipfire-kirkwood )
 148                         # Special handling for old kirkwood images.
 149                         # (install only kirkwood kernel)
 150                         rm -rf /boot/*
 151                         # work around the u-boot folder detection bug
 152                         mkdir -pv /boot/dtb-$KVER-ipfire-kirkwood
 153                         tar xavf /opt/pakfire/tmp/files* --no-overwrite-dir -p \
 154                                 --numeric-owner -C / --wildcards 'boot/*-kirkwood*'
 155                         ;;
 156                 * )
 157                         /usr/bin/logger -p syslog.emerg -t ipfire \
 158                                 "core-update-${core}: FATAL-ERROR space run out on boot. System is not bootable..."
 159                         /etc/init.d/apache start
 160                         exit 4
 161                         ;;
 162         esac
 163 fi
 164
 165 # Create GeoIP related files if they do not exist yet.
 166 if [ ! -e "/var/ipfire/firewall/geoipblock" ]; then
 167         touch /var/ipfire/firewall/geoipblock
 168         chown nobody:nobody /var/ipfire/firewall/geoipblock
 169
 170         # Insert default value into file.
 171         echo "GEOIPBLOCK_ENABLED=off" >> /var/ipfire/firewall/geoipblock
 172 fi
 173 if [ ! -e "/var/ipfire/fwhosts/customgeoipgrp" ]; then
 174         touch /var/ipfire/fwhosts/customgeoipgrp
 175         chown nobody:nobody /var/ipfire/fwhosts/customgeoipgrp
 176 fi
 177
 178 #Fix BUG10812 (openvpn server.conf has wrong collectd logfile path)
 179 if grep -q "status /var/log/ovpnserver.log 30" /var/ipfire/ovpn/server.conf; then
 180         sed -i "s/\/var\/log\/ovpnserver.log 30/\/var\/run\/ovpnserver.log 30/" /var/ipfire/ovpn/server.conf
 181 fi
 182
 183 # Download/Update GeoIP databases.
 184 /usr/local/bin/xt_geoip_update
 185
 186 # Update crontab
 187 grep -q /usr/local/bin/xt_geoip_update /var/spool/cron/root.orig || cat <<EOF >> /var/spool/cron/root.orig
 188
 189 # Update GeoIP database once a month.
 190 %monthly,random * * * [ -f "/var/ipfire/red/active" ] && /usr/local/bin/xt_geoip_update >/dev/null 2>&1
 191 EOF
 192
 193 fcrontab -z &>/dev/null
 194
 195 # Generate ddns configuration file
 196 sudo -u nobody /srv/web/ipfire/cgi-bin/ddns.cgi
 197
 198 # Update Language cache
 199 perl -e "require '/var/ipfire/lang.pl'; &Lang::BuildCacheLang"
 200
 201 #
 202 # Start services
 203 #
 204 /etc/init.d/apache start
 205 /etc/init.d/squid start
 206 /etc/init.d/snort start
 207 if [ `grep "ENABLED=on" /var/ipfire/vpn/settings` ]; then
 208         /etc/init.d/ipsec start
 209 fi
 210
 211 case "$(uname -m)" in
 212         i?86)
 213         case "$(find_device "/")" in
 214                 xvd* )
 215                         echo Skip remove grub2 files, because pygrub fail.
 216                         rm -f /boot/grub/*
 217                         echo config will recreated by linux-pae install.
 218                         ;;
 219                 * )
 220                         #
 221                         # Update to GRUB2 config
 222                         #
 223                         grub-mkconfig > /boot/grub/grub.cfg
 224                         ;;
 225         esac
 226 esac
 227
 228 # Force (re)install pae kernel if pae is supported
 229 rm -rf /opt/pakfire/db/*/meta-linux-pae
 230 if [ ! "$(grep "^flags.* pae " /proc/cpuinfo)" == "" ]; then
 231         ROOTSPACE=`df / -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
 232         BOOTSPACE=`df /boot -Pk | sed "s| * | |g" | cut -d" " -f4 | tail -n 1`
 233         if [ $BOOTSPACE -lt 12000 -o $ROOTSPACE -lt 90000 ]; then
 234                 /usr/bin/logger -p syslog.emerg -t ipfire \
 235                         "core-update-${core}: WARNING not enough space for pae kernel."
 236         else
 237                 echo "Name: linux-pae" > /opt/pakfire/db/installed/meta-linux-pae
 238                 echo "ProgVersion: 0" >> /opt/pakfire/db/installed/meta-linux-pae
 239                 echo "Release: 0"     >> /opt/pakfire/db/installed/meta-linux-pae
 240                 echo "Name: linux-pae" > /opt/pakfire/db/meta/meta-linux-pae
 241                 echo "ProgVersion: 0" >> /opt/pakfire/db/meta/meta-linux-pae
 242                 echo "Release: 0"     >> /opt/pakfire/db/meta/meta-linux-pae
 243         fi
 244 fi
 245
 246 #
 247 # After pakfire has ended run it again and update the lists and do upgrade
 248 #
 249 echo '#!/bin/bash'                                        >  /tmp/pak_update
 250 echo 'while [ "$(ps -A | grep " update.sh")" != "" ]; do' >> /tmp/pak_update
 251 echo '    sleep 1'                                        >> /tmp/pak_update
 252 echo 'done'                                               >> /tmp/pak_update
 253 echo 'while [ "$(ps -A | grep " pakfire")" != "" ]; do'   >> /tmp/pak_update
 254 echo '    sleep 1'                                        >> /tmp/pak_update
 255 echo 'done'                                               >> /tmp/pak_update
 256 echo '/opt/pakfire/pakfire update -y --force'             >> /tmp/pak_update
 257 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 258 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 259 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 260 echo '/usr/bin/logger -p syslog.emerg -t ipfire "Core-upgrade finished. If you use a customized grub/uboot config"' >> /tmp/pak_update
 261 echo '/usr/bin/logger -p syslog.emerg -t ipfire "Check it before reboot !!!"' >> /tmp/pak_update
 262 echo '/usr/bin/logger -p syslog.emerg -t ipfire " *** Please reboot... *** "' >> /tmp/pak_update
 263 echo 'touch /var/run/need_reboot ' >> /tmp/pak_update
 264 #
 265 killall -KILL pak_update
 266 chmod +x /tmp/pak_update
 267 /tmp/pak_update &
 268
 269 sync
 270
 271 #
 272 #Finish
 273 (
 274         /etc/init.d/fireinfo start
 275         sendprofile
 276 ) >/dev/null 2>&1 &
 277
 278 echo
 279 echo Please wait until pakfire has ended...
 280 echo
 281
 282 # Don't report the exitcode last command
 283 exit 0
 284