]> git.ipfire.org Git - ipfire-2.x.git/blob - config/rootfiles/core/94/update.sh
firewall: Support multiple subnets per IPsec tunnel
[ipfire-2.x.git] / config / rootfiles / core / 94 / update.sh
1 #!/bin/bash
2 ############################################################################
3 # #
4 # This file is part of the IPFire Firewall. #
5 # #
6 # IPFire is free software; you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation; either version 3 of the License, or #
9 # (at your option) any later version. #
10 # #
11 # IPFire is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
15 # #
16 # You should have received a copy of the GNU General Public License #
17 # along with IPFire; if not, write to the Free Software #
18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA #
19 # #
20 # Copyright (C) 2015 IPFire-Team <info@ipfire.org>. #
21 # #
22 ############################################################################
23 #
24 . /opt/pakfire/lib/functions.sh
25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
26
27 # Remove old core updates from pakfire cache to save space...
28 core=94
29 for (( i=1; i<=$core; i++ ))
30 do
31 rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
32 done
33
34 # Stop services
35 /etc/init.d/sshd stop
36 /etc/init.d/dnsmasq stop
37
38 # Extract files
39 extract_files
40
41 # Update Language cache
42 /usr/local/bin/update-lang-cache
43
44 # Update SSH configuration
45 sed -i /etc/ssh/sshd_config \
46 -e 's/^#\?PermitRootLogin .*$$/PermitRootLogin yes/'
47
48 # Move away old and unsupported keys
49 mv -f /etc/ssh/ssh_host_dsa_key{,.old}
50 # Regenerating weak RSA keys
51 mv -f /etc/ssh/ssh_host_key{,.old}
52 mv -f /etc/ssh/ssh_host_rsa_key{,.old}
53
54 # Update crontab
55 sed -i /var/spool/cron/root.orig -e "/Force an update once a month/d"
56 sed -i /var/spool/cron/root.orig -e "/ddns update-all --force/d"
57
58 grep -qv "dma -q" || cat <<EOF >> /var/spool/cron/root.orig
59
60 # Retry sending spooled mails regularly
61 %hourly * /usr/sbin/dma -q
62 EOF
63
64 fcrontab -z &>/dev/null
65
66 # Start services
67 /etc/init.d/dnsmasq start
68 /etc/init.d/sshd start
69
70 # This update need a reboot...
71 #touch /var/run/need_reboot
72
73 # Finish
74 /etc/init.d/fireinfo start
75 sendprofile
76 # Update grub config to display new core version
77 if [ -e /boot/grub/grub.cfg ]; then
78 grub-mkconfig -o /boot/grub/grub.cfg
79 fi
80 sync
81
82 # Don't report the exitcode last command
83 exit 0