config/rootfiles/core/44/update.sh

   1 #!/bin/bash
   2 ############################################################################
   3 #                                                                          #
   4 # This file is part of the IPFire Firewall.                                #
   5 #                                                                          #
   6 # IPFire is free software; you can redistribute it and/or modify           #
   7 # it under the terms of the GNU General Public License as published by     #
   8 # the Free Software Foundation; either version 3 of the License, or        #
   9 # (at your option) any later version.                                      #
  10 #                                                                          #
  11 # IPFire is distributed in the hope that it will be useful,                #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of           #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
  14 # GNU General Public License for more details.                             #
  15 #                                                                          #
  16 # You should have received a copy of the GNU General Public License        #
  17 # along with IPFire; if not, write to the Free Software                    #
  18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
  19 #                                                                          #
  20 # Copyright (C) 2010 IPFire-Team <info@ipfire.org>.                        #
  21 #                                                                          #
  22 ############################################################################
  23 #
  24 . /opt/pakfire/lib/functions.sh
  25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
  26 #
  27 KVER="2.6.32.27"
  28 MOUNT=`grep "kernel" /boot/grub/grub.conf | tail -n 1`
  29 # Nur den letzten Parameter verwenden
  30 echo $MOUNT > /dev/null
  31 MOUNT=$_
  32 if [ ! $MOUNT == "rw" ]; then
  33         MOUNT="ro"
  34 fi
  35
  36
  37 #
  38 # check if we the backup file already exist
  39 if [ -e /var/ipfire/backup/core-upgrade_$KVER.tar.bz2 ]; then
  40     echo Moving backup to backup-old ...
  41     mv -f /var/ipfire/backup/core-upgrade_$KVER.tar.bz2 \
  42        /var/ipfire/backup/core-upgrade_$KVER-old.tar.bz2
  43 fi
  44 echo First we made a backup of all files that was inside of the
  45 echo update archive. This may take a while ...
  46 # Add some files that are not in the package to backup
  47 echo lib/modules >> /opt/pakfire/tmp/ROOTFILES
  48 echo boot >> /opt/pakfire/tmp/ROOTFILES
  49 echo etc/mkinitcpio.conf >> /opt/pakfire/tmp/ROOTFILES
  50 echo etc/mkinitcpio.conf.org >> /opt/pakfire/tmp/ROOTFILES
  51 echo etc/mkinitcpio.d >> /opt/pakfire/tmp/ROOTFILES
  52 echo lib/initcpio >> /opt/pakfire/tmp/ROOTFILES
  53 echo sbin/mkinitcpio >> /opt/pakfire/tmp/ROOTFILES
  54 echo usr/bin/iw >> /opt/pakfire/tmp/ROOTFILES
  55 echo etc/snort >> /opt/pakfire/tmp/ROOTFILES
  56 echo usr/lib/snort_* >> /opt/pakfire/tmp/ROOTFILES
  57 echo usr/lib/squid >> /opt/pakfire/tmp/ROOTFILES
  58
  59 # Backup the files
  60 tar cjvf /var/ipfire/backup/core-upgrade_$KVER.tar.bz2 \
  61     -C / -T /opt/pakfire/tmp/ROOTFILES --exclude='#*' > /dev/null 2>&1
  62
  63 echo
  64 echo Update Kernel to $KVER ...
  65 # Remove old kernel, configs, initrd, modules ...
  66 #
  67 rm -rf /boot/System.map-*
  68 rm -rf /boot/config-*
  69 rm -rf /boot/ipfirerd-*
  70 rm -rf /boot/vmlinuz-*
  71 rm -rf /lib/modules/*-ipfire
  72 # Remove mkinitcpio
  73 rm -rf /etc/mkinitcpio.*
  74 rm -rf /lib/initcpio
  75 rm -rf /sbin/mkinitcpio
  76 # Remove old iw (new is in usr/sbin)
  77 rm -rf /usr/bin/iw
  78 #
  79 # Backup grub.conf
  80 #
  81 cp -vf /boot/grub/grub.conf /boot/grub/grub.conf.org
  82
  83 #
  84 # Stop services to save memory
  85 #
  86 /etc/init.d/snort stop
  87 /etc/init.d/squid stop
  88 /etc/init.d/ipsec stop
  89
  90 #
  91 #
  92 # Remove old snort...
  93 rm -rf /etc/snort
  94 rm -rf /usr/lib/snort_*
  95 # Remove old squid...
  96 rm -rf /usr/lib/squid
  97 #
  98 # Unpack the updated files
  99 #
 100 echo
 101 echo Unpack the updated files ...
 102 #
 103 tar xvf /opt/pakfire/tmp/files --preserve --numeric-owner -C / \
 104         --no-overwrite-dir
 105
 106 #
 107 # Change collectd init symlinks
 108 #
 109 rm -f /etc/rc.d/rc3.d/S21collectd
 110 ln -f -s ../init.d/collectd /etc/rc.d/rc3.d/S29collectd
 111
 112 # Remove old pakfire cronjob.
 113 rm -f /etc/fcron.daily/pakfire-update
 114
 115 # Convert /etc/fstab entries to UUID ...
 116 #
 117 echo Convert fstab entries to UUID ...
 118 ROOT=`mount | grep " / " | cut -d" " -f1`
 119 BOOT=`mount | grep " /boot " | cut -d" " -f1`
 120 VAR=`mount | grep " /var " | cut -d" " -f1`
 121 SWAP=`grep "/dev/" /proc/swaps | cut -d" " -f1`
 122 #
 123
 124 if [ ! -z $ROOT ]; then
 125         ROOTUUID=`blkid -c /dev/null -sUUID $ROOT | cut -d'"' -f2`
 126         if [ ! -z $ROOTUUID ]; then
 127                 sed -i "s|^$ROOT|UUID=$ROOTUUID|g" /etc/fstab
 128         #else
 129                 #to do add uuid to rootfs
 130         fi
 131         else
 132         echo "ERROR! / not found!!!"
 133 fi
 134
 135 if [ ! -z $BOOT ]; then
 136         BOOTUUID=`blkid -c /dev/null -sUUID $BOOT | cut -d'"' -f2`
 137         if [ ! -z $BOOTUUID ]; then
 138                 sed -i "s|^$BOOT|UUID=$BOOTUUID|g" /etc/fstab
 139         #else
 140                 #to do add uuid to bootfs
 141         fi
 142         else
 143         echo "WARNING! /boot not found!!!"
 144 fi
 145
 146 if [ ! -z $VAR ]; then
 147         VARUUID=`blkid -c /dev/null -sUUID $VAR | cut -d'"' -f2`
 148         if [ ! -z $VARUUID ]; then
 149                 sed -i "s|^$VAR|UUID=$VARUUID|g" /etc/fstab
 150         #else
 151                 #to do add uuid to varfs
 152         fi
 153         else
 154         echo "WARNING! /var not found!!!"
 155 fi
 156
 157 if [ ! -z $SWAP ]; then
 158         SWAPUUID=`blkid -c /dev/null -sUUID $SWAP | cut -d'"' -f2`
 159         if [ ! -z $SWAPUUID ]; then
 160                 sed -i "s|^$SWAP|UUID=$SWAPUUID|g" /etc/fstab
 161         else
 162                 # Reformat swap to add a UUID
 163                 swapoff -a
 164                 mkswap $SWAP
 165                 swapon -a
 166                 SWAPUUID=`blkid -c /dev/null -sUUID $SWAP | cut -d'"' -f2`
 167                 if [ ! -z $SWAPUUID ]; then
 168                         sed -i "s|^$SWAP|UUID=$SWAPUUID|g" /etc/fstab
 169                 fi
 170         fi
 171         else
 172         echo "WARNING! swap not found!!!"
 173 fi
 174
 175 #new strongswan need keyexchange=ikev1 because this is not default anymore
 176 mv /var/ipfire/vpn/ipsec.conf /var/ipfire/vpn/ipsec.conf.org
 177 grep -v "keyexchange=ikev1" /var/ipfire/vpn/ipsec.conf.org > /var/ipfire/vpn/ipsec.conf
 178 sed -i "s|^conn [A-Za-z].*$|&\n\tkeyexchange=ikev1|g" /var/ipfire/vpn/ipsec.conf
 179 chown nobody:nobody /var/ipfire/vpn/ipsec.conf
 180
 181 #new squid has some changed options. Build a basic config to be able start squid.
 182 mv /var/ipfire/proxy/squid.conf /var/ipfire/proxy/squid.conf.org
 183 grep -v "header_access " /var/ipfire/proxy/squid.conf.org | \
 184 grep -v "error_directory " | \
 185 grep -v "cache_dir null" | \
 186 grep -v "reply_body_max_size 0" > /var/ipfire/proxy/squid.conf
 187 echo >> /var/ipfire/proxy/squid.conf
 188 echo error_directory /etc/squid/errors >> /var/ipfire/proxy/squid.conf
 189 chown nobody:nobody /var/ipfire/proxy/squid.conf
 190
 191 #Convert extrahd entries to UUID
 192 cp -f /var/ipfire/extrahd/devices /var/ipfire/extrahd/devices.org
 193 while read entry
 194 do
 195         device=`echo $entry | cut -f1 -d";"`
 196         uuid=`blkid  -c /dev/null -s UUID -o value /dev/$device`
 197         if [ ! -z $uuid ]; then
 198                 sed -i -e "s|$device|UUID=$uuid|g" /var/ipfire/extrahd/devices
 199                 sed -i -e "s|/dev/$device|UUID=$uuid|g" /var/ipfire/extrahd/fstab
 200                 sed -i -e "s|/dev/$device|UUID=$uuid|g" /etc/fstab
 201         fi
 202 done < /var/ipfire/extrahd/devices.org
 203
 204 #
 205 # Start services
 206 #
 207 /etc/init.d/squid start
 208 /etc/init.d/snort start
 209 if [ `grep "ENABLED=on" /var/ipfire/vpn/settings` ]; then
 210         /etc/init.d/ipsec start
 211 fi
 212
 213 #
 214 # Rebuild qosscript if enabled
 215 #
 216 if [ -e /var/ipfire/qos/enable ]; then
 217         /usr/local/bin/qosctrl stop
 218         /usr/local/bin/qosctrl generate
 219         /usr/local/bin/qosctrl start
 220 fi
 221
 222 # Add pakfire and fireinfo cronjobs...
 223 grep -v "# fireinfo" /var/spool/cron/root.orig |
 224 grep -v "/usr/bin/sendprofile" |
 225 grep -v "# pakfire" |
 226 grep -v "/usr/local/bin/pakfire" > /var/tmp/root.tmp
 227 echo "" >> /var/tmp/root.tmp
 228 echo "# fireinfo" >> /var/tmp/root.tmp
 229 echo "%nightly,random * 23-4 /usr/bin/sendprofile >/dev/null 2>&1" >> /var/tmp/root.tmp
 230 echo "" >> /var/tmp/root.tmp
 231 echo "# pakfire" >> /var/tmp/root.tmp
 232 echo "%nightly,random * 23-4 /usr/local/bin/pakfire update >/dev/null 2>&1" >> /var/tmp/root.tmp
 233 fcrontab /var/tmp/root.tmp
 234
 235 #
 236 # Modify grub.conf
 237 #
 238 echo
 239 echo Update grub configuration ...
 240 if [ ! -z $ROOTUUID ]; then
 241         sed -i "s|ROOT|UUID=$ROOTUUID|g" /boot/grub/grub.conf
 242 else
 243         sed -i "s|ROOT|$ROOT|g" /boot/grub/grub.conf
 244 fi
 245 sed -i "s|KVER|$KVER|g" /boot/grub/grub.conf
 246 sed -i "s|MOUNT|$MOUNT|g" /boot/grub/grub.conf
 247
 248 if [ "$(grep "^serial" /boot/grub/grub.conf.org)" == "" ]; then
 249         echo "grub use default console ..."
 250 else
 251         echo "grub use serial console ..."
 252         sed -i -e "s|splashimage|#splashimage|g" /boot/grub/grub.conf
 253         sed -i -e "s|#serial|serial|g" /boot/grub/grub.conf
 254         sed -i -e "s|#terminal|terminal|g" /boot/grub/grub.conf
 255         sed -i -e "s| panic=10 | console=ttyS0,38400n8 panic=10 |g" /boot/grub/grub.conf
 256 fi
 257 #
 258 # Change /dev/hd? to /dev/sda
 259 #
 260 if [ "${ROOT:0:7}" == "/dev/hd" ];then
 261         sed -i -e "s|${ROOT:0:8}|/dev/sda|g" /boot/grub/grub.conf
 262         sed -i -e "s|${ROOT:0:8}|/dev/sda|g" /etc/fstab
 263 fi
 264 #
 265 # Don't show gpl on updated systens
 266 #
 267 touch /var/ipfire/main/gpl_accepted
 268 #
 269 # ReInstall grub
 270 #
 271 grub-install --no-floppy ${ROOT::`expr length $ROOT`-1} --recheck
 272 #
 273 # Rebuild Language
 274 #
 275 perl -e "require '/var/ipfire/lang.pl'; &Lang::BuildCacheLang"
 276 #
 277 # Delete old lm-sensor modullist to force search at next boot
 278 #
 279 rm -rf /etc/sysconfig/lm_sensors
 280 #
 281 # Change version of Pakfire.conf
 282 #
 283 OLDVERSION=`grep "version = " /opt/pakfire/etc/pakfire.conf | cut -d'"' -f2`
 284 NEWVERSION="2.9"
 285 sed -i "s|$OLDVERSION|$NEWVERSION|g" /opt/pakfire/etc/pakfire.conf
 286 #
 287 # After pakfire has ended run it again and update the lists and do upgrade
 288 #
 289 echo '#!/bin/bash'                                        >  /tmp/pak_update
 290 echo 'while [ "$(ps -A | grep " update.sh")" != "" ]; do' >> /tmp/pak_update
 291 echo '    sleep 1'                                        >> /tmp/pak_update
 292 echo 'done'                                               >> /tmp/pak_update
 293 echo 'while [ "$(ps -A | grep " pakfire")" != "" ]; do'   >> /tmp/pak_update
 294 echo '    sleep 1'                                        >> /tmp/pak_update
 295 echo 'done'                                               >> /tmp/pak_update
 296 echo '/opt/pakfire/pakfire update -y --force'             >> /tmp/pak_update
 297 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 298 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 299 echo '/opt/pakfire/pakfire upgrade -y'                    >> /tmp/pak_update
 300 echo '/usr/bin/logger -p syslog.emerg -t core-upgrade-44 "Upgrade finished. If you use a customized grub.cfg"' >> /tmp/pak_update
 301 echo '/usr/bin/logger -p syslog.emerg -t core-upgrade-44 "Check it before reboot !!!"' >> /tmp/pak_update
 302 echo '/usr/bin/logger -p syslog.emerg -t core-upgrade-44 " *** Please reboot... *** "' >> /tmp/pak_update
 303 echo 'touch /var/run/need_reboot ' >> /tmp/pak_update
 304 #
 305 chmod +x /tmp/pak_update
 306 /tmp/pak_update &
 307 echo
 308 echo Please wait until pakfire has ended...
 309 echo