config/rootfiles/oldcore/94/update.sh

   1 #!/bin/bash
   2 ############################################################################
   3 #                                                                          #
   4 # This file is part of the IPFire Firewall.                                #
   5 #                                                                          #
   6 # IPFire is free software; you can redistribute it and/or modify           #
   7 # it under the terms of the GNU General Public License as published by     #
   8 # the Free Software Foundation; either version 3 of the License, or        #
   9 # (at your option) any later version.                                      #
  10 #                                                                          #
  11 # IPFire is distributed in the hope that it will be useful,                #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of           #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
  14 # GNU General Public License for more details.                             #
  15 #                                                                          #
  16 # You should have received a copy of the GNU General Public License        #
  17 # along with IPFire; if not, write to the Free Software                    #
  18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
  19 #                                                                          #
  20 # Copyright (C) 2015 IPFire-Team <info@ipfire.org>.                        #
  21 #                                                                          #
  22 ############################################################################
  23 #
  24 . /opt/pakfire/lib/functions.sh
  25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
  26
  27 # Remove old core updates from pakfire cache to save space...
  28 core=94
  29 for (( i=1; i<=$core; i++ ))
  30 do
  31         rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
  32 done
  33
  34 # Stop services
  35 /etc/init.d/squid stop
  36 /etc/init.d/sshd stop
  37 /etc/init.d/dnsmasq stop
  38
  39 # Extract files
  40 extract_files
  41
  42 # Restart init after glibc update
  43 telinit u
  44
  45 # Update Language cache
  46 /usr/local/bin/update-lang-cache
  47
  48 # Update SSH configuration
  49 sed -i /etc/ssh/sshd_config \
  50         -e 's/^#PermitRootLogin yes$/PermitRootLogin yes/' \
  51         -e 's|^#\?HostKey /etc/ssh/ssh_host_dsa_key$||' \
  52         -e 's|^#\?HostKey /etc/ssh/ssh_host_ecdsa_key$||' \
  53         -e 's|^#\?HostKey /etc/ssh/ssh_host_ed25519_key$||' \
  54         -e 's|^#\?HostKey /etc/ssh/ssh_host_rsa_key$|HostKey /etc/ssh/ssh_host_ecdsa_key\nHostKey /etc/ssh/ssh_host_ed25519_key\nHostKey /etc/ssh/ssh_host_rsa_key|' \
  55
  56 # Move away old and unsupported keys
  57 mv -f /etc/ssh/ssh_host_dsa_key{,.old}
  58 # Regenerating weak RSA keys
  59 mv -f /etc/ssh/ssh_host_key{,.old}
  60 mv -f /etc/ssh/ssh_host_rsa_key{,.old}
  61
  62 # Update crontab
  63 sed -i /var/spool/cron/root.orig -e "/Force an update once a month/d"
  64 sed -i /var/spool/cron/root.orig -e "/ddns update-all --force/d"
  65
  66 grep -q "dma -q" /var/spool/cron/root.orig || cat <<EOF >> /var/spool/cron/root.orig
  67
  68 # Retry sending spooled mails regularly
  69 %hourly * /usr/sbin/dma -q
  70
  71 # Cleanup the mail spool directory
  72 %weekly * * /usr/sbin/dma-cleanup-spool
  73 EOF
  74
  75 fcrontab -z &>/dev/null
  76
  77 # DMA - reconfigure Postfix if exists
  78 if [ -e /etc/postfix/main.cf ] && [ ! -e "/usr/sbin/sendmail.postfix" ]; then
  79         mv /usr/sbin/sendmail /usr/sbin/sendmail.postfix
  80         /usr/sbin/alternatives --install /usr/sbin/sendmail sendmail /usr/sbin/sendmail.postfix 15
  81         sed -i 's/usr\/sbin\/sendmail/usr/sbin/sendmail.postfix/' /opt/pakfire/db/rootfiles/postfix
  82 fi
  83 # DMA - configure dma as default mta
  84 mkdir -p /etc/alternatives
  85 mkdir -p /var/lib/alternatives
  86 /usr/sbin/alternatives --install /usr/sbin/sendmail sendmail /usr/sbin/sendmail.dma 20
  87
  88 # Start services
  89 /etc/init.d/dnsmasq start
  90 /etc/init.d/sshd start
  91 /etc/init.d/squid start
  92
  93 # This update need a reboot...
  94 #touch /var/run/need_reboot
  95
  96 # Finish
  97 /etc/init.d/fireinfo start
  98 sendprofile
  99 # Update grub config to display new core version
 100 if [ -e /boot/grub/grub.cfg ]; then
 101         grub-mkconfig -o /boot/grub/grub.cfg
 102 fi
 103 sync
 104
 105 # Don't report the exitcode last command
 106 exit 0