config/rootfiles/oldcore/94/update.sh

   1 #!/bin/bash
   2 ############################################################################
   3 #                                                                          #
   4 # This file is part of the IPFire Firewall.                                #
   5 #                                                                          #
   6 # IPFire is free software; you can redistribute it and/or modify           #
   7 # it under the terms of the GNU General Public License as published by     #
   8 # the Free Software Foundation; either version 3 of the License, or        #
   9 # (at your option) any later version.                                      #
  10 #                                                                          #
  11 # IPFire is distributed in the hope that it will be useful,                #
  12 # but WITHOUT ANY WARRANTY; without even the implied warranty of           #
  13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the            #
  14 # GNU General Public License for more details.                             #
  15 #                                                                          #
  16 # You should have received a copy of the GNU General Public License        #
  17 # along with IPFire; if not, write to the Free Software                    #
  18 # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA #
  19 #                                                                          #
  20 # Copyright (C) 2015 IPFire-Team <info@ipfire.org>.                        #
  21 #                                                                          #
  22 ############################################################################
  23 #
  24 . /opt/pakfire/lib/functions.sh
  25 /usr/local/bin/backupctrl exclude >/dev/null 2>&1
  26
  27 # Remove old core updates from pakfire cache to save space...
  28 core=94
  29 for (( i=1; i<=$core; i++ ))
  30 do
  31         rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire
  32 done
  33
  34 # Stop services
  35 /etc/init.d/squid stop
  36 /etc/init.d/sshd stop
  37 /etc/init.d/dnsmasq stop
  38
  39 # Extract files
  40 extract_files
  41
  42 # Restart init after glibc update
  43 telinit u
  44
  45 # Update Language cache
  46 /usr/local/bin/update-lang-cache
  47
  48 # Update SSH configuration
  49 sed -i /etc/ssh/sshd_config \
  50         -e 's/^#PermitRootLogin yes$/PermitRootLogin yes/' \
  51         -e 's|^#\?HostKey /etc/ssh/ssh_host_rsa_key$|HostKey /etc/ssh/ssh_host_rsa_key|' \
  52         -e 's|^#\?HostKey /etc/ssh/ssh_host_ecdsa_key$|HostKey /etc/ssh/ssh_host_ecdsa_key|' \
  53         -e 's|^#\?HostKey /etc/ssh/ssh_host_ed25519_key$|HostKey /etc/ssh/ssh_host_ed25519_key|' \
  54
  55 # Move away old and unsupported keys
  56 mv -f /etc/ssh/ssh_host_dsa_key{,.old}
  57 # Regenerating weak RSA keys
  58 mv -f /etc/ssh/ssh_host_key{,.old}
  59 mv -f /etc/ssh/ssh_host_rsa_key{,.old}
  60
  61 # Update crontab
  62 sed -i /var/spool/cron/root.orig -e "/Force an update once a month/d"
  63 sed -i /var/spool/cron/root.orig -e "/ddns update-all --force/d"
  64
  65 grep -q "dma -q" /var/spool/cron/root.orig || cat <<EOF >> /var/spool/cron/root.orig
  66
  67 # Retry sending spooled mails regularly
  68 %hourly * /usr/sbin/dma -q
  69
  70 # Cleanup the mail spool directory
  71 %weekly * * /usr/sbin/dma-cleanup-spool
  72 EOF
  73
  74 fcrontab -z &>/dev/null
  75
  76 # DMA - reconfigure Postfix if exists
  77 if [ -e /etc/postfix/main.cf ] && [ ! -e "/usr/sbin/sendmail.postfix" ]; then
  78         mv /usr/sbin/sendmail /usr/sbin/sendmail.postfix
  79         /usr/sbin/alternatives --install /usr/sbin/sendmail sendmail /usr/sbin/sendmail.postfix 15
  80         sed -i 's/usr\/sbin\/sendmail/usr/sbin/sendmail.postfix/' /opt/pakfire/db/rootfiles/postfix
  81 fi
  82 # DMA - configure dma as default mta
  83 mkdir -p /etc/alternatives
  84 mkdir -p /var/lib/alternatives
  85 /usr/sbin/alternatives --install /usr/sbin/sendmail sendmail /usr/sbin/sendmail.dma 20
  86
  87 # Start services
  88 /etc/init.d/dnsmasq start
  89 /etc/init.d/sshd start
  90 /etc/init.d/squid start
  91
  92 # This update need a reboot...
  93 #touch /var/run/need_reboot
  94
  95 # Finish
  96 /etc/init.d/fireinfo start
  97 sendprofile
  98 # Update grub config to display new core version
  99 if [ -e /boot/grub/grub.cfg ]; then
 100         grub-mkconfig -o /boot/grub/grub.cfg
 101 fi
 102 sync
 103
 104 # Don't report the exitcode last command
 105 exit 0