#!/bin/bash ############################################################################ # # # This file is part of the IPFire Firewall. # # # # IPFire is free software; you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # # the Free Software Foundation; either version 3 of the License, or # # (at your option) any later version. # # # # IPFire is distributed in the hope that it will be useful, # # but WITHOUT ANY WARRANTY; without even the implied warranty of # # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # # GNU General Public License for more details. # # # # You should have received a copy of the GNU General Public License # # along with IPFire; if not, write to the Free Software # # Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # # # # Copyright (C) 2012 IPFire-Team . # # # ############################################################################ # . /opt/pakfire/lib/functions.sh /usr/local/bin/backupctrl exclude >/dev/null 2>&1 function add_to_backup () { # Add path to ROOTFILES but remove old entries to prevent double # files in the tar grep -v "^$1" /opt/pakfire/tmp/ROOTFILES > /opt/pakfire/tmp/ROOTFILES.tmp mv /opt/pakfire/tmp/ROOTFILES.tmp /opt/pakfire/tmp/ROOTFILES echo $1 >> /opt/pakfire/tmp/ROOTFILES } # # Remove old core updates from pakfire cache to save space... core=65 for (( i=1; i<=$core; i++ )) do rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire done # # Do some sanity checks. if [ "$(grep " xavf " /opt/pakfire/lib/functions.sh)" == "" ]; then /usr/bin/logger -p syslog.emerg -t core-upgrade-$core \ "ERROR: this update need a newer pakfire version (core64)." exit 1 fi if [ ! "$(mount | grep " reiser4 (")" == "" ]; then /usr/bin/logger -p syslog.emerg -t core-upgrade-$core \ "ERROR: cannot update because there is a reiser4 fs mounted." exit 2 fi # # KVER="3.2.34" MOUNT=`grep "kernel" /boot/grub/grub.conf | tail -n 1` # Nur den letzten Parameter verwenden echo $MOUNT > /dev/null MOUNT=$_ if [ ! $MOUNT == "rw" ]; then MOUNT="ro" fi # # check if we the backup file already exist if [ -e /var/ipfire/backup/core-upgrade_$KVER.tar.xz ]; then echo Moving backup to backup-old ... mv -f /var/ipfire/backup/core-upgrade_$KVER.tar.xz \ /var/ipfire/backup/core-upgrade_$KVER-old.tar.xz fi echo First we made a backup of all files that was inside of the echo update archive. This may take a while ... # Add some files that are not in the package to backup add_to_backup lib/modules add_to_backup etc/udev add_to_backup lib/udev add_to_backup boot add_to_backup etc/snort add_to_backup usr/lib/snort_* add_to_backup usr/share/zoneinfo add_to_backup lib/libncurses* add_to_backup etc/dircolors add_to_backup etc/profile.d add_to_backup usr/share/terminfo # Backup the files tar cJvf /var/ipfire/backup/core-upgrade_$KVER.tar.xz \ -C / -T /opt/pakfire/tmp/ROOTFILES --exclude='#*' --exclude='/var/cache' > /dev/null 2>&1 echo echo Update Kernel to $KVER ... # # Remove old kernel, configs, initrd, modules ... # rm -rf /boot/System.map-* rm -rf /boot/config-* rm -rf /boot/ipfirerd-* rm -rf /boot/vmlinuz-* rm -rf /boot/uImage-ipfire-* rm -rf /boot/uInit-ipfire-* rm -rf /lib/modules rm -rf /etc/dircolors rm -rf /etc/profile.d rm -rf /usr/share/terminfo # # Remove old udev rules. # if [ -e /etc/udev/rules.d/29-ct-server-network.rules ]; then cp /etc/udev/rules.d/29-ct-server-network.rules /tmp/ fi cp /etc/udev/rules.d/30-persistent-network.rules /tmp/ rm -rf /etc/udev rm -rf /lib/udev mkdir -p /etc/udev/rules.d if [ -e /tmp/rules.d/29-ct-server-network.rules ]; then mv /tmp/29-ct-server-network.rules /etc/udev/rules.d/ fi mv /tmp/30-persistent-network.rules /etc/udev/rules.d/ # # Backup grub.conf # cp -vf /boot/grub/grub.conf /boot/grub/grub.conf.org # #Stop services /etc/init.d/snort stop /etc/init.d/squid stop /etc/init.d/ipsec stop #Remove old snort, zoneinfo and ncurses-libs(wrong path). rm -rf /etc/snort rm -rf /usr/lib/snort_* rm -rf /usr/share/zoneinfo rm -rf /lib/libncurses* # #Extract files extract_files # # Start services # /etc/init.d/squid start /etc/init.d/snort start if [ `grep "ENABLED=on" /var/ipfire/vpn/settings` ]; then /etc/init.d/ipsec start fi # # Rebuild qosscript if enabled # if [ -e /var/ipfire/qos/enable ]; then /usr/local/bin/qosctrl stop /usr/local/bin/qosctrl generate /usr/local/bin/qosctrl start fi # # Modify grub.conf # echo echo Update grub configuration ... ROOT=`mount | grep " / " | cut -d" " -f1` if [ ! -z $ROOT ]; then ROOTUUID=`blkid -c /dev/null -sUUID $ROOT | cut -d'"' -f2` fi if [ ! -z $ROOTUUID ]; then sed -i "s|ROOT|UUID=$ROOTUUID|g" /boot/grub/grub.conf else sed -i "s|ROOT|$ROOT|g" /boot/grub/grub.conf fi sed -i "s|KVER|$KVER|g" /boot/grub/grub.conf sed -i "s|MOUNT|$MOUNT|g" /boot/grub/grub.conf if [ "$(grep "^serial" /boot/grub/grub.conf.org)" == "" ]; then echo "grub use default console ..." else echo "grub use serial console ..." sed -i -e "s|splashimage|#splashimage|g" /boot/grub/grub.conf sed -i -e "s|#serial|serial|g" /boot/grub/grub.conf sed -i -e "s|#terminal|terminal|g" /boot/grub/grub.conf sed -i -e "s| panic=10 | console=ttyS0,115200n8 panic=10 |g" /boot/grub/grub.conf fi # # Delete old lm-sensor modullist to force search at next boot # rm -rf /etc/sysconfig/lm_sensors # #Update Language cache perl -e "require '/var/ipfire/lang.pl'; &Lang::BuildCacheLang" # # Remove meta's of packages that are now common... # rm -rf /opt/pakfire/db/*/meta-fontconfig rm -rf /opt/pakfire/db/*/meta-glib # # After pakfire has ended run it again and update the lists and do upgrade # echo '#!/bin/bash' > /tmp/pak_update echo 'while [ "$(ps -A | grep " update.sh")" != "" ]; do' >> /tmp/pak_update echo ' sleep 1' >> /tmp/pak_update echo 'done' >> /tmp/pak_update echo 'while [ "$(ps -A | grep " pakfire")" != "" ]; do' >> /tmp/pak_update echo ' sleep 1' >> /tmp/pak_update echo 'done' >> /tmp/pak_update echo '/opt/pakfire/pakfire update -y --force' >> /tmp/pak_update echo '/opt/pakfire/pakfire upgrade -y' >> /tmp/pak_update echo '/opt/pakfire/pakfire upgrade -y' >> /tmp/pak_update echo '/opt/pakfire/pakfire upgrade -y' >> /tmp/pak_update echo '/usr/bin/logger -p syslog.emerg -t core-upgrade-$core "Upgrade finished. If you use a customized grub.cfg"' >> /tmp/pak_update echo '/usr/bin/logger -p syslog.emerg -t core-upgrade-$core "Check it before reboot !!!"' >> /tmp/pak_update echo '/usr/bin/logger -p syslog.emerg -t core-upgrade-$core " *** Please reboot... *** "' >> /tmp/pak_update echo 'touch /var/run/need_reboot ' >> /tmp/pak_update # chmod +x /tmp/pak_update /tmp/pak_update & sync # #Finish /etc/init.d/fireinfo start sendprofile echo echo Please wait until pakfire has ended... echo #Don't report the exitcode last command exit 0