pfSense

#!/bin/sh

# $Id$

# /etc/rc - master bootup script, invokes php setup

# part of pfSense by Scott Ullrich

# Copyright (C) 2004 Scott Ullrich, All rights reserved.

# originally based on m0n0wall (http://neon1.net/m0n0wall)

# Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.

# All rights reserved.

#/bin/stty status '^T'

#/bin/stty susp '^-' intr '^-' quit '^-'

#trap : 2

#trap : 3

# Set our operating platform

PLATFORM=`cat /etc/platform`

HOME=/

PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin

export HOME PATH

# Set our current version

version=`cat /etc/version`

echo

cat /etc/ascii-art/pfsense-logo-small.txt

echo

echo

echo "Welcome to pfSense ${version} on the '${PLATFORM}' platform..."

echo

if [ "$PLATFORM" = "cdrom" ]; then

	/etc/rc.cdrom

fi

if [ "$PLATFORM" = "embedded" ]; then

	/etc/rc.embedded

fi

if [ "$PLATFORM" = "pfSense" ]; then

	mdmfs -S -M -s 2m md /var/run

fi

# Enable console output if its muted.

/sbin/conscontrol mute off >/dev/null

# Mount memory file system if it exists

echo -n "Mounting filesystems..."

/sbin/mount -a

# Mount /. If it fails run a fsck.

if [ ! "$PLATFORM" = "cdrom" ] ; then

	/sbin/mount -uw / || (/sbin/fsck -fy; /sbin/mount -uw /)

	# If /conf is a directory, convert it to a symlink

	# to /cf/conf

	if [ -d "/conf" ]; then

		# If item is not a symlink then rm and recreate

		CONFPOINTSTO=`readlink /conf` 

		if ! test "x$CONFPOINTSTO" = "x/cf/conf"; then 

			rm -rf /conf

			ln -s /cf/conf /conf

		fi

	fi

fi

# Check to see if a compact flash mountpoint exists

# If it fails to mount then run a fsck -fy

if grep -q cf /etc/fstab; then

    /sbin/mount -uw /cf || \

	(/sbin/umount /cf; /sbin/fsck -fy /cf; /sbin/mount -w /cf)

fi

if [ "$PLATFORM" = "cdrom" ] ; then

	# do nothing for cdrom platform

elif [ "$PLATFORM" = "embedded" ] ; then

    # do nothing for embedded platform

else

    SWAPDEVICE=`cat /etc/fstab | grep swap | cut -f1`

    /sbin/swapon -a 2>/dev/null >/dev/null

fi

echo " done."

echo -n "Creating symlinks..."

# Make sure symlink is correct on embedded

if [ "$PLATFORM" = "embedded" ] ; then

	rm /conf

	ln -s /cf/conf/ /conf

fi

# Repair symlinks if they are broken

if [ ! -L /etc/syslog.conf ]; then

	rm -rf /etc/syslog.conf

	ln -s /var/etc/syslog.conf /etc/syslog.conf

fi

# Repair symlinks if they are broken

if [ ! -L /etc/hosts ]; then

	rm -rf /etc/hosts

	ln -s /var/etc/hosts /etc/hosts

fi

if [ ! -L /etc/resolv.conf ]; then

    rm -rf /etc/resolv.conf

    ln -s /var/etc/resolv.conf /etc/resolv.conf

fi

# Setup compatibility link for packages that

# have trouble overriding the PREFIX configure

# argument since we build our packages in a

# seperated PREFIX area

# Only create if symlink does not exist. 

if [ ! -h /tmp/tmp ]; then

    ln -hfs / /tmp/tmp

fi

# Make sure our /tmp is 777

chmod 1777 /tmp

if [ ! "$PLATFORM" = "cdrom" ] ; then

	# Malloc debugging check

	if [ -L /etc/malloc.conf ]; then

	    #ln -s aj /etc/malloc.conf

		rm /etc/malloc.conf

	fi

fi

if [ ! -L /etc/dhclient.conf ]; then

    rm -rf /etc/dhclient.conf

fi

if [ ! -L /etc/sasyncd.conf ]; then

    mkdir -p /var/etc/

    touch /var/etc/sasyncd.conf

    rm -rf /etc/sasyncd.conf

    ln -s /var/etc/sasyncd.conf /etc/sasyncd.conf

    chown root:wheel /var/etc/sasyncd.conf

    chmod 0600 /var/etc/sasyncd.conf

fi

[ ! -d /var/tmp ] || mkdir -p /var/tmp 2>/dev/null

[ ! -d /cf/conf/backup/ ] || mkdir -p /cf/conf/backup/ 2>/dev/null

[ ! -f /var/db/ez-ipupdate.cache ] || touch /var/db/ez-ipupdate.cache 2>/dev/null

# OpenVPN storage

if [ ! -d /var/etc/openvpn ]; then

	mkdir -p /var/etc/openvpn

fi

if [ ! -d /var/etc/openvpn-csc ]; then

	mkdir -p /var/etc/openvpn-csc

fi

set -T

trap "echo 'Reboot interrupted'; exit 1" 3

# Remove old nameserver resolution files

rm -f /var/etc/nameserver*

# Create uploadbar tmp directory

mkdir -p /tmp/uploadbar

chmod 777 /tmp/uploadbar

# make some directories in /var

mkdir -p /var/run /var/log /var/etc /var/db/entropy /var/at/jobs/ /var/empty 2>/dev/null

rm /var/log/* 2>/dev/null

rm -rf /var/run/*

echo -n "."

DISABLESYSLOGCLOG=`cat /cf/conf/config.xml | grep disablesyslogclog | wc -l | awk '{ print $1 }'`

if [ "$DISABLESYSLOGCLOG" -gt "0" ]; then 

	touch /var/log/system.log

	touch /var/log/filter.log

	touch /var/log/dhcpd.log

	touch /var/log/vpn.log

	touch /var/log/openvpn.log

	touch /var/log/portalauth.log

	touch /var/log/ipsec.log

	touch /var/log/relayd.log

	touch /var/log/lighttpd.log

	touch /var/log/ntpd.log

else 

	# generate circular logfiles

	clog -i -s 512144 /var/log/system.log

	clog -i -s 512144 /var/log/filter.log

	clog -i -s 65535 /var/log/dhcpd.log

	clog -i -s 65535 /var/log/vpn.log

	clog -i -s 65535 /var/log/openvpn.log

	clog -i -s 65535 /var/log/portalauth.log

	clog -i -s 65535 /var/log/ipsec.log

	clog -i -s 65535 /var/log/relayd.log

	clog -i -s 65535 /var/log/lighttpd.log

	clog -i -s 65535 /var/log/ntpd.log

fi 

# change permissions on newly created clog files.

chmod 0600 /var/log/system.log /var/log/filter.log /var/log/dhcpd.log /var/log/vpn.log /var/log/portalauth.log /var/log/relayd.log	

echo -n "."

DEVFS=`mount | grep devfs | wc -l | cut -d" " -f8`

if [ "$DEVFS" = "0" ]; then

    mount_devfs devfs /dev

fi

# Create an initial utmp file

cd /var/run && cp /dev/null utmp && chmod 644 utmp

echo -n "."

/sbin/ldconfig -elf /usr/lib /usr/local/lib /lib

# Make sure /etc/rc.conf doesn't exist.

if [ -f /etc/rc.conf ]; then

    rm -rf /etc/rc.conf

fi

# Launching kbdmux(4)

if [ -f "/dev/kbdmux0" ]; then

	echo -n "."

	kbdcontrol -k /dev/kbdmux0 < /dev/console

	[ -c "/dev/atkbd0" ] && kbdcontrol -a atkbd0 < /dev/console

	[ -c "/dev/ukbd0" ] && kbdcontrol -a ukbd0 < /dev/console

fi

# Fire up unionfs if mount points exist.

if [ -f /dist/uniondirs ]; then

	echo -n "."

	/etc/rc.d/unionfs start

fi

echo "done."

# Recreate capabilities DB

cap_mkdb /etc/login.conf

if [ "$PLATFORM" != "cdrom" ]; then

	# Populate a dummy php.ini to avoid

	# the file being clobbered and the firewall

	# not being able to boot back up.

	cat >/usr/local/lib/php.ini <<EOF

# File generated from /etc/rc

output_buffering = "0"

implicit_flush = true

magic_quotes_gpc = Off

max_execution_time = 99999999

max_input_time = 99999999

register_argc_argv = On

file_uploads = On

upload_tmp_dir = /tmp

upload_max_filesize = 100M

post_max_size = 100M

html_errors = Off

zlib.output_compression = On

zlib.output_compression_level = 5

include_path = ".:/etc/inc:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg"

extension_dir=/usr/local/lib/php/20060613/

; add additional extensions below

; standard PHP extension

extension=pcre.so

extension=bz2.so

extension=bcmath.so

extension=ctype.so

extension=curl.so

extension=gettext.so

extension=mbstring.so

extension=mhash.so

extension=openssl.so

extension=pcntl.so

extension=posix.so

extension=readline.so

extension=session.so

;extension=simplexml.so

extension=shmop.so

extension=sysvmsg.so

extension=sysvsem.so

extension=sysvshm.so

extension=tokenizer.so

extension=xml.so

extension=ldap.so

extension=zlib.so

; standard PHP extensions currently beeing unused

;extension=json.so

;extension=ncurses.so

;xmlreader.so

;xmlwriter.so

;[xdebug]

;xdebug.remote_enable = On

;xdebug.default_enable = On

;xdebug.remote_mode = On

;xdebug.remote_handler = dbgp

;xdebug.remote_host = 127.0.0.1

;xdebug.remote_port = 17869

;xdebug.idekey = devphp

EOF

RAM=`sysctl hw.realmem | awk '{print $2/1000000}' | awk -F '.' '{print $1}'`

export RAM

if [  $RAM -gt 96 ]; then

cat >>/usr/local/lib/php.ini <<EOF

extension=apc.so

apc.enabled="1"

apc.enable_cli="1"

apc.shm_size="25"

EOF

fi

fi

cp /usr/local/lib/php.ini /usr/local/etc/php.ini

rm -f /cf/conf/backup/backup.cache

# let the PHP-based configuration subsystem set up the system now

echo -n "Launching PHP init system..."

/etc/rc.bootup

echo -n "Starting CRON... "

cd /tmp && /usr/sbin/cron -s 2>/dev/null

echo "done."

# Start packages

/etc/rc.start_packages

rm -rf /usr/local/pkg/pf/CVS

/usr/local/bin/php -f /etc/rc.conf_mount_ro

# Remove stale files that have already been processed by bootup

# scripts

rm -f /tmp/filter_dirty

rm -f /tmp/rc.linkup

nohup /usr/bin/nice -n20 /usr/local/sbin/check_reload_status &

# Start ping handler for every 240 seconds

minicron 240 /var/run/ping_hosts.pid /usr/local/bin/ping_hosts.sh

chmod a+rw /tmp/.

echo "Bootup complete"

/usr/local/bin/beep.sh start 2>&1 >/dev/null

exit 0