pfSense

#

# Copyright (c) 2004-2013 BSD Perimeter

# All rights reserved.

# originally based on m0n0wall (http://neon1.net/m0n0wall)

# Copyright (c) 2003-2004 Manuel Kasper <mk@neon1.net>.

# All rights reserved.

#

# Licensed under the Apache License, Version 2.0 (the "License");

#

# http://www.apache.org/licenses/LICENSE-2.0

#

# Unless required by applicable law or agreed to in writing, software

PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin

export HOME PATH

get_version ()

	if [ "${version_patch}" = "0" ]; then

get_version

# Setup dumpdev/ddb/savecore"

/etc/rc.dumpon

if [ -e /root/force_growfs ]; then

fi

#

# The file system needs to be unmounted to guarantee a clean operation of fsck.

FSCK_ACTION_NEEDED=0

/sbin/fsck -p

case $? in

8|16)

	echo "Preen mode recommended running a check that will be performed now."

	/sbin/fsck -y -t ufs

fi

/sbin/mount -a 2>/dev/null

while [ ${mount_rc} -ne 0 -a ${attempts} -lt 10 ]; do

	/sbin/mount -a 2>/dev/null

	attempts=$((attempts+1))

if [ ${mount_rc} -ne 0 ]; then

# Handle ZFS read-only case

unset USE_ZFS

	ZFSFSAVAILABLE=$(/sbin/zfs mount 2>/dev/null | wc -l)

	else

			/sbin/zfs set readonly=off $ZFSROOT

		/sbin/zfs mount -a

		# If /bootpool is present, then there is an additional zfs pool to import

	fi

# If /conf is a directory, convert it to a symlink to /cf/conf

	fi

fi

USE_MFS_TMPVAR=$(/usr/local/sbin/read_xml_tag.sh boolean system/use_mfs_tmpvar)

unset MOVE_PKG_DATA

# If use MFS var is disabled, move files back to place

	mv -f /root/var/db/pkg /var/db

# If use MFS var is enabled, move files to a safe place

	MOVE_PKG_DATA=1

	rm -rf /root/var/db/pkg 2>/dev/null

	/bin/mkdir -p /root/var/db /root/var/cache

	mv -f /var/db/pkg /root/var/db

fi

# Mount /var and /tmp on ZFS filesystems when it's necessary

if [ "${USE_MFS_TMPVAR}" = "true" ]; then

	/etc/rc.embedded

if [ -n "${MOVE_PKG_DATA}" -o "${USE_MFS_TMPVAR}" = "true" ]; then

fi

# Read product_name from $g, defaults to pfSense

# Restore contents of the RAM disk store

# Make sure /home exists

/bin/rm -f /root/force_fsck

/bin/rm -f /root/force_growfs

/bin/rm -f /root/TRIM_set

# Disable APM on ATA drives. Leaving this on will kill drives long-term, especially laptop drives, by generating excessive Load Cycles.

if [ -f /etc/rc.disable_hdd_apm ]; then

# Eject CD devices on 3G modems

MANUFACTURER="huawei|zte"

# Use php -n here because we are not ready to load extensions yet

if [ "${USE_MFS_TMPVAR}" != "true" ]; then

	/sbin/mdmfs -S -M -s 4m md $varrunpath

echo

cat /usr/local/share/pfSense/ascii-art/pfsense-logo-small.txt

echo

echo "Welcome to ${product} ${version}${version_patch}..."

echo

/sbin/conscontrol mute off >/dev/null

SWAPDEVICE=`/bin/cat /etc/fstab | /usr/bin/grep swap | /usr/bin/cut -f1 | /usr/bin/head -n 1`

if [ -n "${SWAPDEVICE}" ]; then

	/bin/rm -f /tmp/fstab.swap

		# Keep the original device, in case it is special, such as encrypted+mirrored zfs swap

		done

	/etc/rc.savecore

# make some directories in /var

/bin/mkdir -p $varrunpath /var/log /var/etc /var/db/entropy /var/db/rrd /var/at/jobs/ /var/empty /var/log/nginx 2>/dev/null

chmod 0555 /var/empty

chflags schg /var/empty

/bin/rm -rf $varrunpath/*

# Cleanup configuration files from previous instance

# Workaround for ipsec symlinks, otherwise it's going to break

if [ -L /usr/local/etc/strongswan.d ]; then

if [ -L /usr/local/etc/strongswan.conf ]; then

# Remove deprecated symlinks - #5538

	fi

done

# Make sure our /tmp is 777 + Sticky

/bin/chmod 1777 /tmp

if [ ! -L /etc/dhclient.conf ]; then

	/bin/rm -rf /etc/dhclient.conf

fi

if [ ! -d /var/tmp ]; then

	/bin/mkdir -p /var/tmp

fi

# Make sure our /var/tmp is 777 + Sticky

/bin/chmod 1777 /var/tmp

set -T

echo -n "."

DISABLESYSLOGCLOG=$(/usr/local/sbin/read_xml_tag.sh boolean system/disablesyslogclog)

LOG_FILES="system filter dhcpd vpn poes l2tps openvpn portalauth ipsec ppp wireless nginx ntpd gateways resolver routing"

DEFAULT_LOG_FILE_SIZE=$(/usr/local/sbin/read_xml_tag.sh string syslog/logfilesize)

for logfile in $LOG_FILES; do

	if [ "$DISABLESYSLOGCLOG" = "true" ]; then

		/usr/bin/touch /var/log/$logfile.log

	else

		if [ ! -f /var/log/$logfile.log ]; then

			/usr/local/sbin/clog -i -s ${DEFAULT_LOG_FILE_SIZE} /var/log/$logfile.log

		fi

	fi

done

# change permissions on newly created log files.

/bin/chmod 0600 /var/log/*.log

echo -n "."

DEVFS=`/sbin/mount | /usr/bin/grep devfs | /usr/bin/wc -l | /usr/bin/cut -d" " -f8`

fi

cd $varrunpath && /bin/cp /dev/null utmp && /bin/chmod 644 utmp

echo -n "."

/sbin/ldconfig -elf /usr/lib /usr/local/lib /lib

/etc/rc.d/ldconfig start 2>/dev/null

# Launching kbdmux(4)

# Fire up unionfs if mount points exist.

fi

echo "done."

# Recreate capabilities DB

/usr/bin/cap_mkdb /etc/login.conf

if [ -f /cf/conf/needs_package_sync ]; then

	skip_packages=1

fi

# Second upgrade stage

[ -z "$skip_packages" ] \

	&& /usr/local/sbin/${product}-upgrade -y -U -b 2

# Copy default openssl config file

mkdir -p /usr/local/openssl >/dev/null 2>&1

# Run the php.ini setup file and populate

# /usr/local/etc/php.ini

/etc/rc.php_ini_setup 2>/tmp/php_errors.txt

/usr/local/sbin/php-fpm -c /usr/local/etc/php.ini -y /usr/local/lib/php-fpm.conf -RD 2>&1 >/dev/null

# Launch external configuration loader

if [ -f /etc/rc.custom_boot_early ]; then

export fcgipath=/var/run/php-fpm.socket

/usr/bin/nice -n20 /usr/local/sbin/check_reload_status

# let the PHP-based configuration subsystem set up the system now

echo -n "Launching the init system..."

/bin/rm -f /cf/conf/backup/backup.cache

# Copy custom logo over if it's present

	cp -f /usr/local/share/${product}/custom_logos/*svg \

		/usr/local/www

	cp -f /usr/local/share/${product}/custom_logos/*css \

fi

# Apply CPU microcode update

/etc/rc.bootup

# /etc/rc.bootup unset $g['booting'], and removes file

echo -n "Starting CRON... "

cd /tmp && /usr/sbin/cron -s 2>/dev/null

echo "done."

/bin/rm -rf /usr/local/pkg/pf/CVS

# Start ping handler every 240 seconds

/usr/local/bin/minicron 240 $varrunpath/ping_hosts.pid /usr/local/bin/ping_hosts.sh

# Start account expire handler every hour

/usr/local/bin/minicron 3600 $varrunpath/expire_accounts.pid '/usr/local/sbin/fcgicli -f /etc/rc.expireaccounts'

# Start alias url updater every 24 hours

/usr/local/bin/minicron 86400 $varrunpath/update_alias_url_data.pid '/usr/local/sbin/fcgicli -f /etc/rc.update_alias_url_data'

/bin/chmod a+rw /tmp/.

# Check for GEOM mirrors

[ -z "$skip_packages" ] \

	&& /usr/local/sbin/${product}-upgrade -y -U -b 3

# Start packages

[ -z "$skip_packages" ] \

# Update pkg metadata

# Log product version to syslog

get_version

BUILDTIME=`cat /etc/version.buildtime`

echo "$product ${version}${version_patch} $ARCH $BUILDTIME"

echo "Bootup complete"

/usr/local/bin/beep.sh start 2>&1 >/dev/null

# Reset the cache.  read-only requires this.

/bin/rm -f /tmp/config.cache

exit 0