pfSense

#!/bin/sh

# rc

#

# part of pfSense (https://www.pfsense.org)

#

# Redistribution and use in source and binary forms, with or without

# modification, are permitted provided that the following conditions are met:

#

# 1. Redistributions of source code must retain the above copyright notice,

#    this list of conditions and the following disclaimer.

#

# 2. Redistributions in binary form must reproduce the above copyright

#    notice, this list of conditions and the following disclaimer in

#    the documentation and/or other materials provided with the

#    distribution.

#

# 3. All advertising materials mentioning features or use of this software

#    must display the following acknowledgment:

#    "This product includes software developed by the pfSense Project

#    for use in the pfSense® software distribution. (http://www.pfsense.org/).

#

# 4. The names "pfSense" and "pfSense Project" must not be used to

#    endorse or promote products derived from this software without

#    prior written permission. For written permission, please contact

#    coreteam@pfsense.org.

#

# 5. Products derived from this software may not be called "pfSense"

#    nor may "pfSense" appear in their names without prior written

#    permission of the Electric Sheep Fencing, LLC.

#

# 6. Redistributions of any form whatsoever must retain the following

#    acknowledgment:

#

# "This product includes software developed by the pfSense Project

# for use in the pfSense software distribution (http://www.pfsense.org/).

#

# THIS SOFTWARE IS PROVIDED BY THE pfSense PROJECT ``AS IS'' AND ANY

# EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE pfSense PROJECT OR

# ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT

# NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

# LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

# STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED

# OF THE POSSIBILITY OF SUCH DAMAGE.

#/bin/stty status '^T'

#/bin/stty susp '^-' intr '^-' quit '^-'

#trap : 2

#trap : 3

HOME=/

version_patch="0"

if [ -f /etc/version.patch ]; then

	version_patch=`/bin/cat /etc/version.patch`

fi

if [ "${version_patch}" = "0" ]; then

	version_patch=""

else

	version_patch=" (Patch ${version_patch})"

fi

# Use php -n here because we are not ready to load extensions yet

product=$(/usr/local/bin/php -n /usr/local/sbin/read_global_var product_name pfSense)

echo "Configuring crash dumps..."

fi

if [ ! -z "`sysctl -Nq debug.ddb.scripting.scripts`" ]; then

	/sbin/ddb /etc/ddb.conf

fi

	/sbin/fsck -y -F -t ufs

	0)

		echo "Filesystems are clean, continuing..."

		echo "Mounting filesystems..."

		;;

	8)

		echo "Preen mode recommended running a check that will be performed now."

		FSCK_ACTION_NEEDED=1

		;;

	*)

		;;

	esac

	if [ ${FSCK_ACTION_NEEDED} = 1 ]; then

		echo "WARNING: Trying to recover filesystem from inconsistency..."

		/sbin/fsck -yF

	fi

	mount_rc=$?

	attempts=0

	while [ ${mount_rc} -ne 0 -a ${attempts} -lt 3 ]; do

		mount_rc=$?

	done

		# XXX This script does need all filesystems rw!!!!

		# Put this workaround for now until better ways are found.

		/sbin/mount -u -w -o sync,noatime /

		/sbin/mount -u -w -o sync,noatime /cf

	fi

		# If item is not a symlink then rm and recreate

		if ! test "x$CONFPOINTSTO" = "x/cf/conf"; then

			/bin/ln -s /cf/conf /conf

	fi

	if [ "$PLATFORM" = "${product}" ]; then

		# If use MFS var is disabled, move files back to place

		if [ "${USE_MFS_TMPVAR}" != "true" -a -f /root/var/db/pkg/local.sqlite ]; then

			MOVE_PKG_DATA=1

			rm -rf /var/db/pkg 2>/dev/null

			rm -rf /var/cache/pkg 2>/dev/null

			mv /root/var/db/pkg /var/db

			mv /root/var/cache/pkg /var/cache

		# If use MFS var is enabled, move files to a safe place

		elif [ "${USE_MFS_TMPVAR}" = "true" -a -f /var/db/pkg/local.sqlite ]; then

			MOVE_PKG_DATA=1

			/bin/mkdir -p /root/var/db /root/var/cache

			mv /var/db/pkg /root/var/db

			mv /var/cache/pkg /root/var/cache

		fi

	elif [ "${PLATFORM}" = "nanobsd" ]; then

		MOVE_PKG_DATA=1

	fi

	fi

		ln -sf ../../root/var/db/pkg /var/db/pkg

		ln -sf ../../root/var/cache/pkg /var/cache/pkg

	fi

/bin/rm -f /root/TRIM_unset

	/sbin/kldstat -qm zfs

	if [ $? -eq 0 ]; then

		/sbin/kldunload zfs

	fi

	/sbin/kldstat -qm zfs

	if [ $? -eq 0 ]; then

		ZFSFSAVAILABLE=$(/sbin/zfs mount 2>/dev/null | wc -l)

		if [ $ZFSFSAVAILABLE -eq 0 ]; then

			/sbin/kldunload zfs

		elif [ -f /usr/bin/grep ]; then

			ZFSROOT=`/sbin/zfs mount | /usr/bin/grep ' /$' | /usr/bin/cut -d ' ' -f 1`

			if [ "$ZFSROOT" != "" ]; then

				/sbin/zfs set readonly=off $ZFSROOT

			fi

		fi

	fi

elif [ "${PLATFORM}" = "cdrom" ]; then

	/etc/rc.cdrom

fi

	/etc/rc.disable_hdd_apm

fi

CDDEVICE=`dmesg |egrep -ie "($MANUFACTURER)" | awk -F: '/cd/ {print $1}'`

if [ "$CDDEVICE" != "" ]; then

	cdcontrol -f /dev/"$CDDEVICE" eject

fi

varrunpath=$(/usr/local/bin/php -n /usr/local/sbin/read_global_var varrun_path "/var/run")

fi

hideplatform=$(/usr/local/bin/php -n /usr/local/sbin/read_global_var hideplatform)

if [ "$hideplatform" = "true" ]; then

else

	platformbanner=" on the '${PLATFORM}' platform"

fi

echo

cat /etc/ascii-art/pfsense-logo-small.txt

echo

echo

	/sbin/swapon -a 2>/dev/null >/dev/null

	/bin/mkdir /tmp/unionfs/usr

	/bin/mkdir /tmp/unionfs/root

	/bin/mkdir /tmp/unionfs/sbin

	/bin/mkdir /tmp/unionfs/bin

	/bin/mkdir /tmp/unionfs/boot

	/bin/mkdir /tmp/unionfs/confdefault

	/sbin/mount_unionfs /tmp/unionfs/usr /usr/

	/sbin/mount_unionfs /tmp/unionfs/root /root/

	/sbin/mount_unionfs /tmp/unionfs/sbin /sbin/

	/sbin/mount_unionfs /tmp/unionfs/confdefault /conf.default/

fi

/bin/rm -rf /var/etc/*

# strongswan pkg upgrade

if [ -L /usr/local/etc/ipsec.d ]; then

	rm -f /usr/local/etc/ipsec.d

fi

if [ -L /usr/local/etc/ipsec.conf ]; then

	rm -f /usr/local/etc/ipsec.conf

fi

	rm -f /usr/local/etc/strongswan.d

fi

	rm -f /usr/local/etc/strongswan.conf

fi

	/bin/rm -f /etc/newsyslog.conf

fi

		touch /var/etc/syslog.conf

	fi

if [ ! -L /etc/hosts ]; then

	/bin/ln -s /var/etc/hosts /etc/hosts

	/bin/ln -s /var/etc/resolv.conf /etc/resolv.conf

	/bin/ln -s /var/etc/resolvconf.conf /etc/resolvconf.conf

# have trouble overriding the PREFIX configure

# argument since we build our packages in a

	# Malloc debugging check

	if [ -L /etc/malloc.conf ]; then

trap "echo 'Reboot interrupted'; exit 1" 3

DEFAULT_LOG_FILE_SIZE=${DEFAULT_LOG_FILE_SIZE:-"511488"}

if [ "$DEVFS" = "0" ]; then

	mount_devfs devfs /dev

# Create an initial utmp file

if [ -f "/dev/kbdmux0" ]; then

	echo -n "."

	/usr/sbin/kbdcontrol -k /dev/kbdmux0 < /dev/console

	[ -c "/dev/atkbd0" ] && kbdcontrol -a atkbd0 < /dev/console

	[ -c "/dev/ukbd0" ] && kbdcontrol -a ukbd0 < /dev/console

fi

if [ -f /dist/uniondirs ]; then

	echo -n "."

	/etc/rc.d/unionfs start

/usr/local/sbin/${product}-upgrade -y -b 2

if [ "$PLATFORM" = "nanobsd" ]; then

# Launch external configuration loader for supported platforms

	/bin/echo -n "Launching /etc/rc.custom_boot_early...";

	/etc/rc.custom_boot_early

	echo "Done"

fi

/usr/bin/touch $varrunpath/booting

if [ "${PLATFORM}" = "nanobsd" ]; then

	# XXX This script does need all filesystems rw!!!!

	# Put this workaround for now until better ways are found.

	/sbin/mount -u -f -r -o sync,noatime /

	/sbin/mount -u -f -r -o sync,noatime /cf

fi

if [ -d /usr/local/share/${product}/custom_logos ]; then

	cp -f /usr/local/share/${product}/custom_logos/*png \

		/usr/local/www

fi

# Be sure the file is removed to not create troubles after

if [ -f $varrunpath/booting ]; then

	/bin/rm $varrunpath/booting

fi

GMIRROR_STATUS=`/sbin/gmirror status`

if [ "${GMIRROR_STATUS}" != "" ]; then

	# Using a flag file at bootup saves an expensive exec/check on each page load.

	/usr/bin/touch /var/run/gmirror_active

	# Setup monitoring/notifications

	/usr/local/bin/minicron 60 /var/run/gmirror_status_check.pid /usr/local/sbin/gmirror_status_check.php

fi

ARCH=`uname -m`