pfSense

#!/bin/sh

# $Id$

# /etc/rc - master bootup script, invokes php setup

# part of pfSense by Scott Ullrich

# Copyright (C) 2004-2010 Scott Ullrich, All rights reserved.

# originally based on m0n0wall (http://neon1.net/m0n0wall)

# Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.

# All rights reserved.

#/bin/stty status '^T'

#/bin/stty susp '^-' intr '^-' quit '^-'

#trap : 2

#trap : 3

HOME=/

PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin

export HOME PATH

# Set our operating platform

PLATFORM=`/bin/cat /etc/platform`

# Set our current version

version=`/bin/cat /etc/version`

# Setup dumpdev/ddb/savecore"

echo "Configuring crash dumps..."

if [ "$PLATFORM" = "pfSense" ]; then

	/etc/rc.dumpon

fi

if [ -e /root/force_fsck ]; then

	echo "Forcing filesystem check..."

	/sbin/fsck -fy -t ufs /

	if [ "$PLATFORM" = "nanobsd" ]; then

		/sbin/fsck -fy -t ufs /cf

	fi

fi

TUNEFS_STATUS=`/sbin/tunefs -p / 2>&1 | /usr/bin/grep trim: | /usr/bin/awk '{print $4;}'`

if [ -e /root/TRIM_set ] && [ "${TUNEFS_STATUS}" = "disabled" ]; then

	echo "Enabling TRIM support"

	/sbin/tunefs -t enable /

	if [ "$PLATFORM" = "nanobsd" ]; then

		/sbin/tunefs -t enable /cf

	fi

	echo "Rebooting in 5 seconds after enabling TRIM..."

	sleep 5

	/sbin/reboot

elif [ -e /root/TRIM_unset ] && [ "${TUNEFS_STATUS}" = "enabled" ]; then

	echo "Disabling TRIM support"

	/sbin/tunefs -t disable /

	if [ "$PLATFORM" = "nanobsd" ]; then

		/sbin/tunefs -t disable /cf

	fi

	echo "Rebooting in 5 seconds after disabling TRIM..."

	sleep 5

	/sbin/reboot

fi

# Mount memory file system if it exists

echo "Mounting filesystems..."

# Handle ZFS read-only case

if [ "$PLATFORM" = "pfSense" ]; then

	if [ -f /usr/bin/grep ]; then

		WHEREISROOT=`/sbin/mount | /usr/bin/grep " / " | /usr/bin/grep "tank" | /usr/bin/cut -d' ' -f1`

		if [ "$WHEREISROOT" != "" ]; then

			/sbin/zfs set readonly=off $WHEREISROOT

		fi

	fi

fi

if [ "$PLATFORM" = "cdrom" ]; then

	/etc/rc.cdrom

fi

if [ "$PLATFORM" = "embedded" ]; then

	export PKG_TMPDIR=/root/

	/etc/rc.embedded

fi

if [ "$PLATFORM" = "nanobsd" ]; then

	export PKG_TMPDIR=/root/

	/etc/rc.embedded

fi

# Mount /. If it fails run a fsck.

if [ ! "$PLATFORM" = "cdrom" ] ; then

	if [ "$PLATFORM" = "nanobsd" ]; then

		/sbin/mount -uw / || (/sbin/fsck -fy; /sbin/mount -uw /)

	else 

		/sbin/mount -a || (/sbin/fsck -fy; /sbin/mount -a)

	fi

	# If /conf is a directory, convert it to a symlink to /cf/conf

	if [ -d "/conf" ]; then

		# If item is not a symlink then rm and recreate

		CONFPOINTSTO=`readlink /conf` 

		if ! test "x$CONFPOINTSTO" = "x/cf/conf"; then 

			/bin/rm -rf /conf

			/bin/ln -s /cf/conf /conf

		fi

	fi

fi

/bin/rm -f /root/force_fsck

/bin/rm -f /root/TRIM_set

/bin/rm -f /root/TRIM_unset

# Disable APM on ATA drives. Leaving this on will kill drives long-term, especially laptop drives, by generating excessive Load Cycles.

if [ -f /etc/rc.disable_hdd_apm ]; then

	/etc/rc.disable_hdd_apm

fi

#Eject CD devices on 3G modems

MANUFACTURER="huawei|zte"

CDDEVICE=`dmesg |egrep -ie "($MANUFACTURER)" | awk -F: '/cd/ {print $1}'`

if [ "$CDDEVICE" != "" ]; then

	cdcontrol -f /dev/"$CDDEVICE" eject

fi

if [ ! "$PLATFORM" = "jail" ]; then

	# Check to see if a compact flash mountpoint exists

	# If it fails to mount then run a fsck -fy

	if grep -q cf /etc/fstab; then

		/sbin/mount -w /cf 2>/dev/null

		/sbin/mount -uw /cf || \

			(/sbin/umount /cf; /sbin/fsck -fy /cf; /sbin/mount -w /cf)

	fi

fi

# sync pw database after mount.

rm -f /etc/spwd.db.tmp

/usr/sbin/pwd_mkdb -d /etc/ /etc/master.passwd

product=`/usr/bin/grep product_name /etc/inc/globals.inc | /usr/bin/cut -d'"' -f4`

hideplatform=`/usr/bin/grep hideplatform /etc/inc/globals.inc | /usr/bin/wc -l`

varrunpath=`/usr/bin/grep varrun_path /etc/inc/globals.inc | /usr/bin/cut -d'"' -f4`

if [ "$PLATFORM" = "pfSense" ]; then

	/sbin/mdmfs -S -M -s 4m md $varrunpath

fi

if [ "$hideplatform" -gt "0" ]; then

	platformbanner="" # hide the platform

else

	platformbanner=" on the '${PLATFORM}' platform"

fi

echo

cat /etc/ascii-art/pfsense-logo-small.txt

echo

echo

echo "Welcome to ${product} ${version} ${platformbanner} ..."

echo

if [ ! "$PLATFORM" = "jail" ]; then

	# Enable console output if its muted.

	/sbin/conscontrol mute off >/dev/null

fi

if [ "$PLATFORM" = "cdrom" ] ; then

	# do nothing for cdrom platform

elif [ "$PLATFORM" = "embedded" ] ; then

    # do nothing for embedded platform

elif [ "$PLATFORM" = "nanobsd" ] ; then

	# Ensure that old-style PKG packages can be persistent across reboots

	/bin/mkdir -p /root/var/db/pkg

	/bin/rm -rf /var/db/pkg

	/bin/ln -s /root/var/db/pkg/ /var/db/pkg

	# Ensure that PBI packages can be persistent across reboots

	/bin/mkdir -p /root/var/db/pbi

	/bin/rm -rf /var/db/pbi

	/bin/ln -s /root/var/db/pbi/ /var/db/pbi

elif [ "$PLATFORM" = "jail" ]; then

	# do nothing for jail platform

else

	SWAPDEVICE=`/bin/cat /etc/fstab | /usr/bin/grep swap | /usr/bin/cut -f1`

	/sbin/swapon -a 2>/dev/null >/dev/null

	/etc/rc.savecore

fi

if [ "$PLATFORM" = "cdrom" ] ; then

	echo -n "Mounting unionfs directories..."

	/bin/mkdir /tmp/unionfs

	/bin/mkdir /tmp/unionfs/usr

	/bin/mkdir /tmp/unionfs/root

	/bin/mkdir /tmp/unionfs/sbin

	/bin/mkdir /tmp/unionfs/bin

	/bin/mkdir /tmp/unionfs/boot

	/bin/mkdir /tmp/unionfs/confdefault

	/sbin/mount_unionfs /tmp/unionfs/usr /usr/

	/sbin/mount_unionfs /tmp/unionfs/root /root/

	/sbin/mount_unionfs /tmp/unionfs/bin /bin/		

	/sbin/mount_unionfs /tmp/unionfs/sbin /sbin/	

	/sbin/mount_unionfs /tmp/unionfs/boot /boot/

	/sbin/mount_unionfs /tmp/unionfs/confdefault /conf.default/

	echo "done."

fi

# make some directories in /var

/bin/mkdir -p $varrunpath /var/log /var/etc /var/db/entropy /var/at/jobs/ /var/empty 2>/dev/null

/bin/rm -rf $varrunpath/*

if [ "$PLATFORM" != "pfSense" ]; then

	/bin/rm /var/log/* 2>/dev/null

fi

# Cleanup configuration files from previous instance

/bin/rm -rf /var/etc/*

/bin/rm -rf /var/tmp/*

echo -n "Creating symlinks..."

# Make sure symlink is correct on embedded

if [ "$PLATFORM" = "embedded" ] ; then

	/bin/rm /conf

	/bin/ln -s /cf/conf/ /conf

fi

# Make sure symlink is correct on nanobsd

if [ "$PLATFORM" = "nanobsd" ] ; then

	/bin/rm /conf

	/bin/ln -s /cf/conf/ /conf

fi

# Repair symlinks if they are broken

if [ -f /etc/newsyslog.conf ]; then

	/bin/rm -f /etc/newsyslog.conf

fi

if [ ! -L /etc/syslog.conf ]; then

	/bin/rm -rf /etc/syslog.conf

	if [ ! -f /var/etc/syslog.conf ]; then

		touch /var/etc/syslog.conf

	fi

	/bin/ln -s /var/etc/syslog.conf /etc/syslog.conf

fi

# Repair symlinks if they are broken

if [ ! -L /etc/hosts ]; then

	/bin/rm -rf /etc/hosts

	/bin/ln -s /var/etc/hosts /etc/hosts

fi

if [ ! -L /etc/resolv.conf ]; then

    /bin/rm -rf /etc/resolv.conf

    /bin/ln -s /var/etc/resolv.conf /etc/resolv.conf

fi

# Setup compatibility link for packages that

# have trouble overriding the PREFIX configure

# argument since we build our packages in a

# seperated PREFIX area

# Only create if symlink does not exist. 

if [ ! -h /tmp/tmp ]; then

    /bin/ln -hfs / /tmp/tmp

fi

# Make sure our /tmp is 777 + Sticky

if [ ! "$PLATFORM" = "cdrom" ] ; then

	/bin/rm -rf /tmp/*

fi

/bin/chmod 1777 /tmp

if [ ! "$PLATFORM" = "cdrom" ] ; then

	# Malloc debugging check

	if [ -L /etc/malloc.conf ]; then

	    #ln -s aj /etc/malloc.conf

		/bin/rm /etc/malloc.conf

	fi

fi

if [ ! -L /etc/dhclient.conf ]; then

    /bin/rm -rf /etc/dhclient.conf

fi

if [ ! -d /var/tmp ]; then

	/bin/mkdir -p /var/tmp

fi

if [ ! -d /cf/conf/backup/ ]; then

	/bin/mkdir -p /cf/conf/backup/ 

fi

set -T

trap "echo 'Reboot interrupted'; exit 1" 3

# Remove old nameserver resolution files

/bin/rm -f /var/etc/nameserver*

# Create uploadbar tmp directory

/bin/mkdir -p /tmp/uploadbar

/bin/chmod 0777 /tmp/uploadbar

echo -n "."

DISABLESYSLOGCLOG=`/usr/bin/grep -c disablesyslogclog /cf/conf/config.xml`

ENABLEFIFOLOG=`/usr/bin/grep -c usefifolog /cf/conf/config.xml`

LOG_FILES="system filter dhcpd vpn pptps poes l2tps openvpn portalauth ipsec ppp relayd wireless lighttpd ntpd gateways resolver routing"

for logfile in $LOG_FILES; do

	if [ "$DISABLESYSLOGCLOG" -gt "0" ]; then 

		/usr/bin/touch /var/log/$logfile.log

	else 

		if [ ! -f /var/log/$logfile.log ]; then

			if [ "$ENABLEFIFOLOG" -gt "0" ]; then

				# generate fifolog files

				/usr/sbin/fifolog_create -s 511488 /var/log/$logfile.log

			else 

				/usr/sbin/clog -i -s 512144 /var/log/$logfile.log

			fi

		fi

	fi 

done

# change permissions on newly created fifolog files.

/bin/chmod 0600 /var/log/*.log

echo -n "."

if [ ! "$PLATFORM" = "jail" ]; then

	DEVFS=`/sbin/mount | /usr/bin/grep devfs | /usr/bin/wc -l | /usr/bin/cut -d" " -f8`

	if [ "$DEVFS" = "0" ]; then

		mount_devfs devfs /dev

	fi

fi

# Create an initial utmp file

cd $varrunpath && /bin/cp /dev/null utmp && /bin/chmod 644 utmp

echo -n "."

/sbin/ldconfig -elf /usr/lib /usr/local/lib /lib

# Make sure /etc/rc.conf doesn't exist.

if [ -f /etc/rc.conf ]; then

    /bin/rm -rf /etc/rc.conf

fi

if [ ! "$PLATFORM" = "jail" ]; then

	# Launching kbdmux(4)

	if [ -f "/dev/kbdmux0" ]; then

		echo -n "."

		/usr/sbin/kbdcontrol -k /dev/kbdmux0 < /dev/console

		[ -c "/dev/atkbd0" ] && kbdcontrol -a atkbd0 < /dev/console

		[ -c "/dev/ukbd0" ] && kbdcontrol -a ukbd0 < /dev/console

	fi

	# Fire up unionfs if mount points exist.

	if [ -f /dist/uniondirs ]; then

		echo -n "."

		/etc/rc.d/unionfs start

	fi

fi

echo "done."

# Ensure gettytab is of a sane size

if [ `/bin/ls -la /etc/gettytab | /usr/bin/awk '{ print $5'}` -lt 512 ]; then

	echo ">>> Restoring /etc/gettytab due to unusal size"

	echo ">>> Restoring /etc/gettytab due to unusal size" | /usr/bin/logger

	/bin/cp /etc/gettytab.bak /etc/gettytab

fi

# Recreate capabilities DB

/usr/bin/cap_mkdb /etc/login.conf

# Run the php.ini setup file and populate

# /usr/local/etc/php.ini and /usr/local/lib/php.ini

/etc/rc.php_ini_setup 2>/tmp/php_errors.txt

# Launch external configuration loader for supported platforms

if [ "$PLATFORM" = "embedded" ]; then

	/usr/local/bin/php -q /etc/ecl.php

fi

# Launch external configuration loader for supported platforms

if [ "$PLATFORM" = "nanobsd" ]; then

	/usr/local/bin/php -q /etc/ecl.php

fi

# Launch external configuration loader for supported platforms

if [ "$PLATFORM" = "pfSense" ]; then

	/usr/local/bin/php -q /etc/ecl.php

fi

if [ -f /etc/rc.custom_boot_early ]; then

	/bin/echo -n "Launching /etc/rc.custom_boot_early...";

	/etc/rc.custom_boot_early

	echo "Done"

fi

/usr/bin/nice -n20 /usr/local/sbin/check_reload_status

# let the PHP-based configuration subsystem set up the system now

echo -n "Launching the init system..."

/bin/rm -f /cf/conf/backup/backup.cache

/bin/rm -f /root/lighttpd*

/usr/bin/touch $varrunpath/booting

/etc/rc.bootup

# If a shell was selected from recovery 

# console then just drop to the shell now.

if [ -f "/tmp/donotbootup" ]; then

	echo "Dropping to recovery shell."

	exit 0

fi

echo -n "Starting CRON... "

cd /tmp && /usr/sbin/cron -s 2>/dev/null

echo "done."

# Start packages

/etc/rc.start_packages

/bin/rm -rf /usr/local/pkg/pf/CVS

# Start ping handler every 240 seconds

/usr/local/bin/minicron 240 $varrunpath/ping_hosts.pid /usr/local/bin/ping_hosts.sh

# Start account expire handler every hour

/usr/local/bin/minicron 3600 $varrunpath/expire_accounts.pid /etc/rc.expireaccounts

# Start alias url updater every 24 hours

/usr/local/bin/minicron 86400 $varrunpath/update_alias_url_data.pid /etc/rc.update_alias_url_data

/bin/chmod a+rw /tmp/.

echo "Bootup complete"

/bin/rm $varrunpath/booting

/usr/local/bin/beep.sh start 2>&1 >/dev/null

# Reset the cache.  read-only requires this.

/bin/rm -f /tmp/config.cache

exit 0