Project

General

Profile

Download (14.7 KB) Statistics
| Branch: | Tag: | Revision:
1
#!/bin/sh
2

    
3
# /etc/rc.firmware
4
# originally part of m0n0wall (http://neon1.net/m0n0wall)
5
# Copyright (C) 2005-2009 Scott Ullrich <sullrich@pfsense.org>.
6
# Copyright (C) 2003 Manuel Kasper <mk@neon1.net>.
7
# All rights reserved.
8

    
9
# mount /cf
10
/etc/rc.conf_mount_rw
11

    
12
# Reset file(s)
13
echo "" >/conf/upgrade_log.txt
14
echo "" >/conf/firmware_update_misc.log
15
echo "" >/conf/fdisk_upgrade_log.txt
16

    
17
exec 3>&2 2>>/conf/firmware_update_misc.log
18

    
19
export ACTION=$1
20
export IMG=$2
21
if [ $# -eq 3 ]; then
22
	export CUSTOMIMG=$3
23
fi
24

    
25
if [ $ACTION != "upgrade" ]; then
26
	/sbin/umount -f /ftmp > /dev/null 2>&1
27
fi
28

    
29
file_notice() {
30
	/usr/local/bin/php -q -d auto_prepend_file=config.inc <<ENDOFF
31
	<?php
32
		require_once("globals.inc");		
33
		require_once("functions.inc");
34
		file_notice("$1", "$2", "$1", "");
35
	?>
36
ENDOFF
37
}
38

    
39
output_env_to_log() {
40
	date >> /conf/upgrade_log.txt
41
	echo "" >> /conf/upgrade_log.txt
42
	
43
	ls -lah /dev/ >> /conf/upgrade_log.txt
44
	echo "" >> /conf/upgrade_log.txt
45

    
46
	ls -lah $IMG >> /conf/upgrade_log.txt
47
	echo "" >> /conf/upgrade_log.txt
48

    
49
	md5 $IMG >> /conf/upgrade_log.txt
50
	echo "" >> /conf/upgrade_log.txt
51

    
52
	mount >> /conf/upgrade_log.txt
53
	echo "" >> /conf/upgrade_log.txt
54

    
55
	top >> /conf/upgrade_log.txt
56
	echo "" >> /conf/upgrade_log.txt
57
}
58

    
59
backup_chflags() {
60
	TOPROCESS="bin lib libexec sbin usr"
61
	for files in $TOPROCESS; do
62
		/usr/sbin/mtree -Pcp /${files} | bzip2 -9 > /tmp/chflags.dist.${files}.bz2 >> /conf/upgrade_log.txt 2>&1
63
	done
64
}
65

    
66
restore_chflags() {
67
	TOPROCESS="bin lib libexec sbin usr"
68
	for files in $TOPROCESS; do
69
		cd / && /usr/bin/bzcat /tmp/chflags.dist.${files}.bz2 | /usr/sbin/mtree -PU -p /${files} >> /conf/upgrade_log.txt 2>&1
70
	done
71
}
72

    
73
remove_chflags() {
74
	TOPROCESS="bin lib libexec sbin usr"
75
	for files in $TOPROCESS; do
76
		/bin/chflags -R noschg /${files}
77
		/bin/chmod -R u+rw /${files}
78
	done
79
}
80

    
81
binary_update() {
82
	TGZ=$1
83
	ERR_F="/tmp/bdiff.log"
84
	rm ${ERR_F} 2>/dev/null
85
	/bin/mkdir /tmp/patched /tmp/patches 2>>${ERR_F}
86
	backup_chflags
87
	remove_chflags
88
	cd /tmp/patches
89
	for i in `/usr/bin/tar tvzf $TGZ | egrep -v "(^d|_md5)" | nawk '{print $9;}'`;
90
	 do
91
	   FILE=`basename ${i}`
92
	   echo "Working on ${i}"
93
	   # Untar patch file and md5 files
94
	   /usr/bin/tar xzf ${TGZ} ${i} ${i}.old_file_md5 ${i}.new_patch_md5 ${i}.new_file_md5 2>>${ERR_F}
95

    
96
	   # Apply patch - oldfile newfile patchfile
97
	   /usr/local/bin/bspatch /${i} /tmp/patched/${FILE} /tmp/patches/${i} 2>>${ERR_F}
98

    
99
	   OLD_FILE_MD5=`cat /tmp/patches/${i}.old_file_md5 2>/dev/null`
100
	   NEW_PATCH_MD5=`cat /tmp/patches/${i}.new_patch_md5 2>/dev/null`
101
	   NEW_FILE_MD5=`cat /tmp/patches/${i}.new_file_md5 2>/dev/null`
102
	   PATCHED_MD5=`/sbin/md5 -q /tmp/patched/${FILE} 2>/dev/null`
103

    
104
	   if [ "$PATCHED_MD5" = "$NEW_PATCH_MD5" ]; then
105
		/usr/bin/install -S  /tmp/patched/${FILE} /${i}
106
	   else
107
		#echo "${i} file does not match intended final md5."
108
		echo "${i} file does not match intended final md5." >> ${ERR_F}
109
	   fi
110

    
111
	   /bin/rm /tmp/patched/${FILE} >> ${ERR_F}
112
	   /bin/rm /tmp/patches/${i} >> ${ERR_F}
113
	   /bin/rm /tmp/patches/${i}.* >> ${ERR_F}
114
	done
115
	/bin/rm -rf /tmp/patched /tmp/patches >> ${ERR_F}
116
	restore_chflags
117
}
118

    
119
case $ACTION in
120
enable)
121
	touch /conf/upgrade_log.txt
122
	echo "" >> /conf/upgrade_log.txt
123
	echo "Enable" >> /conf/upgrade_log.txt
124
	echo "" >> /conf/upgrade_log.txt		
125
	;;
126
auto)
127
	touch /var/run/firmwarelock.dirty
128
	backup_chflags
129
	remove_chflags
130
	/etc/rc.firmware_auto
131
	restore_chflags
132
	;;
133
pfSenseNanoBSDupgrade)
134

    
135
	# Sanity check - bail early if there's no firmware file!
136
	if [ ! -r $IMG ]; then
137
		echo "2nd parameter has not been passed or file does not exist. Exiting." >> /conf/upgrade_log.txt 2>&1
138
		/etc/rc.conf_mount_ro
139
		exit 1
140
	fi
141

    
142
	# Prevent full upgrade file from being used to upgrade
143
	if [ `echo $IMG | grep "full"` ]; then
144
		echo "You cannot use a full file for upgrade.  Please use a file labeled upgrade."
145
		file_notice "NanoBSDUpgradeFailure" "You have attemped to use a full NanoBSD installation file as an upgrade.  Please use a NanoBSD file labeled 'upgrade' instead."
146
		/etc/rc.conf_mount_ro		
147
		exit 1
148
	fi
149

    
150
	touch /var/run/firmwarelock.dirty
151

    
152
	echo "NanoBSD Firmware upgrade in progress..."  >> /conf/upgrade_log.txt 2>&1
153
	echo "NanoBSD Firmware upgrade in progress..." | wall
154

    
155
	# backup config
156
	/bin/mkdir -p /tmp/configbak
157
	cp -p /conf/* /tmp/configbak 2>/dev/null
158

    
159
	touch /conf/upgrade_log.txt
160
	echo "" >> /conf/upgrade_log.txt
161

    
162
	echo "Installing $IMG." >> /conf/upgrade_log.txt 2>&1
163
	echo "Installing $IMG." >> /conf/upgrade_log.txt
164

    
165
	# resolve glabel label that we booted from
166
	BOOT_DEVICE=`/sbin/mount | /usr/bin/grep pfsense | /usr/bin/cut -d'/' -f4 | /usr/bin/cut -d' ' -f1`
167
	# resolve glabel to the real boot dev entry
168
	REAL_BOOT_DEVICE=`/sbin/glabel list | /usr/bin/grep -B2 ufs/${BOOT_DEVICE} | /usr/bin/head -n 1 | /usr/bin/cut -f3 -d' '`
169
	# grab the boot device, example ad1, ad0
170
	BOOT_DRIVE=`/sbin/glabel list | /usr/bin/grep -B2 ufs/pfsense | /usr/bin/head -n 1 | /usr/bin/cut -f3 -d' ' | /usr/bin/cut -d's' -f1`
171
	# test the slice.  if we are on slice 1 we need to flash 2 and vica versa
172
	if [ `echo $REAL_BOOT_DEVICE | /usr/bin/grep "s1"` ]; then 
173
		SLICE="2"
174
		OLDSLICE="1"
175
		TOFLASH="${BOOT_DRIVE}s${SLICE}"
176
		COMPLETE_PATH="${BOOT_DRIVE}s${SLICE}a"
177
		GLABEL_SLICE="pfsense1"
178
		UFS_ID="1"
179
		OLD_UFS_ID="0"
180
	else
181
		SLICE="1"
182
		OLDSLICE="2"		
183
		TOFLASH="${BOOT_DRIVE}s${SLICE}"
184
		COMPLETE_PATH="${BOOT_DRIVE}s${SLICE}a"
185
		GLABEL_SLICE="pfsense0"
186
		UFS_ID="0"
187
		OLD_UFS_ID="1"
188
	fi
189

    
190
	# Output specifc information that this script is using
191
	echo "SLICE $SLICE" >> /conf/upgrade_log.txt
192
	echo "OLDSLICE $OLDSLICE" >> /conf/upgrade_log.txt
193
	echo "TOFLASH $TOFLASH" >> /conf/upgrade_log.txt
194
	echo "COMPLETE_PATH $COMPLETE_PATH" >> /conf/upgrade_log.txt
195
	echo "GLABEL_SLICE $GLABEL_SLICE" >> /conf/upgrade_log.txt
196

    
197
	# Output environment information to log file
198
	output_env_to_log
199
	
200
	# Grab a before upgrade look at fdisk
201
	echo "" >> /conf/fdisk_upgrade_log.txt
202
	echo "Before upgrade fdisk/bsdlabel" >> /conf/fdisk_upgrade_log.txt
203
	fdisk $BOOT_DRIVE >> /conf/fdisk_upgrade_log.txt
204
	fdisk $BOOT_DRIVEs1 >> /conf/fdisk_upgrade_log.txt
205
	fdisk $BOOT_DRIVEs1a >> /conf/fdisk_upgrade_log.txt
206
	fdisk $BOOT_DRIVEs2 >> /conf/fdisk_upgrade_log.txt
207
	fdisk $BOOT_DRIVEs2a >> /conf/fdisk_upgrade_log.txt		
208
	fdisk $BOOT_DRIVEs3 >> /conf/fdisk_upgrade_log.txt
209
	bsdlabel -A $BOOT_DRIVEs1 >> /conf/fdisk_upgrade_log.txt
210
	bsdlabel -A $BOOT_DRIVEs2 >> /conf/fdisk_upgrade_log.txt
211
	bsdlabel -A $BOOT_DRIVEs3 >> /conf/fdisk_upgrade_log.txt
212
	echo "---------------------------------------------------------------" >> /conf/fdisk_upgrade_log.txt
213
	echo "" >> /conf/fdisk_upgrade_log.txt
214
	
215
	# Log that we are really doing a NanoBSD upgrade
216
	echo "" >> /conf/upgrade_log.txt
217
	echo "NanoBSD upgrade starting" >> /conf/upgrade_log.txt
218
	echo "" >> /conf/upgrade_log.txt
219

    
220
	# Remove TOFLASH and get ready for new flash image
221
	echo "" >> /conf/upgrade_log.txt
222
	echo "dd if=/dev/zero of=/dev/${TOFLASH} bs=1m count=1" >> /conf/upgrade_log.txt	
223
	dd if=/dev/zero of=/dev/${TOFLASH} bs=1m count=1 >> /conf/upgrade_log.txt 2>&1
224

    
225
	# Stream gzipped image to dd and explode image to new area
226
	echo "" >> /conf/upgrade_log.txt
227
	echo "/usr/bin/gzip -dc $IMG | /bin/dd of=/dev/${TOFLASH} obs=64k" >> /conf/upgrade_log.txt
228
	/usr/bin/gzip -dc $IMG | /bin/dd of=/dev/${TOFLASH} obs=64k >> /conf/upgrade_log.txt 2>&1
229

    
230
	# Grab a after upgrade look at fdisk
231
	echo "" >> /conf/fdisk_upgrade_log.txt
232
	echo "After upgrade fdisk/bsdlabel" >> /conf/upgrade_log.txt
233
	fdisk $BOOT_DRIVE >> /conf/fdisk_upgrade_log.txt
234
	fdisk $BOOT_DRIVEs1 >> /conf/fdisk_upgrade_log.txt
235
	fdisk $BOOT_DRIVEs1a >> /conf/fdisk_upgrade_log.txt
236
	fdisk $BOOT_DRIVEs2 >> /conf/fdisk_upgrade_log.txt
237
	fdisk $BOOT_DRIVEs2a >> /conf/fdisk_upgrade_log.txt		
238
	fdisk $BOOT_DRIVEs3 >> /conf/fdisk_upgrade_log.txt
239
	bsdlabel -A $BOOT_DRIVEs1 >> /conf/fdisk_upgrade_log.txt
240
	bsdlabel -A $BOOT_DRIVEs2 >> /conf/fdisk_upgrade_log.txt
241
	bsdlabel -A $BOOT_DRIVEs3 >> /conf/fdisk_upgrade_log.txt
242
	echo "---------------------------------------------------------------" >> /conf/fdisk_upgrade_log.txt
243
	echo "" >> /conf/fdisk_upgrade_log.txt
244
	
245
	# Ensure that our new system is sound and bail if it is not and file a notice
246
	echo "" >> /conf/upgrade_log.txt
247
	echo "/sbin/fsck_ufs -y /dev/$COMPLETE_PATH" >> /conf/upgrade_log.txt
248
	/sbin/fsck_ufs -y /dev/$COMPLETE_PATH >> /conf/upgrade_log.txt 2>&1
249
	if [ $? != 0 ]; then
250
		file_notice "UpgradeFailure" "{\$g['product_name']} upgrade has failed.   Your system has been left in a usable state."
251
		rm /var/run/firmwarelock.dirty
252
		/etc/rc.conf_mount_ro		
253
		exit 1
254
	fi
255

    
256
	# Add back the corresponding glabel
257
	echo "" >> /conf/upgrade_log.txt
258
	echo "/sbin/tunefs -L ${GLABEL_SLICE} /dev/$COMPLETE_PATH" >> /conf/upgrade_log.txt
259
	/sbin/tunefs -L ${GLABEL_SLICE} /dev/$COMPLETE_PATH >> /conf/upgrade_log.txt 2>&1
260

    
261
	# restore config
262
	cp -p /tmp/configbak/* /conf 2>/dev/null
263

    
264
	# Remove upgrade file
265
	rm -f $IMG
266

    
267
	# Mount newly prepared slice
268
	mkdir /tmp/$GLABEL_SLICE
269
	mount /dev/ufs/$GLABEL_SLICE /tmp/$GLABEL_SLICE
270

    
271
	# If /tmp/$GLABEL_SLICE/tmp/post_upgrade_command exists 
272
	# after update then execute the command.
273
	if [ -f /tmp/$GLABEL_SLICE/tmp/post_upgrade_command ]; then
274
		sh /tmp/$GLABEL_SLICE/tmp/post_upgrade_command >> /conf/upgrade_log.txt 2>&1
275
	fi
276

    
277
	# Update fstab
278
	cp /etc/fstab /tmp/$GLABEL_SLICE/etc/fstab
279
	sed -i "" "s/pfsense${OLD_UFS_ID}/pfsense${UFS_ID}/g" /tmp/$GLABEL_SLICE/etc/fstab
280
	if [ $? != 0 ]; then
281
		echo "Something went wrong when trying to update the fstab entry.  Aborting upgrade."
282
		file_notice "UpgradeFailure" "Something went wrong when trying to update the fstab entry.  Aborting upgrade."
283
		rm /var/run/firmwarelock.dirty
284
		umount /tmp/$GLABEL_SLICE
285
		/etc/rc.conf_mount_ro
286
		exit 1
287
	fi
288
	echo "" >> /conf/upgrade_log.txt
289
	cat /tmp/$GLABEL_SLICE/etc/fstab >> /conf/upgrade_log.txt
290

    
291
	echo "" >> /conf/upgrade_log.txt
292
	find /tmp/$GLABEL_SLICE >/conf/file_upgrade_log.txt
293
	echo "" >> /conf/upgrade_log.txt
294

    
295
	# Unmount newly prepared slice
296
	umount /tmp/$GLABEL_SLICE
297
	
298
	sync
299

    
300
	# Set active mount slice in fdisk
301
	echo "" >> /conf/upgrade_log.txt
302
	echo "gpart set -a active -i ${SLICE} ${BOOT_DRIVE}" >> /conf/upgrade_log.txt
303
	gpart set -a active -i ${SLICE} ${BOOT_DRIVE}
304

    
305
	sync
306

    
307
	# Set active boot source - NanoBSD does not do this but otherwise we
308
	# end up with the wrong partition being active.
309
	echo "" >> /conf/upgrade_log.txt
310
	echo "/usr/sbin/boot0cfg -s ${SLICE} -v /dev/${BOOT_DRIVE}" >> /conf/upgrade_log.txt
311
	/usr/sbin/boot0cfg -s ${SLICE} -v /dev/${BOOT_DRIVE} >> /conf/upgrade_log.txt 2>&1
312

    
313
	# Grab a final look at fdisk
314
	echo "" >> /conf/fdisk_upgrade_log.txt
315
	echo "Final upgrade fdisk/bsdlabel" >> /conf/fdisk_upgrade_log.txt
316
	fdisk $BOOT_DRIVE >> /conf/fdisk_upgrade_log.txt
317
	fdisk $BOOT_DRIVEs1 >> /conf/fdisk_upgrade_log.txt
318
	fdisk $BOOT_DRIVEs1a >> /conf/fdisk_upgrade_log.txt
319
	fdisk $BOOT_DRIVEs2 >> /conf/fdisk_upgrade_log.txt
320
	fdisk $BOOT_DRIVEs2a >> /conf/fdisk_upgrade_log.txt		
321
	fdisk $BOOT_DRIVEs3 >> /conf/fdisk_upgrade_log.txt
322
	bsdlabel -A $BOOT_DRIVEs1 >> /conf/fdisk_upgrade_log.txt
323
	bsdlabel -A $BOOT_DRIVEs2 >> /conf/fdisk_upgrade_log.txt
324
	bsdlabel -A $BOOT_DRIVEs3 >> /conf/fdisk_upgrade_log.txt
325
	echo "---------------------------------------------------------------" >> /conf/fdisk_upgrade_log.txt
326
	echo "" >> /conf/fdisk_upgrade_log.txt
327

    
328
	# Remove extra stuff
329
	rm -rf /etc/rc.conf
330
	rm -rf /etc/motd
331
	rm -rf /usr/savecore/*
332

    
333
	date >> /conf/upgrade_log.txt
334
	echo "" >> /conf/upgrade_log.txt
335

    
336
	# Trigger a package reinstallation on reobot
337
	touch /conf/needs_package_sync
338

    
339
	# remount /cf ro
340
	/etc/rc.conf_mount_ro
341
	/bin/sync
342

    
343
	sleep 10
344

    
345
	rm -f /var/run/firmwarelock.dirty
346
	sh /etc/rc.reboot
347

    
348
	;;
349
pfSenseupgrade)
350

    
351
	# Sanity check - bail early if there's no firmware file!
352
	if [ ! -r $IMG ]; then
353
		echo "2nd parameter has not been passed or file does not exist. Exiting." >> /conf/upgrade_log.txt 2>&1
354
		/etc/rc.conf_mount_ro
355
		exit
356
	fi
357

    
358
	# wait 1 seconds before beginning
359
	sleep 1
360

    
361
	# Log that we are really doing a NanoBSD upgrade
362
	echo "" >> /conf/upgrade_log.txt
363
	echo "NanoBSD upgrade starting" >> /conf/upgrade_log.txt
364
	echo "" >> /conf/upgrade_log.txt
365

    
366
	touch /var/run/firmwarelock.dirty
367

    
368
	touch /conf/upgrade_log.txt
369
	echo "" >> /conf/upgrade_log.txt
370

    
371
	# Output environment information to log file
372
	output_env_to_log
373

    
374
	backup_chflags
375
	remove_chflags
376

    
377
	# Do we have a pre-upgrade hook in the update file?
378
	if [ `tar tvzf $IMG | grep /tmp/pre_upgrade_command | wc -l` -gt 0 ]; then 
379
		tar xzvf $IMG -C / ./tmp/pre_upgrade_command >> /conf/upgrade_log.txt 2>&1
380
		chmod a+rx /tmp/pre_upgrade_command >> /conf/upgrade_log.txt 2>&1
381
		sh /tmp/pre_upgrade_command >> /conf/upgrade_log.txt 2>&1
382
	fi
383

    
384
	echo "Firmware upgrade in progress..."  >> /conf/upgrade_log.txt 2>&1
385
	echo "Firmware upgrade in progress..."  | wall
386

    
387
	# backup config
388
	/bin/mkdir -p /tmp/configbak
389
	cp -p /conf/* /tmp/configbak 2>/dev/null
390

    
391
	# tar explode image onto hd
392
	echo "Installing $IMG." >> /conf/upgrade_log.txt 2>&1
393
	cd / && /usr/bin/tar xzUPf $IMG >> /conf/upgrade_log.txt 2>&1
394
	/usr/bin/find / -name CVS -exec rm -fr {} \;
395
	echo "Image installed $IMG." >> /conf/upgrade_log.txt 2>&1
396

    
397
    # process custom image if its passed
398
    if [ $# -eq 3 ]; then
399
	    if [ -f $CUSTOMIMG ]; then
400
	        echo "Custom image $CUSTOMIMG found." >> /conf/upgrade_log.txt 2>&1
401
	        echo "Custom image ($CUSTOMIMG) found." >> /conf/upgrade_log.txt 2>&1
402
	        PWD_DIR=`pwd`
403
	        cd / && /usr/bin/tar xzPUf $CUSTOMIMG >> /conf/upgrade_log.txt 2>&1
404
	        cd $PWD_DIR
405
	        echo "Custom image $CUSTOMIMG installed." >> /conf/upgrade_log.txt 2>&1
406
	    fi
407
    fi
408

    
409
	# restore config
410
	cp -p /tmp/configbak/* /conf 2>/dev/null
411

    
412
	# restore /etc symlinks
413
	rm /etc/hosts
414
	ln -s /var/etc/hosts /etc/hosts
415

    
416
	restore_chflags
417

    
418
	# Remove upgrade file
419
	rm -f $IMG
420

    
421
	if [ -e /etc/init_bootloader.sh ]; then
422
		sh /etc/init_bootloader.sh >> /conf/upgrade_log.txt 2>&1
423
	fi
424

    
425
	# If /tmp/post_upgrade_command exists after update
426
	# then execute the command.
427
	if [ -f /tmp/post_upgrade_command ]; then
428
		sh /tmp/post_upgrade_command >> /conf/upgrade_log.txt 2>&1
429
	fi
430

    
431
	# remove unused files
432
	rm -rf /etc/rc.conf
433
	rm -rf /etc/motd
434
	rm -rf /usr/savecore/*
435

    
436
	date >> /conf/upgrade_log.txt
437
	echo "" >> /conf/upgrade_log.txt
438

    
439
	# remount /cf ro
440
	/etc/rc.conf_mount_ro
441

    
442
	# release the firmware lock
443
	rm -f /var/run/firmwarelock.dirty
444
	/bin/sync
445

    
446
	# Sleep and allow disks to catch up
447
	sleep 10
448

    
449
	# If the archive has unpacked a file called
450
	# /tmp/no_upgrade_reboot_required then do
451
	# not reboot after upgrade.
452
	if [ -f /tmp/no_upgrade_reboot_required ]; then
453
		rm /tmp/no_upgrade_reboot_required
454
	else
455
		rm -f /var/run/config.lock
456
		sh /etc/rc.reboot
457
	fi
458

    
459
	;;
460
delta_update)
461
	touch /var/run/firmwarelock.dirty
462
	backup_chflags
463
	remove_chflags
464
	binary_update $IMG
465
	restore_chflags
466
	rm -rf /etc/rc.conf
467
	rm -rf /etc/motd
468
	find / -name CVS -type d -exec rm {} \;
469
	rm -rf /usr/savecore/*
470
	/etc/rc.conf_mount_ro
471
	/sbin/umount -f /cf 2>/dev/null
472
	/sbin/mount -r /cf 2>/dev/null
473
	/sbin/umount -f / 2>/dev/null
474
	/sbin/mount -r / 2>/dev/null
475
	if [ -e /etc/init_bootloader.sh ]; then
476
		sh /etc/init_bootloader.sh
477
	fi
478

    
479
	;;
480
esac
481

    
482

    
(44-44/87)