| 1 |
5b237745
|
Scott Ullrich
|
<?php
|
| 2 |
09221bc3
|
Renato Botelho
|
/*
|
| 3 |
ac24dc24
|
Renato Botelho
|
* config.inc
|
| 4 |
|
|
*
|
| 5 |
|
|
* part of pfSense (https://www.pfsense.org)
|
| 6 |
38809d47
|
Renato Botelho do Couto
|
* Copyright (c) 2004-2013 BSD Perimeter
|
| 7 |
|
|
* Copyright (c) 2013-2016 Electric Sheep Fencing
|
| 8 |
0284d79e
|
jim-p
|
* Copyright (c) 2014-2020 Rubicon Communications, LLC (Netgate)
|
| 9 |
ac24dc24
|
Renato Botelho
|
* All rights reserved.
|
| 10 |
|
|
*
|
| 11 |
|
|
* originally part of m0n0wall (http://m0n0.ch/wall)
|
| 12 |
c5d81585
|
Renato Botelho
|
* Copyright (c) 2003-2004 Manuel Kasper <mk@neon1.net>.
|
| 13 |
ac24dc24
|
Renato Botelho
|
* All rights reserved.
|
| 14 |
|
|
*
|
| 15 |
b12ea3fb
|
Renato Botelho
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
| 16 |
|
|
* you may not use this file except in compliance with the License.
|
| 17 |
|
|
* You may obtain a copy of the License at
|
| 18 |
ac24dc24
|
Renato Botelho
|
*
|
| 19 |
b12ea3fb
|
Renato Botelho
|
* http://www.apache.org/licenses/LICENSE-2.0
|
| 20 |
ac24dc24
|
Renato Botelho
|
*
|
| 21 |
b12ea3fb
|
Renato Botelho
|
* Unless required by applicable law or agreed to in writing, software
|
| 22 |
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
| 23 |
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
| 24 |
|
|
* See the License for the specific language governing permissions and
|
| 25 |
|
|
* limitations under the License.
|
| 26 |
ac24dc24
|
Renato Botelho
|
*/
|
| 27 |
5b237745
|
Scott Ullrich
|
|
| 28 |
1e0b1727
|
Phil Davis
|
if (!function_exists('platform_booting')) {
|
| 29 |
ca301b52
|
Ermal LUÇI
|
require_once('globals.inc');
|
| 30 |
1e0b1727
|
Phil Davis
|
}
|
| 31 |
ca301b52
|
Ermal LUÇI
|
|
| 32 |
96447b25
|
Scott Ullrich
|
/* do not load this file twice. */
|
| 33 |
cba19251
|
Chris Buechler
|
//if (in_array("/etc/inc/config.inc", get_included_files()))
|
| 34 |
|
|
// return;
|
| 35 |
96447b25
|
Scott Ullrich
|
|
| 36 |
31c3942c
|
Scott Ullrich
|
// Set the memory limit to 128M on i386. When someone has something like 500+ tunnels
|
| 37 |
5acce704
|
Renato Botelho
|
// the parser needs quite a bit of ram. Do not remove this line unless you
|
| 38 |
8ecc250a
|
Scott Ullrich
|
// know what you are doing. If in doubt, check with dev@ _/FIRST/_!
|
| 39 |
1e0b1727
|
Phil Davis
|
if (!$ARCH) {
|
| 40 |
7a755156
|
Ermal
|
$ARCH = php_uname("m");
|
| 41 |
1e0b1727
|
Phil Davis
|
}
|
| 42 |
31c3942c
|
Scott Ullrich
|
|
| 43 |
b20c7ef1
|
Chris Buechler
|
// Set memory limit to 512M on amd64.
|
| 44 |
1e0b1727
|
Phil Davis
|
if ($ARCH == "amd64") {
|
| 45 |
b20c7ef1
|
Chris Buechler
|
ini_set("memory_limit", "512M");
|
| 46 |
1e0b1727
|
Phil Davis
|
} else {
|
| 47 |
086cf944
|
Phil Davis
|
ini_set("memory_limit", "128M");
|
| 48 |
1e0b1727
|
Phil Davis
|
}
|
| 49 |
8ecc250a
|
Scott Ullrich
|
|
| 50 |
bb1546f6
|
Ermal Lu?i
|
/* include globals from notices.inc /utility/XML parser files */
|
| 51 |
|
|
require_once("notices.inc");
|
| 52 |
5b237745
|
Scott Ullrich
|
require_once("util.inc");
|
| 53 |
470fddb1
|
Renato Botelho
|
require_once("Net/IPv6.php");
|
| 54 |
730b6148
|
smos
|
require_once('config.lib.inc');
|
| 55 |
1e0b1727
|
Phil Davis
|
if (file_exists("/cf/conf/use_xmlreader")) {
|
| 56 |
093bcebc
|
Scott Ullrich
|
require_once("xmlreader.inc");
|
| 57 |
1e0b1727
|
Phil Davis
|
} else {
|
| 58 |
093bcebc
|
Scott Ullrich
|
require_once("xmlparse.inc");
|
| 59 |
1e0b1727
|
Phil Davis
|
}
|
| 60 |
67fc82b5
|
Ermal Lu?i
|
require_once("crypt.inc");
|
| 61 |
5b237745
|
Scott Ullrich
|
|
| 62 |
727a2b91
|
Scott Ullrich
|
/* if /debugging exists, lets set $debugging
|
| 63 |
|
|
so we can output more information */
|
| 64 |
1e0b1727
|
Phil Davis
|
if (file_exists("/debugging")) {
|
| 65 |
727a2b91
|
Scott Ullrich
|
$debugging = true;
|
| 66 |
1324a93a
|
Scott Ullrich
|
$g['debug'] = true;
|
| 67 |
|
|
}
|
| 68 |
727a2b91
|
Scott Ullrich
|
|
| 69 |
1e0b1727
|
Phil Davis
|
if (platform_booting(true)) {
|
| 70 |
6878d797
|
Ermal LUÇI
|
echo ".";
|
| 71 |
1e0b1727
|
Phil Davis
|
if (file_exists("/cf/conf/config.xml")) {
|
| 72 |
6878d797
|
Ermal LUÇI
|
$config_contents = file_get_contents("/cf/conf/config.xml");
|
| 73 |
1e0b1727
|
Phil Davis
|
if (stristr($config_contents, "<m0n0wall>") == true) {
|
| 74 |
6878d797
|
Ermal LUÇI
|
echo ".";
|
| 75 |
1e0b1727
|
Phil Davis
|
/* user has just upgraded from m0n0wall, replace root xml tags */
|
| 76 |
6878d797
|
Ermal LUÇI
|
log_error(gettext("Upgrading m0n0wall configuration to pfSense... "));
|
| 77 |
086cf944
|
Phil Davis
|
$config_contents = str_replace("m0n0wall", "pfsense", $config_contents);
|
| 78 |
1e0b1727
|
Phil Davis
|
if (!config_validate("{$g['conf_path']}/config.xml")) {
|
| 79 |
6878d797
|
Ermal LUÇI
|
log_error(gettext("ERROR! Could not convert m0n0wall -> pfsense in config.xml"));
|
| 80 |
1e0b1727
|
Phil Davis
|
}
|
| 81 |
6878d797
|
Ermal LUÇI
|
file_put_contents("/cf/conf/config.xml", $config_contents);
|
| 82 |
|
|
}
|
| 83 |
|
|
unset($config_contents);
|
| 84 |
49ed889c
|
Scott Ullrich
|
}
|
| 85 |
6878d797
|
Ermal LUÇI
|
/* if our config file exists bail out, we're already set. */
|
| 86 |
086cf944
|
Phil Davis
|
else if (!file_exists($g['cf_conf_path'] . "/config.xml")) {
|
| 87 |
6878d797
|
Ermal LUÇI
|
echo ".";
|
| 88 |
|
|
/* find the device where config.xml resides and write out an fstab */
|
| 89 |
|
|
unset($cfgdevice);
|
| 90 |
|
|
echo ".";
|
| 91 |
|
|
/* check if there's already an fstab (NFS booting?) */
|
| 92 |
|
|
if (!file_exists("{$g['etc_path']}/fstab")) {
|
| 93 |
|
|
echo ".";
|
| 94 |
60f164f3
|
Renato Botelho
|
/* probe kernel known disks until we find one with config.xml */
|
| 95 |
|
|
$disks = explode(" ", get_single_sysctl("kern.disks"));
|
| 96 |
|
|
foreach ($disks as $mountdisk) {
|
| 97 |
|
|
/* skip mfs mounted filesystems */
|
| 98 |
|
|
if (strstr($mountdisk, "md")) {
|
| 99 |
|
|
continue;
|
| 100 |
655a80eb
|
Scott Ullrich
|
}
|
| 101 |
60f164f3
|
Renato Botelho
|
if (mwexec("/sbin/mount -r /dev/{$mountdisk}a {$g['cf_path']}") == 0) {
|
| 102 |
|
|
if (file_exists("{$g['cf_conf_path']}/config.xml")) {
|
| 103 |
|
|
/* found it */
|
| 104 |
|
|
$cfgdevice = $mountdisk;
|
| 105 |
|
|
$cfgpartition = $cfgdevice . "a";
|
| 106 |
|
|
$cfgfstype = "ufs";
|
| 107 |
1579e70f
|
Phil Davis
|
printf(gettext('Found configuration on %1$s.%2$s'), $cfgdevice, "\n");
|
| 108 |
1e0b1727
|
Phil Davis
|
}
|
| 109 |
6878d797
|
Ermal LUÇI
|
|
| 110 |
60f164f3
|
Renato Botelho
|
mwexec("/sbin/umount -f {$g['cf_path']}");
|
| 111 |
6878d797
|
Ermal LUÇI
|
|
| 112 |
60f164f3
|
Renato Botelho
|
if ($cfgdevice) {
|
| 113 |
|
|
break;
|
| 114 |
|
|
}
|
| 115 |
|
|
}
|
| 116 |
|
|
if (mwexec("/sbin/mount -r /dev/{$mountdisk}d {$g['cf_path']}") == 0) {
|
| 117 |
|
|
if (platform_booting()) {
|
| 118 |
|
|
echo ".";
|
| 119 |
|
|
}
|
| 120 |
|
|
if (file_exists("{$g['cf_conf_path']}/config.xml")) {
|
| 121 |
|
|
/* found it */
|
| 122 |
|
|
$cfgdevice = $mountdisk;
|
| 123 |
|
|
$cfgpartition = $cfgdevice . "d";
|
| 124 |
|
|
$cfgfstype = "ufs";
|
| 125 |
1579e70f
|
Phil Davis
|
printf(gettext('Found configuration on %1$s.%2$s'), $cfgdevice, "\n");
|
| 126 |
6878d797
|
Ermal LUÇI
|
}
|
| 127 |
|
|
|
| 128 |
60f164f3
|
Renato Botelho
|
mwexec("/sbin/umount -f {$g['cf_path']}");
|
| 129 |
6878d797
|
Ermal LUÇI
|
|
| 130 |
60f164f3
|
Renato Botelho
|
if ($cfgdevice) {
|
| 131 |
|
|
break;
|
| 132 |
655a80eb
|
Scott Ullrich
|
}
|
| 133 |
5b237745
|
Scott Ullrich
|
}
|
| 134 |
|
|
}
|
| 135 |
6878d797
|
Ermal LUÇI
|
echo ".";
|
| 136 |
|
|
if (!$cfgdevice) {
|
| 137 |
|
|
$last_backup = discover_last_backup();
|
| 138 |
1e0b1727
|
Phil Davis
|
if ($last_backup) {
|
| 139 |
6878d797
|
Ermal LUÇI
|
log_error(gettext("No config.xml found, attempting last known config restore."));
|
| 140 |
|
|
file_notice("config.xml", gettext("No config.xml found, attempting last known config restore."), "pfSenseConfigurator", "");
|
| 141 |
|
|
restore_backup("/cf/conf/backup/{$last_backup}");
|
| 142 |
|
|
} else {
|
| 143 |
|
|
log_error(gettext("No config.xml or config backups found, resetting to factory defaults."));
|
| 144 |
|
|
restore_backup('/conf.default/config.xml');
|
| 145 |
|
|
}
|
| 146 |
1a23410c
|
Scott Ullrich
|
}
|
| 147 |
5b237745
|
Scott Ullrich
|
|
| 148 |
6878d797
|
Ermal LUÇI
|
/* write out an fstab */
|
| 149 |
5b237745
|
Scott Ullrich
|
|
| 150 |
6878d797
|
Ermal LUÇI
|
$fstab = "/dev/{$cfgpartition} {$g['cf_path']} {$cfgfstype} ro,noatime 1 1\n";
|
| 151 |
|
|
$fstab .= "proc /proc procfs rw 0 0\n";
|
| 152 |
|
|
file_put_contents("{$g['etc_path']}/fstab", $fstab);
|
| 153 |
|
|
}
|
| 154 |
|
|
echo ".";
|
| 155 |
|
|
/* mount all filesystems */
|
| 156 |
|
|
mwexec("/sbin/mount -a");
|
| 157 |
5b237745
|
Scott Ullrich
|
}
|
| 158 |
6878d797
|
Ermal LUÇI
|
echo ".";
|
| 159 |
5b237745
|
Scott Ullrich
|
}
|
| 160 |
|
|
|
| 161 |
f1d634bb
|
Scott Ullrich
|
$config = parse_config();
|
| 162 |
|
|
|
| 163 |
34d70cc0
|
Scott Ullrich
|
/* set timezone */
|
| 164 |
ecaca752
|
Renato Botelho
|
if (isset($config['system']['timezone']) &&
|
| 165 |
|
|
!empty($config['system']['timezone'])) {
|
| 166 |
|
|
$timezone = $config['system']['timezone'];
|
| 167 |
|
|
} elseif (isset($g['default_timezone']) && !empty($g['default_timezone'])) {
|
| 168 |
|
|
$timezone = $g['default_timezone'];
|
| 169 |
|
|
} else {
|
| 170 |
34d70cc0
|
Scott Ullrich
|
$timezone = "Etc/UTC";
|
| 171 |
1e0b1727
|
Phil Davis
|
}
|
| 172 |
34d70cc0
|
Scott Ullrich
|
date_default_timezone_set("$timezone");
|
| 173 |
|
|
|
| 174 |
1e0b1727
|
Phil Davis
|
if ($config_parsed == true) {
|
| 175 |
135ef84a
|
Scott Ullrich
|
/* process packager manager custom rules */
|
| 176 |
1e0b1727
|
Phil Davis
|
if (is_dir("/usr/local/pkg/parse_config")) {
|
| 177 |
135ef84a
|
Scott Ullrich
|
run_plugins("/usr/local/pkg/parse_config/");
|
| 178 |
|
|
}
|
| 179 |
|
|
}
|
| 180 |
|
|
|
| 181 |
730b6148
|
smos
|
?>
|