X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?a=blobdiff_plain;f=debian%2Fpostinst;h=3b3d622220ef0b323fcc8f026e32b9198139411a;hb=8485a58b8bcc5205c18cf8c3f65386c9e70b7dd0;hp=b3f9b688d8bad3ebb311b5557497f5416e83b6d4;hpb=ce4658e5e8c0009ca23ccf462e2ac0efd59a3dc0;p=kernel-cn.git diff --git a/debian/postinst b/debian/postinst index b3f9b68..3b3d622 100755 --- a/debian/postinst +++ b/debian/postinst @@ -1,5 +1,5 @@ #!/bin/sh -# postinst script for spamassassin-cn +# postinst script for kernel-2.6-cn # # see: dh_installdeb(1) @@ -30,6 +30,9 @@ esac # import CN-functions . /usr/share/carnet-tools/functions.sh +# import GRUB helper functions +. /usr/share/kernel-2.6-cn/grub-functions.sh + ################################################################################ # starting up backup @@ -37,20 +40,20 @@ echo -n "CN: Backed up to /var/backups:" # backup lilo.conf if [ -e /etc/lilo.conf ]; then - cp_backup_conffile /etc/lilo.conf - echo -n " lilo.conf" + cp_backup_conffile /etc/lilo.conf + echo -n " lilo.conf" fi # backup old kernel params if [ -e /etc/sysctl.conf ]; then - cp_backup_conffile /etc/sysctl.conf - echo -n " sysctl.conf" + cp_backup_conffile /etc/sysctl.conf + echo -n " sysctl.conf" fi # backup old kernel params if [ -e /etc/kernel-img.conf ]; then - cp_backup_conffile /etc/kernel-img.conf - echo -n " kernel-img.conf" + cp_backup_conffile /etc/kernel-img.conf + echo -n " kernel-img.conf" fi # finished @@ -60,8 +63,8 @@ echo "." # remove obsolete symlinks and kernels rm -f /boot/vmlinuz /boot/vmlinuz.old /boot/vmlinuz.old2 \ - /boot/vmlinuz.plain /vmlinuz /vmlinuz.old /boot/vmlinuz.plain \ - /boot/vmlinuz.generic /boot/vmlinuz-generic /boot/vmlinuz-old + /boot/vmlinuz.plain /vmlinuz /vmlinuz.old /boot/vmlinuz.plain \ + /boot/vmlinuz.generic /boot/vmlinuz-generic /boot/vmlinuz-old echo "CN: Removed old symlinks in / and /boot." ################################################################################ @@ -77,8 +80,8 @@ fi # update postinst_hook for grub if grep -q postinst_hook /etc/kernel-img.conf; then cp_check_and_sed '^postinst_hook' \ - 's;^postinst_hook[[:blank:]]*=.*;postinst_hook = /usr/sbin/update-grub;g' \ - /etc/kernel-img.conf || true + 's;^postinst_hook[[:blank:]]*=.*;postinst_hook = /usr/sbin/update-grub;g' \ + /etc/kernel-img.conf || true else echo "postinst_hook = /usr/sbin/update-grub" >> /etc/kernel-img.conf fi @@ -86,8 +89,8 @@ fi # update postrm_hook for grub if grep -q postrm_hook /etc/kernel-img.conf; then cp_check_and_sed '^postrm_hook' \ - 's;^postrm_hook[[:blank:]]*=.*;postrm_hook = /usr/sbin/update-grub;g' \ - /etc/kernel-img.conf || true + 's;^postrm_hook[[:blank:]]*=.*;postrm_hook = /usr/sbin/update-grub;g' \ + /etc/kernel-img.conf || true else echo "postrm_hook = /usr/sbin/update-grub" >> /etc/kernel-img.conf fi @@ -95,8 +98,8 @@ fi # enable initrd if grep -q do_initrd /etc/kernel-img.conf; then cp_check_and_sed '^do_initrd' \ - 's/^do_initrd[[:blank:]]*=.*/do_initrd = yes/g' \ - /etc/kernel-img.conf || true + 's/^do_initrd[[:blank:]]*=.*/do_initrd = yes/g' \ + /etc/kernel-img.conf || true else echo "do_initrd = yes" >> /etc/kernel-img.conf fi @@ -104,22 +107,26 @@ fi echo -n " kernel-img.conf" # generate initial grub loaders -if [ ! -d /boot/grub ]; then - mkdir -p /boot/grub +if [ ! -d "$grub_dir" ]; then + mkdir -p "$grub_dir" + # x86 if [ -d /usr/lib/grub/i386-pc ]; then - cp -a /usr/lib/grub/i386-pc/* /boot/grub + cp -a /usr/lib/grub/i386-pc/* "$grub_dir" + # x86_64 + elif [ -d /usr/lib/grub/x86_64-pc ]; then + cp -a /usr/lib/grub/x86_64-pc/* "$grub_dir" fi fi echo -n " grub1" # create/update grub configuration -if [ -e /boot/grub/menu.lst ]; then +if [ -e "$menu_file" ]; then # is there uncompatibile grub conf present? - if ! grep -q 'AUTOMAGIC KERNELS LIST' /boot/grub/menu.lst; then - mv -f /boot/grub/menu.lst /boot/grub/menu.lst.old + if ! grep -q 'AUTOMAGIC KERNELS LIST' "$menu_file"; then + mv -f "$menu_file" "$menu_file.old" fi fi -if [ ! -e /boot/grub/menu.lst ]; then +if [ ! -e "$menu_file" ]; then yes | /usr/sbin/update-grub >/dev/null 2>&1 || true else /usr/sbin/update-grub >/dev/null 2>&1 || true @@ -127,41 +134,131 @@ fi echo -n " grub2" # workaround grsec -if [ -x /sbin/chpax ]; then - if [ -x /usr/sbin/grub ]; then - chpax -spmrx /usr/sbin/grub || true +if uname -a | grep -q grsec; then + if [ -x /sbin/chpax ]; then + # grub + if [ -x /usr/sbin/grub.real ]; then + chpax -spmrx /usr/sbin/grub.real >/dev/null 2>&1 || true + elif [ -x /usr/sbin/grub ]; then + chpax -spmrx /usr/sbin/grub >/dev/null 2>&1 || true + fi + + # grub-probe + if [ -x /usr/sbin/grub-probe.real ]; then + chpax -spmrx /usr/sbin/grub-probe.real >/dev/null 2>&1 || true + elif [ -x /usr/sbin/grub-probe ]; then + chpax -spmrx /usr/sbin/grub-probe >/dev/null 2>&1 || true + fi + + echo -n " grsec" fi - if [ -x /usr/sbin/grub-probe ]; then - chpax -spmrx /usr/sbin/grub-probe || true +fi + +# remove obsolete devfs/compat links and restore normal udev behaviour +rm -f /etc/udev/rules.d/devfs.rules /etc/udev/rules.d/compat.rules \ + /etc/udev/rules.d/compat-full.rules +#if [ ! -e /etc/udev/rules.d/udev.rules ]; then +# ln -s ../udev.rules /etc/udev/rules.d/udev.rules +#fi +udevadm control --reload_rules >/dev/null 2>&1 || true +udevsettle || true +echo -n " udev" + +# update device map if possible +if [ -f "$device_map" ]; then + mv -f "$device_map" "$device_map.old" +fi +grub --batch --no-floppy --device-map="$device_map" </dev/null 2>&1 +quit +EOF +if [ ! -s "$device_map" ]; then + if [ -f "$device_map.old" ]; then + mv -f "$device_map.old" "$device_map" fi + +else + rm -f "$device_map.old" fi echo -n " grub3" -# workaround execshield -SHIELD=$(sysctl -e -n kernel.exec-shield) -if [ ! -z "$SHIELD" ]; then - sysctl -w -e kernel.exec-shield=0 >/dev/null 2>&1 -fi +# import GRUB helper functions (again, updated device map) +. /usr/share/kernel-2.6-cn/grub-functions.sh -# install grub loader -if ! grub-install --no-floppy '(hd0)' >/dev/null 2>&1; then +# get install device (0x80 BIOS device) +install_device=$(grep '^(hd0)' "$device_map" | \ + sed -e 's%[^[:space:]]*[[:space:]]*\([^[:space:]]*\)%\1%') +if [ -z "$install_device" ]; then echo "." - echo "CN: FATAL ERROR running grub-install!" + echo "CN: FATAL ERROR while detecting boot disk!" echo "CN: Do not reboot your server and report this to OTRS immediately!" exit 1 fi + +# oops, install device is a symlink... +if [ -h "$install_device" ]; then + install_device_resolved=$(resolve_symlink "$install_device") + if [ -z "$install_device_resolved" ]; then + install_device_resolved="$install_device" + fi + + # try to fix device map with symlink resolved device + if [ "x$install_device_resolved" != "x$install_device" ]; then + cp_check_and_sed '^\(hd0\)' \ + "s;^(hd0).*;(hd0) $install_device_resolved;" "$device_map" \ + || true + fi +fi echo -n " grub4" -# restore execshield state -if [ ! -z "$SHIELD" ]; then - sysctl -w -e "kernel.exec-shield=$SHIELD" >/dev/null 2>&1 +# install GRUB loader +if ! grub-install --no-floppy "$install_device" >/dev/null 2>&1; then + echo "." + echo "CN: FATAL ERROR while running grub-install!" + echo "CN: Do not reboot your server and report this to OTRS immediately!" + exit 1 +fi +echo -n " grub5" + +# fix possible wrong params in menu.lst +cp_check_and_sed '^# groot=' \ + "s;^# groot=.*;# groot=$grub_root_device;g" \ + "$menu_file" || true +cp_check_and_sed '^# kopt=' \ + "s;^# kopt=\(.*\)root=[^[:space:]]*\(.*\);# kopt=\1root=$root_device\2;g" \ + "$menu_file" || true +/usr/sbin/update-grub >/dev/null 2>&1 || true +echo -n " grub6" + +# and final stage of devfs/udev brokeness fix +if [ "x$install_device_resolved" != "x$install_device" ]; then + # get original (symlinked device) + root_device=$(find_device_nonresolved "/") + if [ -z "$root_device" ]; then + root_device=$(find_root_device) + fi + + # fix (hd0) mapping + cp_check_and_sed '^\(hd0\)' \ + "s;^(hd0).*;(hd0) $install_device;" "$device_map" \ + || true + + # fix global root= invocation + cp_check_and_sed '^# kopt=' \ + "s;^# kopt=\(.*\)root=[^[:space:]]*\(.*\);# kopt=\1root=$root_device\2;g" \ + "$menu_file" || true + + # fix root= invocation for individual kernel profiles + cp_check_and_sed '^kernel' \ + "s;\(^kernel.*\)root=[^[:space:]]*\(.*\);\1root=$root_device\2;g" \ + "$menu_file" || true fi +echo -n " grub7" # disable lilo if [ -e /etc/lilo.conf ]; then mv -f /etc/lilo.conf /etc/lilo.conf.old + echo -n " lilo" fi -echo -n " lilo" # mdadm if [ -x /usr/share/mdadm/mkconf ]; then @@ -178,7 +275,7 @@ if [ -x /usr/share/mdadm/mkconf ]; then echo -n " mdadm" fi -# update initramfs accordingly +# update initramfs accordingly (because of mdadm and udev) update-initramfs -u -k all >/dev/null 2>&1 || true echo -n " initramfs" @@ -193,8 +290,8 @@ echo -n "CN: Modifying the neccessary system files:" # remove group 99 if getent group proc >/dev/null 2>&1; then groupdel proc >/dev/null 2>&1 + echo -n " proc" fi -echo -n " proc" # remove oidentd from oident group if getent group oident >/dev/null 2>&1; then @@ -239,10 +336,8 @@ EOF # old kernel params if [ -e /etc/sysctl.conf ]; then - #cat /etc/sysctl.conf >> /etc/sysctl.conf.$$ - #ignore some of 2.4 stuff - egrep -v 'net\.core\.(r|w)mem_max|net\.ipv4\.tcp_(r|w)mem|vm\.bdflush|net\.ipv4\.ip_local_port_range|kernel\.rtsig-max|net\.ipv4\.tcp_syncookies' \ - /etc/sysctl.conf >> /etc/sysctl.conf.$$ + egrep -v 'net\.core\.(r|w)mem_max|net\.ipv4\.tcp_(r|w)mem|vm\.bdflush|net\.ipv4\.ip_local_port_range|kernel\.rtsig-max|net\.ipv4\.tcp_syncookies' \ + /etc/sysctl.conf >> /etc/sysctl.conf.$$ fi # add sysctl.conf Debian headers @@ -292,31 +387,31 @@ echo -n "CN: Setting up PAM configurations:" # update pam_limits accordingly if [ -e /etc/security/limits.conf ]; then - rm -f /etc/security/limits.conf.$$ - cp /etc/security/limits.conf /etc/security/limits.conf.$$ - cp-update kernel-2.6-cn /etc/security/limits.conf.$$ <