1 # last update: 2005-07-03
2 # Ivan 'ico' Rako <irako@srce.hr>
3 # Zoran 'jelly' Dzelajlija <jelly@srce.hr>
6 dialog --backtitle "$title" --msgbox "$*" 18 75
10 dialog --backtitle "$title" --yesno "$msg_first_warning" 18 75
15 dpkg -l "$1" 2> /dev/null | egrep -q "^.i" || return 1
16 [ -z "$2" ] && return 0
17 version=$(dpkg -s "$1" | awk '/^Version:/ {print $2}')
18 dpkg --compare-versions "$version" "$2" "$3" 2>&1 > /dev/null
22 logfile=${logfile:=/var/log/carnet-upgrade.log}
24 echo "$(date +'%Y-%m-%d %H:%M:%S') $*" >> $logfile
28 # find first free uid/gid in range
29 # find_id passwd 100 999
31 local i db first last ids
35 ids=$(getent $db | awk -F: "\$3 >= $first && \$3 <= $last {print \$3}")
36 for i in $(seq $first $last)
38 if ! echo $ids | grep -q $i; then
48 [ "$DEBIAN_SCRIPT_DEBUG" ] && set -vx
57 [ -e "$i" ] || continue
58 egrep -q "$s" "$i" || continue
59 [ -h "$i" ] && i=$(readlink -f "$i")
60 sed "$sedcmd" "$i" > "$i.dpkg-tmp"
61 chown --reference "$i" "$i.dpkg-tmp"
62 chmod --reference "$i" "$i.dpkg-tmp"
66 if [ "$ret" -eq 0 ]; then
67 log "Done \"$sedcmd\" to $*"
73 # Update uid for user from reserved system range (0-99) to dynamic system
74 # range (100-999). Optionally update ownerships of given directories.
75 # $0 user [directory ...]
77 check_and_update_ugid() {
78 local user newgid newuid
80 if [ "$(getent passwd $user | awk -F: '$3 >= 100 {print "ok"; exit 0}')" ]; then
84 newgid=$(find_id group 100 999)
85 newuid=$(find_id passwd 100 999)
86 # other directories/files
87 chown -R $newuid:$newgid $*
88 groupmod -g $newgid $user
89 usermod -u $newuid -g $newgid $user
90 log "Fixed $user user uid/gid."
94 [ -n "$*" ] || return 0
95 log "Installing $* ..."
96 apt-get -y$s install $* || {
99 apt-get -y$s install $*
104 [ -n "$*" ] || return 0
105 log "Removing $* ..."
106 apt-get -y$s --purge remove $* || {
109 apt-get -y$s --purge remove $*
114 log "Running apt-get update ..."
115 apt-get -y$s update || {
120 apt-get -dy$s dist-upgrade
124 log "Running dist-upgrade ..."
125 apt-get -y$s dist-upgrade || {
127 apt-get -y$s dist-upgrade
132 local to_remove add_this i j n text to_show cmd tmpfile installed
133 local update_selections pkgs_to_deselect pkgs_to_remove oldifs pkglist
134 text="$msg_remove_bloat"
136 [ "$DEBUG" ] && set -x
138 pkglist=$(mktemp /var/lib/carnet-upgrade/pkglist.XXXXXX)
139 COLUMNS=200 dpkg -l | awk '$1 ~ /^.i/ { print $2 }' > $pkglist
140 for i in $(echo "$bloats" | sed 's/ */ /g'| awk -F' ' '{print $2}')
142 if grep -q "^$i$" $pkglist; then
143 installed="$installed $i"
144 add_this="$(echo "$bloats" | egrep " .*\b${i}\b" | sed 's/ */ /g'| awk -F' ' '{print $1}')"
145 if ! echo "$to_show" | grep -q "$add_this"; then
146 to_show="$to_show \"$add_this\" \"\" on"
151 [ "$DEBUG" ] || rm -f $pkglist
152 [ -z "$to_show" ] && return 0
154 tmpfile=$(mktemp /var/lib/carnet-upgrade/dialog-tmp.XXXXXX)
155 cmd="dialog --nocancel --backtitle \""$title"\" --checklist \""$text"\" 20 75 $n $to_show"
156 [ "$DEBUG" ] && set +x
157 eval $cmd 2> $tmpfile
158 [ "$DEBUG" ] && set -x
159 to_remove="$(cat $tmpfile | sed 's/\"\ \"/ /g; s/\"\ *//g; s/\\//g')"
160 [ "$DEBUG" ] || rm -f $tmpfile
161 [ "$DEBUG" ] && echo "DEBUG: to_remove=$to_remove" 1>&2
164 for i in $(echo "$to_remove")
167 for j in $(echo "$bloats" | grep "^$i" | sed 's/ */ /g'| awk -F' ' '{print $2}')
169 # hopefully this will tell apt not to reinstall them at upgrade time
170 update_selections="${update_selections}
172 pkgs_to_deselect="$pkgs_to_deselect $j"
173 # only remove those that really are installed
174 if echo "$installed" | grep -q "$j"; then
175 pkgs_to_remove="$pkgs_to_remove $j"
179 [ "$DEBUG" ] && echo "DEBUG: pkgs_to_remove=$pkgs_to_remove" 1>&2
180 # Finally, remove those
181 if [ -n "$update_selections" ]; then
182 echo "$update_selections" | dpkg --set-selections
183 log "Deselected:${pkgs_to_deselect}"
185 eval pkgrm $pkgs_to_remove
189 touch "$post_upgrade_queuetab"
190 if ! grep -q "true $*" "$post_upgrade_queuetab"; then
191 echo "true $*" >> "$post_upgrade_queuetab"
196 if [ -f "$post_upgrade_queuetab" ]; then
197 run_actions post_upgrade "$post_upgrade_queuetab"
198 mv "$post_upgrade_queuetab" "${post_upgrade_queuetab}.done.$(date '+%Y-%m-%d.%H:%M:%S')"
205 local line lineno lineno2 f n name action checkmsg check
206 [ "$DEBUG" ] && set -vx
209 [ -f "$f" ] || return 2 # no such file
210 n=$(wc -l "$f" | awk '{print $1}')
211 [ "$n" -lt 1 ] && return 1 # no lines to process
212 log "run_actions ($name) started, processing $n lines from \"$f\"."
216 while [ "$lineno" -lt "$n" ]
218 lineno=$(($lineno+1))
220 line=$(head -$lineno "$f" | tail -1)
221 if echo $line | grep -q '^#'; then # comment
224 while echo "$line" | egrep -q '\\$' # continuation
226 lineno2=$(($lineno2+1))
227 line=$(echo -n "$line"| sed 's/\\$//'; head -$lineno2 "$f" | tail -1)
229 check=$(echo "$line" | sed 's/ */ /g'| awk -F' ' '{print $1}')
230 action=$(echo "$line" | sed 's/ */ /g'| awk -F' ' '{print $2}')
232 [ "$check" != "true" ] && checkmsg="if '$check'"
234 log "$(printf 'action %02d' $lineno) starting: '${action}' $checkmsg "
236 log "$(printf 'action %02d' $lineno) finished: '${action}' $checkmsg"
238 log "$(printf 'action %02d' $lineno) skipping: '${action}' $checkmsg"
240 [ "$lineno2" -gt "$lineno" ] && lineno=$lineno2
242 log "run_actions ($1) finished"
246 # funkcija vraca popis paketa koje treba upgradeati
248 local IFSOLD name version package
250 for package in `echo "$needed_versions" | awk '{print $1}'| grep -v ^$`; do
253 read name version <<-EOPTS
254 $(echo "$needed_versions" | sed 's/ */ /g' | grep ^$package)
257 if pkg "$name" lt "$version"; then
263 # funkcija za ispis paketa koje treba upgradeati
266 upgrade="`what_upgrade`"
268 if [ "$upgrade" ]; then
270 Prije prelaska na Debian Etch potrebno je napraviti nadogradnju ovih paketa:
274 'apt-get dist-upgrade'
276 'apt-get install${upgrade}'
278 Nakon toga ponovno pozovite ovu skriptu."
279 log "carnet-upgrade aborted, upgrade of$upgrade needed."
284 # if apache is installed make sure it's version 2
285 check_apache_version () {
287 if pkg apache-cn && ! pkg apache2-cn; then
289 Prije prelaska na Debian Etch potrebno je napraviti nadogradnju sa Apache 1.3 na Apache 2.0.
292 'apt-get install apache2-cn'
294 Nakon toga ponovno pozovite ovu skriptu."
295 log "carnet-upgrade aborted, upgrade to apache2-cn needed."
301 local i to_install packages
304 packages="$packages_first"
307 packages="$packages_second"
315 pkg $i && to_install="$to_install $i"
318 if [ -n "$to_install" ];then
319 eval pkgadd $to_install
325 # funkcija utrpa ispravan sources.list
326 create_sources_list () {
328 sl=/etc/apt/sources.list
329 sl_new=/usr/share/carnet-upgrade/files/etc/apt/sources.list
331 # check if already installed
332 if ! cmp $sl $sl_new >/dev/null; then
335 if [ -f $sl -a ! -f $sl.$backup_ext ]; then
336 cp -av $sl $sl.$backup_ext
339 # install new version
341 notice "Novi sadrzaj datoteke /etc/apt/sources.list:
343 `cat /etc/apt/sources.list`"
348 # funkcija koja brise grupu proc
349 remove_group_proc () {
350 if getent group proc > /dev/null; then
351 groupdel proc || true
352 log "groupdel proc (temporarily)"
353 post_upgrade add_group_proc
358 if ! getent group proc > /dev/null; then
359 # grsec uses gid 99 for /proc files
361 log "groupadd -g 99 proc"
363 # update oidentd so it uses the proc group
364 if [ -x /etc/init.d/oidentd ]; then
365 if gpasswd -a oident proc; then
366 /etc/init.d/oidentd restart
372 # backup ldap database
374 local ldap_backup=/var/backups/slapcat.$backup_ext
375 local old_umask result
377 if [ ! -f $ldap_backup ]; then
378 [ -x /etc/init.d/freeradius ] && /etc/init.d/freeradius stop || true
380 if [ -x /etc/init.d/slapd -a -d /var/lib/ldap ]; then
381 /etc/init.d/slapd stop || true
383 umask 0077 # protect the backup file
384 slapcat -l $ldap_backup
387 /etc/init.d/slapd start || true
389 if [ "$result" -eq 0 ]; then
390 log "$ldap_backup created"
391 notice "Napravljen backup slapd baze u $ldap_backup."
393 log "$ldap_backup was not created"
394 notice "Backup slapd baze u $ldap_backup nije uspio."
399 [ -x /etc/init.d/freeradius ] && /etc/init.d/freeradius start || true
401 log "slapd backup already at $ldap_backup, skipping."
402 notice "Backup slapd baze u $ldap_backup vec postoji!"
406 # backup etc direktorija
408 local etc_backup=/var/backups/etc.$backup_ext.tar.gz
411 if [ ! -f $etc_backup ]; then
413 umask 0077 # protect the backup file
415 if tar cfz $etc_backup /etc 2> /dev/null; then
416 log "$etc_backup created"
417 notice "Napravljen backup /etc direktorija u $etc_backup."
419 log "$etc_backup was not created"
420 notice "Backup /etc direktorija u $etc_backup nije uspio."
425 log "/etc backup already present in $etc_backup, skipping."
426 notice "Backup /etc direktorija u $etc_backup vec postoji!"
430 # fixaj /etc/default/raid2
431 fix_etc_default_raid2 () {
432 if [ -f /etc/default/raid2 ]; then
433 sed "s/^AUTOSTART.*/AUTOSTART=true/g" /etc/default/raid2 > /etc/default/raid2.$backup_ext.$$
434 chown --reference=/etc/default/raid2 /etc/default/raid2.$backup_ext.$$
435 chmod --reference=/etc/default/raid2 /etc/default/raid2.$backup_ext.$$
437 if ! cmp -s /etc/default/raid2.$backup_ext.$$ /etc/default/raid2; then
438 log "Fixed /etc/default/raid2 AUTOSTART option."
439 mv -v /etc/default/raid2.$backup_ext.$$ /etc/default/raid2
441 rm -v /etc/default/raid2.$backup_ext.$$
446 # restore original config file (if the new package version is not
449 local file file_backup file_orig
452 # create new files safely
456 # restore package files
458 file_orig=/usr/share/carnet-upgrade/files/$file
459 file_backup=$file.$backup_ext
462 if [ ! -e $file ]; then
467 if cmp $file_orig $file >/dev/null; then
472 if [ ! -e $file_backup ]; then
473 log "Restoring config file $file"
475 # backup local changes
476 mv -v $file $file_backup
479 cp -av $file_orig $file
480 chown --reference $file_backup $file
481 chmod --reference $file_backup $file
488 # restore modified config to their package defaults
489 # so the upgrade doesn't complain so much
493 pkg base-files lt 4 && restore_config /etc/issue /etc/issue.net
494 pkg bind9 lt 1:9.3.4 && restore_config /etc/bind/named.conf.options
495 pkg libpam-modules lt 0.79 && restore_config /etc/security/limits.conf
496 pkg login lt 1:4.0.18.1 && restore_config /etc/pam.d/login
497 pkg mysql-server lt 5.0.3 && restore_config /etc/init.d/mysql \
498 /etc/logrotate.d/mysql-server \
500 pkg ntp lt 1:4.2.2 && restore_config /etc/ntp.conf
501 pkg ntpdate lt 1:4.2.2 && restore_config /etc/default/ntpdate
502 pkg oidentd lt 2.0.8 && restore_config /etc/default/oidentd
503 pkg postgrey lt 1.27 && restore_config /etc/default/postgrey \
504 /etc/postgrey/whitelist_clients
505 pkg procps lt 1:3.2.7 && restore_config /etc/sysctl.conf
506 pkg sasl2-bin lt 2.1.22 && restore_config /etc/default/saslauthd
507 pkg slapd lt 2.3.30 && restore_config /etc/default/slapd /etc/init.d/slapd
508 pkg squirrelmail lt 2:1.4.9a && restore_config /etc/squirrelmail/apache.conf
509 pkg vsftpd lt 2.0.5 && restore_config /etc/vsftpd.conf
510 pkg xinetd lt 1:2.3.14 && restore_config /etc/xinetd.conf
512 # orphaned config file - no owner
513 if pkg logcheck-database lt 1.2.54; then
514 rm -vf /etc/logcheck/ignore.d.server/imap
517 # aide switched to ucf, move old configs aside
518 if pkg aide lt 0.13.1; then
519 for file in /etc/aide/aide.conf \
520 /etc/cron.daily/aide \
523 if [ ! -e "$file.$backup_ext" ]; then
524 mv -v "$file" "$file.$backup_ext"
531 # register cn changes in ucf managed files
532 for config in /etc/apache/modules.conf \
533 /etc/clamav/clamd.conf \
534 /etc/clamav/freshclam.conf \
535 /etc/php4/apache2/php.ini \
536 /etc/php4/apache/php.ini \
537 /etc/php4/cgi/php.ini \
538 /etc/php4/cli/php.ini
540 config_backup=$config.$backup_ext
541 if [ -e $config -a ! -e $config_backup ]; then
542 log "Saving config file $config"
543 cp -av $config $config_backup
544 ucf $config_backup $config
549 # temporary disable listchanges packages to reduce clutter during upgrade
551 local file command=$1
553 for file in /etc/apt/apt.conf.d/20listchanges \
554 /etc/apt/apt.conf.d/20listchanges-cn
558 if [ -f $file ]; then
559 dpkg-divert --local --rename --divert $file.$backup_ext \
565 if [ -f $file.$backup_ext ]; then
566 dpkg-divert --remove $file || true
573 # make a silent installation of carnet and srce keyrings
574 install_keyrings () {
575 pkgadd carnet-keyring srce-keyring
576 pkgadd dpkg apt debconf
578 dpkg-reconfigure carnet-keyring srce-keyring
582 # remove skey (not supported anymore)
584 pkgrm skey-cn libpam-skey
586 if getent group skey > /dev/null; then
587 groupdel skey || true
592 # make a silent upgrade to new libc6
594 DEBIAN_FRONTEND=noninteractive pkgadd libc6
597 # upgrade apache2 to etch
599 local package packages
601 # php-suhosin-cn causes removal of applications on dist-upgrade
602 # because of php5 only dependencies
606 libapache2-mod-php4 \
614 if pkg $package; then
615 packages="$packages $package"
619 for package in $packages; do
627 # remove init script diversion
628 if [ -L /etc/init.d/amavis -a -f /etc/init.d/amavis.amavisd-new ]; then
629 rm -vf /etc/init.d/amavis
630 dpkg-divert --quiet --remove /etc/init.d/amavis
633 # move old config aside
634 conf=/etc/amavis/amavisd.conf
635 if [ -e $conf -a ! -e $conf.$backup_ext ]; then
636 mv -v $conf $conf.$backup_ext
639 # install new packages
640 pkgadd amavisd-cn amavisd-new
643 check_and_sed '^clamd.*5.clamav.log$' \
644 's/^\(clamd.*\)5.clamav.log$/\14\tsocket/g' \
645 /etc/init.d/amavisd-cn || true
648 /etc/init.d/amavis restart
651 # fix openldap-aai postinst user handling
652 upgrade_openldap () {
653 #pkgrm openldap-cn # deprecated
654 apt-get -y$s install openldap-aai || true # postinst fails
655 chown -R openldap:openldap /var/lib/ldap # fix slapd
656 /etc/init.d/slapd restart
657 dpkg --configure -a # try postinst again
660 # fix postgresql deinstallation during upgrade
661 upgrade_postgresql () {
662 if check_services show 2>&1 | grep -qw postgresql; then
663 pkgadd postgresql || apt-get -f install
671 if pkg postgrey; then
672 pkgrm postgrey # not used by postfix-cn anymore
677 local name=$1 file=$2 val
679 if [ -f "$file" ]; then
680 val=$(sed -n "/^[[:space:]]*$name[[:space:]]*=/s/[[:space:]]*//gp" $file)
687 # preserve mail location on upgrade
689 local default_mail_env mail_location
691 # check if already upgraded
692 if ! pkg dovecot-common lt 1.0; then
696 # save old mail location
697 default_mail_env=$(get_variable default_mail_env /etc/dovecot/dovecot.conf)
699 # silently upgrade package
700 restore_config /etc/dovecot/dovecot.conf
703 # insert old mail location
704 mail_location=$(get_variable mail_location /etc/dovecot/dovecot.conf)
705 if [ "$default_mail_env" -a ! "$mail_location" ]; then
706 check_and_sed '^#mail_location[[:space:]]*=' \
707 "s|#mail_location[[:space:]]*=.*|mail_location = $default_mail_env|" /etc/dovecot/dovecot.conf || return 0
709 if [ -x /etc/init.d/dovecot ]; then
710 if [ -x /usr/sbin/invoke-rc.d ]; then
711 /usr/sbin/invoke-rc.d dovecot restart
713 /etc/init.d/dovecot restart
719 # fix /etc/dpkg/dpkg.cfg
720 comment_force_overwrite () {
721 if [ -f /etc/dpkg/dpkg.cfg ]; then
722 if check_and_sed '^force-overwrite' \
723 's,\(^force-overwrite\),#\1,' \
724 /etc/dpkg/dpkg.cfg; then
725 notice "$msg_comment_force_overwrite"
731 cat > /etc/issue <<EOF
732 Debian GNU/Linux 4.0 (CARNet Debian 4.0) \\n \\l
735 cat > /etc/issue.net <<EOF
736 Debian GNU/Linux 4.0 (CARNet Debian 4.0) %h
741 local available_disk_space
742 available_disk_space=$(df -m /var|tail -1|awk '{print $4}')
743 if [ $available_disk_space -lt $min_var_space ]; then
744 log "carnet-upgrade aborted: not enough space on /var (need ${min_var_space}MB)"
745 notice "Premalo mjesta na /var particiji. Potrebno je imati barem ${min_var_space}MB."