WebSVN – ALCASAR – Diff – /scripts/alcasar-rpm.sh


#!/bin/bash
 
# alcasar-rpm.sh
# by 3abtux and Rexy
# This script is distributed under the Gnu General Public License (GPL)
 
# script de mise en place des dépots RPM + installation des RPM complémentaires
# configure the RPM repository + complementary RPM installation
 
Lang=`echo $LANG|cut -c 1-2`
SED="/bin/sed -i"
VERSION="9"
ARCH="x86_64"
# The kernel version we compile netflow for
KERNEL="kernel-server-6.6.22-1.mga9"
# ****** Alcasar needed RPMS - paquetages nécessaires au fonctionnement d'Alcasar ******
# (old) perl-Socket6 : needed by nfsen
# "fonts-dejavu-common" & "fonts-ttf-dejavu" : fonts needed by wkhtmltopdf
# "lsscsi" & nvme-cli" & "php-dom" : needed by phpsysinfo
# "socat" : avoid a warning when run the install script of letsencrypt ("acme.sh")
# "sudo" : needed after a reinstallation (to be investigated)
# "postfix" + "cyrus-sasl" + "lib64sasl2-plug-plain" : email registration method
# "nmap" : "/usr/share/nmap/nmap-mac-prefixes" is used to display MAC manufacturers in ACC
 
PACKAGES="vim-enhanced freeradius freeradius-mysql freeradius-ldap lighttpd lighttpd-mod_auth php-fpm php-gd php-ldap php-mysqli php-mbstring php-sockets php-curl php-pdo_sqlite php-cli php-dom php-filter unbound e2guardian postfix mariadb ntpsec bind-utils openssh-server rng-utils rsync fail2ban gnupg2 ulogd ipset usb_modeswitch vnstat dos2unix p7zip msec kernel-userspace-headers kernel-firmware kernel-firmware-nonfree dhcp-server tcpdump fonts-dejavu-common fonts-ttf-dejavu lsscsi nvme-cli sudo socat postfix cyrus-sasl lib64sasl2-plug-plain iftop"
 
rpm_repository_sync ()
{
	cat <<EOF > /etc/urpmi/urpmi.cfg
{
downloader: wget
}
EOF
	echo ${!MIRRORLIST}
	urpmi.addmedia core --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/core/release
	urpmi.addmedia core-updates --update --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/core/updates
	urpmi.addmedia nonfree --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/nonfree/release
	urpmi.addmedia nonfree-updates --update --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/nonfree/updates
}
 
rpm_error ()
{
	# restore previous rpm conf file & removed RPMs
	[ -e /etc/urpmi/urpmi.cfg.old ] && mv /etc/urpmi/urpmi.cfg.old /etc/urpmi/urpmi.cfg
	urpmi --no-verify-rpm --auto rpms/$ARCH/wkhtmltopdf*.rpm
	echo
	if [ $Lang == "fr" ]
	then
		echo "Relancez l'installation ultérieurement."
		echo "Si vous rencontrez à nouveau ce problème, modifier les variables MIRRORLIST[1&2] du fichier 'scripts/alcasar-rpm.sh'"
	else
		echo "Try an other install later."
		echo "If this problem occurs again, change the MIRRORLIST[1&2] variables in the file 'scripts/alcasar-rpm.sh'"
	fi
}
 
# We prefer wget than curl
urpmi --no-verify-rpm --auto rpms/$ARCH/wget*.rpm
 
# Set the RPM repository (if not already set)
cp /etc/urpmi/urpmi.cfg /etc/urpmi/urpmi.cfg.old
ACTIVE_REPO=`cat /etc/urpmi/urpmi.cfg|grep "mageia.org"|wc -l`
MIRROR_NBR=3
#                       For French
MIRRORLIST1="http://ftp.free.fr/mirrors/mageia.org/distrib/$VERSION/$ARCH"
#                       For Europeans
MIRRORLIST2="https://www.mirrorservice.org/pub/mageia/distrib/$VERSION/$ARCH"
#                       For everybody
MIRRORLIST3="https://mirrors.mageia.org/api/mageia.$VERSION.$ARCH.list"
try_nb="0"; nb_repository="0"
while [ "$nb_repository" != "4" ]
do
	try_nb=`expr $try_nb + 1`
	MIRRORLIST="MIRRORLIST$try_nb"
	rpm_repository_sync
	nb_repository=`cat /etc/urpmi/urpmi.cfg|grep mirrorlist|wc -l`
	if [ "$nb_repository" != "4" ]
	then
		if [ $Lang == "fr" ]
		then
			echo "Une erreur a été détectée lors de la synchronisation avec le dépot N°$try_nb."
		else
			echo "An error occurs when synchronising the repositories N°$try_nb"
		fi
		if [ $(expr $try_nb) -eq $MIRROR_NBR ]
		then
			rpm_error
			exit 1
		fi
		if [ $Lang == "fr" ]
		then
			echo "Voulez-vous tenter une synchronisation avec un autre dépôt ? (O/n)"
		else
			echo "Do you want to try a synchronisation with an other repository? (Y/n)"
		fi
		response=0
		PTN='^[oOnNyY]?$'
		until [[ "$response" =~ $PTN ]]
		do
			read response
		done
		if [ "$response" = "n" ] || [ "$response" = "N" ]
		then
			[ -e /etc/urpmi/urpmi.cfg.old ] && mv /etc/urpmi/urpmi.cfg.old /etc/urpmi/urpmi.cfg # restore previous rpm conf file
			exit 1
		fi
	fi
done
 
# At this time, we only skip Kernel update
echo "/^kernel/" > /etc/urpmi/skip.list
if [ `grep -E '^exclude=' /etc/dnf/dnf.conf |wc -l` -eq "1" ]; then
	$SED "s?^exclude=.*?exclude=kernel\*?g" /etc/dnf/dnf.conf
else
	echo "exclude=kernel*" >> /etc/dnf/dnf.conf
fi
 
# download the kernel used by ALCASAR
if [ $Lang == "fr" ]
then
	echo "Récupération du noyau Linux exploité par ALCASAR. Veuillez patienter ..."
else
	echo "Download the Linux kernel used by ALCASAR. Please wait ..."
fi
urpmi --auto --quiet $KERNEL
 
# download updated RPM in cache
if [ $Lang == "fr" ]
then
	echo "Récupération des paquetages de mise à jour. Veuillez patienter ..."
	echo "Il est temps d'aller prendre un café (ou une bonne bière) ;-)"
else
	echo "Updated RPM download. Please wait ..."
	echo "You should now take a coffe (or a good beer) ;-)"
fi
urpmi --auto --auto-update --quiet --test --retry 2
if [ "$?" != "0" ]
then
	echo
	if [ $Lang == "fr" ]
	then
		echo "Une erreur a été détectée lors de la récupération des paquetages."
	else
		echo "An error occurs when downloading RPMS"
	fi
	rpm_error
	exit 1
fi
 
# update with cached RPM
urpmi --auto --auto-update
if [ "$?" != "0" ]
then
	echo
	if [ $Lang == "fr" ]
	then
		echo "Une erreur a été détectée lors de la mise à jour des paquetages."
	else
		echo "An error occurs when updating packages"
	fi
	rpm_error
	exit 1
fi
# Clean the RPM cache
urpmi --clean
 
# Download of ALCASAR specifics RPM in cache (and test)
if [ $Lang == "fr" ]
then
	echo "Récupération des paquetages complémentaires. Veuillez patienter ..."
else
	echo "Download of complementary packages. Please wait ..."
fi
urpmi --auto --no-recommends $PACKAGES --quiet --test --retry 2
if [ "$?" != "0" ]
then
	echo
	if [ $Lang == "fr" ]
	then
		echo "Une erreur a été détectée lors de la récupération des paquetages complémentaires."
	else
		echo "An error occurs when downloading complementary packages"
	fi
	rpm_error
	exit 1
fi
 
# update with cached RPM
urpmi --auto --no-recommends $PACKAGES
if [ "$?" != "0" ]
then
	echo
	if [ $Lang == "fr" ]
	then
		echo "Une erreur a été détectée lors de l'installation des paquetages complémentaires."
	else
		echo "An error occurs when installing complementary packages"
	fi
	rpm_error
	exit 1
fi
 
# Keep only the kernel version we compil netflow with, and remove all others
kernelVersion=$(rpm -qa | grep -e ^kernel-server -e ^kernel-desktop)
for i in $kernelVersion
do
	if [ $i != $KERNEL ];then
		urpme --auto $i
	fi
done
 
# delete unused RPMs
if [ $Lang == "fr" ]
then
	echo "Cleaning the system : "
else
	echo "Nettoyage du système : "
fi
unused_rpm="shorewall mandi plymouth squid polkit pm-utils dnsmasq clamav clamd clamav-db"
/usr/sbin/urpme --auto -a $unused_rpm
for rpm in `rpm -qa|grep mga7`; do urpme --auto $rpm; done
/usr/sbin/urpme --auto --auto-orphans
 
# Save chilli launch script (erase with new rpm one)
[ -e /etc/chilli.conf ] && cp /etc/chilli.conf /tmp/
# Install home made RPMs
for pkg in `ls rpms/$ARCH/*.rpm`
do
    urpmi --no-verify --auto $pkg
done
# restore chilli launch script
[ -e /tmp/chilli.conf ] && mv /tmp/chilli.conf /etc/
 
# Clean the RPM cache
urpmi --clean
# the ipt-netflow RPM add the kernel module ipt_NETFLOW (the modules dependance tree need to be updated). "2>/dev/null" in order not to display a error (the running kernel is not the ALCASAR one during the installation process)
/sbin/depmod -a 2>/dev/null
# test if all needed rpms are correctly installed
count_pkg=0; nb_pkg=0;
for pkg in $PACKAGES
do
	nb_pkg=`expr $nb_pkg + 1`
	if rpm -q --quiet $pkg ; then
		count_pkg=`expr $count_pkg + 1`
	else
		echo "error installing $pkg"
	fi
done
if [ $count_pkg -ne $nb_pkg ]
then
	exit 1
fi
 
# test if all custom rpms are correctly installed
count_pkg=0; nb_pkg=0;
for pkg in `ls rpms/$ARCH/|sed 's/.x86_64.rpm//'`
do
	nb_pkg=`expr $nb_pkg + 1`
	if rpm -q --quiet $pkg ; then
		count_pkg=`expr $count_pkg + 1`
	else
		echo "error installing $pkg"
	fi
done
if [ $count_pkg -ne $nb_pkg ]
then
	exit 1
fi
 
# .rpmnew handling (unused with ALCASAR)
[ -e /etc/shadow.rpmnew ] && rm -f /etc/shadow.rpmnew
[ -e /etc/sysconfig/system.rpmnew ] && rm -f /etc/sysconfig/system.rpmnew
[ -e /etc/rpm/macros.rpmnew ] && rm -f /etc/rpm/macros.rpmnew
[ -e /etc/fstab.rpmnew ] && rm -f /etc/fstab.rpmnew
[ -e /etc/shells.rpmnew ] && rm -f /etc/shells.rpmnew
[ -e /etc/hosts.rpmnew ] && rm -f /etc/hosts.rpmnew
[ -e /etc/systemd/journald.conf.rpmnew ] && rm -f /etc/systemd/journald.conf.rpmnew
[ -e /etc/raddb/certs/dh.rpmnew ] && rm -f /etc/raddb/certs/dh.rpmnew
 
# .rpmnew handling (used with ALCASAR)
[ -e /etc/php.ini.rpmnew ] && mv -f /etc/php.ini.rpmnew /etc/php.ini.default
[ -e /etc/lighttpd/lighttpd.conf.rpmnew ] && mv -f /etc/lighttpd/lighttpd.conf.rpmnew /etc/lighttpd/lighttpd.conf.default
[ -e /etc/lighttpd/modules.conf.rpmnew ] && mv -f /etc/lighttpd/modules.conf.rpmnew /etc/lighttpd/modules.conf.default
[ -e /etc/e2guardian/e2guardian.conf.rpmnew ] && mv -f /etc/e2guardian/e2guardian.conf.rpmnew /etc/e2guardian/e2guardian.conf.default
[ -e /etc/e2guardian/e2guardianf1.conf.rpmnew ] && mv -f /etc/e2guardian/e2guardianf1.conf.rpmnew /etc/e2guardian/e2guardianf1.conf.default
[ -e /etc/e2guardian/lists/urlregexplist.rpmnew ] && mv -f /etc/e2guardian/lists/urlregexplist.rpmnew /etc/e2guardian/lists/urlregexplist.default
[ -e /etc/e2guardian/lists/bannedregexpurllist.rpmnew ] && mv -f /etc/e2guardian/lists/bannedregexpurllist.rpmnew /etc/e2guardian/lists/bannedregexpurllist.default
[ -e /etc/vnstat.conf.rpmnew ] && mv -f /etc/vnstat.conf.rpmnew /etc/vnstat.conf.default
[ -e /etc/fail2ban/jail.conf.rpmnew ] && mv -f /etc/fail2ban/jail.conf.rpmnew /etc/fail2ban/jail.conf.default
[ -e /etc/ssh/sshd_config.rpmnew ] && mv -f /etc/ssh/sshd_config.rpmnew /etc/ssh/sshd_config.default
 
exit 0
 

Rev 3190	Rev 3193
1	`#!/bin/bash`	1	`#!/bin/bash`
2		2
3	`# alcasar-rpm.sh`	3	`# alcasar-rpm.sh`
4	`# by 3abtux and Rexy`	4	`# by 3abtux and Rexy`
5	`# This script is distributed under the Gnu General Public License (GPL)`	5	`# This script is distributed under the Gnu General Public License (GPL)`
6		6
7	`# script de mise en place des dépots RPM + installation des RPM complémentaires`	7	`# script de mise en place des dépots RPM + installation des RPM complémentaires`
8	`# configure the RPM repository + complementary RPM installation`	8	`# configure the RPM repository + complementary RPM installation`
9		9
10	Lang=`echo $LANG\|cut -c 1-2`	10	Lang=`echo $LANG\|cut -c 1-2`
11	`SED="/bin/sed -i"`	11	`SED="/bin/sed -i"`
12	`VERSION="9"`	12	`VERSION="9"`
13	`ARCH="x86_64"`	13	`ARCH="x86_64"`
14	`# The kernel version we compile netflow for`	14	`# The kernel version we compile netflow for`
15	`KERNEL="kernel-server-6.6.22-1.mga9"`	15	`KERNEL="kernel-server-6.6.22-1.mga9"`
16	`# **** Alcasar needed RPMS - paquetages nécessaires au fonctionnement d'Alcasar ****`	16	`# **** Alcasar needed RPMS - paquetages nécessaires au fonctionnement d'Alcasar ****`
17	`# (old) perl-Socket6 : needed by nfsen`	17	`# (old) perl-Socket6 : needed by nfsen`
18	`# "fonts-dejavu-common" & "fonts-ttf-dejavu" : fonts needed by wkhtmltopdf`	18	`# "fonts-dejavu-common" & "fonts-ttf-dejavu" : fonts needed by wkhtmltopdf`
19	`# "lsscsi" & nvme-cli" & "php-dom" : needed by phpsysinfo`	19	`# "lsscsi" & nvme-cli" & "php-dom" : needed by phpsysinfo`
20	`# "socat" : avoid a warning when run the install script of letsencrypt ("acme.sh")`	20	`# "socat" : avoid a warning when run the install script of letsencrypt ("acme.sh")`
21	`# "sudo" : needed after a reinstallation (to be investigated)`	21	`# "sudo" : needed after a reinstallation (to be investigated)`
22	`# "postfix" + "cyrus-sasl" + "lib64sasl2-plug-plain" : email registration method`	22	`# "postfix" + "cyrus-sasl" + "lib64sasl2-plug-plain" : email registration method`
-		23	`# "nmap" : "/usr/share/nmap/nmap-mac-prefixes" is used to display MAC manufacturers in ACC`
-		24
23	PACKAGES="vim-enhanced freeradius freeradius-mysql freeradius-ldap lighttpd lighttpd-mod_auth php-fpm php-gd php-ldap php-mysqli php-mbstring php-sockets php-curl php-pdo_sqlite php-cli php-dom php-filter unbound e2guardian postfix mariadb ntpsec bind-utils openssh-server rng-utils rsync fail2ban gnupg2 ulogd ipset usb_modeswitch vnstat dos2unix p7zip msec kernel-userspace-headers kernel-firmware kernel-firmware-nonfree dhcp-server tcpdump fonts-dejavu-common fonts-ttf-dejavu lsscsi nvme-cli sudo socat postfix cyrus-sasl lib64sasl2-plug-plain iftop"	25	PACKAGES="vim-enhanced freeradius freeradius-mysql freeradius-ldap lighttpd lighttpd-mod_auth php-fpm php-gd php-ldap php-mysqli php-mbstring php-sockets php-curl php-pdo_sqlite php-cli php-dom php-filter unbound e2guardian postfix mariadb ntpsec bind-utils openssh-server rng-utils rsync fail2ban gnupg2 ulogd ipset usb_modeswitch vnstat dos2unix p7zip msec kernel-userspace-headers kernel-firmware kernel-firmware-nonfree dhcp-server tcpdump fonts-dejavu-common fonts-ttf-dejavu lsscsi nvme-cli sudo socat postfix cyrus-sasl lib64sasl2-plug-plain iftop"
24		26
25	`rpm_repository_sync ()`	27	`rpm_repository_sync ()`
26	`{`	28	`{`
27	`cat <<EOF > /etc/urpmi/urpmi.cfg`	29	`cat <<EOF > /etc/urpmi/urpmi.cfg`
28	`{`	30	`{`
29	`downloader: wget`	31	`downloader: wget`
30	`}`	32	`}`
31	`EOF`	33	`EOF`
32	`echo ${!MIRRORLIST}`	34	`echo ${!MIRRORLIST}`
33	`urpmi.addmedia core --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/core/release`	35	`urpmi.addmedia core --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/core/release`
34	`urpmi.addmedia core-updates --update --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/core/updates`	36	`urpmi.addmedia core-updates --update --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/core/updates`
35	`urpmi.addmedia nonfree --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/nonfree/release`	37	`urpmi.addmedia nonfree --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/nonfree/release`
36	`urpmi.addmedia nonfree-updates --update --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/nonfree/updates`	38	`urpmi.addmedia nonfree-updates --update --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/nonfree/updates`
37	`}`	39	`}`
38		40
39	`rpm_error ()`	41	`rpm_error ()`
40	`{`	42	`{`
41	`# restore previous rpm conf file & removed RPMs`	43	`# restore previous rpm conf file & removed RPMs`
42	`[ -e /etc/urpmi/urpmi.cfg.old ] && mv /etc/urpmi/urpmi.cfg.old /etc/urpmi/urpmi.cfg`	44	`[ -e /etc/urpmi/urpmi.cfg.old ] && mv /etc/urpmi/urpmi.cfg.old /etc/urpmi/urpmi.cfg`
43	`urpmi --no-verify-rpm --auto rpms/$ARCH/wkhtmltopdf*.rpm`	45	`urpmi --no-verify-rpm --auto rpms/$ARCH/wkhtmltopdf*.rpm`
44	`echo`	46	`echo`
45	`if [ $Lang == "fr" ]`	47	`if [ $Lang == "fr" ]`
46	`then`	48	`then`
47	`echo "Relancez l'installation ultérieurement."`	49	`echo "Relancez l'installation ultérieurement."`
48	`echo "Si vous rencontrez à nouveau ce problème, modifier les variables MIRRORLIST[1&2] du fichier 'scripts/alcasar-rpm.sh'"`	50	`echo "Si vous rencontrez à nouveau ce problème, modifier les variables MIRRORLIST[1&2] du fichier 'scripts/alcasar-rpm.sh'"`
49	`else`	51	`else`
50	`echo "Try an other install later."`	52	`echo "Try an other install later."`
51	`echo "If this problem occurs again, change the MIRRORLIST[1&2] variables in the file 'scripts/alcasar-rpm.sh'"`	53	`echo "If this problem occurs again, change the MIRRORLIST[1&2] variables in the file 'scripts/alcasar-rpm.sh'"`
52	`fi`	54	`fi`
53	`}`	55	`}`
54		56
55	`# We prefer wget than curl`	57	`# We prefer wget than curl`
56	`urpmi --no-verify-rpm --auto rpms/$ARCH/wget*.rpm`	58	`urpmi --no-verify-rpm --auto rpms/$ARCH/wget*.rpm`
57		59
58	`# Set the RPM repository (if not already set)`	60	`# Set the RPM repository (if not already set)`
59	`cp /etc/urpmi/urpmi.cfg /etc/urpmi/urpmi.cfg.old`	61	`cp /etc/urpmi/urpmi.cfg /etc/urpmi/urpmi.cfg.old`
60	ACTIVE_REPO=`cat /etc/urpmi/urpmi.cfg\|grep "mageia.org"\|wc -l`	62	ACTIVE_REPO=`cat /etc/urpmi/urpmi.cfg\|grep "mageia.org"\|wc -l`
61	`MIRROR_NBR=3`	63	`MIRROR_NBR=3`
62	`# For French`	64	`# For French`
63	`MIRRORLIST1="http://ftp.free.fr/mirrors/mageia.org/distrib/$VERSION/$ARCH"`	65	`MIRRORLIST1="http://ftp.free.fr/mirrors/mageia.org/distrib/$VERSION/$ARCH"`
64	`# For Europeans`	66	`# For Europeans`
65	`MIRRORLIST2="https://www.mirrorservice.org/pub/mageia/distrib/$VERSION/$ARCH"`	67	`MIRRORLIST2="https://www.mirrorservice.org/pub/mageia/distrib/$VERSION/$ARCH"`
66	`# For everybody`	68	`# For everybody`
67	`MIRRORLIST3="https://mirrors.mageia.org/api/mageia.$VERSION.$ARCH.list"`	69	`MIRRORLIST3="https://mirrors.mageia.org/api/mageia.$VERSION.$ARCH.list"`
68	`try_nb="0"; nb_repository="0"`	70	`try_nb="0"; nb_repository="0"`
69	`while [ "$nb_repository" != "4" ]`	71	`while [ "$nb_repository" != "4" ]`
70	`do`	72	`do`
71	try_nb=`expr $try_nb + 1`	73	try_nb=`expr $try_nb + 1`
72	`MIRRORLIST="MIRRORLIST$try_nb"`	74	`MIRRORLIST="MIRRORLIST$try_nb"`
73	`rpm_repository_sync`	75	`rpm_repository_sync`
74	nb_repository=`cat /etc/urpmi/urpmi.cfg\|grep mirrorlist\|wc -l`	76	nb_repository=`cat /etc/urpmi/urpmi.cfg\|grep mirrorlist\|wc -l`
75	`if [ "$nb_repository" != "4" ]`	77	`if [ "$nb_repository" != "4" ]`
76	`then`	78	`then`
77	`if [ $Lang == "fr" ]`	79	`if [ $Lang == "fr" ]`
78	`then`	80	`then`
79	`echo "Une erreur a été détectée lors de la synchronisation avec le dépot N°$try_nb."`	81	`echo "Une erreur a été détectée lors de la synchronisation avec le dépot N°$try_nb."`
80	`else`	82	`else`
81	`echo "An error occurs when synchronising the repositories N°$try_nb"`	83	`echo "An error occurs when synchronising the repositories N°$try_nb"`
82	`fi`	84	`fi`
83	`if [ $(expr $try_nb) -eq $MIRROR_NBR ]`	85	`if [ $(expr $try_nb) -eq $MIRROR_NBR ]`
84	`then`	86	`then`
85	`rpm_error`	87	`rpm_error`
86	`exit 1`	88	`exit 1`
87	`fi`	89	`fi`
88	`if [ $Lang == "fr" ]`	90	`if [ $Lang == "fr" ]`
89	`then`	91	`then`
90	`echo "Voulez-vous tenter une synchronisation avec un autre dépôt ? (O/n)"`	92	`echo "Voulez-vous tenter une synchronisation avec un autre dépôt ? (O/n)"`
91	`else`	93	`else`
92	`echo "Do you want to try a synchronisation with an other repository? (Y/n)"`	94	`echo "Do you want to try a synchronisation with an other repository? (Y/n)"`
93	`fi`	95	`fi`
94	`response=0`	96	`response=0`
95	`PTN='^[oOnNyY]?$'`	97	`PTN='^[oOnNyY]?$'`
96	`until [[ "$response" =~ $PTN ]]`	98	`until [[ "$response" =~ $PTN ]]`
97	`do`	99	`do`
98	`read response`	100	`read response`
99	`done`	101	`done`
100	`if [ "$response" = "n" ] \|\| [ "$response" = "N" ]`	102	`if [ "$response" = "n" ] \|\| [ "$response" = "N" ]`
101	`then`	103	`then`
102	`[ -e /etc/urpmi/urpmi.cfg.old ] && mv /etc/urpmi/urpmi.cfg.old /etc/urpmi/urpmi.cfg # restore previous rpm conf file`	104	`[ -e /etc/urpmi/urpmi.cfg.old ] && mv /etc/urpmi/urpmi.cfg.old /etc/urpmi/urpmi.cfg # restore previous rpm conf file`
103	`exit 1`	105	`exit 1`
104	`fi`	106	`fi`
105	`fi`	107	`fi`
106	`done`	108	`done`
107		109
108	`# At this time, we only skip Kernel update`	110	`# At this time, we only skip Kernel update`
109	`echo "/^kernel/" > /etc/urpmi/skip.list`	111	`echo "/^kernel/" > /etc/urpmi/skip.list`
110	if [ `grep -E '^exclude=' /etc/dnf/dnf.conf \|wc -l` -eq "1" ]; then	112	if [ `grep -E '^exclude=' /etc/dnf/dnf.conf \|wc -l` -eq "1" ]; then
111	`$SED "s?^exclude=.?exclude=kernel\?g" /etc/dnf/dnf.conf`	113	`$SED "s?^exclude=.?exclude=kernel\?g" /etc/dnf/dnf.conf`
112	`else`	114	`else`
113	`echo "exclude=kernel*" >> /etc/dnf/dnf.conf`	115	`echo "exclude=kernel*" >> /etc/dnf/dnf.conf`
114	`fi`	116	`fi`
115		117
116	`# download the kernel used by ALCASAR`	118	`# download the kernel used by ALCASAR`
117	`if [ $Lang == "fr" ]`	119	`if [ $Lang == "fr" ]`
118	`then`	120	`then`
119	`echo "Récupération du noyau Linux exploité par ALCASAR. Veuillez patienter ..."`	121	`echo "Récupération du noyau Linux exploité par ALCASAR. Veuillez patienter ..."`
120	`else`	122	`else`
121	`echo "Download the Linux kernel used by ALCASAR. Please wait ..."`	123	`echo "Download the Linux kernel used by ALCASAR. Please wait ..."`
122	`fi`	124	`fi`
123	`urpmi --auto --quiet $KERNEL`	125	`urpmi --auto --quiet $KERNEL`
124		126
125	`# download updated RPM in cache`	127	`# download updated RPM in cache`
126	`if [ $Lang == "fr" ]`	128	`if [ $Lang == "fr" ]`
127	`then`	129	`then`
128	`echo "Récupération des paquetages de mise à jour. Veuillez patienter ..."`	130	`echo "Récupération des paquetages de mise à jour. Veuillez patienter ..."`
129	`echo "Il est temps d'aller prendre un café (ou une bonne bière) ;-)"`	131	`echo "Il est temps d'aller prendre un café (ou une bonne bière) ;-)"`
130	`else`	132	`else`
131	`echo "Updated RPM download. Please wait ..."`	133	`echo "Updated RPM download. Please wait ..."`
132	`echo "You should now take a coffe (or a good beer) ;-)"`	134	`echo "You should now take a coffe (or a good beer) ;-)"`
133	`fi`	135	`fi`
134	`urpmi --auto --auto-update --quiet --test --retry 2`	136	`urpmi --auto --auto-update --quiet --test --retry 2`
135	`if [ "$?" != "0" ]`	137	`if [ "$?" != "0" ]`
136	`then`	138	`then`
137	`echo`	139	`echo`
138	`if [ $Lang == "fr" ]`	140	`if [ $Lang == "fr" ]`
139	`then`	141	`then`
140	`echo "Une erreur a été détectée lors de la récupération des paquetages."`	142	`echo "Une erreur a été détectée lors de la récupération des paquetages."`
141	`else`	143	`else`
142	`echo "An error occurs when downloading RPMS"`	144	`echo "An error occurs when downloading RPMS"`
143	`fi`	145	`fi`
144	`rpm_error`	146	`rpm_error`
145	`exit 1`	147	`exit 1`
146	`fi`	148	`fi`
147		149
148	`# update with cached RPM`	150	`# update with cached RPM`
149	`urpmi --auto --auto-update`	151	`urpmi --auto --auto-update`
150	`if [ "$?" != "0" ]`	152	`if [ "$?" != "0" ]`
151	`then`	153	`then`
152	`echo`	154	`echo`
153	`if [ $Lang == "fr" ]`	155	`if [ $Lang == "fr" ]`
154	`then`	156	`then`
155	`echo "Une erreur a été détectée lors de la mise à jour des paquetages."`	157	`echo "Une erreur a été détectée lors de la mise à jour des paquetages."`
156	`else`	158	`else`
157	`echo "An error occurs when updating packages"`	159	`echo "An error occurs when updating packages"`
158	`fi`	160	`fi`
159	`rpm_error`	161	`rpm_error`
160	`exit 1`	162	`exit 1`
161	`fi`	163	`fi`
162	`# Clean the RPM cache`	164	`# Clean the RPM cache`
163	`urpmi --clean`	165	`urpmi --clean`
164		166
165	`# Download of ALCASAR specifics RPM in cache (and test)`	167	`# Download of ALCASAR specifics RPM in cache (and test)`
166	`if [ $Lang == "fr" ]`	168	`if [ $Lang == "fr" ]`
167	`then`	169	`then`
168	`echo "Récupération des paquetages complémentaires. Veuillez patienter ..."`	170	`echo "Récupération des paquetages complémentaires. Veuillez patienter ..."`
169	`else`	171	`else`
170	`echo "Download of complementary packages. Please wait ..."`	172	`echo "Download of complementary packages. Please wait ..."`
171	`fi`	173	`fi`
172	`urpmi --auto --no-recommends $PACKAGES --quiet --test --retry 2`	174	`urpmi --auto --no-recommends $PACKAGES --quiet --test --retry 2`
173	`if [ "$?" != "0" ]`	175	`if [ "$?" != "0" ]`
174	`then`	176	`then`
175	`echo`	177	`echo`
176	`if [ $Lang == "fr" ]`	178	`if [ $Lang == "fr" ]`
177	`then`	179	`then`
178	`echo "Une erreur a été détectée lors de la récupération des paquetages complémentaires."`	180	`echo "Une erreur a été détectée lors de la récupération des paquetages complémentaires."`
179	`else`	181	`else`
180	`echo "An error occurs when downloading complementary packages"`	182	`echo "An error occurs when downloading complementary packages"`
181	`fi`	183	`fi`
182	`rpm_error`	184	`rpm_error`
183	`exit 1`	185	`exit 1`
184	`fi`	186	`fi`
185		187
186	`# update with cached RPM`	188	`# update with cached RPM`
187	`urpmi --auto --no-recommends $PACKAGES`	189	`urpmi --auto --no-recommends $PACKAGES`
188	`if [ "$?" != "0" ]`	190	`if [ "$?" != "0" ]`
189	`then`	191	`then`
190	`echo`	192	`echo`
191	`if [ $Lang == "fr" ]`	193	`if [ $Lang == "fr" ]`
192	`then`	194	`then`
193	`echo "Une erreur a été détectée lors de l'installation des paquetages complémentaires."`	195	`echo "Une erreur a été détectée lors de l'installation des paquetages complémentaires."`
194	`else`	196	`else`
195	`echo "An error occurs when installing complementary packages"`	197	`echo "An error occurs when installing complementary packages"`
196	`fi`	198	`fi`
197	`rpm_error`	199	`rpm_error`
198	`exit 1`	200	`exit 1`
199	`fi`	201	`fi`
200		202
201	`# Keep only the kernel version we compil netflow with, and remove all others`	203	`# Keep only the kernel version we compil netflow with, and remove all others`
202	`kernelVersion=$(rpm -qa \| grep -e ^kernel-server -e ^kernel-desktop)`	204	`kernelVersion=$(rpm -qa \| grep -e ^kernel-server -e ^kernel-desktop)`
203	`for i in $kernelVersion`	205	`for i in $kernelVersion`
204	`do`	206	`do`
205	`if [ $i != $KERNEL ];then`	207	`if [ $i != $KERNEL ];then`
206	`urpme --auto $i`	208	`urpme --auto $i`
207	`fi`	209	`fi`
208	`done`	210	`done`
209		211
210	`# delete unused RPMs`	212	`# delete unused RPMs`
211	`if [ $Lang == "fr" ]`	213	`if [ $Lang == "fr" ]`
212	`then`	214	`then`
213	`echo "Cleaning the system : "`	215	`echo "Cleaning the system : "`
214	`else`	216	`else`
215	`echo "Nettoyage du système : "`	217	`echo "Nettoyage du système : "`
216	`fi`	218	`fi`
217	`unused_rpm="shorewall mandi plymouth squid polkit pm-utils dnsmasq clamav clamd clamav-db"`	219	`unused_rpm="shorewall mandi plymouth squid polkit pm-utils dnsmasq clamav clamd clamav-db"`
218	`/usr/sbin/urpme --auto -a $unused_rpm`	220	`/usr/sbin/urpme --auto -a $unused_rpm`
219	for rpm in `rpm -qa\|grep mga7`; do urpme --auto $rpm; done	221	for rpm in `rpm -qa\|grep mga7`; do urpme --auto $rpm; done
220	`/usr/sbin/urpme --auto --auto-orphans`	222	`/usr/sbin/urpme --auto --auto-orphans`
221		223
222	`# Save chilli launch script (erase with new rpm one)`	224	`# Save chilli launch script (erase with new rpm one)`
223	`[ -e /etc/chilli.conf ] && cp /etc/chilli.conf /tmp/`	225	`[ -e /etc/chilli.conf ] && cp /etc/chilli.conf /tmp/`
224	`# Install home made RPMs`	226	`# Install home made RPMs`
225	for pkg in `ls rpms/$ARCH/*.rpm`	227	for pkg in `ls rpms/$ARCH/*.rpm`
226	`do`	228	`do`
227	`urpmi --no-verify --auto $pkg`	229	`urpmi --no-verify --auto $pkg`
228	`done`	230	`done`
229	`# restore chilli launch script`	231	`# restore chilli launch script`
230	`[ -e /tmp/chilli.conf ] && mv /tmp/chilli.conf /etc/`	232	`[ -e /tmp/chilli.conf ] && mv /tmp/chilli.conf /etc/`
231		233
232	`# Clean the RPM cache`	234	`# Clean the RPM cache`
233	`urpmi --clean`	235	`urpmi --clean`
234	`# the ipt-netflow RPM add the kernel module ipt_NETFLOW (the modules dependance tree need to be updated). "2>/dev/null" in order not to display a error (the running kernel is not the ALCASAR one during the installation process)`	236	`# the ipt-netflow RPM add the kernel module ipt_NETFLOW (the modules dependance tree need to be updated). "2>/dev/null" in order not to display a error (the running kernel is not the ALCASAR one during the installation process)`
235	`/sbin/depmod -a 2>/dev/null`	237	`/sbin/depmod -a 2>/dev/null`
236	`# test if all needed rpms are correctly installed`	238	`# test if all needed rpms are correctly installed`
237	`count_pkg=0; nb_pkg=0;`	239	`count_pkg=0; nb_pkg=0;`
238	`for pkg in $PACKAGES`	240	`for pkg in $PACKAGES`
239	`do`	241	`do`
240	nb_pkg=`expr $nb_pkg + 1`	242	nb_pkg=`expr $nb_pkg + 1`
241	`if rpm -q --quiet $pkg ; then`	243	`if rpm -q --quiet $pkg ; then`
242	count_pkg=`expr $count_pkg + 1`	244	count_pkg=`expr $count_pkg + 1`
243	`else`	245	`else`
244	`echo "error installing $pkg"`	246	`echo "error installing $pkg"`
245	`fi`	247	`fi`
246	`done`	248	`done`
247	`if [ $count_pkg -ne $nb_pkg ]`	249	`if [ $count_pkg -ne $nb_pkg ]`
248	`then`	250	`then`
249	`exit 1`	251	`exit 1`
250	`fi`	252	`fi`
251		253
252	`# test if all custom rpms are correctly installed`	254	`# test if all custom rpms are correctly installed`
253	`count_pkg=0; nb_pkg=0;`	255	`count_pkg=0; nb_pkg=0;`
254	for pkg in `ls rpms/$ARCH/\|sed 's/.x86_64.rpm//'`	256	for pkg in `ls rpms/$ARCH/\|sed 's/.x86_64.rpm//'`
255	`do`	257	`do`
256	nb_pkg=`expr $nb_pkg + 1`	258	nb_pkg=`expr $nb_pkg + 1`
257	`if rpm -q --quiet $pkg ; then`	259	`if rpm -q --quiet $pkg ; then`
258	count_pkg=`expr $count_pkg + 1`	260	count_pkg=`expr $count_pkg + 1`
259	`else`	261	`else`
260	`echo "error installing $pkg"`	262	`echo "error installing $pkg"`
261	`fi`	263	`fi`
262	`done`	264	`done`
263	`if [ $count_pkg -ne $nb_pkg ]`	265	`if [ $count_pkg -ne $nb_pkg ]`
264	`then`	266	`then`
265	`exit 1`	267	`exit 1`
266	`fi`	268	`fi`
267		269
268	`# .rpmnew handling (unused with ALCASAR)`	270	`# .rpmnew handling (unused with ALCASAR)`
269	`[ -e /etc/shadow.rpmnew ] && rm -f /etc/shadow.rpmnew`	271	`[ -e /etc/shadow.rpmnew ] && rm -f /etc/shadow.rpmnew`
270	`[ -e /etc/sysconfig/system.rpmnew ] && rm -f /etc/sysconfig/system.rpmnew`	272	`[ -e /etc/sysconfig/system.rpmnew ] && rm -f /etc/sysconfig/system.rpmnew`
271	`[ -e /etc/rpm/macros.rpmnew ] && rm -f /etc/rpm/macros.rpmnew`	273	`[ -e /etc/rpm/macros.rpmnew ] && rm -f /etc/rpm/macros.rpmnew`
272	`[ -e /etc/fstab.rpmnew ] && rm -f /etc/fstab.rpmnew`	274	`[ -e /etc/fstab.rpmnew ] && rm -f /etc/fstab.rpmnew`
273	`[ -e /etc/shells.rpmnew ] && rm -f /etc/shells.rpmnew`	275	`[ -e /etc/shells.rpmnew ] && rm -f /etc/shells.rpmnew`
274	`[ -e /etc/hosts.rpmnew ] && rm -f /etc/hosts.rpmnew`	276	`[ -e /etc/hosts.rpmnew ] && rm -f /etc/hosts.rpmnew`
275	`[ -e /etc/systemd/journald.conf.rpmnew ] && rm -f /etc/systemd/journald.conf.rpmnew`	277	`[ -e /etc/systemd/journald.conf.rpmnew ] && rm -f /etc/systemd/journald.conf.rpmnew`
276	`[ -e /etc/raddb/certs/dh.rpmnew ] && rm -f /etc/raddb/certs/dh.rpmnew`	278	`[ -e /etc/raddb/certs/dh.rpmnew ] && rm -f /etc/raddb/certs/dh.rpmnew`
277		279
278	`# .rpmnew handling (used with ALCASAR)`	280	`# .rpmnew handling (used with ALCASAR)`
279	`[ -e /etc/php.ini.rpmnew ] && mv -f /etc/php.ini.rpmnew /etc/php.ini.default`	281	`[ -e /etc/php.ini.rpmnew ] && mv -f /etc/php.ini.rpmnew /etc/php.ini.default`
280	`[ -e /etc/lighttpd/lighttpd.conf.rpmnew ] && mv -f /etc/lighttpd/lighttpd.conf.rpmnew /etc/lighttpd/lighttpd.conf.default`	282	`[ -e /etc/lighttpd/lighttpd.conf.rpmnew ] && mv -f /etc/lighttpd/lighttpd.conf.rpmnew /etc/lighttpd/lighttpd.conf.default`
281	`[ -e /etc/lighttpd/modules.conf.rpmnew ] && mv -f /etc/lighttpd/modules.conf.rpmnew /etc/lighttpd/modules.conf.default`	283	`[ -e /etc/lighttpd/modules.conf.rpmnew ] && mv -f /etc/lighttpd/modules.conf.rpmnew /etc/lighttpd/modules.conf.default`
282	`[ -e /etc/e2guardian/e2guardian.conf.rpmnew ] && mv -f /etc/e2guardian/e2guardian.conf.rpmnew /etc/e2guardian/e2guardian.conf.default`	284	`[ -e /etc/e2guardian/e2guardian.conf.rpmnew ] && mv -f /etc/e2guardian/e2guardian.conf.rpmnew /etc/e2guardian/e2guardian.conf.default`
283	`[ -e /etc/e2guardian/e2guardianf1.conf.rpmnew ] && mv -f /etc/e2guardian/e2guardianf1.conf.rpmnew /etc/e2guardian/e2guardianf1.conf.default`	285	`[ -e /etc/e2guardian/e2guardianf1.conf.rpmnew ] && mv -f /etc/e2guardian/e2guardianf1.conf.rpmnew /etc/e2guardian/e2guardianf1.conf.default`
284	`[ -e /etc/e2guardian/lists/urlregexplist.rpmnew ] && mv -f /etc/e2guardian/lists/urlregexplist.rpmnew /etc/e2guardian/lists/urlregexplist.default`	286	`[ -e /etc/e2guardian/lists/urlregexplist.rpmnew ] && mv -f /etc/e2guardian/lists/urlregexplist.rpmnew /etc/e2guardian/lists/urlregexplist.default`
285	`[ -e /etc/e2guardian/lists/bannedregexpurllist.rpmnew ] && mv -f /etc/e2guardian/lists/bannedregexpurllist.rpmnew /etc/e2guardian/lists/bannedregexpurllist.default`	287	`[ -e /etc/e2guardian/lists/bannedregexpurllist.rpmnew ] && mv -f /etc/e2guardian/lists/bannedregexpurllist.rpmnew /etc/e2guardian/lists/bannedregexpurllist.default`
286	`[ -e /etc/vnstat.conf.rpmnew ] && mv -f /etc/vnstat.conf.rpmnew /etc/vnstat.conf.default`	288	`[ -e /etc/vnstat.conf.rpmnew ] && mv -f /etc/vnstat.conf.rpmnew /etc/vnstat.conf.default`
287	`[ -e /etc/fail2ban/jail.conf.rpmnew ] && mv -f /etc/fail2ban/jail.conf.rpmnew /etc/fail2ban/jail.conf.default`	289	`[ -e /etc/fail2ban/jail.conf.rpmnew ] && mv -f /etc/fail2ban/jail.conf.rpmnew /etc/fail2ban/jail.conf.default`
288	`[ -e /etc/ssh/sshd_config.rpmnew ] && mv -f /etc/ssh/sshd_config.rpmnew /etc/ssh/sshd_config.default`	290	`[ -e /etc/ssh/sshd_config.rpmnew ] && mv -f /etc/ssh/sshd_config.rpmnew /etc/ssh/sshd_config.default`
289		291
290	`exit 0`	292	`exit 0`
291		293

Subversion Repositories ALCASAR

(root)/scripts/alcasar-rpm.sh @ 2956 – Rev 3190 → 3193