WebSVN – ALCASAR – Diff – /scripts/alcasar-rpm.sh


#!/bin/bash
 
# alcasar-rpm.sh
# by 3abtux and Rexy
# This script is distributed under the Gnu General Public License (GPL)
 
# script de mise en place des dépots RPM + installation des RPM complémentaires
# configure the RPM repository + complementary RPM installation
 
Lang=`echo $LANG|cut -c 1-2`
SED="/bin/sed -i"
VERSION="9"
ARCH="x86_64"
# The kernel version we compile netflow for
KERNEL="kernel-server-6.6.22-1.mga9"
# ****** Alcasar needed RPMS - paquetages nécessaires au fonctionnement d'Alcasar ******
# (old) perl-Socket6 : needed by nfsen
# "fonts-dejavu-common" & "fonts-ttf-dejavu" : fonts needed by wkhtmltopdf
# "lsscsi" & nvme-cli" & "php-dom" : needed by phpsysinfo
# "socat" : avoid a warning when run the install script of letsencrypt ("acme.sh")
# "sudo" : needed after a reinstallation (to be investigated)
# "postfix" + "cyrus-sasl" + "lib64sasl2-plug-plain" : email registration method
# "nmap" : "/usr/share/nmap/nmap-mac-prefixes" is used to display MAC manufacturers in ACC
 
PACKAGES="vim-enhanced freeradius freeradius-mysql freeradius-ldap lighttpd lighttpd-mod_auth php-fpm php-gd php-ldap php-mysqli php-mbstring php-sockets php-curl php-pdo_sqlite php-cli php-dom php-filter unbound e2guardian postfix mariadb ntpsec bind-utils openssh-server rng-utils rsync fail2ban gnupg2 ulogd ipset usb_modeswitch vnstat dos2unix p7zip msec kernel-userspace-headers kernel-firmware kernel-firmware-nonfree dhcp-server tcpdump fonts-dejavu-common fonts-ttf-dejavu lsscsi nvme-cli sudo socat postfix cyrus-sasl lib64sasl2-plug-plain iftop"
 
rpm_repository_sync ()
{
	cat <<EOF > /etc/urpmi/urpmi.cfg
{
downloader: wget
}
EOF
	echo ${!MIRRORLIST}
	urpmi.addmedia core --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/core/release
	urpmi.addmedia core-updates --update --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/core/updates
	urpmi.addmedia nonfree --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/nonfree/release
	urpmi.addmedia nonfree-updates --update --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/nonfree/updates
}
 
rpm_error ()
{
	# restore previous rpm conf file & removed RPMs
	[ -e /etc/urpmi/urpmi.cfg.old ] && mv /etc/urpmi/urpmi.cfg.old /etc/urpmi/urpmi.cfg
	urpmi --no-verify-rpm --auto rpms/$ARCH/wkhtmltopdf*.rpm
	echo
	if [ $Lang == "fr" ]
	then
		echo "Relancez l'installation ultérieurement."
		echo "Si vous rencontrez à nouveau ce problème, modifier les variables MIRRORLIST[1&2] du fichier 'scripts/alcasar-rpm.sh'"
	else
		echo "Try an other install later."
		echo "If this problem occurs again, change the MIRRORLIST[1&2] variables in the file 'scripts/alcasar-rpm.sh'"
	fi
}
 
# We prefer wget than curl
urpmi --no-verify-rpm --auto rpms/$ARCH/wget*.rpm
 
# Set the RPM repository (if not already set)
cp /etc/urpmi/urpmi.cfg /etc/urpmi/urpmi.cfg.old
ACTIVE_REPO=`cat /etc/urpmi/urpmi.cfg|grep "mageia.org"|wc -l`
MIRROR_NBR=3
#                       For French
MIRRORLIST1="http://ftp.free.fr/mirrors/mageia.org/distrib/$VERSION/$ARCH"
#                       For Europeans
MIRRORLIST2="https://www.mirrorservice.org/pub/mageia/distrib/$VERSION/$ARCH"
#                       For everybody
MIRRORLIST3="https://mirrors.mageia.org/api/mageia.$VERSION.$ARCH.list"
try_nb="0"; nb_repository="0"
while [ "$nb_repository" != "4" ]
do
	try_nb=`expr $try_nb + 1`
	MIRRORLIST="MIRRORLIST$try_nb"
	rpm_repository_sync
	nb_repository=`cat /etc/urpmi/urpmi.cfg|grep mirrorlist|wc -l`
	if [ "$nb_repository" != "4" ]
	then
		if [ $Lang == "fr" ]
		then
			echo "Une erreur a été détectée lors de la synchronisation avec le dépot N°$try_nb."
		else
			echo "An error occurs when synchronising the repositories N°$try_nb"
		fi
		if [ $(expr $try_nb) -eq $MIRROR_NBR ]
		then
			rpm_error
			exit 1
		fi
		if [ $Lang == "fr" ]
		then
			echo "Voulez-vous tenter une synchronisation avec un autre dépôt ? (O/n)"
		else
			echo "Do you want to try a synchronisation with an other repository? (Y/n)"
		fi
		response=0
		PTN='^[oOnNyY]?$'
		until [[ "$response" =~ $PTN ]]
		do
			read response
		done
		if [ "$response" = "n" ] || [ "$response" = "N" ]
		then
			[ -e /etc/urpmi/urpmi.cfg.old ] && mv /etc/urpmi/urpmi.cfg.old /etc/urpmi/urpmi.cfg # restore previous rpm conf file
			exit 1
		fi
	fi
done
 
# Clean the RPM cache
urpmi --clean
 
# At this time, we only skip Kernel update
echo "/^kernel/" > /etc/urpmi/skip.list
if [ `grep -E '^exclude=' /etc/dnf/dnf.conf |wc -l` -eq "1" ]; then
	$SED "s?^exclude=.*?exclude=kernel\*?g" /etc/dnf/dnf.conf
else
	echo "exclude=kernel*" >> /etc/dnf/dnf.conf
fi
 
# download the kernel used by ALCASAR
if [ $Lang == "fr" ]
then
	echo "Récupération du noyau Linux exploité par ALCASAR. Veuillez patienter ..."
else
	echo "Download the Linux kernel used by ALCASAR. Please wait ..."
fi
urpmi --auto --quiet $KERNEL
 
# download updated RPM in cache
if [ $Lang == "fr" ]
then
	echo "Récupération des paquetages de mise à jour. Veuillez patienter ..."
	echo "Il est temps d'aller prendre un café (ou une bonne bière) ;-)"
else
	echo "Updated RPM download. Please wait ..."
	echo "You should now take a coffe (or a good beer) ;-)"
fi
urpmi --auto --auto-update --quiet --test --retry 2
if [ "$?" != "0" ]
then
	echo
	if [ $Lang == "fr" ]
	then
		echo "Une erreur a été détectée lors de la récupération des paquetages."
	else
		echo "An error occurs when downloading RPMS"
	fi
	rpm_error
	exit 1
fi
 
# update with cached RPM
urpmi --auto --auto-update
if [ "$?" != "0" ]
then
	echo
	if [ $Lang == "fr" ]
	then
		echo "Une erreur a été détectée lors de la mise à jour des paquetages."
	else
		echo "An error occurs when updating packages"
	fi
	rpm_error
	exit 1
fi
 
 
 
# Download of ALCASAR specifics RPM in cache (and test)
if [ $Lang == "fr" ]
then
	echo "Récupération des paquetages complémentaires. Veuillez patienter ..."
else
	echo "Download of complementary packages. Please wait ..."
fi
urpmi --auto --no-recommends $PACKAGES --quiet --test --retry 2
if [ "$?" != "0" ]
then
	echo
	if [ $Lang == "fr" ]
	then
		echo "Une erreur a été détectée lors de la récupération des paquetages complémentaires."
	else
		echo "An error occurs when downloading complementary packages"
	fi
	rpm_error
	exit 1
fi
 
# update with cached RPM
urpmi --auto --no-recommends $PACKAGES
if [ "$?" != "0" ]
then
	echo
	if [ $Lang == "fr" ]
	then
		echo "Une erreur a été détectée lors de l'installation des paquetages complémentaires."
	else
		echo "An error occurs when installing complementary packages"
	fi
	rpm_error
	exit 1
fi
 
# Keep only the kernel version we compil netflow with, and remove all others
kernelVersion=$(rpm -qa | grep -e ^kernel-server -e ^kernel-desktop)
for i in $kernelVersion
do
	if [ $i != $KERNEL ];then
		urpme --auto $i
	fi
done
 
# delete unused RPMs
if [ $Lang == "fr" ]
then
	echo "Cleaning the system : "
else
	echo "Nettoyage du système : "
fi
unused_rpm="shorewall mandi plymouth squid polkit pm-utils dnsmasq clamav clamd clamav-db"
/usr/sbin/urpme --auto -a $unused_rpm
for rpm in `rpm -qa|grep mga7`; do urpme --auto $rpm; done
/usr/sbin/urpme --auto --auto-orphans
 
# Save chilli launch script (erase with new rpm one)
[ -e /etc/chilli.conf ] && cp /etc/chilli.conf /tmp/
# Install home made RPMs
for pkg in `ls rpms/$ARCH/*.rpm`
do
    urpmi --no-verify --auto $pkg
done
# restore chilli launch script
[ -e /tmp/chilli.conf ] && mv /tmp/chilli.conf /etc/
 
# Clean the RPM cache
urpmi --clean
# the ipt-netflow RPM add the kernel module ipt_NETFLOW (the modules dependance tree need to be updated). "2>/dev/null" in order not to display a error (the running kernel is not the ALCASAR one during the installation process)
/sbin/depmod -a 2>/dev/null
# test if all needed rpms are correctly installed
count_pkg=0; nb_pkg=0;
for pkg in $PACKAGES
do
	nb_pkg=`expr $nb_pkg + 1`
	if rpm -q --quiet $pkg ; then
		count_pkg=`expr $count_pkg + 1`
	else
		echo "error installing $pkg"
	fi
done
if [ $count_pkg -ne $nb_pkg ]
then
	exit 1
fi
 
# test if all custom rpms are correctly installed
count_pkg=0; nb_pkg=0;
for pkg in `ls rpms/$ARCH/|sed 's/.x86_64.rpm//'`
do
	nb_pkg=`expr $nb_pkg + 1`
	if rpm -q --quiet $pkg ; then
		count_pkg=`expr $count_pkg + 1`
	else
		echo "error installing $pkg"
	fi
done
if [ $count_pkg -ne $nb_pkg ]
then
	exit 1
fi
 
# .rpmnew handling (unused with ALCASAR)
[ -e /etc/shadow.rpmnew ] && rm -f /etc/shadow.rpmnew
[ -e /etc/sysconfig/system.rpmnew ] && rm -f /etc/sysconfig/system.rpmnew
[ -e /etc/rpm/macros.rpmnew ] && rm -f /etc/rpm/macros.rpmnew
[ -e /etc/fstab.rpmnew ] && rm -f /etc/fstab.rpmnew
[ -e /etc/shells.rpmnew ] && rm -f /etc/shells.rpmnew
[ -e /etc/hosts.rpmnew ] && rm -f /etc/hosts.rpmnew
[ -e /etc/systemd/journald.conf.rpmnew ] && rm -f /etc/systemd/journald.conf.rpmnew
[ -e /etc/raddb/certs/dh.rpmnew ] && rm -f /etc/raddb/certs/dh.rpmnew
 
# .rpmnew handling (used with ALCASAR)
[ -e /etc/php.ini.rpmnew ] && mv -f /etc/php.ini.rpmnew /etc/php.ini.default
[ -e /etc/lighttpd/lighttpd.conf.rpmnew ] && mv -f /etc/lighttpd/lighttpd.conf.rpmnew /etc/lighttpd/lighttpd.conf.default
[ -e /etc/lighttpd/modules.conf.rpmnew ] && mv -f /etc/lighttpd/modules.conf.rpmnew /etc/lighttpd/modules.conf.default
[ -e /etc/e2guardian/e2guardian.conf.rpmnew ] && mv -f /etc/e2guardian/e2guardian.conf.rpmnew /etc/e2guardian/e2guardian.conf.default
[ -e /etc/e2guardian/e2guardianf1.conf.rpmnew ] && mv -f /etc/e2guardian/e2guardianf1.conf.rpmnew /etc/e2guardian/e2guardianf1.conf.default
[ -e /etc/e2guardian/lists/urlregexplist.rpmnew ] && mv -f /etc/e2guardian/lists/urlregexplist.rpmnew /etc/e2guardian/lists/urlregexplist.default
[ -e /etc/e2guardian/lists/bannedregexpurllist.rpmnew ] && mv -f /etc/e2guardian/lists/bannedregexpurllist.rpmnew /etc/e2guardian/lists/bannedregexpurllist.default
[ -e /etc/vnstat.conf.rpmnew ] && mv -f /etc/vnstat.conf.rpmnew /etc/vnstat.conf.default
[ -e /etc/fail2ban/jail.conf.rpmnew ] && mv -f /etc/fail2ban/jail.conf.rpmnew /etc/fail2ban/jail.conf.default
[ -e /etc/ssh/sshd_config.rpmnew ] && mv -f /etc/ssh/sshd_config.rpmnew /etc/ssh/sshd_config.default
 
exit 0
 

Rev 3193	Rev 3200
1	`#!/bin/bash`	1	`#!/bin/bash`
2		2
3	`# alcasar-rpm.sh`	3	`# alcasar-rpm.sh`
4	`# by 3abtux and Rexy`	4	`# by 3abtux and Rexy`
5	`# This script is distributed under the Gnu General Public License (GPL)`	5	`# This script is distributed under the Gnu General Public License (GPL)`
6		6
7	`# script de mise en place des dépots RPM + installation des RPM complémentaires`	7	`# script de mise en place des dépots RPM + installation des RPM complémentaires`
8	`# configure the RPM repository + complementary RPM installation`	8	`# configure the RPM repository + complementary RPM installation`
9		9
10	Lang=`echo $LANG\|cut -c 1-2`	10	Lang=`echo $LANG\|cut -c 1-2`
11	`SED="/bin/sed -i"`	11	`SED="/bin/sed -i"`
12	`VERSION="9"`	12	`VERSION="9"`
13	`ARCH="x86_64"`	13	`ARCH="x86_64"`
14	`# The kernel version we compile netflow for`	14	`# The kernel version we compile netflow for`
15	`KERNEL="kernel-server-6.6.22-1.mga9"`	15	`KERNEL="kernel-server-6.6.22-1.mga9"`
16	`# **** Alcasar needed RPMS - paquetages nécessaires au fonctionnement d'Alcasar ****`	16	`# **** Alcasar needed RPMS - paquetages nécessaires au fonctionnement d'Alcasar ****`
17	`# (old) perl-Socket6 : needed by nfsen`	17	`# (old) perl-Socket6 : needed by nfsen`
18	`# "fonts-dejavu-common" & "fonts-ttf-dejavu" : fonts needed by wkhtmltopdf`	18	`# "fonts-dejavu-common" & "fonts-ttf-dejavu" : fonts needed by wkhtmltopdf`
19	`# "lsscsi" & nvme-cli" & "php-dom" : needed by phpsysinfo`	19	`# "lsscsi" & nvme-cli" & "php-dom" : needed by phpsysinfo`
20	`# "socat" : avoid a warning when run the install script of letsencrypt ("acme.sh")`	20	`# "socat" : avoid a warning when run the install script of letsencrypt ("acme.sh")`
21	`# "sudo" : needed after a reinstallation (to be investigated)`	21	`# "sudo" : needed after a reinstallation (to be investigated)`
22	`# "postfix" + "cyrus-sasl" + "lib64sasl2-plug-plain" : email registration method`	22	`# "postfix" + "cyrus-sasl" + "lib64sasl2-plug-plain" : email registration method`
23	`# "nmap" : "/usr/share/nmap/nmap-mac-prefixes" is used to display MAC manufacturers in ACC`	23	`# "nmap" : "/usr/share/nmap/nmap-mac-prefixes" is used to display MAC manufacturers in ACC`
24		24
25	PACKAGES="vim-enhanced freeradius freeradius-mysql freeradius-ldap lighttpd lighttpd-mod_auth php-fpm php-gd php-ldap php-mysqli php-mbstring php-sockets php-curl php-pdo_sqlite php-cli php-dom php-filter unbound e2guardian postfix mariadb ntpsec bind-utils openssh-server rng-utils rsync fail2ban gnupg2 ulogd ipset usb_modeswitch vnstat dos2unix p7zip msec kernel-userspace-headers kernel-firmware kernel-firmware-nonfree dhcp-server tcpdump fonts-dejavu-common fonts-ttf-dejavu lsscsi nvme-cli sudo socat postfix cyrus-sasl lib64sasl2-plug-plain iftop"	25	PACKAGES="vim-enhanced freeradius freeradius-mysql freeradius-ldap lighttpd lighttpd-mod_auth php-fpm php-gd php-ldap php-mysqli php-mbstring php-sockets php-curl php-pdo_sqlite php-cli php-dom php-filter unbound e2guardian postfix mariadb ntpsec bind-utils openssh-server rng-utils rsync fail2ban gnupg2 ulogd ipset usb_modeswitch vnstat dos2unix p7zip msec kernel-userspace-headers kernel-firmware kernel-firmware-nonfree dhcp-server tcpdump fonts-dejavu-common fonts-ttf-dejavu lsscsi nvme-cli sudo socat postfix cyrus-sasl lib64sasl2-plug-plain iftop"
26		26
27	`rpm_repository_sync ()`	27	`rpm_repository_sync ()`
28	`{`	28	`{`
29	`cat <<EOF > /etc/urpmi/urpmi.cfg`	29	`cat <<EOF > /etc/urpmi/urpmi.cfg`
30	`{`	30	`{`
31	`downloader: wget`	31	`downloader: wget`
32	`}`	32	`}`
33	`EOF`	33	`EOF`
34	`echo ${!MIRRORLIST}`	34	`echo ${!MIRRORLIST}`
35	`urpmi.addmedia core --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/core/release`	35	`urpmi.addmedia core --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/core/release`
36	`urpmi.addmedia core-updates --update --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/core/updates`	36	`urpmi.addmedia core-updates --update --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/core/updates`
37	`urpmi.addmedia nonfree --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/nonfree/release`	37	`urpmi.addmedia nonfree --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/nonfree/release`
38	`urpmi.addmedia nonfree-updates --update --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/nonfree/updates`	38	`urpmi.addmedia nonfree-updates --update --probe-synthesis --mirrorlist ${!MIRRORLIST} /media/nonfree/updates`
39	`}`	39	`}`
40		40
41	`rpm_error ()`	41	`rpm_error ()`
42	`{`	42	`{`
43	`# restore previous rpm conf file & removed RPMs`	43	`# restore previous rpm conf file & removed RPMs`
44	`[ -e /etc/urpmi/urpmi.cfg.old ] && mv /etc/urpmi/urpmi.cfg.old /etc/urpmi/urpmi.cfg`	44	`[ -e /etc/urpmi/urpmi.cfg.old ] && mv /etc/urpmi/urpmi.cfg.old /etc/urpmi/urpmi.cfg`
45	`urpmi --no-verify-rpm --auto rpms/$ARCH/wkhtmltopdf*.rpm`	45	`urpmi --no-verify-rpm --auto rpms/$ARCH/wkhtmltopdf*.rpm`
46	`echo`	46	`echo`
47	`if [ $Lang == "fr" ]`	47	`if [ $Lang == "fr" ]`
48	`then`	48	`then`
49	`echo "Relancez l'installation ultérieurement."`	49	`echo "Relancez l'installation ultérieurement."`
50	`echo "Si vous rencontrez à nouveau ce problème, modifier les variables MIRRORLIST[1&2] du fichier 'scripts/alcasar-rpm.sh'"`	50	`echo "Si vous rencontrez à nouveau ce problème, modifier les variables MIRRORLIST[1&2] du fichier 'scripts/alcasar-rpm.sh'"`
51	`else`	51	`else`
52	`echo "Try an other install later."`	52	`echo "Try an other install later."`
53	`echo "If this problem occurs again, change the MIRRORLIST[1&2] variables in the file 'scripts/alcasar-rpm.sh'"`	53	`echo "If this problem occurs again, change the MIRRORLIST[1&2] variables in the file 'scripts/alcasar-rpm.sh'"`
54	`fi`	54	`fi`
55	`}`	55	`}`
56		56
57	`# We prefer wget than curl`	57	`# We prefer wget than curl`
58	`urpmi --no-verify-rpm --auto rpms/$ARCH/wget*.rpm`	58	`urpmi --no-verify-rpm --auto rpms/$ARCH/wget*.rpm`
59		59
60	`# Set the RPM repository (if not already set)`	60	`# Set the RPM repository (if not already set)`
61	`cp /etc/urpmi/urpmi.cfg /etc/urpmi/urpmi.cfg.old`	61	`cp /etc/urpmi/urpmi.cfg /etc/urpmi/urpmi.cfg.old`
62	ACTIVE_REPO=`cat /etc/urpmi/urpmi.cfg\|grep "mageia.org"\|wc -l`	62	ACTIVE_REPO=`cat /etc/urpmi/urpmi.cfg\|grep "mageia.org"\|wc -l`
63	`MIRROR_NBR=3`	63	`MIRROR_NBR=3`
64	`# For French`	64	`# For French`
65	`MIRRORLIST1="http://ftp.free.fr/mirrors/mageia.org/distrib/$VERSION/$ARCH"`	65	`MIRRORLIST1="http://ftp.free.fr/mirrors/mageia.org/distrib/$VERSION/$ARCH"`
66	`# For Europeans`	66	`# For Europeans`
67	`MIRRORLIST2="https://www.mirrorservice.org/pub/mageia/distrib/$VERSION/$ARCH"`	67	`MIRRORLIST2="https://www.mirrorservice.org/pub/mageia/distrib/$VERSION/$ARCH"`
68	`# For everybody`	68	`# For everybody`
69	`MIRRORLIST3="https://mirrors.mageia.org/api/mageia.$VERSION.$ARCH.list"`	69	`MIRRORLIST3="https://mirrors.mageia.org/api/mageia.$VERSION.$ARCH.list"`
70	`try_nb="0"; nb_repository="0"`	70	`try_nb="0"; nb_repository="0"`
71	`while [ "$nb_repository" != "4" ]`	71	`while [ "$nb_repository" != "4" ]`
72	`do`	72	`do`
73	try_nb=`expr $try_nb + 1`	73	try_nb=`expr $try_nb + 1`
74	`MIRRORLIST="MIRRORLIST$try_nb"`	74	`MIRRORLIST="MIRRORLIST$try_nb"`
75	`rpm_repository_sync`	75	`rpm_repository_sync`
76	nb_repository=`cat /etc/urpmi/urpmi.cfg\|grep mirrorlist\|wc -l`	76	nb_repository=`cat /etc/urpmi/urpmi.cfg\|grep mirrorlist\|wc -l`
77	`if [ "$nb_repository" != "4" ]`	77	`if [ "$nb_repository" != "4" ]`
78	`then`	78	`then`
79	`if [ $Lang == "fr" ]`	79	`if [ $Lang == "fr" ]`
80	`then`	80	`then`
81	`echo "Une erreur a été détectée lors de la synchronisation avec le dépot N°$try_nb."`	81	`echo "Une erreur a été détectée lors de la synchronisation avec le dépot N°$try_nb."`
82	`else`	82	`else`
83	`echo "An error occurs when synchronising the repositories N°$try_nb"`	83	`echo "An error occurs when synchronising the repositories N°$try_nb"`
84	`fi`	84	`fi`
85	`if [ $(expr $try_nb) -eq $MIRROR_NBR ]`	85	`if [ $(expr $try_nb) -eq $MIRROR_NBR ]`
86	`then`	86	`then`
87	`rpm_error`	87	`rpm_error`
88	`exit 1`	88	`exit 1`
89	`fi`	89	`fi`
90	`if [ $Lang == "fr" ]`	90	`if [ $Lang == "fr" ]`
91	`then`	91	`then`
92	`echo "Voulez-vous tenter une synchronisation avec un autre dépôt ? (O/n)"`	92	`echo "Voulez-vous tenter une synchronisation avec un autre dépôt ? (O/n)"`
93	`else`	93	`else`
94	`echo "Do you want to try a synchronisation with an other repository? (Y/n)"`	94	`echo "Do you want to try a synchronisation with an other repository? (Y/n)"`
95	`fi`	95	`fi`
96	`response=0`	96	`response=0`
97	`PTN='^[oOnNyY]?$'`	97	`PTN='^[oOnNyY]?$'`
98	`until [[ "$response" =~ $PTN ]]`	98	`until [[ "$response" =~ $PTN ]]`
99	`do`	99	`do`
100	`read response`	100	`read response`
101	`done`	101	`done`
102	`if [ "$response" = "n" ] \|\| [ "$response" = "N" ]`	102	`if [ "$response" = "n" ] \|\| [ "$response" = "N" ]`
103	`then`	103	`then`
104	`[ -e /etc/urpmi/urpmi.cfg.old ] && mv /etc/urpmi/urpmi.cfg.old /etc/urpmi/urpmi.cfg # restore previous rpm conf file`	104	`[ -e /etc/urpmi/urpmi.cfg.old ] && mv /etc/urpmi/urpmi.cfg.old /etc/urpmi/urpmi.cfg # restore previous rpm conf file`
105	`exit 1`	105	`exit 1`
106	`fi`	106	`fi`
107	`fi`	107	`fi`
108	`done`	108	`done`
109		109
-		110	`# Clean the RPM cache`
-		111	`urpmi --clean`
-		112
110	`# At this time, we only skip Kernel update`	113	`# At this time, we only skip Kernel update`
111	`echo "/^kernel/" > /etc/urpmi/skip.list`	114	`echo "/^kernel/" > /etc/urpmi/skip.list`
112	if [ `grep -E '^exclude=' /etc/dnf/dnf.conf \|wc -l` -eq "1" ]; then	115	if [ `grep -E '^exclude=' /etc/dnf/dnf.conf \|wc -l` -eq "1" ]; then
113	`$SED "s?^exclude=.?exclude=kernel\?g" /etc/dnf/dnf.conf`	116	`$SED "s?^exclude=.?exclude=kernel\?g" /etc/dnf/dnf.conf`
114	`else`	117	`else`
115	`echo "exclude=kernel*" >> /etc/dnf/dnf.conf`	118	`echo "exclude=kernel*" >> /etc/dnf/dnf.conf`
116	`fi`	119	`fi`
117		120
118	`# download the kernel used by ALCASAR`	121	`# download the kernel used by ALCASAR`
119	`if [ $Lang == "fr" ]`	122	`if [ $Lang == "fr" ]`
120	`then`	123	`then`
121	`echo "Récupération du noyau Linux exploité par ALCASAR. Veuillez patienter ..."`	124	`echo "Récupération du noyau Linux exploité par ALCASAR. Veuillez patienter ..."`
122	`else`	125	`else`
123	`echo "Download the Linux kernel used by ALCASAR. Please wait ..."`	126	`echo "Download the Linux kernel used by ALCASAR. Please wait ..."`
124	`fi`	127	`fi`
125	`urpmi --auto --quiet $KERNEL`	128	`urpmi --auto --quiet $KERNEL`
126		129
127	`# download updated RPM in cache`	130	`# download updated RPM in cache`
128	`if [ $Lang == "fr" ]`	131	`if [ $Lang == "fr" ]`
129	`then`	132	`then`
130	`echo "Récupération des paquetages de mise à jour. Veuillez patienter ..."`	133	`echo "Récupération des paquetages de mise à jour. Veuillez patienter ..."`
131	`echo "Il est temps d'aller prendre un café (ou une bonne bière) ;-)"`	134	`echo "Il est temps d'aller prendre un café (ou une bonne bière) ;-)"`
132	`else`	135	`else`
133	`echo "Updated RPM download. Please wait ..."`	136	`echo "Updated RPM download. Please wait ..."`
134	`echo "You should now take a coffe (or a good beer) ;-)"`	137	`echo "You should now take a coffe (or a good beer) ;-)"`
135	`fi`	138	`fi`
136	`urpmi --auto --auto-update --quiet --test --retry 2`	139	`urpmi --auto --auto-update --quiet --test --retry 2`
137	`if [ "$?" != "0" ]`	140	`if [ "$?" != "0" ]`
138	`then`	141	`then`
139	`echo`	142	`echo`
140	`if [ $Lang == "fr" ]`	143	`if [ $Lang == "fr" ]`
141	`then`	144	`then`
142	`echo "Une erreur a été détectée lors de la récupération des paquetages."`	145	`echo "Une erreur a été détectée lors de la récupération des paquetages."`
143	`else`	146	`else`
144	`echo "An error occurs when downloading RPMS"`	147	`echo "An error occurs when downloading RPMS"`
145	`fi`	148	`fi`
146	`rpm_error`	149	`rpm_error`
147	`exit 1`	150	`exit 1`
148	`fi`	151	`fi`
149		152
150	`# update with cached RPM`	153	`# update with cached RPM`
151	`urpmi --auto --auto-update`	154	`urpmi --auto --auto-update`
152	`if [ "$?" != "0" ]`	155	`if [ "$?" != "0" ]`
153	`then`	156	`then`
154	`echo`	157	`echo`
155	`if [ $Lang == "fr" ]`	158	`if [ $Lang == "fr" ]`
156	`then`	159	`then`
157	`echo "Une erreur a été détectée lors de la mise à jour des paquetages."`	160	`echo "Une erreur a été détectée lors de la mise à jour des paquetages."`
158	`else`	161	`else`
159	`echo "An error occurs when updating packages"`	162	`echo "An error occurs when updating packages"`
160	`fi`	163	`fi`
161	`rpm_error`	164	`rpm_error`
162	`exit 1`	165	`exit 1`
163	`fi`	166	`fi`
164	`# Clean the RPM cache`	-
165	`urpmi --clean`	-
166		167
167	`# Download of ALCASAR specifics RPM in cache (and test)`	168	`# Download of ALCASAR specifics RPM in cache (and test)`
168	`if [ $Lang == "fr" ]`	169	`if [ $Lang == "fr" ]`
169	`then`	170	`then`
170	`echo "Récupération des paquetages complémentaires. Veuillez patienter ..."`	171	`echo "Récupération des paquetages complémentaires. Veuillez patienter ..."`
171	`else`	172	`else`
172	`echo "Download of complementary packages. Please wait ..."`	173	`echo "Download of complementary packages. Please wait ..."`
173	`fi`	174	`fi`
174	`urpmi --auto --no-recommends $PACKAGES --quiet --test --retry 2`	175	`urpmi --auto --no-recommends $PACKAGES --quiet --test --retry 2`
175	`if [ "$?" != "0" ]`	176	`if [ "$?" != "0" ]`
176	`then`	177	`then`
177	`echo`	178	`echo`
178	`if [ $Lang == "fr" ]`	179	`if [ $Lang == "fr" ]`
179	`then`	180	`then`
180	`echo "Une erreur a été détectée lors de la récupération des paquetages complémentaires."`	181	`echo "Une erreur a été détectée lors de la récupération des paquetages complémentaires."`
181	`else`	182	`else`
182	`echo "An error occurs when downloading complementary packages"`	183	`echo "An error occurs when downloading complementary packages"`
183	`fi`	184	`fi`
184	`rpm_error`	185	`rpm_error`
185	`exit 1`	186	`exit 1`
186	`fi`	187	`fi`
187		188
188	`# update with cached RPM`	189	`# update with cached RPM`
189	`urpmi --auto --no-recommends $PACKAGES`	190	`urpmi --auto --no-recommends $PACKAGES`
190	`if [ "$?" != "0" ]`	191	`if [ "$?" != "0" ]`
191	`then`	192	`then`
192	`echo`	193	`echo`
193	`if [ $Lang == "fr" ]`	194	`if [ $Lang == "fr" ]`
194	`then`	195	`then`
195	`echo "Une erreur a été détectée lors de l'installation des paquetages complémentaires."`	196	`echo "Une erreur a été détectée lors de l'installation des paquetages complémentaires."`
196	`else`	197	`else`
197	`echo "An error occurs when installing complementary packages"`	198	`echo "An error occurs when installing complementary packages"`
198	`fi`	199	`fi`
199	`rpm_error`	200	`rpm_error`
200	`exit 1`	201	`exit 1`
201	`fi`	202	`fi`
202		203
203	`# Keep only the kernel version we compil netflow with, and remove all others`	204	`# Keep only the kernel version we compil netflow with, and remove all others`
204	`kernelVersion=$(rpm -qa \| grep -e ^kernel-server -e ^kernel-desktop)`	205	`kernelVersion=$(rpm -qa \| grep -e ^kernel-server -e ^kernel-desktop)`
205	`for i in $kernelVersion`	206	`for i in $kernelVersion`
206	`do`	207	`do`
207	`if [ $i != $KERNEL ];then`	208	`if [ $i != $KERNEL ];then`
208	`urpme --auto $i`	209	`urpme --auto $i`
209	`fi`	210	`fi`
210	`done`	211	`done`
211		212
212	`# delete unused RPMs`	213	`# delete unused RPMs`
213	`if [ $Lang == "fr" ]`	214	`if [ $Lang == "fr" ]`
214	`then`	215	`then`
215	`echo "Cleaning the system : "`	216	`echo "Cleaning the system : "`
216	`else`	217	`else`
217	`echo "Nettoyage du système : "`	218	`echo "Nettoyage du système : "`
218	`fi`	219	`fi`
219	`unused_rpm="shorewall mandi plymouth squid polkit pm-utils dnsmasq clamav clamd clamav-db"`	220	`unused_rpm="shorewall mandi plymouth squid polkit pm-utils dnsmasq clamav clamd clamav-db"`
220	`/usr/sbin/urpme --auto -a $unused_rpm`	221	`/usr/sbin/urpme --auto -a $unused_rpm`
221	for rpm in `rpm -qa\|grep mga7`; do urpme --auto $rpm; done	222	for rpm in `rpm -qa\|grep mga7`; do urpme --auto $rpm; done
222	`/usr/sbin/urpme --auto --auto-orphans`	223	`/usr/sbin/urpme --auto --auto-orphans`
223		224
224	`# Save chilli launch script (erase with new rpm one)`	225	`# Save chilli launch script (erase with new rpm one)`
225	`[ -e /etc/chilli.conf ] && cp /etc/chilli.conf /tmp/`	226	`[ -e /etc/chilli.conf ] && cp /etc/chilli.conf /tmp/`
226	`# Install home made RPMs`	227	`# Install home made RPMs`
227	for pkg in `ls rpms/$ARCH/*.rpm`	228	for pkg in `ls rpms/$ARCH/*.rpm`
228	`do`	229	`do`
229	`urpmi --no-verify --auto $pkg`	230	`urpmi --no-verify --auto $pkg`
230	`done`	231	`done`
231	`# restore chilli launch script`	232	`# restore chilli launch script`
232	`[ -e /tmp/chilli.conf ] && mv /tmp/chilli.conf /etc/`	233	`[ -e /tmp/chilli.conf ] && mv /tmp/chilli.conf /etc/`
233		234
234	`# Clean the RPM cache`	235	`# Clean the RPM cache`
235	`urpmi --clean`	236	`urpmi --clean`
236	`# the ipt-netflow RPM add the kernel module ipt_NETFLOW (the modules dependance tree need to be updated). "2>/dev/null" in order not to display a error (the running kernel is not the ALCASAR one during the installation process)`	237	`# the ipt-netflow RPM add the kernel module ipt_NETFLOW (the modules dependance tree need to be updated). "2>/dev/null" in order not to display a error (the running kernel is not the ALCASAR one during the installation process)`
237	`/sbin/depmod -a 2>/dev/null`	238	`/sbin/depmod -a 2>/dev/null`
238	`# test if all needed rpms are correctly installed`	239	`# test if all needed rpms are correctly installed`
239	`count_pkg=0; nb_pkg=0;`	240	`count_pkg=0; nb_pkg=0;`
240	`for pkg in $PACKAGES`	241	`for pkg in $PACKAGES`
241	`do`	242	`do`
242	nb_pkg=`expr $nb_pkg + 1`	243	nb_pkg=`expr $nb_pkg + 1`
243	`if rpm -q --quiet $pkg ; then`	244	`if rpm -q --quiet $pkg ; then`
244	count_pkg=`expr $count_pkg + 1`	245	count_pkg=`expr $count_pkg + 1`
245	`else`	246	`else`
246	`echo "error installing $pkg"`	247	`echo "error installing $pkg"`
247	`fi`	248	`fi`
248	`done`	249	`done`
249	`if [ $count_pkg -ne $nb_pkg ]`	250	`if [ $count_pkg -ne $nb_pkg ]`
250	`then`	251	`then`
251	`exit 1`	252	`exit 1`
252	`fi`	253	`fi`
253		254
254	`# test if all custom rpms are correctly installed`	255	`# test if all custom rpms are correctly installed`
255	`count_pkg=0; nb_pkg=0;`	256	`count_pkg=0; nb_pkg=0;`
256	for pkg in `ls rpms/$ARCH/\|sed 's/.x86_64.rpm//'`	257	for pkg in `ls rpms/$ARCH/\|sed 's/.x86_64.rpm//'`
257	`do`	258	`do`
258	nb_pkg=`expr $nb_pkg + 1`	259	nb_pkg=`expr $nb_pkg + 1`
259	`if rpm -q --quiet $pkg ; then`	260	`if rpm -q --quiet $pkg ; then`
260	count_pkg=`expr $count_pkg + 1`	261	count_pkg=`expr $count_pkg + 1`
261	`else`	262	`else`
262	`echo "error installing $pkg"`	263	`echo "error installing $pkg"`
263	`fi`	264	`fi`
264	`done`	265	`done`
265	`if [ $count_pkg -ne $nb_pkg ]`	266	`if [ $count_pkg -ne $nb_pkg ]`
266	`then`	267	`then`
267	`exit 1`	268	`exit 1`
268	`fi`	269	`fi`
269		270
270	`# .rpmnew handling (unused with ALCASAR)`	271	`# .rpmnew handling (unused with ALCASAR)`
271	`[ -e /etc/shadow.rpmnew ] && rm -f /etc/shadow.rpmnew`	272	`[ -e /etc/shadow.rpmnew ] && rm -f /etc/shadow.rpmnew`
272	`[ -e /etc/sysconfig/system.rpmnew ] && rm -f /etc/sysconfig/system.rpmnew`	273	`[ -e /etc/sysconfig/system.rpmnew ] && rm -f /etc/sysconfig/system.rpmnew`
273	`[ -e /etc/rpm/macros.rpmnew ] && rm -f /etc/rpm/macros.rpmnew`	274	`[ -e /etc/rpm/macros.rpmnew ] && rm -f /etc/rpm/macros.rpmnew`
274	`[ -e /etc/fstab.rpmnew ] && rm -f /etc/fstab.rpmnew`	275	`[ -e /etc/fstab.rpmnew ] && rm -f /etc/fstab.rpmnew`
275	`[ -e /etc/shells.rpmnew ] && rm -f /etc/shells.rpmnew`	276	`[ -e /etc/shells.rpmnew ] && rm -f /etc/shells.rpmnew`
276	`[ -e /etc/hosts.rpmnew ] && rm -f /etc/hosts.rpmnew`	277	`[ -e /etc/hosts.rpmnew ] && rm -f /etc/hosts.rpmnew`
277	`[ -e /etc/systemd/journald.conf.rpmnew ] && rm -f /etc/systemd/journald.conf.rpmnew`	278	`[ -e /etc/systemd/journald.conf.rpmnew ] && rm -f /etc/systemd/journald.conf.rpmnew`
278	`[ -e /etc/raddb/certs/dh.rpmnew ] && rm -f /etc/raddb/certs/dh.rpmnew`	279	`[ -e /etc/raddb/certs/dh.rpmnew ] && rm -f /etc/raddb/certs/dh.rpmnew`
279		280
280	`# .rpmnew handling (used with ALCASAR)`	281	`# .rpmnew handling (used with ALCASAR)`
281	`[ -e /etc/php.ini.rpmnew ] && mv -f /etc/php.ini.rpmnew /etc/php.ini.default`	282	`[ -e /etc/php.ini.rpmnew ] && mv -f /etc/php.ini.rpmnew /etc/php.ini.default`
282	`[ -e /etc/lighttpd/lighttpd.conf.rpmnew ] && mv -f /etc/lighttpd/lighttpd.conf.rpmnew /etc/lighttpd/lighttpd.conf.default`	283	`[ -e /etc/lighttpd/lighttpd.conf.rpmnew ] && mv -f /etc/lighttpd/lighttpd.conf.rpmnew /etc/lighttpd/lighttpd.conf.default`
283	`[ -e /etc/lighttpd/modules.conf.rpmnew ] && mv -f /etc/lighttpd/modules.conf.rpmnew /etc/lighttpd/modules.conf.default`	284	`[ -e /etc/lighttpd/modules.conf.rpmnew ] && mv -f /etc/lighttpd/modules.conf.rpmnew /etc/lighttpd/modules.conf.default`
284	`[ -e /etc/e2guardian/e2guardian.conf.rpmnew ] && mv -f /etc/e2guardian/e2guardian.conf.rpmnew /etc/e2guardian/e2guardian.conf.default`	285	`[ -e /etc/e2guardian/e2guardian.conf.rpmnew ] && mv -f /etc/e2guardian/e2guardian.conf.rpmnew /etc/e2guardian/e2guardian.conf.default`
285	`[ -e /etc/e2guardian/e2guardianf1.conf.rpmnew ] && mv -f /etc/e2guardian/e2guardianf1.conf.rpmnew /etc/e2guardian/e2guardianf1.conf.default`	286	`[ -e /etc/e2guardian/e2guardianf1.conf.rpmnew ] && mv -f /etc/e2guardian/e2guardianf1.conf.rpmnew /etc/e2guardian/e2guardianf1.conf.default`
286	`[ -e /etc/e2guardian/lists/urlregexplist.rpmnew ] && mv -f /etc/e2guardian/lists/urlregexplist.rpmnew /etc/e2guardian/lists/urlregexplist.default`	287	`[ -e /etc/e2guardian/lists/urlregexplist.rpmnew ] && mv -f /etc/e2guardian/lists/urlregexplist.rpmnew /etc/e2guardian/lists/urlregexplist.default`
287	`[ -e /etc/e2guardian/lists/bannedregexpurllist.rpmnew ] && mv -f /etc/e2guardian/lists/bannedregexpurllist.rpmnew /etc/e2guardian/lists/bannedregexpurllist.default`	288	`[ -e /etc/e2guardian/lists/bannedregexpurllist.rpmnew ] && mv -f /etc/e2guardian/lists/bannedregexpurllist.rpmnew /etc/e2guardian/lists/bannedregexpurllist.default`
288	`[ -e /etc/vnstat.conf.rpmnew ] && mv -f /etc/vnstat.conf.rpmnew /etc/vnstat.conf.default`	289	`[ -e /etc/vnstat.conf.rpmnew ] && mv -f /etc/vnstat.conf.rpmnew /etc/vnstat.conf.default`
289	`[ -e /etc/fail2ban/jail.conf.rpmnew ] && mv -f /etc/fail2ban/jail.conf.rpmnew /etc/fail2ban/jail.conf.default`	290	`[ -e /etc/fail2ban/jail.conf.rpmnew ] && mv -f /etc/fail2ban/jail.conf.rpmnew /etc/fail2ban/jail.conf.default`
290	`[ -e /etc/ssh/sshd_config.rpmnew ] && mv -f /etc/ssh/sshd_config.rpmnew /etc/ssh/sshd_config.default`	291	`[ -e /etc/ssh/sshd_config.rpmnew ] && mv -f /etc/ssh/sshd_config.rpmnew /etc/ssh/sshd_config.default`
291		292
292	`exit 0`	293	`exit 0`
293		294

Subversion Repositories ALCASAR

(root)/scripts/alcasar-rpm.sh @ 2977 – Rev 3193 → 3200