mirror of
https://github.com/pfsense/pfsense.git
synced 2025-10-26 11:38:35 +00:00
7734aea648
This mostly avoids starting things that will not work and gets the initial config. Most of the pfSense functionality will not work (pf rules, routing, etc) but it can be used for testing.
427 lines
12 KiB
Bash
Executable File
427 lines
12 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
# $Id$
|
|
|
|
# /etc/rc - master bootup script, invokes php setup
|
|
# part of pfSense by Scott Ullrich
|
|
# Copyright (C) 2004-2010 Scott Ullrich, All rights reserved.
|
|
# originally based on m0n0wall (http://neon1.net/m0n0wall)
|
|
# Copyright (C) 2003-2004 Manuel Kasper <mk@neon1.net>.
|
|
# All rights reserved.
|
|
|
|
#/bin/stty status '^T'
|
|
#/bin/stty susp '^-' intr '^-' quit '^-'
|
|
|
|
#trap : 2
|
|
#trap : 3
|
|
|
|
HOME=/
|
|
PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin
|
|
export HOME PATH
|
|
|
|
# Set our operating platform
|
|
PLATFORM=`/bin/cat /etc/platform`
|
|
|
|
# Set our current version
|
|
version=`/bin/cat /etc/version`
|
|
|
|
# Setup dumpdev/ddb/savecore"
|
|
echo "Configuring crash dumps..."
|
|
if [ "$PLATFORM" = "pfSense" ]; then
|
|
/etc/rc.dumpon
|
|
fi
|
|
|
|
# Mount memory file system if it exists
|
|
echo "Mounting filesystems..."
|
|
|
|
# Handle ZFS read-only case
|
|
if [ "$PLATFORM" = "pfSense" ]; then
|
|
if [ -f /usr/bin/grep ]; then
|
|
WHEREISROOT=`/sbin/mount | /usr/bin/grep " / " | /usr/bin/grep "tank" | /usr/bin/cut -d' ' -f1`
|
|
if [ "$WHEREISROOT" != "" ]; then
|
|
/sbin/zfs set readonly=off $WHEREISROOT
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
if [ "$PLATFORM" = "cdrom" ]; then
|
|
/etc/rc.cdrom
|
|
fi
|
|
|
|
if [ "$PLATFORM" = "embedded" ]; then
|
|
export PKG_TMPDIR=/root/
|
|
/etc/rc.embedded
|
|
fi
|
|
|
|
if [ "$PLATFORM" = "nanobsd" ]; then
|
|
export PKG_TMPDIR=/root/
|
|
/etc/rc.embedded
|
|
fi
|
|
|
|
if [ "$PLATFORM" = "pfSense" ]; then
|
|
/sbin/mdmfs -S -M -s 4m md /var/run
|
|
fi
|
|
|
|
# Mount /. If it fails run a fsck.
|
|
if [ ! "$PLATFORM" = "cdrom" ] ; then
|
|
if [ "$PLATFORM" = "nanobsd" ]; then
|
|
/sbin/mount -uw / || (/sbin/fsck -fy; /sbin/mount -uw /)
|
|
else
|
|
/sbin/mount -a || (/sbin/fsck -fy; /sbin/mount -a)
|
|
fi
|
|
# If /conf is a directory, convert it to a symlink to /cf/conf
|
|
if [ -d "/conf" ]; then
|
|
# If item is not a symlink then rm and recreate
|
|
CONFPOINTSTO=`readlink /conf`
|
|
if ! test "x$CONFPOINTSTO" = "x/cf/conf"; then
|
|
/bin/rm -rf /conf
|
|
/bin/ln -s /cf/conf /conf
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
if [ ! "$PLATFORM" = "jail" ]; then
|
|
# Check to see if a compact flash mountpoint exists
|
|
# If it fails to mount then run a fsck -fy
|
|
if grep -q cf /etc/fstab; then
|
|
/sbin/mount -w /cf 2>/dev/null
|
|
/sbin/mount -uw /cf || \
|
|
(/sbin/umount /cf; /sbin/fsck -fy /cf; /sbin/mount -w /cf)
|
|
fi
|
|
fi
|
|
|
|
# sync pw database after mount.
|
|
rm -f /etc/spwd.db.tmp
|
|
/usr/sbin/pwd_mkdb -d /etc/ /etc/master.passwd
|
|
|
|
product=`/usr/bin/grep product_name /etc/inc/globals.inc | /usr/bin/cut -d'"' -f4`
|
|
hideplatform=`/usr/bin/grep hideplatform /etc/inc/globals.inc | /usr/bin/wc -l`
|
|
varrunpath=`/usr/bin/grep varrun_path /etc/inc/globals.inc | /usr/bin/cut -d'"' -f4`
|
|
|
|
if [ "$hideplatform" -gt "0" ]; then
|
|
platformbanner="" # hide the platform
|
|
else
|
|
platformbanner=" on the '${PLATFORM}' platform"
|
|
fi
|
|
|
|
echo
|
|
cat /etc/ascii-art/pfsense-logo-small.txt
|
|
echo
|
|
echo
|
|
echo "Welcome to ${product} ${version} ${platformbanner} ..."
|
|
echo
|
|
|
|
if [ ! "$PLATFORM" = "jail" ]; then
|
|
# Enable console output if its muted.
|
|
/sbin/conscontrol mute off >/dev/null
|
|
fi
|
|
|
|
if [ "$PLATFORM" = "cdrom" ] ; then
|
|
# do nothing for cdrom platform
|
|
elif [ "$PLATFORM" = "embedded" ] ; then
|
|
# do nothing for embedded platform
|
|
elif [ "$PLATFORM" = "nanobsd" ] ; then
|
|
# Ensure that packages can be persistent across reboots
|
|
/bin/mkdir -p /root/var/db/pkg
|
|
/bin/rm -rf /var/db/pkg
|
|
/bin/ln -s /root/var/db/pkg/ /var/db/pkg
|
|
elif [ "$PLATFORM" = "jail" ]; then
|
|
# do nothing for jail platform
|
|
else
|
|
SWAPDEVICE=`/bin/cat /etc/fstab | /usr/bin/grep swap | /usr/bin/cut -f1`
|
|
/sbin/swapon -a 2>/dev/null >/dev/null
|
|
/etc/rc.savecore
|
|
fi
|
|
|
|
if [ "$PLATFORM" = "cdrom" ] ; then
|
|
echo -n "Mounting unionfs directories..."
|
|
/bin/mkdir /tmp/unionfs
|
|
/bin/mkdir /tmp/unionfs/usr
|
|
/bin/mkdir /tmp/unionfs/root
|
|
/bin/mkdir /tmp/unionfs/sbin
|
|
/bin/mkdir /tmp/unionfs/bin
|
|
/bin/mkdir /tmp/unionfs/boot
|
|
/bin/mkdir /tmp/unionfs/confdefault
|
|
/sbin/mount_unionfs /tmp/unionfs/usr /usr/
|
|
/sbin/mount_unionfs /tmp/unionfs/root /root/
|
|
/sbin/mount_unionfs /tmp/unionfs/bin /bin/
|
|
/sbin/mount_unionfs /tmp/unionfs/sbin /sbin/
|
|
/sbin/mount_unionfs /tmp/unionfs/boot /boot/
|
|
/sbin/mount_unionfs /tmp/unionfs/confdefault /conf.default/
|
|
echo "done."
|
|
fi
|
|
|
|
echo -n "Creating symlinks..."
|
|
# Make sure symlink is correct on embedded
|
|
if [ "$PLATFORM" = "embedded" ] ; then
|
|
/bin/rm /conf
|
|
/bin/ln -s /cf/conf/ /conf
|
|
fi
|
|
|
|
# Make sure symlink is correct on nanobsd
|
|
if [ "$PLATFORM" = "nanobsd" ] ; then
|
|
/bin/rm /conf
|
|
/bin/ln -s /cf/conf/ /conf
|
|
fi
|
|
|
|
# Repair symlinks if they are broken
|
|
if [ ! -L /etc/syslog.conf ]; then
|
|
/bin/rm -rf /etc/syslog.conf
|
|
/bin/ln -s /var/etc/syslog.conf /etc/syslog.conf
|
|
fi
|
|
|
|
# Repair symlinks if they are broken
|
|
if [ ! -L /etc/hosts ]; then
|
|
/bin/rm -rf /etc/hosts
|
|
/bin/ln -s /var/etc/hosts /etc/hosts
|
|
fi
|
|
|
|
if [ ! -L /etc/resolv.conf ]; then
|
|
/bin/rm -rf /etc/resolv.conf
|
|
/bin/ln -s /var/etc/resolv.conf /etc/resolv.conf
|
|
fi
|
|
|
|
# Setup compatibility link for packages that
|
|
# have trouble overriding the PREFIX configure
|
|
# argument since we build our packages in a
|
|
# seperated PREFIX area
|
|
# Only create if symlink does not exist.
|
|
if [ ! -h /tmp/tmp ]; then
|
|
/bin/ln -hfs / /tmp/tmp
|
|
fi
|
|
|
|
# Make sure our /tmp is 777 + Sticky
|
|
if [ ! "$PLATFORM" = "cdrom" ] ; then
|
|
/bin/rm -rf /tmp/*
|
|
fi
|
|
/bin/chmod 1777 /tmp
|
|
|
|
if [ ! "$PLATFORM" = "cdrom" ] ; then
|
|
# Malloc debugging check
|
|
if [ -L /etc/malloc.conf ]; then
|
|
#ln -s aj /etc/malloc.conf
|
|
/bin/rm /etc/malloc.conf
|
|
fi
|
|
fi
|
|
|
|
if [ ! -L /etc/dhclient.conf ]; then
|
|
/bin/rm -rf /etc/dhclient.conf
|
|
fi
|
|
|
|
if [ ! -L /etc/sasyncd.conf ]; then
|
|
/bin/mkdir -p /var/etc/
|
|
/usr/bin/touch /var/etc/sasyncd.conf
|
|
/bin/rm -rf /etc/sasyncd.conf
|
|
/bin/ln -s /var/etc/sasyncd.conf /etc/sasyncd.conf
|
|
/usr/sbin/chown root:wheel /var/etc/sasyncd.conf
|
|
/bin/chmod 0600 /var/etc/sasyncd.conf
|
|
fi
|
|
|
|
if [ ! -d /var/tmp ]; then
|
|
/bin/mkdir -p /var/tmp
|
|
fi
|
|
|
|
if [ ! -d /cf/conf/backup/ ]; then
|
|
/bin/mkdir -p /cf/conf/backup/
|
|
fi
|
|
|
|
# OpenVPN storage
|
|
if [ ! -d /var/etc/openvpn ]; then
|
|
/bin/mkdir -p /var/etc/openvpn
|
|
fi
|
|
if [ ! -d /var/etc/openvpn-csc ]; then
|
|
/bin/mkdir -p /var/etc/openvpn-csc
|
|
fi
|
|
|
|
set -T
|
|
trap "echo 'Reboot interrupted'; exit 1" 3
|
|
|
|
# Remove old nameserver resolution files
|
|
/bin/rm -f /var/etc/nameserver*
|
|
|
|
# Create uploadbar tmp directory
|
|
/bin/mkdir -p /tmp/uploadbar
|
|
/bin/chmod 0777 /tmp/uploadbar
|
|
|
|
# make some directories in /var
|
|
/bin/mkdir -p /var/run /var/log /var/etc /var/db/entropy /var/at/jobs/ /var/empty 2>/dev/null
|
|
/bin/rm /var/log/* 2>/dev/null
|
|
/bin/rm -rf /var/run/*
|
|
|
|
echo -n "."
|
|
DISABLESYSLOGCLOG=`cat /cf/conf/config.xml | grep disablesyslogclog | wc -l | awk '{ print $1 }'`
|
|
if [ "$DISABLESYSLOGCLOG" -gt "0" ]; then
|
|
/usr/bin/touch /var/log/system.log
|
|
/usr/bin/touch /var/log/filter.log
|
|
/usr/bin/touch /var/log/dhcpd.log
|
|
/usr/bin/touch /var/log/vpn.log
|
|
/usr/bin/touch /var/log/pptps.log
|
|
/usr/bin/touch /var/log/poes.log
|
|
/usr/bin/touch /var/log/l2tps.log
|
|
/usr/bin/touch /var/log/openvpn.log
|
|
/usr/bin/touch /var/log/portalauth.log
|
|
/usr/bin/touch /var/log/ipsec.log
|
|
/usr/bin/touch /var/log/ppp.log
|
|
/usr/bin/touch /var/log/relayd.log
|
|
/usr/bin/touch /var/log/lighttpd.log
|
|
/usr/bin/touch /var/log/ntpd.log
|
|
/usr/bin/touch /var/log/apinger.log
|
|
else
|
|
ENABLEFIFOLOG=`cat /cf/conf/config.xml | grep usefifolog | wc -l | awk '{ print $1 }'`
|
|
if [ "$ENABLEFIFOLOG" -gt "0" ]; then
|
|
# generate fifolog files
|
|
/usr/sbin/fifolog_create -s 511488 /var/log/system.log
|
|
/usr/sbin/fifolog_create -s 511488 /var/log/filter.log
|
|
/usr/sbin/fifolog_create -s 50688 /var/log/dhcpd.log
|
|
/usr/sbin/fifolog_create -s 50688 /var/log/vpn.log
|
|
/usr/sbin/fifolog_create -s 50688 /var/log/pptps.log
|
|
/usr/sbin/fifolog_create -s 50688 /var/log/poes.log
|
|
/usr/sbin/fifolog_create -s 50688 /var/log/l2tps.log
|
|
/usr/sbin/fifolog_create -s 50688 /var/log/openvpn.log
|
|
/usr/sbin/fifolog_create -s 50688 /var/log/portalauth.log
|
|
/usr/sbin/fifolog_create -s 50688 /var/log/ipsec.log
|
|
/usr/sbin/fifolog_create -s 50688 /var/log/ppp.log
|
|
/usr/sbin/fifolog_create -s 50688 /var/log/relayd.log
|
|
/usr/sbin/fifolog_create -s 50688 /var/log/lighttpd.log
|
|
/usr/sbin/fifolog_create -s 50688 /var/log/ntpd.log
|
|
/usr/sbin/fifolog_create -s 50688 /var/log/apinger.log
|
|
else
|
|
/usr/sbin/clog -i -s 512144 /var/log/system.log
|
|
/usr/sbin/clog -i -s 512144 /var/log/filter.log
|
|
/usr/sbin/clog -i -s 65535 /var/log/dhcpd.log
|
|
/usr/sbin/clog -i -s 65535 /var/log/vpn.log
|
|
/usr/sbin/clog -i -s 50688 /var/log/pptps.log
|
|
/usr/sbin/clog -i -s 50688 /var/log/poes.log
|
|
/usr/sbin/clog -i -s 50688 /var/log/l2tps.log
|
|
/usr/sbin/clog -i -s 65535 /var/log/openvpn.log
|
|
/usr/sbin/clog -i -s 65535 /var/log/portalauth.log
|
|
/usr/sbin/clog -i -s 65535 /var/log/ipsec.log
|
|
/usr/sbin/clog -i -s 65535 /var/log/ppp.log
|
|
/usr/sbin/clog -i -s 65535 /var/log/slbd.log
|
|
/usr/sbin/clog -i -s 65535 /var/log/lighttpd.log
|
|
/usr/sbin/clog -i -s 65535 /var/log/ntpd.log
|
|
/usr/sbin/clog -i -s 65535 /var/log/relayd.log
|
|
/usr/sbin/clog -i -s 65535 /var/log/apinger.log
|
|
fi
|
|
fi
|
|
# change permissions on newly created fifolog files.
|
|
/bin/chmod 0600 /var/log/*.log
|
|
|
|
echo -n "."
|
|
if [ ! "$PLATFORM" = "jail" ]; then
|
|
DEVFS=`/sbin/mount | /usr/bin/grep devfs | /usr/bin/wc -l | /usr/bin/cut -d" " -f8`
|
|
if [ "$DEVFS" = "0" ]; then
|
|
mount_devfs devfs /dev
|
|
fi
|
|
fi
|
|
|
|
# Create an initial utmp file
|
|
cd /var/run && /bin/cp /dev/null utmp && /bin/chmod 644 utmp
|
|
|
|
echo -n "."
|
|
/sbin/ldconfig -elf /usr/lib /usr/local/lib /lib
|
|
|
|
# Make sure /etc/rc.conf doesn't exist.
|
|
if [ -f /etc/rc.conf ]; then
|
|
/bin/rm -rf /etc/rc.conf
|
|
fi
|
|
|
|
if [ ! "$PLATFORM" = "jail" ]; then
|
|
# Launching kbdmux(4)
|
|
if [ -f "/dev/kbdmux0" ]; then
|
|
echo -n "."
|
|
/usr/sbin/kbdcontrol -k /dev/kbdmux0 < /dev/console
|
|
[ -c "/dev/atkbd0" ] && kbdcontrol -a atkbd0 < /dev/console
|
|
[ -c "/dev/ukbd0" ] && kbdcontrol -a ukbd0 < /dev/console
|
|
fi
|
|
|
|
# Fire up unionfs if mount points exist.
|
|
if [ -f /dist/uniondirs ]; then
|
|
echo -n "."
|
|
/etc/rc.d/unionfs start
|
|
fi
|
|
fi
|
|
|
|
echo "done."
|
|
|
|
# Ensure gettytab is of a sane size
|
|
if [ `/bin/ls -la /etc/gettytab | /usr/bin/awk '{ print $5'}` -lt 512 ]; then
|
|
echo ">>> Restoring /etc/gettytab due to unusal size"
|
|
echo ">>> Restoring /etc/gettytab due to unusal size" | /usr/bin/logger
|
|
/bin/cp /etc/gettytab.bak /etc/gettytab
|
|
fi
|
|
|
|
# Recreate capabilities DB
|
|
/usr/bin/cap_mkdb /etc/login.conf
|
|
|
|
# Run the php.ini setup file and populate
|
|
# /usr/local/etc/php.ini and /usr/local/lib/php.ini
|
|
/etc/rc.php_ini_setup 2>/tmp/php_errors.txt
|
|
|
|
# Launch external configuration loader for supported platforms
|
|
if [ "$PLATFORM" = "embedded" ]; then
|
|
/usr/local/bin/php -q /etc/ecl.php
|
|
fi
|
|
|
|
# Launch external configuration loader for supported platforms
|
|
if [ "$PLATFORM" = "nanobsd" ]; then
|
|
/usr/local/bin/php -q /etc/ecl.php
|
|
fi
|
|
|
|
# Launch external configuration loader for supported platforms
|
|
if [ "$PLATFORM" = "pfSense" ]; then
|
|
/usr/local/bin/php -q /etc/ecl.php
|
|
fi
|
|
|
|
if [ -f /etc/rc.custom_boot_early ]; then
|
|
/bin/echo -n "Launching /etc/rc.custom_boot_early...";
|
|
/etc/rc.custom_boot_early
|
|
echo "Done"
|
|
fi
|
|
|
|
/usr/bin/nice -n20 /usr/local/sbin/check_reload_status
|
|
|
|
# let the PHP-based configuration subsystem set up the system now
|
|
echo -n "Launching the init system..."
|
|
/bin/rm -f /cf/conf/backup/backup.cache
|
|
/bin/rm -f /root/lighttpd*
|
|
/usr/bin/touch $varrunpath/booting
|
|
/etc/rc.bootup
|
|
|
|
# If a shell was selected from recovery
|
|
# console then just drop to the shell now.
|
|
if [ -f "/tmp/donotbootup" ]; then
|
|
echo "Dropping to recovery shell."
|
|
exit 0
|
|
fi
|
|
|
|
echo -n "Starting CRON... "
|
|
cd /tmp && /usr/sbin/cron -s 2>/dev/null
|
|
echo "done."
|
|
|
|
# Start packages
|
|
/etc/rc.start_packages
|
|
|
|
/bin/rm -rf /usr/local/pkg/pf/CVS
|
|
|
|
# Start ping handler every 240 seconds
|
|
/usr/local/bin/minicron 240 /var/run/ping_hosts.pid /usr/local/bin/ping_hosts.sh
|
|
|
|
# Start account expire handler every hour
|
|
/usr/local/bin/minicron 3600 /var/run/expire_accounts.pid /etc/rc.expireaccounts
|
|
|
|
# Start alias url updater every 24 hours
|
|
/usr/local/bin/minicron 86400 /var/run/update_alias_url_data.pid /etc/rc.update_alias_url_data
|
|
|
|
/bin/chmod a+rw /tmp/.
|
|
|
|
echo "Bootup complete"
|
|
/bin/rm $varrunpath/booting
|
|
|
|
/usr/local/bin/beep.sh start 2>&1 >/dev/null
|
|
|
|
# Reset the cache. read-only requires this.
|
|
/bin/rm -f /tmp/config.cache
|
|
|
|
exit 0
|