#!/bin/bash # source in the functions source /opt/vyatta/sbin/install-functions # export INSTALL_LOG for the scripts invoked export INSTALL_LOG=/tmp/install-$$.log # export PROGRESS_PID for the scripts invoked export PROGRESS_PID=$$ # file for get-partition output PART_FILE='' # Temp directory for downloaded ISO TEMP_DIR="/var/tmp/install-image.$$" fail_exit () { echo "$*" echo 'Exiting...' exit 1 } clean_up () { if [ -n "$PART_FILE" ]; then rm -f $PART_FILE >&/dev/null fi umount $CD_SQUASH_ROOT >&/dev/null || true umount $CD_ROOT >&/dev/null || true umount $INST_ROOT >&/dev/null || true umount $READ_ROOT >&/dev/null || true umount $WRITE_ROOT >&/dev/null || true if [ -d "$TEMP_DIR" ]; then rm -rf $TEMP_DIR fi } sig_handler () { echo "ERROR: Signal received. Exiting..." clean_up echo "Done" trap - EXIT exit 1 } exit_handler () { clean_up } # Try to fetch the ISO file using a URL provided by the user. # If successful, we leave $NEW_ISO pointing to the ISO file that # was downloaded. fetch_iso_by_url () { mkdir $TEMP_DIR echo "Trying to fetch ISO file from $NEW_ISO" filename="${TEMP_DIR}/${NEW_ISO##*/}" curl -f -o $filename $NEW_ISO if [ $? -ne 0 ]; then echo "Unable to fetch ISO from $NEW_ISO" rm -f $filename exit 1 fi if [ ! -e $filename ]; then echo "Download of $NEW_ISO failed" exit 1 fi echo "ISO download suceeded." echo "Checking for digital signature file..." curl -f -o ${filename}.asc ${NEW_ISO}.asc if [ $? -ne 0 ]; then echo "Unable to fetch digital signature file." echo -n "Do you want to continue without signature check? (yes/no) [yes] " response=$(get_response "Yes" "Yes No Y N") if [ "$response" == "no" ] || [ "$response" == "n" ]; then rm -f $filename fail_exit 'OK. Installation will not be performed.' fi # In case signature file was partially downloaded... rm -f ${filename}.asc fi if [ -e ${filename}.asc ]; then echo "Found it. Checking digital signature..." gpg --keyring /etc/apt/trusted.gpg --verify ${filename}.asc if [ $? -ne 0 ]; then echo "Signature check FAILED." echo -n "Do you want to continue anyway? (yes/no) [no] " response=$(get_response "Yes" "Yes No Y N") if [ "$response" == "no" ] || [ "$response" == "n" ]; then fail_exit 'OK. Installation will not be performed.' fi echo "OK. Proceding with installation anyway." else echo "Digital signature is valid." fi fi NEW_ISO=$filename } # set up the specified ISO image file or URL for install set_up_new_iso () { url_scheme=${NEW_ISO%%:*} if [ "$url_scheme" != "$NEW_ISO" ]; then if [ "$url_scheme" = "http" -o "$url_scheme" = "https" -o \ "$url_scheme" = "ftp" -o "$url_scheme" = "tftp" -o \ "$url_scheme" = "scp" ]; then fetch_iso_by_url fi fi if [ ! -f "$NEW_ISO" ] || ! (file $NEW_ISO | grep -q 9660); then fail_exit "\"$NEW_ISO\" is not a valid ISO image file." fi # make sure mount points exist mkdir -p $INST_ROOT $WRITE_ROOT $READ_ROOT $CD_ROOT $CD_SQUASH_ROOT # mount ISO margs="-o loop,ro $NEW_ISO $CD_ROOT" if ! try_mount "$margs"; then fail_exit 'Failed to mount the new image.' fi # check squash image local squash_file=$CD_ROOT/live/filesystem.squashfs if [ ! -f "$squash_file" ] || ! (file $squash_file | grep -q Squashfs) \ || ! grep -q '^ii vyatta-version ' $CD_ROOT/live/packages.txt; then fail_exit "\"$NEW_ISO\" is not a Vyatta ISO image file." fi # Verify checksums of all files in ISO image if [ ! -f $CD_ROOT/md5sum.txt ]; then fail_exit "MD5 checksum file is missing from ISO." fi echo -n "Checking MD5 checksums of files on the ISO image..." resfile=`mktemp /tmp/install-image-md5check-XXXXXXXX` (cd $CD_ROOT ; md5sum -c md5sum.txt > $resfile) failures=`grep -v 'OK$' $resfile | wc -l` rm -f $resfile if [ $failures == 0 ]; then echo "OK." else echo "Failed!" echo "$failures checksum failures found!" echo "ISO image is correupted and can not be used." exit 1 fi # mount squash image margs="-o loop,ro $squash_file $CD_SQUASH_ROOT" if ! try_mount "$margs"; then fail_exit 'Failed to mount the squashfs image.' fi } # install new image into a newly-formatted partition. # will exit with error if installation fails. install_new () { local root_part=$1 local inst_drv=$2 if [ ! -e "/dev/$root_part" ] || [ ! -e "/dev/$inst_drv" ]; then fail_exit "Invalid drive/partition ($inst_drv and $root_part)." fi # install new image if ! /opt/vyatta/sbin/install-image-new "$root_part"; then exit 1 fi # postinst operations if ! /opt/vyatta/sbin/install-postinst-new \ "$inst_drv" "$root_part" union; then exit 1 fi } # install new image into the current boot partition. # will exit with error if installation fails. install_existing () { local ctype=$1 if ! /opt/vyatta/sbin/install-image-existing "$ctype"; then exit 1 fi } # the image to be installed. only used if installing from an installed, # running system. NEW_ISO=$1 if [ `whoami` != 'root' ] ; then fail_exit 'This script must be run with root privileges.' fi trap sig_handler INT KILL trap exit_handler EXIT if is_live_cd_boot; then cat <&/dev/null rm -f $PART_FILE >&/dev/null # handle different types case "$root_part_type" in new) install_new "$root_part" "$inst_drv" exit 0 ;; union|old) install_existing "$root_part_type" exit 0 ;; *) fail_exit "Unknown partition type \"$root_part_type\"." ;; esac