]> andersk Git - gssapi-openssh.git/blame - openssh/contrib/aix/buildbff.sh
Initial revision
[gssapi-openssh.git] / openssh / contrib / aix / buildbff.sh
CommitLineData
d832c38e 1#!/bin/sh
2#
3# buildbff.sh: Create AIX SMIT-installable OpenSSH packages
7cac2b65 4# $Id$
d832c38e 5#
6# Author: Darren Tucker (dtucker at zip dot com dot au)
7# This file is placed in the public domain and comes with absolutely
8# no warranty.
540d72c3 9#
d832c38e 10# Based originally on Ben Lindstrom's buildpkg.sh for Solaris
11#
12
276b07a3 13#
14# Tunable configuration settings
bfe49944 15# create a "config.local" in your build directory or set
16# environment variables to override these.
276b07a3 17#
7cac2b65 18[ -z "$PERMIT_ROOT_LOGIN" ] && PERMIT_ROOT_LOGIN=no
19[ -z "$X11_FORWARDING" ] && X11_FORWARDING=no
20[ -z "$AIX_SRC" ] && AIX_SRC=no
276b07a3 21
d832c38e 22umask 022
276b07a3 23
d03f4262 24startdir=`pwd`
25
30460aeb 26perl -v >/dev/null || (echo perl required; exit 1)
27
d03f4262 28# Path to inventory.sh: same place as buildbff.sh
29if echo $0 | egrep '^/'
30then
31 inventory=`dirname $0`/inventory.sh # absolute path
32else
33 inventory=`pwd`/`dirname $0`/inventory.sh # relative path
34fi
35
276b07a3 36#
7cac2b65 37# We still support running from contrib/aix, but this is deprecated
276b07a3 38#
39if pwd | egrep 'contrib/aix$'
40then
41 echo "Changing directory to `pwd`/../.."
42 echo "Please run buildbff.sh from your build directory in future."
43 cd ../..
44 contribaix=1
45fi
46
47if [ ! -f Makefile ]
48then
49 echo "Makefile not found (did you run configure?)"
540d72c3 50 exit 1
276b07a3 51fi
52
53#
54# Directories used during build:
55# current dir = $objdir directory you ran ./configure in.
56# $objdir/$PKGDIR/ directory package files are constructed in
57# $objdir/$PKGDIR/root/ package root ($FAKE_ROOT)
58#
59objdir=`pwd`
d832c38e 60PKGNAME=openssh
350391c5 61PKGDIR=package
d832c38e 62
276b07a3 63#
64# Collect local configuration settings to override defaults
65#
66if [ -s ./config.local ]
67then
68 echo Reading local settings from config.local
69 . ./config.local
70fi
71
72#
73# Fill in some details from Makefile, like prefix and sysconfdir
74# the eval also expands variables like sysconfdir=${prefix}/etc
75# provided they are eval'ed in the correct order
76#
77for confvar in prefix exec_prefix bindir sbindir libexecdir datadir mandir mansubdir sysconfdir piddir srcdir
78do
79 eval $confvar=`grep "^$confvar=" $objdir/Makefile | cut -d = -f 2`
80done
81
82#
83# Collect values of privsep user and privsep path
84# currently only found in config.h
85#
86for confvar in SSH_PRIVSEP_USER PRIVSEP_PATH
87do
88 eval $confvar=`awk '/#define[ \t]'$confvar'/{print $3}' $objdir/config.h`
89done
d832c38e 90
276b07a3 91# Set privsep defaults if not defined
92if [ -z "$SSH_PRIVSEP_USER" ]
d832c38e 93then
276b07a3 94 SSH_PRIVSEP_USER=sshd
95fi
96if [ -z "$PRIVSEP_PATH" ]
97then
98 PRIVSEP_PATH=/var/empty
d832c38e 99fi
100
540d72c3 101# Clean package build directory
276b07a3 102rm -rf $objdir/$PKGDIR
103FAKE_ROOT=$objdir/$PKGDIR/root
104mkdir -p $FAKE_ROOT
105
540d72c3 106# Start by faking root install
d832c38e 107echo "Faking root install..."
276b07a3 108cd $objdir
d832c38e 109make install-nokeys DESTDIR=$FAKE_ROOT
110
350391c5 111if [ $? -gt 0 ]
112then
113 echo "Fake root install failed, stopping."
114 exit 1
115fi
116
276b07a3 117#
118# Copy informational files to include in package
119#
120cp $srcdir/LICENCE $objdir/$PKGDIR/
121cp $srcdir/README* $objdir/$PKGDIR/
122
350391c5 123#
124# Extract common info requires for the 'info' part of the package.
125# AIX requires 4-part version numbers
126#
7cac2b65 127VERSION=`./ssh -V 2>&1 | cut -f 1 -d , | cut -f 2 -d _`
350391c5 128MAJOR=`echo $VERSION | cut -f 1 -d p | cut -f 1 -d .`
129MINOR=`echo $VERSION | cut -f 1 -d p | cut -f 2 -d .`
130PATCH=`echo $VERSION | cut -f 1 -d p | cut -f 3 -d .`
276b07a3 131PORTABLE=`echo $VERSION | awk 'BEGIN{FS="p"}{print $2}'`
132[ "$PATCH" = "" ] && PATCH=0
133[ "$PORTABLE" = "" ] && PORTABLE=0
350391c5 134BFFVERSION=`printf "%d.%d.%d.%d" $MAJOR $MINOR $PATCH $PORTABLE`
135
136echo "Building BFF for $PKGNAME $VERSION (package version $BFFVERSION)"
137
d832c38e 138#
276b07a3 139# Set ssh and sshd parameters as per config.local
d832c38e 140#
540d72c3 141if [ "${PERMIT_ROOT_LOGIN}" = no ]
276b07a3 142then
540d72c3 143 perl -p -i -e "s/#PermitRootLogin yes/PermitRootLogin no/" \
144 $FAKE_ROOT/${sysconfdir}/sshd_config
276b07a3 145fi
146if [ "${X11_FORWARDING}" = yes ]
147then
540d72c3 148 perl -p -i -e "s/#X11Forwarding no/X11Forwarding yes/" \
149 $FAKE_ROOT/${sysconfdir}/sshd_config
276b07a3 150fi
151
d832c38e 152
153# Rename config files; postinstall script will copy them if necessary
154for cfgfile in ssh_config sshd_config ssh_prng_cmds
155do
156 mv $FAKE_ROOT/$sysconfdir/$cfgfile $FAKE_ROOT/$sysconfdir/$cfgfile.default
157done
158
159#
160# Generate lpp control files.
276b07a3 161# working dir is $FAKE_ROOT but files are generated in dir above
d832c38e 162# and moved into place just before creation of .bff
163#
164cd $FAKE_ROOT
165echo Generating LPP control files
166find . ! -name . -print >../openssh.al
276b07a3 167$inventory >../openssh.inventory
168
169cat <<EOD >../openssh.copyright
170This software is distributed under a BSD-style license.
171For the full text of the license, see /usr/lpp/openssh/LICENCE
172EOD
d832c38e 173
bfe49944 174#
175# openssh.size file allows filesystem expansion as required
176# generate list of directories containing files
177# then calculate disk usage for each directory and store in openssh.size
178#
179files=`find . -type f -print`
180dirs=`for file in $files; do dirname $file; done | sort -u`
181for dir in $dirs
182do
183 du $dir
184done > ../openssh.size
185
d832c38e 186#
187# Create postinstall script
188#
189cat <<EOF >>../openssh.post_i
190#!/bin/sh
191
276b07a3 192echo Creating configs from defaults if necessary.
d832c38e 193for cfgfile in ssh_config sshd_config ssh_prng_cmds
194do
540d72c3 195 if [ ! -f $sysconfdir/\$cfgfile ]
196 then
197 echo "Creating \$cfgfile from default"
198 cp $sysconfdir/\$cfgfile.default $sysconfdir/\$cfgfile
199 else
200 echo "\$cfgfile already exists."
201 fi
d832c38e 202done
276b07a3 203echo
204
30460aeb 205# Create PrivilegeSeparation user and group if not present
206echo Checking for PrivilegeSeparation user and group.
207if cut -f1 -d: /etc/group | egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null
276b07a3 208then
30460aeb 209 echo "PrivSep group $SSH_PRIVSEP_USER already exists."
276b07a3 210else
30460aeb 211 echo "Creating PrivSep group $SSH_PRIVSEP_USER."
212 mkgroup -A $SSH_PRIVSEP_USER
213fi
276b07a3 214
30460aeb 215# Create user if required
216if lsuser "$SSH_PRIVSEP_USER" >/dev/null
217then
218 echo "PrivSep user $SSH_PRIVSEP_USER already exists."
219else
220 echo "Creating PrivSep user $SSH_PRIVSEP_USER."
221 mkuser gecos='SSHD PrivSep User' login=false rlogin=false account_locked=true pgrp=$SSH_PRIVSEP_USER $SSH_PRIVSEP_USER
222fi
276b07a3 223
30460aeb 224if egrep '^[ \t]*UsePrivilegeSeparation[ \t]+no' $sysconfdir/sshd_config >/dev/null
225then
226 echo UsePrivilegeSeparation not enabled, privsep directory not required.
227else
276b07a3 228 # create chroot directory if required
229 if [ -d $PRIVSEP_PATH ]
230 then
231 echo "PrivSep chroot directory $PRIVSEP_PATH already exists."
232 else
233 echo "Creating PrivSep chroot directory $PRIVSEP_PATH."
234 mkdir $PRIVSEP_PATH
235 chown 0 $PRIVSEP_PATH
236 chgrp 0 $PRIVSEP_PATH
237 chmod 755 $PRIVSEP_PATH
238 fi
239fi
240echo
d832c38e 241
242# Generate keys unless they already exist
276b07a3 243echo Creating host keys if required.
d832c38e 244if [ -f "$sysconfdir/ssh_host_key" ] ; then
540d72c3 245 echo "$sysconfdir/ssh_host_key already exists, skipping."
d832c38e 246else
540d72c3 247 $bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N ""
d832c38e 248fi
249if [ -f $sysconfdir/ssh_host_dsa_key ] ; then
540d72c3 250 echo "$sysconfdir/ssh_host_dsa_key already exists, skipping."
d832c38e 251else
540d72c3 252 $bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N ""
d832c38e 253fi
254if [ -f $sysconfdir/ssh_host_rsa_key ] ; then
540d72c3 255 echo "$sysconfdir/ssh_host_rsa_key already exists, skipping."
256else
257 $bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N ""
d832c38e 258fi
276b07a3 259echo
d832c38e 260
bfe49944 261# Set startup command depending on SRC support
262if [ "$AIX_SRC" = "yes" ]
263then
264 echo Creating SRC sshd subsystem.
265 rmssys -s sshd 2>&1 >/dev/null
266 mkssys -s sshd -p "$sbindir/sshd" -a '-D' -u 0 -S -n 15 -f 9 -R -G tcpip
267 startupcmd="start $sbindir/sshd \\\"\\\$src_running\\\""
268 oldstartcmd="$sbindir/sshd"
269else
270 startupcmd="$sbindir/sshd"
271 oldstartcmd="start $sbindir/sshd \\\"$src_running\\\""
272fi
273
274# If migrating to or from SRC, change previous startup command
275# otherwise add to rc.tcpip
276if egrep "^\$oldstartcmd" /etc/rc.tcpip >/dev/null
d832c38e 277then
bfe49944 278 if sed "s|^\$oldstartcmd|\$startupcmd|g" /etc/rc.tcpip >/etc/rc.tcpip.new
279 then
280 chmod 0755 /etc/rc.tcpip.new
281 mv /etc/rc.tcpip /etc/rc.tcpip.old && \
282 mv /etc/rc.tcpip.new /etc/rc.tcpip
283 else
284 echo "Updating /etc/rc.tcpip failed, please check."
285 fi
d832c38e 286else
bfe49944 287 # Add to system startup if required
288 if grep "^\$startupcmd" /etc/rc.tcpip >/dev/null
289 then
290 echo "sshd found in rc.tcpip, not adding."
291 else
292 echo "Adding sshd to rc.tcpip"
293 echo >>/etc/rc.tcpip
294 echo "# Start sshd" >>/etc/rc.tcpip
295 echo "\$startupcmd" >>/etc/rc.tcpip
296 fi
d832c38e 297fi
298EOF
299
300#
301# Create liblpp.a and move control files into it
302#
303echo Creating liblpp.a
304(
305 cd ..
bfe49944 306 for i in openssh.al openssh.copyright openssh.inventory openssh.post_i openssh.size LICENCE README*
d832c38e 307 do
276b07a3 308 ar -r liblpp.a $i
309 rm $i
d832c38e 310 done
311)
312
313#
314# Create lpp_name
315#
316# This will end up looking something like:
317# 4 R I OpenSSH {
318# OpenSSH 3.0.2.1 1 N U en_US OpenSSH 3.0.2p1 Portable for AIX
319# [
320# %
321# /usr/local/bin 8073
322# /usr/local/etc 189
323# /usr/local/libexec 185
324# /usr/local/man/man1 145
325# /usr/local/man/man8 83
326# /usr/local/sbin 2105
327# /usr/local/share 3
328# %
329# ]
276b07a3 330# }
331
d832c38e 332echo Creating lpp_name
333cat <<EOF >../lpp_name
3344 R I $PKGNAME {
335$PKGNAME $BFFVERSION 1 N U en_US OpenSSH $VERSION Portable for AIX
336[
337%
338EOF
339
276b07a3 340for i in $bindir $sysconfdir $libexecdir $mandir/${mansubdir}1 $mandir/${mansubdir}8 $sbindir $datadir /usr/lpp/openssh
d832c38e 341do
342 # get size in 512 byte blocks
276b07a3 343 if [ -d $FAKE_ROOT/$i ]
344 then
345 size=`du $FAKE_ROOT/$i | awk '{print $1}'`
346 echo "$i $size" >>../lpp_name
347 fi
d832c38e 348done
349
350echo '%' >>../lpp_name
351echo ']' >>../lpp_name
352echo '}' >>../lpp_name
353
354#
355# Move pieces into place
356#
357mkdir -p usr/lpp/openssh
358mv ../liblpp.a usr/lpp/openssh
359mv ../lpp_name .
360
361#
362# Now invoke backup to create .bff file
276b07a3 363# note: lpp_name needs to be the first file so we generate the
d832c38e 364# file list on the fly and feed it to backup using -i
365#
366echo Creating $PKGNAME-$VERSION.bff with backup...
350391c5 367rm -f $PKGNAME-$VERSION.bff
d832c38e 368(
369 echo "./lpp_name"
540d72c3 370 find . ! -name lpp_name -a ! -name . -print
d832c38e 371) | backup -i -q -f ../$PKGNAME-$VERSION.bff $filelist
372
276b07a3 373#
d03f4262 374# Move package into final location and clean up
276b07a3 375#
d03f4262 376mv ../$PKGNAME-$VERSION.bff $startdir
377cd $startdir
276b07a3 378rm -rf $objdir/$PKGDIR
d832c38e 379
d832c38e 380echo $0: done.
381
This page took 0.115667 seconds and 5 git commands to generate.