]> andersk Git - gssapi-openssh.git/blame - openssh/contrib/aix/buildbff.sh
Import of OpenSSH 4.4p1
[gssapi-openssh.git] / openssh / contrib / aix / buildbff.sh
CommitLineData
e9a17296 1#!/bin/sh
2#
3# buildbff.sh: Create AIX SMIT-installable OpenSSH packages
0fff78ff 4# $Id$
e9a17296 5#
6# Author: Darren Tucker (dtucker at zip dot com dot au)
7# This file is placed in the public domain and comes with absolutely
8# no warranty.
cdd66111 9#
e9a17296 10# Based originally on Ben Lindstrom's buildpkg.sh for Solaris
11#
12
680cee3b 13#
14# Tunable configuration settings
6a9b3198 15# create a "config.local" in your build directory or set
16# environment variables to override these.
680cee3b 17#
0fff78ff 18[ -z "$PERMIT_ROOT_LOGIN" ] && PERMIT_ROOT_LOGIN=no
19[ -z "$X11_FORWARDING" ] && X11_FORWARDING=no
20[ -z "$AIX_SRC" ] && AIX_SRC=no
680cee3b 21
e9a17296 22umask 022
680cee3b 23
41b2f314 24startdir=`pwd`
25
9108f8d9 26perl -v >/dev/null || (echo perl required; exit 1)
27
41b2f314 28# Path to inventory.sh: same place as buildbff.sh
29if echo $0 | egrep '^/'
30then
31 inventory=`dirname $0`/inventory.sh # absolute path
32else
33 inventory=`pwd`/`dirname $0`/inventory.sh # relative path
34fi
35
680cee3b 36#
0fff78ff 37# We still support running from contrib/aix, but this is deprecated
680cee3b 38#
39if pwd | egrep 'contrib/aix$'
40then
41 echo "Changing directory to `pwd`/../.."
42 echo "Please run buildbff.sh from your build directory in future."
43 cd ../..
44 contribaix=1
45fi
46
47if [ ! -f Makefile ]
48then
49 echo "Makefile not found (did you run configure?)"
cdd66111 50 exit 1
680cee3b 51fi
52
53#
54# Directories used during build:
55# current dir = $objdir directory you ran ./configure in.
56# $objdir/$PKGDIR/ directory package files are constructed in
57# $objdir/$PKGDIR/root/ package root ($FAKE_ROOT)
58#
59objdir=`pwd`
e9a17296 60PKGNAME=openssh
700318f3 61PKGDIR=package
e9a17296 62
680cee3b 63#
64# Collect local configuration settings to override defaults
65#
66if [ -s ./config.local ]
67then
68 echo Reading local settings from config.local
69 . ./config.local
70fi
71
72#
73# Fill in some details from Makefile, like prefix and sysconfdir
74# the eval also expands variables like sysconfdir=${prefix}/etc
75# provided they are eval'ed in the correct order
76#
77for confvar in prefix exec_prefix bindir sbindir libexecdir datadir mandir mansubdir sysconfdir piddir srcdir
78do
79 eval $confvar=`grep "^$confvar=" $objdir/Makefile | cut -d = -f 2`
80done
81
82#
83# Collect values of privsep user and privsep path
84# currently only found in config.h
85#
86for confvar in SSH_PRIVSEP_USER PRIVSEP_PATH
87do
88 eval $confvar=`awk '/#define[ \t]'$confvar'/{print $3}' $objdir/config.h`
89done
e9a17296 90
680cee3b 91# Set privsep defaults if not defined
92if [ -z "$SSH_PRIVSEP_USER" ]
e9a17296 93then
680cee3b 94 SSH_PRIVSEP_USER=sshd
95fi
96if [ -z "$PRIVSEP_PATH" ]
97then
98 PRIVSEP_PATH=/var/empty
e9a17296 99fi
100
cdd66111 101# Clean package build directory
680cee3b 102rm -rf $objdir/$PKGDIR
103FAKE_ROOT=$objdir/$PKGDIR/root
104mkdir -p $FAKE_ROOT
105
cdd66111 106# Start by faking root install
e9a17296 107echo "Faking root install..."
680cee3b 108cd $objdir
e9a17296 109make install-nokeys DESTDIR=$FAKE_ROOT
110
700318f3 111if [ $? -gt 0 ]
112then
113 echo "Fake root install failed, stopping."
114 exit 1
115fi
116
680cee3b 117#
118# Copy informational files to include in package
119#
120cp $srcdir/LICENCE $objdir/$PKGDIR/
121cp $srcdir/README* $objdir/$PKGDIR/
122
700318f3 123#
124# Extract common info requires for the 'info' part of the package.
125# AIX requires 4-part version numbers
126#
0fff78ff 127VERSION=`./ssh -V 2>&1 | cut -f 1 -d , | cut -f 2 -d _`
700318f3 128MAJOR=`echo $VERSION | cut -f 1 -d p | cut -f 1 -d .`
129MINOR=`echo $VERSION | cut -f 1 -d p | cut -f 2 -d .`
130PATCH=`echo $VERSION | cut -f 1 -d p | cut -f 3 -d .`
680cee3b 131PORTABLE=`echo $VERSION | awk 'BEGIN{FS="p"}{print $2}'`
132[ "$PATCH" = "" ] && PATCH=0
133[ "$PORTABLE" = "" ] && PORTABLE=0
700318f3 134BFFVERSION=`printf "%d.%d.%d.%d" $MAJOR $MINOR $PATCH $PORTABLE`
135
136echo "Building BFF for $PKGNAME $VERSION (package version $BFFVERSION)"
137
e9a17296 138#
680cee3b 139# Set ssh and sshd parameters as per config.local
e9a17296 140#
cdd66111 141if [ "${PERMIT_ROOT_LOGIN}" = no ]
680cee3b 142then
cdd66111 143 perl -p -i -e "s/#PermitRootLogin yes/PermitRootLogin no/" \
144 $FAKE_ROOT/${sysconfdir}/sshd_config
680cee3b 145fi
146if [ "${X11_FORWARDING}" = yes ]
147then
cdd66111 148 perl -p -i -e "s/#X11Forwarding no/X11Forwarding yes/" \
149 $FAKE_ROOT/${sysconfdir}/sshd_config
680cee3b 150fi
151
e9a17296 152
153# Rename config files; postinstall script will copy them if necessary
154for cfgfile in ssh_config sshd_config ssh_prng_cmds
155do
156 mv $FAKE_ROOT/$sysconfdir/$cfgfile $FAKE_ROOT/$sysconfdir/$cfgfile.default
157done
158
159#
160# Generate lpp control files.
680cee3b 161# working dir is $FAKE_ROOT but files are generated in dir above
e9a17296 162# and moved into place just before creation of .bff
163#
164cd $FAKE_ROOT
165echo Generating LPP control files
166find . ! -name . -print >../openssh.al
680cee3b 167$inventory >../openssh.inventory
168
169cat <<EOD >../openssh.copyright
170This software is distributed under a BSD-style license.
171For the full text of the license, see /usr/lpp/openssh/LICENCE
172EOD
e9a17296 173
6a9b3198 174#
175# openssh.size file allows filesystem expansion as required
176# generate list of directories containing files
177# then calculate disk usage for each directory and store in openssh.size
178#
179files=`find . -type f -print`
180dirs=`for file in $files; do dirname $file; done | sort -u`
181for dir in $dirs
182do
183 du $dir
184done > ../openssh.size
185
e9a17296 186#
187# Create postinstall script
188#
189cat <<EOF >>../openssh.post_i
190#!/bin/sh
191
680cee3b 192echo Creating configs from defaults if necessary.
e9a17296 193for cfgfile in ssh_config sshd_config ssh_prng_cmds
194do
cdd66111 195 if [ ! -f $sysconfdir/\$cfgfile ]
196 then
197 echo "Creating \$cfgfile from default"
198 cp $sysconfdir/\$cfgfile.default $sysconfdir/\$cfgfile
199 else
200 echo "\$cfgfile already exists."
201 fi
e9a17296 202done
680cee3b 203echo
204
9108f8d9 205# Create PrivilegeSeparation user and group if not present
206echo Checking for PrivilegeSeparation user and group.
207if cut -f1 -d: /etc/group | egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null
680cee3b 208then
9108f8d9 209 echo "PrivSep group $SSH_PRIVSEP_USER already exists."
680cee3b 210else
9108f8d9 211 echo "Creating PrivSep group $SSH_PRIVSEP_USER."
212 mkgroup -A $SSH_PRIVSEP_USER
213fi
680cee3b 214
9108f8d9 215# Create user if required
216if lsuser "$SSH_PRIVSEP_USER" >/dev/null
217then
218 echo "PrivSep user $SSH_PRIVSEP_USER already exists."
219else
220 echo "Creating PrivSep user $SSH_PRIVSEP_USER."
221 mkuser gecos='SSHD PrivSep User' login=false rlogin=false account_locked=true pgrp=$SSH_PRIVSEP_USER $SSH_PRIVSEP_USER
222fi
680cee3b 223
9108f8d9 224if egrep '^[ \t]*UsePrivilegeSeparation[ \t]+no' $sysconfdir/sshd_config >/dev/null
225then
226 echo UsePrivilegeSeparation not enabled, privsep directory not required.
227else
680cee3b 228 # create chroot directory if required
229 if [ -d $PRIVSEP_PATH ]
230 then
231 echo "PrivSep chroot directory $PRIVSEP_PATH already exists."
232 else
233 echo "Creating PrivSep chroot directory $PRIVSEP_PATH."
234 mkdir $PRIVSEP_PATH
235 chown 0 $PRIVSEP_PATH
236 chgrp 0 $PRIVSEP_PATH
237 chmod 755 $PRIVSEP_PATH
238 fi
239fi
240echo
e9a17296 241
242# Generate keys unless they already exist
680cee3b 243echo Creating host keys if required.
e9a17296 244if [ -f "$sysconfdir/ssh_host_key" ] ; then
cdd66111 245 echo "$sysconfdir/ssh_host_key already exists, skipping."
e9a17296 246else
cdd66111 247 $bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N ""
e9a17296 248fi
249if [ -f $sysconfdir/ssh_host_dsa_key ] ; then
cdd66111 250 echo "$sysconfdir/ssh_host_dsa_key already exists, skipping."
e9a17296 251else
cdd66111 252 $bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N ""
e9a17296 253fi
254if [ -f $sysconfdir/ssh_host_rsa_key ] ; then
cdd66111 255 echo "$sysconfdir/ssh_host_rsa_key already exists, skipping."
256else
257 $bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N ""
e9a17296 258fi
680cee3b 259echo
e9a17296 260
6a9b3198 261# Set startup command depending on SRC support
262if [ "$AIX_SRC" = "yes" ]
263then
264 echo Creating SRC sshd subsystem.
265 rmssys -s sshd 2>&1 >/dev/null
266 mkssys -s sshd -p "$sbindir/sshd" -a '-D' -u 0 -S -n 15 -f 9 -R -G tcpip
267 startupcmd="start $sbindir/sshd \\\"\\\$src_running\\\""
268 oldstartcmd="$sbindir/sshd"
269else
270 startupcmd="$sbindir/sshd"
271 oldstartcmd="start $sbindir/sshd \\\"$src_running\\\""
272fi
273
274# If migrating to or from SRC, change previous startup command
275# otherwise add to rc.tcpip
276if egrep "^\$oldstartcmd" /etc/rc.tcpip >/dev/null
e9a17296 277then
6a9b3198 278 if sed "s|^\$oldstartcmd|\$startupcmd|g" /etc/rc.tcpip >/etc/rc.tcpip.new
279 then
280 chmod 0755 /etc/rc.tcpip.new
281 mv /etc/rc.tcpip /etc/rc.tcpip.old && \
282 mv /etc/rc.tcpip.new /etc/rc.tcpip
283 else
284 echo "Updating /etc/rc.tcpip failed, please check."
285 fi
e9a17296 286else
6a9b3198 287 # Add to system startup if required
288 if grep "^\$startupcmd" /etc/rc.tcpip >/dev/null
289 then
290 echo "sshd found in rc.tcpip, not adding."
291 else
292 echo "Adding sshd to rc.tcpip"
293 echo >>/etc/rc.tcpip
294 echo "# Start sshd" >>/etc/rc.tcpip
295 echo "\$startupcmd" >>/etc/rc.tcpip
296 fi
e9a17296 297fi
298EOF
299
300#
301# Create liblpp.a and move control files into it
302#
303echo Creating liblpp.a
304(
305 cd ..
6a9b3198 306 for i in openssh.al openssh.copyright openssh.inventory openssh.post_i openssh.size LICENCE README*
e9a17296 307 do
680cee3b 308 ar -r liblpp.a $i
309 rm $i
e9a17296 310 done
311)
312
313#
314# Create lpp_name
315#
316# This will end up looking something like:
317# 4 R I OpenSSH {
318# OpenSSH 3.0.2.1 1 N U en_US OpenSSH 3.0.2p1 Portable for AIX
319# [
320# %
321# /usr/local/bin 8073
322# /usr/local/etc 189
323# /usr/local/libexec 185
324# /usr/local/man/man1 145
325# /usr/local/man/man8 83
326# /usr/local/sbin 2105
327# /usr/local/share 3
328# %
329# ]
680cee3b 330# }
331
e9a17296 332echo Creating lpp_name
333cat <<EOF >../lpp_name
3344 R I $PKGNAME {
335$PKGNAME $BFFVERSION 1 N U en_US OpenSSH $VERSION Portable for AIX
336[
337%
338EOF
339
680cee3b 340for i in $bindir $sysconfdir $libexecdir $mandir/${mansubdir}1 $mandir/${mansubdir}8 $sbindir $datadir /usr/lpp/openssh
e9a17296 341do
342 # get size in 512 byte blocks
680cee3b 343 if [ -d $FAKE_ROOT/$i ]
344 then
345 size=`du $FAKE_ROOT/$i | awk '{print $1}'`
346 echo "$i $size" >>../lpp_name
347 fi
e9a17296 348done
349
350echo '%' >>../lpp_name
351echo ']' >>../lpp_name
352echo '}' >>../lpp_name
353
354#
355# Move pieces into place
356#
357mkdir -p usr/lpp/openssh
358mv ../liblpp.a usr/lpp/openssh
359mv ../lpp_name .
360
361#
362# Now invoke backup to create .bff file
680cee3b 363# note: lpp_name needs to be the first file so we generate the
e9a17296 364# file list on the fly and feed it to backup using -i
365#
366echo Creating $PKGNAME-$VERSION.bff with backup...
700318f3 367rm -f $PKGNAME-$VERSION.bff
e9a17296 368(
369 echo "./lpp_name"
cdd66111 370 find . ! -name lpp_name -a ! -name . -print
e9a17296 371) | backup -i -q -f ../$PKGNAME-$VERSION.bff $filelist
372
680cee3b 373#
41b2f314 374# Move package into final location and clean up
680cee3b 375#
41b2f314 376mv ../$PKGNAME-$VERSION.bff $startdir
377cd $startdir
680cee3b 378rm -rf $objdir/$PKGDIR
e9a17296 379
e9a17296 380echo $0: done.
381
This page took 0.222137 seconds and 5 git commands to generate.