[gssapi-openssh.git] / openssh / contrib / aix / buildbff.sh

#!/bin/sh
#
# buildbff.sh: Create AIX SMIT-installable OpenSSH packages
# $Id$
#
# Author: Darren Tucker (dtucker at zip dot com dot au)
# This file is placed in the public domain and comes with absolutely
# no warranty.
#
# Based originally on Ben Lindstrom's buildpkg.sh for Solaris
#

#
# Tunable configuration settings
# 	create a "config.local" in your build directory or set
#	environment variables to override these.
#
[ -z "$PERMIT_ROOT_LOGIN" ] && PERMIT_ROOT_LOGIN=no
[ -z "$X11_FORWARDING" ] && X11_FORWARDING=no
[ -z "$AIX_SRC" ] && AIX_SRC=no

umask 022

startdir=`pwd`

perl -v >/dev/null || (echo perl required; exit 1)

# Path to inventory.sh: same place as buildbff.sh
if  echo $0 | egrep '^/'
then
	inventory=`dirname $0`/inventory.sh		# absolute path
else
	inventory=`pwd`/`dirname $0`/inventory.sh	# relative path
fi

#
# We still support running from contrib/aix, but this is deprecated
#
if pwd | egrep 'contrib/aix$'
then
	echo "Changing directory to `pwd`/../.."
	echo "Please run buildbff.sh from your build directory in future."
	cd ../..
	contribaix=1
fi

if [ ! -f Makefile ]
then
	echo "Makefile not found (did you run configure?)"
	exit 1
fi

#
# Directories used during build:
# current dir = $objdir		directory you ran ./configure in.
# $objdir/$PKGDIR/ 		directory package files are constructed in
# $objdir/$PKGDIR/root/		package root ($FAKE_ROOT)
#
objdir=`pwd`
PKGNAME=openssh
PKGDIR=package

#
# Collect local configuration settings to override defaults
#
if [ -s ./config.local ]
then
	echo Reading local settings from config.local
	. ./config.local
fi

#
# Fill in some details from Makefile, like prefix and sysconfdir
#	the eval also expands variables like sysconfdir=${prefix}/etc
#	provided they are eval'ed in the correct order
#
for confvar in prefix exec_prefix bindir sbindir libexecdir datadir mandir mansubdir sysconfdir piddir srcdir
do
	eval $confvar=`grep "^$confvar=" $objdir/Makefile | cut -d = -f 2`
done

#
# Collect values of privsep user and privsep path
#	currently only found in config.h
#
for confvar in SSH_PRIVSEP_USER PRIVSEP_PATH
do
	eval $confvar=`awk '/#define[ \t]'$confvar'/{print $3}' $objdir/config.h`
done

# Set privsep defaults if not defined
if [ -z "$SSH_PRIVSEP_USER" ]
then
	SSH_PRIVSEP_USER=sshd
fi
if [ -z "$PRIVSEP_PATH" ]
then
	PRIVSEP_PATH=/var/empty
fi

# Clean package build directory
rm -rf $objdir/$PKGDIR
FAKE_ROOT=$objdir/$PKGDIR/root
mkdir -p $FAKE_ROOT

# Start by faking root install
echo "Faking root install..."
cd $objdir
make install-nokeys DESTDIR=$FAKE_ROOT

if [ $? -gt 0 ]
then
	echo "Fake root install failed, stopping."
	exit 1
fi

#
# Copy informational files to include in package
#
cp $srcdir/LICENCE $objdir/$PKGDIR/
cp $srcdir/README* $objdir/$PKGDIR/

#
# Extract common info requires for the 'info' part of the package.
#	AIX requires 4-part version numbers
#
VERSION=`./ssh -V 2>&1 | cut -f 1 -d , | cut -f 2 -d _`
MAJOR=`echo $VERSION | cut -f 1 -d p | cut -f 1 -d .`
MINOR=`echo $VERSION | cut -f 1 -d p | cut -f 2 -d .`
PATCH=`echo $VERSION | cut -f 1 -d p | cut -f 3 -d .`
PORTABLE=`echo $VERSION | awk 'BEGIN{FS="p"}{print $2}'`
[ "$PATCH" = "" ] && PATCH=0
[ "$PORTABLE" = "" ] && PORTABLE=0
BFFVERSION=`printf "%d.%d.%d.%d" $MAJOR $MINOR $PATCH $PORTABLE`

echo "Building BFF for $PKGNAME $VERSION (package version $BFFVERSION)"

#
# Set ssh and sshd parameters as per config.local
#
if [ "${PERMIT_ROOT_LOGIN}" = no ]
then
	perl -p -i -e "s/#PermitRootLogin yes/PermitRootLogin no/" \
		$FAKE_ROOT/${sysconfdir}/sshd_config
fi
if [ "${X11_FORWARDING}" = yes ]
then
	perl -p -i -e "s/#X11Forwarding no/X11Forwarding yes/" \
		$FAKE_ROOT/${sysconfdir}/sshd_config
fi


# Rename config files; postinstall script will copy them if necessary
for cfgfile in ssh_config sshd_config
do
	mv $FAKE_ROOT/$sysconfdir/$cfgfile $FAKE_ROOT/$sysconfdir/$cfgfile.default
done

# AIX 5.3 and newer have /dev/random and don't create ssh_prng_cmds
if [ -f $FAKE_ROOT/$sysconfdir/ssh_prng_cmds ]
then
	mv FAKE_ROOT/$sysconfdir/ssh_prng_cmds \
		$FAKE_ROOT/$sysconfdir/ssh_prng_cmds.default
fi

#
# Generate lpp control files.
#	working dir is $FAKE_ROOT but files are generated in dir above
#	and moved into place just before creation of .bff
#
cd $FAKE_ROOT
echo Generating LPP control files
find . ! -name . -print >../openssh.al
$inventory >../openssh.inventory

cat <<EOD >../openssh.copyright
This software is distributed under a BSD-style license.
For the full text of the license, see /usr/lpp/openssh/LICENCE
EOD

#
# openssh.size file allows filesystem expansion as required
# generate list of directories containing files
# then calculate disk usage for each directory and store in openssh.size
#
files=`find . -type f -print`
dirs=`for file in $files; do dirname $file; done | sort -u`
for dir in $dirs
do
	du $dir
done > ../openssh.size

#
# Create postinstall script
#
cat <<EOF >>../openssh.post_i
#!/bin/sh

echo Creating configs from defaults if necessary.
for cfgfile in ssh_config sshd_config ssh_prng_cmds
do
	if [ ! -f $sysconfdir/\$cfgfile ]
	then
		echo "Creating \$cfgfile from default"
		cp $sysconfdir/\$cfgfile.default $sysconfdir/\$cfgfile
	else
		echo "\$cfgfile already exists."
	fi
done
echo

# Create PrivilegeSeparation user and group if not present
echo Checking for PrivilegeSeparation user and group.
if cut -f1 -d: /etc/group | egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null
then
	echo "PrivSep group $SSH_PRIVSEP_USER already exists."
else
	echo "Creating PrivSep group $SSH_PRIVSEP_USER."
	mkgroup -A $SSH_PRIVSEP_USER
fi

# Create user if required
if lsuser "$SSH_PRIVSEP_USER" >/dev/null
then
	echo "PrivSep user $SSH_PRIVSEP_USER already exists."
else
	echo "Creating PrivSep user $SSH_PRIVSEP_USER."
	mkuser gecos='SSHD PrivSep User' login=false rlogin=false account_locked=true pgrp=$SSH_PRIVSEP_USER $SSH_PRIVSEP_USER
fi

if egrep '^[ \t]*UsePrivilegeSeparation[ \t]+no' $sysconfdir/sshd_config >/dev/null
then
	echo UsePrivilegeSeparation not enabled, privsep directory not required.
else
	# create chroot directory if required
	if [ -d $PRIVSEP_PATH ]
	then
		echo "PrivSep chroot directory $PRIVSEP_PATH already exists."
	else
		echo "Creating PrivSep chroot directory $PRIVSEP_PATH."
		mkdir $PRIVSEP_PATH
		chown 0 $PRIVSEP_PATH
		chgrp 0 $PRIVSEP_PATH
		chmod 755 $PRIVSEP_PATH
	fi
fi
echo

# Generate keys unless they already exist
echo Creating host keys if required.
if [ -f "$sysconfdir/ssh_host_key" ] ; then
	echo "$sysconfdir/ssh_host_key already exists, skipping."
else
	$bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N ""
fi
if [ -f $sysconfdir/ssh_host_dsa_key ] ; then
	echo "$sysconfdir/ssh_host_dsa_key already exists, skipping."
else
	$bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N ""
fi
if [ -f $sysconfdir/ssh_host_rsa_key ] ; then
	echo "$sysconfdir/ssh_host_rsa_key already exists, skipping."
else
	$bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N ""
fi
echo

# Set startup command depending on SRC support
if [ "$AIX_SRC" = "yes" ]
then
	echo Creating SRC sshd subsystem.
	rmssys -s sshd 2>&1 >/dev/null
	mkssys -s sshd -p "$sbindir/sshd" -a '-D' -u 0 -S -n 15 -f 9 -R -G tcpip
	startupcmd="start $sbindir/sshd \\\"\\\$src_running\\\""
	oldstartcmd="$sbindir/sshd"
else
	startupcmd="$sbindir/sshd"
	oldstartcmd="start $sbindir/sshd \\\"$src_running\\\""
fi

# If migrating to or from SRC, change previous startup command
# otherwise add to rc.tcpip
if egrep "^\$oldstartcmd" /etc/rc.tcpip >/dev/null
then
	if sed "s|^\$oldstartcmd|\$startupcmd|g" /etc/rc.tcpip >/etc/rc.tcpip.new
	then
		chmod 0755 /etc/rc.tcpip.new
		mv /etc/rc.tcpip /etc/rc.tcpip.old && \
		mv /etc/rc.tcpip.new /etc/rc.tcpip
	else
		echo "Updating /etc/rc.tcpip failed, please check."
	fi
else
	# Add to system startup if required
	if grep "^\$startupcmd" /etc/rc.tcpip >/dev/null
	then
		echo "sshd found in rc.tcpip, not adding."
	else
		echo "Adding sshd to rc.tcpip"
		echo >>/etc/rc.tcpip
		echo "# Start sshd" >>/etc/rc.tcpip
		echo "\$startupcmd" >>/etc/rc.tcpip
	fi
fi
EOF

#
# Create liblpp.a and move control files into it
#
echo Creating liblpp.a
(
	cd ..
	for i in openssh.al openssh.copyright openssh.inventory openssh.post_i openssh.size LICENCE README*
	do
		ar -r liblpp.a $i
		rm $i
	done
)

#
# Create lpp_name
#
# This will end up looking something like:
# 4 R I OpenSSH {
# OpenSSH 3.0.2.1 1 N U en_US OpenSSH 3.0.2p1 Portable for AIX
# [
# %
# /usr/local/bin 8073
# /usr/local/etc 189
# /usr/local/libexec 185
# /usr/local/man/man1 145
# /usr/local/man/man8 83
# /usr/local/sbin 2105
# /usr/local/share 3
# %
# ]
# }

echo Creating lpp_name
cat <<EOF >../lpp_name
4 R I $PKGNAME {
$PKGNAME $BFFVERSION 1 N U en_US OpenSSH $VERSION Portable for AIX
[
%
EOF

for i in $bindir $sysconfdir $libexecdir $mandir/${mansubdir}1 $mandir/${mansubdir}8 $sbindir $datadir /usr/lpp/openssh
do
	# get size in 512 byte blocks
	if [ -d $FAKE_ROOT/$i ]
	then
		size=`du $FAKE_ROOT/$i | awk '{print $1}'`
		echo "$i $size" >>../lpp_name
	fi
done

echo '%' >>../lpp_name
echo ']' >>../lpp_name
echo '}' >>../lpp_name

#
# Move pieces into place
#
mkdir -p usr/lpp/openssh
mv ../liblpp.a usr/lpp/openssh
mv ../lpp_name .

#
# Now invoke backup to create .bff file
#	note: lpp_name needs to be the first file so we generate the
#	file list on the fly and feed it to backup using -i
#
echo Creating $PKGNAME-$VERSION.bff with backup...
rm -f $PKGNAME-$VERSION.bff
(
	echo "./lpp_name"
	find . ! -name lpp_name -a ! -name . -print
) | backup  -i -q -f ../$PKGNAME-$VERSION.bff $filelist

#
# Move package into final location and clean up
#
mv ../$PKGNAME-$VERSION.bff $startdir
cd $startdir
rm -rf $objdir/$PKGDIR

echo $0: done.
Commit	Line	Data
d832c38e	1	#!/bin/sh
	2	#
	3	# buildbff.sh: Create AIX SMIT-installable OpenSSH packages
7cac2b65	4	# $Id$
d832c38e	5	#
	6	# Author: Darren Tucker (dtucker at zip dot com dot au)
	7	# This file is placed in the public domain and comes with absolutely
	8	# no warranty.
540d72c3	9	#
d832c38e	10	# Based originally on Ben Lindstrom's buildpkg.sh for Solaris
	11	#
	12
276b07a3	13	#
276b07a3	14	# Tunable configuration settings
bfe49944	15	# create a "config.local" in your build directory or set
bfe49944	16	# environment variables to override these.
276b07a3	17	#
7cac2b65	18	[ -z "$PERMIT_ROOT_LOGIN" ] && PERMIT_ROOT_LOGIN=no
	19	[ -z "$X11_FORWARDING" ] && X11_FORWARDING=no
	20	[ -z "$AIX_SRC" ] && AIX_SRC=no
276b07a3	21
d832c38e	22	umask 022
276b07a3	23
d03f4262	24	startdir=`pwd`
d03f4262	25
30460aeb	26	perl -v >/dev/null \|\| (echo perl required; exit 1)
30460aeb	27
d03f4262	28	# Path to inventory.sh: same place as buildbff.sh
	29	if echo $0 \| egrep '^/'
	30	then
	31	inventory=`dirname $0`/inventory.sh # absolute path
	32	else
	33	inventory=`pwd`/`dirname $0`/inventory.sh # relative path
	34	fi
	35
276b07a3	36	#
7cac2b65	37	# We still support running from contrib/aix, but this is deprecated
276b07a3	38	#
	39	if pwd \| egrep 'contrib/aix$'
	40	then
	41	echo "Changing directory to `pwd`/../.."
	42	echo "Please run buildbff.sh from your build directory in future."
	43	cd ../..
	44	contribaix=1
	45	fi
	46
	47	if [ ! -f Makefile ]
	48	then
	49	echo "Makefile not found (did you run configure?)"
540d72c3	50	exit 1
276b07a3	51	fi
	52
	53	#
	54	# Directories used during build:
	55	# current dir = $objdir directory you ran ./configure in.
	56	# $objdir/$PKGDIR/ directory package files are constructed in
	57	# $objdir/$PKGDIR/root/ package root ($FAKE_ROOT)
	58	#
	59	objdir=`pwd`
d832c38e	60	PKGNAME=openssh
350391c5	61	PKGDIR=package
d832c38e	62
276b07a3	63	#
	64	# Collect local configuration settings to override defaults
	65	#
	66	if [ -s ./config.local ]
	67	then
	68	echo Reading local settings from config.local
	69	. ./config.local
	70	fi
	71
	72	#
	73	# Fill in some details from Makefile, like prefix and sysconfdir
	74	# the eval also expands variables like sysconfdir=${prefix}/etc
	75	# provided they are eval'ed in the correct order
	76	#
	77	for confvar in prefix exec_prefix bindir sbindir libexecdir datadir mandir mansubdir sysconfdir piddir srcdir
	78	do
	79	eval $confvar=`grep "^$confvar=" $objdir/Makefile \| cut -d = -f 2`
	80	done
	81
	82	#
	83	# Collect values of privsep user and privsep path
	84	# currently only found in config.h
	85	#
	86	for confvar in SSH_PRIVSEP_USER PRIVSEP_PATH
	87	do
	88	eval $confvar=`awk '/#define[ \t]'$confvar'/{print $3}' $objdir/config.h`
	89	done
d832c38e	90
276b07a3	91	# Set privsep defaults if not defined
276b07a3	92	if [ -z "$SSH_PRIVSEP_USER" ]
d832c38e	93	then
276b07a3	94	SSH_PRIVSEP_USER=sshd
	95	fi
	96	if [ -z "$PRIVSEP_PATH" ]
	97	then
	98	PRIVSEP_PATH=/var/empty
d832c38e	99	fi
d832c38e	100
540d72c3	101	# Clean package build directory
276b07a3	102	rm -rf $objdir/$PKGDIR
	103	FAKE_ROOT=$objdir/$PKGDIR/root
	104	mkdir -p $FAKE_ROOT
	105
540d72c3	106	# Start by faking root install
d832c38e	107	echo "Faking root install..."
276b07a3	108	cd $objdir
d832c38e	109	make install-nokeys DESTDIR=$FAKE_ROOT
d832c38e	110
350391c5	111	if [ $? -gt 0 ]
	112	then
	113	echo "Fake root install failed, stopping."
	114	exit 1
	115	fi
	116
276b07a3	117	#
	118	# Copy informational files to include in package
	119	#
	120	cp $srcdir/LICENCE $objdir/$PKGDIR/
	121	cp $srcdir/README* $objdir/$PKGDIR/
	122
350391c5	123	#
	124	# Extract common info requires for the 'info' part of the package.
	125	# AIX requires 4-part version numbers
	126	#
7cac2b65	127	VERSION=`./ssh -V 2>&1 \| cut -f 1 -d , \| cut -f 2 -d _`
350391c5	128	MAJOR=`echo $VERSION \| cut -f 1 -d p \| cut -f 1 -d .`
	129	MINOR=`echo $VERSION \| cut -f 1 -d p \| cut -f 2 -d .`
	130	PATCH=`echo $VERSION \| cut -f 1 -d p \| cut -f 3 -d .`
276b07a3	131	PORTABLE=`echo $VERSION \| awk 'BEGIN{FS="p"}{print $2}'`
	132	[ "$PATCH" = "" ] && PATCH=0
	133	[ "$PORTABLE" = "" ] && PORTABLE=0
350391c5	134	BFFVERSION=`printf "%d.%d.%d.%d" $MAJOR $MINOR $PATCH $PORTABLE`
	135
	136	echo "Building BFF for $PKGNAME $VERSION (package version $BFFVERSION)"
	137
d832c38e	138	#
276b07a3	139	# Set ssh and sshd parameters as per config.local
d832c38e	140	#
540d72c3	141	if [ "${PERMIT_ROOT_LOGIN}" = no ]
276b07a3	142	then
540d72c3	143	perl -p -i -e "s/#PermitRootLogin yes/PermitRootLogin no/" \
540d72c3	144	$FAKE_ROOT/${sysconfdir}/sshd_config
276b07a3	145	fi
	146	if [ "${X11_FORWARDING}" = yes ]
	147	then
540d72c3	148	perl -p -i -e "s/#X11Forwarding no/X11Forwarding yes/" \
540d72c3	149	$FAKE_ROOT/${sysconfdir}/sshd_config
276b07a3	150	fi
276b07a3	151
d832c38e	152
d832c38e	153	# Rename config files; postinstall script will copy them if necessary
b5afdff5	154	for cfgfile in ssh_config sshd_config
d832c38e	155	do
	156	mv $FAKE_ROOT/$sysconfdir/$cfgfile $FAKE_ROOT/$sysconfdir/$cfgfile.default
	157	done
	158
b5afdff5	159	# AIX 5.3 and newer have /dev/random and don't create ssh_prng_cmds
	160	if [ -f $FAKE_ROOT/$sysconfdir/ssh_prng_cmds ]
	161	then
	162	mv FAKE_ROOT/$sysconfdir/ssh_prng_cmds \
	163	$FAKE_ROOT/$sysconfdir/ssh_prng_cmds.default
	164	fi
	165
d832c38e	166	#
d832c38e	167	# Generate lpp control files.
276b07a3	168	# working dir is $FAKE_ROOT but files are generated in dir above
d832c38e	169	# and moved into place just before creation of .bff
	170	#
	171	cd $FAKE_ROOT
	172	echo Generating LPP control files
	173	find . ! -name . -print >../openssh.al
276b07a3	174	$inventory >../openssh.inventory
	175
	176	cat <<EOD >../openssh.copyright
	177	This software is distributed under a BSD-style license.
	178	For the full text of the license, see /usr/lpp/openssh/LICENCE
	179	EOD
d832c38e	180
bfe49944	181	#
	182	# openssh.size file allows filesystem expansion as required
	183	# generate list of directories containing files
	184	# then calculate disk usage for each directory and store in openssh.size
	185	#
	186	files=`find . -type f -print`
	187	dirs=`for file in $files; do dirname $file; done \| sort -u`
	188	for dir in $dirs
	189	do
	190	du $dir
	191	done > ../openssh.size
	192
d832c38e	193	#
	194	# Create postinstall script
	195	#
	196	cat <<EOF >>../openssh.post_i
	197	#!/bin/sh
	198
276b07a3	199	echo Creating configs from defaults if necessary.
d832c38e	200	for cfgfile in ssh_config sshd_config ssh_prng_cmds
d832c38e	201	do
540d72c3	202	if [ ! -f $sysconfdir/\$cfgfile ]
	203	then
	204	echo "Creating \$cfgfile from default"
	205	cp $sysconfdir/\$cfgfile.default $sysconfdir/\$cfgfile
	206	else
	207	echo "\$cfgfile already exists."
	208	fi
d832c38e	209	done
276b07a3	210	echo
276b07a3	211
30460aeb	212	# Create PrivilegeSeparation user and group if not present
	213	echo Checking for PrivilegeSeparation user and group.
	214	if cut -f1 -d: /etc/group \| egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null
276b07a3	215	then
30460aeb	216	echo "PrivSep group $SSH_PRIVSEP_USER already exists."
276b07a3	217	else
30460aeb	218	echo "Creating PrivSep group $SSH_PRIVSEP_USER."
	219	mkgroup -A $SSH_PRIVSEP_USER
	220	fi
276b07a3	221
30460aeb	222	# Create user if required
	223	if lsuser "$SSH_PRIVSEP_USER" >/dev/null
	224	then
	225	echo "PrivSep user $SSH_PRIVSEP_USER already exists."
	226	else
	227	echo "Creating PrivSep user $SSH_PRIVSEP_USER."
	228	mkuser gecos='SSHD PrivSep User' login=false rlogin=false account_locked=true pgrp=$SSH_PRIVSEP_USER $SSH_PRIVSEP_USER
	229	fi
276b07a3	230
30460aeb	231	if egrep '^[ \t]*UsePrivilegeSeparation[ \t]+no' $sysconfdir/sshd_config >/dev/null
	232	then
	233	echo UsePrivilegeSeparation not enabled, privsep directory not required.
	234	else
276b07a3	235	# create chroot directory if required
	236	if [ -d $PRIVSEP_PATH ]
	237	then
	238	echo "PrivSep chroot directory $PRIVSEP_PATH already exists."
	239	else
	240	echo "Creating PrivSep chroot directory $PRIVSEP_PATH."
	241	mkdir $PRIVSEP_PATH
	242	chown 0 $PRIVSEP_PATH
	243	chgrp 0 $PRIVSEP_PATH
	244	chmod 755 $PRIVSEP_PATH
	245	fi
	246	fi
	247	echo
d832c38e	248
d832c38e	249	# Generate keys unless they already exist
276b07a3	250	echo Creating host keys if required.
d832c38e	251	if [ -f "$sysconfdir/ssh_host_key" ] ; then
540d72c3	252	echo "$sysconfdir/ssh_host_key already exists, skipping."
d832c38e	253	else
540d72c3	254	$bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N ""
d832c38e	255	fi
d832c38e	256	if [ -f $sysconfdir/ssh_host_dsa_key ] ; then
540d72c3	257	echo "$sysconfdir/ssh_host_dsa_key already exists, skipping."
d832c38e	258	else
540d72c3	259	$bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N ""
d832c38e	260	fi
d832c38e	261	if [ -f $sysconfdir/ssh_host_rsa_key ] ; then
540d72c3	262	echo "$sysconfdir/ssh_host_rsa_key already exists, skipping."
	263	else
	264	$bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N ""
d832c38e	265	fi
276b07a3	266	echo
d832c38e	267
bfe49944	268	# Set startup command depending on SRC support
	269	if [ "$AIX_SRC" = "yes" ]
	270	then
	271	echo Creating SRC sshd subsystem.
	272	rmssys -s sshd 2>&1 >/dev/null
	273	mkssys -s sshd -p "$sbindir/sshd" -a '-D' -u 0 -S -n 15 -f 9 -R -G tcpip
	274	startupcmd="start $sbindir/sshd \\\"\\\$src_running\\\""
	275	oldstartcmd="$sbindir/sshd"
	276	else
	277	startupcmd="$sbindir/sshd"
	278	oldstartcmd="start $sbindir/sshd \\\"$src_running\\\""
	279	fi
	280
	281	# If migrating to or from SRC, change previous startup command
	282	# otherwise add to rc.tcpip
	283	if egrep "^\$oldstartcmd" /etc/rc.tcpip >/dev/null
d832c38e	284	then
bfe49944	285	if sed "s\|^\$oldstartcmd\|\$startupcmd\|g" /etc/rc.tcpip >/etc/rc.tcpip.new
	286	then
	287	chmod 0755 /etc/rc.tcpip.new
	288	mv /etc/rc.tcpip /etc/rc.tcpip.old && \
	289	mv /etc/rc.tcpip.new /etc/rc.tcpip
	290	else
	291	echo "Updating /etc/rc.tcpip failed, please check."
	292	fi
d832c38e	293	else
bfe49944	294	# Add to system startup if required
	295	if grep "^\$startupcmd" /etc/rc.tcpip >/dev/null
	296	then
	297	echo "sshd found in rc.tcpip, not adding."
	298	else
	299	echo "Adding sshd to rc.tcpip"
	300	echo >>/etc/rc.tcpip
	301	echo "# Start sshd" >>/etc/rc.tcpip
	302	echo "\$startupcmd" >>/etc/rc.tcpip
	303	fi
d832c38e	304	fi
	305	EOF
	306
	307	#
	308	# Create liblpp.a and move control files into it
	309	#
	310	echo Creating liblpp.a
	311	(
	312	cd ..
bfe49944	313	for i in openssh.al openssh.copyright openssh.inventory openssh.post_i openssh.size LICENCE README*
d832c38e	314	do
276b07a3	315	ar -r liblpp.a $i
276b07a3	316	rm $i
d832c38e	317	done
	318	)
	319
	320	#
	321	# Create lpp_name
	322	#
	323	# This will end up looking something like:
	324	# 4 R I OpenSSH {
	325	# OpenSSH 3.0.2.1 1 N U en_US OpenSSH 3.0.2p1 Portable for AIX
	326	# [
	327	# %
	328	# /usr/local/bin 8073
	329	# /usr/local/etc 189
	330	# /usr/local/libexec 185
	331	# /usr/local/man/man1 145
	332	# /usr/local/man/man8 83
	333	# /usr/local/sbin 2105
	334	# /usr/local/share 3
	335	# %
	336	# ]
276b07a3	337	# }
276b07a3	338
d832c38e	339	echo Creating lpp_name
	340	cat <<EOF >../lpp_name
	341	4 R I $PKGNAME {
	342	$PKGNAME $BFFVERSION 1 N U en_US OpenSSH $VERSION Portable for AIX
	343	[
	344	%
	345	EOF
	346
276b07a3	347	for i in $bindir $sysconfdir $libexecdir $mandir/${mansubdir}1 $mandir/${mansubdir}8 $sbindir $datadir /usr/lpp/openssh
d832c38e	348	do
d832c38e	349	# get size in 512 byte blocks
276b07a3	350	if [ -d $FAKE_ROOT/$i ]
	351	then
	352	size=`du $FAKE_ROOT/$i \| awk '{print $1}'`
	353	echo "$i $size" >>../lpp_name
	354	fi
d832c38e	355	done
	356
	357	echo '%' >>../lpp_name
	358	echo ']' >>../lpp_name
	359	echo '}' >>../lpp_name
	360
	361	#
	362	# Move pieces into place
	363	#
	364	mkdir -p usr/lpp/openssh
	365	mv ../liblpp.a usr/lpp/openssh
	366	mv ../lpp_name .
	367
	368	#
	369	# Now invoke backup to create .bff file
276b07a3	370	# note: lpp_name needs to be the first file so we generate the
d832c38e	371	# file list on the fly and feed it to backup using -i
	372	#
	373	echo Creating $PKGNAME-$VERSION.bff with backup...
350391c5	374	rm -f $PKGNAME-$VERSION.bff
d832c38e	375	(
d832c38e	376	echo "./lpp_name"
540d72c3	377	find . ! -name lpp_name -a ! -name . -print
d832c38e	378	) \| backup -i -q -f ../$PKGNAME-$VERSION.bff $filelist
d832c38e	379
276b07a3	380	#
d03f4262	381	# Move package into final location and clean up
276b07a3	382	#
d03f4262	383	mv ../$PKGNAME-$VERSION.bff $startdir
d03f4262	384	cd $startdir
276b07a3	385	rm -rf $objdir/$PKGDIR
d832c38e	386
d832c38e	387	echo $0: done.
d832c38e	388