]>
Commit | Line | Data |
---|---|---|
d832c38e | 1 | #!/bin/sh |
2 | # | |
3 | # buildbff.sh: Create AIX SMIT-installable OpenSSH packages | |
4 | # | |
5 | # Author: Darren Tucker (dtucker at zip dot com dot au) | |
6 | # This file is placed in the public domain and comes with absolutely | |
7 | # no warranty. | |
8 | # | |
9 | # Based originally on Ben Lindstrom's buildpkg.sh for Solaris | |
10 | # | |
11 | ||
276b07a3 | 12 | # |
13 | # Tunable configuration settings | |
14 | # create a "config.local" in your build directory to override these. | |
15 | # | |
16 | PERMIT_ROOT_LOGIN=no | |
17 | X11_FORWARDING=no | |
18 | ||
d832c38e | 19 | umask 022 |
276b07a3 | 20 | |
21 | # | |
22 | # We still support running from contrib/aix, but this is depreciated | |
23 | # | |
24 | if pwd | egrep 'contrib/aix$' | |
25 | then | |
26 | echo "Changing directory to `pwd`/../.." | |
27 | echo "Please run buildbff.sh from your build directory in future." | |
28 | cd ../.. | |
29 | contribaix=1 | |
30 | fi | |
31 | ||
32 | if [ ! -f Makefile ] | |
33 | then | |
34 | echo "Makefile not found (did you run configure?)" | |
35 | exit 1 | |
36 | fi | |
37 | ||
38 | # | |
39 | # Directories used during build: | |
40 | # current dir = $objdir directory you ran ./configure in. | |
41 | # $objdir/$PKGDIR/ directory package files are constructed in | |
42 | # $objdir/$PKGDIR/root/ package root ($FAKE_ROOT) | |
43 | # | |
44 | objdir=`pwd` | |
d832c38e | 45 | PKGNAME=openssh |
350391c5 | 46 | PKGDIR=package |
d832c38e | 47 | |
276b07a3 | 48 | # Path to inventory.sh: same place as buildbff.sh |
49 | if echo $0 | egrep '^/' | |
50 | then | |
51 | inventory=`dirname $0`/inventory.sh # absolute path | |
52 | else | |
53 | inventory=`pwd`/`dirname $0`/inventory.sh # relative path | |
54 | fi | |
d832c38e | 55 | |
276b07a3 | 56 | # |
57 | # Collect local configuration settings to override defaults | |
58 | # | |
59 | if [ -s ./config.local ] | |
60 | then | |
61 | echo Reading local settings from config.local | |
62 | . ./config.local | |
63 | fi | |
64 | ||
65 | # | |
66 | # Fill in some details from Makefile, like prefix and sysconfdir | |
67 | # the eval also expands variables like sysconfdir=${prefix}/etc | |
68 | # provided they are eval'ed in the correct order | |
69 | # | |
70 | for confvar in prefix exec_prefix bindir sbindir libexecdir datadir mandir mansubdir sysconfdir piddir srcdir | |
71 | do | |
72 | eval $confvar=`grep "^$confvar=" $objdir/Makefile | cut -d = -f 2` | |
73 | done | |
74 | ||
75 | # | |
76 | # Collect values of privsep user and privsep path | |
77 | # currently only found in config.h | |
78 | # | |
79 | for confvar in SSH_PRIVSEP_USER PRIVSEP_PATH | |
80 | do | |
81 | eval $confvar=`awk '/#define[ \t]'$confvar'/{print $3}' $objdir/config.h` | |
82 | done | |
d832c38e | 83 | |
276b07a3 | 84 | # Set privsep defaults if not defined |
85 | if [ -z "$SSH_PRIVSEP_USER" ] | |
d832c38e | 86 | then |
276b07a3 | 87 | SSH_PRIVSEP_USER=sshd |
88 | fi | |
89 | if [ -z "$PRIVSEP_PATH" ] | |
90 | then | |
91 | PRIVSEP_PATH=/var/empty | |
d832c38e | 92 | fi |
93 | ||
276b07a3 | 94 | # Clean package build directory |
95 | rm -rf $objdir/$PKGDIR | |
96 | FAKE_ROOT=$objdir/$PKGDIR/root | |
97 | mkdir -p $FAKE_ROOT | |
98 | ||
99 | # Start by faking root install | |
d832c38e | 100 | echo "Faking root install..." |
276b07a3 | 101 | cd $objdir |
d832c38e | 102 | make install-nokeys DESTDIR=$FAKE_ROOT |
103 | ||
350391c5 | 104 | if [ $? -gt 0 ] |
105 | then | |
106 | echo "Fake root install failed, stopping." | |
107 | exit 1 | |
108 | fi | |
109 | ||
276b07a3 | 110 | # |
111 | # Copy informational files to include in package | |
112 | # | |
113 | cp $srcdir/LICENCE $objdir/$PKGDIR/ | |
114 | cp $srcdir/README* $objdir/$PKGDIR/ | |
115 | ||
350391c5 | 116 | # |
117 | # Extract common info requires for the 'info' part of the package. | |
118 | # AIX requires 4-part version numbers | |
119 | # | |
120 | VERSION=`./ssh -V 2>&1 | sed -e 's/,.*//' | cut -f 2 -d _` | |
121 | MAJOR=`echo $VERSION | cut -f 1 -d p | cut -f 1 -d .` | |
122 | MINOR=`echo $VERSION | cut -f 1 -d p | cut -f 2 -d .` | |
123 | PATCH=`echo $VERSION | cut -f 1 -d p | cut -f 3 -d .` | |
276b07a3 | 124 | PORTABLE=`echo $VERSION | awk 'BEGIN{FS="p"}{print $2}'` |
125 | [ "$PATCH" = "" ] && PATCH=0 | |
126 | [ "$PORTABLE" = "" ] && PORTABLE=0 | |
350391c5 | 127 | BFFVERSION=`printf "%d.%d.%d.%d" $MAJOR $MINOR $PATCH $PORTABLE` |
128 | ||
129 | echo "Building BFF for $PKGNAME $VERSION (package version $BFFVERSION)" | |
130 | ||
d832c38e | 131 | # |
276b07a3 | 132 | # Set ssh and sshd parameters as per config.local |
d832c38e | 133 | # |
276b07a3 | 134 | if [ "${PERMIT_ROOT_LOGIN}" = no ] |
135 | then | |
136 | perl -p -i -e "s/#PermitRootLogin yes/PermitRootLogin no/" \ | |
137 | $FAKE_ROOT/${sysconfdir}/sshd_config | |
138 | fi | |
139 | if [ "${X11_FORWARDING}" = yes ] | |
140 | then | |
141 | perl -p -i -e "s/#X11Forwarding no/X11Forwarding yes/" \ | |
142 | $FAKE_ROOT/${sysconfdir}/sshd_config | |
143 | fi | |
144 | ||
d832c38e | 145 | |
146 | # Rename config files; postinstall script will copy them if necessary | |
147 | for cfgfile in ssh_config sshd_config ssh_prng_cmds | |
148 | do | |
149 | mv $FAKE_ROOT/$sysconfdir/$cfgfile $FAKE_ROOT/$sysconfdir/$cfgfile.default | |
150 | done | |
151 | ||
152 | # | |
153 | # Generate lpp control files. | |
276b07a3 | 154 | # working dir is $FAKE_ROOT but files are generated in dir above |
d832c38e | 155 | # and moved into place just before creation of .bff |
156 | # | |
157 | cd $FAKE_ROOT | |
158 | echo Generating LPP control files | |
159 | find . ! -name . -print >../openssh.al | |
276b07a3 | 160 | $inventory >../openssh.inventory |
161 | ||
162 | cat <<EOD >../openssh.copyright | |
163 | This software is distributed under a BSD-style license. | |
164 | For the full text of the license, see /usr/lpp/openssh/LICENCE | |
165 | EOD | |
d832c38e | 166 | |
167 | # | |
168 | # Create postinstall script | |
169 | # | |
170 | cat <<EOF >>../openssh.post_i | |
171 | #!/bin/sh | |
172 | ||
276b07a3 | 173 | echo Creating configs from defaults if necessary. |
d832c38e | 174 | for cfgfile in ssh_config sshd_config ssh_prng_cmds |
175 | do | |
176 | if [ ! -f $sysconfdir/\$cfgfile ] | |
177 | then | |
178 | echo "Creating \$cfgfile from default" | |
179 | cp $sysconfdir/\$cfgfile.default $sysconfdir/\$cfgfile | |
180 | else | |
181 | echo "\$cfgfile already exists." | |
182 | fi | |
183 | done | |
276b07a3 | 184 | echo |
185 | ||
186 | # Create PrivSep user if PrivSep not disabled in config | |
187 | echo Creating PrivSep prereqs if required. | |
188 | if egrep '^[ \t]*UsePrivilegeSeparation[ \t]+no' $sysconfdir/sshd_config >/dev/null | |
189 | then | |
190 | echo "UsePrivilegeSeparation disabled in config, not creating PrivSep user," | |
191 | echo "group or chroot directory." | |
192 | else | |
193 | echo "UsePrivilegeSeparation enabled in config (or defaulting to on)." | |
194 | ||
195 | # create group if required | |
196 | if cut -f1 -d: /etc/group | egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null | |
197 | then | |
198 | echo "PrivSep group $SSH_PRIVSEP_USER already exists." | |
199 | else | |
200 | echo "Creating PrivSep group $SSH_PRIVSEP_USER." | |
201 | mkgroup -A $SSH_PRIVSEP_USER | |
202 | fi | |
203 | ||
204 | # Create user if required | |
205 | if cut -f1 -d: /etc/passwd | egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null | |
206 | then | |
207 | echo "PrivSep user $SSH_PRIVSEP_USER already exists." | |
208 | else | |
209 | echo "Creating PrivSep user $SSH_PRIVSEP_USER." | |
210 | mkuser gecos='SSHD PrivSep User' login=false rlogin=false account_locked=true pgrp=$SSH_PRIVSEP_USER $SSH_PRIVSEP_USER | |
211 | fi | |
212 | ||
213 | # create chroot directory if required | |
214 | if [ -d $PRIVSEP_PATH ] | |
215 | then | |
216 | echo "PrivSep chroot directory $PRIVSEP_PATH already exists." | |
217 | else | |
218 | echo "Creating PrivSep chroot directory $PRIVSEP_PATH." | |
219 | mkdir $PRIVSEP_PATH | |
220 | chown 0 $PRIVSEP_PATH | |
221 | chgrp 0 $PRIVSEP_PATH | |
222 | chmod 755 $PRIVSEP_PATH | |
223 | fi | |
224 | fi | |
225 | echo | |
d832c38e | 226 | |
227 | # Generate keys unless they already exist | |
276b07a3 | 228 | echo Creating host keys if required. |
d832c38e | 229 | if [ -f "$sysconfdir/ssh_host_key" ] ; then |
230 | echo "$sysconfdir/ssh_host_key already exists, skipping." | |
231 | else | |
232 | $bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N "" | |
233 | fi | |
234 | if [ -f $sysconfdir/ssh_host_dsa_key ] ; then | |
235 | echo "$sysconfdir/ssh_host_dsa_key already exists, skipping." | |
236 | else | |
237 | $bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N "" | |
238 | fi | |
239 | if [ -f $sysconfdir/ssh_host_rsa_key ] ; then | |
240 | echo "$sysconfdir/ssh_host_rsa_key already exists, skipping." | |
241 | else | |
242 | $bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N "" | |
243 | fi | |
276b07a3 | 244 | echo |
d832c38e | 245 | |
246 | # Add to system startup if required | |
247 | if grep $sbindir/sshd /etc/rc.tcpip >/dev/null | |
248 | then | |
249 | echo "sshd found in rc.tcpip, not adding." | |
250 | else | |
251 | echo >>/etc/rc.tcpip | |
252 | echo "echo Starting sshd" >>/etc/rc.tcpip | |
253 | echo "$sbindir/sshd" >>/etc/rc.tcpip | |
254 | fi | |
255 | EOF | |
256 | ||
257 | # | |
258 | # Create liblpp.a and move control files into it | |
259 | # | |
260 | echo Creating liblpp.a | |
261 | ( | |
262 | cd .. | |
276b07a3 | 263 | for i in openssh.al openssh.copyright openssh.inventory openssh.post_i LICENCE README* |
d832c38e | 264 | do |
276b07a3 | 265 | ar -r liblpp.a $i |
266 | rm $i | |
d832c38e | 267 | done |
268 | ) | |
269 | ||
270 | # | |
271 | # Create lpp_name | |
272 | # | |
273 | # This will end up looking something like: | |
274 | # 4 R I OpenSSH { | |
275 | # OpenSSH 3.0.2.1 1 N U en_US OpenSSH 3.0.2p1 Portable for AIX | |
276 | # [ | |
277 | # % | |
278 | # /usr/local/bin 8073 | |
279 | # /usr/local/etc 189 | |
280 | # /usr/local/libexec 185 | |
281 | # /usr/local/man/man1 145 | |
282 | # /usr/local/man/man8 83 | |
283 | # /usr/local/sbin 2105 | |
284 | # /usr/local/share 3 | |
285 | # % | |
286 | # ] | |
276b07a3 | 287 | # } |
288 | ||
d832c38e | 289 | echo Creating lpp_name |
290 | cat <<EOF >../lpp_name | |
291 | 4 R I $PKGNAME { | |
292 | $PKGNAME $BFFVERSION 1 N U en_US OpenSSH $VERSION Portable for AIX | |
293 | [ | |
294 | % | |
295 | EOF | |
296 | ||
276b07a3 | 297 | for i in $bindir $sysconfdir $libexecdir $mandir/${mansubdir}1 $mandir/${mansubdir}8 $sbindir $datadir /usr/lpp/openssh |
d832c38e | 298 | do |
299 | # get size in 512 byte blocks | |
276b07a3 | 300 | if [ -d $FAKE_ROOT/$i ] |
301 | then | |
302 | size=`du $FAKE_ROOT/$i | awk '{print $1}'` | |
303 | echo "$i $size" >>../lpp_name | |
304 | fi | |
d832c38e | 305 | done |
306 | ||
307 | echo '%' >>../lpp_name | |
308 | echo ']' >>../lpp_name | |
309 | echo '}' >>../lpp_name | |
310 | ||
311 | # | |
312 | # Move pieces into place | |
313 | # | |
314 | mkdir -p usr/lpp/openssh | |
315 | mv ../liblpp.a usr/lpp/openssh | |
316 | mv ../lpp_name . | |
317 | ||
318 | # | |
319 | # Now invoke backup to create .bff file | |
276b07a3 | 320 | # note: lpp_name needs to be the first file so we generate the |
d832c38e | 321 | # file list on the fly and feed it to backup using -i |
322 | # | |
323 | echo Creating $PKGNAME-$VERSION.bff with backup... | |
350391c5 | 324 | rm -f $PKGNAME-$VERSION.bff |
d832c38e | 325 | ( |
326 | echo "./lpp_name" | |
327 | find . ! -name lpp_name -a ! -name . -print | |
328 | ) | backup -i -q -f ../$PKGNAME-$VERSION.bff $filelist | |
329 | ||
276b07a3 | 330 | # |
331 | # Move package into final location | |
332 | # | |
333 | if [ "$contribaix" = "1" ] | |
334 | then | |
335 | mv ../$PKGNAME-$VERSION.bff $objdir/contrib/aix | |
336 | else | |
337 | mv ../$PKGNAME-$VERSION.bff $objdir | |
338 | fi | |
339 | ||
340 | rm -rf $objdir/$PKGDIR | |
d832c38e | 341 | |
d832c38e | 342 | echo $0: done. |
343 |