[openssh.git] / buildpkg.sh.in

#!/bin/sh
#
# Fake Root Solaris/SVR4/SVR5 Build System - Prototype
#
# The following code has been provide under Public Domain License.  I really
# don't care what you use it for.  Just as long as you don't complain to me
# nor my employer if you break it. - Ben Lindstrom (mouring@eviladmin.org)
#
umask 022
#
# Options for building the package
# You can create a openssh-config.local with your customized options
#
REMOVE_FAKE_ROOT_WHEN_DONE=yes
#
# uncommenting TEST_DIR and using
# configure --prefix=/var/tmp --with-privsep-path=/var/tmp/empty
# and
# PKGNAME=tOpenSSH should allow testing a package without interfering
# with a real OpenSSH package on a system. This is not needed on systems
# that support the -R option to pkgadd.
#TEST_DIR=/var/tmp	# leave commented out for production build
PKGNAME=OpenSSH
# revisions within the same version (REV=a)
#REV=
SYSVINIT_NAME=opensshd
AWK=${AWK:="nawk"}
MAKE=${MAKE:="make"}
SSHDUID=67	# Default privsep uid
SSHDGID=67	# Default privsep gid
# uncomment these next three as needed
#PERMIT_ROOT_LOGIN=no
#X11_FORWARDING=yes
#USR_LOCAL_IS_SYMLINK=yes
# System V init run levels
SYSVINITSTART=S98
SYSVINITSTOPT=K30
# We will source these if they exist
POST_MAKE_INSTALL_FIXES=./pkg-post-make-install-fixes.sh
POST_PROTOTYPE_EDITS=./pkg-post-prototype-edit.sh
# We'll be one level deeper looking for these
PKG_PREINSTALL_LOCAL=../pkg-preinstall.local
PKG_POSTINSTALL_LOCAL=../pkg-postinstall.local
PKG_PREREMOVE_LOCAL=../pkg-preremove.local
PKG_POSTREMOVE_LOCAL=../pkg-postremove.local
PKG_REQUEST_LOCAL=../pkg-request.local
# end of sourced files
#
OPENSSHD=opensshd.init
OPENSSH_MANIFEST=openssh.xml
OPENSSH_FMRI=svc:/site/${SYSVINIT_NAME}:default

PATH_GROUPADD_PROG=@PATH_GROUPADD_PROG@
PATH_USERADD_PROG=@PATH_USERADD_PROG@
PATH_PASSWD_PROG=@PATH_PASSWD_PROG@
#
# list of system directories we do NOT want to change owner/group/perms
# when installing our package
SYSTEM_DIR="/etc	\
/etc/init.d		\
/etc/rcS.d		\
/etc/rc0.d		\
/etc/rc1.d		\
/etc/rc2.d		\
/etc/opt		\
/lib			\
/lib/svc		\
/lib/svc/method		\
/lib/svc/method/site	\
/opt			\
/opt/bin		\
/usr			\
/usr/bin		\
/usr/lib		\
/usr/sbin		\
/usr/share		\
/usr/share/man		\
/usr/share/man/man1	\
/usr/share/man/man8	\
/usr/local		\
/usr/local/bin		\
/usr/local/etc		\
/usr/local/libexec	\
/usr/local/man		\
/usr/local/man/man1	\
/usr/local/man/man8	\
/usr/local/sbin		\
/usr/local/share	\
/var			\
/var/opt		\
/var/run		\
/var/svc		\
/var/svc/manifest	\
/var/svc/manifest/site  \
/var/tmp		\
/tmp"

# We may need to build as root so we make sure PATH is set up
# only set the path if it's not set already
[ -d /opt/bin ]  &&  {
	echo $PATH | grep ":/opt/bin"  > /dev/null 2>&1
	[ $? -ne 0 ] && PATH=$PATH:/opt/bin
}
[ -d /usr/local/bin ]  &&  {
	echo $PATH | grep ":/usr/local/bin"  > /dev/null 2>&1
	[ $? -ne 0 ] && PATH=$PATH:/usr/local/bin
}
[ -d /usr/ccs/bin ]  &&  {
	echo $PATH | grep ":/usr/ccs/bin"  > /dev/null 2>&1
	[ $? -ne 0 ] && PATH=$PATH:/usr/ccs/bin
}
export PATH
#

[ -f Makefile ]  ||  {
	echo "Please run this script from your build directory"
	exit 1
}

# we will look for openssh-config.local to override the above options
[ -s ./openssh-config.local ]  &&  . ./openssh-config.local

START=`pwd`
FAKE_ROOT=$START/pkg

## Fill in some details, like prefix and sysconfdir
for confvar in prefix exec_prefix bindir sbindir libexecdir datadir mandir sysconfdir piddir srcdir
do
	eval $confvar=`grep "^$confvar=" Makefile | cut -d = -f 2`
done

## Are we using Solaris' SMF?
DO_SMF=0
if egrep "^#define USE_SOLARIS_PROCESS_CONTRACTS" config.h > /dev/null 2>&1
then
	DO_SMF=1
fi

## Collect value of privsep user
for confvar in SSH_PRIVSEP_USER
do
	eval $confvar=`awk '/#define[ \t]'$confvar'/{print $3}' config.h`
done

## Set privsep defaults if not defined
if [ -z "$SSH_PRIVSEP_USER" ]
then
	SSH_PRIVSEP_USER=sshd
fi

## Extract common info requires for the 'info' part of the package.
VERSION=`./ssh -V 2>&1 | sed -e 's/,.*//'`

ARCH=`uname -m`
DEF_MSG="\n"
OS_VER=`uname -v`
SCRIPT_SHELL=/sbin/sh
UNAME_R=`uname -r`
UNAME_S=`uname -s`
case ${UNAME_S} in
	SunOS)	UNAME_S=Solaris
		OS_VER=${UNAME_R}
		ARCH=`uname -p`
		RCS_D=yes
		DEF_MSG="(default: n)"
		;;
	SCO_SV)	case ${UNAME_R} in
			3.2)	UNAME_S=OpenServer5
		OS_VER=`uname -X | grep Release | sed -e 's/^Rel.*3.2v//'`
				;;
			5)	UNAME_S=OpenServer6
				;;
		esac
		SCRIPT_SHELL=/bin/sh
		RC1_D=no
		DEF_MSG="(default: n)"
		;;
esac

case `basename $0` in
	buildpkg.sh)
## Start by faking root install
echo "Faking root install..."
[ -d $FAKE_ROOT ]  &&  rm -fr $FAKE_ROOT
mkdir $FAKE_ROOT
${MAKE} install-nokeys DESTDIR=$FAKE_ROOT
if [ $? -gt 0 ]
then
	echo "Fake root install failed, stopping."
	exit 1
fi

## Setup our run level stuff while we are at it.
if [ $DO_SMF -eq 1 ]
then
	# For Solaris' SMF, /lib/svc/method/site is the preferred place
	# for start/stop scripts that aren't supplied with the OS, and
	# similarly /var/svc/manifest/site for manifests.
	mkdir -p $FAKE_ROOT${TEST_DIR}/lib/svc/method/site
	mkdir -p $FAKE_ROOT${TEST_DIR}/var/svc/manifest/site

	cp ${OPENSSHD} $FAKE_ROOT${TEST_DIR}/lib/svc/method/site/${SYSVINIT_NAME}
	chmod 744 $FAKE_ROOT${TEST_DIR}/lib/svc/method/site/${SYSVINIT_NAME}

	cat ${OPENSSH_MANIFEST} | sed "s|__SYSVINIT_NAME__|${SYSVINIT_NAME}|" \
	    > $FAKE_ROOT${TEST_DIR}/var/svc/manifest/site/${SYSVINIT_NAME}.xml
	chmod 644 $FAKE_ROOT${TEST_DIR}/var/svc/manifest/site/${SYSVINIT_NAME}.xml
else
	mkdir -p $FAKE_ROOT${TEST_DIR}/etc/init.d

	cp ${OPENSSHD} $FAKE_ROOT${TEST_DIR}/etc/init.d/${SYSVINIT_NAME}
	chmod 744 $FAKE_ROOT${TEST_DIR}/etc/init.d/${SYSVINIT_NAME}
fi

[ "${PERMIT_ROOT_LOGIN}" = no ]  &&  \
	perl -p -i -e "s/#PermitRootLogin yes/PermitRootLogin no/" \
		$FAKE_ROOT/${sysconfdir}/sshd_config
[ "${X11_FORWARDING}" = yes ]  &&  \
	perl -p -i -e "s/#X11Forwarding no/X11Forwarding yes/" \
		$FAKE_ROOT/${sysconfdir}/sshd_config
# fix PrintMotd
perl -p -i -e "s/#PrintMotd yes/PrintMotd no/" \
	$FAKE_ROOT/${sysconfdir}/sshd_config

# We don't want to overwrite config files on multiple installs
mv $FAKE_ROOT/${sysconfdir}/ssh_config $FAKE_ROOT/${sysconfdir}/ssh_config.default
mv $FAKE_ROOT/${sysconfdir}/sshd_config $FAKE_ROOT/${sysconfdir}/sshd_config.default
[ -f $FAKE_ROOT/${sysconfdir}/ssh_prng_cmds ]  &&  \
mv $FAKE_ROOT/${sysconfdir}/ssh_prng_cmds $FAKE_ROOT/${sysconfdir}/ssh_prng_cmds.default

# local tweeks here
[ -s "${POST_MAKE_INSTALL_FIXES}" ]  &&  . ${POST_MAKE_INSTALL_FIXES}

cd $FAKE_ROOT

## Ok, this is outright wrong, but it will work.  I'm tired of pkgmk
## whining.
for i in *; do
  PROTO_ARGS="$PROTO_ARGS $i=/$i";
done

## Build info file
echo "Building pkginfo file..."
cat > pkginfo << _EOF
PKG=$PKGNAME
NAME="OpenSSH Portable for ${UNAME_S}"
DESC="Secure Shell remote access utility; replaces telnet and rlogin/rsh."
VENDOR="OpenSSH Portable Team - http://www.openssh.com/portable.html"
ARCH=$ARCH
VERSION=$VERSION$REV
CATEGORY="Security,application"
BASEDIR=/
CLASSES="none"
PSTAMP="${UNAME_S} ${OS_VER} ${ARCH} `date '+%d%b%Y %H:%M'`"
_EOF

## Build empty depend file that may get updated by $POST_PROTOTYPE_EDITS
echo "Building depend file..."
touch depend

## Build space file
echo "Building space file..."
if [ $DO_SMF -eq 1 ]
then
	# XXX Is this necessary?  If not, remove space line from mk-proto.awk.
	touch space
else
	cat > space << _EOF
# extra space required by start/stop links added by installf 
# in postinstall
$TEST_DIR/etc/rc0.d/${SYSVINITSTOPT}${SYSVINIT_NAME} 0 1
$TEST_DIR/etc/rc2.d/${SYSVINITSTART}${SYSVINIT_NAME} 0 1
_EOF
	[ "$RC1_D" = no ]  ||  \
	echo "$TEST_DIR/etc/rc1.d/${SYSVINITSTOPT}${SYSVINIT_NAME} 0 1" >> space
	[ "$RCS_D" = yes ]  &&  \
	echo "$TEST_DIR/etc/rcS.d/${SYSVINITSTOPT}${SYSVINIT_NAME} 0 1" >> space
fi

## Build preinstall file
echo "Building preinstall file..."
cat > preinstall << _EOF
#! ${SCRIPT_SHELL}
#
_EOF

# local preinstall changes here
[ -s "${PKG_PREINSTALL_LOCAL}" ]  &&  . ${PKG_PREINSTALL_LOCAL}

cat >> preinstall << _EOF
#
if [ "\${PRE_INS_STOP}" = "yes" ]
then
	if [ $DO_SMF -eq 1 ] 
	then
		svcadm disable $OPENSSH_FMRI
	else
		${TEST_DIR}/etc/init.d/${SYSVINIT_NAME} stop
	fi
fi

exit 0
_EOF

## Build postinstall file
echo "Building postinstall file..."
cat > postinstall << _EOF
#! ${SCRIPT_SHELL}
#
[ -f \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_config ]  ||  \\
	cp -p \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_config.default \\
		\${PKG_INSTALL_ROOT}${sysconfdir}/ssh_config
[ -f \${PKG_INSTALL_ROOT}${sysconfdir}/sshd_config ]  ||  \\
	cp -p \${PKG_INSTALL_ROOT}${sysconfdir}/sshd_config.default \\
		\${PKG_INSTALL_ROOT}${sysconfdir}/sshd_config
[ -f \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_prng_cmds.default ]  &&  {
	[ -f \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_prng_cmds ]  ||  \\
	cp -p \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_prng_cmds.default \\
		\${PKG_INSTALL_ROOT}${sysconfdir}/ssh_prng_cmds
}

# make rc?.d dirs only if we are doing a test install
[ -n "${TEST_DIR}" ]  &&  [ $DO_SMF -ne 1 ] && {
	[ "$RCS_D" = yes ]  &&  mkdir -p ${TEST_DIR}/etc/rcS.d
	mkdir -p ${TEST_DIR}/etc/rc0.d
	[ "$RC1_D" = no ]  ||  mkdir -p ${TEST_DIR}/etc/rc1.d
	mkdir -p ${TEST_DIR}/etc/rc2.d
}

if [ $DO_SMF -eq 1 ]
then
	# Delete the existing service, if it exists, then import the 
	# new one.
	if svcs $OPENSSH_FMRI > /dev/null 2>&1
	then
		svccfg delete -f $OPENSSH_FMRI
	fi
	# NOTE, The manifest disables sshd by default.
	svccfg import ${TEST_DIR}/var/svc/manifest/site/${SYSVINIT_NAME}.xml
else
	if [ "\${USE_SYM_LINKS}" = yes ]
	then
		[ "$RCS_D" = yes ]  &&  \
	installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rcS.d/${SYSVINITSTOPT}${SYSVINIT_NAME}=../init.d/${SYSVINIT_NAME} s
		installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rc0.d/${SYSVINITSTOPT}${SYSVINIT_NAME}=../init.d/${SYSVINIT_NAME} s
		[ "$RC1_D" = no ]  ||  \
		installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rc1.d/${SYSVINITSTOPT}${SYSVINIT_NAME}=../init.d/${SYSVINIT_NAME} s
		installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rc2.d/${SYSVINITSTART}${SYSVINIT_NAME}=../init.d/${SYSVINIT_NAME} s
	else
		[ "$RCS_D" = yes ]  &&  \
	installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rcS.d/${SYSVINITSTOPT}${SYSVINIT_NAME}=\${PKG_INSTALL_ROOT}$TEST_DIR/etc/init.d/${SYSVINIT_NAME} l
		installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rc0.d/${SYSVINITSTOPT}${SYSVINIT_NAME}=\${PKG_INSTALL_ROOT}$TEST_DIR/etc/init.d/${SYSVINIT_NAME} l
		[ "$RC1_D" = no ]  ||  \
		installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rc1.d/${SYSVINITSTOPT}${SYSVINIT_NAME}=\${PKG_INSTALL_ROOT}$TEST_DIR/etc/init.d/${SYSVINIT_NAME} l
		installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rc2.d/${SYSVINITSTART}${SYSVINIT_NAME}=\${PKG_INSTALL_ROOT}$TEST_DIR/etc/init.d/${SYSVINIT_NAME} l
	fi
fi

# If piddir doesn't exist we add it. (Ie. --with-pid-dir=/var/opt/ssh)
[ -d $piddir ]  ||  installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR$piddir d 0755 root sys

_EOF

# local postinstall changes here
[ -s "${PKG_POSTINSTALL_LOCAL}" ]  &&  . ${PKG_POSTINSTALL_LOCAL}

cat >> postinstall << _EOF
installf -f ${PKGNAME}

# Use chroot to handle PKG_INSTALL_ROOT
if [ ! -z "\${PKG_INSTALL_ROOT}" ]
then
	chroot="chroot \${PKG_INSTALL_ROOT}"
fi
# If this is a test build, we will skip the groupadd/useradd/passwd commands
if [ ! -z "${TEST_DIR}" ]
then
	chroot=echo
fi

	echo "PrivilegeSeparation user always required."
	if cut -f1 -d: \${PKG_INSTALL_ROOT}/etc/passwd | egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null
	then
		echo "PrivSep user $SSH_PRIVSEP_USER already exists."
		SSH_PRIVSEP_GROUP=\`grep "^$SSH_PRIVSEP_USER:" \${PKG_INSTALL_ROOT}/etc/passwd | awk -F: '{print \$4}'\`
		SSH_PRIVSEP_GROUP=\`grep ":\$SSH_PRIVSEP_GROUP:" \${PKG_INSTALL_ROOT}/etc/group | awk -F: '{print \$1}'\`
	else
		DO_PASSWD=yes
	fi
	[ -z "\$SSH_PRIVSEP_GROUP" ]  &&  SSH_PRIVSEP_GROUP=$SSH_PRIVSEP_USER

	# group required?
	if cut -f1 -d: \${PKG_INSTALL_ROOT}/etc/group | egrep '^'\$SSH_PRIVSEP_GROUP'\$' >/dev/null
	then
		echo "PrivSep group \$SSH_PRIVSEP_GROUP already exists."
	else
		DO_GROUP=yes
	fi

	# create group if required
	[ "\$DO_GROUP" = yes ]  &&  {
		# Use gid of 67 if possible
		if cut -f3 -d: \${PKG_INSTALL_ROOT}/etc/group | egrep '^'$SSHDGID'\$' >/dev/null
		then
			:
		else
			sshdgid="-g $SSHDGID"
		fi
		echo "Creating PrivSep group \$SSH_PRIVSEP_GROUP."
		\$chroot ${PATH_GROUPADD_PROG} \$sshdgid \$SSH_PRIVSEP_GROUP
	}

	# Create user if required
	[ "\$DO_PASSWD" = yes ]  &&  {
		# Use uid of 67 if possible
		if cut -f3 -d: \${PKG_INSTALL_ROOT}/etc/passwd | egrep '^'$SSHDUID'\$' >/dev/null
		then
			:
		else
			sshduid="-u $SSHDUID"
		fi
		echo "Creating PrivSep user $SSH_PRIVSEP_USER."
		\$chroot ${PATH_USERADD_PROG} -c 'SSHD PrivSep User' -s /bin/false -g $SSH_PRIVSEP_USER \$sshduid $SSH_PRIVSEP_USER
		\$chroot ${PATH_PASSWD_PROG} -l $SSH_PRIVSEP_USER
	}

if [ "\${POST_INS_START}" = "yes" ]
then
	if [ $DO_SMF -eq 1 ]
	then
		svcadm enable $OPENSSH_FMRI
	else
		${TEST_DIR}/etc/init.d/${SYSVINIT_NAME} start
	fi
fi
exit 0
_EOF

## Build preremove file
echo "Building preremove file..."
cat > preremove << _EOF
#! ${SCRIPT_SHELL}
#
if [ $DO_SMF -eq 1 ] 
then
	svcadm disable $OPENSSH_FMRI
else
	${TEST_DIR}/etc/init.d/${SYSVINIT_NAME} stop
fi
_EOF

# local preremove changes here
[ -s "${PKG_PREREMOVE_LOCAL}" ]  &&  . ${PKG_PREREMOVE_LOCAL}

cat >> preremove << _EOF
exit 0
_EOF

## Build postremove file
echo "Building postremove file..."
cat > postremove << _EOF
#! ${SCRIPT_SHELL}
#
if [ $DO_SMF -eq 1 ]
then
	if svcs $OPENSSH_FMRI > /dev/null 2>&1
	then
		svccfg delete -f $OPENSSH_FMRI
	fi
fi
_EOF

# local postremove changes here
[ -s "${PKG_POSTREMOVE_LOCAL}" ]  &&  . ${PKG_POSTREMOVE_LOCAL}

cat >> postremove << _EOF
exit 0
_EOF

## Build request file
echo "Building request file..."
cat > request << _EOF
trap 'exit 3' 15

_EOF

[ -x /usr/bin/ckyorn ]  ||  cat >> request << _EOF

ckyorn() {
# for some strange reason OpenServer5 has no ckyorn
# We build a striped down version here

DEFAULT=n
PROMPT="Yes or No [yes,no,?,quit]"
HELP_PROMPT="        Enter y or yes if your answer is yes; n or no if your answer is no."
USAGE="usage: ckyorn [options]
where options may include:
        -d default
        -h help
        -p prompt
"

if [ \$# != 0 ]
then
	while getopts d:p:h: c
	do
		case \$c in
			h)	HELP_PROMPT="\$OPTARG" ;;
			d)	DEFAULT=\$OPTARG ;;
			p)	PROMPT=\$OPTARG ;;
			\\?)	echo "\$USAGE" 1>&2
				exit 1 ;;
		esac
	done
	shift \`expr \$OPTIND - 1\`
fi

while true
do
	echo "\${PROMPT}\\c " 1>&2
	read key
	[ -z "\$key" ]  &&  key=\$DEFAULT
	case \$key in
		[n,N]|[n,N][o,O]|[y,Y]|[y,Y][e,E][s,S])	echo "\${key}\\c"
			exit 0 ;;
		\\?)	echo \$HELP_PROMPT 1>&2 ;;
		q|quit)	echo "q\\c" 1>&2
			exit 3 ;;
	esac
done

}

_EOF

if [ $DO_SMF -eq 1 ]
then
	# This could get hairy, as the running sshd may not be under SMF.
	# We'll assume an earlier version of OpenSSH started via SMF.
	cat >> request << _EOF
PRE_INS_STOP=no
POST_INS_START=no
# determine if should restart the daemon
if [ -s ${piddir}/sshd.pid  ] && \
    /usr/bin/svcs -H $OPENSSH_FMRI 2>&1 | egrep "^online" > /dev/null 2>&1
then
	ans=\`ckyorn -d n \
-p "Should the running sshd daemon be restarted? ${DEF_MSG}"\` || exit \$?
	case \$ans in
		[y,Y]*)	PRE_INS_STOP=yes
			POST_INS_START=yes
			;;
	esac

else

# determine if we should start sshd
	ans=\`ckyorn -d n \
-p "Start the sshd daemon after installing this package? ${DEF_MSG}"\` || exit \$?
	case \$ans in
		[y,Y]*)	POST_INS_START=yes ;;
	esac
fi

# make parameters available to installation service,
# and so to any other packaging scripts
cat >\$1 <<!
PRE_INS_STOP='\$PRE_INS_STOP'
POST_INS_START='\$POST_INS_START'
!

_EOF
else
	cat >> request << _EOF
USE_SYM_LINKS=no
PRE_INS_STOP=no
POST_INS_START=no
# Use symbolic links?
ans=\`ckyorn -d n \
-p "Do you want symbolic links for the start/stop scripts? ${DEF_MSG}"\` || exit \$?
case \$ans in
	[y,Y]*)	USE_SYM_LINKS=yes ;;
esac

# determine if should restart the daemon
if [ -s ${piddir}/sshd.pid  -a  -f ${TEST_DIR}/etc/init.d/${SYSVINIT_NAME} ]
then
	ans=\`ckyorn -d n \
-p "Should the running sshd daemon be restarted? ${DEF_MSG}"\` || exit \$?
	case \$ans in
		[y,Y]*)	PRE_INS_STOP=yes
			POST_INS_START=yes
			;;
	esac

else

# determine if we should start sshd
	ans=\`ckyorn -d n \
-p "Start the sshd daemon after installing this package? ${DEF_MSG}"\` || exit \$?
	case \$ans in
		[y,Y]*)	POST_INS_START=yes ;;
	esac
fi

# make parameters available to installation service,
# and so to any other packaging scripts
cat >\$1 <<!
USE_SYM_LINKS='\$USE_SYM_LINKS'
PRE_INS_STOP='\$PRE_INS_STOP'
POST_INS_START='\$POST_INS_START'
!

_EOF
fi

# local request changes here
[ -s "${PKG_REQUEST_LOCAL}" ]  &&  . ${PKG_REQUEST_LOCAL}

cat >> request << _EOF
exit 0

_EOF

## Next Build our prototype
echo "Building prototype file..."
cat >mk-proto.awk << _EOF
	    BEGIN { print "i pkginfo"; print "i depend"; \\
		    print "i preinstall"; print "i postinstall"; \\
 		    print "i preremove"; print "i postremove"; \\
		    print "i request"; print "i space"; \\
		    split("$SYSTEM_DIR",sys_files); }
	    {
	     for (dir in sys_files) { if ( \$3 != sys_files[dir] )
		     { if ( \$1 == "s" )
			{ \$5=""; \$6=""; }
		     else
			{ \$5="root"; \$6="sys"; }
		     }
		else
		     { \$4="?"; \$5="?"; \$6="?"; break;}
	    } }
	    { print; }
_EOF

find . | egrep -v "prototype|pkginfo|mk-proto.awk" | sort | \
	pkgproto $PROTO_ARGS | ${AWK} -f mk-proto.awk > prototype

# /usr/local is a symlink on some systems
[ "${USR_LOCAL_IS_SYMLINK}" = yes ]  &&  {
	grep -v "^d none /usr/local ? ? ?$" prototype > prototype.new
	mv prototype.new prototype
}

## Step back a directory and now build the package.
cd ..
# local prototype tweeks here
[ -s "${POST_PROTOTYPE_EDITS}" ]  &&  . ${POST_PROTOTYPE_EDITS}

echo "Building package.."
pkgmk -d ${FAKE_ROOT} -f $FAKE_ROOT/prototype -o
echo | pkgtrans -os ${FAKE_ROOT} ${START}/$PKGNAME-$VERSION$REV-$UNAME_S-$ARCH.pkg
	;;

	justpkg.sh)
rm -fr ${FAKE_ROOT}/${PKGNAME}
grep -v "^PSTAMP=" $FAKE_ROOT/pkginfo > $$tmp
mv $$tmp $FAKE_ROOT/pkginfo
cat >> $FAKE_ROOT/pkginfo << _EOF
PSTAMP="${UNAME_S} ${OS_VER} ${ARCH} `date '+%d%b%Y %H:%M'`"
_EOF
pkgmk -d ${FAKE_ROOT} -f $FAKE_ROOT/prototype -o
echo | pkgtrans -os ${FAKE_ROOT} ${START}/$PKGNAME-$VERSION$REV-$UNAME_S-$ARCH.pkg
	;;

esac

[ "${REMOVE_FAKE_ROOT_WHEN_DONE}" = yes ]  &&  rm -rf $FAKE_ROOT
exit 0
Commit	Line	Data
9cefe228	1	#!/bin/sh
	2	#
	3	# Fake Root Solaris/SVR4/SVR5 Build System - Prototype
	4	#
	5	# The following code has been provide under Public Domain License. I really
	6	# don't care what you use it for. Just as long as you don't complain to me
	7	# nor my employer if you break it. - Ben Lindstrom (mouring@eviladmin.org)
	8	#
	9	umask 022
	10	#
	11	# Options for building the package
	12	# You can create a openssh-config.local with your customized options
	13	#
	14	REMOVE_FAKE_ROOT_WHEN_DONE=yes
	15	#
	16	# uncommenting TEST_DIR and using
	17	# configure --prefix=/var/tmp --with-privsep-path=/var/tmp/empty
	18	# and
	19	# PKGNAME=tOpenSSH should allow testing a package without interfering
	20	# with a real OpenSSH package on a system. This is not needed on systems
	21	# that support the -R option to pkgadd.
	22	#TEST_DIR=/var/tmp # leave commented out for production build
	23	PKGNAME=OpenSSH
d386a795	24	# revisions within the same version (REV=a)
d386a795	25	#REV=
9cefe228	26	SYSVINIT_NAME=opensshd
b18359f6	27	AWK=${AWK:="nawk"}
9cefe228	28	MAKE=${MAKE:="make"}
	29	SSHDUID=67 # Default privsep uid
	30	SSHDGID=67 # Default privsep gid
	31	# uncomment these next three as needed
	32	#PERMIT_ROOT_LOGIN=no
	33	#X11_FORWARDING=yes
	34	#USR_LOCAL_IS_SYMLINK=yes
	35	# System V init run levels
	36	SYSVINITSTART=S98
	37	SYSVINITSTOPT=K30
	38	# We will source these if they exist
103ff395	39	POST_MAKE_INSTALL_FIXES=./pkg-post-make-install-fixes.sh
9cefe228	40	POST_PROTOTYPE_EDITS=./pkg-post-prototype-edit.sh
	41	# We'll be one level deeper looking for these
	42	PKG_PREINSTALL_LOCAL=../pkg-preinstall.local
	43	PKG_POSTINSTALL_LOCAL=../pkg-postinstall.local
	44	PKG_PREREMOVE_LOCAL=../pkg-preremove.local
	45	PKG_POSTREMOVE_LOCAL=../pkg-postremove.local
	46	PKG_REQUEST_LOCAL=../pkg-request.local
	47	# end of sourced files
	48	#
ddd8c95b	49	OPENSSHD=opensshd.init
29eadd7c	50	OPENSSH_MANIFEST=openssh.xml
840bd607	51	OPENSSH_FMRI=svc:/site/${SYSVINIT_NAME}:default
9cefe228	52
	53	PATH_GROUPADD_PROG=@PATH_GROUPADD_PROG@
	54	PATH_USERADD_PROG=@PATH_USERADD_PROG@
	55	PATH_PASSWD_PROG=@PATH_PASSWD_PROG@
	56	#
	57	# list of system directories we do NOT want to change owner/group/perms
	58	# when installing our package
	59	SYSTEM_DIR="/etc \
	60	/etc/init.d \
	61	/etc/rcS.d \
	62	/etc/rc0.d \
	63	/etc/rc1.d \
	64	/etc/rc2.d \
	65	/etc/opt \
29eadd7c	66	/lib \
	67	/lib/svc \
	68	/lib/svc/method \
	69	/lib/svc/method/site \
9cefe228	70	/opt \
	71	/opt/bin \
	72	/usr \
	73	/usr/bin \
	74	/usr/lib \
	75	/usr/sbin \
	76	/usr/share \
	77	/usr/share/man \
	78	/usr/share/man/man1 \
	79	/usr/share/man/man8 \
	80	/usr/local \
	81	/usr/local/bin \
	82	/usr/local/etc \
	83	/usr/local/libexec \
	84	/usr/local/man \
	85	/usr/local/man/man1 \
	86	/usr/local/man/man8 \
	87	/usr/local/sbin \
	88	/usr/local/share \
	89	/var \
	90	/var/opt \
	91	/var/run \
29eadd7c	92	/var/svc \
	93	/var/svc/manifest \
	94	/var/svc/manifest/site \
9cefe228	95	/var/tmp \
	96	/tmp"
	97
	98	# We may need to build as root so we make sure PATH is set up
	99	# only set the path if it's not set already
	100	[ -d /opt/bin ] && {
	101	echo $PATH \| grep ":/opt/bin" > /dev/null 2>&1
	102	[ $? -ne 0 ] && PATH=$PATH:/opt/bin
	103	}
	104	[ -d /usr/local/bin ] && {
	105	echo $PATH \| grep ":/usr/local/bin" > /dev/null 2>&1
	106	[ $? -ne 0 ] && PATH=$PATH:/usr/local/bin
	107	}
	108	[ -d /usr/ccs/bin ] && {
	109	echo $PATH \| grep ":/usr/ccs/bin" > /dev/null 2>&1
	110	[ $? -ne 0 ] && PATH=$PATH:/usr/ccs/bin
	111	}
	112	export PATH
	113	#
	114
	115	[ -f Makefile ] \|\| {
	116	echo "Please run this script from your build directory"
	117	exit 1
	118	}
	119
	120	# we will look for openssh-config.local to override the above options
	121	[ -s ./openssh-config.local ] && . ./openssh-config.local
	122
	123	START=`pwd`
	124	FAKE_ROOT=$START/pkg
	125
	126	## Fill in some details, like prefix and sysconfdir
	127	for confvar in prefix exec_prefix bindir sbindir libexecdir datadir mandir sysconfdir piddir srcdir
	128	do
	129	eval $confvar=`grep "^$confvar=" Makefile \| cut -d = -f 2`
	130	done
	131
29eadd7c	132	## Are we using Solaris' SMF?
	133	DO_SMF=0
	134	if egrep "^#define USE_SOLARIS_PROCESS_CONTRACTS" config.h > /dev/null 2>&1
	135	then
	136	DO_SMF=1
	137	fi
9cefe228	138
	139	## Collect value of privsep user
	140	for confvar in SSH_PRIVSEP_USER
	141	do
	142	eval $confvar=`awk '/#define[ \t]'$confvar'/{print $3}' config.h`
	143	done
	144
	145	## Set privsep defaults if not defined
	146	if [ -z "$SSH_PRIVSEP_USER" ]
	147	then
	148	SSH_PRIVSEP_USER=sshd
	149	fi
	150
	151	## Extract common info requires for the 'info' part of the package.
	152	VERSION=`./ssh -V 2>&1 \| sed -e 's/,.*//'`
	153
	154	ARCH=`uname -m`
	155	DEF_MSG="\n"
	156	OS_VER=`uname -v`
	157	SCRIPT_SHELL=/sbin/sh
1f231631	158	UNAME_R=`uname -r`
9cefe228	159	UNAME_S=`uname -s`
	160	case ${UNAME_S} in
	161	SunOS) UNAME_S=Solaris
1f231631	162	OS_VER=${UNAME_R}
9cefe228	163	ARCH=`uname -p`
	164	RCS_D=yes
	165	DEF_MSG="(default: n)"
	166	;;
1f231631	167	SCO_SV) case ${UNAME_R} in
1f231631	168	3.2) UNAME_S=OpenServer5
9cefe228	169	OS_VER=`uname -X \| grep Release \| sed -e 's/^Rel.*3.2v//'`
1f231631	170	;;
	171	5) UNAME_S=OpenServer6
	172	;;
	173	esac
9cefe228	174	SCRIPT_SHELL=/bin/sh
	175	RC1_D=no
	176	DEF_MSG="(default: n)"
	177	;;
	178	esac
	179
	180	case `basename $0` in
	181	buildpkg.sh)
	182	## Start by faking root install
	183	echo "Faking root install..."
	184	[ -d $FAKE_ROOT ] && rm -fr $FAKE_ROOT
	185	mkdir $FAKE_ROOT
	186	${MAKE} install-nokeys DESTDIR=$FAKE_ROOT
	187	if [ $? -gt 0 ]
	188	then
	189	echo "Fake root install failed, stopping."
	190	exit 1
	191	fi
	192
	193	## Setup our run level stuff while we are at it.
29eadd7c	194	if [ $DO_SMF -eq 1 ]
	195	then
	196	# For Solaris' SMF, /lib/svc/method/site is the preferred place
	197	# for start/stop scripts that aren't supplied with the OS, and
	198	# similarly /var/svc/manifest/site for manifests.
	199	mkdir -p $FAKE_ROOT${TEST_DIR}/lib/svc/method/site
	200	mkdir -p $FAKE_ROOT${TEST_DIR}/var/svc/manifest/site
	201
	202	cp ${OPENSSHD} $FAKE_ROOT${TEST_DIR}/lib/svc/method/site/${SYSVINIT_NAME}
	203	chmod 744 $FAKE_ROOT${TEST_DIR}/lib/svc/method/site/${SYSVINIT_NAME}
	204
840bd607	205	cat ${OPENSSH_MANIFEST} \| sed "s\|__SYSVINIT_NAME__\|${SYSVINIT_NAME}\|" \
	206	> $FAKE_ROOT${TEST_DIR}/var/svc/manifest/site/${SYSVINIT_NAME}.xml
	207	chmod 644 $FAKE_ROOT${TEST_DIR}/var/svc/manifest/site/${SYSVINIT_NAME}.xml
29eadd7c	208	else
29eadd7c	209	mkdir -p $FAKE_ROOT${TEST_DIR}/etc/init.d
9cefe228	210
29eadd7c	211	cp ${OPENSSHD} $FAKE_ROOT${TEST_DIR}/etc/init.d/${SYSVINIT_NAME}
	212	chmod 744 $FAKE_ROOT${TEST_DIR}/etc/init.d/${SYSVINIT_NAME}
	213	fi
9cefe228	214
	215	[ "${PERMIT_ROOT_LOGIN}" = no ] && \
	216	perl -p -i -e "s/#PermitRootLogin yes/PermitRootLogin no/" \
	217	$FAKE_ROOT/${sysconfdir}/sshd_config
	218	[ "${X11_FORWARDING}" = yes ] && \
	219	perl -p -i -e "s/#X11Forwarding no/X11Forwarding yes/" \
	220	$FAKE_ROOT/${sysconfdir}/sshd_config
	221	# fix PrintMotd
	222	perl -p -i -e "s/#PrintMotd yes/PrintMotd no/" \
	223	$FAKE_ROOT/${sysconfdir}/sshd_config
	224
	225	# We don't want to overwrite config files on multiple installs
	226	mv $FAKE_ROOT/${sysconfdir}/ssh_config $FAKE_ROOT/${sysconfdir}/ssh_config.default
	227	mv $FAKE_ROOT/${sysconfdir}/sshd_config $FAKE_ROOT/${sysconfdir}/sshd_config.default
	228	[ -f $FAKE_ROOT/${sysconfdir}/ssh_prng_cmds ] && \
	229	mv $FAKE_ROOT/${sysconfdir}/ssh_prng_cmds $FAKE_ROOT/${sysconfdir}/ssh_prng_cmds.default
	230
	231	# local tweeks here
	232	[ -s "${POST_MAKE_INSTALL_FIXES}" ] && . ${POST_MAKE_INSTALL_FIXES}
	233
	234	cd $FAKE_ROOT
	235
	236	## Ok, this is outright wrong, but it will work. I'm tired of pkgmk
	237	## whining.
	238	for i in *; do
	239	PROTO_ARGS="$PROTO_ARGS $i=/$i";
	240	done
	241
	242	## Build info file
	243	echo "Building pkginfo file..."
	244	cat > pkginfo << _EOF
	245	PKG=$PKGNAME
	246	NAME="OpenSSH Portable for ${UNAME_S}"
	247	DESC="Secure Shell remote access utility; replaces telnet and rlogin/rsh."
	248	VENDOR="OpenSSH Portable Team - http://www.openssh.com/portable.html"
	249	ARCH=$ARCH
d386a795	250	VERSION=$VERSION$REV
9cefe228	251	CATEGORY="Security,application"
	252	BASEDIR=/
	253	CLASSES="none"
	254	PSTAMP="${UNAME_S} ${OS_VER} ${ARCH} `date '+%d%b%Y %H:%M'`"
	255	_EOF
	256
	257	## Build empty depend file that may get updated by $POST_PROTOTYPE_EDITS
	258	echo "Building depend file..."
	259	touch depend
	260
	261	## Build space file
	262	echo "Building space file..."
29eadd7c	263	if [ $DO_SMF -eq 1 ]
	264	then
	265	# XXX Is this necessary? If not, remove space line from mk-proto.awk.
	266	touch space
	267	else
	268	cat > space << _EOF
	269	# extra space required by start/stop links added by installf
	270	# in postinstall
9cefe228	271	$TEST_DIR/etc/rc0.d/${SYSVINITSTOPT}${SYSVINIT_NAME} 0 1
	272	$TEST_DIR/etc/rc2.d/${SYSVINITSTART}${SYSVINIT_NAME} 0 1
	273	_EOF
29eadd7c	274	[ "$RC1_D" = no ] \|\| \
	275	echo "$TEST_DIR/etc/rc1.d/${SYSVINITSTOPT}${SYSVINIT_NAME} 0 1" >> space
	276	[ "$RCS_D" = yes ] && \
	277	echo "$TEST_DIR/etc/rcS.d/${SYSVINITSTOPT}${SYSVINIT_NAME} 0 1" >> space
	278	fi
9cefe228	279
	280	## Build preinstall file
	281	echo "Building preinstall file..."
	282	cat > preinstall << _EOF
	283	#! ${SCRIPT_SHELL}
	284	#
	285	_EOF
	286
	287	# local preinstall changes here
	288	[ -s "${PKG_PREINSTALL_LOCAL}" ] && . ${PKG_PREINSTALL_LOCAL}
	289
	290	cat >> preinstall << _EOF
	291	#
29eadd7c	292	if [ "\${PRE_INS_STOP}" = "yes" ]
	293	then
	294	if [ $DO_SMF -eq 1 ]
	295	then
	296	svcadm disable $OPENSSH_FMRI
	297	else
	298	${TEST_DIR}/etc/init.d/${SYSVINIT_NAME} stop
	299	fi
	300	fi
	301
9cefe228	302	exit 0
	303	_EOF
	304
	305	## Build postinstall file
	306	echo "Building postinstall file..."
	307	cat > postinstall << _EOF
	308	#! ${SCRIPT_SHELL}
	309	#
	310	[ -f \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_config ] \|\| \\
	311	cp -p \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_config.default \\
	312	\${PKG_INSTALL_ROOT}${sysconfdir}/ssh_config
	313	[ -f \${PKG_INSTALL_ROOT}${sysconfdir}/sshd_config ] \|\| \\
	314	cp -p \${PKG_INSTALL_ROOT}${sysconfdir}/sshd_config.default \\
	315	\${PKG_INSTALL_ROOT}${sysconfdir}/sshd_config
	316	[ -f \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_prng_cmds.default ] && {
	317	[ -f \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_prng_cmds ] \|\| \\
	318	cp -p \${PKG_INSTALL_ROOT}${sysconfdir}/ssh_prng_cmds.default \\
	319	\${PKG_INSTALL_ROOT}${sysconfdir}/ssh_prng_cmds
	320	}
	321
	322	# make rc?.d dirs only if we are doing a test install
29eadd7c	323	[ -n "${TEST_DIR}" ] && [ $DO_SMF -ne 1 ] && {
9cefe228	324	[ "$RCS_D" = yes ] && mkdir -p ${TEST_DIR}/etc/rcS.d
	325	mkdir -p ${TEST_DIR}/etc/rc0.d
	326	[ "$RC1_D" = no ] \|\| mkdir -p ${TEST_DIR}/etc/rc1.d
	327	mkdir -p ${TEST_DIR}/etc/rc2.d
	328	}
	329
29eadd7c	330	if [ $DO_SMF -eq 1 ]
9cefe228	331	then
29eadd7c	332	# Delete the existing service, if it exists, then import the
	333	# new one.
	334	if svcs $OPENSSH_FMRI > /dev/null 2>&1
	335	then
	336	svccfg delete -f $OPENSSH_FMRI
	337	fi
840bd607	338	# NOTE, The manifest disables sshd by default.
840bd607	339	svccfg import ${TEST_DIR}/var/svc/manifest/site/${SYSVINIT_NAME}.xml
9cefe228	340	else
29eadd7c	341	if [ "\${USE_SYM_LINKS}" = yes ]
	342	then
	343	[ "$RCS_D" = yes ] && \
	344	installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rcS.d/${SYSVINITSTOPT}${SYSVINIT_NAME}=../init.d/${SYSVINIT_NAME} s
	345	installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rc0.d/${SYSVINITSTOPT}${SYSVINIT_NAME}=../init.d/${SYSVINIT_NAME} s
	346	[ "$RC1_D" = no ] \|\| \
	347	installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rc1.d/${SYSVINITSTOPT}${SYSVINIT_NAME}=../init.d/${SYSVINIT_NAME} s
	348	installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rc2.d/${SYSVINITSTART}${SYSVINIT_NAME}=../init.d/${SYSVINIT_NAME} s
	349	else
	350	[ "$RCS_D" = yes ] && \
	351	installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rcS.d/${SYSVINITSTOPT}${SYSVINIT_NAME}=\${PKG_INSTALL_ROOT}$TEST_DIR/etc/init.d/${SYSVINIT_NAME} l
	352	installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rc0.d/${SYSVINITSTOPT}${SYSVINIT_NAME}=\${PKG_INSTALL_ROOT}$TEST_DIR/etc/init.d/${SYSVINIT_NAME} l
	353	[ "$RC1_D" = no ] \|\| \
	354	installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rc1.d/${SYSVINITSTOPT}${SYSVINIT_NAME}=\${PKG_INSTALL_ROOT}$TEST_DIR/etc/init.d/${SYSVINIT_NAME} l
	355	installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR/etc/rc2.d/${SYSVINITSTART}${SYSVINIT_NAME}=\${PKG_INSTALL_ROOT}$TEST_DIR/etc/init.d/${SYSVINIT_NAME} l
	356	fi
9cefe228	357	fi
	358
	359	# If piddir doesn't exist we add it. (Ie. --with-pid-dir=/var/opt/ssh)
	360	[ -d $piddir ] \|\| installf ${PKGNAME} \${PKG_INSTALL_ROOT}$TEST_DIR$piddir d 0755 root sys
	361
	362	_EOF
	363
	364	# local postinstall changes here
	365	[ -s "${PKG_POSTINSTALL_LOCAL}" ] && . ${PKG_POSTINSTALL_LOCAL}
	366
	367	cat >> postinstall << _EOF
	368	installf -f ${PKGNAME}
	369
	370	# Use chroot to handle PKG_INSTALL_ROOT
	371	if [ ! -z "\${PKG_INSTALL_ROOT}" ]
	372	then
	373	chroot="chroot \${PKG_INSTALL_ROOT}"
	374	fi
	375	# If this is a test build, we will skip the groupadd/useradd/passwd commands
	376	if [ ! -z "${TEST_DIR}" ]
	377	then
	378	chroot=echo
	379	fi
	380
16082eaa	381	echo "PrivilegeSeparation user always required."
d386a795	382	if cut -f1 -d: \${PKG_INSTALL_ROOT}/etc/passwd \| egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null
	383	then
	384	echo "PrivSep user $SSH_PRIVSEP_USER already exists."
	385	SSH_PRIVSEP_GROUP=\`grep "^$SSH_PRIVSEP_USER:" \${PKG_INSTALL_ROOT}/etc/passwd \| awk -F: '{print \$4}'\`
	386	SSH_PRIVSEP_GROUP=\`grep ":\$SSH_PRIVSEP_GROUP:" \${PKG_INSTALL_ROOT}/etc/group \| awk -F: '{print \$1}'\`
	387	else
	388	DO_PASSWD=yes
	389	fi
	390	[ -z "\$SSH_PRIVSEP_GROUP" ] && SSH_PRIVSEP_GROUP=$SSH_PRIVSEP_USER
	391
	392	# group required?
	393	if cut -f1 -d: \${PKG_INSTALL_ROOT}/etc/group \| egrep '^'\$SSH_PRIVSEP_GROUP'\$' >/dev/null
9cefe228	394	then
d386a795	395	echo "PrivSep group \$SSH_PRIVSEP_GROUP already exists."
9cefe228	396	else
d386a795	397	DO_GROUP=yes
	398	fi
	399
	400	# create group if required
	401	[ "\$DO_GROUP" = yes ] && {
9cefe228	402	# Use gid of 67 if possible
	403	if cut -f3 -d: \${PKG_INSTALL_ROOT}/etc/group \| egrep '^'$SSHDGID'\$' >/dev/null
	404	then
	405	:
	406	else
	407	sshdgid="-g $SSHDGID"
	408	fi
d386a795	409	echo "Creating PrivSep group \$SSH_PRIVSEP_GROUP."
	410	\$chroot ${PATH_GROUPADD_PROG} \$sshdgid \$SSH_PRIVSEP_GROUP
	411	}
9cefe228	412
9cefe228	413	# Create user if required
d386a795	414	[ "\$DO_PASSWD" = yes ] && {
9cefe228	415	# Use uid of 67 if possible
b5c428f0	416	if cut -f3 -d: \${PKG_INSTALL_ROOT}/etc/passwd \| egrep '^'$SSHDUID'\$' >/dev/null
9cefe228	417	then
	418	:
	419	else
	420	sshduid="-u $SSHDUID"
	421	fi
	422	echo "Creating PrivSep user $SSH_PRIVSEP_USER."
	423	\$chroot ${PATH_USERADD_PROG} -c 'SSHD PrivSep User' -s /bin/false -g $SSH_PRIVSEP_USER \$sshduid $SSH_PRIVSEP_USER
	424	\$chroot ${PATH_PASSWD_PROG} -l $SSH_PRIVSEP_USER
d386a795	425	}
9cefe228	426
29eadd7c	427	if [ "\${POST_INS_START}" = "yes" ]
	428	then
	429	if [ $DO_SMF -eq 1 ]
	430	then
29eadd7c	431	svcadm enable $OPENSSH_FMRI
	432	else
	433	${TEST_DIR}/etc/init.d/${SYSVINIT_NAME} start
	434	fi
	435	fi
9cefe228	436	exit 0
	437	_EOF
	438
	439	## Build preremove file
	440	echo "Building preremove file..."
	441	cat > preremove << _EOF
	442	#! ${SCRIPT_SHELL}
	443	#
29eadd7c	444	if [ $DO_SMF -eq 1 ]
	445	then
	446	svcadm disable $OPENSSH_FMRI
	447	else
	448	${TEST_DIR}/etc/init.d/${SYSVINIT_NAME} stop
	449	fi
9cefe228	450	_EOF
	451
	452	# local preremove changes here
	453	[ -s "${PKG_PREREMOVE_LOCAL}" ] && . ${PKG_PREREMOVE_LOCAL}
	454
	455	cat >> preremove << _EOF
	456	exit 0
	457	_EOF
	458
	459	## Build postremove file
	460	echo "Building postremove file..."
	461	cat > postremove << _EOF
	462	#! ${SCRIPT_SHELL}
	463	#
29eadd7c	464	if [ $DO_SMF -eq 1 ]
	465	then
	466	if svcs $OPENSSH_FMRI > /dev/null 2>&1
	467	then
	468	svccfg delete -f $OPENSSH_FMRI
	469	fi
	470	fi
9cefe228	471	_EOF
	472
	473	# local postremove changes here
	474	[ -s "${PKG_POSTREMOVE_LOCAL}" ] && . ${PKG_POSTREMOVE_LOCAL}
	475
	476	cat >> postremove << _EOF
	477	exit 0
	478	_EOF
	479
	480	## Build request file
	481	echo "Building request file..."
	482	cat > request << _EOF
	483	trap 'exit 3' 15
	484
	485	_EOF
	486
	487	[ -x /usr/bin/ckyorn ] \|\| cat >> request << _EOF
	488
	489	ckyorn() {
1f231631	490	# for some strange reason OpenServer5 has no ckyorn
9cefe228	491	# We build a striped down version here
	492
	493	DEFAULT=n
	494	PROMPT="Yes or No [yes,no,?,quit]"
	495	HELP_PROMPT=" Enter y or yes if your answer is yes; n or no if your answer is no."
	496	USAGE="usage: ckyorn [options]
	497	where options may include:
	498	-d default
	499	-h help
	500	-p prompt
	501	"
	502
	503	if [ \$# != 0 ]
	504	then
	505	while getopts d:p:h: c
	506	do
	507	case \$c in
	508	h) HELP_PROMPT="\$OPTARG" ;;
	509	d) DEFAULT=\$OPTARG ;;
	510	p) PROMPT=\$OPTARG ;;
	511	\\?) echo "\$USAGE" 1>&2
	512	exit 1 ;;
	513	esac
	514	done
	515	shift \`expr \$OPTIND - 1\`
	516	fi
	517
	518	while true
	519	do
	520	echo "\${PROMPT}\\c " 1>&2
	521	read key
	522	[ -z "\$key" ] && key=\$DEFAULT
	523	case \$key in
	524	[n,N]\|[n,N][o,O]\|[y,Y]\|[y,Y][e,E][s,S]) echo "\${key}\\c"
	525	exit 0 ;;
	526	\\?) echo \$HELP_PROMPT 1>&2 ;;
	527	q\|quit) echo "q\\c" 1>&2
	528	exit 3 ;;
	529	esac
	530	done
	531
	532	}
	533
	534	_EOF
	535
29eadd7c	536	if [ $DO_SMF -eq 1 ]
	537	then
	538	# This could get hairy, as the running sshd may not be under SMF.
	539	# We'll assume an earlier version of OpenSSH started via SMF.
	540	cat >> request << _EOF
	541	PRE_INS_STOP=no
	542	POST_INS_START=no
	543	# determine if should restart the daemon
	544	if [ -s ${piddir}/sshd.pid ] && \
840bd607	545	/usr/bin/svcs -H $OPENSSH_FMRI 2>&1 \| egrep "^online" > /dev/null 2>&1
29eadd7c	546	then
	547	ans=\`ckyorn -d n \
	548	-p "Should the running sshd daemon be restarted? ${DEF_MSG}"\` \|\| exit \$?
	549	case \$ans in
	550	[y,Y]*) PRE_INS_STOP=yes
	551	POST_INS_START=yes
	552	;;
	553	esac
	554
	555	else
	556
	557	# determine if we should start sshd
	558	ans=\`ckyorn -d n \
	559	-p "Start the sshd daemon after installing this package? ${DEF_MSG}"\` \|\| exit \$?
	560	case \$ans in
	561	[y,Y]*) POST_INS_START=yes ;;
	562	esac
	563	fi
	564
	565	# make parameters available to installation service,
	566	# and so to any other packaging scripts
	567	cat >\$1 <<!
	568	PRE_INS_STOP='\$PRE_INS_STOP'
	569	POST_INS_START='\$POST_INS_START'
	570	!
	571
	572	_EOF
	573	else
	574	cat >> request << _EOF
9cefe228	575	USE_SYM_LINKS=no
	576	PRE_INS_STOP=no
	577	POST_INS_START=no
	578	# Use symbolic links?
	579	ans=\`ckyorn -d n \
	580	-p "Do you want symbolic links for the start/stop scripts? ${DEF_MSG}"\` \|\| exit \$?
	581	case \$ans in
	582	[y,Y]*) USE_SYM_LINKS=yes ;;
	583	esac
	584
	585	# determine if should restart the daemon
	586	if [ -s ${piddir}/sshd.pid -a -f ${TEST_DIR}/etc/init.d/${SYSVINIT_NAME} ]
	587	then
	588	ans=\`ckyorn -d n \
	589	-p "Should the running sshd daemon be restarted? ${DEF_MSG}"\` \|\| exit \$?
	590	case \$ans in
	591	[y,Y]*) PRE_INS_STOP=yes
	592	POST_INS_START=yes
	593	;;
	594	esac
	595
	596	else
	597
	598	# determine if we should start sshd
	599	ans=\`ckyorn -d n \
	600	-p "Start the sshd daemon after installing this package? ${DEF_MSG}"\` \|\| exit \$?
	601	case \$ans in
	602	[y,Y]*) POST_INS_START=yes ;;
	603	esac
	604	fi
	605
	606	# make parameters available to installation service,
	607	# and so to any other packaging scripts
	608	cat >\$1 <<!
	609	USE_SYM_LINKS='\$USE_SYM_LINKS'
	610	PRE_INS_STOP='\$PRE_INS_STOP'
	611	POST_INS_START='\$POST_INS_START'
	612	!
	613
	614	_EOF
29eadd7c	615	fi
9cefe228	616
	617	# local request changes here
	618	[ -s "${PKG_REQUEST_LOCAL}" ] && . ${PKG_REQUEST_LOCAL}
	619
	620	cat >> request << _EOF
	621	exit 0
	622
	623	_EOF
	624
	625	## Next Build our prototype
	626	echo "Building prototype file..."
	627	cat >mk-proto.awk << _EOF
	628	BEGIN { print "i pkginfo"; print "i depend"; \\
	629	print "i preinstall"; print "i postinstall"; \\
	630	print "i preremove"; print "i postremove"; \\
	631	print "i request"; print "i space"; \\
	632	split("$SYSTEM_DIR",sys_files); }
	633	{
	634	for (dir in sys_files) { if ( \$3 != sys_files[dir] )
	635	{ if ( \$1 == "s" )
	636	{ \$5=""; \$6=""; }
	637	else
	638	{ \$5="root"; \$6="sys"; }
	639	}
	640	else
	641	{ \$4="?"; \$5="?"; \$6="?"; break;}
	642	} }
	643	{ print; }
	644	_EOF
	645
	646	find . \| egrep -v "prototype\|pkginfo\|mk-proto.awk" \| sort \| \
b18359f6	647	pkgproto $PROTO_ARGS \| ${AWK} -f mk-proto.awk > prototype
9cefe228	648
	649	# /usr/local is a symlink on some systems
	650	[ "${USR_LOCAL_IS_SYMLINK}" = yes ] && {
	651	grep -v "^d none /usr/local ? ? ?$" prototype > prototype.new
	652	mv prototype.new prototype
	653	}
	654
	655	## Step back a directory and now build the package.
	656	cd ..
	657	# local prototype tweeks here
	658	[ -s "${POST_PROTOTYPE_EDITS}" ] && . ${POST_PROTOTYPE_EDITS}
	659
	660	echo "Building package.."
	661	pkgmk -d ${FAKE_ROOT} -f $FAKE_ROOT/prototype -o
d386a795	662	echo \| pkgtrans -os ${FAKE_ROOT} ${START}/$PKGNAME-$VERSION$REV-$UNAME_S-$ARCH.pkg
9cefe228	663	;;
	664
	665	justpkg.sh)
	666	rm -fr ${FAKE_ROOT}/${PKGNAME}
	667	grep -v "^PSTAMP=" $FAKE_ROOT/pkginfo > $$tmp
	668	mv $$tmp $FAKE_ROOT/pkginfo
	669	cat >> $FAKE_ROOT/pkginfo << _EOF
	670	PSTAMP="${UNAME_S} ${OS_VER} ${ARCH} `date '+%d%b%Y %H:%M'`"
	671	_EOF
	672	pkgmk -d ${FAKE_ROOT} -f $FAKE_ROOT/prototype -o
d386a795	673	echo \| pkgtrans -os ${FAKE_ROOT} ${START}/$PKGNAME-$VERSION$REV-$UNAME_S-$ARCH.pkg
9cefe228	674	;;
	675
	676	esac
	677
	678	[ "${REMOVE_FAKE_ROOT_WHEN_DONE}" = yes ] && rm -rf $FAKE_ROOT
25616c13	679	exit 0
9cefe228	680