usr/src/cmd/svc/milestone/manifest-import

   1 #!/bin/ksh
   2 #
   3 # CDDL HEADER START
   4 #
   5 # The contents of this file are subject to the terms of the
   6 # Common Development and Distribution License (the "License").
   7 # You may not use this file except in compliance with the License.
   8 #
   9 # You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
  10 # or http://www.opensolaris.org/os/licensing.
  11 # See the License for the specific language governing permissions
  12 # and limitations under the License.
  13 #
  14 # When distributing Covered Code, include this CDDL HEADER in each
  15 # file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  16 # If applicable, add the following below this CDDL HEADER, with the
  17 # fields enclosed by brackets "[]" replaced with your own identifying
  18 # information: Portions Copyright [yyyy] [name of copyright owner]
  19 #
  20 # CDDL HEADER END
  21 #
  22 # Copyright (c) 2004, 2010, Oracle and/or its affiliates. All rights reserved.
  23 # Copyright 2017 RackTop Systems.
  24 #
  25
  26 # 0a  Initialization.
  27
  28 [ -f /lib/svc/share/smf_include.sh ] || exit 1
  29
  30 . /lib/svc/share/smf_include.sh
  31
  32 activity=false
  33
  34 EMI_SERVICE="svc:/system/early-manifest-import:default"
  35 PROFILE_DIR_SITE="/etc/svc/profile/site"
  36
  37 X=
  38 ALT_REPOSITORY=
  39 ALT_MFST_DIR=
  40 early=false
  41 [ "$SMF_FMRI" == "$EMI_SERVICE" ] && early=true
  42
  43 usage()
  44 {
  45         echo "Usage: /lib/svc/method/manifest-import [-n]" \
  46             "[-f repository-file -d manifest-directory]"
  47         echo "\nOptions:"
  48         echo "-n dryrun"
  49         echo "-f and -d specify alternate repository and" \
  50             "manifest directory for import\n"
  51         exit 2
  52 }
  53
  54 while getopts "nd:f:" opt; do
  55         case $opt in
  56                 n)      X=echo;;
  57                 d)      ALT_MFST_DIR=$OPTARG;;
  58                 f)      ALT_REPOSITORY=$OPTARG;;
  59                 ?)      usage;;
  60         esac
  61 done
  62
  63 #
  64 # Both -f and -d options must be specified together or not specified at all
  65 #
  66 [ -n "$ALT_REPOSITORY" -a -z "$ALT_MFST_DIR" ] && usage
  67 [ -n "$ALT_MFST_DIR" -a -z "$ALT_REPOSITORY" ] && usage
  68
  69 function svccfg_apply {
  70         $X /usr/sbin/svccfg apply $1
  71         if [ $? -ne 0 ]; then
  72                 echo "WARNING: svccfg apply $1 failed" | tee /dev/msglog
  73         fi
  74 }
  75
  76 #
  77 # If the smf repository has file entries that are missing
  78 # then there is work to be done by the cleanup process.
  79 #
  80 function cleanup_needwork {
  81         smfmfiles=`svcprop -p manifestfiles '*' 2>/dev/null |
  82             nawk -v early="$early" '$2 == "astring" &&
  83             (early != "true" || $3 ~ "^/lib/") { print $3 }'`
  84
  85         nw=`/lib/svc/bin/mfstscan $smfmfiles 2>&1 1>/dev/null`
  86         [ "$nw" ] && return 1
  87
  88         return 0
  89 }
  90
  91 #
  92 # Upon upgrading to early manifest import code, preserve hashes of system
  93 # profiles which lived under /var/svc/profile so that svccfg apply would
  94 # not re-apply the profiles and overwrite user customizations. Simply
  95 # migrate manifestfile and hash values to new property groups named after
  96 # profiles under /etc/svc/profile. If the profiles don't really exist,
  97 # svccfg cleanup will remove the property groups in a later step.
  98 #
  99 # Existing generic.xml, inetd_services.xml, and name_service.xml symlinks
 100 # need to be preserved.
 101 #
 102 # Don't process site.xml profile since it is still supported under
 103 # /var/svc/profile directory.
 104 #
 105 function preserve_system_profiles {
 106
 107         #
 108         # If /var is a separate fs, return and let Late Import
 109         # preserves the hashes.
 110         #
 111         [ -d "/var/svc/profile" ] || return 1
 112
 113         #
 114         # Preserve hashes for the following profiles: generic (two
 115         # cases) and platform (uname -i, uname -m outputs).
 116         #
 117         gn="var_svc_profile_generic_open_xml"
 118         gh=`/usr/bin/svcprop -p ${gn}/md5sum smf/manifest 2>/dev/null`
 119         [ $? = 0 ] || gh=""
 120         gn="etc_svc_profile_generic_open_xml"
 121
 122         gln="var_svc_profile_generic_limited_net_xml"
 123         glh=`/usr/bin/svcprop -p ${gln}/md5sum smf/manifest 2>/dev/null`
 124         [ $? = 0 ] || glh=""
 125         gln="etc_svc_profile_generic_limited_net_xml"
 126
 127         LC_ALL=C pl=`/usr/bin/uname -i | /usr/bin/tr , _`
 128         pln="var_svc_profile_platform_${pl}_xml"
 129         plh=`/usr/bin/svcprop -p ${pln}/md5sum smf/manifest 2>/dev/null`
 130         [ $? = 0 ] || plh=""
 131         pln="etc_svc_profile_platform_${pl}_xml"
 132
 133         LC_ALL=C plm=`/usr/bin/uname -m | /usr/bin/tr , _`
 134         if [ $plm != $pl ]; then
 135                 plmn="var_svc_profile_platform_${plm}_xml"
 136                 plmh=`/usr/bin/svcprop -p ${plmn}/md5sum smf/manifest \
 137                     2>/dev/null`
 138                 [ $? = 0 ] || plmh=""
 139                 plmn="etc_svc_profile_platform_${plm}_xml"
 140         else
 141                 plmh=""
 142         fi
 143
 144         [ -n "$gh" ] && {
 145                 echo "Preserving generic hash ($gh)."
 146                 /usr/sbin/svccfg -s smf/manifest addpg ${gn} framework
 147                 /usr/sbin/svccfg -s smf/manifest setprop ${gn}/md5sum = \
 148                     opaque: $gh
 149                 /usr/sbin/svccfg -s smf/manifest setprop ${gn}/manifestfile = \
 150                     astring: "/etc/svc/profile/generic.xml"
 151         }
 152         [ -n "$glh" ] && {
 153                 echo "Preserving generic_limited hash ($glh)."
 154                 /usr/sbin/svccfg -s smf/manifest addpg ${gln} framework
 155                 /usr/sbin/svccfg -s smf/manifest setprop ${gln}/md5sum = \
 156                     opaque: $glh
 157                 /usr/sbin/svccfg -s smf/manifest setprop ${gln}/manifestfile = \
 158                     astring: "/etc/svc/profile/generic.xml"
 159         }
 160         [ -n "$plh" ] && {
 161                 echo "Preserving platform hash ($plh)."
 162                 /usr/sbin/svccfg -s smf/manifest addpg $pln framework
 163                 /usr/sbin/svccfg -s smf/manifest setprop $pln/md5sum = \
 164                     opaque: $plh
 165                 /usr/sbin/svccfg -s smf/manifest setprop ${pln}/manifestfile = \
 166                     astring: "/etc/svc/profile/platform_${pl}_xml"
 167         }
 168         [ -n "$plmh" ] && {
 169                 echo "Preserving platform hash ($plmh)."
 170                 /usr/sbin/svccfg -s smf/manifest addpg $plmn framework
 171                 /usr/sbin/svccfg -s smf/manifest setprop $plmn/md5sum = \
 172                     opaque: $plmh
 173                 /usr/sbin/svccfg -s smf/manifest setprop \
 174                     ${plmn}/manifestfile = \
 175                     astring: "/etc/svc/profile/platform_${plm}_xml"
 176         }
 177
 178         #
 179         # Move symlinks from /var/svc/profile to /etc/svc/profile
 180         #
 181         generic_prof="/var/svc/profile/generic.xml"
 182         ns_prof="/var/svc/profile/name_service.xml"
 183         inetd_prof="/var/svc/profile/inetd_services.xml"
 184         platform_prof="/var/svc/profile/platform.xml"
 185         [ -L "$generic_prof" ] && mv $generic_prof /etc/svc/profile/
 186         [ -L "$ns_prof" ] && mv $ns_prof /etc/svc/profile/
 187         [ -L "$inetd_prof" ] && mv $inetd_prof /etc/svc/profile/
 188         [ -L "$platform_prof" ] && mv $platform_prof /etc/svc/profile/
 189
 190         return 0
 191 }
 192
 193 #
 194 # 2.  Manifest import.  Application directories first, then
 195 # site-specific manifests.
 196 #
 197 function import_manifests {
 198         typeset basedir=$1
 199         typeset console_print=$2
 200         typeset logf="/etc/svc/volatile/manifest_import.$$"
 201
 202         rm -f $logf
 203
 204         nonsite_dirs=`/usr/bin/find $basedir/* -name site \
 205             -prune -o -type d -print -prune`
 206
 207         if [ -n "$_MFST_DEBUG" ]; then
 208                 nonsite_manifests=`/lib/svc/bin/mfstscan $nonsite_dirs`
 209                 site_manifests=`/lib/svc/bin/mfstscan $basedir/site`
 210
 211                 manifests="$nonsite_manifests $site_manifests"
 212
 213                 echo "Changed manifests to import:"
 214                 for m in $manifests; do echo "  $m"; done
 215         fi
 216
 217         #
 218         # Upon boot, attempt to move the repository to tmpfs.
 219         #
 220         if [ -z "$ALT_REPOSITORY" -a -z "$ALT_MFST_DIR" ]; then
 221                 /usr/sbin/svcadm _smf_repository_switch fast
 222         fi
 223
 224         #
 225         # Import the manifests while giving a running display of imports on
 226         # console, and a final count in the logfile.
 227         #
 228         dirs="$nonsite_dirs"
 229         [ -d "$basedir/site" ] && dirs="$dirs $basedir/site"
 230
 231         if [ "$console_print" = "true" ]; then
 232                 $X /usr/sbin/svccfg import -p /dev/msglog $dirs > $logf 2>&1
 233         else
 234                 $X /usr/sbin/svccfg import $dirs > $logf 2>&1
 235         fi
 236
 237         grep "Loaded .*. smf(5) service descriptions" $logf > /dev/null 2>&1
 238         if [ $? -eq 0 ]; then
 239                 activity=true
 240         fi
 241
 242         if [ -s $logf ]; then
 243                 grep "smf(5) service descriptions failed to load" $logf > /dev/null 2>&1
 244                 failures=$?
 245                 if [ $failures -eq 0 ]; then
 246                         echo "svccfg warnings:"
 247                 fi
 248                 cat $logf
 249
 250                 if [ $failures -eq 0 -a "$console_print" = "true" ]; then
 251                         msg="svccfg import warnings.  See"
 252                         msg="$msg /var/svc/log/system-manifest-import:default.log ."
 253                         echo $msg > /dev/msglog
 254                 fi
 255         fi
 256         rm -f $logf
 257 }
 258
 259 #
 260 # 3.  Profile application.  We must create the platform profile upon
 261 # first boot, as we may be a diskless client of a platform or
 262 # architecture distinct from our NFS server.
 263 #
 264 # Generic and platform profiles are only supported in /etc.
 265 #
 266 function apply_profile {
 267         #
 268         # If smf/manifest doesn't have any profile under /etc/var/profile,
 269         # this is very likely an import after upgrade so call
 270         # preserve_system_profiles in that case.
 271         #
 272         LC_ALL=C pl=`/usr/bin/uname -i | /usr/bin/tr , _`
 273         pln="etc_svc_profile_platform_${pl}_xml"
 274
 275         LC_ALL=C plm=`/usr/bin/uname -m | /usr/bin/tr , _`
 276         [ $plm != $pl ] && plmn="etc_svc_profile_platform_${plm}_xml"
 277
 278         preserve_profiles=1
 279         for prof in $pln $plmn etc_svc_profile_platform_none_xml \
 280             etc_svc_profile_generic_limited_net_xml \
 281             etc_svc_profile_generic_open_xml; do
 282                 if /usr/bin/svcprop -p $prof smf/manifest >/dev/null 2>&1
 283                 then
 284                         preserve_profiles=0
 285                         break
 286                 fi
 287         done
 288
 289         if [ $preserve_profiles -eq 1 ]; then
 290                 echo "/etc/svc system profiles not found: upgrade system profiles"
 291                 preserve_system_profiles || return
 292         fi
 293
 294         typeset prefix="/etc/svc/profile"
 295         svccfg_apply $prefix/generic.xml
 296         if [ ! -f $prefix/platform.xml ]; then
 297                 this_karch=`uname -m`
 298                 this_plat=`uname -i`
 299
 300                 if [ -f $prefix/platform_$this_plat.xml ]; then
 301                         platform_profile=platform_$this_plat.xml
 302                 elif [ -f $prefix/platform_$this_karch.xml ]; then
 303                         platform_profile=platform_$this_karch.xml
 304                 else
 305                         platform_profile=platform_none.xml
 306                 fi
 307
 308                 ln -s $platform_profile $prefix/platform.xml
 309         fi
 310
 311         svccfg_apply $prefix/platform.xml
 312 }
 313
 314 #
 315 # 4.  Upgrade handling.  The upgrade file generally consists of a series
 316 # of svcadm(1M) and svccfg(1M) commands.
 317 #
 318 function handle_upgrade {
 319
 320         [ -f /var/svc/profile/upgrade ] && activity=true
 321
 322         (
 323                 unset SVCCFG_CHECKHASH
 324
 325                 if [ -f /var/svc/profile/upgrade ]; then
 326                         . /var/svc/profile/upgrade
 327
 328                         /usr/bin/mv /var/svc/profile/upgrade \
 329                             /var/svc/profile/upgrade.app.`date +\%Y\%m\%d\%H\%M\%S`
 330                 fi
 331
 332                 #
 333                 # Rename the datalink upgrade script file. This script is used in the
 334                 # network/physical service to upgrade datalink configuration, but
 335                 # the file cannot be renamed until now (when the file system becomes
 336                 # read-write).
 337                 #
 338                 datalink_script=/var/svc/profile/upgrade_datalink
 339                 if [ -f "${datalink_script}" ]; then
 340                         /usr/bin/mv "${datalink_script}" \
 341                             "${datalink_script}".app.`date +\%Y\%m\%d\%H\%M\%S`
 342                 fi
 343         )
 344 }
 345
 346 #
 347 # 5.  Giving administrator the final say, apply site.xml profile and profiles
 348 #     under /etc/svc/profile/site directory.
 349 #
 350 function apply_site_profile {
 351         typeset prefix="$1"
 352         [ -f $prefix/site.xml ] && svccfg_apply $prefix/site.xml
 353
 354         if [ -d $PROFILE_DIR_SITE -a "$1" = "/etc/svc/profile" ]; then
 355                 svccfg_apply $PROFILE_DIR_SITE
 356         fi
 357 }
 358
 359 #
 360 # 0b Cleanup deathrow
 361 #
 362 if [ "$early" = "false" ];then
 363         deathrow=/etc/svc/deathrow
 364         if [ -s $deathrow ];then
 365                 #
 366                 # svc.startd has unconfigured the services found in deathrow,
 367                 # clean them now.
 368                 #
 369                 while read fmri mfst pkgname; do
 370                         # Delete services and instances from the deathrow file.
 371                         /usr/sbin/svccfg delete -f $fmri >/dev/null 2>&1
 372                         # Remove deathrow manifest hash.
 373                         /usr/sbin/svccfg delhash -d $mfst >/dev/null 2>&1
 374                 done < $deathrow
 375                 /usr/bin/mv $deathrow $deathrow.old
 376         fi
 377 fi
 378
 379 SVCCFG_CHECKHASH=1 export SVCCFG_CHECKHASH
 380
 381 #
 382 # 0c Clean up repository
 383 #
 384 if [ "$early" = "false" ]; then
 385         if [ -z "$X" ] && /usr/bin/svcprop smf/manifest 2>/dev/null |
 386             /usr/bin/grep '^ar_svc_[^/]*/md5sum opaque ' >/dev/null
 387         then
 388                 set -- `
 389                         /usr/bin/svcprop smf/manifest 2>/dev/null |
 390                             /usr/bin/grep '^ar_svc[^/]*/md5sum opaque ' |
 391                             /usr/bin/tr '/' ' ' |
 392                             while read pg prop type value; do
 393                                 echo "$pg/$value"
 394                         done
 395                 `
 396                 backup=`echo "$#/$#" | sed 's/./\b/g'`
 397                 fwidth=`echo "$#\c" | wc -c`
 398
 399                 echo "Converting obsolete repository entries: \c" > /dev/msglog
 400                 i=1; n=$#
 401                 while [ $# -gt 0 ]; do
 402                         printf "%${fwidth}s/%${fwidth}s" $i $n > /dev/msglog
 403                         echo $1 | sed 's:/: :' | (
 404                                 read pg value
 405
 406                                 (echo "select /smf/manifest"; echo "delpg v$pg") |
 407                                     /usr/sbin/svccfg 2>/dev/null >/dev/null
 408                                 (echo "select /smf/manifest"; echo "delpg $pg") |
 409                                     /usr/sbin/svccfg 2>/dev/null >/dev/null
 410                                 (echo "select /smf/manifest";
 411                                     echo "addpg v$pg framework") |
 412                                     /usr/sbin/svccfg 2>/dev/null >/dev/null
 413                                 (echo "select /smf/manifest";
 414                                     echo "setprop v$pg/md5sum = opaque: $value") |
 415                                     /usr/sbin/svccfg 2>/dev/null >/dev/null
 416                         )
 417                         i=`expr $i + 1`
 418                         shift
 419                         echo "$backup\c" > /dev/msglog
 420                 done
 421                 echo > /dev/msglog
 422                 echo "Converted $n obsolete repository entries"
 423                 activity=true
 424         fi
 425
 426 fi
 427
 428 #
 429 # If the alternate repository and directory are specified, simply set
 430 # SVCCFG_REPOSITORY env, run svccfg import on the given directory, and
 431 # exit.
 432 #
 433 if [ -n "$ALT_REPOSITORY" -a -n "$ALT_MFST_DIR" ]; then
 434         SVCCFG_REPOSITORY=$ALT_REPOSITORY export SVCCFG_REPOSITORY
 435         import_manifests "$ALT_MFST_DIR" false
 436         unset SVCCFG_REPOSITORY
 437         exit 0
 438 fi
 439
 440 #
 441 # Call import and apply profiles here
 442 #
 443 if [ "$early" = "true" ]; then
 444         import_manifests "/lib/svc/manifest" true
 445         apply_profile
 446         apply_site_profile "/etc/svc/profile"
 447 else
 448         #
 449         # Process both /lib/svc/manifest and /var/svc/manifest
 450         # during late manifest-import
 451         #
 452         # First import the manifests
 453         #
 454         import_manifests "/lib/svc/manifest" true
 455         import_manifests "/var/svc/manifest" true
 456
 457         #
 458         # Apply profiles
 459         #
 460         apply_profile
 461         apply_site_profile "/etc/svc/profile"
 462
 463         #
 464         # Run the upgrade script
 465         #
 466         handle_upgrade
 467         apply_site_profile "/var/svc/profile"
 468 fi
 469
 470
 471 #
 472 # 6.  Final actions.
 473 #
 474
 475 if $activity; then
 476         /usr/sbin/svcadm _smf_backup "manifest_import" || true
 477 fi
 478
 479 #
 480 # If the filesystem is NOT read only then move the repo back to perm
 481 # There is no care wether the switch was made or not, but just want
 482 # to move it.  If it is already perm this does not affect anything
 483 # at least on the surface.  REALLY want to improve on this...
 484 #
 485 touch /etc/svc/smf_rwtest.$$ > /dev/null 2>&1
 486 if [ $? -eq 0 ]; then
 487         rm -f /etc/svc/smf_rwtest.$$
 488         /usr/sbin/svcadm _smf_repository_switch perm || { \
 489             echo "Repository switch back operation failed, \c"
 490             echo "please check the system log for the"
 491             echo "possible fatal error messages."
 492             exit $SMF_EXIT_ERR_FATAL
 493             }
 494 fi
 495
 496 if $activity; then
 497         /usr/sbin/svccfg cleanup | /usr/bin/tee /dev/msglog
 498 else
 499         cleanup_needwork
 500         if [ $? -ne 0 ]; then
 501                 /usr/sbin/svccfg cleanup -a | /usr/bin/tee /dev/msglog
 502         fi
 503 fi
 504
 505 exit 0