X-Git-Url: http://git.grml.org/?p=grml-terminalserver.git;a=blobdiff_plain;f=grml-terminalserver;h=82656f229ed6cd2ff9afb8e5d4dbb581c33a12c5;hp=fd4abcb93fd90e2fc626987a8a8cd22ab5a13da6;hb=ab36bc7a5485eb0998fe4112488ce49d4d41035b;hpb=d6caf69056cd373cd88fdb554654d9a346d15a6a diff --git a/grml-terminalserver b/grml-terminalserver index fd4abcb..82656f2 100755 --- a/grml-terminalserver +++ b/grml-terminalserver @@ -1,4 +1,4 @@ -#!/bin/sh +#!/bin/bash # Filename: terminalserver # Purpose: Program to do something # Authors: grml-team (grml.org), (c) Michael Gebetsroither @@ -52,6 +52,7 @@ COMMANDS: SERVICES: tftp Tftp daemon dhcp Dhcp daemon + ipt Iptables setup (snat for clients) nfs All necessary nfs daemons <> ALL services @@ -109,8 +110,12 @@ function stopDhcp { start-stop-daemon --stop --quiet --pidfile "$DHCPD_PID_" rm -f $DHCPD_PID_ - rm -f /var/lib/dhcp3/dhcpd.leases* 2>/dev/null #FIXME - touch /var/lib/dhcp3/dhcpd.leases + # ugly but necessary :-/ + find /var/lib/dhcp* -type f -name dhcpd.leases -delete + local dhcpdir + for dhcpdir in /var/lib/dhcp* ; do + touch ${dhcpdir}/dhcpd.leases + done } function startDhcp @@ -131,11 +136,21 @@ function runDhcp sleep 1 startDhcp } +# }}} +# IPTABLES {{{ function runIptables { - if [ -x /sbin/iptables ] ; then - if [[ "$NAT_INTERFACE_" != "none" ]]; then + if [[ $IPTABLES_SNAT_ != "true" ]]; then + return + fi + startIptables +} + +function startIptables +{ + if [ -x /sbin/iptables ] ; then + if [[ $NAT_INTERFACE_ != "" ]]; then local nat_source_ip_=`netGetIp "$NAT_INTERFACE_" warn` if iptables -t nat -vnL POSTROUTING | grep -q "SNAT.*${NAT_INTERFACE_}.*to:${nat_source_ip_}" ; then @@ -155,9 +170,27 @@ function runIptables echo 1 > /proc/sys/net/ipv4/ip_forward && echo done || echo failed fi fi - else + else warn "iptables executable not avilable" - fi + fi +} + +function stopIptables +{ + if [[ $IPTABLES_SNAT_ != "true" ]]; then + return + fi + if [ -x /sbin/iptables ] ; then + if [[ $NAT_INTERFACE_ != "" ]]; then + local nat_source_ip_=`netGetIp "$NAT_INTERFACE_" warn` + + if iptables -t nat -vnL POSTROUTING | grep -q "SNAT.*${NAT_INTERFACE_}.*to:${nat_source_ip_}" ; then + iptables -t nat -F POSTROUTING &>/dev/null && \ + iptables -t nat -D POSTROUTING -o "$NAT_INTERFACE_" -j SNAT --to-source "$nat_source_ip_" + fi + echo 0 > /proc/sys/net/ipv4/ip_forward + fi + fi } # }}} @@ -173,7 +206,11 @@ function createTftpConf execute "mkdir -p $TFTPD_DATA_DIR_/pxelinux.cfg" die execute "install -m 644 /usr/lib/syslinux/pxelinux.0 $TFTPD_DATA_DIR_" die execute "install -m 644 $PATH_/minirt26.gz $TFTPD_DATA_DIR_" die - execute "install -m 644 $KERNEL_IMAGE_ $TFTPD_DATA_DIR_/linux26" die + if [ -d "$MOUNT_POINT_"/boot/release ] ; then + cp -r "$MOUNT_POINT_"/boot/release "$TFTPD_DATA_DIR_" + else + execute "install -m 644 $KERNEL_IMAGE_ $TFTPD_DATA_DIR_/linux26" die + fi execute "install -m 644 $MEMTEST_IMAGE_ $TFTPD_DATA_DIR_/memtest" die execute "install -m 644 $PXE_BOOT_MSG_ $TFTPD_DATA_DIR_" die execute "install -m 644 $PXE_BOOT_LOGO_ $TFTPD_DATA_DIR_" die @@ -217,6 +254,7 @@ function startNfs /etc/init.d/nfs-common start # FIXME /etc/init.d/nfs-kernel-server start $USR_SHARE_/nfs-kernel-server start + echo createNfsConfig } @@ -254,16 +292,17 @@ function actionStart echo -n "Starting dhcpd: " runDhcp && echo done || echo failed - #runIptables + runIptables echo "Finally starting nfs services..." - startNfs && echo "Sucessfully finished startup of grml-terminalserver." || echo 'Startup of grml-terminalserver-config failed!' + startNfs && echo "Successfully finished startup of grml-terminalserver." || echo 'Startup of grml-terminalserver failed!' } function actionStop { stopTftp stopDhcp + stopIptables stopNfs notice "Terminal-server stopped" } @@ -298,6 +337,7 @@ function serviceStart "") actionStart ;; tftp) runTftp ;; dhcp) runDhcp ;; + ipt) startIptables ;; nfs) startNfs ;; *) warn "Service $service_ not available" ;; esac @@ -311,6 +351,7 @@ function serviceStop "") actionStop ;; tftp) stopTftp ;; dhcp) stopDhcp ;; + ipt) stopIptables ;; nfs) stopNfs ;; *) warn "Service $service_ not available" ;; esac