#!/bin/bash
# Filename:      ${GRML_FAI_CONFIG}/hooks/instsoft.GRMLBASE
# Purpose:       Grml specific software installation in the chroot, executed after updatebase
# Authors:       grml-team (grml.org), (c) Michael Prokop <mika@grml.org>
# Bug-Reports:   see http://grml.org/bugs/
# License:       This file is licensed under the GPL v2 or any later version.
################################################################################

set -u
set -e

# if hooks/updatebase.GRMLBASE fails for whatever reason
# and can't skip instsoft.GRMLBASE we have to make sure
# we exit here as well
if [ -n "$BUILD_ONLY" ] ; then
   "Exiting hooks/instsoft.GRMLBASE as BUILD_ONLY environment is set."
   exit 0
fi

if [ "$FAI_ACTION" = "softupdate" ] ; then
   echo "Action $FAI_ACTION of FAI (hooks/instsoft.GRMLBASE) via grml-live running"

   if [ -r /etc/resolv.conf ] ; then
     case "$(chroot $target readlink -f /etc/resolv.conf)" in
       /run/*) # resolvconf with /run
         mkdir -p $target/run/resolvconf
         cat /etc/resolv.conf >> $target/run/resolvconf/resolv.conf
         ;;
       /lib/*) # resolvconf without /run
         # sanity check to avoid "input file is output file",
         # see http://bts.grml.org/grml/issue984
         if ! [ -L $target/etc/resolvconf/run/resolv.conf ] ; then
           cat /etc/resolv.conf >> $target/etc/resolvconf/run/resolv.conf
         else
           echo "Error: /etc/resolvconf/run/resolv.conf in chroot should not be a symlink." >&2
           echo "       Looks like something is wrong, please fix manually." >&2
           exit 1
         fi
         ;;
       *) # no resolvconf
         if ! [ -L $target/etc/resolv.conf ] ; then
           cat /etc/resolv.conf >> $target/etc/resolv.conf
         else
           echo "Error: /etc/resolv.conf in chroot should not be a symlink (resolvconf not installed)." >&2
           exit 1
         fi
         ;;
     esac
   fi

   if [ -r $target/etc/policy-rc.d.conf ] ; then
      sed -i "s/EXITSTATUS=.*/EXITSTATUS='101'/" $target/etc/policy-rc.d.conf
   fi

   # we definitely don't want to fail running fai sofupdate just
   # because of some well known bugs:
   [ -d $target/etc/apt/apt.conf.d ] || mkdir $target/etc/apt/apt.conf.d
   cat > $target/etc/apt/apt.conf.d/10apt-listbugs << EOF
// Check all packages whether they has critical bugs before they are installed.
// If you don't like it, comment it out.
//DPkg::Pre-Install-Pkgs {"/usr/sbin/apt-listbugs apt || exit 10"};
//DPkg::Tools::Options::/usr/sbin/apt-listbugs "";
//DPkg::Tools::Options::/usr/sbin/apt-listbugs::Version "2";
EOF

   # work around /etc/kernel/postinst.d/zz-update-grub failing
   # inside openvz environment, see #597084
   if ! $ROOTCMD dpkg-divert --list | grep -q '/usr/sbin/update-grub' ; then
     echo "Diverting update-grub executable"
     $ROOTCMD dpkg-divert --rename --add /usr/sbin/update-grub
     $ROOTCMD ln -s /bin/true /usr/sbin/update-grub
   fi

  # newer aptitude versions won't remove essential packages using
  # 'aptitude -f -y install file-rc' anymore, therefore force it:
  $ROOTCMD aptitude -o Aptitude::ProblemResolver::Keep-All-Tier=60000 -f -y install file-rc

   if ! $ROOTCMD test -x /usr/bin/aptitude ; then
      $ROOTCMD apt-get -y install aptitude
   fi

   # make sure we can upgrade automatically,
   # even with unsigned repos, but only if user wants it
   if [ "${FAI_ALLOW_UNSIGNED:-}" = "1" ] ; then
     APTGET_OPTS="${APTGET_OPTS:-} --allow-unauthenticated"
     APTITUDE_OPTS="${APTITUDE_OPTS:-} --allow-untrusted"
   fi

   if $ROOTCMD test -x /usr/bin/aptitude ; then
      if $ROOTCMD aptitude --help | grep -q safe-upgrade ; then
         APT_LISTCHANGES_FRONTEND=none APT_LISTBUGS_FRONTEND=none $ROOTCMD aptitude -y $APTITUDE_OPTS safe-upgrade
      else
         APT_LISTCHANGES_FRONTEND=none APT_LISTBUGS_FRONTEND=none $ROOTCMD aptitude -y $APTITUDE_OPTS upgrade
      fi
   else
      APT_LISTCHANGES_FRONTEND=none APT_LISTBUGS_FRONTEND=none $ROOTCMD apt-get -y $APTGET_OPTS --force-yes upgrade
   fi

   exit # make sure we don't continue behind the following "fi"
fi

# no softupdate but fresh installation
echo "Action $FAI_ACTION of FAI (hooks/instsoft.GRMLBASE) via grml-live running"

# make sure we have file-rc available before package_config/GRML* is being executed {{{
# the apt-get update might return an error if there's for example
# a hashsum mismatch on Debian mirror sources, we might want to continue
# but should warn the user
if ! $ROOTCMD apt-get update ; then
   echo "Warning: there was an error executing apt-get update, continuing anyway."
   echo "Warning: there was an error executing apt-get update, continuing anyway." >&2
fi

# newer aptitude versions won't remove essential packages using
# 'aptitude -f -y install file-rc' anymore, therefore force it via:
$ROOTCMD aptitude -o Aptitude::ProblemResolver::Keep-All-Tier=60000 -f -y install file-rc
# }}}

# get rid of insserv:
if $ROOTCMD dpkg --list insserv 2>/dev/null | grep -q '^ii' ; then
   $ROOTCMD apt-get -y --purge remove insserv
fi

# we definitely don't want to fail running fai dirinstall just
# because of some well known bugs:
[ -d $target/etc/apt/apt.conf.d ] || mkdir $target/etc/apt/apt.conf.d
cat > $target/etc/apt/apt.conf.d/10apt-listbugs << EOF
// Check all packages whether they has critical bugs before they are installed.
// If you don't like it, comment it out.
//DPkg::Pre-Install-Pkgs {"/usr/sbin/apt-listbugs apt || exit 10"};
//DPkg::Tools::Options::/usr/sbin/apt-listbugs "";
//DPkg::Tools::Options::/usr/sbin/apt-listbugs::Version "2";
EOF

# make sure /dev/MAKEDEV is available:
if [ -x "$target"/sbin/MAKEDEV ] && ! [ -r "$target"/dev/MAKEDEV ] ; then
   ln -s /sbin/MAKEDEV "$target"/dev/MAKEDEV
fi

# we don't need the invoke-rc.d.d diversion (we have grml-policyrcd :)):
if [ -L "$target"/usr/sbin/invoke-rc.d ] ; then
   rm -f "$target"/usr/sbin/invoke-rc.d
   $ROOTCMD dpkg-divert --package fai --rename --remove /usr/sbin/invoke-rc.d
fi

## END OF FILE #################################################################
# vim:ft=sh expandtab ai tw=80 tabstop=4 shiftwidth=2