X-Git-Url: https://git.grml.org/?p=grml-live.git;a=blobdiff_plain;f=etc%2Fgrml%2Ffai%2Fconfig%2Fhooks%2Finstsoft.GRMLBASE;h=e5e680038c255aa1f50c4a8014644101d9b22cdd;hp=5556f7c4cf5df80540159cb40e310a2e19b49eff;hb=6d5124d02e3912ac0ca53c0f0af92ef9ebceae23;hpb=4b8512a32a394720eb1f84bd31cddd98a68a1f21 diff --git a/etc/grml/fai/config/hooks/instsoft.GRMLBASE b/etc/grml/fai/config/hooks/instsoft.GRMLBASE index 5556f7c..e5e6800 100755 --- a/etc/grml/fai/config/hooks/instsoft.GRMLBASE +++ b/etc/grml/fai/config/hooks/instsoft.GRMLBASE @@ -1,28 +1,135 @@ -#!/bin/sh -# Filename: /etc/grml/fai/config/hooks/instsoft.GRML -# Purpose: grml specific Debian installation in the chroot +#!/bin/bash +# Filename: ${GRML_FAI_CONFIG}/hooks/instsoft.GRMLBASE +# Purpose: Grml specific software installation in the chroot, executed after updatebase # Authors: grml-team (grml.org), (c) Michael Prokop # Bug-Reports: see http://grml.org/bugs/ # License: This file is licensed under the GPL v2 or any later version. -# Latest change: Sat Oct 06 00:55:29 CEST 2007 [mika] ################################################################################ set -u set -e -# work around http://trac.lighttpd.net/trac/ticket/657 -# should be removed later on: -# echo "Acquire::http::Pipeline-Depth "0";" >> $target/etc/apt/apt.conf +# if hooks/updatebase.GRMLBASE fails for whatever reason +# and can't skip instsoft.GRMLBASE we have to make sure +# we exit here as well +if [ -n "$BUILD_ONLY" ] ; then + "Exiting hooks/instsoft.GRMLBASE as BUILD_ONLY environment is set." + exit 0 +fi + +if [ "$FAI_ACTION" = "softupdate" ] ; then + echo "Action $FAI_ACTION of FAI (hooks/instsoft.GRMLBASE) via grml-live running" + + if [ -r /etc/resolv.conf ] ; then + if [ -d $target/etc/resolvconf/run ] ; then # resolvconf without /run + # sanity check to avoid "input file is output file", + # see http://bts.grml.org/grml/issue984 + if ! [ -L $target/etc/resolvconf/run/resolv.conf ] ; then + cat /etc/resolv.conf >> $target/etc/resolvconf/run/resolv.conf + else + echo "Error: /etc/resolvconf/run/resolv.conf in chroot should not be a symlink." >&2 + echo " Looks like something is wrong, please fix manually." >&2 + exit 1 + fi + elif [ -L $target/etc/resolvconf/run ] ; then # resolvconf with /run + # /etc/resolvconf/run symlinks to /run/resolvconf + mkdir -p $target/run/resolvconf + cat /etc/resolv.conf >> $target/run/resolvconf/resolv.conf + else # no resolvconf installed in chroot + if ! [ -L $target/etc/resolv.conf ] ; then + cat /etc/resolv.conf >> $target/etc/resolv.conf + else + echo "Error: /etc/resolv.conf in chroot should not be a symlink (resolvconf not installed)." >&2 + exit 1 + fi + fi + fi + + if [ -r $target/etc/policy-rc.d.conf ] ; then + sed -i "s/EXITSTATUS=.*/EXITSTATUS='101'/" $target/etc/policy-rc.d.conf + fi + + # we definitely don't want to fail running fai sofupdate just + # because of some well known bugs: + [ -d $target/etc/apt/apt.conf.d ] || mkdir $target/etc/apt/apt.conf.d + cat > $target/etc/apt/apt.conf.d/10apt-listbugs << EOF +// Check all packages whether they has critical bugs before they are installed. +// If you don't like it, comment it out. +//DPkg::Pre-Install-Pkgs {"/usr/sbin/apt-listbugs apt || exit 10"}; +//DPkg::Tools::Options::/usr/sbin/apt-listbugs ""; +//DPkg::Tools::Options::/usr/sbin/apt-listbugs::Version "2"; +EOF + + # run it on our own, as updatebase is used at the wrong stage for our needs, + # see ${GRML_FAI_CONFIG}/hooks/updatebase.GRMLBASE + # the apt-get update might return an error if there's for example + # a hashsum mismatch on Debian mirror sources, we might want to continue + # but should warn the user + if ! $ROOTCMD apt-get update ; then + echo "Warning: there was an error executing apt-get update, continuing anyway." + fi + + # work around /etc/kernel/postinst.d/zz-update-grub failing + # inside openvz environment, see #597084 + if ! $ROOTCMD dpkg-divert --list | grep -q '/usr/sbin/update-grub' ; then + echo "Diverting update-grub executable" + $ROOTCMD dpkg-divert --rename --add /usr/sbin/update-grub + $ROOTCMD ln -s /bin/true /usr/sbin/update-grub + fi + + # newer aptitude versions won't remove essential packages using + # 'aptitude -f -y install file-rc' anymore, therefore force it: + $ROOTCMD aptitude -o Aptitude::ProblemResolver::Keep-All-Tier=60000 -f -y install file-rc + + if ! $ROOTCMD test -x /usr/bin/aptitude ; then + $ROOTCMD apt-get -y install aptitude + fi -# install grml keys: -gpg --keyserver subkeys.pgp.net --recv-keys F61E2E7CECDEA787 -gpg --export F61E2E7CECDEA787 > $target/etc/apt/grml.key -$ROOTCMD apt-key add /etc/apt/grml.key + if $ROOTCMD test -x /usr/bin/aptitude ; then + if $ROOTCMD aptitude --help | grep -q safe-upgrade ; then + APT_LISTCHANGES_FRONTEND=none APT_LISTBUGS_FRONTEND=none $ROOTCMD aptitude -y safe-upgrade + else + APT_LISTCHANGES_FRONTEND=none APT_LISTBUGS_FRONTEND=none $ROOTCMD aptitude -y upgrade + fi + else + APT_LISTCHANGES_FRONTEND=none APT_LISTBUGS_FRONTEND=none $ROOTCMD apt-get -y upgrade + fi + + exit # make sure we don't continue behind the following "fi" +fi + +# no softupdate but fresh installation +echo "Action $FAI_ACTION of FAI (hooks/instsoft.GRMLBASE) via grml-live running" + +# make sure we have file-rc available before package_config/GRML* is being executed {{{ +# the apt-get update might return an error if there's for example +# a hashsum mismatch on Debian mirror sources, we might want to continue +# but should warn the user +if ! $ROOTCMD apt-get update ; then + echo "Warning: there was an error executing apt-get update, continuing anyway." + echo "Warning: there was an error executing apt-get update, continuing anyway." >&2 +fi + +# newer aptitude versions won't remove essential packages using +# 'aptitude -f -y install file-rc' anymore, therefore force it via: +$ROOTCMD aptitude -o Aptitude::ProblemResolver::Keep-All-Tier=60000 -f -y install file-rc +# }}} + +# get rid of insserv: +if $ROOTCMD dpkg --list insserv 2>/dev/null | grep -q '^ii' ; then + $ROOTCMD apt-get -y --purge remove insserv +fi -# make sure we have file-rc available before -# package_config/GRML is being executed: -$ROOTCMD apt-get update -$ROOTCMD aptitude -f -y install file-rc +# we definitely don't want to fail running fai dirinstall just +# because of some well known bugs: +[ -d $target/etc/apt/apt.conf.d ] || mkdir $target/etc/apt/apt.conf.d +cat > $target/etc/apt/apt.conf.d/10apt-listbugs << EOF +// Check all packages whether they has critical bugs before they are installed. +// If you don't like it, comment it out. +//DPkg::Pre-Install-Pkgs {"/usr/sbin/apt-listbugs apt || exit 10"}; +//DPkg::Tools::Options::/usr/sbin/apt-listbugs ""; +//DPkg::Tools::Options::/usr/sbin/apt-listbugs::Version "2"; +EOF # make sure /dev/MAKEDEV is available: if [ -x "$target"/sbin/MAKEDEV ] && ! [ -r "$target"/dev/MAKEDEV ] ; then @@ -36,4 +143,4 @@ if [ -L "$target"/usr/sbin/invoke-rc.d ] ; then fi ## END OF FILE ################################################################# -# vim:ft=sh expandtab ai tw=80 tabstop=4 shiftwidth=3 +# vim:ft=sh expandtab ai tw=80 tabstop=4 shiftwidth=2