1180740Sdes#!/bin/sh 2180740Sdes# 3180740Sdes# buildbff.sh: Create AIX SMIT-installable OpenSSH packages 4225825Sdes# $Id: buildbff.sh,v 1.13 2011/05/05 03:48:41 djm Exp $ 5180740Sdes# 6180740Sdes# Author: Darren Tucker (dtucker at zip dot com dot au) 7180740Sdes# This file is placed in the public domain and comes with absolutely 8180740Sdes# no warranty. 9180740Sdes# 10180740Sdes# Based originally on Ben Lindstrom's buildpkg.sh for Solaris 11180740Sdes# 12180740Sdes 13180740Sdes# 14180740Sdes# Tunable configuration settings 15180740Sdes# create a "config.local" in your build directory or set 16180740Sdes# environment variables to override these. 17180740Sdes# 18180740Sdes[ -z "$PERMIT_ROOT_LOGIN" ] && PERMIT_ROOT_LOGIN=no 19180740Sdes[ -z "$X11_FORWARDING" ] && X11_FORWARDING=no 20180740Sdes[ -z "$AIX_SRC" ] && AIX_SRC=no 21180740Sdes 22180740Sdesumask 022 23180740Sdes 24180740Sdesstartdir=`pwd` 25180740Sdes 26180740Sdesperl -v >/dev/null || (echo perl required; exit 1) 27180740Sdes 28180740Sdes# Path to inventory.sh: same place as buildbff.sh 29180740Sdesif echo $0 | egrep '^/' 30180740Sdesthen 31180740Sdes inventory=`dirname $0`/inventory.sh # absolute path 32180740Sdeselse 33180740Sdes inventory=`pwd`/`dirname $0`/inventory.sh # relative path 34180740Sdesfi 35180740Sdes 36180740Sdes# 37180740Sdes# We still support running from contrib/aix, but this is deprecated 38180740Sdes# 39180740Sdesif pwd | egrep 'contrib/aix$' 40180740Sdesthen 41180740Sdes echo "Changing directory to `pwd`/../.." 42180740Sdes echo "Please run buildbff.sh from your build directory in future." 43180740Sdes cd ../.. 44180740Sdes contribaix=1 45180740Sdesfi 46180740Sdes 47180740Sdesif [ ! -f Makefile ] 48180740Sdesthen 49180740Sdes echo "Makefile not found (did you run configure?)" 50180740Sdes exit 1 51180740Sdesfi 52180740Sdes 53180740Sdes# 54180740Sdes# Directories used during build: 55180740Sdes# current dir = $objdir directory you ran ./configure in. 56180740Sdes# $objdir/$PKGDIR/ directory package files are constructed in 57180740Sdes# $objdir/$PKGDIR/root/ package root ($FAKE_ROOT) 58180740Sdes# 59180740Sdesobjdir=`pwd` 60180740SdesPKGNAME=openssh 61180740SdesPKGDIR=package 62180740Sdes 63180740Sdes# 64180740Sdes# Collect local configuration settings to override defaults 65180740Sdes# 66180740Sdesif [ -s ./config.local ] 67180740Sdesthen 68180740Sdes echo Reading local settings from config.local 69180740Sdes . ./config.local 70180740Sdesfi 71180740Sdes 72180740Sdes# 73180740Sdes# Fill in some details from Makefile, like prefix and sysconfdir 74180740Sdes# the eval also expands variables like sysconfdir=${prefix}/etc 75180740Sdes# provided they are eval'ed in the correct order 76180740Sdes# 77180740Sdesfor confvar in prefix exec_prefix bindir sbindir libexecdir datadir mandir mansubdir sysconfdir piddir srcdir 78180740Sdesdo 79180740Sdes eval $confvar=`grep "^$confvar=" $objdir/Makefile | cut -d = -f 2` 80180740Sdesdone 81180740Sdes 82180740Sdes# 83180740Sdes# Collect values of privsep user and privsep path 84180740Sdes# currently only found in config.h 85180740Sdes# 86180740Sdesfor confvar in SSH_PRIVSEP_USER PRIVSEP_PATH 87180740Sdesdo 88180740Sdes eval $confvar=`awk '/#define[ \t]'$confvar'/{print $3}' $objdir/config.h` 89180740Sdesdone 90180740Sdes 91180740Sdes# Set privsep defaults if not defined 92180740Sdesif [ -z "$SSH_PRIVSEP_USER" ] 93180740Sdesthen 94180740Sdes SSH_PRIVSEP_USER=sshd 95180740Sdesfi 96180740Sdesif [ -z "$PRIVSEP_PATH" ] 97180740Sdesthen 98180740Sdes PRIVSEP_PATH=/var/empty 99180740Sdesfi 100180740Sdes 101180740Sdes# Clean package build directory 102180740Sdesrm -rf $objdir/$PKGDIR 103180740SdesFAKE_ROOT=$objdir/$PKGDIR/root 104180740Sdesmkdir -p $FAKE_ROOT 105180740Sdes 106180740Sdes# Start by faking root install 107180740Sdesecho "Faking root install..." 108180740Sdescd $objdir 109180740Sdesmake install-nokeys DESTDIR=$FAKE_ROOT 110180740Sdes 111180740Sdesif [ $? -gt 0 ] 112180740Sdesthen 113180740Sdes echo "Fake root install failed, stopping." 114180740Sdes exit 1 115180740Sdesfi 116180740Sdes 117180740Sdes# 118180740Sdes# Copy informational files to include in package 119180740Sdes# 120180740Sdescp $srcdir/LICENCE $objdir/$PKGDIR/ 121180740Sdescp $srcdir/README* $objdir/$PKGDIR/ 122180740Sdes 123180740Sdes# 124180740Sdes# Extract common info requires for the 'info' part of the package. 125180740Sdes# AIX requires 4-part version numbers 126180740Sdes# 127180740SdesVERSION=`./ssh -V 2>&1 | cut -f 1 -d , | cut -f 2 -d _` 128180740SdesMAJOR=`echo $VERSION | cut -f 1 -d p | cut -f 1 -d .` 129180740SdesMINOR=`echo $VERSION | cut -f 1 -d p | cut -f 2 -d .` 130180740SdesPATCH=`echo $VERSION | cut -f 1 -d p | cut -f 3 -d .` 131180740SdesPORTABLE=`echo $VERSION | awk 'BEGIN{FS="p"}{print $2}'` 132180740Sdes[ "$PATCH" = "" ] && PATCH=0 133180740Sdes[ "$PORTABLE" = "" ] && PORTABLE=0 134180740SdesBFFVERSION=`printf "%d.%d.%d.%d" $MAJOR $MINOR $PATCH $PORTABLE` 135180740Sdes 136180740Sdesecho "Building BFF for $PKGNAME $VERSION (package version $BFFVERSION)" 137180740Sdes 138180740Sdes# 139180740Sdes# Set ssh and sshd parameters as per config.local 140180740Sdes# 141180740Sdesif [ "${PERMIT_ROOT_LOGIN}" = no ] 142180740Sdesthen 143180740Sdes perl -p -i -e "s/#PermitRootLogin yes/PermitRootLogin no/" \ 144180740Sdes $FAKE_ROOT/${sysconfdir}/sshd_config 145180740Sdesfi 146180740Sdesif [ "${X11_FORWARDING}" = yes ] 147180740Sdesthen 148180740Sdes perl -p -i -e "s/#X11Forwarding no/X11Forwarding yes/" \ 149180740Sdes $FAKE_ROOT/${sysconfdir}/sshd_config 150180740Sdesfi 151180740Sdes 152180740Sdes 153180740Sdes# Rename config files; postinstall script will copy them if necessary 154197670Sdesfor cfgfile in ssh_config sshd_config 155180740Sdesdo 156180740Sdes mv $FAKE_ROOT/$sysconfdir/$cfgfile $FAKE_ROOT/$sysconfdir/$cfgfile.default 157180740Sdesdone 158180740Sdes 159180740Sdes# 160180740Sdes# Generate lpp control files. 161180740Sdes# working dir is $FAKE_ROOT but files are generated in dir above 162180740Sdes# and moved into place just before creation of .bff 163180740Sdes# 164180740Sdescd $FAKE_ROOT 165180740Sdesecho Generating LPP control files 166180740Sdesfind . ! -name . -print >../openssh.al 167180740Sdes$inventory >../openssh.inventory 168180740Sdes 169180740Sdescat <<EOD >../openssh.copyright 170180740SdesThis software is distributed under a BSD-style license. 171180740SdesFor the full text of the license, see /usr/lpp/openssh/LICENCE 172180740SdesEOD 173180740Sdes 174180740Sdes# 175180740Sdes# openssh.size file allows filesystem expansion as required 176180740Sdes# generate list of directories containing files 177180740Sdes# then calculate disk usage for each directory and store in openssh.size 178180740Sdes# 179180740Sdesfiles=`find . -type f -print` 180180740Sdesdirs=`for file in $files; do dirname $file; done | sort -u` 181180740Sdesfor dir in $dirs 182180740Sdesdo 183180740Sdes du $dir 184180740Sdesdone > ../openssh.size 185180740Sdes 186180740Sdes# 187180740Sdes# Create postinstall script 188180740Sdes# 189180740Sdescat <<EOF >>../openssh.post_i 190180740Sdes#!/bin/sh 191180740Sdes 192180740Sdesecho Creating configs from defaults if necessary. 193225825Sdesfor cfgfile in ssh_config sshd_config 194180740Sdesdo 195180740Sdes if [ ! -f $sysconfdir/\$cfgfile ] 196180740Sdes then 197180740Sdes echo "Creating \$cfgfile from default" 198180740Sdes cp $sysconfdir/\$cfgfile.default $sysconfdir/\$cfgfile 199180740Sdes else 200180740Sdes echo "\$cfgfile already exists." 201180740Sdes fi 202180740Sdesdone 203180740Sdesecho 204180740Sdes 205180740Sdes# Create PrivilegeSeparation user and group if not present 206180740Sdesecho Checking for PrivilegeSeparation user and group. 207180740Sdesif cut -f1 -d: /etc/group | egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null 208180740Sdesthen 209180740Sdes echo "PrivSep group $SSH_PRIVSEP_USER already exists." 210180740Sdeselse 211180740Sdes echo "Creating PrivSep group $SSH_PRIVSEP_USER." 212180740Sdes mkgroup -A $SSH_PRIVSEP_USER 213180740Sdesfi 214180740Sdes 215180740Sdes# Create user if required 216180740Sdesif lsuser "$SSH_PRIVSEP_USER" >/dev/null 217180740Sdesthen 218180740Sdes echo "PrivSep user $SSH_PRIVSEP_USER already exists." 219180740Sdeselse 220180740Sdes echo "Creating PrivSep user $SSH_PRIVSEP_USER." 221180740Sdes mkuser gecos='SSHD PrivSep User' login=false rlogin=false account_locked=true pgrp=$SSH_PRIVSEP_USER $SSH_PRIVSEP_USER 222180740Sdesfi 223180740Sdes 224180740Sdesif egrep '^[ \t]*UsePrivilegeSeparation[ \t]+no' $sysconfdir/sshd_config >/dev/null 225180740Sdesthen 226180740Sdes echo UsePrivilegeSeparation not enabled, privsep directory not required. 227180740Sdeselse 228180740Sdes # create chroot directory if required 229180740Sdes if [ -d $PRIVSEP_PATH ] 230180740Sdes then 231180740Sdes echo "PrivSep chroot directory $PRIVSEP_PATH already exists." 232180740Sdes else 233180740Sdes echo "Creating PrivSep chroot directory $PRIVSEP_PATH." 234180740Sdes mkdir $PRIVSEP_PATH 235180740Sdes chown 0 $PRIVSEP_PATH 236180740Sdes chgrp 0 $PRIVSEP_PATH 237180740Sdes chmod 755 $PRIVSEP_PATH 238180740Sdes fi 239180740Sdesfi 240180740Sdesecho 241180740Sdes 242180740Sdes# Generate keys unless they already exist 243180740Sdesecho Creating host keys if required. 244180740Sdesif [ -f "$sysconfdir/ssh_host_key" ] ; then 245180740Sdes echo "$sysconfdir/ssh_host_key already exists, skipping." 246180740Sdeselse 247180740Sdes $bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N "" 248180740Sdesfi 249180740Sdesif [ -f $sysconfdir/ssh_host_dsa_key ] ; then 250180740Sdes echo "$sysconfdir/ssh_host_dsa_key already exists, skipping." 251180740Sdeselse 252180740Sdes $bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N "" 253180740Sdesfi 254180740Sdesif [ -f $sysconfdir/ssh_host_rsa_key ] ; then 255180740Sdes echo "$sysconfdir/ssh_host_rsa_key already exists, skipping." 256180740Sdeselse 257180740Sdes $bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N "" 258180740Sdesfi 259180740Sdesecho 260180740Sdes 261180740Sdes# Set startup command depending on SRC support 262180740Sdesif [ "$AIX_SRC" = "yes" ] 263180740Sdesthen 264180740Sdes echo Creating SRC sshd subsystem. 265180740Sdes rmssys -s sshd 2>&1 >/dev/null 266180740Sdes mkssys -s sshd -p "$sbindir/sshd" -a '-D' -u 0 -S -n 15 -f 9 -R -G tcpip 267180740Sdes startupcmd="start $sbindir/sshd \\\"\\\$src_running\\\"" 268180740Sdes oldstartcmd="$sbindir/sshd" 269180740Sdeselse 270180740Sdes startupcmd="$sbindir/sshd" 271180740Sdes oldstartcmd="start $sbindir/sshd \\\"$src_running\\\"" 272180740Sdesfi 273180740Sdes 274180740Sdes# If migrating to or from SRC, change previous startup command 275180740Sdes# otherwise add to rc.tcpip 276180740Sdesif egrep "^\$oldstartcmd" /etc/rc.tcpip >/dev/null 277180740Sdesthen 278180740Sdes if sed "s|^\$oldstartcmd|\$startupcmd|g" /etc/rc.tcpip >/etc/rc.tcpip.new 279180740Sdes then 280180740Sdes chmod 0755 /etc/rc.tcpip.new 281180740Sdes mv /etc/rc.tcpip /etc/rc.tcpip.old && \ 282180740Sdes mv /etc/rc.tcpip.new /etc/rc.tcpip 283180740Sdes else 284180740Sdes echo "Updating /etc/rc.tcpip failed, please check." 285180740Sdes fi 286180740Sdeselse 287180740Sdes # Add to system startup if required 288180740Sdes if grep "^\$startupcmd" /etc/rc.tcpip >/dev/null 289180740Sdes then 290180740Sdes echo "sshd found in rc.tcpip, not adding." 291180740Sdes else 292180740Sdes echo "Adding sshd to rc.tcpip" 293180740Sdes echo >>/etc/rc.tcpip 294180740Sdes echo "# Start sshd" >>/etc/rc.tcpip 295180740Sdes echo "\$startupcmd" >>/etc/rc.tcpip 296180740Sdes fi 297180740Sdesfi 298180740SdesEOF 299180740Sdes 300180740Sdes# 301180740Sdes# Create liblpp.a and move control files into it 302180740Sdes# 303180740Sdesecho Creating liblpp.a 304180740Sdes( 305180740Sdes cd .. 306180740Sdes for i in openssh.al openssh.copyright openssh.inventory openssh.post_i openssh.size LICENCE README* 307180740Sdes do 308180740Sdes ar -r liblpp.a $i 309180740Sdes rm $i 310180740Sdes done 311180740Sdes) 312180740Sdes 313180740Sdes# 314180740Sdes# Create lpp_name 315180740Sdes# 316180740Sdes# This will end up looking something like: 317180740Sdes# 4 R I OpenSSH { 318180740Sdes# OpenSSH 3.0.2.1 1 N U en_US OpenSSH 3.0.2p1 Portable for AIX 319180740Sdes# [ 320180740Sdes# % 321180740Sdes# /usr/local/bin 8073 322180740Sdes# /usr/local/etc 189 323180740Sdes# /usr/local/libexec 185 324180740Sdes# /usr/local/man/man1 145 325180740Sdes# /usr/local/man/man8 83 326180740Sdes# /usr/local/sbin 2105 327180740Sdes# /usr/local/share 3 328180740Sdes# % 329180740Sdes# ] 330180740Sdes# } 331180740Sdes 332180740Sdesecho Creating lpp_name 333180740Sdescat <<EOF >../lpp_name 334180740Sdes4 R I $PKGNAME { 335180740Sdes$PKGNAME $BFFVERSION 1 N U en_US OpenSSH $VERSION Portable for AIX 336180740Sdes[ 337180740Sdes% 338180740SdesEOF 339180740Sdes 340180740Sdesfor i in $bindir $sysconfdir $libexecdir $mandir/${mansubdir}1 $mandir/${mansubdir}8 $sbindir $datadir /usr/lpp/openssh 341180740Sdesdo 342180740Sdes # get size in 512 byte blocks 343180740Sdes if [ -d $FAKE_ROOT/$i ] 344180740Sdes then 345180740Sdes size=`du $FAKE_ROOT/$i | awk '{print $1}'` 346180740Sdes echo "$i $size" >>../lpp_name 347180740Sdes fi 348180740Sdesdone 349180740Sdes 350180740Sdesecho '%' >>../lpp_name 351180740Sdesecho ']' >>../lpp_name 352180740Sdesecho '}' >>../lpp_name 353180740Sdes 354180740Sdes# 355180740Sdes# Move pieces into place 356180740Sdes# 357180740Sdesmkdir -p usr/lpp/openssh 358180740Sdesmv ../liblpp.a usr/lpp/openssh 359180740Sdesmv ../lpp_name . 360180740Sdes 361180740Sdes# 362180740Sdes# Now invoke backup to create .bff file 363180740Sdes# note: lpp_name needs to be the first file so we generate the 364180740Sdes# file list on the fly and feed it to backup using -i 365180740Sdes# 366180740Sdesecho Creating $PKGNAME-$VERSION.bff with backup... 367180740Sdesrm -f $PKGNAME-$VERSION.bff 368180740Sdes( 369180740Sdes echo "./lpp_name" 370180740Sdes find . ! -name lpp_name -a ! -name . -print 371180740Sdes) | backup -i -q -f ../$PKGNAME-$VERSION.bff $filelist 372180740Sdes 373180740Sdes# 374180740Sdes# Move package into final location and clean up 375180740Sdes# 376180740Sdesmv ../$PKGNAME-$VERSION.bff $startdir 377180740Sdescd $startdir 378180740Sdesrm -rf $objdir/$PKGDIR 379180740Sdes 380180740Sdesecho $0: done. 381180740Sdes 382