=================================================================== RCS file: /cvs/openbsd/fw_update/fw_install.sh,v retrieving revision 1.64 retrieving revision 1.69 diff -u -r1.64 -r1.69 --- openbsd/fw_update/fw_install.sh 2021/12/09 02:37:38 1.64 +++ openbsd/fw_update/fw_install.sh 2021/12/11 05:08:38 1.69 @@ -1,5 +1,5 @@ #!/bin/ksh -# $OpenBSD: fw_install.sh,v 1.64 2021/12/09 02:37:38 afresh1 Exp $ +# $OpenBSD: fw_install.sh,v 1.69 2021/12/11 05:08:38 afresh1 Exp $ # # Copyright (c) 2021 Andrew Hewus Fresh # @@ -32,6 +32,8 @@ FWURL=http://firmware.openbsd.org/firmware/${HTTP_FWDIR} FWPUB_KEY=${DESTDIR}/etc/signify/openbsd-${VERSION}-fw.pub +LOCALSRC= + tmpdir() { local _i=1 _dir @@ -59,33 +61,31 @@ } fetch() { - local _file=$1 _user=_file _exit + local _src="${FWURL}/${1##*/}" _dst=$1 _user=_file _exit # If we're not in the installer, we have su(1) # and doas(1) is unlikely to be configured. if [ -x /usr/bin/su ]; then /usr/bin/su -s /bin/ksh "$_user" -c \ - "/usr/bin/ftp -D 'Get/Verify' -Vm \ - -o- '${FWURL}/${_file}'" > "$_file" + "/usr/bin/ftp -D 'Get/Verify' -Vm -o- '$_src'" > "$_dst" _exit="$?" else /usr/bin/doas -u "$_user" \ - ftp -D 'Get/Verify' -Vm \ - -o- "${FWURL}/${_file}" > "$_file" + /usr/bin/ftp -D 'Get/Verify' -Vm -o- "$_src" > "$_dst" _exit="$?" fi if [ "$_exit" -ne 0 ]; then - rm -f "$_file" - echo "Cannot fetch $_file" >&2 + rm -f "$_dst" + echo "Cannot fetch $_src" >&2 return 1 fi } verify() { # On the installer we don't get sha256 -C, so fake it. - if ! fgrep -qx "SHA256 ($1) = $( /bin/sha256 -qb "$1" )" "$CFILE"; then - echo "Checksum test for $1 failed." >&2 + if ! fgrep -qx "SHA256 (${1##*/}) = $( /bin/sha256 -qb "$1" )" "$CFILE"; then + echo "Checksum test for ${1##*/} failed." >&2 return 1 fi } @@ -134,8 +134,8 @@ local _f="${1##*/}" _pkgdir="${DESTDIR}/var/db/pkg" ftp -D "Install" -Vmo- "file:${1}" | tar -s ",^\+,${_pkgdir}/${_f%.tgz}/+," \ - -s ",^firmware,${DESTDIR}/etc/firmware," \ - -C / -zxphf - "+*" "firmware/*" + -s ",^firmware,${DESTDIR}/etc/firmware," \ + -C / -zxphf - "+*" "firmware/*" # TODO: Should we mark these so real fw_update can -Drepair? ed -s "${_pkgdir}/${_f%.tgz}/+CONTENTS" <&2 - usage 2 -fi +# If we're installing from a local dir +# we don't want to download anything +[ "$LOCALSRC" ] && "$INSTALL" && DOWNLOAD=false +[ "$LOCALSRC" ] || LOCALSRC="$( tmpdir "${DESTDIR}/tmp/fw_install" )" set -A devices -- "$@" [ "${devices[*]:-}" ] || set -A devices -- $( devices_needing_firmware ) -if [ ! "${devices:-}" ]; then +if [ ! "${devices[*]:-}" ]; then echo "No devices found which need firmware files to be downloaded." exit fi @@ -219,9 +221,8 @@ while (( i < "${#devices[@]}" )); do f="${devices[$i]}" d=$( firmware_devicename "$f" ) - [ "$f" = "$d" ] && f="$( echo "$f"-firmware-*.tgz | sed '$!d' )" if [ -e "$f" ]; then - if [ "${DOWNLOADDIR:-}" ]; then + if "$DOWNLOAD"; then echo "Cannot download local file $f" >&2 exit 2 fi @@ -230,22 +231,7 @@ i=$((i + 1)) done -if [ "$DOWNLOADDIR" ]; then - if ! cd "$DOWNLOADDIR"; then - echo "Unable to use $DOWNLOADDIR, make sure it is a directory" - exit 2 - fi -elif [ "$LOCALDIR" ]; then - if ! cd "$LOCALDIR"; then - echo "Unable to use $LOCALDIR, make sure it is a directory" - exit 2 - fi -else - TMPDIR=$( tmpdir "${DESTDIR}/tmp/fw_install" ) - cd "$TMPDIR" -fi - -if ! [[ -n "$LOCALDIR" && -e "$CFILE" ]]; then +if "$DOWNLOAD" && ! [[ -e "$CFILE" ]]; then fetch "$CFILE" ! signify -qVep "$FWPUB_KEY" -x "$CFILE" -m "$CFILE" && echo "Signature check of SHA256.sig failed" >&2 && exit 1 @@ -256,14 +242,15 @@ if [ "$f" = "$d" ]; then f=$( firmware_filename "$d" || true ) [ "$f" ] || continue + f="$LOCALSRC/$f" else d="${d%:*}" fi set -A installed -- $( installed_firmware "$d" ) - if [ ! "${DOWNLOADDIR:-}" ] && [ "${installed:-}" ]; then - for i in "${installed[@]:-}"; do + if "$INSTALL" && [ "${installed[*]:-}" ]; then + for i in "${installed[@]}"; do if [ "${f##*/}" = "$i.tgz" ]; then echo "$i already installed" continue 2 @@ -272,17 +259,18 @@ fi if [ ! -e "$f" ]; then - [ "$LOCALDIR" ] && echo "Cannot install $f, not found" >&2 && continue + "$INSTALL" && ! "$DOWNLOAD" && + echo "Cannot install ${f##*/}, not found" >&2 && continue fetch "$f" || continue verify "$f" || continue - elif [ "${DOWNLOADDIR:-}" ]; then + elif $DOWNLOAD; then echo "Already have $f" verify "$f" || continue fi - [ "${DOWNLOADDIR:-}" ] && continue + "$INSTALL" || continue - if [ "${installed:-}" ]; then + if [ "${installed[*]:-}" ]; then for i in "${installed[@]}"; do delete_firmware "$i" done