=================================================================== RCS file: /cvs/openbsd/fw_update/fw_install.sh,v retrieving revision 1.81 retrieving revision 1.102 diff -u -r1.81 -r1.102 --- openbsd/fw_update/fw_install.sh 2021/12/12 20:23:12 1.81 +++ openbsd/fw_update/fw_install.sh 2021/12/22 04:43:41 1.102 @@ -1,5 +1,5 @@ #!/bin/ksh -# $OpenBSD: fw_install.sh,v 1.81 2021/12/12 20:23:12 afresh1 Exp $ +# $OpenBSD: fw_install.sh,v 1.102 2021/12/22 04:43:41 afresh1 Exp $ # # Copyright (c) 2021 Andrew Hewus Fresh # @@ -15,7 +15,8 @@ # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF # OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. -set -o errexit -o pipefail -o nounset +set -o errexit -o pipefail -o nounset -o noclobber -o noglob +set +o monitor export PATH=/usr/bin:/bin:/usr/sbin:/sbin CFILE=SHA256.sig @@ -33,6 +34,9 @@ FWURL=http://firmware.openbsd.org/firmware/${HTTP_FWDIR} FWPUB_KEY=${DESTDIR}/etc/signify/openbsd-${VERSION}-fw.pub +VERBOSE=false +DOWNLOAD=true +INSTALL=true LOCALSRC= tmpdir() { @@ -52,23 +56,54 @@ } fetch() { - local _src="${FWURL}/${1##*/}" _dst=$1 _user=_file _exit + local _src="${FWURL}/${1##*/}" _dst=$1 _user=_file _pid _exit _error='' # If we're not in the installer, # we have su(1) and doas(1) is unlikely to be configured. + set -o monitor # make sure ftp gets its own process group + ( + flags=-VM + "$VERBOSE" && flags=-vm if [ -x /usr/bin/su ]; then - /usr/bin/su -s /bin/ksh "$_user" -c \ - "/usr/bin/ftp -D 'Get/Verify' -Vm -o- '$_src'" > "$_dst" - _exit="$?" + exec /usr/bin/su -s /bin/ksh "$_user" -c \ + "/usr/bin/ftp -D 'Get/Verify' $flags -o- '$_src'" > "$_dst" else - /usr/bin/doas -u "$_user" \ - /usr/bin/ftp -D 'Get/Verify' -Vm -o- "$_src" > "$_dst" - _exit="$?" + exec /usr/bin/doas -u "$_user" \ + /usr/bin/ftp -D 'Get/Verify' $flags -o- "$_src" > "$_dst" fi + ) & _pid=$! + set +o monitor + trap "kill -TERM '-$_pid' 2>/dev/null; exit 1" EXIT INT QUIT ABRT TERM + + SECONDS=0 + _last=0 + while kill -0 -"$_pid" 2>/dev/null; do + if [[ $SECONDS -gt 12 ]]; then + set -- $( ls -ln "$_dst" 2>/dev/null ) + if [[ $_last -ne $5 ]]; then + _last=$5 + SECONDS=0 + sleep 1 + else + kill -INT -"$_pid" + _error=" (timed out)" + fi + else + sleep 1 + fi + done + + set +o errexit + wait "$_pid" + _exit=$? + set -o errexit + + trap "" EXIT INT QUIT ABRT TERM + if [ "$_exit" -ne 0 ]; then rm -f "$_dst" - echo "Cannot fetch $_src" >&2 + echo "Cannot fetch $_src$_error" >&2 return 1 fi } @@ -82,23 +117,24 @@ } devices_needing_firmware() { - local _d _m _grep _dmesgtail _last='' + local _d _m _line _dmesgtail _last='' _nl=$( echo ) # When we're not in the installer, the dmesg.boot can # contain multiple boots, so only look in the last one - _dmesgtail=$( sed -n 'H;/^OpenBSD/h;${g;p;}' /var/run/dmesg.boot ) + _dmesgtail="$( echo ; sed -n 'H;/^OpenBSD/h;${g;p;}' /var/run/dmesg.boot | + grep -e "^[a-z][a-z]*[0-9]" -e " not configured " )" grep -v '^[[:space:]]*#' "$FWPATTERNS" | while read -r _d _m; do - _grep="grep" - [ "$_last" = "$_d" ] && continue - [ "$_m" ] || _m="^${_d}[0-9][0-9]* at " - [ "$_m" = "${_m#^}" ] && _grep="fgrep" + [ "$_d" = "$_last" ] && continue + [ "$_m" ] || _m="${_nl}${_d}[0-9] at " + [ "$_m" = "${_m#^}" ] || _m="${_nl}${_m#^}" - echo "$_dmesgtail" | $_grep -q "$_m" || continue - echo "$_d" - _last="$_d" - done + if [[ $_dmesgtail = *$_m* ]]; then + echo "$_d" + _last="$_d" + fi + done } firmware_filename() { @@ -115,16 +151,20 @@ } installed_firmware() { + set +o noglob for fw in "${DESTDIR}/var/db/pkg/$1-firmware"*; do - [ -e "$fw" ] || continue + [ -e "$fw/+CONTENTS" ] || continue echo "${fw##*/}" done + set -o noglob } add_firmware () { local _f="${1##*/}" local _pkgdir="${DESTDIR}/var/db/pkg/${_f%.tgz}" - ftp -D "Install" -Vmo- "file:${1}" | + local flags=-VM + "$VERBOSE" && flags=-vm + ftp -D "Install" "$flags" -o- "file:${1}" | tar -s ",^\+,${_pkgdir}/+," \ -s ",^firmware,${DESTDIR}/etc/firmware," \ -C / -zxphf - "+*" "firmware/*" @@ -144,7 +184,7 @@ local _cwd _pkg="$1" _pkgdir="${DESTDIR}/var/db/pkg" # TODO: Check hash for files before deleting - echo "Uninstalling $_pkg" + "$VERBOSE" && echo "Uninstalling $_pkg" _cwd="${_pkgdir}/$_pkg" set -A _remove -- "${_cwd}/+CONTENTS" "${_cwd}" @@ -166,7 +206,9 @@ if [ -d "$_r" ]; then # Try hard not to actually remove recursively # without rmdir on the install media. + set +o noglob [ "$_r/*" = "$( echo "$_r"/* )" ] && rm -rf "$_r" + set -o noglob else rm -f "$_r" fi @@ -174,41 +216,55 @@ } usage() { - echo "usage: fw_install [-DL] [driver | file [...]]" + echo "usage: ${0##*/} [-D | -L] [driver | file ...]" exit 2 } -INSTALL=true -DOWNLOAD=true - -while getopts dL name +OPT_D= +OPT_L= +while getopts :DLv name do case "$name" in - # "download only" means local dir and don't install - D) LOCALSRC=. INSTALL=false ;; - L) LOCALSRC=. ;; - ?) usage 2 ;; + D) OPT_D=true ;; + L) OPT_L=true ;; + v) VERBOSE=true ;; + ?) echo "${0##*/}: unknown option -- -$OPTARG"; usage 2 ;; esac done shift $((OPTIND - 1)) -# If we're installing from a local dir -# we don't want to download anything -[ "$LOCALSRC" ] && "$INSTALL" && DOWNLOAD=false -[ "$LOCALSRC" ] || LOCALSRC="$( tmpdir "${DESTDIR}/tmp/fw_install" )" +[ "$OPT_D" ] && [ "$OPT_L" ] && usage 1 +if [ "$OPT_D" ]; then + # "Download only" means local dir and don't install + INSTALL=false + LOCALSRC=. +elif [ "$OPT_L" ]; then + # "Local" means don't download, install from local dir + DOWNLOAD=false + LOCALSRC=. +else + LOCALSRC="$( tmpdir "${DESTDIR}/tmp/${0##*/}" )" +fi + CFILE="$LOCALSRC/$CFILE" +if "$INSTALL" && [ -x /usr/bin/id ] && [ $(/usr/bin/id -u) != 0 ]; then + echo "need root privileges" >&2 + exit 1 +fi + set -A devices -- "$@" -[ "${devices[*]:-}" ] || - set -A devices -- $( devices_needing_firmware ) - if [ ! "${devices[*]:-}" ]; then - echo "No devices found which need firmware files to be downloaded." - exit + "$VERBOSE" && echo -n "Detecting firmware ..." + set -A devices -- $( devices_needing_firmware ) + "$VERBOSE" && + { [ "${devices[*]:-}" ] && echo " found." || echo " done." ; } fi +[ "${devices[*]:-}" ] || exit + if "$DOWNLOAD"; then fetch "$CFILE" ! signify -qVep "$FWPUB_KEY" -x "$CFILE" -m "$CFILE" && @@ -232,7 +288,7 @@ if "$INSTALL" && [ "${installed[*]:-}" ]; then for i in "${installed[@]}"; do if [ "${f##*/}" = "$i.tgz" ]; then - echo "$i already installed" + "$VERBOSE" && echo "$i already installed" continue 2 fi done @@ -240,7 +296,7 @@ if [ -e "$f" ]; then if "$DOWNLOAD"; then - echo "Verify existing ${f##*/}" + "$VERBOSE" && echo "Verify existing ${f##*/}" verify "$f" || continue # else assume it was verified when downloaded fi