=================================================================== RCS file: /cvs/openbsd/fw_update/fw_install.sh,v retrieving revision 1.138 retrieving revision 1.145 diff -u -r1.138 -r1.145 --- openbsd/fw_update/fw_install.sh 2021/12/26 18:58:54 1.138 +++ openbsd/fw_update/fw_install.sh 2022/01/07 02:18:52 1.145 @@ -1,5 +1,5 @@ #!/bin/ksh -# $OpenBSD: fw_install.sh,v 1.138 2021/12/26 18:58:54 afresh1 Exp $ +# $OpenBSD: fw_install.sh,v 1.145 2022/01/07 02:18:52 afresh1 Exp $ # # Copyright (c) 2021 Andrew Hewus Fresh # @@ -122,7 +122,21 @@ fi } +fetch_cfile() { + if "$DOWNLOAD"; then + set +o noclobber # we want to get the latest CFILE + fetch "$CFILE" || return 1 + set -o noclobber + ! signify -qVep "$FWPUB_KEY" -x "$CFILE" -m "$CFILE" && + echo "Signature check of SHA256.sig failed" >&2 && return 1 + elif [ ! -e "$CFILE" ]; then + echo "${0##*/}: $CFILE: No such file or directory" >&2 + return 2 + fi +} + verify() { + [ -e "$CFILE" ] || fetch_cfile # On the installer we don't get sha256 -C, so fake it. if ! fgrep -qx "SHA256 (${1##*/}) = $( /bin/sha256 -qb "$1" )" "$CFILE"; then echo "Checksum test for ${1##*/} failed." >&2 @@ -152,6 +166,7 @@ firmware_filename() { local _f + [ -e "$CFILE" ] || fetch_cfile _f="$( sed -n "s/.*(\($1-firmware-.*\.tgz\)).*/\1/p" "$CFILE" | sed '$!d' )" ! [ "$_f" ] && echo "Unable to find firmware for $1" >&2 && return 1 echo "$_f" @@ -199,7 +214,7 @@ } add_firmware () { - local _f="${1##*/}" _pkgname + local _f="${1##*/}" _m="${2:-Install}" _pkgname FWPKGTMP="$( tmpdir "${DESTDIR}/var/db/pkg/.firmware" )" local _flags=-vm case "$VERBOSE" in @@ -207,9 +222,7 @@ 2|3) _flags=-Vm ;; esac - [ "$VERBOSE" -eq 1 ] && echo -n "Install ${_f} ..." - - ftp -N "${0##/}" -D "Install" "$_flags" -o- "file:${1}" | + ftp -N "${0##/}" -D "$_m" "$_flags" -o- "file:${1}" | tar -s ",^\+,${FWPKGTMP}/+," \ -s ",^firmware,${DESTDIR}/etc/firmware," \ -C / -zxphf - "+*" "firmware/*" @@ -235,15 +248,13 @@ chmod 755 "$FWPKGTMP" mv "$FWPKGTMP" "${DESTDIR}/var/db/pkg/${_pkgname}" unset FWPKGTMP - - [ "$VERBOSE" -eq 1 ] && echo " done." } delete_firmware() { local _cwd _pkg="$1" _pkgdir="${DESTDIR}/var/db/pkg" # TODO: Check hash for files before deleting - [ "$VERBOSE" -gt 0 ] && echo -n "Uninstall $_pkg ..." + [ "$VERBOSE" -gt 2 ] && echo -n "Uninstall $_pkg ..." _cwd="${_pkgdir}/$_pkg" if [ ! -e "$_cwd/+CONTENTS" ] || @@ -279,7 +290,9 @@ fi done - [ "$VERBOSE" -gt 0 ] && echo " done." + [ "$VERBOSE" -gt 2 ] && echo " done." + + return 0 } usage() { @@ -288,25 +301,25 @@ } ALL=false -OPT_D= -while getopts :adDnp:v name +OPT_F= +while getopts :adFnp:v name do - case "$name" in - a) ALL=true ;; - d) DELETE=true ;; - D) OPT_D=true ;; - n) DRYRUN=true ;; - p) LOCALSRC="$OPTARG" ;; - v) VERBOSE=$(( VERBOSE + 1 )) ;; - :) - echo "${0##*/}: option requires an argument -- -$OPTARG" >&2 - usage 2 - ;; - ?) - echo "${0##*/}: unknown option -- -$OPTARG" >&2 - usage 2 - ;; - esac + case "$name" in + a) ALL=true ;; + d) DELETE=true ;; + F) OPT_F=true ;; + n) DRYRUN=true ;; + p) LOCALSRC="$OPTARG" ;; + v) VERBOSE=$(( VERBOSE + 1 )) ;; + :) + echo "${0##*/}: option requires an argument -- -$OPTARG" >&2 + usage 2 + ;; + ?) + echo "${0##*/}: unknown option -- -$OPTARG" >&2 + usage 2 + ;; + esac done shift $((OPTIND - 1)) @@ -323,9 +336,20 @@ fi # "Download only" means local dir and don't install -if [ "$OPT_D" ]; then +if [ "$OPT_F" ]; then INSTALL=false LOCALSRC="${LOCALSRC:-.}" + + # Always check for latest CFILE and so latest firmware + if [ -e "$LOCALSRC/$CFILE" ]; then + mv "$LOCALSRC/$CFILE" "$LOCALSRC/$CFILE-OLD" + if fetch_cfile; then + rm -f "$LOCALSRC/$CFILE-OLD" + else + mv "$LOCALSRC/$CFILE-OLD" "$LOCALSRC/$CFILE" + echo "Using existing $CFILE" >&2 + fi + fi elif [ "$LOCALSRC" ]; then DOWNLOAD=false fi @@ -338,8 +362,11 @@ set -sA devices -- "$@" if "$DELETE"; then - [ "$OPT_D" ] && usage 22 + [ "$OPT_F" ] && usage 22 + # Show the "Uninstalling" message when just deleting not upgrading + [ "$VERBOSE" -gt 0 ] && VERBOSE=3 + set -A installed if [ "${devices[*]:-}" ]; then "$ALL" && usage 22 @@ -375,15 +402,15 @@ done fi - deleted="${deleted:+${deleted#,}}" + deleted="${deleted#,}" echo "${0:##*/}: deleted ${deleted:-none}"; exit fi if [ ! "$LOCALSRC" ]; then - LOCALSRC="$( tmpdir "${DESTDIR}/tmp/${0##*/}" )" - REMOVE_LOCALSRC=true + LOCALSRC="$( tmpdir "${DESTDIR}/tmp/${0##*/}" )" + REMOVE_LOCALSRC=true fi CFILE="$LOCALSRC/$CFILE" @@ -391,26 +418,14 @@ if [ "${devices[*]:-}" ]; then "$ALL" && usage 22 else - [ "$VERBOSE" -gt 0 ] && echo -n "Detect firmware ..." + [ "$VERBOSE" -gt 1 ] && echo -n "Detect firmware ..." set -sA devices -- $( detect_firmware ) - [ "$VERBOSE" -gt 0 ] && + [ "$VERBOSE" -gt 1 ] && { [ "${devices[*]:-}" ] && echo " found." || echo " done." ; } fi [ "${devices[*]:-}" ] || exit -if "$DOWNLOAD"; then - set +o noclobber # we want to get the latest CFILE - fetch "$CFILE" - set -o noclobber - ! signify -qVep "$FWPUB_KEY" -x "$CFILE" -m "$CFILE" && - echo "Signature check of SHA256.sig failed" >&2 && exit 1 -elif [ ! -e "$CFILE" ]; then - # TODO: We shouldn't need a CFILE if all arguments are files. - echo "${0##*/}: $CFILE: No such file or directory" >&2 - exit 2 -fi - added='' updated='' kept='' @@ -431,7 +446,7 @@ if "$INSTALL" && [ "${installed[*]:-}" ]; then for i in "${installed[@]}"; do if [ "${f##*/}" = "$i.tgz" ]; then - [ "$VERBOSE" -gt 0 ] && echo "Keep $i" + [ "$VERBOSE" -gt 2 ] && echo "Keep $i" kept="$kept,$d" continue 2 fi @@ -440,7 +455,7 @@ if [ -e "$f" ]; then if "$DOWNLOAD"; then - [ "$VERBOSE" -gt 0 ] && ! "$INSTALL" && + [ "$VERBOSE" -gt 1 ] && ! "$INSTALL" && echo "Keep/Verify ${f##*/}" "$DRYRUN" || verify "$f" || continue "$INSTALL" || kept="$kept,$d" @@ -454,7 +469,7 @@ fetch "$f" && verify "$f" || { [ "$VERBOSE" -eq 1 ] && echo " failed."; continue; } - [ "$VERBOSE" -eq 1 ] && echo " done." + [ "$VERBOSE" -eq 1 ] && ! "$INSTALL" && echo " done." fi "$INSTALL" || added="$added,$d" elif "$INSTALL"; then @@ -464,23 +479,35 @@ "$INSTALL" || continue - removed=false + update='' if [ "${installed[*]:-}" ]; then for i in "${installed[@]}"; do "$DRYRUN" || delete_firmware "$i" - removed=true + update="Update" done fi - "$DRYRUN" || add_firmware "$f" + "$DRYRUN" || add_firmware "$f" "$update" f="${f##*/}" f="${f%.tgz}" - if "$removed"; then - "$DRYRUN" && [ "$VERBOSE" -gt 0 ] && echo "Update $f" + if [ "$update" ]; then + if [ "$VERBOSE" -eq 1 ] && "$DOWNLOAD" && ! "$DRYRUN"; then + echo " updated." + elif [ "$VERBOSE" -eq 1 ]; then + echo "Update $f" + elif [ "$VERBOSE" -gt 0 ] && "$DRYRUN"; then + echo "Update $f" + fi updated="$updated,$d" else - "$DRYRUN" && [ "$VERBOSE" -gt 0 ] && echo "Install $f" + if [ "$VERBOSE" -eq 1 ] && "$DOWNLOAD" && ! "$DRYRUN"; then + echo " installed." + elif [ "$VERBOSE" -eq 1 ]; then + echo "Install $f" + elif [ "$VERBOSE" -gt 0 ] && "$DRYRUN"; then + echo "Install $f" + fi added="$added,$d" fi done