Tobias Brunner
6b8b67be81
The wrapper called the command twice for any unit but "strongswan" and it didn't return the correct exit code. This was noticed when an if-updown script tried to check if systemd-resolved is active and always succeeded, which caused failing attempts to configure it. But now that the return code is correct, trying to enable bind9 won't fail silently anymore if the unit doesn't exist (similar on older systems for named), so this is adapted.
101 lines
3.3 KiB
Bash
Executable File
101 lines
3.3 KiB
Bash
Executable File
#!/bin/bash
|
|
# create specific guest images
|
|
#
|
|
# Copyright (C) 2004 Eric Marchionni, Patrik Rayo
|
|
# Zuercher Hochschule Winterthur
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU General Public License as published by the
|
|
# Free Software Foundation; either version 2 of the License, or (at your
|
|
# option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
|
#
|
|
# This program is distributed in the hope that it will be useful, but
|
|
# WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
# or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
# for more details.
|
|
|
|
echo "Creating guest images"
|
|
|
|
DIR=$(dirname `readlink -f $0`)
|
|
. $DIR/../testing.conf
|
|
. $DIR/function.sh
|
|
|
|
HOSTSDIR=$DIR/../hosts
|
|
|
|
[ `id -u` -eq 0 ] || die "You must be root to run $0"
|
|
[ -f $ROOTIMG ] || die "Root image $ROOTIMG not found"
|
|
[ -f $HOSTDIR ] || die "Hosts directory $HOSTSDIR not found"
|
|
running_any $STRONGSWANHOSTS && die "Please stop test environment before running $0"
|
|
|
|
check_commands partprobe qemu-img qemu-nbd
|
|
|
|
load_qemu_nbd
|
|
|
|
mkdir -p $IMGDIR
|
|
mkdir -p $LOOPDIR
|
|
|
|
# just to be sure
|
|
do_on_exit qemu-nbd -d $NBDEV
|
|
do_on_exit umount $LOOPDIR
|
|
|
|
for host in $STRONGSWANHOSTS
|
|
do
|
|
log_action "Creating guest image for $host"
|
|
execute "qemu-img create -b $ROOTIMG -f $IMGEXT -F $IMGEXT $IMGDIR/$host.$IMGEXT" 0
|
|
execute "qemu-nbd -c $NBDEV $IMGDIR/$host.$IMGEXT" 0
|
|
partprobe $NBDEV
|
|
execute "mount $NBDPARTITION $LOOPDIR" 0
|
|
execute "cp -rf $HOSTSDIR/${host}/etc $LOOPDIR" 0
|
|
execute "cp -rf $HOSTSDIR/default/* $LOOPDIR" 0
|
|
execute_chroot "ldconfig" 0
|
|
execute "mkdir $LOOPDIR/etc/pts" 0
|
|
|
|
if [ "$host" = "alice" ]
|
|
then
|
|
execute "mkdir $LOOPDIR/var/log/apache2/tnc" 0
|
|
execute_chroot "chgrp www-data /etc/pts" 0
|
|
execute_chroot "chmod g+w /etc/pts" 0
|
|
fi
|
|
if [ "$host" = "winnetou" ]
|
|
then
|
|
execute "mkdir $LOOPDIR/var/log/apache2/ocsp" 0
|
|
execute "cp -rf $DIR/../images $LOOPDIR/var/www/" 0
|
|
execute "cp -rf $DIR/../css $LOOPDIR/var/www/" 0
|
|
execute "mkdir $LOOPDIR/var/www/testresults" 0
|
|
echo "echo /testresults ... >> $LOOPDIR/etc/fstab" >>$LOGFILE 2>&1
|
|
echo "/testresults /var/www/testresults 9p trans=virtio,version=9p2000.L 0 0" >> $LOOPDIR/etc/fstab
|
|
execute_chroot "a2enmod -q cgid" 0
|
|
execute_chroot "a2enmod -q rewrite" 0
|
|
execute_chroot "mkdir /var/www/certs" 0
|
|
execute_chroot "mkdir /var/www/certs/research /var/www/certs/sales" 0
|
|
execute_chroot "/etc/ca/generate-crl" 0
|
|
execute_chroot "rm -rf /var/lib/ldap/*" 0
|
|
execute_chroot "slapadd -l /etc/ldap/ldif.txt -f /etc/ldap/slapd.conf" 0
|
|
execute_chroot "chown -R openldap:openldap /var/lib/ldap" 0
|
|
execute_chroot "dnssec-signzone -K /etc/bind -o strongswan.org. /etc/bind/db.strongswan.org" 0
|
|
execute_chroot "dnssec-signzone -K /etc/bind -o org. /etc/bind/db.org" 0
|
|
execute_chroot "dnssec-signzone -K /etc/bind -o . /etc/bind/db.root" 0
|
|
|
|
# on bullseye and newer, enabling via bind9 doesn't work, while
|
|
# disabling does, so use named here. on the other hand, older releases
|
|
# like buster don't have named service files
|
|
SERVICES="apache2 slapd"
|
|
case "$BASEIMGSUITE" in
|
|
buster)
|
|
SERVICES="$SERVICES bind9"
|
|
;;
|
|
*)
|
|
SERVICES="$SERVICES named"
|
|
;;
|
|
esac
|
|
for service in $SERVICES
|
|
do
|
|
execute_chroot "systemctl enable $service" 0
|
|
done
|
|
fi
|
|
sync
|
|
execute "umount -l $LOOPDIR" 0
|
|
execute "qemu-nbd -d $NBDEV" 0
|
|
log_status 0
|
|
done
|