1 #!/bin/sh 2 # 3 # buildbff.sh: Create AIX SMIT-installable OpenSSH packages 4 # $Id: buildbff.sh,v 1.13 2011/05/05 03:48:41 djm Exp $ 5 # 6 # Author: Darren Tucker (dtucker at zip dot com dot au) 7 # This file is placed in the public domain and comes with absolutely 8 # no warranty. 9 # 10 # Based originally on Ben Lindstrom's buildpkg.sh for Solaris 11 # 12 13 # 14 # Tunable configuration settings 15 # create a "config.local" in your build directory or set 16 # environment variables to override these. 17 # 18 [ -z "$PERMIT_ROOT_LOGIN" ] && PERMIT_ROOT_LOGIN=no 19 [ -z "$X11_FORWARDING" ] && X11_FORWARDING=no 20 [ -z "$AIX_SRC" ] && AIX_SRC=no 21 22 umask 022 23 24 startdir=`pwd` 25 26 perl -v >/dev/null || (echo perl required; exit 1) 27 28 # Path to inventory.sh: same place as buildbff.sh 29 if echo $0 | egrep '^/' 30 then 31 inventory=`dirname $0`/inventory.sh # absolute path 32 else 33 inventory=`pwd`/`dirname $0`/inventory.sh # relative path 34 fi 35 36 # 37 # We still support running from contrib/aix, but this is deprecated 38 # 39 if pwd | egrep 'contrib/aix$' 40 then 41 echo "Changing directory to `pwd`/../.." 42 echo "Please run buildbff.sh from your build directory in future." 43 cd ../.. 44 contribaix=1 45 fi 46 47 if [ ! -f Makefile ] 48 then 49 echo "Makefile not found (did you run configure?)" 50 exit 1 51 fi 52 53 # 54 # Directories used during build: 55 # current dir = $objdir directory you ran ./configure in. 56 # $objdir/$PKGDIR/ directory package files are constructed in 57 # $objdir/$PKGDIR/root/ package root ($FAKE_ROOT) 58 # 59 objdir=`pwd` 60 PKGNAME=openssh 61 PKGDIR=package 62 63 # 64 # Collect local configuration settings to override defaults 65 # 66 if [ -s ./config.local ] 67 then 68 echo Reading local settings from config.local 69 . ./config.local 70 fi 71 72 # 73 # Fill in some details from Makefile, like prefix and sysconfdir 74 # the eval also expands variables like sysconfdir=${prefix}/etc 75 # provided they are eval'ed in the correct order 76 # 77 for confvar in prefix exec_prefix bindir sbindir libexecdir datadir mandir mansubdir sysconfdir piddir srcdir 78 do 79 eval $confvar=`grep "^$confvar=" $objdir/Makefile | cut -d = -f 2` 80 done 81 82 # 83 # Collect values of privsep user and privsep path 84 # currently only found in config.h 85 # 86 for confvar in SSH_PRIVSEP_USER PRIVSEP_PATH 87 do 88 eval $confvar=`awk '/#define[ \t]'$confvar'/{print $3}' $objdir/config.h` 89 done 90 91 # Set privsep defaults if not defined 92 if [ -z "$SSH_PRIVSEP_USER" ] 93 then 94 SSH_PRIVSEP_USER=sshd 95 fi 96 if [ -z "$PRIVSEP_PATH" ] 97 then 98 PRIVSEP_PATH=/var/empty 99 fi 100 101 # Clean package build directory 102 rm -rf $objdir/$PKGDIR 103 FAKE_ROOT=$objdir/$PKGDIR/root 104 mkdir -p $FAKE_ROOT 105 106 # Start by faking root install 107 echo "Faking root install..." 108 cd $objdir 109 make install-nokeys DESTDIR=$FAKE_ROOT 110 111 if [ $? -gt 0 ] 112 then 113 echo "Fake root install failed, stopping." 114 exit 1 115 fi 116 117 # 118 # Copy informational files to include in package 119 # 120 cp $srcdir/LICENCE $objdir/$PKGDIR/ 121 cp $srcdir/README* $objdir/$PKGDIR/ 122 123 # 124 # Extract common info requires for the 'info' part of the package. 125 # AIX requires 4-part version numbers 126 # 127 VERSION=`./ssh -V 2>&1 | cut -f 1 -d , | cut -f 2 -d _` 128 MAJOR=`echo $VERSION | cut -f 1 -d p | cut -f 1 -d .` 129 MINOR=`echo $VERSION | cut -f 1 -d p | cut -f 2 -d .` 130 PATCH=`echo $VERSION | cut -f 1 -d p | cut -f 3 -d .` 131 PORTABLE=`echo $VERSION | awk 'BEGIN{FS="p"}{print $2}'` 132 [ "$PATCH" = "" ] && PATCH=0 133 [ "$PORTABLE" = "" ] && PORTABLE=0 134 BFFVERSION=`printf "%d.%d.%d.%d" $MAJOR $MINOR $PATCH $PORTABLE` 135 136 echo "Building BFF for $PKGNAME $VERSION (package version $BFFVERSION)" 137 138 # 139 # Set ssh and sshd parameters as per config.local 140 # 141 if [ "${PERMIT_ROOT_LOGIN}" = no ] 142 then 143 perl -p -i -e "s/#PermitRootLogin yes/PermitRootLogin no/" \ 144 $FAKE_ROOT/${sysconfdir}/sshd_config 145 fi 146 if [ "${X11_FORWARDING}" = yes ] 147 then 148 perl -p -i -e "s/#X11Forwarding no/X11Forwarding yes/" \ 149 $FAKE_ROOT/${sysconfdir}/sshd_config 150 fi 151 152 153 # Rename config files; postinstall script will copy them if necessary 154 for cfgfile in ssh_config sshd_config 155 do 156 mv $FAKE_ROOT/$sysconfdir/$cfgfile $FAKE_ROOT/$sysconfdir/$cfgfile.default 157 done 158 159 # 160 # Generate lpp control files. 161 # working dir is $FAKE_ROOT but files are generated in dir above 162 # and moved into place just before creation of .bff 163 # 164 cd $FAKE_ROOT 165 echo Generating LPP control files 166 find . ! -name . -print >../openssh.al 167 $inventory >../openssh.inventory 168 169 cat <<EOD >../openssh.copyright 170 This software is distributed under a BSD-style license. 171 For the full text of the license, see /usr/lpp/openssh/LICENCE 172 EOD 173 174 # 175 # openssh.size file allows filesystem expansion as required 176 # generate list of directories containing files 177 # then calculate disk usage for each directory and store in openssh.size 178 # 179 files=`find . -type f -print` 180 dirs=`for file in $files; do dirname $file; done | sort -u` 181 for dir in $dirs 182 do 183 du $dir 184 done > ../openssh.size 185 186 # 187 # Create postinstall script 188 # 189 cat <<EOF >>../openssh.post_i 190 #!/bin/sh 191 192 echo Creating configs from defaults if necessary. 193 for cfgfile in ssh_config sshd_config 194 do 195 if [ ! -f $sysconfdir/\$cfgfile ] 196 then 197 echo "Creating \$cfgfile from default" 198 cp $sysconfdir/\$cfgfile.default $sysconfdir/\$cfgfile 199 else 200 echo "\$cfgfile already exists." 201 fi 202 done 203 echo 204 205 # Create PrivilegeSeparation user and group if not present 206 echo Checking for PrivilegeSeparation user and group. 207 if cut -f1 -d: /etc/group | egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/null 208 then 209 echo "PrivSep group $SSH_PRIVSEP_USER already exists." 210 else 211 echo "Creating PrivSep group $SSH_PRIVSEP_USER." 212 mkgroup -A $SSH_PRIVSEP_USER 213 fi 214 215 # Create user if required 216 if lsuser "$SSH_PRIVSEP_USER" >/dev/null 217 then 218 echo "PrivSep user $SSH_PRIVSEP_USER already exists." 219 else 220 echo "Creating PrivSep user $SSH_PRIVSEP_USER." 221 mkuser gecos='SSHD PrivSep User' login=false rlogin=false account_locked=true pgrp=$SSH_PRIVSEP_USER $SSH_PRIVSEP_USER 222 fi 223 224 if egrep '^[ \t]*UsePrivilegeSeparation[ \t]+no' $sysconfdir/sshd_config >/dev/null 225 then 226 echo UsePrivilegeSeparation not enabled, privsep directory not required. 227 else 228 # create chroot directory if required 229 if [ -d $PRIVSEP_PATH ] 230 then 231 echo "PrivSep chroot directory $PRIVSEP_PATH already exists." 232 else 233 echo "Creating PrivSep chroot directory $PRIVSEP_PATH." 234 mkdir $PRIVSEP_PATH 235 chown 0 $PRIVSEP_PATH 236 chgrp 0 $PRIVSEP_PATH 237 chmod 755 $PRIVSEP_PATH 238 fi 239 fi 240 echo 241 242 # Generate keys unless they already exist 243 echo Creating host keys if required. 244 if [ -f "$sysconfdir/ssh_host_key" ] ; then 245 echo "$sysconfdir/ssh_host_key already exists, skipping." 246 else 247 $bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N "" 248 fi 249 if [ -f $sysconfdir/ssh_host_dsa_key ] ; then 250 echo "$sysconfdir/ssh_host_dsa_key already exists, skipping." 251 else 252 $bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N "" 253 fi 254 if [ -f $sysconfdir/ssh_host_rsa_key ] ; then 255 echo "$sysconfdir/ssh_host_rsa_key already exists, skipping." 256 else 257 $bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N "" 258 fi 259 echo 260 261 # Set startup command depending on SRC support 262 if [ "$AIX_SRC" = "yes" ] 263 then 264 echo Creating SRC sshd subsystem. 265 rmssys -s sshd 2>&1 >/dev/null 266 mkssys -s sshd -p "$sbindir/sshd" -a '-D' -u 0 -S -n 15 -f 9 -R -G tcpip 267 startupcmd="start $sbindir/sshd \\\"\\\$src_running\\\"" 268 oldstartcmd="$sbindir/sshd" 269 else 270 startupcmd="$sbindir/sshd" 271 oldstartcmd="start $sbindir/sshd \\\"$src_running\\\"" 272 fi 273 274 # If migrating to or from SRC, change previous startup command 275 # otherwise add to rc.tcpip 276 if egrep "^\$oldstartcmd" /etc/rc.tcpip >/dev/null 277 then 278 if sed "s|^\$oldstartcmd|\$startupcmd|g" /etc/rc.tcpip >/etc/rc.tcpip.new 279 then 280 chmod 0755 /etc/rc.tcpip.new 281 mv /etc/rc.tcpip /etc/rc.tcpip.old && \ 282 mv /etc/rc.tcpip.new /etc/rc.tcpip 283 else 284 echo "Updating /etc/rc.tcpip failed, please check." 285 fi 286 else 287 # Add to system startup if required 288 if grep "^\$startupcmd" /etc/rc.tcpip >/dev/null 289 then 290 echo "sshd found in rc.tcpip, not adding." 291 else 292 echo "Adding sshd to rc.tcpip" 293 echo >>/etc/rc.tcpip 294 echo "# Start sshd" >>/etc/rc.tcpip 295 echo "\$startupcmd" >>/etc/rc.tcpip 296 fi 297 fi 298 EOF 299 300 # 301 # Create liblpp.a and move control files into it 302 # 303 echo Creating liblpp.a 304 ( 305 cd .. 306 for i in openssh.al openssh.copyright openssh.inventory openssh.post_i openssh.size LICENCE README* 307 do 308 ar -r liblpp.a $i 309 rm $i 310 done 311 ) 312 313 # 314 # Create lpp_name 315 # 316 # This will end up looking something like: 317 # 4 R I OpenSSH { 318 # OpenSSH 3.0.2.1 1 N U en_US OpenSSH 3.0.2p1 Portable for AIX 319 # [ 320 # % 321 # /usr/local/bin 8073 322 # /usr/local/etc 189 323 # /usr/local/libexec 185 324 # /usr/local/man/man1 145 325 # /usr/local/man/man8 83 326 # /usr/local/sbin 2105 327 # /usr/local/share 3 328 # % 329 # ] 330 # } 331 332 echo Creating lpp_name 333 cat <<EOF >../lpp_name 334 4 R I $PKGNAME { 335 $PKGNAME $BFFVERSION 1 N U en_US OpenSSH $VERSION Portable for AIX 336 [ 337 % 338 EOF 339 340 for i in $bindir $sysconfdir $libexecdir $mandir/${mansubdir}1 $mandir/${mansubdir}8 $sbindir $datadir /usr/lpp/openssh 341 do 342 # get size in 512 byte blocks 343 if [ -d $FAKE_ROOT/$i ] 344 then 345 size=`du $FAKE_ROOT/$i | awk '{print $1}'` 346 echo "$i $size" >>../lpp_name 347 fi 348 done 349 350 echo '%' >>../lpp_name 351 echo ']' >>../lpp_name 352 echo '}' >>../lpp_name 353 354 # 355 # Move pieces into place 356 # 357 mkdir -p usr/lpp/openssh 358 mv ../liblpp.a usr/lpp/openssh 359 mv ../lpp_name . 360 361 # 362 # Now invoke backup to create .bff file 363 # note: lpp_name needs to be the first file so we generate the 364 # file list on the fly and feed it to backup using -i 365 # 366 echo Creating $PKGNAME-$VERSION.bff with backup... 367 rm -f $PKGNAME-$VERSION.bff 368 ( 369 echo "./lpp_name" 370 find . ! -name lpp_name -a ! -name . -print 371 ) | backup -i -q -f ../$PKGNAME-$VERSION.bff $filelist 372 373 # 374 # Move package into final location and clean up 375 # 376 mv ../$PKGNAME-$VERSION.bff $startdir 377 cd $startdir 378 rm -rf $objdir/$PKGDIR 379 380 echo $0: done. 381 382
