155 lines
4.0 KiB
Plaintext
155 lines
4.0 KiB
Plaintext
## This snippet preserves files during re-build.
|
|
## It supersedes other similar snippets - keep_*_keys.
|
|
## Put it in %pre section of the kickstart template file
|
|
## It uses preserve_files field which should contain a list of items to preserve
|
|
## This field for now could contain any of the following:
|
|
## 'ssh', 'cfengine', 'rhn' in any order
|
|
## 'rhn' part of this snippet should NOT be used with systems subscribed
|
|
## to Red Hat Satellite Server or Spacewalk as these
|
|
## have a concept of "reactivation keys" to keep the systems
|
|
## appearing to be the same. Also do not use if changing
|
|
## base channels, i.e. RHEL4 -> RHEL5 upgrades.
|
|
##
|
|
|
|
#if $getVar('$preserve_files','') != ''
|
|
#set $preserve_files = $getVar('$preserve_files','')
|
|
preserve_files = $preserve_files
|
|
|
|
#raw
|
|
# Nifty trick to restore keys without using a nochroot %post
|
|
|
|
echo "Saving keys..." > /dev/ttyS0
|
|
|
|
insmod /lib/jbd.o
|
|
insmod /lib/ext3.o
|
|
|
|
function findkeys
|
|
{
|
|
for disk in $DISKS; do
|
|
name=$(basename $disk)
|
|
tmpdir=$(mktemp -d $name.XXXXXX)
|
|
mkdir -p /tmp/$tmpdir
|
|
mount $disk /tmp/$tmpdir
|
|
if [ $? -ne 0 ]; then # Skip to the next partition if the mount fails
|
|
rm -rf /tmp/$tmpdir
|
|
continue
|
|
fi
|
|
# Copy current host keys out to be reused
|
|
if [ -d /tmp/$tmpdir$SEARCHDIR ] && cp -a /tmp/$tmpdir$SEARCHDIR/${PATTERN}* /tmp/$TEMPDIR; then
|
|
keys_found="yes"
|
|
umount /tmp/$tmpdir
|
|
rm -r /tmp/$tmpdir
|
|
break
|
|
elif [ -n "$SHORTDIR" ] && [ -d /tmp/$tmpdir$SHORTDIR ] && cp -a /tmp/$tmpdir$SHORTDIR/${PATTERN}* /tmp/$TEMPDIR; then
|
|
keys_found="yes"
|
|
umount /tmp/$tmpdir
|
|
rm -r /tmp/$tmpdir
|
|
break
|
|
fi
|
|
umount /tmp/$tmpdir
|
|
rm -r /tmp/$tmpdir
|
|
done
|
|
}
|
|
|
|
function search_for_keys
|
|
{
|
|
|
|
SEARCHDIR=$1
|
|
TEMPDIR=$2
|
|
PATTERN=$3
|
|
|
|
keys_found=no
|
|
# /var could be a separate partition
|
|
SHORTDIR=${SEARCHDIR#/var}
|
|
if [ $SHORTDIR = $SEARCHDIR ]; then
|
|
SHORTDIR=''
|
|
fi
|
|
|
|
mkdir -p /tmp/$TEMPDIR
|
|
|
|
DISKS=$(awk '{if ($NF ~ "^[a-zA-Z].*[0-9]$" && $NF !~ "c[0-9]+d[0-9]+$" && $NF !~ "^loop.*") print "/dev/"$NF}' /proc/partitions)
|
|
# In the awk line above we want to make list of partitions, but not devices/controllers
|
|
# cciss raid controllers have partitions like /dev/cciss/cNdMpL, where N,M,L - some digits, we want to make sure 'pL' is there
|
|
# No need to scan loopback niether.
|
|
# Try to find the keys on ordinary partitions
|
|
|
|
findkeys
|
|
|
|
# Try software RAID
|
|
if [ "$keys_found" = "no" ]; then
|
|
if mdadm -As; then
|
|
DISKS=$(awk '/md/{print "/dev/"$1}' /proc/mdstat)
|
|
findkeys
|
|
fi
|
|
fi
|
|
|
|
|
|
# Try LVM if that didn't work
|
|
if [ "$keys_found" = "no" ]; then
|
|
lvm lvmdiskscan
|
|
vgs=$(lvm vgs | tail -n +2 | awk '{ print $1 }')
|
|
for vg in $vgs; do
|
|
# Activate any VG we found
|
|
lvm vgchange -ay $vg
|
|
done
|
|
|
|
DISKS=$(lvm lvs | tail -n +2 | awk '{ print "/dev/" $2 "/" $1 }')
|
|
findkeys
|
|
|
|
# And clean up..
|
|
for vg in $vgs; do
|
|
lvm vgchange -an $vg
|
|
done
|
|
fi
|
|
}
|
|
|
|
function restore_keys
|
|
{
|
|
SEARCHDIR=$1
|
|
TEMPDIR=$2
|
|
PATTERN=$3
|
|
# Loop until the corresponding rpm is installed if the keys are saved
|
|
if [ "$keys_found" = "yes" ] && [ -f /tmp/$TEMPDIR/${PATTERN}* ]; then
|
|
while : ; do
|
|
sleep 10
|
|
if [ -d /mnt/sysimage$SEARCHDIR ] ; then
|
|
cp -af /tmp/$TEMPDIR/${PATTERN}* /mnt/sysimage$SEARCHDIR
|
|
logger "$TEMPDIR keys copied to newly installed system"
|
|
break
|
|
fi
|
|
done &
|
|
fi
|
|
}
|
|
|
|
for key in $preserve_files
|
|
do
|
|
if [ $key = 'ssh' ]; then
|
|
search_for_keys '/etc/ssh' 'ssh' 'ssh_host_'
|
|
elif [ $key = 'cfengine' ]; then
|
|
search_for_keys '/var/cfengine/ppkeys' 'cfengine' 'localhost'
|
|
elif [ $key = 'rhn' ]; then
|
|
search_for_keys '/etc/sysconfig/rhn', 'rhn', '*'
|
|
else
|
|
echo "No keys to save!" > /dev/ttyS0
|
|
fi
|
|
done
|
|
|
|
# now restore keys if found
|
|
|
|
for key in $preserve_files
|
|
do
|
|
if [ $key = 'ssh' ]; then
|
|
restore_keys '/etc/ssh' 'ssh' 'ssh_host_'
|
|
elif [ $key = 'cfengine' ]; then
|
|
restore_keys '/var/cfengine/ppkeys' 'cfengine' 'localhost'
|
|
elif [ $key = 'rhn' ]; then
|
|
restore_keys '/etc/sysconfig/rhn', 'rhn', '*'
|
|
else
|
|
echo "Nothing to restore!" > /dev/ttyS0
|
|
fi
|
|
done
|
|
|
|
|
|
#end raw
|
|
#end if
|