Add update script
- Add a new wrapper script for updating Libreswan on all supported OS. The previous vpnupgrade.sh has been moved to vpnupgrade_ubuntu.sh.
This commit is contained in:
hwdsl2
parent
cd40f1e2b7
commit
70873348b9
166
extras/vpnupgrade.sh
Executable file
166
extras/vpnupgrade.sh
Executable file
@ -0,0 +1,166 @@
|
||||
#!/bin/sh
|
||||
#
|
||||
# Script to update Libreswan on Ubuntu, Debian, CentOS/RHEL, Rocky Linux,
|
||||
# AlmaLinux and Amazon Linux 2
|
||||
#
|
||||
# The latest version of this script is available at:
|
||||
# https://github.com/hwdsl2/setup-ipsec-vpn
|
||||
#
|
||||
# Copyright (C) 2021 Lin Song <linsongui@gmail.com>
|
||||
#
|
||||
# This work is licensed under the Creative Commons Attribution-ShareAlike 3.0
|
||||
# Unported License: http://creativecommons.org/licenses/by-sa/3.0/
|
||||
#
|
||||
# Attribution required: please include my name in any derivative and let me
|
||||
# know how you have improved it!
|
||||
|
||||
# Specify which Libreswan version to install. See: https://libreswan.org
|
||||
SWAN_VER=4.4
|
||||
|
||||
### DO NOT edit below this line ###
|
||||
|
||||
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
|
||||
|
||||
exiterr() { echo "Error: $1" >&2; exit 1; }
|
||||
|
||||
check_root() {
|
||||
if [ "$(id -u)" != 0 ]; then
|
||||
exiterr "Script must be run as root. Try 'sudo sh $0'"
|
||||
fi
|
||||
}
|
||||
|
||||
check_vz() {
|
||||
if [ -f /proc/user_beancounters ]; then
|
||||
exiterr "OpenVZ VPS is not supported."
|
||||
fi
|
||||
}
|
||||
|
||||
check_os() {
|
||||
os_type=centos
|
||||
rh_file="/etc/redhat-release"
|
||||
if grep -qs "Red Hat" "$rh_file"; then
|
||||
os_type=rhel
|
||||
fi
|
||||
if grep -qs "release 7" "$rh_file"; then
|
||||
os_ver=7
|
||||
elif grep -qs "release 8" "$rh_file"; then
|
||||
os_ver=8
|
||||
grep -qi stream "$rh_file" && os_ver=8s
|
||||
grep -qi rocky "$rh_file" && os_type=rocky
|
||||
grep -qi alma "$rh_file" && os_type=alma
|
||||
elif grep -qs "Amazon Linux release 2" /etc/system-release; then
|
||||
os_type=amzn
|
||||
os_ver=2
|
||||
else
|
||||
os_type=$(lsb_release -si 2>/dev/null)
|
||||
[ -z "$os_type" ] && [ -f /etc/os-release ] && os_type=$(. /etc/os-release && printf '%s' "$ID")
|
||||
case $os_type in
|
||||
[Uu]buntu)
|
||||
os_type=ubuntu
|
||||
;;
|
||||
[Dd]ebian)
|
||||
os_type=debian
|
||||
;;
|
||||
[Rr]aspbian)
|
||||
os_type=raspbian
|
||||
;;
|
||||
*)
|
||||
exiterr "This script only supports Ubuntu, Debian, CentOS/RHEL 7/8 and Amazon Linux 2."
|
||||
;;
|
||||
esac
|
||||
os_ver=$(sed 's/\..*//' /etc/debian_version | tr -dc 'A-Za-z0-9')
|
||||
if [ "$os_ver" = "8" ] || [ "$os_ver" = "jessiesid" ]; then
|
||||
exiterr "Debian 8 or Ubuntu < 16.04 is not supported."
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
check_swan_ver() {
|
||||
case $SWAN_VER in
|
||||
3.32|4.[1234])
|
||||
true
|
||||
;;
|
||||
*)
|
||||
cat 1>&2 <<EOF
|
||||
Error: Libreswan version '$SWAN_VER' is not supported.
|
||||
This script can install one of these versions:
|
||||
3.32, 4.1-4.3 or 4.4
|
||||
EOF
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
|
||||
ipsec_ver=$(/usr/local/sbin/ipsec --version 2>/dev/null)
|
||||
if ! printf '%s' "$ipsec_ver" | grep -q "Libreswan"; then
|
||||
cat 1>&2 <<'EOF'
|
||||
Error: This script requires Libreswan already installed.
|
||||
See: https://github.com/hwdsl2/setup-ipsec-vpn
|
||||
EOF
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
install_wget() {
|
||||
if ! command -v wget >/dev/null 2>&1; then
|
||||
if [ "$os_type" = "ubuntu" ] || [ "$os_type" = "debian" ] || [ "$os_type" = "raspbian" ]; then
|
||||
export DEBIAN_FRONTEND=noninteractive
|
||||
(
|
||||
set -x
|
||||
apt-get -yqq update
|
||||
) || exiterr "'apt-get update' failed."
|
||||
(
|
||||
set -x
|
||||
apt-get -yqq install wget >/dev/null
|
||||
) || exiterr "'apt-get install wget' failed."
|
||||
else
|
||||
(
|
||||
set -x
|
||||
yum -y -q install wget >/dev/null
|
||||
) || exiterr "'yum install wget' failed."
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
get_setup_url() {
|
||||
base_url="https://github.com/hwdsl2/setup-ipsec-vpn/raw/master/extras"
|
||||
sh_file="vpnupgrade_ubuntu.sh"
|
||||
if [ "$os_type" = "centos" ] || [ "$os_type" = "rhel" ] || [ "$os_type" = "rocky" ] || [ "$os_type" = "alma" ]; then
|
||||
sh_file="vpnupgrade_centos.sh"
|
||||
elif [ "$os_type" = "amzn" ]; then
|
||||
sh_file="vpnupgrade_amzn.sh"
|
||||
fi
|
||||
setup_url="$base_url/$sh_file"
|
||||
}
|
||||
|
||||
run_setup() {
|
||||
status=0
|
||||
TMPDIR=$(mktemp -d /tmp/vpnup.XXXXX 2>/dev/null)
|
||||
if [ -d "$TMPDIR" ]; then
|
||||
if ( set -x; wget -t 3 -T 30 -q -O "$TMPDIR/vpnup.sh" "$setup_url" \
|
||||
|| curl -fsL "$setup_url" -o "$TMPDIR/vpnup.sh" 2>/dev/null ); then
|
||||
VPN_UPDATE_SWAN_VER="$SWAN_VER" /bin/sh "$TMPDIR/vpnup.sh" || status=1
|
||||
else
|
||||
status=1
|
||||
echo "Error: Could not download update script." >&2
|
||||
fi
|
||||
/bin/rm -f "$TMPDIR/vpnup.sh"
|
||||
/bin/rmdir "$TMPDIR"
|
||||
else
|
||||
exiterr "Could not create temporary directory."
|
||||
fi
|
||||
}
|
||||
|
||||
vpnupgrade() {
|
||||
check_root
|
||||
check_vz
|
||||
check_os
|
||||
check_swan_ver
|
||||
install_wget
|
||||
get_setup_url
|
||||
run_setup
|
||||
}
|
||||
|
||||
## Defer setup until we have the complete script
|
||||
vpnupgrade "$@"
|
||||
|
||||
exit "$status"
|
||||
Loading…
x
Reference in New Issue
Block a user