base-files: sysupgrade: Allow downloading of firmware images using HTTPS
[openwrt/openwrt.git] / package / base-files / files / sbin / sysupgrade
1 #!/bin/sh
2
3 . /lib/functions.sh
4 . /lib/functions/system.sh
5
6 # initialize defaults
7 export MTD_CONFIG_ARGS=""
8 export INTERACTIVE=0
9 export VERBOSE=1
10 export SAVE_CONFIG=1
11 export SAVE_OVERLAY=0
12 export SAVE_PARTITIONS=1
13 export CONF_IMAGE=
14 export CONF_BACKUP_LIST=0
15 export CONF_BACKUP=
16 export CONF_RESTORE=
17 export NEED_IMAGE=
18 export HELP=0
19 export FORCE=0
20 export TEST=0
21
22 # parse options
23 while [ -n "$1" ]; do
24 case "$1" in
25 -i) export INTERACTIVE=1;;
26 -v) export VERBOSE="$(($VERBOSE + 1))";;
27 -q) export VERBOSE="$(($VERBOSE - 1))";;
28 -n) export SAVE_CONFIG=0;;
29 -c) export SAVE_OVERLAY=1;;
30 -p) export SAVE_PARTITIONS=0;;
31 -b|--create-backup) export CONF_BACKUP="$2" NEED_IMAGE=1; shift;;
32 -r|--restore-backup) export CONF_RESTORE="$2" NEED_IMAGE=1; shift;;
33 -l|--list-backup) export CONF_BACKUP_LIST=1; break;;
34 -f) export CONF_IMAGE="$2"; shift;;
35 -F|--force) export FORCE=1;;
36 -T|--test) export TEST=1;;
37 -h|--help) export HELP=1; break;;
38 -*)
39 echo "Invalid option: $1"
40 exit 1
41 ;;
42 *) break;;
43 esac
44 shift;
45 done
46
47 export CONFFILES=/tmp/sysupgrade.conffiles
48 export CONF_TAR=/tmp/sysupgrade.tgz
49
50 IMAGE="$1"
51
52 [ -z "$IMAGE" -a -z "$NEED_IMAGE" -o $HELP -gt 0 ] && {
53 cat <<EOF
54 Usage: $0 [<upgrade-option>...] <image file or URL>
55 $0 [-q] [-i] <backup-command> <file>
56
57 upgrade-option:
58 -f <config> restore configuration from .tar.gz (file or url)
59 -i interactive mode
60 -c attempt to preserve all changed files in /etc/
61 -n do not save configuration over reflash
62 -p do not attempt to restore the partition table after flash.
63 -T | --test
64 Verify image and config .tar.gz but do not actually flash.
65 -F | --force
66 Flash image even if image checks fail, this is dangerous!
67 -q less verbose
68 -v more verbose
69 -h | --help display this help
70
71 backup-command:
72 -b | --create-backup <file>
73 create .tar.gz of files specified in sysupgrade.conf
74 then exit. Does not flash an image. If file is '-',
75 i.e. stdout, verbosity is set to 0 (i.e. quiet).
76 -r | --restore-backup <file>
77 restore a .tar.gz created with sysupgrade -b
78 then exit. Does not flash an image. If file is '-',
79 the archive is read from stdin.
80 -l | --list-backup
81 list the files that would be backed up when calling
82 sysupgrade -b. Does not create a backup file.
83
84 EOF
85 exit 1
86 }
87
88 [ -n "$IMAGE" -a -n "$NEED_IMAGE" ] && {
89 cat <<-EOF
90 -b|--create-backup and -r|--restore-backup do not perform a firmware upgrade.
91 Do not specify both -b|-r and a firmware image.
92 EOF
93 exit 1
94 }
95
96 # prevent messages from clobbering the tarball when using stdout
97 [ "$CONF_BACKUP" = "-" ] && export VERBOSE=0
98
99
100 list_conffiles() {
101 awk '
102 BEGIN { conffiles = 0 }
103 /^Conffiles:/ { conffiles = 1; next }
104 !/^ / { conffiles = 0; next }
105 conffiles == 1 { print }
106 ' /usr/lib/opkg/status
107 }
108
109 list_changed_conffiles() {
110 # Cannot handle spaces in filenames - but opkg cannot either...
111 list_conffiles | while read file csum; do
112 [ -r "$file" ] || continue
113
114 echo "${csum} ${file}" | sha256sum -sc - || echo "$file"
115 done
116 }
117
118 add_uci_conffiles() {
119 local file="$1"
120 ( find $(sed -ne '/^[[:space:]]*$/d; /^#/d; p' \
121 /etc/sysupgrade.conf /lib/upgrade/keep.d/* 2>/dev/null) \
122 -type f -o -type l 2>/dev/null;
123 list_changed_conffiles ) | sort -u > "$file"
124 return 0
125 }
126
127 add_overlayfiles() {
128 local file="$1"
129 find /overlay/upper/etc/ -type f -o -type l | sed \
130 -e 's,^/overlay\/upper/,/,' \
131 -e '\,/META_[a-zA-Z0-9]*$,d' \
132 -e '\,/functions.sh$,d' \
133 -e '\,/[^/]*-opkg$,d' \
134 > "$file"
135 return 0
136 }
137
138 # hooks
139 sysupgrade_image_check="fwtool_check_signature fwtool_check_image platform_check_image"
140
141 if [ $SAVE_OVERLAY = 1 ]; then
142 [ ! -d /overlay/upper/etc ] && {
143 echo "Cannot find '/overlay/upper/etc', required for '-c'"
144 exit 1
145 }
146 sysupgrade_init_conffiles="add_overlayfiles"
147 else
148 sysupgrade_init_conffiles="add_uci_conffiles"
149 fi
150
151 include /lib/upgrade
152
153 do_save_conffiles() {
154 local conf_tar="${1:-$CONF_TAR}"
155
156 [ -z "$(rootfs_type)" ] && {
157 echo "Cannot save config while running from ramdisk."
158 ask_bool 0 "Abort" && exit
159 rm -f "$conf_tar"
160 return 0
161 }
162 run_hooks "$CONFFILES" $sysupgrade_init_conffiles
163 ask_bool 0 "Edit config file list" && vi "$CONFFILES"
164
165 v "Saving config files..."
166 [ "$VERBOSE" -gt 1 ] && TAR_V="v" || TAR_V=""
167 tar c${TAR_V}zf "$conf_tar" -T "$CONFFILES" 2>/dev/null
168 if [ "$?" -ne 0 ]; then
169 echo "Failed to create the configuration backup."
170 rm -f "$conf_tar"
171 exit 1
172 fi
173
174 rm -f "$CONFFILES"
175 }
176
177 if [ $CONF_BACKUP_LIST -eq 1 ]; then
178 run_hooks "$CONFFILES" $sysupgrade_init_conffiles
179 cat "$CONFFILES"
180 rm -f "$CONFFILES"
181 exit 0
182 fi
183
184 if [ -n "$CONF_BACKUP" ]; then
185 do_save_conffiles "$CONF_BACKUP"
186 exit $?
187 fi
188
189 if [ -n "$CONF_RESTORE" ]; then
190 if [ "$CONF_RESTORE" != "-" ] && [ ! -f "$CONF_RESTORE" ]; then
191 echo "Backup archive '$CONF_RESTORE' not found."
192 exit 1
193 fi
194
195 [ "$VERBOSE" -gt 1 ] && TAR_V="v" || TAR_V=""
196 tar -C / -x${TAR_V}zf "$CONF_RESTORE"
197 exit $?
198 fi
199
200 type platform_check_image >/dev/null 2>/dev/null || {
201 echo "Firmware upgrade is not implemented for this platform."
202 exit 1
203 }
204
205 case "$IMAGE" in
206 http://*|\
207 https://*)
208 wget -O/tmp/sysupgrade.img "$IMAGE"
209 IMAGE=/tmp/sysupgrade.img
210 ;;
211 esac
212
213 IMAGE="$(readlink -f "$IMAGE")"
214
215 case "$IMAGE" in
216 '')
217 echo "Image file not found."
218 exit 1
219 ;;
220 /tmp/*) ;;
221 *)
222 v "Image not in /tmp, copying..."
223 cp -f "$IMAGE" /tmp/sysupgrade.img
224 IMAGE=/tmp/sysupgrade.img
225 ;;
226 esac
227
228 export ARGV="$IMAGE"
229 export ARGC=1
230
231 for check in $sysupgrade_image_check; do
232 ( $check "$IMAGE" ) || {
233 if [ $FORCE -eq 1 ]; then
234 echo "Image check '$check' failed but --force given - will update anyway!"
235 break
236 else
237 echo "Image check '$check' failed."
238 exit 1
239 fi
240 }
241 done
242
243 if [ -n "$CONF_IMAGE" ]; then
244 case "$(get_magic_word $CONF_IMAGE cat)" in
245 # .gz files
246 1f8b) ;;
247 *)
248 echo "Invalid config file. Please use only .tar.gz files"
249 exit 1
250 ;;
251 esac
252 get_image "$CONF_IMAGE" "cat" > "$CONF_TAR"
253 export SAVE_CONFIG=1
254 elif ask_bool $SAVE_CONFIG "Keep config files over reflash"; then
255 [ $TEST -eq 1 ] || do_save_conffiles
256 export SAVE_CONFIG=1
257 else
258 [ $TEST -eq 1 ] || rm -f "$CONF_TAR"
259 export SAVE_CONFIG=0
260 fi
261
262 if [ $TEST -eq 1 ]; then
263 exit 0
264 fi
265
266 if [ $SAVE_PARTITIONS -eq 0 ]; then
267 touch /tmp/sysupgrade.always.overwrite.bootdisk.partmap
268 else
269 rm -f /tmp/sysupgrade.always.overwrite.bootdisk.partmap
270 fi
271
272 install_bin /sbin/upgraded
273 v "Commencing upgrade. Closing all shell sessions."
274
275 COMMAND='. /lib/functions.sh; include /lib/upgrade; do_upgrade_stage2'
276
277 if [ -n "$FAILSAFE" ]; then
278 printf '%s\x00%s\x00%s' "$RAM_ROOT" "$IMAGE" "$COMMAND" >/tmp/sysupgrade
279 lock -u /tmp/.failsafe
280 else
281 ubus call system sysupgrade "{
282 \"prefix\": $(json_string "$RAM_ROOT"),
283 \"path\": $(json_string "$IMAGE"),
284 \"command\": $(json_string "$COMMAND")
285 }"
286 fi