From bce2179fe350bf34cde0caab97f72c0930539840 Mon Sep 17 00:00:00 2001 From: Ivo Timmermans Date: Thu, 4 May 2000 23:26:24 +0000 Subject: [PATCH] Copied most of the code from the redhat script. --- debian/init.d | 209 +++++++++++++++++++++++++++++++++++++++++++++----- 1 file changed, 191 insertions(+), 18 deletions(-) diff --git a/debian/init.d b/debian/init.d index ffe51bd..16b0961 100644 --- a/debian/init.d +++ b/debian/init.d @@ -1,4 +1,4 @@ -#! /bin/sh +#! /bin/sh -x # # skeleton example file to build /etc/init.d/ scripts. # This file should be used to construct scripts for /etc/init.d. @@ -12,26 +12,196 @@ # This file was automatically customized by dh-make on Fri, 21 Apr 2000 17:07:50 +0200 PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin -DAEMON=/usr/sbin/tinc +DAEMON=/usr/sbin/tincd NAME=tinc -DESC=tinc +DESC="tinc daemons" +NETS="test2" + +TCONF="/etc/tinc" test -f $DAEMON || exit 0 set -e +# Check the daemon +if [ ! -x $TINCD ]; then + echo "**tinc: daemon $TINCD does not exist or is not executable!" + exit +fi + +# Check the configuration directory +if [ ! -d $TCONF ]; then + echo "**tinc: configuration directory ($TCONF) not found!" + exit +fi + + +############################################################################## +# vpn_load () Loads VPN configuration +# +# $1 ... VPN to load + + +vpn_load () { + CFG="$TCONF/$1/tinc.conf" + [ -f $CFG ] || { echo "tinc: $CFG does not exist" >&2 ; return 1; } + + # load TINCD config + DEV=`grep -i -e '^[[:space:]]*TapDevice' $CFG | sed 's/[[:space:]]//g; s/^.*=//g'` + VPN=`grep -i -e '^[[:space:]]*(MyOwnVPNIP|MyVirtualIP)' -E $CFG | head -1 | sed 's/[[:space:]]//g; s/^.*=//g'` + + # discourage empty and multiple entries + [ -z "$DEV" ] && \ + { echo "tinc: TapDevice required" >&2 ; return 2; } + echo $DEV | grep -q '^/dev/tap' || + { echo "tinc: TapDevice should be in form /dev/tapX" >&2 ; return 2; } + [ `echo $DEV | wc -l` -gt 1 ] && + { echo "tinc: multiple TapDevice entries not allowed" >&2 ; return 3; } + [ -z "$VPN" ] && \ + { echo "tinc: MyOwnVPNIP/MyVirtualIP required" >&2 ; return 2; } + [ `echo $VPN | wc -l` -gt 1 ] && + { echo "tinc: multiple MyOwnVPNIP/MyVirtualIP entries not allowed" >&2 ; return 3; } + echo $VPN | grep -q -x \ + '\([[:digit:]]\{1,3\}\.\)\{3\}[[:digit:]]\{1,3\}/[[:digit:]]\{1,2\}' || \ + { echo "tinc: badly formed MyOwnVPNIP/MyVirtualIP address $VPN" ; return 3; } + + # network device + TAP=`echo $DEV | cut -d"/" -f3` + NUM=`echo $TAP | sed 's/tap//'` + + # IP address, netmask length + ADR=`echo $VPN | cut -d"/" -f1` + LEN=`echo $VPN | cut -d"/" -f2` + + # Expand bitlength to netmask + MSK=""; len=$LEN + for cnt in 1 1 1 0 ; do + if [ $len -ge 8 ]; then + msk=8 + else + msk=$len + fi + + MSK="$MSK$((255 & (255 << (8 - msk))))" + [ $cnt -ne 0 ] && MSK="$MSK." + len=$((len-msk)) + done + + # Network & broadcast addresses +# BRD=`ipcalc --broadcast $ADR $MSK | cut -d"=" -f2` +# NET=`ipcalc --network $ADR $MSK | cut -d"=" -f2` + + # MAC address + MAC=`printf "fe:fd:%0.2x:%0.2x:%0.2x:%0.2x" $(echo $ADR | sed 's/\./ /g')` + echo + echo "TAP $TAP NUM $NUM ADR $ADR LEN $LEN MSK $MSK BRD $BRD NET $NET MAC $MAC" >&2 + return 0 +} + + +############################################################################## +# vpn_start () starts specified VPN +# +# $1 ... VPN to start + +vpn_start () { + + vpn_load $1 || { echo "**tinc: could not vpn_load $1" >&2 ; return 1; } + + # create device file + if [ ! -c $DEV ]; then + [ -e $DEV ] && rm -f $DEV + mknod --mode=0600 $DEV c 36 $((16 + NUM)) + fi + + # load device module + { insmod ethertap --name="ethertap$NUM" unit="$NUM" 2>&1 || \ + { echo "**tinc: cannot insmod ethertap$NUM" >&2 ; return 2; } ; + } | grep -v '^Us' + + # configure the interface + ip link set $TAP address $MAC + ip link set $TAP up + ip addr flush dev $TAP 2>&1 | grep -v -x '^Nothing to flush.' + ip addr add $VPN brd $BRD dev $TAP + + # start tincd + $TINCD --net="$1" $DEBUG || \ + { echo "**tinc: could not start $TINCD" >&2; return 3; } + + # default interface route + # ip route add $NET/$LEN dev $TAP + + # setup routes + /etc/sysconfig/network-scripts/ifup-routes $TAP + + return 0 +} # vpn_start + + +############################################################################## +# vpn_stop () Stops specified VPN +# +# $1 ... VPN to stop + +vpn_stop () { + + vpn_load $1 || return 1 + + # flush the routing table + # ip route flush dev $TAP &> /dev/null + + # kill the tincd daemon + PID="$TPIDS/tinc.$1.pid" + if [ -f $PID ]; then + $TINCD --net="$1" --kill &> /dev/null + RET=$? + + if [ $RET -eq 0 ]; then + dly=0 + while [ $dly -le 5 ]; do + [ -f $PID ] || break + sleep 1; dly=$((dly+1)) + done + fi + + [ -f $PID ] && rm -f $PID + fi + + # bring the interface down + ip link set $TAP down &> /dev/null + + # remove ethertap module + rmmod "ethertap$NUM" &> /dev/null + + return 0 +} # vpn_stop + + + + + + + case "$1" in start) - echo -n "Starting $DESC: " - start-stop-daemon --start --quiet --pidfile /var/run/$NAME.pid \ - --exec $DAEMON - echo "$NAME." + echo -n "Starting $DESC:" + for net in $NETS ; do + echo -n " $net" + vpn_start $net + start-stop-daemon --start --quiet --pidfile /var/run/$NAME.$net.pid \ + --exec $DAEMON -- -n $net + done + echo "." ;; stop) - echo -n "Stopping $DESC: " - start-stop-daemon --stop --quiet --pidfile /var/run/$NAME.pid \ - --exec $DAEMON - echo "$NAME." + echo -n "Stopping $DESC:" + for net in $NETS ; do + echo -n " $net" + start-stop-daemon --stop --quiet --pidfile /var/run/$NAME.$net.pid \ + --exec $DAEMON -- -n $net -k + done + echo "." ;; #reload) # @@ -51,13 +221,16 @@ case "$1" in # option to the "reload" entry above. If not, "force-reload" is # just the same as "restart". # - echo -n "Restarting $DESC: " - start-stop-daemon --stop --quiet --pidfile \ - /var/run/$NAME.pid --exec $DAEMON - sleep 1 - start-stop-daemon --start --quiet --pidfile \ - /var/run/$NAME.pid --exec $DAEMON - echo "$NAME." + echo -n "Restarting $DESC:" + for net in $NETS ; do + start-stop-daemon --stop --quiet --pidfile \ + /var/run/$NAME.$net.pid --exec $DAEMON -- -n $net -k + sleep 1 + start-stop-daemon --start --quiet --pidfile \ + /var/run/$NAME.$net.pid --exec $DAEMON -- -n $net + echo -n " $net" + done + echo "." ;; *) N=/etc/init.d/$NAME -- 2.25.1