#!/bin/ksh

#

# CDDL HEADER START

#

# The contents of this file are subject to the terms of the

# Common Development and Distribution License, Version 1.0 only

# (the "License").  You may not use this file except in compliance

# with the License.

#

# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE

# or http://www.opensolaris.org/os/licensing.

# See the License for the specific language governing permissions

# and limitations under the License.

#

# When distributing Covered Code, include this CDDL HEADER in each

# file and include the License file at usr/src/OPENSOLARIS.LICENSE.

# If applicable, add the following below this CDDL HEADER, with the

# fields enclosed by brackets "[]" replaced with your own identifying

# information: Portions Copyright [yyyy] [name of copyright owner]

#

# CDDL HEADER END

#

#

# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.

# Use is subject to license terms.

#

# ident	"%Z%%M%	%I%	%E% SMI"

#

# Upgrade a machine from a cpio archive area in about 5 minutes.

# By Roger Faulkner and Jeff Bonwick, April 1993.

# (bfu == Bonwick/Faulkner Upgrade, a.k.a. Blindingly Fast Upgrade)

#

# Usage: bfu    [-f] <archive_dir> [root-dir]	# for normal machines

#        bfu -c [-f] <archive_dir> <exec-dir>	# for diskless clients

#

# The -f flag is to override the built-in safety check which requires

# that the starting-point OS be a least a certain revision.

#

# You have to be super-user.  It's safest to run this from the

# system console, although I've run it under OW and even via

# remote login with no problems.

#

# You will have to reboot the system when the upgrade is complete.

#

# You should add any administrative files you care about to this list.

# Warning: there had better be no leading '/' on any of these filenames.

#

# The CDPATH variable causes ksh's `cd' builtin to emit messages to stdout

# under certain circumstances, which can really screw things up; unset it.

#

unset CDPATH

export LC_ALL="C"

if [ -z "$GATEPATH" ]; then

	GATEPATH=/ws/onnv-gate

	test -d $GATEPATH || GATEPATH=/net/onnv.eng/export/gate

fi

if [ -z "$ARCHIVEPATH" ]; then

	ARCHIVEPATH=/ws/onnv-gate

	test -d $ARCHIVEPATH || ARCHIVEPATH=/net/onnv.eng/export

fi

export GATE=${GATEPATH}

export ARCHIVE=${ARCHIVEPATH}

#

# NOTE:	Entries in *_files must expand to either the exact files required,

#	or to directories that will be scoured for files.  Any directories

#	(and subdirectories) resulting from a wildcard expansion will be

#	fully recursed by BFU's searching for files.  (E.g. /etc/inet/* will

#	include all files in any of its directories, as well as any files in

#	/etc/inet/ itself.

#

# First list: files to be saved in global and non-global zones.

#

all_zones_files="

	etc/.login

	etc/acct/holidays

	etc/acctadm.conf

	etc/aggregation.conf

	etc/auto_*

	etc/cron.d/at.deny

	etc/cron.d/cron.deny

	etc/crypto/pkcs11.conf

	etc/datalink.conf

	etc/default/*

	etc/dfs/dfstab

	etc/dumpdates

	etc/ftpd/*

	etc/ftpusers

	etc/group

	etc/gss/gsscred.conf

	etc/gss/mech

	etc/gss/qop

	etc/inet/*

	etc/init.d/*

	etc/inittab

	etc/krb5/kadm5.acl

	etc/krb5/kdc.conf

	etc/krb5/kpropd.acl

	etc/krb5/krb5.conf

	etc/krb5/warn.conf

	etc/logadm.conf

	etc/logindevperm

	etc/lp/Systems

	etc/mail/*.cf

	etc/mail/*.hf

	etc/mail/*.rc

	etc/mail/aliases

	etc/mail/helpfile

	etc/mail/local-host-names

	etc/mail/trusted-users

	etc/net/*/services

	etc/netconfig

	etc/nfs/nfslog.conf

	etc/nfssec.conf

	etc/nscd.conf

	etc/nsswitch.*

	etc/pam.conf

	etc/passwd

	etc/policy.conf

	etc/printers.conf

	etc/profile

	etc/project

	etc/publickey

	etc/remote

	etc/named.conf

	etc/resolv.conf

	etc/rmmount.conf

	etc/rpc

	etc/rpld.conf

	etc/saf/_sactab

	etc/saf/_sysconfig

	etc/saf/zsmon/_pmtab

	etc/security/*_attr

	etc/security/audit_*

	etc/security/crypt.conf

	etc/security/policy.conf

	etc/sfw/openssl/openssl.cnf

	etc/shadow

	etc/skel/.profile

	etc/skel/local.*

	etc/smartcard/.keys

	etc/smartcard/desktop.properties

	etc/smartcard/ocf.classpath

	etc/smartcard/opencard.properties

	etc/ssh/ssh_config

	etc/ssh/sshd_config

	etc/syslog.conf

	etc/ttydefs

	etc/ttysrch

	etc/user_attr

	etc/uucp/[A-Z]*

	etc/vfstab

	etc/vold.conf

	var/spool/cron/crontabs/*

	var/yp/Makefile

	var/yp/aliases

	var/yp/nicknames

"

#

# Second list: files to be saved in the global zone only.

#

global_zone_only_files="

	boot/grub/menu.lst

	boot/solaris/bootenv.rc

	boot/solaris/devicedb/master

	boot/solaris/filelist.ramdisk

	etc/bootrc

	etc/crypto/kcf.conf

	etc/devlink.tab

	etc/driver_aliases

	etc/driver_classes

	etc/ipf/ipf.conf

	etc/ipf/pfil.ap

	etc/iu.ap

	etc/lvm/devpath

	etc/lvm/lock

	etc/lvm/md.cf

	etc/lvm/md.ctlrmap

	etc/lvm/md.tab

	etc/lvm/mddb.cf

	etc/lvm/runtime.cf

	etc/mach

	etc/minor_perm

	etc/name_to_major

	etc/name_to_sysnum

	etc/nca/*

	etc/openwin/server/etc/OWconfig

	etc/path_to_inst

	etc/power.conf

	etc/ppp/chap-secrets

	etc/ppp/options

	etc/ppp/pap-secrets

	etc/security/device_policy

	etc/security/extra_privs

	etc/system

	etc/zones/index

	kernel/drv/elxl.conf

	kernel/drv/md.conf

	kernel/drv/options.conf

	kernel/drv/ra.conf

	kernel/drv/scsa2usb.conf

	kernel/drv/scsi_vhci.conf

	kernel/drv/sd.conf

	platform/*/kernel/drv/*ppm.conf

	platform/i86pc/kernel/drv/aha.conf

	platform/i86pc/kernel/drv/asy.conf

	platform/sun4u/boot.conf

"

#

# Third list: files extracted from generic.root but which belong in the global

# zone only: they are superfluous (and some even harmful) in local zones.

#

# (note: as /etc/init.d scripts are converted to smf(5) "Greenline" services,

# they (and their /etc/rc?.d hardlinks) should be removed from this list when

# they are added to smf_obsolete_rc_files, below)

#

superfluous_local_zone_files="

	dev/dsk

	dev/fd

	dev/pts

	dev/rdsk

	dev/rmt

	dev/sad

	dev/stderr

	dev/stdin

	dev/stdout

	dev/swap

	dev/term

	devices

	etc/dacf.conf

	etc/dat

	etc/default/dhcpagent

	etc/default/inetinit

	etc/default/ipsec

	etc/default/metassist.xml

	etc/default/mpathd

	etc/default/power

	etc/flash/postdeployment/svm.cleanup

	etc/flash/predeployment/svm.save

	etc/fm

	etc/inet/datemsk.ndpd

	etc/inet/ike

	etc/inet/ipqosconf.1.sample

	etc/inet/ipqosconf.2.sample

	etc/inet/ipqosconf.3.sample

	etc/inet/ipsecalgs

	etc/inet/ipsecinit.sample

	etc/inet/mipagent.conf-sample

	etc/inet/mipagent.conf.fa-sample

	etc/inet/mipagent.conf.ha-sample

	etc/inet/secret

	etc/inet/sock2path

	etc/init.d/audit

	etc/init.d/devlinks

	etc/init.d/dodatadm.udaplt

	etc/init.d/drvconfig

	etc/init.d/flashprom

	etc/init.d/llc2

	etc/init.d/mipagent

	etc/init.d/ncakmod

	etc/init.d/ncalogd

	etc/init.d/pcmcia

	etc/init.d/pppd

	etc/init.d/sckm

	etc/init.d/wrsmcfg

	etc/ipf

	etc/llc2

	etc/lvm

	etc/nca

	etc/openwin

	etc/ppp

	etc/rc0.d/K06mipagent

	etc/rc0.d/K33audit

	etc/rc0.d/K34ncalogd

	etc/rc0.d/K42sckm

	etc/rc0.d/K50pppd

	etc/rc0.d/K52llc2

	etc/rc1.d/K06mipagent

	etc/rc1.d/K33audit

	etc/rc1.d/K34ncalogd

	etc/rc1.d/K40sf880dr

	etc/rc1.d/K42sckm

	etc/rc1.d/K50pppd

	etc/rc1.d/K52llc2

	etc/rc2.d/K06mipagent

	etc/rc2.d/S40llc2

	etc/rc2.d/S42ncakmod

	etc/rc2.d/S47pppd

	etc/rc2.d/S70sckm

	etc/rc2.d/S75flashprom

	etc/rc2.d/S81dodatadm.udaplt

	etc/rc2.d/S94ncalogd

	etc/rc2.d/S98efcode

	etc/rc2.d/S99audit

	etc/rc3.d/S80mipagent

	etc/rcS.d/K06mipagent

	etc/rcS.d/K34ncalogd

	etc/rcS.d/K42sckm

	etc/rcS.d/K44wrsmcfg

	etc/rcS.d/K50pppd

	etc/rcS.d/K52llc2

	etc/rcS.d/S29wrsmcfg

	etc/rcm

	etc/snmp/conf/mipagent.acl

	etc/snmp/conf/mipagent.reg

	etc/sock2path

	etc/usb

	etc/wrsm

	etc/zones

	kernel

	lib/svc/method/svc-intrd

	var/adm/pool

	var/fm

	var/log/pool

	var/svc/manifest/network/aggregation.xml

	var/svc/manifest/network/datalink-init.xml

	var/svc/manifest/network/datalink.xml

	var/svc/manifest/network/ipfilter.xml

	var/svc/manifest/network/pfil.xml

	var/svc/manifest/platform

	var/svc/manifest/system/cvc.xml

	var/svc/manifest/system/dumpadm.xml

	var/svc/manifest/system/fmd.xml

	var/svc/manifest/system/intrd.xml

	var/svc/manifest/system/mdmonitor.xml

	var/svc/manifest/system/metainit.xml

	var/svc/manifest/system/picl.xml

	var/svc/manifest/system/power.xml

	var/svc/manifest/system/sysevent.xml

	var/svc/manifest/system/zones.xml

"

#

# files to be preserved, ie unconditionally restored to "child" versions

#

preserve_files="

	kernel/misc/amd64/sysinit

	kernel/misc/sysinit

	var/adm/aculog

	var/adm/spellhist

	var/adm/utmpx

	var/adm/wtmpx

	var/log/authlog

	var/log/syslog

	var/saf/zsmon/log

"

realmode_files="

	boot/solaris/bootenv.rc

	boot/solaris/devicedb/master

"

local_zone_info_file=/tmp/local_zone_info.$$

rm -f $local_zone_info_file

fail() {

	print "$*" >& 2

	print "bfu aborting" >& 2

	rm -f $local_zone_info_file

	prun 1

	exit 1

}

filelist() {

	files="$all_zones_files $preserve_files"

	if [ $1 = "global" ]; then

		files="$global_zone_only_files $files"

	fi

	find $files -depth -type f ! -name core -print 2>/dev/null | sort -u || {

		#

		# Force cpio to return non-zero by printing an error message

		# to stdout that it won't be able to lstat().

		#

		echo 'filelist: sort failed'

		fail "sort failed"

	}

}

realmode_filelist() {

	find $realmode_files -depth -type f ! -name core -print 2>/dev/null | sort

}

smf_inetd_conversions="

	100134

	100150

	100155

	100229

	100230

	100234

	100242

	100422

	chargen

	comsat

	daytime

	discard

	echo

	eklogin

	exec

	finger

	ftp

	gssd

	klogin

	krb5_prop

	kshell

	ktkt_warnd

	login

	metad

	metamedd

	metamhd

	name

	ocfserv

	printer

	rexd

	rquotad

	rstatd

	rusersd

	shell

	smserverd

	sprayd

	sun-dr

	talk

	telnet

	time

	uucp

	walld

"

enable_next_boot () {

	if [ -x /tmp/bfubin/svccfg ]; then

	    svcadm disable -t $1

	    [ $? = 0 ] || echo "warning: unable to temporarily disable $1"

	    svccfg -s $1 setprop general/enabled = true

	    [ $? = 0 ] || echo "warning: unable to enable $1 for next boot"

	fi

}

smf_inetd_disable() {

	inetconf=$rootprefix/etc/inet/inetd.conf

	inettmp=/tmp/inetd.tmp.$$

	sed "$(for i in $smf_inetd_conversions; do 

		echo "s:^[ 	]*$i[ 	/]:#SMFbfu# &:"

	done)" $inetconf > $inettmp && ! cmp -s $inettmp $inetconf &&

	    cp $inettmp $inetconf

	rm -f -- $inettmp

}

smf_inetd_reenable() {

	inetconf=$rootprefix/etc/inet/inetd.conf

	inettmp=/tmp/inetd.tmp.$$

	sed 's/^#SMFbfu# //' $inetconf > $inettmp && cp $inettmp $inetconf

	rm -f -- $inettmp

}

smf_tftp_reinstall() {

	inetconf=$rootprefix/etc/inet/inetd.conf

	inettmp=/tmp/inetd.tmp.$$

	if grep '^#SMFbfu# tftp' $inetconf >/dev/null ; then

		# BFU previously commented out, put it back in place

	    	sed 's/^#SMFbfu# tftp/tftp/' $inetconf > $inettmp &&

		    cp $inettmp $inetconf

	elif ! grep '^[#	 ]*tftp' $inetconf >/dev/null; then

		# No entry, append to end

		cat >>$inetconf <<EOF

# TFTPD - tftp server (primarily used for booting)

#tftp	dgram	udp6	wait	root	/usr/sbin/in.tftpd	in.tftpd -s /tftpboot

EOF

	fi

	rm -f -- $inettmp

}

inetd_conf_svm_hack() {

	# Since inetd.conf is updated by SUNWmdr's postinstall script,

	# we will update the actual inetd.conf here to reflect the postinstall

	# changes.

	inetconf=$rootprefix/etc/inet/inetd.conf

	inettmp=/tmp/inetd.tmp.$$

	inetnew=/tmp/inetd.new.$$

	#

	# only change inetd.conf if the rpc.metad entry is out of date

	#

	if ! grep "^[# 	]*100229/1-2" $inetconf > /dev/null ; then

		# Grab existing rpc entries for rpc.metad

		# and convert spaces to tabs within the rpc entry, as well as

		# the transport method; 

		# or add a new entry in case there was none.

		if grep "^[# 	]*100229/1" $inetconf > /dev/null ; then

			grep "^# METAD - SLVM metadb" $inetconf > $inettmp

			grep "^[# 	]*100229/1" $inetconf | \

			    sed -e 's/[ 	][ 	]*/	/g' \

				-e 's?100229/1?100229/1-2?' >> $inettmp

		else

			echo '# METAD - SVM metadb Daemon' > $inettmp

			echo "100229/1-2\ttli\trpc/tcp\twait\troot\t/usr/sbin/rpc.metad\trpc.metad" >> $inettmp

		fi

		grep -v '^# METAD - SLVM metadb' $inetconf | \

		    grep -v '^[# 	]*100229/1' > $inetnew

		cat $inettmp >> $inetnew

		if ! diff $inetnew $inetconf > /dev/null ; then

			print "Updating inet.conf metad entry ... \c"

			if cp $inetnew $inetconf ; then

				print "done."

			else

				print "failed."

			fi

		fi

		rm -f $inettmp $inetnew

	fi