#!/bin/ksh

#

# CDDL HEADER START

#

# The contents of this file are subject to the terms of the

# Common Development and Distribution License (the "License").

# You may not use this file except in compliance with the License.

#

# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE

# or http://www.opensolaris.org/os/licensing.

# See the License for the specific language governing permissions

# and limitations under the License.

#

# When distributing Covered Code, include this CDDL HEADER in each

# file and include the License file at usr/src/OPENSOLARIS.LICENSE.

# If applicable, add the following below this CDDL HEADER, with the

# fields enclosed by brackets "[]" replaced with your own identifying

# information: Portions Copyright [yyyy] [name of copyright owner]

#

# CDDL HEADER END

#

#

# Copyright 2007 Sun Microsystems, Inc.  All rights reserved.

# Use is subject to license terms.

#

# ident	"%Z%%M%	%I%	%E% SMI"

#

# Upgrade a machine from a cpio archive area in about 5 minutes.

# By Roger Faulkner and Jeff Bonwick, April 1993.

# (bfu == Bonwick/Faulkner Upgrade, a.k.a. Blindingly Fast Upgrade)

#

# Usage: bfu    [-f] <archive_dir> [root-dir]	# for normal machines

#        bfu -c [-f] <archive_dir> <exec-dir>	# for diskless clients

#

# The -f flag is to override the built-in safety check which requires

# that the starting-point OS be a least a certain revision.

#

# You have to be super-user.  It's safest to run this from the

# system console, although I've run it under OW and even via

# remote login with no problems.

#

# You will have to reboot the system when the upgrade is complete.

#

# You should add any administrative files you care about to this list.

# Warning: there had better be no leading '/' on any of these filenames.

#

# The CDPATH variable causes ksh's `cd' builtin to emit messages to stdout

# under certain circumstances, which can really screw things up; unset it.

#

unset CDPATH

export LC_ALL="C"

if [ -z "$GATEPATH" ]; then

	GATEPATH=/ws/onnv-gate

	test -d $GATEPATH || GATEPATH=/net/onnv.eng/export/gate

fi

if [ -z "$ARCHIVEPATH" ]; then

	ARCHIVEPATH=/ws/onnv-gate

	test -d $ARCHIVEPATH || ARCHIVEPATH=/net/onnv.eng/export

fi

export GATE=${GATEPATH}

export ARCHIVE=${ARCHIVEPATH}

#

# NOTE:	Entries in *_files must expand to either the exact files required,

#	or to directories that will be scoured for files.  Any directories

#	(and subdirectories) resulting from a wildcard expansion will be

#	fully recursed by BFU's searching for files.  (E.g. /etc/inet/* will

#	include all files in any of its directories, as well as any files in

#	/etc/inet/ itself.

#

#	These lists should really be generated automatically from the

#	pkgmap(4) metadata.

#

#

# First list: files to be saved in global and non-global zones.

#

all_zones_files="

	etc/.login

	etc/acct/holidays

	etc/acctadm.conf

	etc/auto_*

	etc/cron.d/at.deny

	etc/cron.d/cron.deny

	etc/crypto/pkcs11.conf

	etc/default/*

	etc/dfs/dfstab

	etc/dumpdates

	etc/ftpd/*

	etc/ftpusers

	etc/group

	etc/gss/gsscred.conf

	etc/gss/mech

	etc/gss/qop

	etc/inet/*

	etc/init.d/*

	etc/inittab

	etc/ipf/ipf.conf

	etc/iu.ap

	etc/krb5/kadm5.acl

	etc/krb5/kdc.conf

	etc/krb5/kpropd.acl

	etc/krb5/krb5.conf

	etc/krb5/warn.conf

	etc/logadm.conf

	etc/logindevperm

	etc/lp/Systems

	etc/mail/*.cf

	etc/mail/*.hf

	etc/mail/*.rc

	etc/mail/aliases

	etc/mail/helpfile

	etc/mail/local-host-names

	etc/mail/trusted-users

	etc/named.conf

	etc/net/*/services

	etc/netconfig

	etc/nfs/nfslog.conf

	etc/nfssec.conf

	etc/nscd.conf

	etc/nsswitch.*

	etc/pam.conf

	etc/passwd

	etc/policy.conf

	etc/printers.conf

	etc/profile

	etc/project

	etc/publickey

	etc/remote

	etc/resolv.conf

	etc/rmmount.conf

	etc/rpc

	etc/rpld.conf

	etc/saf/_sactab

	etc/saf/_sysconfig

	etc/saf/zsmon/_pmtab

	etc/security/audit_class

	etc/security/audit_control

	etc/security/audit_event

	etc/security/audit_startup

	etc/security/audit_user

	etc/security/audit_warn

	etc/security/auth_attr

	etc/security/crypt.conf

	etc/security/exec_attr

	etc/security/policy.conf

	etc/security/prof_attr

	etc/sfw/openssl/openssl.cnf

	etc/shadow

	etc/skel/.profile

	etc/skel/local.*

	etc/smartcard/.keys

	etc/smartcard/desktop.properties

	etc/smartcard/ocf.classpath

	etc/smartcard/opencard.properties

	etc/ssh/ssh_config

	etc/ssh/sshd_config

	etc/syslog.conf

	etc/ttydefs

	etc/ttysrch

	etc/user_attr

	etc/uucp/[A-Z]*

	etc/vfstab

	var/spool/cron/crontabs/*

	var/yp/Makefile

	var/yp/aliases

	var/yp/nicknames

"

#

# Second list: files to be saved in the global zone only.

#

global_zone_only_files="

	boot/grub/menu.lst

	boot/solaris/bootenv.rc

	boot/solaris/devicedb/master

	boot/solaris/filelist.ramdisk

	etc/aggregation.conf

	etc/dladm/*

	etc/bootrc

	etc/crypto/kcf.conf

	etc/datalink.conf

	etc/devlink.tab

	etc/driver_aliases

	etc/driver_classes

	etc/lvm/devpath

	etc/lvm/lock

	etc/lvm/md.cf

	etc/lvm/md.ctlrmap

	etc/lvm/md.tab

	etc/lvm/mddb.cf

	etc/lvm/runtime.cf

	etc/mach

	etc/minor_perm

	etc/name_to_major

	etc/name_to_sysnum

	etc/nca/nca.if

	etc/nca/ncakmod.conf

	etc/nca/ncalogd.conf

	etc/nca/ncaport.conf

	etc/openwin/server/etc/OWconfig

	etc/path_to_inst

	etc/power.conf

	etc/ppp/chap-secrets

	etc/ppp/options

	etc/ppp/pap-secrets

	etc/security/device_policy

	etc/security/extra_privs

	etc/system

	etc/zones/index

	kernel/drv/elxl.conf

	kernel/drv/md.conf

	kernel/drv/options.conf

	kernel/drv/ra.conf

	kernel/drv/scsa2usb.conf

	kernel/drv/scsi_vhci.conf

	kernel/drv/sd.conf

	platform/*/kernel/drv/*ppm.conf

	platform/i86pc/kernel/drv/aha.conf

	platform/i86pc/kernel/drv/asy.conf

	platform/sun4u/boot.conf

"

#

# Third list: files extracted from generic.root but which belong in the global

# zone only: they are superfluous (and some even harmful) in nonglobal zones.

#

# (note: as /etc/init.d scripts are converted to smf(5) "Greenline" services,

# they (and their /etc/rc?.d hardlinks) should be removed from this list when

# they are added to smf_obsolete_rc_files, below)

#

superfluous_nonglobal_zone_files="

	dev/dsk

	dev/fd

	dev/pts

	dev/rdsk

	dev/rmt

	dev/stderr

	dev/stdin

	dev/stdout

	dev/swap

	dev/term

	devices

	etc/dacf.conf

	etc/dat

	etc/default/metassist.xml

	etc/default/power

	etc/flash/postdeployment/svm.cleanup

	etc/flash/predeployment/svm.save

	etc/inet/ipqosconf.1.sample

	etc/inet/ipqosconf.2.sample

	etc/inet/ipqosconf.3.sample

	etc/inet/sock2path

	etc/init.d/devlinks

	etc/init.d/dodatadm.udaplt

	etc/init.d/drvconfig

	etc/init.d/llc2

	etc/init.d/ncakmod

	etc/init.d/ncalogd

	etc/init.d/pcmcia

	etc/init.d/pppd

	etc/init.d/wrsmcfg

	etc/llc2

	etc/lvm

	etc/nca

	etc/openwin

	etc/ppp

	etc/rc0.d/K34ncalogd

	etc/rc0.d/K50pppd

	etc/rc0.d/K52llc2

	etc/rc1.d/K34ncalogd

	etc/rc1.d/K50pppd

	etc/rc1.d/K52llc2

	etc/rc2.d/S40llc2

	etc/rc2.d/S42ncakmod

	etc/rc2.d/S47pppd

	etc/rc2.d/S81dodatadm.udaplt

	etc/rc2.d/S94ncalogd

	etc/rcS.d/K34ncalogd

	etc/rcS.d/K44wrsmcfg

	etc/rcS.d/K50pppd

	etc/rcS.d/K52llc2

	etc/rcS.d/S29wrsmcfg

	etc/rcm

	etc/sock2path

	etc/usb

	etc/wrsm

	etc/zones

	kernel

	lib/libmeta.so

	lib/libmeta.so.1

	lib/svc/method/sf880dr

	lib/svc/method/svc-cvcd

	lib/svc/method/svc-dcs

	lib/svc/method/svc-drd

	lib/svc/method/svc-dscp

	lib/svc/method/svc-dumpadm

	lib/svc/method/svc-intrd

	lib/svc/method/svc-hal

	lib/svc/method/svc-mdmonitor

	lib/svc/method/svc-metainit

	lib/svc/method/svc-metasync

	lib/svc/method/svc-oplhpd

	lib/svc/method/svc-poold

	lib/svc/method/svc-pools

	lib/svc/method/svc-power

	lib/svc/method/svc-resource-mgmt

	lib/svc/method/svc-rmvolmgr

	lib/svc/method/svc-scheduler

	lib/svc/method/svc-sckmd

	lib/svc/method/svc-syseventd

	lib/svc/method/svc-vntsd

	lib/svc/method/svc-zones

	platform/*/kernel

	platform/SUNW,Sun-Fire-15000/lib/cvcd

	platform/SUNW,Ultra-Enterprise-10000/lib/cvcd

	platform/i86pc/biosint

	platform/i86pc/multiboot

	platform/sun4u/cprboot

	platform/sun4u/lib/libwrsmconf.so

	platform/sun4u/lib/libwrsmconf.so.1

	platform/sun4u/lib/sparcv9/libwrsmconf.so

	platform/sun4u/lib/sparcv9/libwrsmconf.so.1

	platform/sun4u/sbin

	platform/sun4u/ufsboot

	platform/sun4u/wanboot

	platform/sun4v/ufsboot

	platform/sun4v/wanboot

	sbin/metadb

	sbin/metadevadm

	sbin/metainit

	sbin/metarecover

	sbin/metastat

	usr/include/sys/dcam

	usr/lib/devfsadm/linkmod/SUNW_dcam1394_link.so

	usr/lib/ldoms

	usr/platform/SUNW,SPARC-Enterprise/lib/dscp.ppp.options

	usr/platform/SUNW,SPARC-Enterprise/lib/libdscp.so

	usr/platform/SUNW,SPARC-Enterprise/lib/libdscp.so.1

	usr/platform/SUNW,SPARC-Enterprise/lib/llib-ldscp.ln

	usr/platform/SUNW,SPARC-Enterprise/sbin/prtdscp

	var/adm/pool

	var/log/pool

	var/svc/manifest/network/rpc/mdcomm.xml

	var/svc/manifest/network/rpc/meta.xml

	var/svc/manifest/network/rpc/metamed.xml

	var/svc/manifest/network/rpc/metamh.xml

	var/svc/manifest/platform/i86pc/eeprom.xml

	var/svc/manifest/platform/sun4u/dcs.xml

	var/svc/manifest/platform/sun4u/dscp.xml

	var/svc/manifest/platform/sun4u/efdaemon.xml

	var/svc/manifest/platform/sun4u/oplhpd.xml

	var/svc/manifest/platform/sun4u/sckmd.xml

	var/svc/manifest/platform/sun4u/sf880drd.xml

	var/svc/manifest/platform/sun4v

	var/svc/manifest/system/cvc.xml

	var/svc/manifest/system/dumpadm.xml

	var/svc/manifest/system/fmd.xml

	var/svc/manifest/system/hal.xml

	var/svc/manifest/system/intrd.xml

	var/svc/manifest/system/mdmonitor.xml

	var/svc/manifest/system/metainit.xml

	var/svc/manifest/system/metasync.xml

	var/svc/manifest/system/picl.xml

	var/svc/manifest/system/poold.xml

	var/svc/manifest/system/pools.xml

	var/svc/manifest/system/power.xml

	var/svc/manifest/system/resource-mgmt.xml

	var/svc/manifest/system/scheduler.xml

	var/svc/manifest/system/sysevent.xml

	var/svc/manifest/system/zones.xml

	var/svc/manifest/system/filesystem/rmvolmgr.xml

"

#

# Fourth list: files to be preserved, ie unconditionally restored to

# "child" versions

#

preserve_files="

	kernel/misc/amd64/sysinit

	kernel/misc/amd64/usbs49_fw

	kernel/misc/sparcv9/usbs49_fw

	kernel/misc/sysinit

	kernel/misc/usbs49_fw

	var/adm/aculog

	var/adm/spellhist

	var/adm/utmpx

	var/adm/wtmpx

	var/log/authlog

	var/log/syslog

	var/saf/zsmon/log

"

realmode_files="

	boot/solaris/bootenv.rc

	boot/solaris/devicedb/master

"

fail() {

	print "$*" >& 2

	print "bfu aborting" >& 2

	rm -f "$bfu_zone_list"

	exit 1

}

filelist() {

	files="$all_zones_files $preserve_files"

	if [ $1 = "global" ]; then

		files="$global_zone_only_files $files"

	fi

	find $files -depth -type f ! -name core -print 2>/dev/null | sort -u || {

		#

		# Force cpio to return non-zero by printing an error message

		# to stdout that it won't be able to lstat().

		#

		echo 'filelist: sort failed'

		fail "sort failed"

	}

}

realmode_filelist() {

	find $realmode_files -depth -type f ! -name core -print 2>/dev/null | sort

}

smf_inetd_conversions="

	100134

	100150

	100155

	100229

	100230

	100234

	100242

	100422

	chargen

	comsat

	daytime

	discard

	echo

	eklogin

	exec

	finger

	ftp

	gssd

	klogin

	krb5_prop

	kshell

	ktkt_warnd

	login

	metad

	metamedd

	metamhd

	name

	ocfserv

	printer

	rexd

	rquotad

	rstatd

	rusersd

	shell

	smserverd

	sprayd

	sun-dr

	talk

	telnet

	time

	uucp

	walld

"

enable_next_boot () {

	if [ -x /tmp/bfubin/svccfg ]; then

	    svcadm disable -t $1

	    [ $? = 0 ] || echo "warning: unable to temporarily disable $1"

	    svccfg -s $1 setprop general/enabled = true

	    [ $? = 0 ] || echo "warning: unable to enable $1 for next boot"

	fi

}

smf_inetd_disable() {

	inetconf=$rootprefix/etc/inet/inetd.conf

	inettmp=/tmp/inetd.tmp.$$

	sed "$(for i in $smf_inetd_conversions; do 

		echo "s:^[ 	]*$i[ 	/]:#SMFbfu# &:"

	done)" $inetconf > $inettmp && ! cmp -s $inettmp $inetconf &&

	    cp $inettmp $inetconf

	rm -f -- $inettmp

}

smf_inetd_reenable() {

	inetconf=$rootprefix/etc/inet/inetd.conf

	inettmp=/tmp/inetd.tmp.$$

	sed 's/^#SMFbfu# //' $inetconf > $inettmp && cp $inettmp $inetconf

	rm -f -- $inettmp

}

smf_tftp_reinstall() {

	inetconf=$rootprefix/etc/inet/inetd.conf

	inettmp=/tmp/inetd.tmp.$$

	if grep '^#SMFbfu# tftp' $inetconf >/dev/null ; then

		# BFU previously commented out, put it back in place

	    	sed 's/^#SMFbfu# tftp/tftp/' $inetconf > $inettmp &&

		    cp $inettmp $inetconf

	elif ! grep '^[#	 ]*tftp' $inetconf >/dev/null; then

		# No entry, append to end

		cat >>$inetconf <<EOF

# TFTPD - tftp server (primarily used for booting)