-#! /bin/sh
+#! /bin/sh -x
#
# skeleton example file to build /etc/init.d/ scripts.
# This file should be used to construct scripts for /etc/init.d.
# This file was automatically customized by dh-make on Fri, 21 Apr 2000 17:07:50 +0200
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
-DAEMON=/usr/sbin/tinc
+DAEMON=/usr/sbin/tincd
NAME=tinc
-DESC=tinc
+DESC="tinc daemons"
+NETS="test2"
+
+TCONF="/etc/tinc"
test -f $DAEMON || exit 0
set -e
+# Check the daemon
+if [ ! -x $TINCD ]; then
+ echo "**tinc: daemon $TINCD does not exist or is not executable!"
+ exit
+fi
+
+# Check the configuration directory
+if [ ! -d $TCONF ]; then
+ echo "**tinc: configuration directory ($TCONF) not found!"
+ exit
+fi
+
+
+##############################################################################
+# vpn_load () Loads VPN configuration
+#
+# $1 ... VPN to load
+
+
+vpn_load () {
+ CFG="$TCONF/$1/tinc.conf"
+ [ -f $CFG ] || { echo "tinc: $CFG does not exist" >&2 ; return 1; }
+
+ # load TINCD config
+ DEV=`grep -i -e '^[[:space:]]*TapDevice' $CFG | sed 's/[[:space:]]//g; s/^.*=//g'`
+ VPN=`grep -i -e '^[[:space:]]*(MyOwnVPNIP|MyVirtualIP)' -E $CFG | head -1 | sed 's/[[:space:]]//g; s/^.*=//g'`
+
+ # discourage empty and multiple entries
+ [ -z "$DEV" ] && \
+ { echo "tinc: TapDevice required" >&2 ; return 2; }
+ echo $DEV | grep -q '^/dev/tap' ||
+ { echo "tinc: TapDevice should be in form /dev/tapX" >&2 ; return 2; }
+ [ `echo $DEV | wc -l` -gt 1 ] &&
+ { echo "tinc: multiple TapDevice entries not allowed" >&2 ; return 3; }
+ [ -z "$VPN" ] && \
+ { echo "tinc: MyOwnVPNIP/MyVirtualIP required" >&2 ; return 2; }
+ [ `echo $VPN | wc -l` -gt 1 ] &&
+ { echo "tinc: multiple MyOwnVPNIP/MyVirtualIP entries not allowed" >&2 ; return 3; }
+ echo $VPN | grep -q -x \
+ '\([[:digit:]]\{1,3\}\.\)\{3\}[[:digit:]]\{1,3\}/[[:digit:]]\{1,2\}' || \
+ { echo "tinc: badly formed MyOwnVPNIP/MyVirtualIP address $VPN" ; return 3; }
+
+ # network device
+ TAP=`echo $DEV | cut -d"/" -f3`
+ NUM=`echo $TAP | sed 's/tap//'`
+
+ # IP address, netmask length
+ ADR=`echo $VPN | cut -d"/" -f1`
+ LEN=`echo $VPN | cut -d"/" -f2`
+
+ # Expand bitlength to netmask
+ MSK=""; len=$LEN
+ for cnt in 1 1 1 0 ; do
+ if [ $len -ge 8 ]; then
+ msk=8
+ else
+ msk=$len
+ fi
+
+ MSK="$MSK$((255 & (255 << (8 - msk))))"
+ [ $cnt -ne 0 ] && MSK="$MSK."
+ len=$((len-msk))
+ done
+
+ # Network & broadcast addresses
+# BRD=`ipcalc --broadcast $ADR $MSK | cut -d"=" -f2`
+# NET=`ipcalc --network $ADR $MSK | cut -d"=" -f2`
+
+ # MAC address
+ MAC=`printf "fe:fd:%0.2x:%0.2x:%0.2x:%0.2x" $(echo $ADR | sed 's/\./ /g')`
+ echo
+ echo "TAP $TAP NUM $NUM ADR $ADR LEN $LEN MSK $MSK BRD $BRD NET $NET MAC $MAC" >&2
+ return 0
+}
+
+
+##############################################################################
+# vpn_start () starts specified VPN
+#
+# $1 ... VPN to start
+
+vpn_start () {
+
+ vpn_load $1 || { echo "**tinc: could not vpn_load $1" >&2 ; return 1; }
+
+ # create device file
+ if [ ! -c $DEV ]; then
+ [ -e $DEV ] && rm -f $DEV
+ mknod --mode=0600 $DEV c 36 $((16 + NUM))
+ fi
+
+ # load device module
+ { insmod ethertap --name="ethertap$NUM" unit="$NUM" 2>&1 || \
+ { echo "**tinc: cannot insmod ethertap$NUM" >&2 ; return 2; } ;
+ } | grep -v '^Us'
+
+ # configure the interface
+ ip link set $TAP address $MAC
+ ip link set $TAP up
+ ip addr flush dev $TAP 2>&1 | grep -v -x '^Nothing to flush.'
+ ip addr add $VPN brd $BRD dev $TAP
+
+ # start tincd
+ $TINCD --net="$1" $DEBUG || \
+ { echo "**tinc: could not start $TINCD" >&2; return 3; }
+
+ # default interface route
+ # ip route add $NET/$LEN dev $TAP
+
+ # setup routes
+ /etc/sysconfig/network-scripts/ifup-routes $TAP
+
+ return 0
+} # vpn_start
+
+
+##############################################################################
+# vpn_stop () Stops specified VPN
+#
+# $1 ... VPN to stop
+
+vpn_stop () {
+
+ vpn_load $1 || return 1
+
+ # flush the routing table
+ # ip route flush dev $TAP &> /dev/null
+
+ # kill the tincd daemon
+ PID="$TPIDS/tinc.$1.pid"
+ if [ -f $PID ]; then
+ $TINCD --net="$1" --kill &> /dev/null
+ RET=$?
+
+ if [ $RET -eq 0 ]; then
+ dly=0
+ while [ $dly -le 5 ]; do
+ [ -f $PID ] || break
+ sleep 1; dly=$((dly+1))
+ done
+ fi
+
+ [ -f $PID ] && rm -f $PID
+ fi
+
+ # bring the interface down
+ ip link set $TAP down &> /dev/null
+
+ # remove ethertap module
+ rmmod "ethertap$NUM" &> /dev/null
+
+ return 0
+} # vpn_stop
+
+
+
+
+
+
+
case "$1" in
start)
- echo -n "Starting $DESC: "
- start-stop-daemon --start --quiet --pidfile /var/run/$NAME.pid \
- --exec $DAEMON
- echo "$NAME."
+ echo -n "Starting $DESC:"
+ for net in $NETS ; do
+ echo -n " $net"
+ vpn_start $net
+ start-stop-daemon --start --quiet --pidfile /var/run/$NAME.$net.pid \
+ --exec $DAEMON -- -n $net
+ done
+ echo "."
;;
stop)
- echo -n "Stopping $DESC: "
- start-stop-daemon --stop --quiet --pidfile /var/run/$NAME.pid \
- --exec $DAEMON
- echo "$NAME."
+ echo -n "Stopping $DESC:"
+ for net in $NETS ; do
+ echo -n " $net"
+ start-stop-daemon --stop --quiet --pidfile /var/run/$NAME.$net.pid \
+ --exec $DAEMON -- -n $net -k
+ done
+ echo "."
;;
#reload)
#
# option to the "reload" entry above. If not, "force-reload" is
# just the same as "restart".
#
- echo -n "Restarting $DESC: "
- start-stop-daemon --stop --quiet --pidfile \
- /var/run/$NAME.pid --exec $DAEMON
- sleep 1
- start-stop-daemon --start --quiet --pidfile \
- /var/run/$NAME.pid --exec $DAEMON
- echo "$NAME."
+ echo -n "Restarting $DESC:"
+ for net in $NETS ; do
+ start-stop-daemon --stop --quiet --pidfile \
+ /var/run/$NAME.$net.pid --exec $DAEMON -- -n $net -k
+ sleep 1
+ start-stop-daemon --start --quiet --pidfile \
+ /var/run/$NAME.$net.pid --exec $DAEMON -- -n $net
+ echo -n " $net"
+ done
+ echo "."
;;
*)
N=/etc/init.d/$NAME
projects / tinc / commitdiff