X-Git-Url: https://tinc-vpn.org/git/browse?p=tinc;a=blobdiff_plain;f=debian%2Finit.d;h=9067c546d6f36219273aecd129c75ba53ef7afdb;hp=16b09613eed1493d87e10e6ab75fca4801d0fb8b;hb=18b3084d2525c59f62b75346fa657ccce6459712;hpb=bce2179fe350bf34cde0caab97f72c0930539840

diff --git a/debian/init.d b/debian/init.d
index 16b09613..9067c546 100644
--- a/debian/init.d
+++ b/debian/init.d
@@ -1,243 +1,190 @@
-#! /bin/sh -x
+#! /usr/bin/perl -w
 #
-# skeleton	example file to build /etc/init.d/ scripts.
-#		This file should be used to construct scripts for /etc/init.d.
+# System startup script for tinc
+# $Id: init.d,v 1.14 2000/06/01 20:21:27 guus Exp $
 #
-#		Written by Miquel van Smoorenburg <miquels@cistron.nl>.
-#		Modified for Debian GNU/Linux
-#		by Ian Murdock <imurdock@gnu.ai.mit.edu>.
+# Based on Lubomir Bulej's Redhat init script.
 #
-# Version:	@(#)skeleton  1.8  03-Mar-1998  miquels@cistron.nl
+# Create a file $NETSFILE (/etc/tinc/nets.boot), and put all the names of
+# the networks in there.  These names must be valid directory names under
+# $TCONF (/etc/tinc).  Lines starting with a # will be ignored in this
+# file.
 #
-# This file was automatically customized by dh-make on Fri, 21 Apr 2000 17:07:50 +0200
 
-PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
-DAEMON=/usr/sbin/tincd
-NAME=tinc
-DESC="tinc daemons"
-NETS="test2"
-
-TCONF="/etc/tinc"
-
-test -f $DAEMON || exit 0
-
-set -e
-
-# Check the daemon
-if [ ! -x $TINCD ]; then
-    echo "**tinc: daemon $TINCD does not exist or is not executable!"
-    exit
-fi
-
-# Check the configuration directory
-if [ ! -d $TCONF ]; then
-    echo "**tinc: configuration directory ($TCONF) not found!"
-    exit
-fi
+my $DAEMON="/usr/sbin/tincd";
+my $NAME="tinc";
+my $DESC="tinc daemons";
+my $TCONF="/etc/tinc";
+my $EXTRA="";
+my $NETSFILE="$TCONF/nets.boot";
+my @NETS=();
+
+
+if (! -f $DAEMON) { exit 0; }
+
+
+
+sub find_nets {
+    if(! open(FH, $NETSFILE)) {
+	warn "Please create $NETSFILE.\n";
+	exit 0;
+    }
+    while (<FH>) {
+	chomp;
+	if( /^[ ]*([^ \#]+)/i ) {
+	    push(@NETS, "$1");
+	}
+    }
+    if($#NETS == -1) {
+	warn "$NETSFILE doesn't contain any nets.\n";
+	exit 0;
+    }
+    
+}
 
 
 ##############################################################################
 # vpn_load ()		Loads VPN configuration
 # 
-# $1 ... VPN to load
+# $_[0] ... VPN to load
 
-
-vpn_load () {
-    CFG="$TCONF/$1/tinc.conf"
-    [ -f $CFG ] || { echo "tinc: $CFG does not exist" >&2 ; return 1; }
+sub vpn_load {
+    my @addr;
+    $CFG="$TCONF/$_[0]/tinc.conf";
+    if(! open($CFG, "< $CFG")) {
+	warn "tinc: $CFG does not exist\n";
+	return 0;
+    }
 
     # load TINCD config
-    DEV=`grep -i -e '^[[:space:]]*TapDevice' $CFG | sed 's/[[:space:]]//g; s/^.*=//g'`
-    VPN=`grep -i -e '^[[:space:]]*(MyOwnVPNIP|MyVirtualIP)' -E $CFG | head -1 | sed 's/[[:space:]]//g; s/^.*=//g'`
-
-    # discourage empty and multiple entries
-    [ -z "$DEV" ] && \
-	{ echo "tinc: TapDevice required" >&2 ; return 2; }
-    echo $DEV | grep -q '^/dev/tap' ||
-	{ echo "tinc: TapDevice should be in form /dev/tapX" >&2 ; return 2; }
-    [ `echo $DEV | wc -l` -gt 1 ] &&
-	{ echo "tinc: multiple TapDevice entries not allowed" >&2 ; return 3; }
-    [ -z "$VPN" ] && \
-	{ echo "tinc: MyOwnVPNIP/MyVirtualIP required" >&2 ; return 2; }
-    [ `echo $VPN | wc -l` -gt 1 ] &&
-	{ echo "tinc: multiple MyOwnVPNIP/MyVirtualIP entries not allowed" >&2 ; return 3; }
-    echo $VPN | grep -q -x \
-	'\([[:digit:]]\{1,3\}\.\)\{3\}[[:digit:]]\{1,3\}/[[:digit:]]\{1,2\}' || \
-	{ echo "tinc: badly formed MyOwnVPNIP/MyVirtualIP address $VPN" ; return 3; }
-
-    # network device
-    TAP=`echo $DEV | cut -d"/" -f3`
-    NUM=`echo $TAP | sed 's/tap//'`
-	    
-    # IP address, netmask length
-    ADR=`echo $VPN | cut -d"/" -f1`
-    LEN=`echo $VPN | cut -d"/" -f2`
-	    
-    # Expand bitlength to netmask    
-    MSK=""; len=$LEN
-    for cnt in 1 1 1 0 ; do
-	if [ $len -ge 8 ]; then
-	    msk=8
-	else
-	    msk=$len
-	fi
-	
-	MSK="$MSK$((255 & (255 << (8 - msk))))"
-	[ $cnt -ne 0 ] && MSK="$MSK."
-	len=$((len-msk))
-    done
-
-    # Network & broadcast addresses
-#    BRD=`ipcalc --broadcast $ADR $MSK | cut -d"=" -f2`
-#    NET=`ipcalc --network $ADR $MSK | cut -d"=" -f2`
-	    
-    # MAC address
-    MAC=`printf "fe:fd:%0.2x:%0.2x:%0.2x:%0.2x" $(echo $ADR | sed 's/\./ /g')`
-    echo
-    echo "TAP $TAP NUM $NUM ADR $ADR LEN $LEN MSK $MSK BRD $BRD NET $NET MAC $MAC" >&2
-    return 0
+    while(<$CFG>) {
+	if( /^[ ]*TapDevice[ =]+([^ \#]+)/i ) {
+	    $DEV=$1;
+	    chomp($DEV);
+	    $DEV =~ s/^.*\/([^\/0-9]+)([0-9]+)$/$1$2/;
+	    $NUM = $2;
+	} elsif ( /^[ ]*(MyOwnVPNIP|MyVirtualIP)[ =]+([^ \#]+)/i ) {
+	    $VPN=$2;
+	    chomp($VPN);
+	} elsif ( /^[ ]*VpnMask[ =]+([^ \#]+)/i ) {
+	    $VPNMASK=$1;
+	}
+    }
+    if(!defined($DEV)) {
+	warn "tinc: There must be a TapDevice\n";
+	return 0;
+    }
+    if($DEV eq "") {
+	warn "tinc: TapDevice should be of the form /dev/tapN\n";
+	return 0;
+    }
+    if(!defined($VPN)) {
+	warn "tinc: MyVirtualIP required\n";
+	return 0;
+    }
+    if($VPN eq "") {
+	warn "tinc: No argument to MyVirtualIP/MyOwnVPNIP\n";
+	return 0;
+    }
+    if(defined($VPNMASK) && $VPNMASK eq "") {
+	warn "tinc: Invalid argument to VpnMask\n";
+	return 0;
+    }
+
+    $ADR = $VPN;
+    $ADR =~ s/^([^\/]+)\/.*$/$1/;
+    $LEN = $VPN;
+    $LEN =~ s/^.*\/([^\/]+)$/$1/;
+    if($ADR eq "" || $LEN eq "") {
+	warn "tinc: Badly formed MyVirtualIP/MyOwnVPNIP\n";
+	return 0;
+    }
+    @addr = split(/\./, $ADR);
+
+    $ADR = pack('C4', @addr);
+    $MSK = pack('N4', -1 << (32 - $LEN));
+    $BRD = join(".", unpack('C4', $ADR | ~$MSK));
+    $MAC = "fe:fd:" . join(":", map { sprintf "%02x", $_ } unpack('C4', $ADR));
+
+    if(!defined($VPNMASK)) {
+	$VPNMASK = $MSK;
+    }
+    
+    $VPNMASK = pack('C4', split(/\./, $VPNMASK));
+    $VPNMASK = join(".", unpack('C4', $VPNMASK));
+    $ADR = join(".", unpack('C4', $ADR));
+    $MSK = join(".", unpack('C4', $MSK));
+    
+    1;
 }
 
 
 ##############################################################################
 # vpn_start ()		starts specified VPN
 # 
-# $1 ... VPN to start
+# $_[0] ... VPN to start
 
-vpn_start () {    
+sub vpn_start {
+    vpn_load($_[0]) || return 0;
 
-    vpn_load $1 || { echo "**tinc: could not vpn_load $1" >&2 ; return 1; }
-            
-    # create device file
-    if [ ! -c $DEV ]; then
-	[ -e $DEV ] && rm -f $DEV
-	mknod --mode=0600 $DEV c 36 $((16 + NUM))
-    fi
-    
-    # load device module
-    { insmod ethertap --name="ethertap$NUM" unit="$NUM" 2>&1 || \
-	{ echo "**tinc: cannot insmod ethertap$NUM" >&2 ; return 2; } ;
-    } | grep -v '^Us'
-    
-    # configure the interface
-    ip link set $TAP address $MAC
-    ip link set $TAP up
-    ip addr flush dev $TAP 2>&1 | grep -v -x '^Nothing to flush.'
-    ip addr add $VPN brd $BRD dev $TAP
-    
-    # start tincd
-    $TINCD --net="$1" $DEBUG || \
-	{ echo "**tinc: could not start $TINCD" >&2; return 3; }
-
-    # default interface route
-    # ip route add $NET/$LEN dev $TAP
+    system("insmod ethertap -s --name=\"ethertap$NUM\" unit=\"$NUM\" >/dev/null");
+    system("ifconfig $DEV hw ether $MAC");
+    system("ifconfig $DEV $ADR netmask $VPNMASK broadcast $BRD mtu 1448 -arp");
+    system("start-stop-daemon --start --quiet --pidfile /var/run/$NAME.$_[0].pid --exec $DAEMON -- -n $_[0] $EXTRA");
+}
 
-    # setup routes
-    /etc/sysconfig/network-scripts/ifup-routes $TAP
 
-    return 0
-} # vpn_start
 
 
 ##############################################################################
 # vpn_stop ()		Stops specified VPN
 #
-# $1 ... VPN to stop
+# $_[0] ... VPN to stop
 
-vpn_stop () {
+sub vpn_stop {
+    vpn_load($_[0]) || return 1;
 
-    vpn_load $1 || return 1
-    
-    # flush the routing table
-    # ip route flush dev $TAP &> /dev/null
-    
-    # kill the tincd daemon
-    PID="$TPIDS/tinc.$1.pid"
-    if [ -f $PID ]; then
-        $TINCD --net="$1" --kill &> /dev/null
-        RET=$?
-    
-        if [ $RET -eq 0 ]; then
-	    dly=0
-	    while [ $dly -le 5 ]; do
-		[ -f $PID ] || break
-	        sleep 1; dly=$((dly+1))
-	    done
-	fi
-	
-	[ -f $PID ] && rm -f $PID
-    fi
-    
-    # bring the interface down
-    ip link set $TAP down &> /dev/null
+    system("start-stop-daemon --stop --quiet --pidfile /var/run/$NAME.$_[0].pid --exec $DAEMON -- -n $_[0] $EXTRA -k");
     
-    # remove ethertap module
-    rmmod "ethertap$NUM" &> /dev/null
-    
-    return 0
-} # vpn_stop
-
-
-
-
-
-
-
-case "$1" in
-  start)
-	echo -n "Starting $DESC:"
-	for net in $NETS ; do
-	  echo -n " $net"
-	  vpn_start $net
-	  start-stop-daemon --start --quiet --pidfile /var/run/$NAME.$net.pid \
-		  --exec $DAEMON -- -n $net
-	done
-	echo "."
-	;;
-  stop)
-	echo -n "Stopping $DESC:"
-	for net in $NETS ; do
-	  echo -n " $net"
-	  start-stop-daemon --stop --quiet --pidfile /var/run/$NAME.$net.pid \
-		  --exec $DAEMON -- -n $net -k
-	done
-	echo "."
-	;;
-  #reload)
-	#
-	#	If the daemon can reload its config files on the fly
-	#	for example by sending it SIGHUP, do it here.
-	#
-	#	If the daemon responds to changes in its config file
-	#	directly anyway, make this a do-nothing entry.
-	#
-	# echo "Reloading $DESC configuration files."
-	# start-stop-daemon --stop --signal 1 --quiet --pidfile \
-	#	/var/run/$NAME.pid --exec $DAEMON
-  #;;
-  restart|force-reload)
-	#
-	#	If the "reload" option is implemented, move the "force-reload"
-	#	option to the "reload" entry above. If not, "force-reload" is
-	#	just the same as "restart".
-	#
-	echo -n "Restarting $DESC:"
-	for net in $NETS ; do
-	  start-stop-daemon --stop --quiet --pidfile \
-		  /var/run/$NAME.$net.pid --exec $DAEMON -- -n $net -k
-	  sleep 1
-	  start-stop-daemon --start --quiet --pidfile \
-		  /var/run/$NAME.$net.pid --exec $DAEMON -- -n $net
-	  echo -n " $net"
-	done
-	echo "."
-	;;
-  *)
-	N=/etc/init.d/$NAME
-	# echo "Usage: $N {start|stop|restart|reload|force-reload}" >&2
-	echo "Usage: $N {start|stop|restart|force-reload}" >&2
-	exit 1
-	;;
-esac
-
-exit 0
+    system("ifconfig $DEV down");
+    system("rmmod ethertap$NUM -s");
+}
+
+
+if(!defined($ARGV[0])) {
+    die "Usage: /etc/init.d/$NAME {start|stop|restart|force-reload}\n";
+}
+
+if($ARGV[0] eq "start") {
+    find_nets;
+    print "Starting $DESC:";
+    foreach $n (@NETS) {
+	print " $n";
+	vpn_start($n);
+    }
+    print ".\n";
+} elsif ($ARGV[0] eq "stop") {
+    find_nets;
+    print "Stopping $DESC:";
+    foreach $n (@NETS) {
+	print " $n";
+	vpn_stop($n);
+    }
+    print ".\n";
+} elsif ($ARGV[0] eq "restart" || $ARGV[0] eq "force-reload") {
+    find_nets;
+    print "Stopping $DESC:";
+    foreach $n (@NETS) {
+	print " $n";
+	vpn_stop($n);
+    }
+    print ".\n";
+    print "Starting $DESC:";
+    foreach $n (@NETS) {
+	print " $n";
+	vpn_start($n);
+    }
+    print ".\n";
+} else {
+    die "Usage: /etc/init.d/$NAME {start|stop|restart|force-reload}\n";
+}