-#! /bin/sh -x
+#! /usr/bin/perl -w
#
-# skeleton example file to build /etc/init.d/ scripts.
-# This file should be used to construct scripts for /etc/init.d.
+# System startup script for tinc
+# $Id: init.d,v 1.10 2000/05/21 22:04:56 guus Exp $
#
-# Written by Miquel van Smoorenburg <miquels@cistron.nl>.
-# Modified for Debian GNU/Linux
-# by Ian Murdock <imurdock@gnu.ai.mit.edu>.
+# Based on Lubomir Bulej's Redhat init script.
#
-# Version: @(#)skeleton 1.8 03-Mar-1998 miquels@cistron.nl
+# Create a file $NETSFILE (/etc/tinc/nets.boot), and put all the names of
+# the networks in there. These names must be valid directory names under
+# $TCONF (/etc/tinc). Lines starting with a # will be ignored in this
+# file.
#
-# This file was automatically customized by dh-make on Fri, 21 Apr 2000 17:07:50 +0200
-PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
-DAEMON=/usr/sbin/tincd
-NAME=tinc
-DESC="tinc daemons"
-NETS="test2"
-
-TCONF="/etc/tinc"
-
-test -f $DAEMON || exit 0
-
-set -e
-
-# Check the daemon
-if [ ! -x $TINCD ]; then
- echo "**tinc: daemon $TINCD does not exist or is not executable!"
- exit
-fi
-
-# Check the configuration directory
-if [ ! -d $TCONF ]; then
- echo "**tinc: configuration directory ($TCONF) not found!"
- exit
-fi
+my $DAEMON="/usr/sbin/tincd";
+my $NAME="tinc";
+my $DESC="tinc daemons";
+my $TCONF="/etc/tinc";
+my $EXTRA="";
+my $NETSFILE="$TCONF/nets.boot";
+my @NETS=();
+
+
+if (! -f $DAEMON) { exit 0; }
+
+
+
+sub find_nets {
+ if(! open(FH, $NETSFILE)) {
+ warn "Please create $NETSFILE.\n";
+ exit 0;
+ }
+ while (<FH>) {
+ chomp;
+ if( /^[ ]*([^ \#]+)/i ) {
+ push(@NETS, "$1");
+ }
+ }
+ if($#NETS == -1) {
+ warn "$NETSFILE doesn't contain any nets.\n";
+ exit 0;
+ }
+
+}
##############################################################################
# vpn_load () Loads VPN configuration
#
-# $1 ... VPN to load
+# $_[0] ... VPN to load
-
-vpn_load () {
- CFG="$TCONF/$1/tinc.conf"
- [ -f $CFG ] || { echo "tinc: $CFG does not exist" >&2 ; return 1; }
+sub vpn_load {
+ my @addr;
+ $CFG="$TCONF/$_[0]/tinc.conf";
+ if(! open($CFG, "< $CFG")) {
+ warn "tinc: $CFG does not exist\n";
+ return 0;
+ }
# load TINCD config
- DEV=`grep -i -e '^[[:space:]]*TapDevice' $CFG | sed 's/[[:space:]]//g; s/^.*=//g'`
- VPN=`grep -i -e '^[[:space:]]*(MyOwnVPNIP|MyVirtualIP)' -E $CFG | head -1 | sed 's/[[:space:]]//g; s/^.*=//g'`
-
- # discourage empty and multiple entries
- [ -z "$DEV" ] && \
- { echo "tinc: TapDevice required" >&2 ; return 2; }
- echo $DEV | grep -q '^/dev/tap' ||
- { echo "tinc: TapDevice should be in form /dev/tapX" >&2 ; return 2; }
- [ `echo $DEV | wc -l` -gt 1 ] &&
- { echo "tinc: multiple TapDevice entries not allowed" >&2 ; return 3; }
- [ -z "$VPN" ] && \
- { echo "tinc: MyOwnVPNIP/MyVirtualIP required" >&2 ; return 2; }
- [ `echo $VPN | wc -l` -gt 1 ] &&
- { echo "tinc: multiple MyOwnVPNIP/MyVirtualIP entries not allowed" >&2 ; return 3; }
- echo $VPN | grep -q -x \
- '\([[:digit:]]\{1,3\}\.\)\{3\}[[:digit:]]\{1,3\}/[[:digit:]]\{1,2\}' || \
- { echo "tinc: badly formed MyOwnVPNIP/MyVirtualIP address $VPN" ; return 3; }
-
- # network device
- TAP=`echo $DEV | cut -d"/" -f3`
- NUM=`echo $TAP | sed 's/tap//'`
-
- # IP address, netmask length
- ADR=`echo $VPN | cut -d"/" -f1`
- LEN=`echo $VPN | cut -d"/" -f2`
-
- # Expand bitlength to netmask
- MSK=""; len=$LEN
- for cnt in 1 1 1 0 ; do
- if [ $len -ge 8 ]; then
- msk=8
- else
- msk=$len
- fi
-
- MSK="$MSK$((255 & (255 << (8 - msk))))"
- [ $cnt -ne 0 ] && MSK="$MSK."
- len=$((len-msk))
- done
-
- # Network & broadcast addresses
-# BRD=`ipcalc --broadcast $ADR $MSK | cut -d"=" -f2`
-# NET=`ipcalc --network $ADR $MSK | cut -d"=" -f2`
-
- # MAC address
- MAC=`printf "fe:fd:%0.2x:%0.2x:%0.2x:%0.2x" $(echo $ADR | sed 's/\./ /g')`
- echo
- echo "TAP $TAP NUM $NUM ADR $ADR LEN $LEN MSK $MSK BRD $BRD NET $NET MAC $MAC" >&2
- return 0
+ while(<$CFG>) {
+ if( /^[ ]*TapDevice[ =]+([^ \#]+)/i ) {
+ $DEV=$1;
+ chomp($DEV);
+ $DEV =~ s/^.*\/([^\/0-9]+)([0-9]+)$/$1$2/;
+ $NUM = $2;
+ } elsif ( /^[ ]*(MyOwnVPNIP|MyVirtualIP)[ =]+([^ \#]+)/i ) {
+ $VPN=$2;
+ chomp($VPN);
+ } elsif ( /^[ ]*VpnMask[ =]+([^ \#]+)/i ) {
+ $VPNMASK=$1;
+ }
+ }
+ if(!defined($DEV)) {
+ warn "tinc: There must be a TapDevice\n";
+ return 0;
+ }
+ if($DEV eq "") {
+ warn "tinc: TapDevice should be of the form /dev/tapN\n";
+ return 0;
+ }
+ if(!defined($VPN)) {
+ warn "tinc: MyVirtualIP required\n";
+ return 0;
+ }
+ if($VPN eq "") {
+ warn "tinc: No argument to MyVirtualIP/MyOwnVPNIP\n";
+ return 0;
+ }
+ if(defined($VPNMASK) && $VPNMASK eq "") {
+ warn "tinc: Invalid argument to VpnMask\n";
+ return 0;
+ }
+ if(!defined($VPNMASK) {
+ warn "tinc: No VpnMask specified. Using default 255.255.0.0\n";
+ $VPNMASK="255.255.0.0";
+ }
+
+ $ADR = $VPN;
+ $ADR =~ s/^([^\/]+)\/.*$/$1/;
+ $LEN = $VPN;
+ $LEN =~ s/^.*\/([^\/]+)$/$1/;
+ if($ADR eq "" || $LEN eq "") {
+ warn "tinc: Badly formed MyVirtualIP/MyOwnVPNIP\n";
+ return 0;
+ }
+ @addr = split(/\./, $ADR);
+
+ $ADR = pack('C4', @addr);
+ $MSK = pack('N4', -1 << (32 - $LEN));
+ $BRD = join(".", unpack('C4', $ADR | ~$MSK));
+ $MAC = "fe:fd:" . join(":", map { sprintf "%02x", $_ } unpack('C4', $ADR));
+ $VPNMASK = pack('C4', split(/\./, $VPNMASK));
+ $VPNMASK = join(".", unpack('C4', $VPNMASK));
+ $ADR = join(".", unpack('C4', $ADR));
+ $MSK = join(".", unpack('C4', $MSK));
+
+
+ 1;
}
##############################################################################
# vpn_start () starts specified VPN
#
-# $1 ... VPN to start
+# $_[0] ... VPN to start
-vpn_start () {
+sub vpn_start {
+ vpn_load($_[0]) || return 0;
- vpn_load $1 || { echo "**tinc: could not vpn_load $1" >&2 ; return 1; }
-
- # create device file
- if [ ! -c $DEV ]; then
- [ -e $DEV ] && rm -f $DEV
- mknod --mode=0600 $DEV c 36 $((16 + NUM))
- fi
-
- # load device module
- { insmod ethertap --name="ethertap$NUM" unit="$NUM" 2>&1 || \
- { echo "**tinc: cannot insmod ethertap$NUM" >&2 ; return 2; } ;
- } | grep -v '^Us'
-
- # configure the interface
- ip link set $TAP address $MAC
- ip link set $TAP up
- ip addr flush dev $TAP 2>&1 | grep -v -x '^Nothing to flush.'
- ip addr add $VPN brd $BRD dev $TAP
-
- # start tincd
- $TINCD --net="$1" $DEBUG || \
- { echo "**tinc: could not start $TINCD" >&2; return 3; }
-
- # default interface route
- # ip route add $NET/$LEN dev $TAP
+ system("insmod ethertap -s --name=\"ethertap$NUM\" unit=\"$NUM\" >/dev/null");
+ system("ifconfig $DEV hw ether $MAC");
+ system("ifconfig $DEV $ADR netmask $MSK broadcast $BRD -arp");
+ system("start-stop-daemon --start --quiet --pidfile /var/run/$NAME.$_[0].pid --exec $DAEMON -- -n $_[0] $EXTRA");
+}
- # setup routes
- /etc/sysconfig/network-scripts/ifup-routes $TAP
- return 0
-} # vpn_start
##############################################################################
# vpn_stop () Stops specified VPN
#
-# $1 ... VPN to stop
+# $_[0] ... VPN to stop
-vpn_stop () {
+sub vpn_stop {
+ vpn_load($_[0]) || return 1;
- vpn_load $1 || return 1
-
- # flush the routing table
- # ip route flush dev $TAP &> /dev/null
-
- # kill the tincd daemon
- PID="$TPIDS/tinc.$1.pid"
- if [ -f $PID ]; then
- $TINCD --net="$1" --kill &> /dev/null
- RET=$?
-
- if [ $RET -eq 0 ]; then
- dly=0
- while [ $dly -le 5 ]; do
- [ -f $PID ] || break
- sleep 1; dly=$((dly+1))
- done
- fi
-
- [ -f $PID ] && rm -f $PID
- fi
-
- # bring the interface down
- ip link set $TAP down &> /dev/null
+ system("start-stop-daemon --stop --quiet --pidfile /var/run/$NAME.$_[0].pid --exec $DAEMON -- -n $_[0] $EXTRA -k");
- # remove ethertap module
- rmmod "ethertap$NUM" &> /dev/null
-
- return 0
-} # vpn_stop
-
-
-
-
-
-
-
-case "$1" in
- start)
- echo -n "Starting $DESC:"
- for net in $NETS ; do
- echo -n " $net"
- vpn_start $net
- start-stop-daemon --start --quiet --pidfile /var/run/$NAME.$net.pid \
- --exec $DAEMON -- -n $net
- done
- echo "."
- ;;
- stop)
- echo -n "Stopping $DESC:"
- for net in $NETS ; do
- echo -n " $net"
- start-stop-daemon --stop --quiet --pidfile /var/run/$NAME.$net.pid \
- --exec $DAEMON -- -n $net -k
- done
- echo "."
- ;;
- #reload)
- #
- # If the daemon can reload its config files on the fly
- # for example by sending it SIGHUP, do it here.
- #
- # If the daemon responds to changes in its config file
- # directly anyway, make this a do-nothing entry.
- #
- # echo "Reloading $DESC configuration files."
- # start-stop-daemon --stop --signal 1 --quiet --pidfile \
- # /var/run/$NAME.pid --exec $DAEMON
- #;;
- restart|force-reload)
- #
- # If the "reload" option is implemented, move the "force-reload"
- # option to the "reload" entry above. If not, "force-reload" is
- # just the same as "restart".
- #
- echo -n "Restarting $DESC:"
- for net in $NETS ; do
- start-stop-daemon --stop --quiet --pidfile \
- /var/run/$NAME.$net.pid --exec $DAEMON -- -n $net -k
- sleep 1
- start-stop-daemon --start --quiet --pidfile \
- /var/run/$NAME.$net.pid --exec $DAEMON -- -n $net
- echo -n " $net"
- done
- echo "."
- ;;
- *)
- N=/etc/init.d/$NAME
- # echo "Usage: $N {start|stop|restart|reload|force-reload}" >&2
- echo "Usage: $N {start|stop|restart|force-reload}" >&2
- exit 1
- ;;
-esac
-
-exit 0
+ system("ifconfig $DEV down");
+ system("rmmod ethertap$NUM -s");
+}
+
+
+if(!defined($ARGV[0])) {
+ die "Usage: /etc/init.d/$NAME {start|stop|restart|force-reload}\n";
+}
+
+if($ARGV[0] eq "start") {
+ find_nets;
+ print "Starting $DESC:";
+ foreach $n (@NETS) {
+ print " $n";
+ vpn_start($n);
+ }
+ print ".\n";
+} elsif ($ARGV[0] eq "stop") {
+ find_nets;
+ print "Stopping $DESC:";
+ foreach $n (@NETS) {
+ print " $n";
+ vpn_stop($n);
+ }
+ print ".\n";
+} elsif ($ARGV[0] eq "restart" || $ARGV[0] eq "force-reload") {
+ find_nets;
+ print "Stopping $DESC:";
+ foreach $n (@NETS) {
+ print " $n";
+ vpn_stop($n);
+ }
+ print ".\n";
+ print "Starting $DESC:";
+ foreach $n (@NETS) {
+ print " $n";
+ vpn_start($n);
+ }
+ print ".\n";
+} else {
+ die "Usage: /etc/init.d/$NAME {start|stop|restart|force-reload}\n";
+}
projects / tinc / blobdiff