#! /bin/sh -x # # skeleton example file to build /etc/init.d/ scripts. # This file should be used to construct scripts for /etc/init.d. # # Written by Miquel van Smoorenburg . # Modified for Debian GNU/Linux # by Ian Murdock . # # Version: @(#)skeleton 1.8 03-Mar-1998 miquels@cistron.nl # # This file was automatically customized by dh-make on Fri, 21 Apr 2000 17:07:50 +0200 PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin DAEMON=/usr/sbin/tincd NAME=tinc DESC="tinc daemons" NETS="test2" TCONF="/etc/tinc" test -f $DAEMON || exit 0 set -e # Check the daemon if [ ! -x $TINCD ]; then echo "**tinc: daemon $TINCD does not exist or is not executable!" exit fi # Check the configuration directory if [ ! -d $TCONF ]; then echo "**tinc: configuration directory ($TCONF) not found!" exit fi ############################################################################## # vpn_load () Loads VPN configuration # # $1 ... VPN to load vpn_load () { CFG="$TCONF/$1/tinc.conf" [ -f $CFG ] || { echo "tinc: $CFG does not exist" >&2 ; return 1; } # load TINCD config DEV=`grep -i -e '^[[:space:]]*TapDevice' $CFG | sed 's/[[:space:]]//g; s/^.*=//g'` VPN=`grep -i -e '^[[:space:]]*(MyOwnVPNIP|MyVirtualIP)' -E $CFG | head -1 | sed 's/[[:space:]]//g; s/^.*=//g'` # discourage empty and multiple entries [ -z "$DEV" ] && \ { echo "tinc: TapDevice required" >&2 ; return 2; } echo $DEV | grep -q '^/dev/tap' || { echo "tinc: TapDevice should be in form /dev/tapX" >&2 ; return 2; } [ `echo $DEV | wc -l` -gt 1 ] && { echo "tinc: multiple TapDevice entries not allowed" >&2 ; return 3; } [ -z "$VPN" ] && \ { echo "tinc: MyOwnVPNIP/MyVirtualIP required" >&2 ; return 2; } [ `echo $VPN | wc -l` -gt 1 ] && { echo "tinc: multiple MyOwnVPNIP/MyVirtualIP entries not allowed" >&2 ; return 3; } echo $VPN | grep -q -x \ '\([[:digit:]]\{1,3\}\.\)\{3\}[[:digit:]]\{1,3\}/[[:digit:]]\{1,2\}' || \ { echo "tinc: badly formed MyOwnVPNIP/MyVirtualIP address $VPN" ; return 3; } # network device TAP=`echo $DEV | cut -d"/" -f3` NUM=`echo $TAP | sed 's/tap//'` # IP address, netmask length ADR=`echo $VPN | cut -d"/" -f1` LEN=`echo $VPN | cut -d"/" -f2` # Expand bitlength to netmask MSK=""; len=$LEN for cnt in 1 1 1 0 ; do if [ $len -ge 8 ]; then msk=8 else msk=$len fi MSK="$MSK$((255 & (255 << (8 - msk))))" [ $cnt -ne 0 ] && MSK="$MSK." len=$((len-msk)) done # Network & broadcast addresses # BRD=`ipcalc --broadcast $ADR $MSK | cut -d"=" -f2` # NET=`ipcalc --network $ADR $MSK | cut -d"=" -f2` # MAC address MAC=`printf "fe:fd:%0.2x:%0.2x:%0.2x:%0.2x" $(echo $ADR | sed 's/\./ /g')` echo echo "TAP $TAP NUM $NUM ADR $ADR LEN $LEN MSK $MSK BRD $BRD NET $NET MAC $MAC" >&2 return 0 } ############################################################################## # vpn_start () starts specified VPN # # $1 ... VPN to start vpn_start () { vpn_load $1 || { echo "**tinc: could not vpn_load $1" >&2 ; return 1; } # create device file if [ ! -c $DEV ]; then [ -e $DEV ] && rm -f $DEV mknod --mode=0600 $DEV c 36 $((16 + NUM)) fi # load device module { insmod ethertap --name="ethertap$NUM" unit="$NUM" 2>&1 || \ { echo "**tinc: cannot insmod ethertap$NUM" >&2 ; return 2; } ; } | grep -v '^Us' # configure the interface ip link set $TAP address $MAC ip link set $TAP up ip addr flush dev $TAP 2>&1 | grep -v -x '^Nothing to flush.' ip addr add $VPN brd $BRD dev $TAP # start tincd $TINCD --net="$1" $DEBUG || \ { echo "**tinc: could not start $TINCD" >&2; return 3; } # default interface route # ip route add $NET/$LEN dev $TAP # setup routes /etc/sysconfig/network-scripts/ifup-routes $TAP return 0 } # vpn_start ############################################################################## # vpn_stop () Stops specified VPN # # $1 ... VPN to stop vpn_stop () { vpn_load $1 || return 1 # flush the routing table # ip route flush dev $TAP &> /dev/null # kill the tincd daemon PID="$TPIDS/tinc.$1.pid" if [ -f $PID ]; then $TINCD --net="$1" --kill &> /dev/null RET=$? if [ $RET -eq 0 ]; then dly=0 while [ $dly -le 5 ]; do [ -f $PID ] || break sleep 1; dly=$((dly+1)) done fi [ -f $PID ] && rm -f $PID fi # bring the interface down ip link set $TAP down &> /dev/null # remove ethertap module rmmod "ethertap$NUM" &> /dev/null return 0 } # vpn_stop case "$1" in start) echo -n "Starting $DESC:" for net in $NETS ; do echo -n " $net" vpn_start $net start-stop-daemon --start --quiet --pidfile /var/run/$NAME.$net.pid \ --exec $DAEMON -- -n $net done echo "." ;; stop) echo -n "Stopping $DESC:" for net in $NETS ; do echo -n " $net" start-stop-daemon --stop --quiet --pidfile /var/run/$NAME.$net.pid \ --exec $DAEMON -- -n $net -k done echo "." ;; #reload) # # If the daemon can reload its config files on the fly # for example by sending it SIGHUP, do it here. # # If the daemon responds to changes in its config file # directly anyway, make this a do-nothing entry. # # echo "Reloading $DESC configuration files." # start-stop-daemon --stop --signal 1 --quiet --pidfile \ # /var/run/$NAME.pid --exec $DAEMON #;; restart|force-reload) # # If the "reload" option is implemented, move the "force-reload" # option to the "reload" entry above. If not, "force-reload" is # just the same as "restart". # echo -n "Restarting $DESC:" for net in $NETS ; do start-stop-daemon --stop --quiet --pidfile \ /var/run/$NAME.$net.pid --exec $DAEMON -- -n $net -k sleep 1 start-stop-daemon --start --quiet --pidfile \ /var/run/$NAME.$net.pid --exec $DAEMON -- -n $net echo -n " $net" done echo "." ;; *) N=/etc/init.d/$NAME # echo "Usage: $N {start|stop|restart|reload|force-reload}" >&2 echo "Usage: $N {start|stop|restart|force-reload}" >&2 exit 1 ;; esac exit 0