Split parts not Gluon-specific out of gluon-autoupdater
This commit is contained in:
Matthias Schiffer
parent
58ced87261
commit
4d80b7a62d
@ -1,7 +1,7 @@
|
|||||||
include $(TOPDIR)/rules.mk
|
include $(TOPDIR)/rules.mk
|
||||||
|
|
||||||
PKG_NAME:=gluon-autoupdater
|
PKG_NAME:=gluon-autoupdater
|
||||||
PKG_VERSION:=3
|
PKG_VERSION:=4
|
||||||
PKG_RELEASE:=$(GLUON_BRANCH)
|
PKG_RELEASE:=$(GLUON_BRANCH)
|
||||||
|
|
||||||
PKG_BUILD_DIR := $(BUILD_DIR)/$(PKG_NAME)
|
PKG_BUILD_DIR := $(BUILD_DIR)/$(PKG_NAME)
|
||||||
@ -11,7 +11,7 @@ include $(GLUONDIR)/include/package.mk
|
|||||||
define Package/gluon-autoupdater
|
define Package/gluon-autoupdater
|
||||||
SECTION:=gluon
|
SECTION:=gluon
|
||||||
CATEGORY:=Gluon
|
CATEGORY:=Gluon
|
||||||
DEPENDS:=+gluon-core +gluon-cron +opkg +ecdsautils +!BUSYBOX_CONFIG_SHA512SUM:coreutils-sha512sum
|
DEPENDS:=+gluon-core +gluon-cron +autoupdater
|
||||||
TITLE:=Automatically update firmware
|
TITLE:=Automatically update firmware
|
||||||
endef
|
endef
|
||||||
|
|
||||||
|
|||||||
@ -1,35 +0,0 @@
|
|||||||
Models
|
|
||||||
======
|
|
||||||
|
|
||||||
Ubiquity
|
|
||||||
--------
|
|
||||||
|
|
||||||
ubiquity-nanostation-m (dual ethernet)
|
|
||||||
ubiquity-bullet-m (single ethernet: Bullet M, NanoStation Loco M, PicoStation M)
|
|
||||||
|
|
||||||
TP-Link
|
|
||||||
-------
|
|
||||||
|
|
||||||
tp-link-tl-mr3020
|
|
||||||
tp-link-tl-mr3040
|
|
||||||
tp-link-tl-mr3220
|
|
||||||
tp-link-tl-mr3420
|
|
||||||
tp-link-tl-wdr3600-v1
|
|
||||||
tp-link-tl-wdr4300-v1
|
|
||||||
tp-link-tl-wdr4310-v1
|
|
||||||
tp-link-tl-wr740n-nd-v1
|
|
||||||
tp-link-tl-wr740n-nd-v3
|
|
||||||
tp-link-tl-wr740n-nd-v4
|
|
||||||
tp-link-tl-wr741n-nd-v1
|
|
||||||
tp-link-tl-wr741n-nd-v2
|
|
||||||
tp-link-tl-wr741n-nd-v4
|
|
||||||
tp-link-tl-wr841n-nd-v8
|
|
||||||
tp-link-tl-wr841n-nd-v1.5
|
|
||||||
tp-link-tl-wr841n-nd-v3
|
|
||||||
tp-link-tl-wr841n-nd-v5
|
|
||||||
tp-link-tl-wr841n-nd-v7
|
|
||||||
tp-link-tl-wr842n-nd-v1
|
|
||||||
tp-link-tl-wr941n-nd-v2
|
|
||||||
tp-link-tl-wr941n-nd-v3
|
|
||||||
tp-link-tl-wr941n-nd-v4
|
|
||||||
tp-link-tl-wr1043n-nd-v1
|
|
||||||
@ -1,24 +0,0 @@
|
|||||||
#config autoupdater settings
|
|
||||||
# option enabled 1
|
|
||||||
# option branch "stable"
|
|
||||||
|
|
||||||
#config branch stable
|
|
||||||
# The branch name given in the manifest
|
|
||||||
# option name 'stable'
|
|
||||||
|
|
||||||
# list mirror 'http://[fdef:ffc0:3dd7::8]/~freifunk/firmware/autoupdate'
|
|
||||||
|
|
||||||
# The updater will run once per hour and perform an update with a certain
|
|
||||||
# probability.
|
|
||||||
# 1.0 - perform an update every hour
|
|
||||||
# 0.5 - on average, perform an update every two hours
|
|
||||||
# 0.0 - inhibit any automatic updates
|
|
||||||
# option probability 0.5
|
|
||||||
|
|
||||||
# Minimum valid signatures required to perform the update
|
|
||||||
# option good_signatures 2
|
|
||||||
|
|
||||||
# List of public keys
|
|
||||||
# list pubkey 'beea7da92ed0c19563b6c259162b4cb471aa2fdf9d3939d05fea2cf498ea7642'
|
|
||||||
# list pubkey 'c75c9390cf5d7cc49a388d35f831ca379060cf7bca8c6e3d2d1ea31604597c42'
|
|
||||||
# list pubkey '03e9514f137f0467c0f0ac108892c0da2b71f1039b30f863331cbd5701abd042'
|
|
||||||
@ -1,186 +0,0 @@
|
|||||||
#!/bin/sh
|
|
||||||
|
|
||||||
|
|
||||||
BRANCH=$(uci get autoupdater.settings.branch)
|
|
||||||
|
|
||||||
PROBABILITY=$(uci get autoupdater.${BRANCH}.probability)
|
|
||||||
|
|
||||||
if test "a$1" != "a-f"; then
|
|
||||||
if test $(uci get autoupdater.settings.enabled) != 1; then
|
|
||||||
echo "autoupdater is disabled"
|
|
||||||
exit 0
|
|
||||||
fi
|
|
||||||
# get one random byte from /dev/urandom, convert it to decimal and check
|
|
||||||
# against update_probability*255
|
|
||||||
hexdump -n1 -e '/1 "%d"' /dev/urandom | awk "{exit \$1 > $PROBABILITY * 255}"
|
|
||||||
if test $? -ne 0; then
|
|
||||||
echo "No autoupdate this time. Use -f to override"
|
|
||||||
exit 0
|
|
||||||
fi
|
|
||||||
fi
|
|
||||||
|
|
||||||
BRANCH_NAME=$(uci get autoupdater.${BRANCH}.name)
|
|
||||||
MIRRORS=$(for mirror in $(uci get autoupdater.${BRANCH}.mirror); do \
|
|
||||||
hexdump -n1 -e '/1 "%d '"$mirror"'\n"' /dev/urandom; \
|
|
||||||
done | sort -n | cut -d' ' -f2)
|
|
||||||
PUBKEYS=$(uci get autoupdater.${BRANCH}.pubkey)
|
|
||||||
GOOD_SIGNATURES=$(uci get autoupdater.${BRANCH}.good_signatures)
|
|
||||||
|
|
||||||
VERSION_FILE=/lib/gluon/release
|
|
||||||
|
|
||||||
# returns 0 when $1 is a higher version number than $2
|
|
||||||
newer_than() {
|
|
||||||
# negate the return value as opkg returns 1 when the proposition is true
|
|
||||||
! opkg compare-versions "$1" '>>' "$2"
|
|
||||||
}
|
|
||||||
|
|
||||||
fetch_manifest() {
|
|
||||||
local MIRROR=$1
|
|
||||||
local manifest=$2
|
|
||||||
|
|
||||||
wget -O$manifest "$MIRROR"/manifest
|
|
||||||
|
|
||||||
if test $? -ne 0; then
|
|
||||||
echo "Couldn't fetch manifest from $MIRROR" >&2
|
|
||||||
return 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
return 0
|
|
||||||
}
|
|
||||||
|
|
||||||
verify_manifest() {
|
|
||||||
local manifest=$1
|
|
||||||
local manifest_upper=$2
|
|
||||||
local manifest_lower=$(mktemp)
|
|
||||||
awk "BEGIN { sep=0 }
|
|
||||||
/^---\$/ { sep=1; next }
|
|
||||||
{ if(sep==0) print > \"$manifest_upper\";
|
|
||||||
else print > \"$manifest_lower\"}" \
|
|
||||||
$manifest
|
|
||||||
|
|
||||||
local signatures=""
|
|
||||||
while read sig; do
|
|
||||||
echo "$sig" | grep -q "^[0-9a-f]\{128\}$"
|
|
||||||
if test $? -ne 0; then
|
|
||||||
continue
|
|
||||||
fi
|
|
||||||
signatures="$signatures -s $sig"
|
|
||||||
done < $manifest_lower
|
|
||||||
|
|
||||||
local pubkeys=""
|
|
||||||
for key in $PUBKEYS; do
|
|
||||||
pubkeys="$pubkeys -p $key"
|
|
||||||
done
|
|
||||||
|
|
||||||
rm -f $manifest_lower
|
|
||||||
|
|
||||||
ecdsaverify -n $GOOD_SIGNATURES $pubkeys $signatures $manifest_upper
|
|
||||||
|
|
||||||
if test $? -ne 0; then
|
|
||||||
echo "Not enough valid signatures!" >&2
|
|
||||||
return 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
return 0
|
|
||||||
}
|
|
||||||
|
|
||||||
analyse_manifest() {
|
|
||||||
local manifest_upper=$1
|
|
||||||
|
|
||||||
grep -q "^BRANCH=${BRANCH_NAME}$" $manifest_upper
|
|
||||||
|
|
||||||
if test $? -ne 0; then
|
|
||||||
echo "Wrong branch. We are on ${BRANCH_NAME}" >&2
|
|
||||||
return 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
local my_firmware
|
|
||||||
my_firmware=$(grep "^${my_model} " $manifest_upper)
|
|
||||||
|
|
||||||
if test $? -ne 0; then
|
|
||||||
echo "No matching firmware found (model ${my_model})" >&2
|
|
||||||
return 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
fw_version=$(echo "${my_firmware}"|cut -d' ' -f2)
|
|
||||||
fw_checksum=$(echo "${my_firmware}"|cut -d' ' -f3)
|
|
||||||
fw_file=$(echo "${my_firmware}"|cut -d' ' -f4)
|
|
||||||
|
|
||||||
return 0
|
|
||||||
}
|
|
||||||
|
|
||||||
fetch_firmware() {
|
|
||||||
local MIRROR=$1
|
|
||||||
local fw_image=$2
|
|
||||||
|
|
||||||
wget -O$fw_image "${MIRROR}/${fw_file}"
|
|
||||||
|
|
||||||
if test $? -ne 0; then
|
|
||||||
echo "Error downloading image from $MIRROR" >&2
|
|
||||||
return 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
return 0
|
|
||||||
}
|
|
||||||
|
|
||||||
autoupdate() {
|
|
||||||
local MIRROR=$1
|
|
||||||
|
|
||||||
local manifest=$(mktemp)
|
|
||||||
fetch_manifest $MIRROR $manifest || { rm -f $manifest; return 1; }
|
|
||||||
|
|
||||||
local manifest_upper=$(mktemp)
|
|
||||||
verify_manifest $manifest $manifest_upper || { rm -f $manifest $manifest_upper; return 1; }
|
|
||||||
rm -f $manifest
|
|
||||||
|
|
||||||
analyse_manifest $manifest_upper || { rm -f $manifest_upper; return 1; }
|
|
||||||
rm -f $manifest_upper
|
|
||||||
|
|
||||||
if newer_than "$fw_version" "$my_version"; then
|
|
||||||
echo "New version available"
|
|
||||||
|
|
||||||
# drop caches to make room for firmware image
|
|
||||||
sync
|
|
||||||
sysctl -w vm.drop_caches=3
|
|
||||||
|
|
||||||
local fw_image=$(mktemp)
|
|
||||||
fetch_firmware $MIRROR $fw_image || { rm -f $fw_image; return 1; }
|
|
||||||
|
|
||||||
image_sha512=$(sha512sum "$fw_image" | awk '{print $1}')
|
|
||||||
image_md5=$(md5sum "$fw_image" | awk '{print $1}')
|
|
||||||
if [ "$image_sha512" != "$fw_checksum" -a "$image_md5" != "$fw_checksum" ]; then
|
|
||||||
echo "Invalid image checksum" >&2
|
|
||||||
rm -f $fw_image
|
|
||||||
return 1
|
|
||||||
fi
|
|
||||||
echo "Upgrading firmware."
|
|
||||||
|
|
||||||
sysupgrade "${fw_image}"
|
|
||||||
else
|
|
||||||
echo "No new firmware available"
|
|
||||||
fi
|
|
||||||
|
|
||||||
return 0
|
|
||||||
}
|
|
||||||
|
|
||||||
trap 'echo Signal ignored.' INT TERM PIPE
|
|
||||||
|
|
||||||
my_model="$(lua -e 'print(require("platform_info").get_image_name())')"
|
|
||||||
|
|
||||||
if [ ! -f "$VERSION_FILE" ]; then
|
|
||||||
echo "Couldn't determine firmware version!" >&2
|
|
||||||
exit 1
|
|
||||||
fi
|
|
||||||
|
|
||||||
my_version="$(cat "$VERSION_FILE")"
|
|
||||||
|
|
||||||
for mirror in $MIRRORS; do
|
|
||||||
|
|
||||||
autoupdate $mirror && exit 0
|
|
||||||
|
|
||||||
unset fw_version
|
|
||||||
unset fw_checksum
|
|
||||||
unset fw_file
|
|
||||||
|
|
||||||
done
|
|
||||||
|
|
||||||
@ -1,8 +0,0 @@
|
|||||||
BRANCH=stable
|
|
||||||
|
|
||||||
# model ver sha512sum filename
|
|
||||||
tp-link-tl-wdr4300-v1 0.4 c300c2b80a8863506cf3b19359873c596d87af3183c4826462dfb5aa69bec7ce65e3db23a9f6f779fd0f3cc50db5d57070c2b62942abf4fb0e08ae4cb48191a0 gluon-0.4-tp-link-tl-wdr4300-v1-sysupgrade.bin
|
|
||||||
|
|
||||||
# after three dashes follow the ecdsa signatures of everything above the dashes
|
|
||||||
---
|
|
||||||
49030b7b394e0bd204e0faf17f2d2b2756b503c9d682b135deea42b34a09010bff139cbf7513be3f9f8aae126b7f6ff3a7bfe862a798eae9b005d75abbba770a
|
|
||||||
Loading…
Reference in New Issue
Block a user