#!/bin/sh## buildbff.sh: Create AIX SMIT-installable OpenSSH packages# $Id: buildbff.sh,v 1.10 2006/09/10 03:24:19 dtucker Exp $## Author: Darren Tucker (dtucker at zip dot com dot au)# This file is placed in the public domain and comes with absolutely# no warranty.## Based originally on Ben Lindstrom's buildpkg.sh for Solaris### Tunable configuration settings# 	create a "config.local" in your build directory or set#	environment variables to override these.#[ -z "$PERMIT_ROOT_LOGIN" ] && PERMIT_ROOT_LOGIN=no[ -z "$X11_FORWARDING" ] && X11_FORWARDING=no[ -z "$AIX_SRC" ] && AIX_SRC=noumask 022startdir=`pwd`perl -v >/dev/null || (echo perl required; exit 1)# Path to inventory.sh: same place as buildbff.shif  echo $0 | egrep '^/'then	inventory=`dirname $0`/inventory.sh		# absolute pathelse	inventory=`pwd`/`dirname $0`/inventory.sh	# relative pathfi## We still support running from contrib/aix, but this is deprecated#if pwd | egrep 'contrib/aix$'then	echo "Changing directory to `pwd`/../.."	echo "Please run buildbff.sh from your build directory in future."	cd ../..	contribaix=1fiif [ ! -f Makefile ]then	echo "Makefile not found (did you run configure?)"	exit 1fi## Directories used during build:# current dir = $objdir		directory you ran ./configure in.# $objdir/$PKGDIR/ 		directory package files are constructed in# $objdir/$PKGDIR/root/		package root ($FAKE_ROOT)#objdir=`pwd`PKGNAME=opensshPKGDIR=package## Collect local configuration settings to override defaults#if [ -s ./config.local ]then	echo Reading local settings from config.local	. ./config.localfi## Fill in some details from Makefile, like prefix and sysconfdir#	the eval also expands variables like sysconfdir=${prefix}/etc#	provided they are eval'ed in the correct order#for confvar in prefix exec_prefix bindir sbindir libexecdir datadir mandir mansubdir sysconfdir piddir srcdirdo	eval $confvar=`grep "^$confvar=" $objdir/Makefile | cut -d = -f 2`done## Collect values of privsep user and privsep path#	currently only found in config.h#for confvar in SSH_PRIVSEP_USER PRIVSEP_PATHdo	eval $confvar=`awk '/#define[ \t]'$confvar'/{print $3}' $objdir/config.h`done# Set privsep defaults if not definedif [ -z "$SSH_PRIVSEP_USER" ]then	SSH_PRIVSEP_USER=sshdfiif [ -z "$PRIVSEP_PATH" ]then	PRIVSEP_PATH=/var/emptyfi# Clean package build directoryrm -rf $objdir/$PKGDIRFAKE_ROOT=$objdir/$PKGDIR/rootmkdir -p $FAKE_ROOT# Start by faking root installecho "Faking root install..."cd $objdirmake install-nokeys DESTDIR=$FAKE_ROOTif [ $? -gt 0 ]then	echo "Fake root install failed, stopping."	exit 1fi## Copy informational files to include in package#cp $srcdir/LICENCE $objdir/$PKGDIR/cp $srcdir/README* $objdir/$PKGDIR/## Extract common info requires for the 'info' part of the package.#	AIX requires 4-part version numbers#VERSION=`./ssh -V 2>&1 | cut -f 1 -d , | cut -f 2 -d _`MAJOR=`echo $VERSION | cut -f 1 -d p | cut -f 1 -d .`MINOR=`echo $VERSION | cut -f 1 -d p | cut -f 2 -d .`PATCH=`echo $VERSION | cut -f 1 -d p | cut -f 3 -d .`PORTABLE=`echo $VERSION | awk 'BEGIN{FS="p"}{print $2}'`[ "$PATCH" = "" ] && PATCH=0[ "$PORTABLE" = "" ] && PORTABLE=0BFFVERSION=`printf "%d.%d.%d.%d" $MAJOR $MINOR $PATCH $PORTABLE`echo "Building BFF for $PKGNAME $VERSION (package version $BFFVERSION)"## Set ssh and sshd parameters as per config.local#if [ "${PERMIT_ROOT_LOGIN}" = no ]then	perl -p -i -e "s/#PermitRootLogin yes/PermitRootLogin no/" \		$FAKE_ROOT/${sysconfdir}/sshd_configfiif [ "${X11_FORWARDING}" = yes ]then	perl -p -i -e "s/#X11Forwarding no/X11Forwarding yes/" \		$FAKE_ROOT/${sysconfdir}/sshd_configfi# Rename config files; postinstall script will copy them if necessaryfor cfgfile in ssh_config sshd_config ssh_prng_cmdsdo	mv $FAKE_ROOT/$sysconfdir/$cfgfile $FAKE_ROOT/$sysconfdir/$cfgfile.defaultdone## Generate lpp control files.#	working dir is $FAKE_ROOT but files are generated in dir above#	and moved into place just before creation of .bff#cd $FAKE_ROOTecho Generating LPP control filesfind . ! -name . -print >../openssh.al$inventory >../openssh.inventorycat <<EOD >../openssh.copyrightThis software is distributed under a BSD-style license.For the full text of the license, see /usr/lpp/openssh/LICENCEEOD## openssh.size file allows filesystem expansion as required# generate list of directories containing files# then calculate disk usage for each directory and store in openssh.size#files=`find . -type f -print`dirs=`for file in $files; do dirname $file; done | sort -u`for dir in $dirsdo	du $dirdone > ../openssh.size## Create postinstall script#cat <<EOF >>../openssh.post_i#!/bin/shecho Creating configs from defaults if necessary.for cfgfile in ssh_config sshd_config ssh_prng_cmdsdo	if [ ! -f $sysconfdir/\$cfgfile ]	then		echo "Creating \$cfgfile from default"		cp $sysconfdir/\$cfgfile.default $sysconfdir/\$cfgfile	else		echo "\$cfgfile already exists."	fidoneecho# Create PrivilegeSeparation user and group if not presentecho Checking for PrivilegeSeparation user and group.if cut -f1 -d: /etc/group | egrep '^'$SSH_PRIVSEP_USER'\$' >/dev/nullthen	echo "PrivSep group $SSH_PRIVSEP_USER already exists."else	echo "Creating PrivSep group $SSH_PRIVSEP_USER."	mkgroup -A $SSH_PRIVSEP_USERfi# Create user if requiredif lsuser "$SSH_PRIVSEP_USER" >/dev/nullthen	echo "PrivSep user $SSH_PRIVSEP_USER already exists."else	echo "Creating PrivSep user $SSH_PRIVSEP_USER."	mkuser gecos='SSHD PrivSep User' login=false rlogin=false account_locked=true pgrp=$SSH_PRIVSEP_USER $SSH_PRIVSEP_USERfiif egrep '^[ \t]*UsePrivilegeSeparation[ \t]+no' $sysconfdir/sshd_config >/dev/nullthen	echo UsePrivilegeSeparation not enabled, privsep directory not required.else	# create chroot directory if required	if [ -d $PRIVSEP_PATH ]	then		echo "PrivSep chroot directory $PRIVSEP_PATH already exists."	else		echo "Creating PrivSep chroot directory $PRIVSEP_PATH."		mkdir $PRIVSEP_PATH		chown 0 $PRIVSEP_PATH		chgrp 0 $PRIVSEP_PATH		chmod 755 $PRIVSEP_PATH	fifiecho# Generate keys unless they already existecho Creating host keys if required.if [ -f "$sysconfdir/ssh_host_key" ] ; then	echo "$sysconfdir/ssh_host_key already exists, skipping."else	$bindir/ssh-keygen -t rsa1 -f $sysconfdir/ssh_host_key -N ""fiif [ -f $sysconfdir/ssh_host_dsa_key ] ; then	echo "$sysconfdir/ssh_host_dsa_key already exists, skipping."else	$bindir/ssh-keygen -t dsa -f $sysconfdir/ssh_host_dsa_key -N ""fiif [ -f $sysconfdir/ssh_host_rsa_key ] ; then	echo "$sysconfdir/ssh_host_rsa_key already exists, skipping."else	$bindir/ssh-keygen -t rsa -f $sysconfdir/ssh_host_rsa_key -N ""fiecho# Set startup command depending on SRC supportif [ "$AIX_SRC" = "yes" ]then	echo Creating SRC sshd subsystem.	rmssys -s sshd 2>&1 >/dev/null	mkssys -s sshd -p "$sbindir/sshd" -a '-D' -u 0 -S -n 15 -f 9 -R -G tcpip	startupcmd="start $sbindir/sshd \\\"\\\$src_running\\\""	oldstartcmd="$sbindir/sshd"else	startupcmd="$sbindir/sshd"	oldstartcmd="start $sbindir/sshd \\\"$src_running\\\""fi# If migrating to or from SRC, change previous startup command# otherwise add to rc.tcpipif egrep "^\$oldstartcmd" /etc/rc.tcpip >/dev/nullthen	if sed "s|^\$oldstartcmd|\$startupcmd|g" /etc/rc.tcpip >/etc/rc.tcpip.new	then		chmod 0755 /etc/rc.tcpip.new		mv /etc/rc.tcpip /etc/rc.tcpip.old && \		mv /etc/rc.tcpip.new /etc/rc.tcpip	else		echo "Updating /etc/rc.tcpip failed, please check."	fielse	# Add to system startup if required	if grep "^\$startupcmd" /etc/rc.tcpip >/dev/null	then		echo "sshd found in rc.tcpip, not adding."	else		echo "Adding sshd to rc.tcpip"		echo >>/etc/rc.tcpip		echo "# Start sshd" >>/etc/rc.tcpip		echo "\$startupcmd" >>/etc/rc.tcpip	fifiEOF## Create liblpp.a and move control files into it#echo Creating liblpp.a(	cd ..	for i in openssh.al openssh.copyright openssh.inventory openssh.post_i openssh.size LICENCE README*	do		ar -r liblpp.a $i		rm $i	done)## Create lpp_name## This will end up looking something like:# 4 R I OpenSSH {# OpenSSH 3.0.2.1 1 N U en_US OpenSSH 3.0.2p1 Portable for AIX# [# %# /usr/local/bin 8073# /usr/local/etc 189# /usr/local/libexec 185# /usr/local/man/man1 145# /usr/local/man/man8 83# /usr/local/sbin 2105# /usr/local/share 3# %# ]# }echo Creating lpp_namecat <<EOF >../lpp_name4 R I $PKGNAME {$PKGNAME $BFFVERSION 1 N U en_US OpenSSH $VERSION Portable for AIX[%EOFfor i in $bindir $sysconfdir $libexecdir $mandir/${mansubdir}1 $mandir/${mansubdir}8 $sbindir $datadir /usr/lpp/opensshdo	# get size in 512 byte blocks	if [ -d $FAKE_ROOT/$i ]	then		size=`du $FAKE_ROOT/$i | awk '{print $1}'`		echo "$i $size" >>../lpp_name	fidoneecho '%' >>../lpp_nameecho ']' >>../lpp_nameecho '}' >>../lpp_name## Move pieces into place#mkdir -p usr/lpp/opensshmv ../liblpp.a usr/lpp/opensshmv ../lpp_name .## Now invoke backup to create .bff file#	note: lpp_name needs to be the first file so we generate the#	file list on the fly and feed it to backup using -i#echo Creating $PKGNAME-$VERSION.bff with backup...rm -f $PKGNAME-$VERSION.bff(	echo "./lpp_name"	find . ! -name lpp_name -a ! -name . -print) | backup  -i -q -f ../$PKGNAME-$VERSION.bff $filelist## Move package into final location and clean up#mv ../$PKGNAME-$VERSION.bff $startdircd $startdirrm -rf $objdir/$PKGDIRecho $0: done.