1#@!#!123s

: / usr / libexec /

Filename : readonly-root

back

#!/bin/bash
#
# Set up readonly-root support.
#

. /etc/init.d/functions

# We need to initialize the $HOSTNAME variable by ourselves now:
# (It was previously done for RHEL-6 branch, but got lost in time.)
HOSTNAME="$(hostname)"

# Check SELinux status
SELINUX_STATE=
if [ -e "/sys/fs/selinux/enforce" ] && [ "$(cat /proc/self/attr/current | tr -d '\000' )" != "kernel" ]; then
	if [ -r "/sys/fs/selinux/enforce" ] ; then
		SELINUX_STATE=$(cat "/sys/fs/selinux/enforce")
	else
		# assume enforcing if you can't read it
		SELINUX_STATE=1
	fi
fi

selinux_fixup() {
	if [ -n "$SELINUX_STATE" ] && [ -e "$1" ]; then
		restorecon -R "$1"
	fi
}

# Only read this once.
[ -z "${cmdline}" ] && cmdline=$(cat /proc/cmdline)

READONLY=
if [ -f /etc/sysconfig/readonly-root ]; then
	. /etc/sysconfig/readonly-root
fi
if strstr "$cmdline" readonlyroot ; then
	READONLY=yes
	[ -z "$RW_MOUNT" ] && RW_MOUNT=/var/lib/stateless/writable
	[ -z "$STATE_MOUNT" ] && STATE_MOUNT=/var/lib/stateless/state
fi
if strstr "$cmdline" noreadonlyroot ; then
	READONLY=no
fi

MOUNTS=()
if [ "$READONLY" = "yes" -o "$TEMPORARY_STATE" = "yes" ]; then

        add_mount() {
                mnt=${1%/}
                MOUNTS=("${MOUNTS[@]}" "$mnt")
        }

        cp_empty() {
                if [ -e "$1" ]; then
			echo "$1" | cpio -p -vd "$RW_MOUNT" &>/dev/null
                        add_mount $1
		fi
        }

        cp_dirs() {
		if [ -e "$1" ]; then
			mkdir -p "$RW_MOUNT$1"
			find "$1" -type d -print0 | cpio -p -0vd "$RW_MOUNT" &>/dev/null
                        add_mount $1
		fi
	}

        cp_files() {
		if [ -e "$1" ]; then
			cp -a --parents "$1" "$RW_MOUNT"
                        add_mount $1
		fi
	}

	# Common mount options for scratch space regardless of
	# type of backing store
	mountopts=

	# Scan partitions for local scratch storage
	rw_mount_dev=$(blkid -t LABEL="$RW_LABEL" -l -o device)

        bindmountopts=
        [ "$SLAVE_MOUNTS" = "yes" ] && bindmountopts="--make-slave"

	# First try to mount scratch storage from /etc/fstab, then any
	# partition with the proper label.  If either succeeds, be sure
	# to wipe the scratch storage clean.  If both fail, then mount
	# scratch storage via tmpfs.
	if mount $mountopts "$RW_MOUNT" > /dev/null 2>&1 ; then
		rm -rf "$RW_MOUNT" > /dev/null 2>&1
	elif [ x$rw_mount_dev != x ] && mount $rw_mount_dev $mountopts "$RW_MOUNT" > /dev/null 2>&1; then
		rm -rf "$RW_MOUNT"  > /dev/null 2>&1
	else
		mount -n -t tmpfs $RW_OPTIONS $mountopts none "$RW_MOUNT"
	fi

	for file in /etc/rwtab /etc/rwtab.d/* /run/initramfs/rwtab ; do
		is_ignored_file "$file" && continue
	[ -f $file ] && while read type path ; do
			case "$type" in
				empty)
					cp_empty $path
					;;
				files)
					cp_files $path
					;;
				dirs)
					cp_dirs $path
					;;
				*)
					;;
			esac
                done < <(cat $file)
	done

        for m in "${MOUNTS[@]}"; do
                prefix=0
                for mount_point in "${MOUNTS[@]}"; do
                        [[ $m = $mount_point ]] && continue
                        if [[ $m =~ ^$mount_point/.* ]] ; then
                                prefix=1
                                break
                        fi
                done
                [[ $prefix -eq 1 ]] && continue

                mount -n --bind $bindmountopts "$RW_MOUNT$m" "$m"
	        selinux_fixup "$m"
        done

	# Use any state passed by initramfs
	[ -d /run/initramfs/state ] && cp -a /run/initramfs/state/* $RW_MOUNT

	# In theory there should be no more than one network interface active
	# this early in the boot process -- the one we're booting from.
	# Use the network address to set the hostname of the client.  This
	# must be done even if we have local storage.
	ipaddr=
	if [ "$HOSTNAME" = "localhost" -o "$HOSTNAME" = "localhost.localdomain" ]; then
		ipaddr=$(ip addr show to 0.0.0.0/0 scope global | awk '/[[:space:]]inet / { print gensub("/.*","","g",$2) }')
		for ip in $ipaddr ; do
			HOSTNAME=
			eval $(ipcalc -h $ipaddr 2>/dev/null)
			[ -n "$HOSTNAME" ] && { hostname ${HOSTNAME} ; break; }
		done
	fi
	
	# Clients with read-only root filesystems may be provided with a
	# place where they can place minimal amounts of persistent
	# state.  SSH keys or puppet certificates for example.
	#
	# Ideally we'll use puppet to manage the state directory and to
	# create the bind mounts.  However, until that's all ready this
	# is sufficient to build a working system.

	# First try to mount persistent data from /etc/fstab, then any
	# partition with the proper label, then fallback to NFS
	state_mount_dev=$(blkid -t LABEL="$STATE_LABEL" -l -o device)
	if mount $mountopts $STATE_OPTIONS "$STATE_MOUNT" > /dev/null 2>&1 ; then
		/bin/true
	elif [ x$state_mount_dev != x ] && mount $state_mount_dev $mountopts "$STATE_MOUNT" > /dev/null 2>&1;  then
		/bin/true
	elif [ ! -z "$CLIENTSTATE" ]; then
		# No local storage was found.  Make a final attempt to find
		# state on an NFS server.

		mount -t nfs $CLIENTSTATE/$HOSTNAME $STATE_MOUNT -o rw,nolock
	fi

	if [ -w "$STATE_MOUNT" ]; then

		mount_state() {
			if [ -e "$1" ]; then
				[ ! -e "$STATE_MOUNT$1" ] && cp -a --parents "$1" "$STATE_MOUNT"
				mount -n --bind $bindmountopts "$STATE_MOUNT$1" "$1"
			fi
		}

		for file in /etc/statetab /etc/statetab.d/* ; do
			is_ignored_file "$file" && continue
			[ ! -f "$file" ] && continue

			if [ -f "$STATE_MOUNT/$file" ] ; then
				mount -n --bind $bindmountopts "$STATE_MOUNT/$file" "$file"
			fi

			for path in $(grep -v "^#" "$file" 2>/dev/null); do
				mount_state "$path"
				selinux_fixup "$path"
			done
		done

		if [ -f "$STATE_MOUNT/files" ] ; then
			for path in $(grep -v "^#" "$STATE_MOUNT/files" 2>/dev/null); do
				mount_state "$path"
				selinux_fixup "$path"
			done
		fi
	fi

        if mount | grep -q /var/lib/nfs/rpc_pipefs ; then
                mount -t rpc_pipefs sunrpc /var/lib/nfs/rpc_pipefs
        fi
fi

Name	Size	Last Modified	Owner	Permissions
awk	Dir	July 28 2023 2:55:57	root	0755
cloud-init	Dir	April 24 2025 3:40:45	root	0755
coreutils	Dir	July 28 2023 2:56:05	root	0755
cpanel-pdns	Dir	March 21 2025 3:40:31	root	0755
dbus-1	Dir	December 10 2023 3:44:19	root	0755
dovecot	Dir	March 21 2025 3:40:30	root	0755
gawk	Dir	July 28 2023 2:55:57	root	0755
gcc	Dir	March 31 2025 10:36:01	root	0755
getconf	Dir	April 15 2025 3:40:28	root	0755
git-core	Dir	December 19 2024 3:41:16	root	0755
grubby	Dir	May 29 2024 3:42:59	root	0755
hostname	Dir	July 28 2023 2:55:43	root	0755
imunify360	Dir	May 29 2024 6:50:26	root	0755
initscripts	Dir	July 28 2023 2:59:25	root	0755
installkernel	Dir	May 29 2024 3:42:59	root	0755
iptables	Dir	April 04 2024 3:40:41	root	0755
kcare	Dir	April 16 2025 3:40:43	root	0755
linux-boot-probes	Dir	July 28 2023 2:56:12	root	0755
man-db	Dir	July 28 2023 2:57:38	root	0755
microcode_ctl	Dir	March 25 2025 3:40:13	root	0755
nfs-utils	Dir	July 28 2023 2:57:42	root	0755
oddjob	Dir	July 28 2023 2:57:17	root	0755
openldap	Dir	March 11 2025 9:44:39	root	0755
openssh	Dir	March 06 2025 3:40:13	root	0755
os-prober	Dir	July 28 2023 2:56:12	root	0755
os-probes	Dir	July 28 2023 2:56:12	root	0755
p11-kit	Dir	May 29 2024 3:41:25	root	0755
perf-core	Dir	April 16 2025 3:41:21	root	0755
plymouth	Dir	April 18 2022 4:45:15	root	0755
selinux	Dir	March 12 2025 3:40:55	root	0755
smartmontools	Dir	May 29 2024 3:43:00	root	0755
sudo	Dir	February 15 2024 3:40:22	root	0755
tuned	Dir	March 12 2025 3:40:57	root	0755
utempter	Dir	July 28 2023 2:56:09	root	0755
audit-functions	0.967 KB	April 06 2024 12:53:49	root	0750
chrony-helper	7.175 KB	November 05 2024 7:44:41	root	0755
dirmngr_ldap	87.32 KB	September 13 2022 10:15:05	root	0755
dnf-utils	3.615 KB	April 08 2024 10:02:46	root	0755
ebtables	1.33 KB	April 02 2024 6:37:41	root	0755
exim.daemon	0.74 KB	March 21 2025 5:14:58	root	0755
generate-rndc-key.sh	0.533 KB	February 20 2025 9:05:37	root	0755
gpg-check-pattern	111.883 KB	September 13 2022 10:15:05	root	0755
gpg-preset-passphrase	87.211 KB	September 13 2022 10:15:05	root	0755
gpg-protect-tool	206.305 KB	September 13 2022 10:15:05	root	0755
gpg-wks-client	227.219 KB	September 13 2022 10:15:05	root	0755
grepconf.sh	0.247 KB	August 12 2018 7:47:56	root	0755
import-state	1.033 KB	August 10 2022 1:03:37	root	0755
loadmodules	0.228 KB	August 10 2022 1:03:37	root	0755
netconsole	4.462 KB	August 10 2022 1:03:37	root	0755
nfsrahead	37.156 KB	April 01 2023 5:31:16	root	0755
no-python	0.153 KB	December 05 2024 1:10:18	root	0755
platform-python	11.594 KB	December 05 2024 1:10:21	root	0755
platform-python-config	0.199 KB	December 05 2024 1:10:07	root	0755
platform-python3.6	11.594 KB	December 05 2024 1:10:21	root	0755
platform-python3.6-config	0.199 KB	December 05 2024 1:10:07	root	0755
platform-python3.6m	11.594 KB	December 05 2024 1:10:21	root	0755
platform-python3.6m-config	0.199 KB	December 05 2024 1:10:07	root	0755
platform-python3.6m-x86_64-config	3.541 KB	December 05 2024 1:03:46	root	0755
readonly-root	5.789 KB	August 10 2022 1:03:37	root	0755
scdaemon	442.359 KB	September 13 2022 10:15:05	root	0755
tcawmgr.cgi	25.102 KB	October 13 2019 1:22:36	root	0755
virt-what-cpuid-helper	7.914 KB	October 14 2023 8:52:07	root	0755

2017 © D7net \| D704T team