fwknopd.init

fwknopd.init (text/plain), 2.70 KB, created by Coacher on 2014-12-17 18:40:47 UTC

#!/sbin/runscript
# Copyright 1999-2014 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: $

extra_commands="checkconfig"
extra_started_commands="reload"

FWKNOPD_CONFDIR="${FWKNOPD_CONFDIR:-/etc/fwknop}"
FWKNOPD_CONFIG="${FWKNOPD_CONFDIR}/fwknopd.conf"
FWKNOPD_PIDFILE="${FWKNOPD_PIDFILE:-/run/fwknop/${SVCNAME}.pid}"
FWKNOPD_BINARY="${FWKNOPD_BINARY:-/usr/sbin/fwknopd}"

depend() {
	need iptables
	use logger
	if [ "${rc_need+set}" = "set" ]; then
		: # Do nothing, the user has explicitly set rc_need
	else
		warn_addr=''
		for x in $(awk '/^PCAP_INTF/{ sub(";$", ""); print $2 }' "${FWKNOPD_CONFIG}" 2>/dev/null); do
			warn_addr="${warn_addr} $x"
		done
		unset x
		if [ "${warn_addr:+set}" = "set" ]; then
			need net
			ewarn "You are binding an interface in PCAP_INTF statement in your fwknopd.conf!"
			ewarn "You must add rc_need=\"net.FOO\" to your /etc/conf.d/${SVCNAME}"
			ewarn "where FOO is the following interface(s):"
			ewarn "${warn_addr}"
		else
			# if PCAP_INTF and PCAP_FILE are not set, then fwknopd uses eth0
			if [ -z "$(grep "^PCAP_FILE" "${FWKNOPD_CONFIG}")" ]; then
				need net
				ewarn "You are not binding any interface in PCAP_INTF statement in your fwknopd.conf,"
				ewarn "neither you are providing PCAP_FILE option. Therefore fwknopd will listen on eth0."
				ewarn "You must add rc_need=\"net.eth0\" to your /etc/conf.d/${SVCNAME}"
			fi
		fi
		unset warn_addr
	fi
}

checkconfig() {
	if [ ! -e "${FWKNOPD_CONFDIR}"/fwknopd.conf ]; then
		eerror "You need ${FWKNOPD_CONFDIR}/fwknopd.conf file to run fwknopd"
		eerror "Example configuration located at /etc/fwknop/fwknopd.conf.example"
		return 1
	fi

	if [ ! -e "${FWKNOPD_CONFDIR}"/access.conf ]; then
		eerror "You need ${FWKNOPD_CONFDIR}/access.conf file to run fwknopd"
		eerror "Example configuration located at /etc/fwknop/access.conf.example"
		return 1
	fi

	[ "${FWKNOPD_PIDFILE}" != "/run/fwknop/fwknopd.pid" ] \
		&& FWKNOPD_OPTS="${FWKNOPD_OPTS} --pid-file=${FWKNOPD_PIDFILE}"
	[ "${FWKNOPD_CONFDIR}" != "/etc/fwknop" ] \
		&& FWKNOPD_OPTS="${FWKNOPD_OPTS} -c ${FWKNOPD_CONFDIR}/fwknopd.conf -a ${FWKNOPD_CONFDIR}/access.conf"

	return 0
}

start() {
	checkconfig || return 1

	ebegin "Starting ${SVCNAME}"
	start-stop-daemon --start \
		--exec "${FWKNOPD_BINARY}" --pidfile="${FWKNOPD_PIDFILE}" \
		-- "${FWKNOPD_OPTS}"
	eend $?
}

stop() {
	if [ "${RC_CMD}" = "restart" ]; then
		checkconfig || return 1
	fi

	ebegin "Stopping ${SVCNAME}"
	start-stop-daemon --stop \
		--exec "${FWKNOPD_BINARY}" --pidfile "${FWKNOPD_PIDFILE}"
	eend $?
}

reload() {
	checkconfig || return 1

	ebegin "Reloading ${SVCNAME}"
	start-stop-daemon --signal HUP \
		--exec "${FWKNOPD_BINARY}" --pidfile "${FWKNOPD_PIDFILE}"
	eend $?
}