rc.d/rc.sysinit

   1 #!/bin/sh
   2 #
   3 # /etc/rc.d/rc.sysinit - run once at boot time
   4 #
   5 # Taken in part from Miquel van Smoorenburg's bcheckrc.
   6 #
   7
   8 # reasonable start values for bootsplash progress.
   9 export progress=0
  10 export sscripts=45
  11 export kscripts=45
  12
  13 # NLS
  14 if [ -r /etc/sysconfig/i18n ]; then
  15         . /etc/sysconfig/i18n
  16         [ -n "$LANG" ] && export LANG || unset LANG
  17         [ -n "$LC_CTYPE" ] && export LC_CTYPE || unset LC_CTYPE
  18         [ -n "$LC_COLLATE" ] && export LC_COLLATE || unset LC_COLLATE
  19         [ -n "$LC_MESSAGES" ] && export LC_MESSAGES || unset LC_MESSAGES
  20         [ -n "$LC_NUMERIC" ] && export LC_NUMERIC || unset LC_NUMERIC
  21         [ -n "$LC_MONETARY" ] && export LC_MONETARY || unset LC_MONETARY
  22         [ -n "$LC_TIME" ] && export LC_TIME || unset LC_TIME
  23         [ -n "$LC_ALL" ] && export LC_ALL || unset LC_ALL
  24         [ -n "$LANGUAGE" ] && export LANGUAGE || unset LANGUAGE
  25         [ -n "$LINGUAS" ] && export LINGUAS || unset LINGUAS
  26 fi
  27
  28 # Read network config data
  29 if [ -r /etc/sysconfig/network ]; then
  30         . /etc/sysconfig/network
  31 else
  32         NETWORKING=no
  33         HOSTNAME=localhost
  34 fi
  35
  36 CONSOLE_LOGLEVEL=1
  37
  38 # Read functions
  39 . /lib/rc-scripts/functions
  40
  41 modprobe_c_cache=""
  42 modprobe_c() {
  43         if [ "$modprobe_c_cache" ]; then
  44                 echo "$modprobe_c_cache"
  45                 return
  46         fi
  47
  48         # filter only what is wanted by this script: aliases and options
  49         modprobe_c_cache=$(modprobe -c | grep -E '^(alias|options)')
  50 }
  51
  52 # parse kernel cmdline
  53 # needs /proc mounted
  54 parse_cmdline() {
  55         local arg cmdline
  56         read cmdline < /proc/cmdline
  57
  58         for arg in $cmdline; do
  59                 case "$arg" in
  60                 noudev)
  61                         # default is set in /etc/sysconfig/system
  62                         START_UDEV=no
  63                 ;;
  64                 nomdadm)
  65                         # default is set in /etc/sysconfig/system
  66                         MDADM=no
  67                 ;;
  68                 nomultipath)
  69                         # default is set in /etc/sysconfig/system
  70                         DM_MULTIPATH=no
  71                 ;;
  72                 noselinux)
  73                         # default is set in /etc/sysconfig/system
  74                         SELINUX=no
  75                 ;;
  76                 nousb)
  77                         nousb=1
  78                 ;;
  79                 nohdparm)
  80                         nohdparm=1
  81                 ;;
  82                 fastboot)
  83                         fastboot=1
  84                 ;;
  85                 nopnp)
  86                         nopnp=1
  87                 ;;
  88                 nomodules)
  89                         nomodules=1
  90                 ;;
  91                 nofirewire)
  92                         nofirewire=1
  93                 ;;
  94                 nofsck)
  95                         nofsck=1
  96                 ;;
  97                 esac
  98         done
  99 }
 100
 101 # resolve a device node to its major:minor numbers in decimal or hex
 102 get_numeric_dev() {
 103         local dev=$1 enc=${2:-hex} res
 104
 105         res=$(stat -Lc "%t:%T" "$dev")
 106         if [ "$enc" = dec ]; then
 107                 local oifs=$IFS
 108                 IFS=":"
 109                 set -- $res
 110                 IFS=$oifs
 111                 res=$((0x$1)):$((0x$2))
 112         fi
 113         echo -n $res
 114 }
 115
 116 # setup SELINUX variable
 117 init_selinux() {
 118         # user knows!
 119         if is_no "$SELINUX"; then
 120                 return
 121         fi
 122
 123         if ! grep -Fq selinuxfs /proc/filesystems; then
 124                 # no support in kernel, no chance
 125                 SELINUX=no
 126         elif ! is_fsmounted selinuxfs /selinux; then
 127                 mount -n -o gid=17 -t selinuxfs selinuxfs /selinux
 128         fi
 129
 130         # Check SELinux status
 131         local selinuxfs=$(awk '/ selinuxfs / { print $2 }' /proc/mounts 2> /dev/null)
 132         SELINUX=
 133         if [ -n "$selinuxfs" ] && [ "$(cat /proc/self/attr/current)" != "kernel" ]; then
 134                 if [ -r $selinuxfs/enforce ] ; then
 135                         SELINUX=$(cat $selinuxfs/enforce)
 136                 else
 137                         # assume enforcing if you can't read it
 138                         SELINUX=1
 139                 fi
 140         fi
 141 }
 142
 143 disable_selinux() {
 144         local _d selinuxfs _t _r
 145
 146         while read _d selinuxfs _t _r; do
 147                 [ "$_t" = "selinuxfs" ] && break
 148         done </proc/mounts
 149         echo "*** Warning -- SELinux is active"
 150         echo "*** Disabling security enforcement for system recovery."
 151         echo "*** Run 'setenforce 1' to reenable."
 152         echo "0" > $selinuxfs/enforce
 153 }
 154
 155 relabel_selinux() {
 156         local _d selinuxfs _t _r
 157
 158         while read _d selinuxfs _t _r; do
 159                 [ "$_t" = "selinuxfs" ] && break
 160         done </proc/mounts
 161         echo "
 162          *** Warning -- SELinux relabel is required. ***
 163          *** Disabling security enforcement.         ***
 164          *** Relabeling could take a very long time, ***
 165          *** depending on file system size.          ***
 166          "
 167         echo "0" > $selinuxfs/enforce
 168         /sbin/fixfiles -F relabel > /dev/null 2>&1
 169         rm -f /.autorelabel
 170         echo "*** Enabling security enforcement.         ***"
 171         echo $SELINUX > $selinuxfs/enforce
 172 }
 173
 174 # Enable automatic swapon of all partitions with the proper swap magic.
 175 # This allows setting up swap without editing /etc/fstab.
 176 enable_autoswap() {
 177         local swappartitions=$(blkid -t TYPE=swap -o device)
 178         if [ -z "$swappartitions" ]; then
 179                 return
 180         fi
 181
 182         local curswap=$(awk '/^\/dev/ { print $1 }' /proc/swaps | while read x; do echo -n " "; get_numeric_dev $x; echo -n " "; done)
 183
 184         local partition
 185         for partition in $swappartitions; do
 186                 [ ! -e $partition ] && continue
 187                 majmin=$(get_numeric_dev $partition)
 188                 if ! strstr "$curswap" " $majmin "; then
 189                         run_cmd "$(nls 'Enabling local swap partitions: %s' $partition)" swapon $partition
 190                 fi
 191         done
 192 }
 193
 194
 195 enable_swap() {
 196         run_cmd "Activating swap" swapon -a "$@"
 197         is_yes "$AUTOSWAP" && enable_autoswap
 198 }
 199
 200 # Remove duplicate entries from mtab (for vserver guest use only)
 201 clean_vserver_mtab() {
 202         > /etc/mtab.clean
 203         while read device mountpoint line; do
 204                 grep -qs "$mountpoint" /etc/mtab.clean || \
 205                         echo "$device $mountpoint $line" >> /etc/mtab.clean
 206         done < /etc/mtab
 207         cat /etc/mtab.clean > /etc/mtab
 208         rm -f /etc/mtab.clean
 209 }
 210
 211 # Loads modules from /etc/modules, /etc/modules.X.Y and /etc/modules.X.Y.Z
 212 load_kernel_modules() {
 213         local modules_file=$1
 214         local _x _y _z v v1 old_IFS kernel kerneleq
 215         {
 216                 read _x _y v _z
 217                 old_IFS=$IFS
 218                 # strip _* or -* from versions like: "2.6.25_vanilla-1", "2.6.25-1"
 219                 IFS='_-'
 220                 set -- $v
 221                 v1=${1}
 222                 IFS='.'
 223                 set -- $v1
 224                 IFS=$old_IFS
 225
 226                 kernel="$1.$2"
 227                 kerneleq="$1.$2.$3"
 228         } < /proc/version
 229
 230         local module args
 231         # Loop over every line in modules file
 232         ( \
 233                 grep -hvE '^(#|[[:blank:]]*$)' /etc/$modules_file /etc/$modules_file.$kernel /etc/$modules_file.$kerneleq 2>/dev/null
 234                 echo '' # make sure there is a LF at the end
 235         ) | while read module args; do
 236                 [ -z "$module" ] && continue
 237                 # strip comments
 238                 args=${args%%#*}
 239                 show "Loading %s kernel module(s)" "$module"
 240                 busy
 241                 modprobe -s $module -- $args && ok || fail
 242         done
 243 }
 244
 245 # launch repair shell
 246 # which after exiting will reboot
 247 repair_shell() {
 248         local reason="$2"
 249
 250         # don't use '\n' in nls macro !
 251         echo
 252         echo
 253         echo "$reason"
 254         nls "*** Dropping you to a shell; the system will reboot"
 255         nls "*** when you leave the shell."
 256         echo
 257
 258         [ "$SELINUX" = "1" ] && disable_selinux
 259         if ! is_no "$RUN_SULOGIN_ON_ERR"; then
 260                 /sbin/sulogin
 261         else
 262                 /bin/sh
 263         fi
 264
 265         run_cmd "Unmounting file systems" umount -a
 266         run_cmd "Remounting root filesystem in ro mode" mount -n -o remount,ro /
 267         run_cmd "Automatic reboot in progress" reboot
 268 }
 269
 270 check_root_fs() {
 271         show "Checking root filesystem"; started
 272         initlog -c "fsck -C -T -a $fsckoptions /"
 273         rc=$?
 274
 275         # A return of 4 or higher means there were serious problems.
 276         if [ $rc -gt 3 ]; then
 277                 [ -e /proc/splash ] && echo "verbose" > /proc/splash
 278
 279                 PS1="$(nls '(Repair filesystem)# ')"; export PS1
 280                 repair_shell "$(nls '*** An error occurred during the file system check.')"
 281
 282         # A return of 2 or 3 means that filesystem was repaired but we need
 283         # to reboot.
 284         elif [ "$rc" = "2" -o "$rc" = "3" ]; then
 285                 [ -e /proc/splash ] && echo "verbose" > /proc/splash
 286                 echo
 287                 nls "*** Filesystem was repaired but system needs to be"
 288                 nls "*** rebooted before mounting it."
 289                 nls "*** REBOOTING ***"
 290                 echo
 291
 292                 run_cmd "Unmounting file systems" umount -a
 293                 mount -n -o remount,ro /
 294                 run_cmd "Automatic reboot in progress" reboot
 295         elif [ "$rc" = "1" ]; then
 296                 _RUN_QUOTACHECK=1
 297         fi
 298 }
 299
 300 # Init software RAID arrays
 301 init_mdadm() {
 302         local output
 303
 304         if [ ! -x /sbin/mdadm ]; then
 305                 return
 306         fi
 307
 308         modprobe -s md
 309         if [ ! -f /proc/mdstat ]; then
 310                 return
 311         fi
 312
 313         show "Starting up RAID devices"; busy
 314         output=$(/sbin/mdadm --assemble --scan 2>&1)
 315         ok
 316
 317         if [ -n "$output" ]; then
 318                 echo "$output"
 319         fi
 320 }
 321
 322 # Init LVM
 323 init_lvm() {
 324         if [ ! -x /sbin/vgscan -o ! -x /sbin/vgchange ] && ! is_yes "$EVMS_LVM"; then
 325                 return
 326         fi
 327
 328         if is_no "$LVM2"; then
 329                 lvmversion=$(LC_ALL=C /sbin/vgchange --version 2>/dev/null | awk '/LVM version:/{if ($3 >= 2) print "2"}')
 330         else
 331                 lvmversion=2
 332         fi
 333
 334         if [ "$lvmversion" = "1" ] ; then
 335                 modprobe -s lvm-mod
 336                 lvmignorelocking=""
 337                 lvmsysinit=""
 338         elif [ "$lvmversion" = "2" ] ; then
 339                 modprobe -s dm-mod
 340                 lvmignorelocking="--ignorelockingfailure"
 341                 lvmsysinit="--sysinit"
 342         else
 343                 modprobe -s lvm-mod
 344                 # device mapper (2.5+ and patched 2.4)
 345                 modprobe -s dm-mod
 346                 lvmignorelocking=""
 347                 lvmsysinit=""
 348         fi
 349
 350         run_cmd "Scanning for LVM volume groups" /sbin/vgscan $lvmignorelocking
 351         run_cmd "Activating LVM volume groups" /sbin/vgchange -a y $lvmsysinit
 352
 353         if [ "$lvmversion" = "2" ]; then
 354                 # silently refresh LV /dev nodes (just in case)
 355                 /sbin/vgmknodes $lvmignorelocking 1>/dev/null 2>&1
 356                 # display VG statistics
 357                 /sbin/vgdisplay -s $lvmignorelocking
 358         fi
 359 }
 360
 361 # boot logging to /var/log/boot.log. install showconsole package to get it.
 362 if ! is_no "$RC_BOOTLOG" && [ -x /sbin/blogd ]; then
 363         RC_BOOTLOG=1
 364 else
 365         RC_BOOTLOG=
 366 fi
 367
 368 if ! is_yes "$VSERVER" && [[ "$container" != lxc* ]]; then
 369         # we need /proc mounted before everything
 370         is_fsmounted proc /proc || mount -n /proc || mount -n -o gid=17,hidepid=2 -t proc /proc /proc
 371
 372         parse_cmdline
 373
 374         if [ -d /run ]; then
 375                 is_fsmounted tmpfs /run || mount -n -t tmpfs run /run -o mode=0755,noexec,nosuid,nodev
 376         fi
 377
 378         # Early sysctls
 379         apply_sysctl
 380
 381         # sysfs is also needed before any other things (under kernel > 2.5)
 382         if ! is_fsmounted sysfs /sys; then
 383                 grep -Fq sysfs /proc/filesystems && mount -n -o gid=17 -t sysfs sysfs /sys
 384         fi
 385         if grep -Fq securityfs /proc/filesystems; then
 386                 mount -n -t securityfs securityfs /sys/kernel/security
 387         fi
 388         if [ -d /sys/firmware/efi ] && ! is_fsmounted efivarfs /sys/firmware/efi/efivars; then
 389                 mount -n -o rw -t efivarfs efivarfs /sys/firmware/efi/efivars
 390         fi
 391
 392         init_selinux
 393
 394         # TLD Linux LiveCD support
 395         if [ -x /etc/rc.d/rc.live ]; then
 396                 /etc/rc.d/rc.live
 397         fi
 398
 399         # Choose Hardware profile
 400         if ! is_no "$HWPROFILES" && [ -f /etc/sysconfig/hwprof ]; then
 401                 . /etc/sysconfig/hwprof
 402                 if is_yes "${HWPROFILES}" && [ -x /sbin/hwprofile -a -d /etc/sysconfig/hwprofiles/data ]; then
 403                         mount -n / -o rw,remount
 404                         /sbin/hwprofile -qf
 405                         mount -n / -o ro,remount
 406                 fi
 407         fi
 408
 409         # Disable splash when requested
 410         is_no "$BOOT_SPLASH" && [ -e /proc/splash ] && echo "0" > /proc/splash
 411
 412         if [ -x /sbin/restorecon ] && is_fsmounted tmpfs /dev; then
 413                 /sbin/restorecon -R /dev 2>/dev/null
 414         fi
 415
 416         [ -z "${CONSOLETYPE}" ] && CONSOLETYPE="$(/sbin/consoletype)"
 417
 418         if [ "$CONSOLETYPE" = "vt" -a -x /sbin/setsysfont ]; then
 419                 /sbin/setsysfont
 420         fi
 421 fi
 422
 423
 424 # Print welcome message
 425 nls "\t\t\t%sPowered by %sTLD Linux%s" "$(termput setaf $CPOWEREDBY)" "$(termput setaf $CTLD)" "$(termput op)"
 426 if ! is_no "$RC_PROMPT"; then
 427         nls -n "\t\t  Press %sI%s to enter interactive startup" "$(termput setaf $CI)" "$(termput op)"
 428         echo
 429 fi
 430
 431 # Set the hostname
 432 if [ -z "${HOSTNAME}" ]; then
 433         show "$(nls 'Host:') $(hostname)"; ok
 434 else
 435         run_cmd "$(nls 'Host:') ${HOSTNAME}" hostname ${HOSTNAME}
 436 fi
 437
 438 # Set the NIS domain name
 439 if [ -n "$NISDOMAIN" ]; then
 440         run_cmd "$(nls 'NIS Domain:') ${NISDOMAIN}" domainname $NISDOMAIN
 441 else
 442         domainname ""
 443 fi
 444
 445 if ! is_yes "$VSERVER" && [[ "$container" != lxc* ]]; then
 446         # Set console loglevel
 447         if [ -n "$CONSOLE_LOGLEVEL" ]; then
 448                 dmesg -n $CONSOLE_LOGLEVEL
 449         fi
 450
 451         if ! is_no "$START_UDEV" && [ -x /sbin/start_udev ] && [[ "$container" != lxc* ]]; then
 452                 is_fsmounted devtmpfs /dev || mount -n -t devtmpfs devtmpfs /dev
 453                 load_kernel_modules modules.preudev
 454                 /sbin/start_udev
 455         elif [ -x /lib/firmware/firmware-loader.sh ]; then
 456                 /sbin/sysctl -q -e -w kernel.hotplug=/lib/firmware/firmware-loader.sh
 457         fi
 458
 459         # Unmount the initrd, if necessary
 460         if grep -q /initrd /proc/mounts 2>/dev/null && ! grep -q /initrd/loopfs /proc/mounts 2>/dev/null; then
 461                 umount /initrd/dev 2>/dev/null
 462                 umount /initrd
 463                 /sbin/blockdev --flushbufs /dev/ram0 >/dev/null 2>&1
 464         fi
 465
 466         # Start logging console output since we have all /dev stuff setup
 467         if [ "$RC_BOOTLOG" ]; then
 468                 /sbin/blogd
 469         fi
 470
 471         # Configure Linux kernel (initial configuration, some required modules still may be missing).
 472         apply_sysctl
 473
 474         # Check if timezone definition is available
 475         if [ -e /etc/localtime ] && [ -e /dev/rtc -o -e /dev/rtc0 ] ; then
 476                 if run_cmd "$(nls 'Setting clock')" hwclock --hctosys; then
 477                         show "$(nls 'Today`s date:') $(LC_CTYPE=C date)"; ok
 478                 fi
 479         else
 480                 TIME_SETUP_DELAYED=yes
 481         fi
 482
 483         delay_cryptsetup=0
 484         if [ -f /etc/crypttab ] && ! is_empty_file /etc/crypttab; then
 485                 # XXX might need modules dep
 486                 # Device mapper & related initialization
 487                 if ! grep -qF device-mapper /proc/devices; then
 488                         modprobe -s dm-mod
 489                 fi
 490
 491                 . /etc/rc.d/init.d/cryptsetup
 492                 show "Starting disk encryption"
 493                 init_crypto 0
 494                 delay_cryptsetup=$?
 495                 [ $delay_cryptsetup = 0 ] && ok || fail
 496         fi
 497
 498         # Start up swapping
 499         enable_swap -e
 500
 501         # Initialize USB controllers
 502         usb=0
 503         if [ -z "$nousb" ] && ! is_fsmounted usbfs /proc/bus/usb; then
 504                 aliases=$(modprobe_c | awk '/^alias[[:space:]]+usb[-_]controller[[:space:]]+/{ print $3 }')
 505                 if [ -n "$aliases" -a "$aliases" != "off" ] ; then
 506                         modprobe -s usbcore
 507                         for alias in $aliases ; do
 508                                 [ "$alias" = "off" ] && continue
 509                                 run_cmd "$(nls 'Initializing USB controller') ($alias)" modprobe -s $alias
 510                         done
 511                         [ $? -eq 0 -a -n "$aliases" ] && usb=1
 512                 fi
 513                 if grep -iq "usb" /proc/devices 2>/dev/null ; then
 514                         usb=1
 515                 fi
 516         fi
 517
 518         if [ "$usb" = "1" -a -d /proc/bus/usb ] && ! is_fsmounted usbfs /proc/bus/usb; then
 519                 run_cmd "Mounting USB filesystem" mount -n -t usbfs -o devgid=78,devmode=664 usbfs /proc/bus/usb
 520         fi
 521
 522         needusbstorage=
 523         if [ "$usb" = "1" ]; then
 524                 needusbstorage=$(cat /proc/bus/usb/devices 2>/dev/null | grep -e "^I.*Cls=08" 2>/dev/null)
 525                 if [ "$(kernelverser)" -lt "002006" ]; then
 526                         grep -Fq 'hid' /proc/bus/usb/drivers 2>/dev/null || run_cmd "Initializing USB HID interface" modprobe -s hid
 527                         mouseoutput=$(cat /proc/bus/usb/devices 2>/dev/null|grep -E "^I.*Cls=03.*Prot=02" 2>/dev/null)
 528                         kbdoutput=$(cat /proc/bus/usb/devices 2>/dev/null|grep -E "^I.*Cls=03.*Prot=01" 2>/dev/null)
 529                         if [ -n "$kbdoutput" ]; then
 530                                 run_cmd "Initializing USB keyboard" modprobe -s keybdev
 531                         fi
 532                         if [ -n "$mouseoutput" ]; then
 533                                 run_cmd "Initializing USB mouse" modprobe -s mousedev
 534                         fi
 535                 fi
 536         fi
 537
 538         # Setup hdparm thing (if exists and is needed)
 539         if [ -z "$nohdparm" ]; then
 540                 [ -x /etc/rc.d/rc.hdparm ] && /etc/rc.d/rc.hdparm
 541         fi
 542
 543         if [ -z "$fastboot" ] && [ -f /fastboot ]; then
 544                 fastboot=1
 545         fi
 546
 547         if [ -f /fsckoptions ]; then
 548                 fsckoptions=$(cat /fsckoptions)
 549         else
 550                 fsckoptions=''
 551         fi
 552
 553         if [ -f /forcefsck ]; then
 554                 fsckoptions="-f $fsckoptions"
 555         else
 556                 # Obey the fs_passno setting for / (see fstab(5))
 557                 # - find the / entry
 558                 # - make sure we have at least 6 fields
 559                 _ROOTFS_PASSNO=$(awk '($1 !~ /^#/ && $2 == "/" && NF >= 6) { print $6}' /etc/fstab)
 560         fi
 561
 562         _RUN_QUOTACHECK=0
 563         _ROOTFS_DEVICE=$(awk '($1 !~ /^#/ && $2 == "/" && NF >= 6) { print $1}' /etc/fstab)
 564         _ROOTFS_TYPE=$(awk '$2 == "/" && $3 != "rootfs" { print $3 }' /proc/mounts 2>/dev/null)
 565
 566         if [ -z "$fastboot" -a "$_ROOTFS_TYPE" != "aufs" -a "$_ROOTFS_TYPE" != "nfs" -a "$_ROOTFS_TYPE" != "romfs" -a "$_ROOTFS_TYPE" != "tmpfs" -a "$_ROOTFS_TYPE" != "squashfs" -a "$_ROOTFS_PASSNO" != 0 -a -e $_ROOTFS_DEVICE ] && [[ "$container" != lxc* ]]; then
 567                 check_root_fs
 568         fi
 569
 570         # set up pnp and kernel pnp
 571         if is_yes "$RUN_USERPNP" || is_yes "$RUN_KERNELPNP"; then
 572                 if [ -z "$nopnp" ] && is_yes "$RUN_USERPNP" && [ -x /sbin/isapnp -a -f /etc/isapnp/isapnp.conf ]; then
 573                         run_cmd "Setting up ISA PNP devices (userspace pnp)" /sbin/isapnp /etc/isapnp/isapnp.conf
 574                 fi
 575                 if [ -z "$nopnp" ] && is_yes "$RUN_KERNELPNP"; then
 576                         modprobe -s isa-pnp
 577                         if [ -e /proc/isapnp -a -f /etc/isapnp/isapnp-kernel.conf ]; then
 578                                 show "Setting up ISA PNP devices (kernelspace pnp)"; busy
 579                                 grep -v "^#" /etc/isapnp/isapnp-kernel.conf 2>/dev/null >/proc/isapnp && (deltext; ok) || (deltext; fail)
 580                         fi
 581                 fi
 582         fi
 583
 584         _ROOTFS_RO=$(awk '($1 !~ /^#/ && $2 == "/" && ($4 == "ro" || $4 ~ /,ro$/ || $4 ~ /^ro,/ || $4 ~ /,ro,/ ) && NF >= 6) { print "ro" }' /etc/fstab)
 585         # Remount the root filesystem read-write
 586         if [ -z "$_ROOTFS_RO" ]; then
 587                 run_cmd "Remounting root filesystem in rw mode" mount -n -o remount,rw /
 588         fi
 589
 590         # Update quotas if fsck was run on /
 591         if [ "$_RUN_QUOTACHECK" = "1" -a -x /sbin/quotacheck ]; then
 592                 run_cmd "Checking root filesystem quotas" /sbin/quotacheck -vnug /
 593         fi
 594
 595         # Clean up SELinux labels
 596         if is_yes "$SELINUX"; then
 597                 for file in /etc/mtab /etc/cryptomtab /etc/ld.so.cache; do
 598                         [ -r $file ] && restorecon $file >/dev/null 2>&1
 599                 done
 600         fi
 601
 602         if [ "$delay_cryptsetup" != 0 ]; then
 603                 show "Starting disk encryption using the RNG"
 604                 init_crypto 1
 605                 delay_cryptsetup=$?
 606                 [ $delay_cryptsetup = 0 ] && ok || fail
 607         fi
 608 else
 609         # Start logging console output since we have all /dev stuff setup
 610         if [ "$RC_BOOTLOG" ]; then
 611                 /sbin/blogd -q
 612         fi
 613 fi
 614
 615 # Remove stale backups
 616 rm -f /etc/mtab~ /etc/mtab~~ /etc/cryptomtab~ /etc/cryptomtab~~ >/dev/null 2>&1
 617
 618 # Remove /etc/nologin when starting system
 619 [ -f /etc/nologin.boot ] && rm -f /etc/nologin /etc/nologin.boot
 620
 621 if ! is_no "$DELAY_LOGIN" && [ ! -f /etc/nologin ]; then
 622         show "Enabling Delay Login"; busy
 623         echo > /etc/nologin
 624         nls "System bootup in progress - please wait" >> /etc/nologin
 625         echo >> /etc/nologin
 626         chmod 644 /etc/nologin
 627         cp -fp /etc/nologin /etc/nologin.boot
 628         ok
 629 fi
 630
 631 # The root filesystem is now read-write, so we can now log via
 632 # syslog() directly...
 633 if [ -n "$IN_INITLOG" ]; then
 634         IN_INITLOG=""
 635 fi
 636
 637 if ! is_yes "$VSERVER" && [[ "$container" != lxc* ]]; then
 638         # Clear mtab
 639         > /etc/mtab
 640         [ -f /etc/cryptomtab ] && > /etc/cryptomtab
 641
 642         # Enter root, /proc, /sys and other into mtab.
 643         mount -f / 2> /dev/null
 644         mount -f /proc 2> /dev/null
 645         if is_fsmounted devtmpfs /dev; then
 646                 mount -f -t devtmpfs devtmpfs /dev 2> /dev/null
 647         fi
 648         if is_fsmounted tmpfs /run; then
 649                 mount -f -t tmpfs run /run -o mode=0755,noexec,nosuid,nodev 2> /dev/null
 650         fi
 651
 652         if is_fsmounted usbfs /proc/bus/usb; then
 653                 mount -f -t usbfs -o devgid=78,devmode=664 usbfs /proc/bus/usb 2> /dev/null
 654         fi
 655
 656         if is_fsmounted sysfs /sys; then
 657                 mount -f -t sysfs sysfs /sys 2> /dev/null
 658                 if is_fsmounted securityfs /sys/kernel/security ; then
 659                         mount -f -t securityfs securityfs /sys/kernel/security 2> /dev/null
 660                 fi
 661                 if [ -d /sys/firmware/efi ] && is_fsmounted efivarfs /sys/firmware/efi/efivars ; then
 662                         mount -f -t efivarfs efivarfs /sys/firmware/efi/efivars 2> /dev/null
 663                 fi
 664         fi
 665
 666         if is_fsmounted selinuxfs /selinux; then
 667                 mount -f -t selinuxfs selinuxfs /selinux 2> /dev/null
 668         fi
 669
 670         if [ ! -f /proc/modules ]; then
 671                 USEMODULES=
 672         elif [ -z "$nomodules" ]; then
 673                 USEMODULES=y
 674         else
 675                 USEMODULES=
 676         fi
 677
 678         uname_r=$(uname -r)
 679         # Adjust symlinks as necessary in /boot to keep system services from
 680         # spewing messages about mismatched System maps and so on.
 681         if ! is_no "$SET_SLINKS"; then
 682                 if [ -L /boot/System.map -a -r /boot/System.map-$uname_r ] ; then
 683                         ln -s -f System.map-$uname_r /boot/System.map
 684                 fi
 685                 if [ ! -e /boot/System.map -a -r /boot/System.map-$uname_r ] ; then
 686                         ln -s -f System.map-$uname_r /boot/System.map
 687                 fi
 688         fi
 689
 690         # Run depmod if RUN_DEPMOD != "no" and:
 691         # a) user requested or RUN_DEPMOD="";
 692         # b) modules.dep is missing
 693         if ! is_no "$RUN_DEPMOD" && [ -n "$USEMODULES" ]; then
 694                 if is_yes "$RUN_DEPMOD" || [ -z "$RUN_DEPMOD" ]; then
 695                         run_cmd "Finding module dependencies" depmod -a
 696                 elif [ "$RUN_DEPMOD" = "ifmissing" ] && [ ! -f /lib/modules/$uname_r/modules.dep ]; then
 697                         run_cmd "Finding module dependencies" depmod -A
 698                 fi
 699         fi
 700         unset uname_r
 701
 702         if [ -f /proc/sys/kernel/modprobe ]; then
 703                 if [ -n "$USEMODULES" ]; then
 704                         sysctl -q -w kernel.modprobe="/sbin/modprobe"
 705                 else
 706                         # We used to set this to NULL, but that causes
 707                         # 'failed to exec' messages"
 708                         sysctl -q -w kernel.modprobe="/bin/true"
 709                 fi
 710         fi
 711
 712         # Load usb storage here, to match most other things
 713         if [ -n "$needusbstorage" ]; then
 714                 modprobe -s usb-storage
 715         fi
 716
 717         # Load firewire devices
 718         if [ -z "$nofirewire" ]; then
 719                 aliases=$(modprobe_c | awk '/^alias[[:space:]]+ieee1394[-_]controller[[:space:]]+/{ print $3 }')
 720                 if [ -n "$aliases" -a "$aliases" != "off" ] ; then
 721                         for alias in $aliases ; do
 722                                 [ "$alias" = "off" ] && continue
 723                                 run_cmd "$(nls 'Initializing firewire controller') ($alias)" modprobe $alias
 724                         done
 725                         grep -E "SBP2" /proc/bus/ieee1394/devices 2>/dev/null && modprobe -s sbp2
 726                 fi
 727         fi
 728
 729         # Load sound modules if they need persistent DMA buffers
 730         if modprobe_c | grep -q "^options sound dmabuf=1"; then
 731                 RETURN=0
 732                 alias=$(modprobe_c | awk '/^alias[[:space:]]+sound[[:space:]]+/{ print $3 }')
 733                 if [ -n "$alias" -a "$alias" != "off" ] ; then
 734                         run_cmd "$(nls 'Loading sound module') ($alias)" modprobe -s $alias
 735                         RETURN=$?
 736                 fi
 737                 alias=$(modprobe_c | awk '/^alias[[:space:]]+sound[-_]slot[-_]0[[:space:]]+/ { print $3 }')
 738                 if [ -n "$alias" -a "$alias" != "off" ] ; then
 739                         run_cmd "$(nls 'Loading sound module') ($alias)" modprobe -s $alias
 740                         RETURN=$?
 741                 fi
 742         fi
 743
 744         # Load modules
 745         load_kernel_modules modules
 746         for f in /etc/modules-load.d/*.conf; do
 747                 # already loaded by implicit "modules" load
 748                 [ "${f##*/}" = "modules.conf" ] && continue
 749
 750                 [ -r $f ] || continue
 751                 load_kernel_modules ${f##/etc/}
 752         done
 753
 754         if ! is_no "$DM_MULTIPATH" && [ -x /sbin/multipath ]; then
 755                 modprobe -s dm-mod
 756                 modprobe -s dm-multipath
 757                 # make nodes that were discarded due (possible) new /dev mount
 758                 /sbin/dmsetup mknodes
 759                 run_cmd "Activating dm-multipath" /sbin/multipath -v 0
 760                 /sbin/dmsetup ls --target multipath --exec '/sbin/kpartx -a -p p'
 761         fi
 762
 763         if ! is_no "$DMRAID" && [ -x /sbin/dmraid ]; then
 764                 run_cmd "Activating ATARAID devices" /sbin/dmraid -ay
 765         fi
 766
 767         # Find and activate volume groups:
 768         # EVMS
 769         if is_yes "$EVMS_LVM" && [ -x /sbin/evms_activate ]; then
 770                 if [ "$(kernelverser)" -lt "002006" ]; then
 771                         # Linux 2.4 core modules
 772                         modprobe -s evms
 773                         modprobe -s evms_passthru
 774                         modprobe -s ldev_mgr
 775                         modprobe -s dos_part
 776                 else
 777                         # Linux 2.6 core module
 778                         modprobe -s evmscore
 779                 fi
 780
 781                 is_yes "$EVMS_GUID_PTABLE" && modprobe -s gpt_part
 782                 is_yes "$EVMS_LVM" && modprobe -s lvm_vge
 783                 is_yes "$EVMS_AIX" && modprobe -s AIXlvm_vge
 784                 is_yes "$EVMS_OS2" && modprobe -s os2lvm_vge
 785                 run_cmd "Discovering EVMS volumes" /sbin/evms_activate
 786                 if is_yes "$EVMS_LVM" && is_yes "$EVMS_LVM_COMPAT_NODES" ; then
 787                         # Link nodes for compatibility with LVM
 788                         if [ "$(echo /dev/evms/lvm/*)" != '/dev/evms/lvm/*' ] ; then
 789                                 ln -s /dev/evms/lvm/* /dev
 790                         fi
 791                 fi
 792         fi
 793
 794         if ! is_no "$MDADM"; then
 795                 init_mdadm
 796         fi
 797
 798         if ! is_no "$LVM2"; then
 799                 init_lvm
 800         fi
 801
 802         if [ "$delay_cryptsetup" != 0 ]; then
 803                 show "Starting disk encryption"
 804                 init_crypto 1
 805                 delay_cryptsetup=$?
 806                 [ $delay_cryptsetup = 0 ] && ok || fail
 807         fi
 808
 809         _RUN_QUOTACHECK=0
 810         # Check filesystems
 811         if [ -z "$fastboot" ] && [ -z "$nofsck" ]; then
 812                 rc_splash "fsck start"
 813                 show "Checking filesystems"; started
 814                 initlog -c "fsck -C -T -R -A -a -P $fsckoptions"
 815
 816                 rc=$?
 817
 818                 # A return of 2 or higher means there were serious problems
 819                 if [ $rc -gt 1 ]; then
 820                         [ -e /proc/splash ] && echo "verbose" > /proc/splash
 821
 822                         PS1="$(nls '(Repair filesystem)# ')"; export PS1
 823                         repair_shell "$(nls '*** An error occurred during the file system check.')"
 824
 825                 elif [ "$rc" = "1" -a -x /sbin/quotacheck ]; then
 826                         _RUN_QUOTACHECK=1
 827                 fi
 828                 rc_splash "fsck stop"
 829         fi
 830
 831         # Mount all other filesystems (except for NFS and /proc, which is already
 832         # mounted). Contrary to standard usage,
 833         # filesystems are NOT unmounted in single user mode.
 834         run_cmd "Mounting local filesystems" mount -a -t nonfs,nfs4,smbfs,ncpfs,proc,cifs -O no_netdev
 835
 836         # now we have /usr mounted, recheck if we have gettext and tput available.
 837         if is_no "$TPUT"; then
 838                 GETTEXT=
 839                 TPUT=
 840                 rc_gettext_init
 841         fi
 842
 843         # Now do some workaround - encrypted filesystems couldn't have been fsck-ed
 844         # before mount - that's where the password is entered.
 845         # mount is buggy - when remounting loopback filesystem, loop=XXX
 846         # option is removed from /etc/mtab
 847         if [ -z "$fastboot" ] && grep "^[^#].*encryption=" /etc/fstab 2>/dev/null | grep -v -q "noauto" 2>/dev/null; then
 848                 show "Checking encrypted filesystems"; started
 849                 LOOPLIST="$(LC_ALL=C awk '
 850                 FILENAME=="/proc/mounts" {
 851                         TAB[$2]=$1;
 852                 }
 853                 FILENAME=="/etc/fstab" && /encryption=/ && ! /noauto/ && /[^a-zA-Z_]ro[^a-zA-Z_]/ {
 854                         if ($2 in TAB){print TAB[$2];}
 855                 }
 856                 FILENAME=="/etc/fstab" && /encryption=/ && ! /noauto/ && ! /[^a-zA-Z_]ro[^a-zA-Z_]/ {
 857                         if ($2 in TAB){print TAB[$2];}
 858                         sub("loop(=[^,]*)?","loop=" TAB[$2] ",ro",$4);
 859                         cmd="mount " $2 " -o remount," $4;
 860                         system(cmd);
 861                 }
 862                 ' /proc/mounts /etc/fstab)"
 863                 initlog -c "fsck -T -C -a $fsckoptions $LOOPLIST"
 864                 rc=$?
 865
 866                 # A return of 2 or higher means there were serious problems.
 867                 if [ $rc -gt 1 ]; then
 868                         [ -e /proc/splash ] && echo "verbose" > /proc/splash
 869
 870                         PS1="$(nls '(Repair filesystem)# ')"; export PS1
 871                         repair_shell "$(nls '*** An error occurred during the file system check.')"
 872
 873                 elif [ "$rc" = "1" -a -x /sbin/quotacheck ]; then
 874                         _RUN_QUOTACHECK=1
 875                 fi
 876
 877                 show "Remounting encrypted filesystems back in rw mode"; busy
 878                 LC_ALL=C awk '
 879                 FILENAME=="/proc/mounts" {
 880                         TAB[$2]=$1;
 881                 }
 882                 FILENAME=="/etc/fstab" && /encryption=/ && ! /noauto/ && ! /[^a-zA-Z_]ro[^a-zA-Z_]/ {
 883                         sub("loop(=[^,]*)?","loop=" TAB[$2] ",rw",$4);
 884                         cmd="mount " $2 " -o remount," $4;
 885                         system(cmd);
 886                 }
 887                 ' /proc/mounts /etc/fstab
 888                 ok
 889         fi
 890
 891         # /var/log should be writable now, so start saving the boot output
 892         if [ "$RC_BOOTLOG" ]; then
 893                 echo > /var/log/boot.log
 894                 killall -IO blogd
 895         fi
 896
 897         if [ "$_RUN_QUOTACHECK" = "1" -a -x /sbin/quotacheck ]; then
 898                 run_cmd "Checking filesystem quotas" /sbin/quotacheck -vnugRa
 899         fi
 900
 901         # Turn on quota
 902         if [ -x /sbin/quotaon ]; then
 903                 run_cmd "Turning on quotas for local filesystems" /sbin/quotaon -aug
 904         fi
 905
 906         # Turn on process accounting
 907         if [ -x /etc/rc.d/rc.acct ]; then
 908                 /etc/rc.d/rc.acct start
 909         fi
 910
 911         # Set the clock if timezone definition wasn't available (eg. /usr not mounted)
 912         if is_yes "$TIME_SETUP_DELAYED" && [ -e /dev/rtc -o -e /dev/rtc0 ]; then
 913                 if run_cmd "$(nls 'Setting clock')" hwclock --hctosys; then
 914                         show "$(nls 'Today`s date:') $(LC_CTYPE=C date)"; ok
 915                 fi
 916         fi
 917
 918         # Initialize the serial ports
 919         if [ -f /etc/rc.d/rc.serial ]; then
 920                 . /etc/rc.d/rc.serial
 921         fi
 922
 923         if [ -n "$PANIC_REBOOT_TIME" ] && [ "$PANIC_REBOOT_TIME" -gt "0" ] && [ -f /proc/sys/kernel/panic ]; then
 924                 show 'Setting %s seconds for kernel reboot after panic' "$PANIC_REBOOT_TIME"; busy
 925                 # DEPRECATED: use /etc/sysctl.conf or kernel commandline instead
 926                 if sysctl -q -w kernel.panic=$PANIC_REBOOT_TIME; then ok; else fail; fi
 927         fi
 928
 929         # ... and here finish configuring parameters
 930         apply_sysctl
 931 else
 932         # /var/log should be writable now, so start saving the boot output
 933         if [ "$RC_BOOTLOG" ]; then
 934                 echo > /var/log/boot.log
 935                 killall -IO blogd
 936         fi
 937
 938         clean_vserver_mtab
 939 fi
 940
 941 is_yes "$SELINUX" && [ -f /.autorelabel ] && relabel_selinux
 942
 943 # Clean up /.
 944 rm -f /fastboot /fsckoptions /forcefsck /halt /poweroff >/dev/null 2>&1
 945
 946 # Clean up /var
 947 # /usr could be still not mounted if it is on NFS.
 948 for afile in /var/lock/* /var/run/*; do
 949         bafile=${afile##*/}
 950         if [ -d "$afile" ]; then
 951                 case $bafile in
 952                 news|sudo|mon|cvs)
 953                         ;;
 954                 *)
 955                         echo $afile/* | xargs rm -rf
 956                         ;;
 957                 esac
 958         else
 959                 [ "$bafile" != "hwprofile" -a "$bafile" != "random-seed" ] && rm -f $afile 2> /dev/null
 960         fi
 961 done
 962
 963 # Delete stale files
 964 rm -f /var/lib/rpm/__db* /var/spool/postoffice/.pid.* /tmp/.X*-lock \
 965         /tmp/.lock.* /tmp/.gdm_socket /tmp/.s.PGSQL.*
 966 rm -rf /tmp/.X*-unix /tmp/.ICE-unix /tmp/.font-unix /tmp/hsperfdata_* \
 967         /tmp/kde-* /tmp/ksocket-* /tmp/mc-* /tmp/mcop-* /tmp/orbit-* \
 968         /tmp/scrollkeeper-* /tmp/ssh-*
 969
 970 {
 971 # Clean up utmp/wtmp
 972 rm -f /var/run/utmpx
 973 > /var/run/utmp
 974 if [ -e /var/log/wtmpx ]; then
 975         if [ -e /var/log/wtmp ]; then
 976                 rm -f /var/log/wtmpx
 977         else
 978                 mv /var/log/wtmpx /var/log/wtmp
 979         fi
 980 fi
 981 touch /var/log/wtmp
 982 chown root:utmp /var/run/utmp /var/log/wtmp
 983 chmod 0664 /var/run/utmp /var/log/wtmp
 984
 985 # Clean /tmp
 986 if is_yes "$CLEAN_TMP" && ! is_fsmounted tmpfs /tmp; then
 987         LC_ALL=C rm -rf /tmp/* /tmp/.[a-zA-Z0-9]*
 988 fi
 989
 990 # System protected dirs
 991 mkdir -m 1777 -p /tmp/.ICE-unix > /dev/null 2>&1
 992 chown root:root /tmp/.ICE-unix
 993 is_yes "$SELINUX" && restorecon /tmp/.ICE-unix >/dev/null 2>&1
 994
 995 test -d /var/run/netreport || mkdir -m 770 /var/run/netreport
 996
 997 if ! is_yes "$VSERVER"; then
 998         enable_swap
 999
1000         # If a SCSI tape has been detected, load the st module unconditionally
1001         # since many SCSI tapes don't deal well with st being loaded and unloaded
1002         if [ -f /proc/scsi/scsi ] && grep -q 'Type:   Sequential-Access' /proc/scsi/scsi 2>/dev/null ; then
1003                 if grep -qv ' 9 st' /proc/devices 2>/dev/null; then
1004                         if [ -n "$USEMODULES" ] ; then
1005                                 # Try to load the module. If it fails, ignore it...
1006                                 insmod -p st >/dev/null 2>&1 && modprobe -s st
1007                         fi
1008                 fi
1009         fi
1010
1011         # Now that we have all of our basic modules loaded and the kernel going,
1012         # let's dump the syslog ring somewhere so we can find it later
1013         mode=0600
1014         if [ "$(cat /proc/sys/kernel/dmesg_restrict)" = 0 ]; then
1015                 mode=0644
1016         fi
1017         dmesg --raw > /var/log/dmesg
1018         chmod $mode /var/log/dmesg
1019         i=5
1020         while [ $i -ge 0 ]; do
1021                 if [ -f /var/log/dmesg.$i ]; then
1022                         mv -f /var/log/dmesg.$i /var/log/dmesg.$(($i+1))
1023                 fi
1024                 i=$(($i-1))
1025         done
1026         cp -pf /var/log/dmesg /var/log/dmesg.0
1027 fi
1028
1029 if ! is_no "$RC_PROMPT"; then
1030         while :; do
1031                 pid=$(/sbin/pidof getkey)
1032                 [ -n "$pid" -o -e /var/run/getkey_done ] && break
1033                 usleep 100000
1034         done
1035         [ -n "$pid" ] && kill -TERM "$pid" >/dev/null 2>&1
1036 fi
1037 } &
1038
1039 # /proc extra check if the background process we just spawned is still running,
1040 # as in case of vserver bootup it finishes quite instantly.
1041 if ! is_no "$RC_PROMPT" && [ -d /proc/$! ]; then
1042         /sbin/getkey i && touch /var/run/confirm
1043         touch /var/run/getkey_done
1044 fi
1045 wait
1046 if ! is_no "$RC_PROMPT"; then
1047         rm -f /var/run/getkey_done
1048 fi
1049 echo