]> TLD Linux GIT Repositories - rc-scripts.git/blob - rc.d/rc.sysinit
- merged /selinux mounting fix
[rc-scripts.git] / rc.d / rc.sysinit
1 #!/bin/sh
2 #
3 # /etc/rc.d/rc.sysinit - run once at boot time
4 #
5 # Taken in part from Miquel van Smoorenburg's bcheckrc.
6 #
7
8 # reasonable start values for bootsplash progress.
9 export progress=0
10 export sscripts=45
11 export kscripts=45
12
13 # NLS
14 if [ -r /etc/sysconfig/i18n ]; then
15         . /etc/sysconfig/i18n
16         [ -n "$LANG" ] && export LANG || unset LANG
17         [ -n "$LC_CTYPE" ] && export LC_CTYPE || unset LC_CTYPE
18         [ -n "$LC_COLLATE" ] && export LC_COLLATE || unset LC_COLLATE
19         [ -n "$LC_MESSAGES" ] && export LC_MESSAGES || unset LC_MESSAGES
20         [ -n "$LC_NUMERIC" ] && export LC_NUMERIC || unset LC_NUMERIC
21         [ -n "$LC_MONETARY" ] && export LC_MONETARY || unset LC_MONETARY
22         [ -n "$LC_TIME" ] && export LC_TIME || unset LC_TIME
23         [ -n "$LC_ALL" ] && export LC_ALL || unset LC_ALL
24         [ -n "$LANGUAGE" ] && export LANGUAGE || unset LANGUAGE
25         [ -n "$LINGUAS" ] && export LINGUAS || unset LINGUAS
26 fi
27
28 # Read network config data
29 if [ -r /etc/sysconfig/network ]; then
30         . /etc/sysconfig/network
31 else
32         NETWORKING=no
33         HOSTNAME=localhost
34 fi
35
36 CONSOLE_LOGLEVEL=1
37
38 # Read functions
39 . /lib/rc-scripts/functions
40
41 modprobe_c_cache=""
42 modprobe_c() {
43         if [ "$modprobe_c_cache" ]; then
44                 echo "$modprobe_c_cache"
45                 return
46         fi
47
48         # filter only what is wanted by this script: aliases and options
49         modprobe_c_cache=$(modprobe -c | grep -E '^(alias|options)')
50 }
51
52 # parse kernel cmdline
53 # needs /proc mounted
54 parse_cmdline() {
55         local arg cmdline
56         read cmdline < /proc/cmdline
57
58         for arg in $cmdline; do
59                 case "$arg" in
60                 noudev)
61                         # default is set in /etc/sysconfig/system
62                         START_UDEV=no
63                 ;;
64                 nomdadm)
65                         # default is set in /etc/sysconfig/system
66                         MDADM=no
67                 ;;
68                 nomultipath)
69                         # default is set in /etc/sysconfig/system
70                         DM_MULTIPATH=no
71                 ;;
72                 noselinux)
73                         # default is set in /etc/sysconfig/system
74                         SELINUX=no
75                 ;;
76                 nousb)
77                         nousb=1
78                 ;;
79                 nohdparm)
80                         nohdparm=1
81                 ;;
82                 fastboot)
83                         fastboot=1
84                 ;;
85                 nopnp)
86                         nopnp=1
87                 ;;
88                 nomodules)
89                         nomodules=1
90                 ;;
91                 nofirewire)
92                         nofirewire=1
93                 ;;
94                 nofsck)
95                         nofsck=1
96                 ;;
97                 esac
98         done
99 }
100
101 # resolve a device node to its major:minor numbers in decimal or hex
102 get_numeric_dev() {
103         local dev=$1 enc=${2:-hex} res
104
105         res=$(stat -Lc "%t:%T" "$dev")
106         if [ "$enc" = dec ]; then
107                 local oifs=$IFS
108                 IFS=":"
109                 set -- $res
110                 IFS=$oifs
111                 res=$((0x$1)):$((0x$2))
112         fi
113         echo -n $res
114 }
115
116 # setup SELINUX variable
117 init_selinux() {
118         # user knows!
119         if is_no "$SELINUX"; then
120                 return
121         fi
122
123         if ! grep -Fq selinuxfs /proc/filesystems; then
124                 # no support in kernel, no chance
125                 SELINUX=no
126         elif ! is_fsmounted selinuxfs /selinux; then
127                 mount -n -o gid=17 -t selinuxfs selinuxfs /selinux
128         fi
129
130         # Check SELinux status
131         local selinuxfs=$(awk '/ selinuxfs / { print $2 }' /proc/mounts 2> /dev/null)
132         SELINUX=
133         if [ -n "$selinuxfs" ] && [ "$(cat /proc/self/attr/current)" != "kernel" ]; then
134                 if [ -r $selinuxfs/enforce ] ; then
135                         SELINUX=$(cat $selinuxfs/enforce)
136                 else
137                         # assume enforcing if you can't read it
138                         SELINUX=1
139                 fi
140         fi
141 }
142
143 disable_selinux() {
144         local _d selinuxfs _t _r
145
146         while read _d selinuxfs _t _r; do
147                 [ "$_t" = "selinuxfs" ] && break
148         done </proc/mounts
149         echo "*** Warning -- SELinux is active"
150         echo "*** Disabling security enforcement for system recovery."
151         echo "*** Run 'setenforce 1' to reenable."
152         echo "0" > $selinuxfs/enforce
153 }
154
155 relabel_selinux() {
156         local _d selinuxfs _t _r
157
158         while read _d selinuxfs _t _r; do
159                 [ "$_t" = "selinuxfs" ] && break
160         done </proc/mounts
161         echo "
162          *** Warning -- SELinux relabel is required. ***
163          *** Disabling security enforcement.         ***
164          *** Relabeling could take a very long time, ***
165          *** depending on file system size.          ***
166          "
167         echo "0" > $selinuxfs/enforce
168         /sbin/fixfiles -F relabel > /dev/null 2>&1
169         rm -f /.autorelabel
170         echo "*** Enabling security enforcement.         ***"
171         echo $SELINUX > $selinuxfs/enforce
172 }
173
174 # Enable automatic swapon of all partitions with the proper swap magic.
175 # This allows setting up swap without editing /etc/fstab.
176 enable_autoswap() {
177         local swappartitions=$(blkid -t TYPE=swap -o device)
178         if [ -z "$swappartitions" ]; then
179                 return
180         fi
181
182         local curswap=$(awk '/^\/dev/ { print $1 }' /proc/swaps | while read x; do echo -n " "; get_numeric_dev $x; echo -n " "; done)
183
184         local partition
185         for partition in $swappartitions; do
186                 [ ! -e $partition ] && continue
187                 majmin=$(get_numeric_dev $partition)
188                 if ! strstr "$curswap" " $majmin "; then
189                         run_cmd "$(nls 'Enabling local swap partitions: %s' $partition)" swapon $partition
190                 fi
191         done
192 }
193
194
195 enable_swap() {
196         run_cmd "Activating swap" swapon -a "$@"
197         is_yes "$AUTOSWAP" && enable_autoswap
198 }
199
200 # Remove duplicate entries from mtab (for vserver guest use only)
201 clean_vserver_mtab() {
202         > /etc/mtab.clean
203         while read device mountpoint line; do
204                 grep -qs "$mountpoint" /etc/mtab.clean || \
205                         echo "$device $mountpoint $line" >> /etc/mtab.clean
206         done < /etc/mtab
207         cat /etc/mtab.clean > /etc/mtab
208         rm -f /etc/mtab.clean
209 }
210
211 # Loads modules from /etc/modules, /etc/modules.X.Y and /etc/modules.X.Y.Z
212 load_kernel_modules() {
213         local modules_file=$1
214         local _x _y _z v v1 old_IFS kernel kerneleq
215         {
216                 read _x _y v _z
217                 old_IFS=$IFS
218                 # strip _* or -* from versions like: "2.6.25_vanilla-1", "2.6.25-1"
219                 IFS='_-'
220                 set -- $v
221                 v1=${1}
222                 IFS='.'
223                 set -- $v1
224                 IFS=$old_IFS
225
226                 kernel="$1.$2"
227                 kerneleq="$1.$2.$3"
228         } < /proc/version
229
230         local module args
231         # Loop over every line in modules file
232         ( \
233                 grep -hvE '^(#|[[:blank:]]*$)' /etc/$modules_file /etc/$modules_file.$kernel /etc/$modules_file.$kerneleq 2>/dev/null
234                 echo '' # make sure there is a LF at the end
235         ) | while read module args; do
236                 [ -z "$module" ] && continue
237                 # strip comments
238                 args=${args%%#*}
239                 show "Loading %s kernel module(s)" "$module"
240                 busy
241                 modprobe -s $module -- $args && ok || fail
242         done
243 }
244
245 # launch repair shell
246 # which after exiting will reboot
247 repair_shell() {
248         local reason="$2"
249
250         # don't use '\n' in nls macro !
251         echo
252         echo
253         echo "$reason"
254         nls "*** Dropping you to a shell; the system will reboot"
255         nls "*** when you leave the shell."
256         echo
257
258         [ "$SELINUX" = "1" ] && disable_selinux
259         if ! is_no "$RUN_SULOGIN_ON_ERR"; then
260                 /sbin/sulogin
261         else
262                 /bin/sh
263         fi
264
265         run_cmd "Unmounting file systems" umount -a
266         run_cmd "Remounting root filesystem in ro mode" mount -n -o remount,ro /
267         run_cmd "Automatic reboot in progress" reboot
268 }
269
270 check_root_fs() {
271         show "Checking root filesystem"; started
272         initlog -c "fsck -C -T -a $fsckoptions /"
273         rc=$?
274
275         # A return of 4 or higher means there were serious problems.
276         if [ $rc -gt 3 ]; then
277                 [ -e /proc/splash ] && echo "verbose" > /proc/splash
278
279                 PS1="$(nls '(Repair filesystem)# ')"; export PS1
280                 repair_shell "$(nls '*** An error occurred during the file system check.')"
281
282         # A return of 2 or 3 means that filesystem was repaired but we need
283         # to reboot.
284         elif [ "$rc" = "2" -o "$rc" = "3" ]; then
285                 [ -e /proc/splash ] && echo "verbose" > /proc/splash
286                 echo
287                 nls "*** Filesystem was repaired but system needs to be"
288                 nls "*** rebooted before mounting it."
289                 nls "*** REBOOTING ***"
290                 echo
291
292                 run_cmd "Unmounting file systems" umount -a
293                 mount -n -o remount,ro /
294                 run_cmd "Automatic reboot in progress" reboot
295         elif [ "$rc" = "1" ]; then
296                 _RUN_QUOTACHECK=1
297         fi
298 }
299
300 # mdadm - manage MD devices aka Linux Software RAID
301 init_mdadm() {
302         if [ ! -x /sbin/mdadm -o ! -f /etc/mdadm.conf ]; then
303                 return
304         fi
305
306         modprobe -s md
307         local rc=0 golvm=0 have_md=0
308         if [ ! -f /proc/mdstat ]; then
309                 return
310         fi
311
312         # assume we have md if at least one ARRAY line is present
313         if grep -qE "^([[:blank:]]|)ARRAY[[:blank:]]" /etc/mdadm.conf; then
314                 have_md=1
315         fi
316         # configured to do auto scanning
317         if [ $have_md = 0 ] && grep -qE "^([[:blank:]]|)DEVICE[[:blank:]]partitions" /etc/mdadm.conf; then
318                 have_md=1
319         fi
320
321         # none found
322         if [ $have_md = 0 ]; then
323                 return
324         fi
325
326         show "Starting up RAID devices"; busy
327         /sbin/mdadm --assemble --scan --auto=yes
328         rc=$?
329         if [ "$rc" -eq 0 -o "$rc" -eq 2 ]; then
330                 # rc is used later too, so set sane value
331                 rc=0
332                 deltext; ok
333                 golvm=1
334         else
335                 deltext; fail
336         fi
337
338         # A non-zero return means there were problems
339         if [ $rc -gt 0 ]; then
340                 [ -e /proc/splash ] && echo "verbose" > /proc/splash
341                 show "Starting up RAID devices"; fail
342
343                 PS1="$(nls '(RAID Repair)# ')"; export PS1
344                 repair_shell "$(nls '*** An error occurred during the RAID startup.')"
345         fi
346
347         # LVM on RAID (keep in sync with LVM init)
348         if [ "$golvm" -eq "1" ]; then
349                 if [ -x /sbin/vgscan -a -x /sbin/vgchange ]; then
350                         run_cmd "Scanning for LVM volume groups (on RAID)" /sbin/vgscan $lvmignorelocking
351                         run_cmd "Activating LVM volume groups (on RAID)" /sbin/vgchange -a y $lvmsysinit
352                         [ "$lvmversion" = "2" ] && /sbin/vgmknodes
353                 fi
354         fi
355         show "Starting up RAID devices"; ok
356         return $rc
357 }
358
359 # Init LVM
360 init_lvm() {
361         if [ ! -x /sbin/vgscan -o ! -x /sbin/vgchange ] && ! is_yes "$EVMS_LVM"; then
362                 return
363         fi
364
365         if is_no "$LVM2"; then
366                 lvmversion=$(LC_ALL=C /sbin/vgchange --version 2>/dev/null | awk '/LVM version:/{if ($3 >= 2) print "2"}')
367         else
368                 lvmversion=2
369         fi
370
371         if [ "$lvmversion" = "1" ] ; then
372                 modprobe -s lvm-mod
373                 lvmignorelocking=""
374                 lvmsysinit=""
375         elif [ "$lvmversion" = "2" ] ; then
376                 modprobe -s dm-mod
377                 lvmignorelocking="--ignorelockingfailure"
378                 lvmsysinit="--sysinit"
379         else
380                 modprobe -s lvm-mod
381                 # device mapper (2.5+ and patched 2.4)
382                 modprobe -s dm-mod
383                 lvmignorelocking=""
384                 lvmsysinit=""
385         fi
386
387         run_cmd "Scanning for LVM volume groups" /sbin/vgscan $lvmignorelocking
388         run_cmd "Activating LVM volume groups" /sbin/vgchange -a y $lvmsysinit
389         if [ "$lvmversion" = "2" ]; then
390                 /sbin/vgmknodes $lvmignorelocking
391                 # display VG statistics
392                 /sbin/vgdisplay -s $lvmignorelocking
393         fi
394 }
395
396 # boot logging to /var/log/boot.log. install showconsole package to get it.
397 if ! is_no "$RC_BOOTLOG" && [ -x /sbin/blogd ]; then
398         RC_BOOTLOG=1
399 else
400         RC_BOOTLOG=
401 fi
402
403 if ! is_yes "$VSERVER" && [[ "$container" != lxc* ]]; then
404         # we need /proc mounted before everything
405         is_fsmounted proc /proc || mount -n /proc || mount -n -o gid=17,hidepid=2 -t proc /proc /proc
406
407         parse_cmdline
408
409         if [ -d /run ]; then
410                 is_fsmounted tmpfs /run || mount -n -t tmpfs run /run
411         fi
412
413         # Early sysctls
414         apply_sysctl
415
416         # sysfs is also needed before any other things (under kernel > 2.5)
417         if ! is_fsmounted sysfs /sys; then
418                 grep -Fq sysfs /proc/filesystems && mount -n -o gid=17 -t sysfs sysfs /sys
419         fi
420         if grep -Fq securityfs /proc/filesystems; then
421                 mount -n -o gid=17 -t securityfs securityfs /sys/kernel/security
422         fi
423
424         init_selinux
425
426         # TLD Linux LiveCD support
427         if [ -x /etc/rc.d/rc.live ]; then
428                 /etc/rc.d/rc.live
429         fi
430
431         # Choose Hardware profile
432         if ! is_no "$HWPROFILES" && [ -f /etc/sysconfig/hwprof ]; then
433                 . /etc/sysconfig/hwprof
434                 if is_yes "${HWPROFILES}" && [ -x /sbin/hwprofile -a -d /etc/sysconfig/hwprofiles/data ]; then
435                         mount -n / -o rw,remount
436                         /sbin/hwprofile -qf
437                         mount -n / -o ro,remount
438                 fi
439         fi
440
441         # Disable splash when requested
442         is_no "$BOOT_SPLASH" && [ -e /proc/splash ] && echo "0" > /proc/splash
443
444         if [ -x /sbin/restorecon ] && is_fsmounted tmpfs /dev; then
445                 /sbin/restorecon -R /dev 2>/dev/null
446         fi
447
448         [ -z "${CONSOLETYPE}" ] && CONSOLETYPE="$(/sbin/consoletype)"
449
450         if [ "$CONSOLETYPE" = "vt" -a -x /sbin/setsysfont ]; then
451                 /sbin/setsysfont
452         fi
453 fi
454
455
456 # Print welcome message
457 nls "\t\t\t%sPowered by %sTLD Linux%s" "$(termput setaf $CPOWEREDBY)" "$(termput setaf $CTLD)" "$(termput op)"
458 if ! is_no "$RC_PROMPT"; then
459         nls -n "\t\t  Press %sI%s to enter interactive startup" "$(termput setaf $CI)" "$(termput op)"
460         echo
461 fi
462
463 # Set the hostname
464 if [ -z "${HOSTNAME}" ]; then
465         show "$(nls 'Host:') $(hostname)"; ok
466 else
467         run_cmd "$(nls 'Host:') ${HOSTNAME}" hostname ${HOSTNAME}
468 fi
469
470 # Set the NIS domain name
471 if [ -n "$NISDOMAIN" ]; then
472         run_cmd "$(nls 'NIS Domain:') ${NISDOMAIN}" domainname $NISDOMAIN
473 else
474         domainname ""
475 fi
476
477 if ! is_yes "$VSERVER" && [[ "$container" != lxc* ]]; then
478         # Set console loglevel
479         if [ -n "$CONSOLE_LOGLEVEL" ]; then
480                 dmesg -n $CONSOLE_LOGLEVEL
481         fi
482
483         if ! is_no "$START_UDEV" && [ -x /sbin/start_udev ] && [[ "$container" != lxc* ]]; then
484                 is_fsmounted devtmpfs /dev || mount -n -t devtmpfs devtmpfs /dev
485                 load_kernel_modules modules.preudev
486                 /sbin/start_udev
487         elif [ -x /lib/firmware/firmware-loader.sh ]; then
488                 /sbin/sysctl -q -e -w kernel.hotplug=/lib/firmware/firmware-loader.sh
489         fi
490
491         # Unmount the initrd, if necessary
492         if grep -q /initrd /proc/mounts 2>/dev/null && ! grep -q /initrd/loopfs /proc/mounts 2>/dev/null; then
493                 umount /initrd/dev 2>/dev/null
494                 umount /initrd
495                 /sbin/blockdev --flushbufs /dev/ram0 >/dev/null 2>&1
496         fi
497
498         # Start logging console output since we have all /dev stuff setup
499         if [ "$RC_BOOTLOG" ]; then
500                 /sbin/blogd
501         fi
502
503         # Configure Linux kernel (initial configuration, some required modules still may be missing).
504         apply_sysctl
505
506         # Check if timezone definition is available
507         if [ -e /etc/localtime ] && [ -e /dev/rtc -o -e /dev/rtc0 ] ; then
508                 if run_cmd "$(nls 'Setting clock')" hwclock --hctosys; then
509                         show "$(nls 'Today`s date:') $(LC_CTYPE=C date)"; ok
510                 fi
511         else
512                 TIME_SETUP_DELAYED=yes
513         fi
514
515         delay_cryptsetup=0
516         if [ -f /etc/crypttab ] && ! is_empty_file /etc/crypttab; then
517                 # XXX might need modules dep
518                 # Device mapper & related initialization
519                 if ! grep -qF device-mapper /proc/devices; then
520                         modprobe -s dm-mod
521                 fi
522
523                 . /etc/rc.d/init.d/cryptsetup
524                 show "Starting disk encryption"
525                 init_crypto 0
526                 delay_cryptsetup=$?
527                 [ $delay_cryptsetup = 0 ] && ok || fail
528         fi
529
530         # Start up swapping
531         enable_swap -e
532
533         # Initialize USB controllers
534         usb=0
535         if [ -z "$nousb" ] && ! is_fsmounted usbfs /proc/bus/usb; then
536                 aliases=$(modprobe_c | awk '/^alias[[:space:]]+usb[-_]controller[[:space:]]+/{ print $3 }')
537                 if [ -n "$aliases" -a "$aliases" != "off" ] ; then
538                         modprobe -s usbcore
539                         for alias in $aliases ; do
540                                 [ "$alias" = "off" ] && continue
541                                 run_cmd "$(nls 'Initializing USB controller') ($alias)" modprobe -s $alias
542                         done
543                         [ $? -eq 0 -a -n "$aliases" ] && usb=1
544                 fi
545                 if grep -iq "usb" /proc/devices 2>/dev/null ; then
546                         usb=1
547                 fi
548         fi
549
550         if [ "$usb" = "1" -a -d /proc/bus/usb ] && ! is_fsmounted usbfs /proc/bus/usb; then
551                 run_cmd "Mounting USB filesystem" mount -n -t usbfs -o devgid=78,devmode=664 usbfs /proc/bus/usb
552         fi
553
554         needusbstorage=
555         if [ "$usb" = "1" ]; then
556                 needusbstorage=$(cat /proc/bus/usb/devices 2>/dev/null | grep -e "^I.*Cls=08" 2>/dev/null)
557                 if [ "$(kernelverser)" -lt "002006" ]; then
558                         grep -Fq 'hid' /proc/bus/usb/drivers 2>/dev/null || run_cmd "Initializing USB HID interface" modprobe -s hid
559                         mouseoutput=$(cat /proc/bus/usb/devices 2>/dev/null|grep -E "^I.*Cls=03.*Prot=02" 2>/dev/null)
560                         kbdoutput=$(cat /proc/bus/usb/devices 2>/dev/null|grep -E "^I.*Cls=03.*Prot=01" 2>/dev/null)
561                         if [ -n "$kbdoutput" ]; then
562                                 run_cmd "Initializing USB keyboard" modprobe -s keybdev
563                         fi
564                         if [ -n "$mouseoutput" ]; then
565                                 run_cmd "Initializing USB mouse" modprobe -s mousedev
566                         fi
567                 fi
568         fi
569
570         # Setup hdparm thing (if exists and is needed)
571         if [ -z "$nohdparm" ]; then
572                 [ -x /etc/rc.d/rc.hdparm ] && /etc/rc.d/rc.hdparm
573         fi
574
575         if [ -z "$fastboot" ] && [ -f /fastboot ]; then
576                 fastboot=1
577         fi
578
579         if [ -f /fsckoptions ]; then
580                 fsckoptions=$(cat /fsckoptions)
581         else
582                 fsckoptions=''
583         fi
584
585         if [ -f /forcefsck ]; then
586                 fsckoptions="-f $fsckoptions"
587         else
588                 # Obey the fs_passno setting for / (see fstab(5))
589                 # - find the / entry
590                 # - make sure we have at least 6 fields
591                 _ROOTFS_PASSNO=$(awk '($1 !~ /^#/ && $2 == "/" && NF >= 6) { print $6}' /etc/fstab)
592         fi
593
594         _RUN_QUOTACHECK=0
595         _ROOTFS_DEVICE=$(awk '($1 !~ /^#/ && $2 == "/" && NF >= 6) { print $1}' /etc/fstab)
596         _ROOTFS_TYPE=$(awk '$2 == "/" && $3 != "rootfs" { print $3 }' /proc/mounts 2>/dev/null)
597
598         if [ -z "$fastboot" -a "$_ROOTFS_TYPE" != "aufs" -a "$_ROOTFS_TYPE" != "nfs" -a "$_ROOTFS_TYPE" != "romfs" -a "$_ROOTFS_TYPE" != "squashfs" -a "$_ROOTFS_PASSNO" != 0 -a -e $_ROOTFS_DEVICE ] && [[ "$container" != lxc* ]]; then
599                 check_root_fs
600         fi
601
602         # set up pnp and kernel pnp
603         if is_yes "$RUN_USERPNP" || is_yes "$RUN_KERNELPNP"; then
604                 if [ -z "$nopnp" ] && is_yes "$RUN_USERPNP" && [ -x /sbin/isapnp -a -f /etc/isapnp/isapnp.conf ]; then
605                         run_cmd "Setting up ISA PNP devices (userspace pnp)" /sbin/isapnp /etc/isapnp/isapnp.conf
606                 fi
607                 if [ -z "$nopnp" ] && is_yes "$RUN_KERNELPNP"; then
608                         modprobe -s isa-pnp
609                         if [ -e /proc/isapnp -a -f /etc/isapnp/isapnp-kernel.conf ]; then
610                                 show "Setting up ISA PNP devices (kernelspace pnp)"; busy
611                                 grep -v "^#" /etc/isapnp/isapnp-kernel.conf 2>/dev/null >/proc/isapnp && (deltext; ok) || (deltext; fail)
612                         fi
613                 fi
614         fi
615
616         _ROOTFS_RO=$(awk '($1 !~ /^#/ && $2 == "/" && ($4 == "ro" || $4 ~ /,ro$/ || $4 ~ /^ro,/ || $4 ~ /,ro,/ ) && NF >= 6) { print "ro" }' /etc/fstab)
617         # Remount the root filesystem read-write
618         if [ -z "$_ROOTFS_RO" ]; then
619                 run_cmd "Remounting root filesystem in rw mode" mount -n -o remount,rw /
620         fi
621
622         # Update quotas if fsck was run on /
623         if [ "$_RUN_QUOTACHECK" = "1" -a -x /sbin/quotacheck ]; then
624                 run_cmd "Checking root filesystem quotas" /sbin/quotacheck -vnug /
625         fi
626
627         # Clean up SELinux labels
628         if is_yes "$SELINUX"; then
629                 for file in /etc/mtab /etc/cryptomtab /etc/ld.so.cache; do
630                         [ -r $file ] && restorecon $file >/dev/null 2>&1
631                 done
632         fi
633
634         if [ "$delay_cryptsetup" != 0 ]; then
635                 show "Starting disk encryption using the RNG"
636                 init_crypto 1
637                 delay_cryptsetup=$?
638                 [ $delay_cryptsetup = 0 ] && ok || fail
639         fi
640 else
641         # Start logging console output since we have all /dev stuff setup
642         if [ "$RC_BOOTLOG" ]; then
643                 /sbin/blogd -q
644         fi
645 fi
646
647 # Remove stale backups
648 rm -f /etc/mtab~ /etc/mtab~~ /etc/cryptomtab~ /etc/cryptomtab~~ >/dev/null 2>&1
649
650 # Remove /etc/nologin when starting system
651 [ -f /etc/nologin.boot ] && rm -f /etc/nologin /etc/nologin.boot
652
653 if ! is_no "$DELAY_LOGIN" && [ ! -f /etc/nologin ]; then
654         show "Enabling Delay Login"; busy
655         echo > /etc/nologin
656         nls "System bootup in progress - please wait" >> /etc/nologin
657         echo >> /etc/nologin
658         chmod 644 /etc/nologin
659         cp -fp /etc/nologin /etc/nologin.boot
660         ok
661 fi
662
663 # The root filesystem is now read-write, so we can now log via
664 # syslog() directly...
665 if [ -n "$IN_INITLOG" ]; then
666         IN_INITLOG=""
667 fi
668
669 if ! is_yes "$VSERVER" && [[ "$container" != lxc* ]]; then
670         # Clear mtab
671         > /etc/mtab
672         [ -f /etc/cryptomtab ] && > /etc/cryptomtab
673
674         # Enter root, /proc, /sys and other into mtab.
675         mount -f / 2> /dev/null
676         mount -f /proc 2> /dev/null
677         if is_fsmounted devtmpfs /dev; then
678                 mount -f -t devtmpfs devtmpfs /dev 2> /dev/null
679         fi
680         if is_fsmounted tmpfs /run; then
681                 mount -f -t tmpfs run /run 2> /dev/null
682         fi
683
684         if is_fsmounted usbfs /proc/bus/usb; then
685                 mount -f -t usbfs -o devgid=78,devmode=664 usbfs /proc/bus/usb 2> /dev/null
686         fi
687
688         if is_fsmounted sysfs /sys; then
689                 mount -f -t sysfs sysfs /sys 2> /dev/null
690                 if is_fsmounted securityfs /sys/kernel/security ; then
691                         mount -f -t securityfs securityfs /sys/kernel/security 2> /dev/null
692                 fi
693         fi
694
695         if is_fsmounted selinuxfs /selinux; then
696                 mount -f -t selinuxfs selinuxfs /selinux 2> /dev/null
697         fi
698
699         if [ ! -f /proc/modules ]; then
700                 USEMODULES=
701         elif [ -z "$nomodules" ]; then
702                 USEMODULES=y
703         else
704                 USEMODULES=
705         fi
706
707         uname_r=$(uname -r)
708         # Adjust symlinks as necessary in /boot to keep system services from
709         # spewing messages about mismatched System maps and so on.
710         if ! is_no "$SET_SLINKS"; then
711                 if [ -L /boot/System.map -a -r /boot/System.map-$uname_r ] ; then
712                         ln -s -f System.map-$uname_r /boot/System.map
713                 fi
714                 if [ ! -e /boot/System.map -a -r /boot/System.map-$uname_r ] ; then
715                         ln -s -f System.map-$uname_r /boot/System.map
716                 fi
717         fi
718
719         # Run depmod if RUN_DEPMOD != "no" and:
720         # a) user requested or RUN_DEPMOD="";
721         # b) modules.dep is missing
722         if ! is_no "$RUN_DEPMOD" && [ -n "$USEMODULES" ]; then
723                 if is_yes "$RUN_DEPMOD" || [ -z "$RUN_DEPMOD" ]; then
724                         run_cmd "Finding module dependencies" depmod -a
725                 elif [ "$RUN_DEPMOD" = "ifmissing" ] && [ ! -f /lib/modules/$uname_r/modules.dep ]; then
726                         run_cmd "Finding module dependencies" depmod -A
727                 fi
728         fi
729         unset uname_r
730
731         if [ -f /proc/sys/kernel/modprobe ]; then
732                 if [ -n "$USEMODULES" ]; then
733                         sysctl -q -w kernel.modprobe="/sbin/modprobe"
734                 else
735                         # We used to set this to NULL, but that causes
736                         # 'failed to exec' messages"
737                         sysctl -q -w kernel.modprobe="/bin/true"
738                 fi
739         fi
740
741         # Load usb storage here, to match most other things
742         if [ -n "$needusbstorage" ]; then
743                 modprobe -s usb-storage
744         fi
745
746         # Load firewire devices
747         if [ -z "$nofirewire" ]; then
748                 aliases=$(modprobe_c | awk '/^alias[[:space:]]+ieee1394[-_]controller[[:space:]]+/{ print $3 }')
749                 if [ -n "$aliases" -a "$aliases" != "off" ] ; then
750                         for alias in $aliases ; do
751                                 [ "$alias" = "off" ] && continue
752                                 run_cmd "$(nls 'Initializing firewire controller') ($alias)" modprobe $alias
753                         done
754                         grep -E "SBP2" /proc/bus/ieee1394/devices 2>/dev/null && modprobe -s sbp2
755                 fi
756         fi
757
758         # Load sound modules if they need persistent DMA buffers
759         if modprobe_c | grep -q "^options sound dmabuf=1"; then
760                 RETURN=0
761                 alias=$(modprobe_c | awk '/^alias[[:space:]]+sound[[:space:]]+/{ print $3 }')
762                 if [ -n "$alias" -a "$alias" != "off" ] ; then
763                         run_cmd "$(nls 'Loading sound module') ($alias)" modprobe -s $alias
764                         RETURN=$?
765                 fi
766                 alias=$(modprobe_c | awk '/^alias[[:space:]]+sound[-_]slot[-_]0[[:space:]]+/ { print $3 }')
767                 if [ -n "$alias" -a "$alias" != "off" ] ; then
768                         run_cmd "$(nls 'Loading sound module') ($alias)" modprobe -s $alias
769                         RETURN=$?
770                 fi
771         fi
772
773         # Load modules
774         load_kernel_modules modules
775         for f in /etc/modules-load.d/*.conf; do
776                 # already loaded by implicit "modules" load
777                 [ "${f##*/}" = "modules.conf" ] && continue
778
779                 [ -r $f ] || continue
780                 load_kernel_modules ${f##/etc/}
781         done
782
783         if ! is_no "$DM_MULTIPATH" && [ -x /sbin/multipath ]; then
784                 modprobe -s dm-mod
785                 modprobe -s dm-multipath
786                 # make nodes that were discarded due (possible) new /dev mount
787                 /sbin/dmsetup mknodes
788                 run_cmd "Activating dm-multipath" /sbin/multipath -v 0
789                 /sbin/dmsetup ls --target multipath --exec '/sbin/kpartx -a -p p'
790         fi
791
792         if ! is_no "$DMRAID" && [ -x /sbin/dmraid ]; then
793                 run_cmd "Activating ATARAID devices" /sbin/dmraid -ay
794         fi
795
796         # Find and activate volume groups:
797         # EVMS
798         if is_yes "$EVMS_LVM" && [ -x /sbin/evms_activate ]; then
799                 if [ "$(kernelverser)" -lt "002006" ]; then
800                         # Linux 2.4 core modules
801                         modprobe -s evms
802                         modprobe -s evms_passthru
803                         modprobe -s ldev_mgr
804                         modprobe -s dos_part
805                 else
806                         # Linux 2.6 core module
807                         modprobe -s evmscore
808                 fi
809
810                 is_yes "$EVMS_GUID_PTABLE" && modprobe -s gpt_part
811                 is_yes "$EVMS_LVM" && modprobe -s lvm_vge
812                 is_yes "$EVMS_AIX" && modprobe -s AIXlvm_vge
813                 is_yes "$EVMS_OS2" && modprobe -s os2lvm_vge
814                 run_cmd "Discovering EVMS volumes" /sbin/evms_activate
815                 if is_yes "$EVMS_LVM" && is_yes "$EVMS_LVM_COMPAT_NODES" ; then
816                         # Link nodes for compatibility with LVM
817                         if [ "$(echo /dev/evms/lvm/*)" != '/dev/evms/lvm/*' ] ; then
818                                 ln -s /dev/evms/lvm/* /dev
819                         fi
820                 fi
821         fi
822
823         # Init LVM
824         if ! is_no "$LVM2"; then
825                 init_lvm
826         fi
827
828         if [ "$delay_cryptsetup" != 0 ]; then
829                 show "Starting disk encryption"
830                 init_crypto 1
831                 delay_cryptsetup=$?
832                 [ $delay_cryptsetup = 0 ] && ok || fail
833         fi
834
835         if ! is_no "$MDADM"; then
836                 init_mdadm
837         fi
838
839         _RUN_QUOTACHECK=0
840         # Check filesystems
841         if [ -z "$fastboot" ] && [ -z "$nofsck" ]; then
842                 rc_splash "fsck start"
843                 show "Checking filesystems"; started
844                 initlog -c "fsck -C -T -R -A -a -P $fsckoptions"
845
846                 rc=$?
847
848                 # A return of 2 or higher means there were serious problems
849                 if [ $rc -gt 1 ]; then
850                         [ -e /proc/splash ] && echo "verbose" > /proc/splash
851
852                         PS1="$(nls '(Repair filesystem)# ')"; export PS1
853                         repair_shell "$(nls '*** An error occurred during the file system check.')"
854
855                 elif [ "$rc" = "1" -a -x /sbin/quotacheck ]; then
856                         _RUN_QUOTACHECK=1
857                 fi
858                 rc_splash "fsck stop"
859         fi
860
861         # Mount all other filesystems (except for NFS and /proc, which is already
862         # mounted). Contrary to standard usage,
863         # filesystems are NOT unmounted in single user mode.
864         run_cmd "Mounting local filesystems" mount -a -t nonfs,nfs4,smbfs,ncpfs,proc,cifs -O no_netdev
865
866         # now we have /usr mounted, recheck if we have gettext and tput available.
867         if is_no "$TPUT"; then
868                 GETTEXT=
869                 TPUT=
870                 rc_gettext_init
871         fi
872
873         # Now do some workaround - encrypted filesystems couldn't have been fsck-ed
874         # before mount - that's where the password is entered.
875         # mount is buggy - when remounting loopback filesystem, loop=XXX
876         # option is removed from /etc/mtab
877         if [ -z "$fastboot" ] && grep "^[^#].*encryption=" /etc/fstab 2>/dev/null | grep -v -q "noauto" 2>/dev/null; then
878                 show "Checking encrypted filesystems"; started
879                 LOOPLIST="$(LC_ALL=C awk '
880                 FILENAME=="/proc/mounts" {
881                         TAB[$2]=$1;
882                 }
883                 FILENAME=="/etc/fstab" && /encryption=/ && ! /noauto/ && /[^a-zA-Z_]ro[^a-zA-Z_]/ {
884                         if ($2 in TAB){print TAB[$2];}
885                 }
886                 FILENAME=="/etc/fstab" && /encryption=/ && ! /noauto/ && ! /[^a-zA-Z_]ro[^a-zA-Z_]/ {
887                         if ($2 in TAB){print TAB[$2];}
888                         sub("loop(=[^,]*)?","loop=" TAB[$2] ",ro",$4);
889                         cmd="mount " $2 " -o remount," $4;
890                         system(cmd);
891                 }
892                 ' /proc/mounts /etc/fstab)"
893                 initlog -c "fsck -T -C -a $fsckoptions $LOOPLIST"
894                 rc=$?
895
896                 # A return of 2 or higher means there were serious problems.
897                 if [ $rc -gt 1 ]; then
898                         [ -e /proc/splash ] && echo "verbose" > /proc/splash
899
900                         PS1="$(nls '(Repair filesystem)# ')"; export PS1
901                         repair_shell "$(nls '*** An error occurred during the file system check.')"
902
903                 elif [ "$rc" = "1" -a -x /sbin/quotacheck ]; then
904                         _RUN_QUOTACHECK=1
905                 fi
906
907                 show "Remounting encrypted filesystems back in rw mode"; busy
908                 LC_ALL=C awk '
909                 FILENAME=="/proc/mounts" {
910                         TAB[$2]=$1;
911                 }
912                 FILENAME=="/etc/fstab" && /encryption=/ && ! /noauto/ && ! /[^a-zA-Z_]ro[^a-zA-Z_]/ {
913                         sub("loop(=[^,]*)?","loop=" TAB[$2] ",rw",$4);
914                         cmd="mount " $2 " -o remount," $4;
915                         system(cmd);
916                 }
917                 ' /proc/mounts /etc/fstab
918                 ok
919         fi
920
921         # /var/log should be writable now, so start saving the boot output
922         if [ "$RC_BOOTLOG" ]; then
923                 echo > /var/log/boot.log
924                 killall -IO blogd
925         fi
926
927         if [ "$_RUN_QUOTACHECK" = "1" -a -x /sbin/quotacheck ]; then
928                 run_cmd "Checking filesystem quotas" /sbin/quotacheck -vnugRa
929         fi
930
931         # Turn on quota
932         if [ -x /sbin/quotaon ]; then
933                 run_cmd "Turning on quotas for local filesystems" /sbin/quotaon -aug
934         fi
935
936         # Turn on process accounting
937         if [ -x /etc/rc.d/rc.acct ]; then
938                 /etc/rc.d/rc.acct start
939         fi
940
941         # Set the clock if timezone definition wasn't available (eg. /usr not mounted)
942         if is_yes "$TIME_SETUP_DELAYED" && [ -e /dev/rtc -o -e /dev/rtc0 ]; then
943                 if run_cmd "$(nls 'Setting clock')" hwclock --hctosys; then
944                         show "$(nls 'Today`s date:') $(LC_CTYPE=C date)"; ok
945                 fi
946         fi
947
948         # Initialize the serial ports
949         if [ -f /etc/rc.d/rc.serial ]; then
950                 . /etc/rc.d/rc.serial
951         fi
952
953         if [ -n "$PANIC_REBOOT_TIME" ] && [ "$PANIC_REBOOT_TIME" -gt "0" ] && [ -f /proc/sys/kernel/panic ]; then
954                 show 'Setting %s seconds for kernel reboot after panic' "$PANIC_REBOOT_TIME"; busy
955                 # DEPRECATED: use /etc/sysctl.conf or kernel commandline instead
956                 if sysctl -q -w kernel.panic=$PANIC_REBOOT_TIME; then ok; else fail; fi
957         fi
958
959         # ... and here finish configuring parameters
960         apply_sysctl
961 else
962         # /var/log should be writable now, so start saving the boot output
963         if [ "$RC_BOOTLOG" ]; then
964                 echo > /var/log/boot.log
965                 killall -IO blogd
966         fi
967
968         clean_vserver_mtab
969 fi
970
971 is_yes "$SELINUX" && [ -f /.autorelabel ] && relabel_selinux
972
973 # Clean up /.
974 rm -f /fastboot /fsckoptions /forcefsck /halt /poweroff >/dev/null 2>&1
975
976 # Clean up /var
977 # /usr could be still not mounted if it is on NFS.
978 for afile in /var/lock/* /var/run/*; do
979         bafile=${afile##*/}
980         if [ -d "$afile" ]; then
981                 case $bafile in
982                 news|sudo|mon|cvs)
983                         ;;
984                 *)
985                         echo $afile/* | xargs rm -rf
986                         ;;
987                 esac
988         else
989                 [ "$bafile" != "hwprofile" -a "$bafile" != "random-seed" ] && rm -f $afile 2> /dev/null
990         fi
991 done
992
993 # Delete stale files
994 rm -f /var/lib/rpm/__db* /var/spool/postoffice/.pid.* /tmp/.X*-lock \
995         /tmp/.lock.* /tmp/.gdm_socket /tmp/.s.PGSQL.*
996 rm -rf /tmp/.X*-unix /tmp/.ICE-unix /tmp/.font-unix /tmp/hsperfdata_* \
997         /tmp/kde-* /tmp/ksocket-* /tmp/mc-* /tmp/mcop-* /tmp/orbit-* \
998         /tmp/scrollkeeper-* /tmp/ssh-*
999
1000 {
1001 # Clean up utmp/wtmp
1002 rm -f /var/run/utmpx
1003 > /var/run/utmp
1004 if [ -e /var/log/wtmpx ]; then
1005         if [ -e /var/log/wtmp ]; then
1006                 rm -f /var/log/wtmpx
1007         else
1008                 mv /var/log/wtmpx /var/log/wtmp
1009         fi
1010 fi
1011 touch /var/log/wtmp
1012 chown root:utmp /var/run/utmp /var/log/wtmp
1013 chmod 0664 /var/run/utmp /var/log/wtmp
1014
1015 # Clean /tmp
1016 if is_yes "$CLEAN_TMP" && ! is_fsmounted tmpfs /tmp; then
1017         LC_ALL=C rm -rf /tmp/* /tmp/.[a-zA-Z0-9]*
1018 fi
1019
1020 # System protected dirs
1021 mkdir -m 1777 -p /tmp/.ICE-unix > /dev/null 2>&1
1022 chown root:root /tmp/.ICE-unix
1023 is_yes "$SELINUX" && restorecon /tmp/.ICE-unix >/dev/null 2>&1
1024
1025 test -d /var/run/netreport || mkdir -m 770 /var/run/netreport
1026
1027 if ! is_yes "$VSERVER"; then
1028         enable_swap
1029
1030         # If a SCSI tape has been detected, load the st module unconditionally
1031         # since many SCSI tapes don't deal well with st being loaded and unloaded
1032         if [ -f /proc/scsi/scsi ] && grep -q 'Type:   Sequential-Access' /proc/scsi/scsi 2>/dev/null ; then
1033                 if grep -qv ' 9 st' /proc/devices 2>/dev/null; then
1034                         if [ -n "$USEMODULES" ] ; then
1035                                 # Try to load the module. If it fails, ignore it...
1036                                 insmod -p st >/dev/null 2>&1 && modprobe -s st
1037                         fi
1038                 fi
1039         fi
1040
1041         # Now that we have all of our basic modules loaded and the kernel going,
1042         # let's dump the syslog ring somewhere so we can find it later
1043         mode=0600
1044         if [ "$(cat /proc/sys/kernel/dmesg_restrict)" = 0 ]; then
1045                 mode=0644
1046         fi
1047         dmesg --raw > /var/log/dmesg
1048         chmod $mode /var/log/dmesg
1049         i=5
1050         while [ $i -ge 0 ]; do
1051                 if [ -f /var/log/dmesg.$i ]; then
1052                         mv -f /var/log/dmesg.$i /var/log/dmesg.$(($i+1))
1053                 fi
1054                 i=$(($i-1))
1055         done
1056         cp -pf /var/log/dmesg /var/log/dmesg.0
1057 fi
1058
1059 if ! is_no "$RC_PROMPT"; then
1060         while :; do
1061                 pid=$(/sbin/pidof getkey)
1062                 [ -n "$pid" -o -e /var/run/getkey_done ] && break
1063                 usleep 100000
1064         done
1065         [ -n "$pid" ] && kill -TERM "$pid" >/dev/null 2>&1
1066 fi
1067 } &
1068
1069 # /proc extra check if the background process we just spawned is still running,
1070 # as in case of vserver bootup it finishes quite instantly.
1071 if ! is_no "$RC_PROMPT" && [ -d /proc/$! ]; then
1072         /sbin/getkey i && touch /var/run/confirm
1073         touch /var/run/getkey_done
1074 fi
1075 wait
1076 if ! is_no "$RC_PROMPT"; then
1077         rm -f /var/run/getkey_done
1078 fi
1079 echo