exit;
}
if ($argv[1] == "--iptables-bridge-delete") {
bridges_delete();
exit;
}
if ($argv[1] == "--ucarp-notify") {
ucarp_notify($argv[2], $argv[3], $argv[4], $argv[5], $argv[6]);
exit;
}
if ($argv[1] == "--ucarp-notify-down") {
ucarp_notify_down($argv[2], $argv[3], $argv[4], $argv[5], $argv[6]);
exit;
}
if ($argv[1] == "--wccp-build") {
nics_wccp_build(true);
exit;
}
if ($argv[1] == "--ucarp-active") {
print_r(ucarp_interface_active(true));
exit;
}
if ($GLOBALS["SLEEP"]) {
sleep(2);
}
dev_shm();
build();
//
//vconfig set_flag eth1.3 1 1
//vconfig set_flag eth1.4 1 1
//http://www.cyberciti.biz/tips/howto-configure-linux-virtual-local-area-network-vlan.html
function build()
{
$unix = new unix();
$users = new usersMenus();
$q = new mysql();
$nohup = $unix->find_program("nohup");
$hostname_bin = $unix->find_program("hostname");
$php5 = $unix->LOCATE_PHP5_BIN();
$sock = new sockets();
$Myhostname = $sock->GET_INFO("myhostname");
$oom_kill_allocating_task = $sock->GET_INFO("oom_kill_allocating_task");
if (!is_numeric($oom_kill_allocating_task)) {
$oom_kill_allocating_task = 1;
}
$pidfile = "/etc/artica-postfix/pids/" . basename(__FILE__) . ".pid";
$pid = @file_get_contents($pidfile);
$sysctl = $unix->find_program("sysctl");
$ifconfig = $unix->find_program("ifconfig");
$GLOBALS["ipbin"] = $unix->find_program("ip");
$GLOBALS["SCRIPTS_DOWN"] = array();
if ($unix->process_exists($pid, basename(__FILE__))) {
event("Building networks already executed PID: {$pid}", __FUNCTION__, __LINE__);
echo "Starting......: " . date("H:i:s") . " Building networks already executed PID: {$pid}\n";
die;
}
$fqdn = @file_get_contents("/etc/artica-postfix/FULL_HOSTNAME");
if (is_file("/etc/init.d/hostname.sh")) {
if (is_file("/usr/sbin/update-rc.d")) {
shell_exec("/usr/sbin/update-rc.d -f hostname remove >/dev/null 2>&1");
@unlink("/etc/init.d/hostname.sh");
}
}
if ($oom_kill_allocating_task == 1) {
echo "Starting......: " . date("H:i:s") . " Kernel oom_kill_allocating_task is enabled\n";
shell_exec("{$sysctl} -w \"vm.oom_dump_tasks=1\" >/dev/null 2>&1");
shell_exec("{$sysctl} -w \"vm.oom_kill_allocating_task=1\" >/dev/null 2>&1");
} else {
echo "Starting......: " . date("H:i:s") . " Kernel oom_kill_allocating_task is disabled\n";
shell_exec("{$sysctl} -w \"vm.oom_dump_tasks=0\" >/dev/null 2>&1");
shell_exec("{$sysctl} -w \"vm.oom_kill_allocating_task=0\" >/dev/null 2>&1");
}
if ($GLOBALS["VERBOSE"]) {
echo "Line:" . __LINE__ . " persistent_net_rules()\n";
}
persistent_net_rules();
if ($GLOBALS["VERBOSE"]) {
echo "Line:" . __LINE__ . " dev_shm()\n";
}
dev_shm();
$ip = $unix->find_program("ip");
$echobin = $unix->find_program("echo");
$logger = $unix->find_program("logger");
$IPROUTEFOUND = false;
exec("{$ip} route", $results);
events("IP route -> " . count($results) . " lines", __FUNCTION__, __LINE__);
while (list($index, $line) = each($results)) {
events("IP route -> {$line}", __FUNCTION__, __LINE__);
if (preg_match("#default via#", $line)) {
events("IP route found default via -> {$line}", __FUNCTION__, __LINE__);
$IPROUTEFOUND = true;
}
}
if (!$IPROUTEFOUND) {
@unlink("/etc/artica-postfix/MEM_INTERFACES");
}
if (is_file("/etc/artica-postfix/MEM_INTERFACES")) {
$MEM_INTERFACES = unserialize(@file_get_contents("/etc/artica-postfix/MEM_INTERFACES"));
}
if ($GLOBALS["VERBOSE"]) {
echo "Line:" . __LINE__ . " MEM_INTERFACES()\n";
}
$EXECUTE_CMDS = true;
if (is_array($MEM_INTERFACES)) {
$EXECUTE_CMDS = false;
if ($GLOBALS["VERBOSE"]) {
echo "Line:" . __LINE__ . " NETWORK_ALL_INTERFACES()\n";
}
$array = $unix->NETWORK_ALL_INTERFACES();
while (list($Interface, $ipaddr) = each($MEM_INTERFACES)) {
if ($ipaddr == null) {
continue;
}
if ($GLOBALS["VERBOSE"]) {
echo "Line:" . __LINE__ . " {$Interface} Must be {$ipaddr} -> {$array[$Interface]["IPADDR"]}\n";
}
events("{$Interface} Must be {$ipaddr} -> {$array[$Interface]["IPADDR"]}", __FUNCTION__, __LINE__);
if ($ipaddr != $array[$Interface]["IPADDR"]) {
events("Must rebuilded....", __FUNCTION__, __LINE__);
$EXECUTE_CMDS = true;
break;
}
}
}
if ($q->mysql_server == "127.0.0.1") {
if (!$unix->is_socket("/var/run/mysqld/mysqld.sock")) {
event("/var/run/mysqld/mysqld.sock no such socket", __FUNCTION__, __LINE__);
echo "Starting......: " . date("H:i:s") . " Building networks MySQL database not available starting MySQL service...\n";
shell_exec("{$nohup} {$php5} /usr/share/artica-postfix/exec.initd-mysql.php >/dev/null 2>&1 &");
shell_exec("{$nohup} /etc/init.d/mysql start >/dev/null 2>&1 &");
sleep(1);
for ($i = 0; $i < 5; $i++) {
$q = new mysql();
if (!is_file("/var/run/mysqld/mysqld.sock")) {
echo "Starting......: " . date("H:i:s") . " Building networks waiting MySQL database to start...{$i}/4\n";
sleep(1);
} else {
break;
}
}
if (!$unix->is_socket("/var/run/mysqld/mysqld.sock")) {
event("/var/run/mysqld/mysqld.sock no such socket", __FUNCTION__, __LINE__);
echo "Starting......: " . date("H:i:s") . " Building networks MySQL database not available...\n";
die;
}
}
}
shell_exec("{$nohup} {$php5} /usr/share/artica-postfix/exec.initd-mysql.php >/dev/null 2>&1 &");
if (!$q->BD_CONNECT()) {
sleep(1);
event("Building networks MySQL database not available starting MySQL service", __FUNCTION__, __LINE__);
echo "Starting......: " . date("H:i:s") . " Building networks MySQL database not available starting MySQL service...\n";
shell_exec("{$nohup} /etc/init.d/mysql start >/dev/null 2>&1 &");
for ($i = 0; $i < 5; $i++) {
$q = new mysql();
if (!$q->BD_CONNECT()) {
echo "Starting......: " . date("H:i:s") . " Building networks waiting MySQL database to start...{$i}/4\n";
sleep(1);
} else {
break;
}
}
$q = new mysql();
if (!$q->BD_CONNECT()) {
event("Building networks MySQL database not available...", __FUNCTION__, __LINE__);
echo "Starting......: " . date("H:i:s") . " Building networks MySQL database not available...\n";
die;
}
}
if (!$q->TABLE_EXISTS("nics", "artica_backup", true)) {
echo "Starting......: " . date("H:i:s") . " Building networks MySQL table is not yet builded..\n";
die;
}
$GLOBALS["SAVED_INTERFACES"] = array();
Checkipv6();
@file_put_contents($pidfile, getmypid());
echo "Starting......: " . date("H:i:s") . " Building networks checking bridge\n";
bridges_build();
echo "Starting......: " . date("H:i:s") . " Building networks checking IPV6\n";
Checkipv6();
$nic = new system_nic();
$datas = $nic->root_build_debian_config();
echo "Starting......: " . date("H:i:s") . " Building networks Reloading " . count($GLOBALS["SAVED_INTERFACES"]) . " interface(s)\n";
if (count($GLOBALS["SAVED_INTERFACES"]) == 0) {
echo "Starting......: " . date("H:i:s") . " Building networks Building Ipv6 virtuals IP...\n";
Checkipv6Virts();
}
$EXECUTE_CMDS = false;
if (is_file("/etc/init.d/hostname.sh")) {
if (is_file("/usr/sbin/update-rc.d")) {
shell_exec("/usr/sbin/update-rc.d -f hostname remove >/dev/null 2>&1");
@unlink("/etc/init.d/hostname.sh");
}
}
LoadProcNetDev();
$GLOBALS["SCRIPTS_TOP"][] = "# [" . __LINE__ . "]";
$GLOBALS["SCRIPTS_TOP"][] = "# [" . __LINE__ . "] *******************************";
$GLOBALS["SCRIPTS_TOP"][] = "# [" . __LINE__ . "] **** SETTINGS for LOOP BACK ***";
$GLOBALS["SCRIPTS_TOP"][] = "# [" . __LINE__ . "] *******************************";
$GLOBALS["SCRIPTS_TOP"][] = "# [" . __LINE__ . "]";
$GLOBALS["SCRIPTS_TOP"][] = "{$ifconfig} lo 127.0.0.1 up";
if ($Myhostname != null) {
$GLOBALS["SCRIPTS_TOP"][] = "{$hostname_bin} \"{$Myhostname}\"";
}
$GLOBALS["SCRIPTS_TOP"][] = "# [" . __LINE__ . "]";
$datas = $nic->networks_disabled();
$sh = array();
$sh[] = "#!/bin/sh -e";
$sh[] = "### BEGIN INIT INFO";
$sh[] = "# Builded on " . date("Y-m-d H:i:s");
$sh[] = "# Provides: artica-ifup";
$sh[] = "# Required-Start: mountkernfs \$local_fs";
$sh[] = "# Required-Stop: \$local_fs";
$sh[] = "# Should-Start:\t\tifupdown";
$sh[] = "# Should-Stop:\t\tifupdown";
$sh[] = "# Default-Start: S";
$sh[] = "# Default-Stop: 0 6";
$sh[] = "# Short-Description: start and stop the network";
$sh[] = "# Description: Artica ifup service Raise network interfaces";
$sh[] = "### END INIT INFO";
$sh[] = "case \"\$1\" in";
$sh[] = "start)";
$sh[] = "{$logger} \"kernel: [ Artica-Net] Artica network Script executed (start)\" || true";
$mkdir = $unix->find_program("mkdir");
$sh[] = "mkdir -p /run/network >/dev/null 2>&1";
$sh[] = "{$php5} /usr/share/artica-postfix/exec.virtuals-ip-notify.php --start || true";
etc_hosts();
routes_main();
ucarp_build(true);
bridges_build();
nics_wccp_build();
IPTABLES_NETWORK_BRIDGES();
$sh[] = "{$echobin} \"\" > /var/log/net-start.log";
$sh[] = "{$echobin} \" **** Apply Network configuration, please wait... ****\"";
while (list($index, $line) = each($GLOBALS["SCRIPTS_TOP"])) {
$line = trim($line);
if ($line == null) {
continue;
}
if (substr($line, 0, 1) == "#") {
$sh[] = ScriptInfo($line);
continue;
}
$md = md5($line);
if (isset($AL[$md])) {
echo "Starting......: " . date("H:i:s") . " SKIPING `{$line}`\n";
continue;
}
$AL[$md] = true;
echo "Starting......: " . date("H:i:s") . " `{$line}`\n";
if (strpos($line, "/etc/hosts") > 0) {
$sh[] = "{$line}";
continue;
}
if (preg_match("#ifconfig\\s+(.+?)\\s+(.+?)netmask(.+?)\\s+#", $line, $re)) {
$sh[] = "{$echobin} \"adding {$re[2]}/{$re[3]} in {$re[1]} interface\"";
}
$sh[] = "{$echobin} \"{$line}\" >>/var/log/net-start.log 2>&1";
$sh[] = "{$line} >>/var/log/net-start.log 2>&1 || true";
}
while (list($index, $line) = each($GLOBALS["SCRIPTS"])) {
$line = trim($line);
if ($line == null) {
continue;
}
if (substr($line, 0, 1) == "#") {
$sh[] = ScriptInfo($line);
continue;
}
if (preg_match("#^OUTPUT\\s+(.+)#", $line, $re)) {
$line = str_replace('"', "'", $line);
$sh[] = "{$echobin} \"{$re[1]}\"";
continue;
}
$md = md5($line);
if (isset($AL[$md])) {
echo "Starting......: " . date("H:i:s") . " SKIPING `{$line}`\n";
continue;
}
$AL[$md] = true;
echo "Starting......: " . date("H:i:s") . " `{$line}`\n";
if (strpos($line, "/etc/hosts") > 0) {
$sh[] = "{$line}";
continue;
}
if (preg_match("#ifconfig\\s+(.+?)\\s+(.+?)netmask(.+?)\\s+#", $line, $re)) {
$sh[] = "{$echobin} \"adding {$re[2]}/{$re[3]} in {$re[1]} interface\"";
}
if (strpos('echo "', $line) == 0) {
$sh[] = "{$echobin} \"{$line}\" >>/var/log/net-start.log 2>&1";
}
$sh[] = "{$line} >>/var/log/net-start.log 2>&1 || true";
}
if (count($GLOBALS["SCRIPTS_ROUTES"]) > 0) {
$GLOBALS["START_ROUTES"][] = "{$echobin} \"Apply network routes, please wait...\"";
$sh[] = "";
$sh[] = "# [" . __LINE__ . "]";
$sh[] = "# [" . __LINE__ . "] *******************************";
$sh[] = "# [" . __LINE__ . "] **** NETWORK ROUTES ****";
$sh[] = "# [" . __LINE__ . "] *******************************";
$sh[] = "# [" . __LINE__ . "]";
while (list($index, $line) = each($GLOBALS["SCRIPTS_ROUTES"])) {
$line = trim($line);
if ($line == null) {
continue;
}
if (substr($line, 0, 1) == "#") {
$ScriptInfo = ScriptInfo($line);
$sh[] = $ScriptInfo;
$GLOBALS["START_ROUTES"][] = $ScriptInfo;
continue;
}
$md = md5($line);
if (isset($AL[$md])) {
if (!preg_match("#^force#", $line)) {
echo "Starting......: " . date("H:i:s") . " SKIPING `{$line}`\n";
continue;
}
}
if (preg_match("#^force:(.+)#", $line, $re)) {
$line = $re[1];
$md = md5($line);
}
$AL[$md] = true;
if (preg_match("#ip route add (.+?)\\s+.*?src\\s+(.+)#", $line, $re)) {
$GLOBALS["START_ROUTES"][] = "{$echobin} \"Create route for network {$re[1]} for local address {$re[2]}\"";
$sh[] = "{$echobin} \"Create route for network {$re[1]} for local address {$re[2]}\"";
}
if (preg_match("#ip route add (.+?)\\s+via(.+?)\\s+src\\s+([0-9\\.]+)#", $line, $re)) {
$GLOBALS["START_ROUTES"][] = "{$echobin} \"Create route for network {$re[1]} using gateway {$re[2]} for local address {$re[3]}\"";
$sh[] = "{$echobin} \"Create route for network {$re[1]} using gateway {$re[2]} for local address {$re[3]}\"";
}
$GLOBALS["START_ROUTES"][] = "{$echobin} \"{$line}\" >>/var/log/net-start.log 2>&1";
$sh[] = "{$echobin} \"{$line}\" >>/var/log/net-start.log 2>&1";
if (preg_match("#\\/echo\\s+#", $line)) {
$sh[] = $line;
continue;
}
$sh[] = "{$line} >>/var/log/net-start.log 2>&1 || true";
$GLOBALS["START_ROUTES"][] = "{$line} >>/var/log/net-start.log 2>&1 || true";
}
}
$sh[] = "if [ -x /etc/init.d/artica-ifup-content.sh ] ; then";
$sh[] = "\t/etc/init.d/artica-ifup-content.sh || true";
$sh[] = "fi";
$sh[] = nics_vde_build();
$EnablePDNS = $sock->GET_INFO("EnablePDNS");
if (!is_numeric($EnablePDNS)) {
$EnablePDNS = 0;
}
$unix = new unix();
$squid = $unix->LOCATE_SQUID_BIN();
$ip = $unix->find_program("ip");
$echo = $unix->find_program("echo");
$nohup = $unix->find_program("nohup");
$monit = $unix->find_program("monit");
$ifconfig = $unix->find_program("ifconfig");
$php = $unix->LOCATE_PHP5_BIN();
if (is_file($squid)) {
$sh[] = "# [" . __LINE__ . "] Reloading squid";
$sh[] = "{$echo} \"Reloading squid ( if exists )\"";
$sh[] = "{$nohup} {$php} /usr/share/artica-postfix/exec.squid.php --kreconfigure 2>&1 >>/var/log/net-start.log 2>&1 &";
}
$sh[] = "# [" . __LINE__ . "] Flushing ARP cache";
$sh[] = "{$echo} \"Flushing ARP cache...\"";
$sh[] = "ip -s -s neigh flush all >>/var/log/net-start.log 2>&1 || true";
$sh[] = "# [" . __LINE__ . "] Tune the kernel";
$sh[] = "{$echo} \"Tuning the kernel...\"";
$sh[] = "{$php5} /usr/share/artica-postfix/exec.sysctl.php --build >>/var/log/net-start.log 2>&1 || true";
$sh[] = "if [ -x /bin/artica-firewall.sh ] ; then";
$sh[] = "\t/bin/artica-firewall.sh || true";
$sh[] = "fi";
if (is_file("/etc/init.d/ssh")) {
$sh[] = "# [" . __LINE__ . "] Starting sshd";
$sh[] = "{$echo} \"Starting sshd\"";
$sh[] = "/etc/init.d/ssh start 2>&1 || true";
}
$sh[] = "# [" . __LINE__ . "] Starting FrameWork";
$sh[] = "{$echo} \"Starting FrameWork\"";
$sh[] = "{$nohup} {$php5} /usr/share/artica-postfix/exec.framework.php --start >/dev/null 2>&1 &";
$sh[] = "# [" . __LINE__ . "] Starting Artica Meta Client";
$sh[] = "{$echo} \"Starting FrameWork\"";
$sh[] = "{$nohup} {$php5} /usr/share/artica-postfix/exec.artica-meta-client.php --ping --force >/dev/null 2>&1 &";
if ($EnablePDNS == 1) {
$sh[] = "# [" . __LINE__ . "] Reloading PowerDNS...";
$sh[] = "{$echo} \"Reloading PowerDNS\"";
$sh[] = "{$php5} /usr/share/artica-postfix/exec.pdns.php --reload 2>&1 || true";
}
if (is_file($monit)) {
$sh[] = "# [" . __LINE__ . "] Starting Monit in background";
$sh[] = "{$echo} \"Starting Monit in background\"";
$sh[] = "{$nohup} {$monit} -c /etc/monit/monitrc -p /var/run/monit/monit.pid -s /var/run/monit/monit.state >/dev/null 2>&1 &";
}
$mount = $unix->find_program("mount");
if (is_file($mount)) {
$sh[] = "# [" . __LINE__ . "] Mount all system after network set";
$sh[] = "{$echo} \"Starting mount in background\"";
$sh[] = "{$nohup} {$mount} -a >/dev/null 2>&1 &";
}
$sh[] = "# [" . __LINE__ . "] Reloading DHCPD (if exists)";
$sh[] = "{$echo} \"Reloading DHCP server ( if exists )\"";
$sh[] = "{$php5} /usr/share/artica-postfix/exec.dhcpd.compile.php --reload-if-run 2>&1 || true";
$sh[] = "{$echo} \" **** Apply Network configuration, done ****\"";
$sh[] = ";;";
$sh[] = " stop)";
$sh[] = "{$logger} \"* * * * * * * * * * * * * * SUSPECTED STOPPED SERVER !!! * * * * * * * * * * * * * *\" || true";
$sh[] = "{$logger} \"kernel: [ Artica-Net] Artica network Script executed (stop)\" || true";
if (is_array($GLOBALS["SCRIPTS_DOWN"])) {
while (list($index, $line) = each($GLOBALS["SCRIPTS_DOWN"])) {
if (substr($line, 0, 1) == "#") {
$sh[] = ScriptInfo($line);
continue;
}
$sh[] = "{$line} >>/var/log/net-stop.log 2>&1 || true";
}
}
$php = $unix->LOCATE_PHP5_BIN();
$sh[] = ";;";
$sh[] = "reconfigure)";
$sh[] = "{$logger} \"kernel: [ Artica-Net] Artica network Script Executed (reconfigure)\" || true";
$sh[] = "{$php} " . __FILE__ . " --build --force \$2 \$3";
$sh[] = "/etc/init.d/artica-ifup start";
$sh[] = ";;";
$sh[] = "routes)";
$sh[] = "{$logger} \"kernel: [ Artica-Net] Artica network Script Executed (routes)\" || true";
$sh[] = "# Array of " . count($GLOBALS["START_ROUTES"]);
$sh[] = "{$echobin} \"Flushing routes tables...\"";
$sh[] = "{$GLOBALS["ipbin"]} route flush table all";
$sh[] = "{$echobin} \"{$ifconfig} lo 127.0.0.1 down\"";
$sh[] = "{$ifconfig} lo 127.0.0.1 down || true";
$sh[] = "{$echobin} \"{$ifconfig} lo 127.0.0.1 up\"";
$sh[] = "{$ifconfig} lo 127.0.0.1 up || true";
$sh[] = "{$echobin} \"Apply routes to the system\"";
$sh[] = "{$echobin} \"Running routes\" > /var/log/net-start.log 2>&1";
$sh[] = @implode("\n", $GLOBALS["START_ROUTES"]);
$sh[] = "{$echobin} \"Routes applied to the system\"";
$sh[] = ";;";
$sh[] = "*)";
$sh[] = "{$logger} \"kernel: [ Artica-Net] Artica network Script executed (unknown)\" || true";
$sh[] = " echo \"Usage: \$0 {start or reconfigure only}\"";
$sh[] = "exit 1";
$sh[] = ";;";
$sh[] = "esac";
$sh[] = "exit 0\n";
@file_put_contents("/etc/init.d/artica-ifup", @implode("\n", $sh));
@chmod("/etc/init.d/artica-ifup", 0755);
if (is_file('/usr/sbin/update-rc.d')) {
shell_exec("/usr/sbin/update-rc.d -f artica-ifup defaults >/dev/null 2>&1");
if (is_file('/etc/init.d/networking')) {
shell_exec("/usr/sbin/update-rc.d -f networking disable >/dev/null 2>&1");
@copy("/etc/init.d/networking", "/etc/init.d/networking.back");
@unlink("/etc/init.d/networking");
}
}
if (is_file('/sbin/chkconfig')) {
shell_exec("/sbin/chkconfig --add artica-ifup >/dev/null 2>&1");
shell_exec("/sbin/chkconfig --level 1234 artica-ifup on >/dev/null 2>&1");
}
$inter[] = "# This file describes the network interfaces available on your system";
$inter[] = "## and how to activate them. For more information, see interfaces(5).";
$inter[] = "";
$inter[] = "## The loopback network interface";
$inter[] = "auto lo";
$inter[] = "iface lo inet loopback";
$inter[] = "";
$inter[] = "";
if (is_file("/etc/network/interfaces")) {
@file_put_contents("/etc/network/interfaces", @implode("\n", $inter));
}
squid_admin_mysql(1, "Network script was rebuilded", null, __FILE__, __LINE__);
echo "Starting......: " . date("H:i:s") . " Building FireWall rules.\n";
system("{$php5} /usr/share/artica-postfix/exec.firewall.php");
echo "Starting......: " . date("H:i:s") . " done...\n";
}
