From 70873348b97e26cf3bb7dd034b100880278d06c0 Mon Sep 17 00:00:00 2001
From: hwdsl2 <hwdsl2@users.noreply.github.com>
Date: Sat, 14 Aug 2021 00:23:14 -0500
Subject: [PATCH] Add update script

- Add a new wrapper script for updating Libreswan on all supported OS.
  The previous vpnupgrade.sh has been moved to vpnupgrade_ubuntu.sh.
---
 extras/vpnupgrade.sh | 166 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 166 insertions(+)
 create mode 100755 extras/vpnupgrade.sh

diff --git a/extras/vpnupgrade.sh b/extras/vpnupgrade.sh
new file mode 100755
index 0000000..66fa1bf
--- /dev/null
+++ b/extras/vpnupgrade.sh
@@ -0,0 +1,166 @@
+#!/bin/sh
+#
+# Script to update Libreswan on Ubuntu, Debian, CentOS/RHEL, Rocky Linux,
+# AlmaLinux and Amazon Linux 2
+#
+# The latest version of this script is available at:
+# https://github.com/hwdsl2/setup-ipsec-vpn
+#
+# Copyright (C) 2021 Lin Song <linsongui@gmail.com>
+#
+# This work is licensed under the Creative Commons Attribution-ShareAlike 3.0
+# Unported License: http://creativecommons.org/licenses/by-sa/3.0/
+#
+# Attribution required: please include my name in any derivative and let me
+# know how you have improved it!
+
+# Specify which Libreswan version to install. See: https://libreswan.org
+SWAN_VER=4.4
+
+### DO NOT edit below this line ###
+
+export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
+
+exiterr() { echo "Error: $1" >&2; exit 1; }
+
+check_root() {
+  if [ "$(id -u)" != 0 ]; then
+    exiterr "Script must be run as root. Try 'sudo sh $0'"
+  fi
+}
+
+check_vz() {
+  if [ -f /proc/user_beancounters ]; then
+    exiterr "OpenVZ VPS is not supported."
+  fi
+}
+
+check_os() {
+  os_type=centos
+  rh_file="/etc/redhat-release"
+  if grep -qs "Red Hat" "$rh_file"; then
+    os_type=rhel
+  fi
+  if grep -qs "release 7" "$rh_file"; then
+    os_ver=7
+  elif grep -qs "release 8" "$rh_file"; then
+    os_ver=8
+    grep -qi stream "$rh_file" && os_ver=8s
+    grep -qi rocky "$rh_file" && os_type=rocky
+    grep -qi alma "$rh_file" && os_type=alma
+  elif grep -qs "Amazon Linux release 2" /etc/system-release; then
+    os_type=amzn
+    os_ver=2
+  else
+    os_type=$(lsb_release -si 2>/dev/null)
+    [ -z "$os_type" ] && [ -f /etc/os-release ] && os_type=$(. /etc/os-release && printf '%s' "$ID")
+    case $os_type in
+      [Uu]buntu)
+        os_type=ubuntu
+        ;;
+      [Dd]ebian)
+        os_type=debian
+        ;;
+      [Rr]aspbian)
+        os_type=raspbian
+        ;;
+      *)
+        exiterr "This script only supports Ubuntu, Debian, CentOS/RHEL 7/8 and Amazon Linux 2."
+        ;;
+    esac
+    os_ver=$(sed 's/\..*//' /etc/debian_version | tr -dc 'A-Za-z0-9')
+    if [ "$os_ver" = "8" ] || [ "$os_ver" = "jessiesid" ]; then
+      exiterr "Debian 8 or Ubuntu < 16.04 is not supported."
+    fi
+  fi
+}
+
+check_swan_ver() {
+  case $SWAN_VER in
+    3.32|4.[1234])
+      true
+      ;;
+    *)
+cat 1>&2 <<EOF
+Error: Libreswan version '$SWAN_VER' is not supported.
+       This script can install one of these versions:
+       3.32, 4.1-4.3 or 4.4
+EOF
+      exit 1
+      ;;
+  esac
+
+  ipsec_ver=$(/usr/local/sbin/ipsec --version 2>/dev/null)
+  if ! printf '%s' "$ipsec_ver" | grep -q "Libreswan"; then
+cat 1>&2 <<'EOF'
+Error: This script requires Libreswan already installed.
+       See: https://github.com/hwdsl2/setup-ipsec-vpn
+EOF
+    exit 1
+  fi
+}
+
+install_wget() {
+  if ! command -v wget >/dev/null 2>&1; then
+    if [ "$os_type" = "ubuntu" ] || [ "$os_type" = "debian" ] || [ "$os_type" = "raspbian" ]; then
+      export DEBIAN_FRONTEND=noninteractive
+      (
+        set -x
+        apt-get -yqq update
+      ) || exiterr "'apt-get update' failed."
+      (
+        set -x
+        apt-get -yqq install wget >/dev/null
+      ) || exiterr "'apt-get install wget' failed."
+    else
+      (
+        set -x
+        yum -y -q install wget >/dev/null
+      ) || exiterr "'yum install wget' failed."
+    fi
+  fi
+}
+
+get_setup_url() {
+  base_url="https://github.com/hwdsl2/setup-ipsec-vpn/raw/master/extras"
+  sh_file="vpnupgrade_ubuntu.sh"
+  if [ "$os_type" = "centos" ] || [ "$os_type" = "rhel" ] || [ "$os_type" = "rocky" ] || [ "$os_type" = "alma" ]; then
+    sh_file="vpnupgrade_centos.sh"
+  elif [ "$os_type" = "amzn" ]; then
+    sh_file="vpnupgrade_amzn.sh"
+  fi
+  setup_url="$base_url/$sh_file"
+}
+
+run_setup() {
+  status=0
+  TMPDIR=$(mktemp -d /tmp/vpnup.XXXXX 2>/dev/null)
+  if [ -d "$TMPDIR" ]; then
+    if ( set -x; wget -t 3 -T 30 -q -O "$TMPDIR/vpnup.sh" "$setup_url" \
+      || curl -fsL "$setup_url" -o "$TMPDIR/vpnup.sh" 2>/dev/null ); then
+      VPN_UPDATE_SWAN_VER="$SWAN_VER" /bin/sh "$TMPDIR/vpnup.sh" || status=1
+    else
+      status=1
+      echo "Error: Could not download update script." >&2
+    fi
+    /bin/rm -f "$TMPDIR/vpnup.sh"
+    /bin/rmdir "$TMPDIR"
+  else
+    exiterr "Could not create temporary directory."
+  fi
+}
+
+vpnupgrade() {
+  check_root
+  check_vz
+  check_os
+  check_swan_ver
+  install_wget
+  get_setup_url
+  run_setup
+}
+
+## Defer setup until we have the complete script
+vpnupgrade "$@"
+
+exit "$status"