Subversion Repositories configs

#!/bin/sh
#
# netcf-transaction: save/restore current network interface configuration
#
# chkconfig:   - 09 91
# description: This script can save the current state of network config, \
#              and later revert to that config, or commit the new config \
#              (by deleting the snapshot). At boot time, if there are \
#              uncommitted changes to the network config, they are \
#              reverted (and the discarded changes are archived in \
#              /var/lib/netcf/network-rollback-*).

### BEGIN INIT INFO
# Provides: netcf-transaction
# Required-Start: $local_fs
# Short-Description: save/restore network configuration files
# Description: This script can save the current state of network config,
#              and later revert to that config, or commit the new config
#              (by deleting the snapshot). At boot time, if there are
#              uncommitted changes to the network config, they are
#              reverted (and the discarded changes are archived in
#              /var/lib/netcf/network-rollback-*).
#
### END INIT INFO

# special exit code that means a command was issued that is invalid for the
# current state (e.g. change-begin when there is already an open transaction)
EINVALID_IN_THIS_STATE=199

sysconfdir="/etc"
localstatedir="/var"

netconfdir="$sysconfdir"/sysconfig/network-scripts
snapshotdir="$localstatedir"/lib/netcf/network-snapshot
rollbackdirbase="$localstatedir"/lib/netcf/network-rollback

# Source function library.
test ! -r "$sysconfdir"/rc.d/init.d/functions ||
    . "$sysconfdir"/rc.d/init.d/functions

# take a snapshot of current network configuration scripts
change_begin ()
{
    if test -e "$snapshotdir"
    then
        echo "There is already an open transaction ($snapshotdir exists)"
        return $EINVALID_IN_THIS_STATE
    fi
    if ! mkdir -p "$snapshotdir"
    then
        echo "failed to create snapshot directory $snapshotdir"
        return 1
    fi
    for f in "$netconfdir"/ifcfg-* "$netconfdir"/route-* \
             "$netconfdir"/rule-*
    do
        test ! -f "$f" && continue
        if ! cp -p "$f" "$snapshotdir"
        then
            echo "failed to copy $f to $snapshotdir"
            return 1
        fi
    done
    date >"$snapshotdir"/date
}

change_commit ()
{
    if test ! -d "$snapshotdir"
    then
        echo "No pending transaction to commit"
        return $EINVALID_IN_THIS_STATE
    fi
    if ! rm -rf "$snapshotdir"
    then
        echo "Failed to remove obsolete snapshot directory $snapshotdir"
    fi
}

# rollback network configuration to last snapshot (if one exists)
change_rollback ()
{
    if test ! -d "$snapshotdir"
    then
        echo "No pending transaction to rollback"
        return $EINVALID_IN_THIS_STATE
    fi

    rollback_ret=0

    # eliminate all but the last 20 rollback saves
    LC_ALL=C ls -d "$rollbackdirbase"-* 2>/dev/null | head -n -20 |\
    while read r
    do
        if ! rm -rf "$r"
        then
            # indicate an error, but continue
            echo "Failed to remove obsolete rollback directory $r"
            rollback_ret=1
        fi
    done

    # save a copy of the current config before rollback "just in case"
    rollbackdir=$rollbackdirbase-$(date +%Y.%m.%d-%H:%M:%S)
    if ! mkdir -p "$rollbackdir"
    then
        echo "failed to create rollback directory $rollbackdir"
        return 1
    fi
    for f in "$netconfdir"/ifcfg-* "$netconfdir"/route-* \
             "$netconfdir"/rule-*
    do
        test ! -f "$f" && continue
        if ! cp -p "$f" "$rollbackdir"
        then
            echo "failed to copy $f to $rollbackdir"
            return 1
        fi
    done

    # There are 4 classes of files, each handled slightly differently to
    # minimize disruption in services:
    # 1) file in both, unmodified - just erase the snapshot copy
    # 2) file in both, modified   - copy the snapshot version over
    #                               the current & erase copy
    # 3) file in current only     - remove the file
    # 4) file in snapshot only    - copy the snapshot file to current
    #
    # We handle the 1st three cases in one loop going through all
    # current config files, and what is left over in snapshotdir is,
    # by definition, case 4.
    #
    # (NB: we can't mv the files, because then the selinux labels
    # don't get reset properly.)

    for f in "$netconfdir"/ifcfg-* "$netconfdir"/route-* \
             "$netconfdir"/rule-*
    do
        test ! -f "$f" && continue

        snapshotf=$snapshotdir/${f##*/}
        if test -f "$snapshotf"
        then
            # Case (1) & (2) (only copies if they're different)
            if ! cmp -s "$snapshotf" "$f"
            then
                if ! cp -pf "$snapshotf" "$f"
                then
                    echo "failed to restore $snapshotf to $f"
                    return 1
                fi
            fi
            if ! rm -f "$snapshotf"
            then
                # indicate an error, but continue
                echo "Failed to remove obsolete snapshot file $snapshotf"
                rollback_ret=1
            fi
        else
            # Case (3)
            if ! rm -f "$f"
            then
                # indicate an error, but continue
                echo "Failed to remove unwanted config file $f"
                rollback_ret=1
            fi
        fi
    done

    # Case (4)
    for f in "$snapshotdir"/ifcfg-* "$snapshotdir"/route-* \
             "$snapshotdir"/rule-*
    do
        test ! -f "$f" && continue
        if ! cp -pf "$f" "$netconfdir"
        then
            echo "failed to restore $f to $netconfdir"
            return 1
        fi
    done

    test -f "$snapshotdir"/date \
     && echo Rolled back to network config state of $(cat "$snapshotdir"/date)

    if ! rm -rf "$snapshotdir"
    then
        # indicate an error, but continue
        echo "Failed to remove obsolete snapshot directory $snapshotdir"
        rollback_ret=1
    fi

    return $rollback_ret
}

# usage [val]
# Display usage string, then exit with VAL (defaults to 2).
usage() {
    echo $"Usage: $0 {change-begin|change-commit|change-rollback|snapshot-dir|start|stop|status|restart|condrestart|try-restart|reload|force-reload}"
    exit ${1-2}
}

# See how we were called.
if test $# != 1; then
    usage
fi

retval=0
case "$1" in
    # commands required in all Fedora initscripts
    start|restart|reload|force-reload|condrestart|try-restart)
        echo -n $"Running $prog $1: "
        change_rollback
        # ignore the "no pending transaction" error
        test "$retval" != "$EINVALID_IN_THIS_STATE" && retval=$?
        echo
        ;;
    stop|status)
        if test -d "$snapshotdir"
        then
            echo $"There is an open transaction"
        else
            echo $"No open transaction"
        fi
        ;;

    --help)
        usage 0
        ;;
    # specific to netcf-transaction
    change-begin)
        change_begin
        retval=$?
        ;;
    change-commit)
        change_commit
        retval=$?
        ;;
    change-rollback)
        change_rollback
        retval=$?
        ;;
    snapshot-dir)
        echo $snapshotdir
        ;;
    *)
        usage
        ;;
esac

exit $retval