sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-11-13 00:00:38 -05:00
Code Issues Projects Releases Wiki Activity

sec-updater: Use latest versions

Browse Source
This commit is contained in:
Andreas Steffen 2021-09-07 18:55:02 +02:00
parent d23ca7f345
commit 91896264b2
1 changed files with 44 additions and 105 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

145
src/sec-updater/sec-updater.sh
View File

@ -4,17 +4,17 @@ DIR="/etc/pts"
DISTS_DIR="$DIR/dists" DISTS_DIR="$DIR/dists"
DATE=`date +%Y%m%d-%H%M` DATE=`date +%Y%m%d-%H%M`
UBUNTU="http://security.ubuntu.com/ubuntu" UBUNTU="http://security.ubuntu.com/ubuntu"
UBUNTU_VERSIONS="bionic xenial" UBUNTU_VERSIONS="focal bionic"
UBUNTU_DIRS="main multiverse restricted universe" UBUNTU_DIRS="main multiverse restricted universe"
UBUNTU_ARCH="binary-amd64" UBUNTU_ARCH="binary-amd64"
DEBIAN="http://security.debian.org" DEBIAN="http://security.debian.org"
DEBIAN_VERSIONS="stretch jessie wheezy" DEBIAN_VERSIONS="buster"
DEBIAN_DIRS="main contrib non-free" DEBIAN_DIRS="main contrib non-free"
DEBIAN_ARCH="binary-amd64 binary-armhf" DEBIAN_ARCH="binary-amd64 binary-armhf"
RASPIAN="http://archive.raspberrypi.org/debian" RASPBIAN="http://archive.raspberrypi.org/debian"
RASPIAN_VERSIONS="jessie wheezy" RASPBIAN_VERSIONS="buster"
RASPIAN_DIRS="main" RASPBIAN_DIRS="main"
RASPIAN_ARCH="binary-armhf" RASPBIAN_ARCH="binary-armhf"
CMD=/usr/sbin/sec-updater CMD=/usr/sbin/sec-updater
CMD_LOG="$DIR/logs/$DATE-sec-update.log" CMD_LOG="$DIR/logs/$DATE-sec-update.log"
DEL_LOG=1 DEL_LOG=1
@ -48,35 +48,51 @@ do
mkdir -p $v-updates/$a mkdir -p $v-updates/$a
for d in $DEBIAN_DIRS for d in $DEBIAN_DIRS
do do
if [ $v = "stretch" ]
then
wget -nv $DEBIAN/dists/$v/updates/$d/$a/Packages.xz -O $v-updates/$a/Packages-$d.xz wget -nv $DEBIAN/dists/$v/updates/$d/$a/Packages.xz -O $v-updates/$a/Packages-$d.xz
unxz -f $v-updates/$a/Packages-$d.xz unxz -f $v-updates/$a/Packages-$d.xz
else
wget -nv $DEBIAN/dists/$v/updates/$d/$a/Packages.bz2 -O $v-updates/$a/Packages-$d.bz2
bunzip2 -f $v-updates/$a/Packages-$d.bz2
fi
done done
done done
done done
# Download Raspian distribution information # Download Raspbian distribution information
for v in $RASPIAN_VERSIONS for v in $RASPBIAN_VERSIONS
do do
for a in $RASPIAN_ARCH for a in $RASPBIAN_ARCH
do do
mkdir -p $v-raspian/$a mkdir -p $v-raspbian/$a
for d in $RASPIAN_DIRS for d in $RASPBIAN_DIRS
do do
wget -nv $RASPIAN/dists/$v/$d/$a/Packages.gz -O $v-raspian/$a/Packages-$d.gz wget -nv $RASPBIAN/dists/$v/$d/$a/Packages.gz -O $v-raspbian/$a/Packages-$d.gz
gunzip -f $v-raspian/$a/Packages-$d.gz gunzip -f $v-raspbian/$a/Packages-$d.gz
done done
done done
done done
# Run sec-updater in distribution information # Run sec-updater in distribution information
for f in focal-security/binary-amd64/*
do
echo "security: $f"
$CMD --os "Ubuntu 20.04" --arch "x86_64" --file $f --security \
--uri $UBUNTU >> $CMD_LOG 2>&1
if [ $? -eq 0 ]
then
DEL_LOG=0
fi
done
for f in focal-updates/binary-amd64/*
do
echo "updates: $f"
$CMD --os "Ubuntu 20.04" --arch "x86_64" --file $f \
--uri $UBUNTU >> $CMD_LOG 2>&1
if [ $? -eq 0 ]
then
DEL_LOG=0
fi
done
for f in bionic-security/binary-amd64/* for f in bionic-security/binary-amd64/*
do do
echo "security: $f" echo "security: $f"
@ -99,32 +115,10 @@ do
fi fi
done done
for f in xenial-security/binary-amd64/* for f in buster-updates/binary-amd64/*
do do
echo "security: $f" echo "security: $f"
$CMD --os "Ubuntu 16.04" --arch "x86_64" --file $f --security \ $CMD --os "Debian 10" --arch "x86_64" --file $f --security \
--uri $UBUNTU >> $CMD_LOG 2>&1
if [ $? -eq 0 ]
then
DEL_LOG=0
fi
done
for f in xenial-updates/binary-amd64/*
do
echo "updates: $f"
$CMD --os "Ubuntu 16.04" --arch "x86_64" --file $f \
--uri $UBUNTU >> $CMD_LOG 2>&1
if [ $? -eq 0 ]
then
DEL_LOG=0
fi
done
for f in stretch-updates/binary-amd64/*
do
echo "security: $f"
$CMD --os "Debian 9.0" --arch "x86_64" --file $f --security \
--uri $DEBIAN >> $CMD_LOG 2>&1 --uri $DEBIAN >> $CMD_LOG 2>&1
if [ $? -eq 0 ] if [ $? -eq 0 ]
then then
@ -132,10 +126,10 @@ do
fi fi
done done
for f in jessie-updates/binary-amd64/* for f in buster-updates/binary-armhf/*
do do
echo "security: $f" echo "security: $f"
$CMD --os "Debian 8.0" --arch "x86_64" --file $f --security \ $CMD --os "Debian 10" --arch "armhf" --file $f --security \
--uri $DEBIAN >> $CMD_LOG 2>&1 --uri $DEBIAN >> $CMD_LOG 2>&1
if [ $? -eq 0 ] if [ $? -eq 0 ]
then then
@ -143,66 +137,11 @@ do
fi fi
done done
for f in wheezy-updates/binary-amd64/* for f in buster-raspbian/binary-armhf/*
do do
echo "security: $f" echo "security: $f"
$CMD --os "Debian 7.0" --arch "x86_64" --file $f --security \ $CMD --os "Raspbian 10" --arch "armhf" --file $f --security \
--uri $DEBIAN >> $CMD_LOG 2>&1 --uri $RASPBIAN >> $CMD_LOG 2>&1
if [ $? -eq 0 ]
then
DEL_LOG=0
fi
done
for f in stretch-updates/binary-armhf/*
do
echo "security: $f"
$CMD --os "Debian 9.0" --arch "armhf" --file $f --security \
--uri $DEBIAN >> $CMD_LOG 2>&1
if [ $? -eq 0 ]
then
DEL_LOG=0
fi
done
for f in jessie-updates/binary-armhf/*
do
echo "security: $f"
$CMD --os "Debian 8.0" --arch "armhf" --file $f --security \
--uri $DEBIAN >> $CMD_LOG 2>&1
if [ $? -eq 0 ]
then
DEL_LOG=0
fi
done
for f in wheezy-updates/binary-armhf/*
do
echo "security: $f"
$CMD --os "Debian 7.0" --arch "armhf" --file $f --security \
--uri $DEBIAN >> $CMD_LOG 2>&1
if [ $? -eq 0 ]
then
DEL_LOG=0
fi
done
for f in jessie-raspian/binary-armhf/*
do
echo "security: $f"
$CMD --os "Debian 8.0" --arch "armv7l" --file $f --security \
--uri $RASPIAN >> $CMD_LOG 2>&1
if [ $? -eq 0 ]
then
DEL_LOG=0
fi
done
for f in wheezy-raspian/binary-armhf/*
do
echo "security: $f"
$CMD --os "Debian 7.11" --arch "armv7l" --file $f --security \
--uri $RASPIAN >> $CMD_LOG 2>&1
if [ $? -eq 0 ] if [ $? -eq 0 ]
then then
DEL_LOG=0 DEL_LOG=0