agama/live/live-root/usr/lib/dracut/modules.d/99agama-dud/agama-dud-apply.sh

#!/bin/bash

[ -e /dracut-state.sh ] && . /dracut-state.sh

# see /usr/lib/dracut/modules.d/99base/dracut-lib.sh
# or https://github.com/dracut-ng/dracut-ng/blob/main/modules.d/80base/dracut-lib.sh
. /lib/dracut-lib.sh
# see /usr/lib/dracut/modules.d/99img-lib/img-lib.sh
# or https://github.com/dracut-ng/dracut-ng/blob/main/modules.d/70img-lib/img-lib.sh
. /lib/img-lib.sh

DUD_DIR="$NEWROOT/run/agama/dud"
AGAMA_CLI="/usr/bin/agama"
AGAMA_DUD_INFO="/tmp/agamadud.info"
DUD_RPM_REPOSITORY="$NEWROOT/var/lib/agama/dud/repo"

shopt -s nullglob

# Applies all the updates
#
# Reads the URL of the updates from $AGAMA_DUD_INFO and process each one.
apply_updates() {
  local file
  local dud_url
  local dud_root
  local options
  index=0

  # make local devices available to "agama download"
  mount -o bind /dev "$NEWROOT"/dev
  mount -o bind /run "$NEWROOT"/run
  mount -o bind /sys "$NEWROOT"/sys
  ln -s /run/NetworkManager/resolv.conf "$NEWROOT"/etc/resolv.conf

  # make sure the HTTPS downloads work correctly
  configure_ssl

  # ignore SSL problems when the "inst.dud_insecure" or "inst.dud_insecure=1" boot options are present
  if getargbool 0 inst.dud_insecure; then
    echo "WARNING: Disabling SSL checks in DUD downloads"
    options="--insecure"
  fi

  while read -r dud_url; do
    mkdir -p "$DUD_DIR"
    filename=${dud_url##*/}
    file="${DUD_DIR}/${filename}"
    # FIXME: use an index because two updates, coming from different places, can have the same name.
    echo "Fetching a Driver Update Disk from $dud_url to ${file}"
    if ! "$NEWROOT/usr/bin/chroot" "$NEWROOT" "$AGAMA_CLI" $options download "$dud_url" "${file##"$NEWROOT"}"; then
      warn "Failed to fetch the Driver Update Disk"
      continue
    fi

    # The $dir could be a temporary one created by each function.
    dir="$DUD_DIR/dud_$(printf "%03d" $index)"
    mkdir -p "$dir"

    format=$("$NEWROOT/usr/bin/chroot" "$NEWROOT" file "${file##"$NEWROOT"}")
    case "$format" in
    *RPM*)
      apply_rpm_update "$file" "$dir"
      ;;

    *)
      unpack_dud_update "$file" "$dir"
      apply_dud_update "$dir"
      ;;
    esac

    ((index++))
  done <$AGAMA_DUD_INFO

  rm -r "$DUD_DIR"
  umount "$NEWROOT"/dev
  umount "$NEWROOT"/run
  umount "$NEWROOT"/sys
  rm "$NEWROOT"/etc/resolv.conf
}

# Read ID + VERSION_ID from /etc/os-release and set dist = "$ID$VERSION_ID".
#
# For rolling releases as in Tumbleweed or Slowroll, ignore VERSION_ID as it
# changes too often.
get_dist() {
  dist=
  if [ -f "/etc/os-release" ] ; then
    . "/etc/os-release"
    if [ -n "$ID" -a -n "$VERSION_ID" ] ; then
      # Tumbleweed and Slowroll use a date (e.g. "20261231") as VERSION_ID.
      # In this case, do not include it.
      if [[ "$VERSION_ID" =~ ^[0-9]{8}$ ]] ; then
        dist="$ID"
      else
        dist="$ID$VERSION_ID"
      fi
    fi
  fi
}

# Applies an update from an RPM package
#
# It extracts the RPM content and adjust the alternative links.
apply_rpm_update() {
  file=$1
  dir=$2

  echo "Apply update from an RPM package"
  unpack_rpm "$file" "$dir"
  install_update "$dir"
}

# Unpacks a driver update archive (DUD) to a directory
#
unpack_dud_update() {
  file=$1
  dir=$2

  echo "Unpack Driver Update Disk archive"
  unpack_img "$file" "$dir"
}

# Applies a driver update (DUD)
#
#   1. Copy the inst-sys updates to the $NEWROOT system.
#   2. Update agamactl, agama-autoyast and agama-proxy-setup alternative links.
#   3. Copy the packages to the $DUD_RPM_REPOSITORY.
apply_dud_update() {
  dir=$1

  echo "Apply update from a Driver Update Disk archive"

  # notes:
  # (1) there can be several updates in a single archive; each with a
  #     prefix directory consisting of a number
  # (2) there can be ARCH-DIST subdirs with multiple dists - pick one and
  #     ignore the others

  get_dist
  # fallback: no dist info -> match any
  [ -z "$dist" ] && dist='*'
  arch=$(uname -m)
  for base_dir in "${dir}"/linux/suse "${dir}"/[0-9]*/linux/suse; do
    [ -d "$base_dir" ] || continue
    for dud_root in "${base_dir}/${arch}"-$dist; do
      [ -d "$dud_root" ] || continue
      install_update "${dud_root}/inst-sys"
      copy_packages "$dud_root" "$DUD_RPM_REPOSITORY"
      update_kernel_modules "$dud_root"
      break
    done
  done
}

# Extracts an RPM file
#
# It uses rpm2cpio from the $NEWROOT.
unpack_rpm() {
  source=$1
  dest=$2
  echo "Unpacking RPM ${source} to ${dest}"

  mkdir -p "$dest"
  pushd "$dest" || exit 1
  "$NEWROOT/usr/bin/chroot" "$NEWROOT" /usr/bin/rpm2cpio "${source##"$NEWROOT"}" |
    cpio --extract --make-directories --preserve-modification-time --unconditional
  popd || exit 1
}

# Applies an update to the installation system
#
# Updates are applied by copying files instead of installing packages. For that
# reason, it might be needed to do some adjustments "manually", like settings
# the alternative links.
install_update() {
  dud_dir=$1
  echo "Apply inst-sys update from ${dud_dir}"

  cp -a "${dud_dir}"/* "$NEWROOT"

  set_alternative "$dud_dir" "agama-autoyast"
  set_alternative "$dud_dir" "agamactl"
  set_alternative "$dud_dir" "agama-proxy-setup"
}

# Sets the alternative links
#
# It identifies whether it should use alts or update-alternatives.
set_alternative() {
  dud_instsys=$1
  name=$2
  # Use the same value used during RPMs installation.
  priority=150000

  executables=("$dud_instsys/usr/bin/${name}.ruby"*-*)
  executable="${executables[0]##"$dud_instsys"}"

  if [ -n "$executable" ]; then
    alts=$("$NEWROOT/usr/bin/chroot" "$NEWROOT" /usr/bin/alts -l "$executable")
    if [ -n "$alts" ]; then
      echo "Setting alternative ${executable} using alts"
      "$NEWROOT/usr/bin/chroot" "$NEWROOT" "/usr/bin/alts" -n "$name" "$executable"
    else
      "$NEWROOT/usr/bin/chroot" "$NEWROOT" /usr/sbin/update-alternatives \
        --install "/usr/bin/$name" "$name" "$executable" "$priority"
      "$NEWROOT/usr/bin/chroot" "$NEWROOT" /usr/sbin/update-alternatives \
        --set "$name" "$executable"
    fi

  fi
}

# Copies the packages to use during installation
#
# This function is mainly a PoC.
#
# This is a simplistic version that just copies all the RPMs to the new repository.
# In the future, it might need to put each package under a different repository depending
# on the distribution (e.g., "/run/agama/dud/repo/tw" for "x86_64-tw").
copy_packages() {
  dud_dir=$1
  repo_dir=$2
  echo "Copy packages from ${dud_dir} to ${repo_dir}"

  for rpm in "$dud_dir"/install/*.rpm; do
    mkdir -p "$repo_dir"
    cp "$rpm" "$repo_dir"
  done
}

# Updates kernel modules
#
# It copies the kernel modules from the Driver Update Disk to the system under
# /sysroot. If it finds a `module.order` file, it unloads the modules included
# in the list and add them to /etc/modules-load.d/99-agama.conf file so they
# will be loaded by systemd after pivoting.
#
# If the `module.order` file does not exits, it unloads all the modules and
# adds the names to the 99-agama.conf file so the will be loaded.
update_kernel_modules() {
  local dud_dir=$1
  local kernel_modules_dir
  kernel_modules_dir="${NEWROOT}/lib/modules/$(uname -r)/updates"
  local dud_modules_dir="${dud_dir}/modules"
  local module_name

  # find kernel modules in the DUD
  local dud_modules=("${dud_modules_dir}"/*.ko*)

  # finish if no kernel module is included in DUD
  if ((${#dud_modules[@]} == 0)); then
    echo "Skipping kernel modules update"
    return
  fi

  # copy the kernel modules
  echo "Copying kernel modules to ${kernel_modules_dir}"
  mkdir -p "${kernel_modules_dir}"
  cp "${dud_modules[@]}" "${kernel_modules_dir}"

  # unload modules in the module.order file and make sure they will be loaded
  if [ -f "${dud_modules_dir}/module.order" ]; then
    setup_from_modules_order "$dud_modules_dir"
  else
    setup_modules "${dud_modules[@]}"
  fi

  # update modules dependencies on the live medium
  info "Updating modules dependencies..."
  depmod -a -b "$NEWROOT"
}

# Sets up the kernel modules according to the modules.order file.
#
# Unloads the modules in reverse order and adds them to the 99-agama.conf file
# to be loaded by systemd.
setup_from_modules_order() {
  dud_modules_dir=$1

  readarray -t module_order <"${dud_modules_dir}/module.order"
  # unload the modules in reverse order
  local idx
  idx=("${!module_order[@]}")
  for ((i = ${#idx[@]} - 1; i >= 0; i--)); do
    rmmod "${module_order[$i]}" 2>&1
  done

  cat "${dud_modules_dir}/module.order" >>"${NEWROOT}/etc/modules-load.d/99-agama.conf"
}

# Sets up the kernel modules.
#
# Unloads the modules and adds them to the 99-agama.conf file to be loaded by
# systemd.
setup_modules() {
  dud_modules=("$@")

  # unload the kernel modules
  for module in "${dud_modules[@]}"; do
    echo "Unloading kernel module ${module}"
    module_name=$(basename "$module")
    module_name=${module_name%.ko*}
    rmmod "${module_name}" 2>&1
    echo "${module_name}" >>"${NEWROOT}/etc/modules-load.d/99-agama.conf"
  done
}

# link the SSL certificates and related configuration from the root image so "agama download"
# works correctly with the HTTPS resources (expects using correct and well-known certificates)
configure_ssl() {
  # link the SSL certificates
  ! [ -d /etc/ssl ] && ln -s "$NEWROOT/etc/ssl" /etc

  # link crypto configuration (which ciphers are allowed, etc)
  ! [ -d /etc/crypto-policies ] && ln -s "$NEWROOT/etc/crypto-policies" /etc
}

# there can be (already unpacked) driver updates directly in the initrd
apply_dud_update ""

if [ -f "$AGAMA_DUD_INFO" ]; then
  apply_updates
fi