update-proxy-configs 4.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143
  1. #!/bin/bash
  2. #
  3. # The Qubes OS Project, http://www.qubes-os.org
  4. #
  5. # Copyright (C) 2015 Marek Marczykowski-Górecki
  6. # <marmarek@invisiblethingslab.com>
  7. #
  8. # This program is free software; you can redistribute it and/or
  9. # modify it under the terms of the GNU General Public License
  10. # as published by the Free Software Foundation; either version 2
  11. # of the License, or (at your option) any later version.
  12. #
  13. # This program is distributed in the hope that it will be useful,
  14. # but WITHOUT ANY WARRANTY; without even the implied warranty of
  15. # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  16. # GNU General Public License for more details.
  17. #
  18. # You should have received a copy of the GNU General Public License
  19. # along with this program; if not, write to the Free Software
  20. # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
  21. #
  22. #
  23. # Source Qubes library.
  24. # shellcheck source=init/functions
  25. . /usr/lib/qubes/init/functions
  26. BEGIN_MARKER="### QUBES BEGIN ###"
  27. END_MARKER="### QUBES END ###"
  28. set -e
  29. ### helper functions begin ###
  30. # set proxy in given config file
  31. update_conf() {
  32. local CONF_PATH="$1"
  33. local CONF_OPTIONS="$2"
  34. # Ensure that Qubes conf markers are present in the file
  35. if ! grep -q "$BEGIN_MARKER" "$CONF_PATH"; then
  36. if grep -q "$END_MARKER" "$CONF_PATH"; then
  37. echo "ERROR: found QUBES END marker but not QUBES BEGIN in ${CONF_PATH}" >&2
  38. echo "Fix the file by either removing both of them, or adding missing back and retry" >&2
  39. exit 1
  40. fi
  41. cp "$CONF_PATH" "${CONF_PATH}.qubes-orig"
  42. echo "$BEGIN_MARKER" >> "$CONF_PATH"
  43. echo "$END_MARKER" >> "$CONF_PATH"
  44. elif ! grep -q "$END_MARKER" "$CONF_PATH"; then
  45. echo "ERROR: found QUBES BEGIN marker but not QUBES END in ${CONF_PATH}" >&2
  46. echo "Fix the file by either removing both of them, or adding missing back and retry" >&2
  47. exit 1
  48. fi
  49. # Prepare config block
  50. local tmpfile
  51. tmpfile=$(mktemp)
  52. cat > "${tmpfile}" <<EOF
  53. # This part of configuration, until QUBES END, is automatically generated by
  54. # $0. All changes here will be overriden.
  55. # If you want to override any option set here, set it again to desired value,
  56. # below this section
  57. $CONF_OPTIONS
  58. EOF
  59. # And insert it between the markers
  60. sed -i -e "/^$BEGIN_MARKER$/,/^$END_MARKER$/{
  61. /^$END_MARKER$/b
  62. /^$BEGIN_MARKER$/!d
  63. r ${tmpfile}
  64. }" "${CONF_PATH}"
  65. rm -f "${tmpfile}"
  66. }
  67. ### helper functions end
  68. # Determine whether the proxy should be used
  69. if qsvc yum-proxy-setup || qsvc updates-proxy-setup ; then
  70. PROXY_ADDR="http://127.0.0.1:8082/"
  71. PROXY_CONF_ENTRY="proxy=$PROXY_ADDR"
  72. else
  73. PROXY_ADDR=""
  74. # do not proxy at all (for example dnf.conf doesn't tolerate empty entry)
  75. PROXY_CONF_ENTRY=""
  76. fi
  77. # For programs supporting .d style configs, it's simple
  78. if [ -d /etc/apt/apt.conf.d ]; then
  79. if [ -n "$PROXY_ADDR" ]; then
  80. cat > /etc/apt/apt.conf.d/01qubes-proxy <<EOF
  81. ### This file is automatically generated by Qubes ($0 script).
  82. ### All modifications here will be lost.
  83. ### If you want to override some of this settings, create another file under
  84. ### /etc/apt/apt.conf.d.
  85. Acquire::http::Proxy "$PROXY_ADDR";
  86. Acquire::tor::proxy "$PROXY_ADDR";
  87. EOF
  88. else
  89. rm -f /etc/apt/apt.conf.d/01qubes-proxy
  90. fi
  91. fi
  92. # Yum at least supports including an individual config files
  93. if [ -d /etc/yum.conf.d ]; then
  94. cat > /etc/yum.conf.d/qubes-proxy.conf <<EOF
  95. ### This file is automatically generated by Qubes ($0 script).
  96. ### All modifications here will be lost.
  97. ### If you want to override some of this settings, add them in /etc/yum.conf
  98. ### below a "include=/etc/yum.conf.d/qubes-proxy.conf" line.
  99. $PROXY_CONF_ENTRY
  100. EOF
  101. fi
  102. # Pacman (archlinux) also
  103. if [ -d /etc/pacman.d ]; then
  104. if [ -n "$PROXY_ADDR" ]; then
  105. cat > /etc/pacman.d/01-qubes-proxy.conf <<EOF
  106. ### This file is automatically generated by Qubes ($0 script).
  107. ### All modifications here will be lost.
  108. ### If you want to override some of this settings, create another file under
  109. ### /etc/pacman.d
  110. [options]
  111. XferCommand = ALL_PROXY=$PROXY_ADDR /usr/bin/curl -C - -f %u > %o
  112. EOF
  113. else
  114. rm -r /etc/pacman.d/01-qubes-proxy.conf
  115. fi
  116. fi
  117. # DNF configuration doesn't support including other files
  118. # https://bugzilla.redhat.com/show_bug.cgi?id=1352234
  119. if [ -e /etc/dnf/dnf.conf ]; then
  120. update_conf /etc/dnf/dnf.conf "$PROXY_CONF_ENTRY"
  121. fi
  122. # The same goes for PackageKit...
  123. # https://bugs.freedesktop.org/show_bug.cgi?id=96788
  124. if [ -e /etc/PackageKit/PackageKit.conf ]; then
  125. update_conf /etc/PackageKit/PackageKit.conf "ProxyHTTP=$PROXY_ADDR"
  126. fi