4 ### suitable for direct use in most SysV-style inits
8 # Required-Start: $local_fs $remote_fs $named $network
9 # Required-Stop: $local_fs $remote_fs $network
10 # Default-Start: 2 3 4 5
12 # Short-Description: tripe Virtual Private Network server
17 ###--------------------------------------------------------------------------
20 [ -f @initconfig@ ] && . @initconfig@
22 : ${prefix=@prefix@} ${exec_prefix=@exec_prefix@}
23 : ${bindir=@bindir@} ${sbindir=@sbindir@}
24 : ${TRIPEDIR=@configdir@} ${TRIPESOCK=@socketdir@/tripesock}
25 : ${pidfile=@pidfile@}
26 : ${tripe=$sbindir/tripe} ${tripectl=$bindir/tripectl}
28 PATH=/usr/bin:/usr/sbin:/bin:/sbin:$bindir
29 export PATH TRIPEDIR TRIPESOCK TRIPE_SLIPIF
31 ###--------------------------------------------------------------------------
32 ### Pre-flight checks.
34 ## Give up if there's no binary.
35 if test ! -x "$tripe" || test ! -x "$tripectl"; then
36 echo >&2 "Not starting/stopping TrIPE: binary files missing"
40 ## Give up if there's no key.
41 if test ! -f "$TRIPEDIR/keyring" || test ! -f "$TRIPEDIR/keyring.pub"; then
42 echo >&2 "Not starting/stopping TrIPE: keyring files missing"
46 ## Check it will work, or at least stands a fighting chance.
48 ## (Having loads of different tunnel types doesn't help any.)
49 case ${tunnel-`$tripe --tunnels | head -1`},`uname -s` in
53 if { test -f /proc/misc && grep -q tun /proc/misc; } ||
57 echo >&2 "$tripe needs the Linux TUN/TAP driver to run."
60 if test -c /dev/net/tun; then
63 echo >&2 "$tripe needs /dev/net/tun, which is missing."
68 ## Linux Unet (obsolete).
70 if { test -f /proc/devices && grep -q unet /proc/devices; } ||
71 modprobe -q unet; then
74 echo >&2 "$tripe needs the Linux UNET driver to run."
77 if test -c /dev/unet; then
80 echo >&2 "$tripe needs /dev/unet, which is missing."
87 ## Don't know how to check the device is working. Check the device file
88 ## exists and hope for the best.
89 if test -c /dev/tun0; then
92 echo >&2 "$tripe needs /dev/tun0, which is missing."
99 if test "$TRIPE_SLIPIF" = ""; then
100 echo >&2 "$tripe needs SLIP interfaces set up!"
105 ## Various kinds of misconfiguration.
107 echo >&2 "CONFIGURATION ERROR"
108 echo >&2 " $tripe is compiled to use a Linux tunnel device, but"
109 echo >&2 " this system is `uname -s`"
113 echo >&2 "CONFIGURATION ERROR"
114 echo >&2 " $tripe is compiled to use a BSD tunnel device, but"
115 echo >&2 " this system is `uname -s`"
120 ###--------------------------------------------------------------------------
121 ### Do what was wanted.
126 echo -n "Starting TrIPE VPN daemon:"
128 ## Check to see whether the daemon is already going. If it can respond
129 ## to a simple request, we'll assume that it is.
130 if $tripectl version >/dev/null 2>/dev/null; then
131 echo " already running"
135 ## Start the server, passing lots of arguments.
136 $tripectl -D -s -p$tripe \
137 -f${logfile-@logfile@} \
139 ${keytag+-S-t}$keytag \
141 ${port+-S-p}${port} \
143 ${group+-G}${group} \
144 ${trace+-S-T}${trace} \
145 ${tunnel+-S-n}${tunnel} \
148 ## Wait for the server to start up. This doesn't usually take long.
149 for i in 1 2 3 4 give-up; do
150 $tripectl help >/dev/null 2>/dev/null && break
154 if [ $i = give-up ]; then
155 echo " wouldn't start"
161 ## Start up the ancillary services.
162 sep=" services [" end=""
163 [ -d $TRIPEDIR/services ] && for i in $TRIPEDIR/services/*; do
164 [ -x $i ] || continue
166 case $name in *~|\#*) continue;; esac
167 if $i --daemon --startup; then
170 echo -n "$sep($name failed)"
176 ## Start up the statically configured peers.
177 sep=" peers [" end=""
178 [ -d $TRIPEDIR/peers ] && for i in $TRIPEDIR/peers/*; do
179 [ -x $i ] || continue
181 case $name in *~|\#*) continue;; esac
185 echo -n "$sep($name failed)"
195 echo -n "Stopping TrIPE VPN daemon:"
197 ## If there's no socket, it must have quit (probably nonviolently).
198 if test ! -S $TRIPESOCK; then
201 ## Ask it to die nicely.
202 elif $tripectl quit >/dev/null 2>&1; then
205 ## If there's no pidfile then tripectl presumably deleted it.
206 elif test ! -f $pidfile; then
207 echo " stale socket found: removing"
210 ## Otherwise kill the process unpleasantly.
211 elif kill `cat $pidfile`; then
212 echo " done (killed violently)"
214 echo " it doesn't want to die!"
220 for i in `$tripectl list`; do
222 $tripectl stats $i | sed 's/^/ /'
228 echo "Keyrings reloaded OK."
231 restart | force-reload)
237 echo >&2 "usage: $0 start|stop|restart|status|reload|force-reload"
243 ###----- That's all, folks --------------------------------------------------