Re: [IPCop-user] Applying patches the correct way?

[<Use...@zo...>]

wa...@so...(Wayland Sothcott)  29.12.03 14:05

Once upon a time "Wayland Sothcott " shaped the electrons to say...

>Hello,

>When building IP-Cop boxes we have to apply a whole load of patches
>which is time consuming. Some patches require a Reboot and others do
>not. Is it acceptable to apply ALL patches and then do a reboot, or do
>you have to reboot after each patch which requires it?

>Also you have to get online before you can update the patch list. 

More convient without the large overhead of an entire
build system would be:

You only need to mount the "old" iso on "loop",
Copy it on disk, add the patch file as files,
have boot file/catalog and do
mkisofs to have an iso which contains the patch files
(but is still unpatched!)
After installing, you have a shell and can mount the 
CD(if it isn't already) and apply the patches.

(sounds more complicate than it is)




To make a new virus scanner image i use a script idea like this
(Please edit! It will *not* work as it is!)

----------------------

#! //bin/sh
# updates a KNOPPICILLIN Image with new signatures

# edit here your paths and image names
ISONAME=knoppicillin
ISOBOOTROOT=KNOPPIX
ISOROOT=CDROM

# below you may need to edit more.
# this is only an "idea" of a script!


# Copy the CD old image file-by-file to $ISOROOT
# required only once
# mount -o loop=/dev/loop0 $ISONAME.iso /iso
# cp -pr /iso $ISOROOT
# umount /iso


# get new patches
wget -m $WGETPARM URLtopatches1 URLtopatche2 URLtopatche3 etc...


# cleanup
#
# attention: 
# check variable $ISOROOT is not empty  
# if uncommenting the rm 
# the explicit named subdir "tools" should 
# avoid the unwanted side effect of a "rm _rf //"
#
#rm -rf $ISOROOT/$ISOBOOTROOT/tools

mkdir -p $ISOROOT/$ISOBOOTROOT/tools/bin

# make a backup of this script ;-)
cp -p $0 $ISOROOT$ISOBOOTROOT/tools/bin

# copy further files
cp -p patches* $ISOROOT/$ISOBOOTROOT/tools

mkisofs -J -R -hide-rr-moved -pad -b $ISOBOOTROOT/boot.img -c $ISOBOOTROOT/boot.cat -o $ISONAME.iso $ISOROOT/

-----------------------------------------------------------------

I did not test it for IPcop. (And can't currently, sorry)
but a similar script (this is a strip down) works good to make 
a new KNOPPICILLIN CD.

The mkisofs parameters might need changes for IPcop.


Now you have your "own" iso.
under /mnt/cdrom/$ISOBOOTROOT/tools you will find your patches
after mount it.

To test if all went well without burning a CD:
umount -f /mnt/cdrom
mount -o loop=/dev/loop0 $ISOBOOTROOT/$ISONAME.iso /mnt/cdrom

The only tools you need are wget and mkisofs and a kernel
which supports /dev/loop