Factory Installer.

src/platform/memento_softwareupdate/memento_updater.sh

 #!/bin/bash
 
 # Copyright (c) 2009 The Chromium OS Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # This is the autoupdater for Memento. When called it consults Omaha to see
 # if there's an update available. If so, it downloads it to the other
 # partition on the Memento USB stick, then alters the MBR and partitions
 # as needed so the next reboot will boot into the newly installed partition.
 # Care is taken to ensure that when this exits the USB stick is configured
 # to boot into the same partition as before or into the new partition,
 # however there may be a small time window when this is not the case. Such a
 # window should be about 1 second or less, and we tolerate that since this
 # is for testing and not a real autoupdate solution for the long run.
 
-source `dirname "$0"`/memento_updater_logging.sh
+source `dirname "$0"`/memento_updater_logging.sh || exit 1
+. /usr/lib/shflags || exit 1
+
+DEFINE_boolean force_update $FLAGS_FALSE \
+  "Force update"
+DEFINE_string install_url "" \
+  "Skip Omaha; Install image at this URL."
+DEFINE_string install_url_checksum "" \
+  "When using --install_url, the corresponding checksum"
+DEFINE_string dst_partition "" \
+  "If set, force installation onto the partition given."
+DEFINE_boolean allow_removable_boot $FLAGS_FALSE \
+  "Run even if booted from removable media."
+DEFINE_string force_track "" \
+  "If set, force a given track to be sent to Omaha"
+
+# Parse command line
+FLAGS "$@" || exit 1
+eval set -- "${FLAGS_ARGV}"
 
 # make sure we're root
 if [ "root" != $(whoami) ]
 then
   echo run this script as root
   exit 1
 fi
 
 # check that this script doesn't run concurrently
 PID_FILE=/tmp/memento_updater_lock
 if [[ -f "$PID_FILE" && ! -d /proc/`cat $PID_FILE` ]]
 then
   # process holding lock file is dead. clean up lockfile
   rm -rf "$PID_FILE"
 fi
 
 # make sure we're not booted from USB
-HAS_INITRD=$(grep ' initrd=' /proc/cmdline | wc -l)
-if [ "$HAS_INITRD" = "1" ]
-then
+ROOTDEV=$(rootdev)
+# Remove numbers at end of rootfs device.
+SRC=${ROOTDEV%%[0-9]*}
+REMOVABLE=$(cat /sys/block/${SRC#/dev/}/removable)
+if [[ "$REMOVABLE" = "1" && \
+      "${FLAGS_allow_removable_boot}" = "${FLAGS_FALSE}" ]]; then
   log not updating because we booted from USB
   exit 1
 fi
 
-# make sure update hasn't already completed
-UPDATED_COMPLETED_FILE="/tmp/memento_autoupdate_completed"
-if [ -f "$UPDATED_COMPLETED_FILE" ]
-then
-  exit 0
+if [ -z "${FLAGS_dst_partition}" ]; then
+  # make sure update hasn't already completed
+  UPDATED_COMPLETED_FILE="/tmp/memento_autoupdate_completed"
+  if [ -f "$UPDATED_COMPLETED_FILE" ]
+  then
+    exit 0
+  fi
 fi
 
 if ( set -o noclobber; echo "$$" > "$PID_FILE") 2> /dev/null; 
 then
   true
 else
   log "Failed to acquire lockfile: $PID_FILE." 
   log "Held by $(cat $PID_FILE)"
   exit 1
 fi
 # remove lockfile when we exit
 trap 'rm -f "$PID_FILE"; log Memento AutoUpdate terminating; exit $?' \
     INT TERM EXIT
 
-if [ x$1 = "x-f" ]; then
-  log "Forced update requested"
-  ForceUpdate="yes"
-  shift
-fi
-
 log Memento AutoUpdate starting
 
 # See if we're forcing an update from a specific URL
-if [ "x" = "x$1" ]
+if [ -z "$FLAGS_install_url" ]
 then
   # abort if autoupdates have been disabled, but only when an update image
   # isn't forced
   UPDATES_DISABLED_FILE="/var/local/disable_software_update"
   if [ -f "$UPDATES_DISABLED_FILE" ]
   then
     log Updates disabled. Aborting.
     exit 0
   fi
 
   # check w/ omaha to see if there's an update
-  if [ "$ForceUpdate" = "yes" ]; then
-    OMAHA_CHECK_OUTPUT=$(`dirname "$0"`/ping_omaha.sh "ForcedUpdate")
-  else
-    OMAHA_CHECK_OUTPUT=$(`dirname "$0"`/ping_omaha.sh)
+  EXTRA_PING_ARGS=""
+  if [ "${FLAGS_force_track}" != "" ]; then
+    EXTRA_PING_ARGS="${EXTRA_PING_ARGS} --track=${FLAGS_force_track}"
   fi
+  if [ ${FLAGS_force_update} -eq ${FLAGS_TRUE} ]; then
+    EXTRA_PING_ARGS="${EXTRA_PING_ARGS} --app_version=ForcedUpdate"
+  fi
+  OMAHA_CHECK_OUTPUT=$(`dirname "$0"`/ping_omaha.sh ${EXTRA_PING_ARGS})
   IMG_URL=$(echo "$OMAHA_CHECK_OUTPUT" | grep '^URL=' | cut -d = -f 2-)
   CHECKSUM=$(echo "$OMAHA_CHECK_OUTPUT" | grep '^HASH=' | cut -d = -f 2-)
 else
-  log User forced an update from: "$1" checksum: "$2"
-  IMG_URL="$1"
-  CHECKSUM="$2"
+  if [ -z "$FLAGS_install_url_checksum" ]; then
+    log Specified --install_url, but not --install_url_checksum. Aborting.
+    exit 1
+  fi
+  log User forced an update from: "$FLAGS_install_url" checksum: \
+    "$FLAGS_install_url_checksum"
+  IMG_URL="$FLAGS_install_url"
+  CHECKSUM="$FLAGS_install_url_checksum"
 fi
 
 APP_VERSION=$(echo "$OMAHA_CHECK_OUTPUT" | grep '^APP_VERSION=' | \
   cut -d = -f 2-)
 
 if [[ -z "$IMG_URL" || -z "$CHECKSUM" ]]
 then
   log no update
   exit 0
 fi
-# TODO(adlr): make sure we have enough space for the download. we are
+# TODO(adlr): make sure we have enough space for the download. This script is
 # already correct if we don't have space, but it would be nice to fail
 # fast.
 log Update Found: $IMG_URL checksum: $CHECKSUM
 
 # Figure out which partition I'm on, and which to download to.
 LOCAL_DEV=$(rootdev)
 
 # We install onto the other partition so if we end in 3, other ends in 5, and
 # vice versa
-INSTALL_DEV=$(echo $LOCAL_DEV | tr '35' '53')
+if [ -n "${FLAGS_dst_partition}" ]; then
+  INSTALL_DEV="${FLAGS_dst_partition}"
+else
+  INSTALL_DEV=$(echo $LOCAL_DEV | tr '35' '53')
+fi
 NEW_PART_NUM=${INSTALL_DEV##*/*[a-z]}
 # The kernel needs to be installed to its own partition. We'll handle that in
 # the postinst script (from the new rootfs). partitions 2&3 are image A,
 # partitions 4&5 are image B.
 KINSTALL_DEV=$(echo $INSTALL_DEV | tr '35' '24')
 
 # Find whole disk device.
-ROOT_DEV=${LOCAL_DEV%%[0-9]*}
+ROOT_DEV=${INSTALL_DEV%%[0-9]*}
 
 # Do some device sanity checks.
 if ! expr match "$LOCAL_DEV" '^/dev/[a-z][a-z]*[12345]$' > /dev/null
 then
   log "didnt find good local device. local: $LOCAL_DEV install: $INSTALL_DEV"
   exit 1
 fi
 if ! expr match "$INSTALL_DEV" '^/dev/[a-z][a-z]*[12345]$' > /dev/null
 then
   log "didnt find good install device. local: $LOCAL_DEV install: $INSTALL_DEV"
@@ skipping 73 matching lines @@
 # it's best not to interrupt the script from this point on out, since it
 # should really be doing these things atomically. hopefully this part will
 # run rather quickly.
 
 # tell the new image to make itself "ready"
 log running postinst on the downloaded image
 MOUNTPOINT=/tmp/newpart
 mkdir -p "$MOUNTPOINT"
 mount "$INSTALL_DEV" "$MOUNTPOINT"
 
-# Check version of new software
-NEW_VERSION=$(grep ^GOOGLE_RELEASE "$MOUNTPOINT"/etc/lsb-release | \
-              cut -d = -f 2-)
-if [ "x$NEW_VERSION" = "x" ]
-then
-  log "Can't find new version number. aborting update"
-  umount "$MOUNTPOINT"
-  rmdir "$MOUNTPOINT"
-  exit 1
-else
-  # See if it's newer than us
-  if [ "$ForceUpdate" != "yes" ] &&
-    version_number_greater_than "$APP_VERSION" "$NEW_VERSION"
+# Check version of new software if not forcing a dst partition
+if [ -z "${FLAGS_dst_partition}" ]; then
+  NEW_VERSION=$(grep ^GOOGLE_RELEASE "$MOUNTPOINT"/etc/lsb-release | \
+                cut -d = -f 2-)
+  if [ "x$NEW_VERSION" = "x" ]
   then
-    log "Can't upgrade to older version: " "$NEW_VERSION"
+    log "Can't find new version number. aborting update"
     umount "$MOUNTPOINT"
     rmdir "$MOUNTPOINT"
     exit 1
+  else
+    # See if it's newer than us
+    if [ "${FLAGS_force_update}" != "${FLAGS_TRUE}" ] &&
+      version_number_greater_than "$APP_VERSION" "$NEW_VERSION"
+    then
+      log "Can't upgrade to older version: " "$NEW_VERSION"
+      umount "$MOUNTPOINT"
+      rmdir "$MOUNTPOINT"
+      exit 1
+    fi
   fi
 fi
 
 "$MOUNTPOINT"/postinst "$INSTALL_DEV" "$KINSTALL_DEV" 2>&1 | \
   cat >> "$MEMENTO_AU_LOG"
 [ "${PIPESTATUS[*]}" = "0 0" ]
 POSTINST_RETURN_CODE=$?
 umount "$MOUNTPOINT"
 rmdir "$MOUNTPOINT"
 
 # $1 is return code, $2 is command
 function abort_update_if_cmd_failed_long {
   if [ "$1" -ne "0" ]
   then
     log "$2 failed with error code  $1 . aborting update"
     exit 1
   fi
 }
 
 function abort_update_if_cmd_failed {
   abort_update_if_cmd_failed_long "$?" "!!"
 }
 
 # If it failed, don't update MBR but just to be safe, zero out a page of
 # install device.
 abort_update_if_cmd_failed_long "$POSTINST_RETURN_CODE" "$MOUNTPOINT"/postinst
 
 # postinstall on new partition succeeded.
-# fix up MBR and make our own partition not something casper will find
-
-# update MBR to make the other partition bootable
-# the slash-magic converts '/' -> '\/' so it's valid in a regex
-log updating MBR of usb device
 
 # flush linux caches; seems to be necessary
 sync
 echo 3 > /proc/sys/vm/drop_caches
 # Configure the PMBR to boot the new image.
 # TODO: ChromeOS EFI BIOS will need a different command to set the GPT
 # partition attributes bits to mark the new image as bootable.
 # NOTE: This won't work for ARM, because we'll need to regenerate the U-Boot
 # script when the kernel size and location are changed. Luckily it won't
 # matter because we'll ship with the GPT-based selection process. The U-Boot
 # script is just a temporary hack for bringup.
 # FIX: The current gpt tool requires a -b arg to specify the PMBR bootcode. We
 # don't want to change the code, so we have to extract it, then put it back.
 # We'll fix this RSN.
 dd if=${ROOT_DEV} bs=512 count=1 of=/tmp/oldpmbr.bin
 gpt -S boot -i $NEW_PART_NUM -b /tmp/oldpmbr.bin ${ROOT_DEV} 2>&1 | \
   cat >> "$MEMENTO_AU_LOG"
 abort_update_if_cmd_failed
 
-# mark update as complete so we don't try to update again
-touch "$UPDATED_COMPLETED_FILE"
+if [ -z "${FLAGS_dst_partition}" ]; then
+  # mark update as complete so we don't try to update again
+  touch "$UPDATED_COMPLETED_FILE"
+fi
 
 # tell user to reboot
 log Autoupdate applied. You should now reboot
 echo UPDATED