jarno
/
snapsh
1
0
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

Implemented SElinux check to rollbacks 

Script asks if the user wants to do a filesystem
relabeling at the next reboot. If SElinux
policies were updated between the current state
and the rollback target, this seemed to cause an
issue where no user could login. Disabling
SElinux or relabeling fixes the problem.
This commit is contained in:
Jarno Rankinen 2020-10-22 21:46:37 +03:00
parent f1d23ead07
commit b8bd2d026d
1 changed files with 16 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
snapsh
View File

@ -188,7 +188,7 @@ rollback() {
if [[ "${REPLY}" == "yes" ]]; then if [[ "${REPLY}" == "yes" ]]; then
unset ${REPLY} unset ${REPLY}
printf "\nCreating a backup snapshot of ${SOURCE_SUBVOLUME}...\n\n" #printf "\nCreating a backup snapshot of ${SOURCE_SUBVOLUME}...\n\n"
# Create info file # Create info file
printf "DATE=\"$(date)\" printf "DATE=\"$(date)\"
SOURCE_SUBVOLUME=\"${SOURCE_SUBVOLUME}\" SOURCE_SUBVOLUME=\"${SOURCE_SUBVOLUME}\"
@ -209,7 +209,21 @@ rollback() {
printf "Copying ${TARGET} to ${TOPLEVEL}/${SOURCE_SUBVOLUME}...\n" printf "Copying ${TARGET} to ${TOPLEVEL}/${SOURCE_SUBVOLUME}...\n"
${BTRFS_EXECUTABLE} subvolume snapshot ${TARGET} ${TOPLEVEL}/${SOURCE_SUBVOLUME} ${BTRFS_EXECUTABLE} subvolume snapshot ${TARGET} ${TOPLEVEL}/${SOURCE_SUBVOLUME}
printf "\nSystem needs to be restarted. Do you wish to do that now? (recommended!)? (y/n) " # Check for SElinux
if [[ $(/usr/sbin/getenforce) == "Enforcing" ]]; then
printf "\nThe system seems to have SElinux enabled. Rollbacks may cause problems with SElinux, so a relabeling is recommended.\n"
printf "Do you wish to do a relabeling after restart? (y/n) "
read -n 1
if [[ "${REPLY}" == "y" ]]; then
touch ${TOPLEVEL}/${SOURCE_SUBVOLUME}/.autorelabel
else
printf "\n\nIf you have problems after the rollback, like not being\nable to log in, add 'enforcing=0' parameter to kernel command line\n"
printf "via your bootloaders edit function or boot to a live USB\nand edit /etc/selinux/config and change 'SELINUX=enforcing' to 'SELINUX=permissive'.\n"
fi
fi
printf "\nSystem needs to be restarted. Do you wish to do that now? (recommended!) (y/n) "
read -n 1 read -n 1
if [[ "${REPLY}" == "y" ]]; then if [[ "${REPLY}" == "y" ]]; then