File openvpn.init of Package openvpn.4644
#! /bin/sh
# Copyright (c) 2003 SuSE Linux AG
# Copyright (c) 2004-2009 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# Author: Peter Poeml <poeml@suse.de>
# Marius Tomaschewski <mt@suse.de>
#
# inspired by the init script contributed to the OpenVPN project by
# Douglas Keller <doug@voidstar.dyndns.org>
#
# /etc/init.d/openvpn
# and its symbolic link
# /usr/sbin/rcopenvpn
#
### BEGIN INIT INFO
# Provides: openvpn
# Required-Start: $local_fs $remote_fs $network
# Should-Start: $syslog $time $named network-remotefs
# Required-Stop: $local_fs $remote_fs $network
# Should-Stop: $syslog $time $named network-remotefs
# Default-Start: 3 5
# Default-Stop: 0 1 2 6
# Short-Description: OpenVPN tunnel
# Description: Start OpenVPN tunnel
### END INIT INFO
test -s /etc/sysconfig/openvpn && \
. /etc/sysconfig/openvpn
DAEMON="OpenVPN"
openvpn=/usr/sbin/openvpn
confdir=/etc/openvpn
piddir=/var/run/openvpn
test -d $piddir || mkdir $piddir
test -x $openvpn || {
echo 1>&2 "$openvpn not installed"
if test "$1" == "stop" ; then exit 0 ; else exit 5 ; fi
}
# Shell functions sourced from /etc/rc.status:
# rc_check check and set local and overall rc status
# rc_status check and set local and overall rc status
# rc_status -v ditto but be verbose in local rc status
# rc_status -v -r ditto and clear the local rc status
# rc_failed set local and overall rc status to failed
# rc_failed <num> set local and overall rc status to <num><num>
# rc_reset clear local rc status (overall remains)
# rc_exit exit appropriate to overall rc status
. /etc/rc.status
# First reset status of this service
rc_reset
# Return values acc. to LSB for all commands but status:
# 0 - success
# 1 - generic or unspecified error
# 2 - invalid or excess argument(s)
# 3 - unimplemented feature (e.g. "reload")
# 4 - insufficient privilege
# 5 - program is not installed
# 6 - program is not configured
# 7 - program is not running
#
# Note that starting an already running service, stopping
# or restarting a not-running service as well as the restart
# with force-reload (in case signalling is not supported) are
# considered a success.
shopt -s nullglob
action="$1" ; shift
config="$1" ; shift
systemd_cgroup_dir="/sys/fs/cgroup/systemd"
openvpn_cgroup_dir="${systemd_cgroup_dir}/system/openvpn.service"
join_openvpn_service_cgroup()
{
local pid dummy
# when the systemd cgroup mountpoint does not exists,
# assume we run unter systemv init -> nothing to do.
/bin/mountpoint -q "${systemd_cgroup_dir}" || return 0
# create the openvpn.service cgroup when needed
if test ! -d "${openvpn_cgroup_dir}" ; then
/bin/mkdir -p "${openvpn_cgroup_dir}" || return 1
fi
# check if the openvpn.service cgroup task list exists
if test -f "${openvpn_cgroup_dir}/tasks" ; then
# when we're already a member, all is done
while read pid dummy ; do
test "$pid" = "$$" && return 0
done < "${openvpn_cgroup_dir}/tasks"
# otherwise join the openvpn.service cgroup
echo "$$" > "${openvpn_cgroup_dir}/tasks" && return 0
fi
return 1
}
autostart_filter()
{
test "x$config" != "x" && return 0
test "x$OPENVPN_AUTOSTART" = "x" && return 0
for n in ${OPENVPN_AUTOSTART} ; do
test "x$n" = "x$1" && return 0
done
return 1
}
case "$action" in
start)
join_openvpn_service_cgroup
/sbin/modprobe tun &>/dev/null
name=""
for conf in $confdir/${config:-*}.conf ; do
test -f "$conf" || continue
name=$(basename "${conf%%.conf}")
autostart_filter "$name" || continue
pidfile="$piddir/${name}.pid"
echo -n "Starting $DAEMON [$name] "
if [ -f "$pidfile" ]; then
killproc -p "$pidfile" -USR2 $openvpn
ret=$?
case $ret in
7) # not running, remove pid and start
echo -n "(removed stale pid file) " ;
rm -f "$pidfile" ;;
0) # running - no an error, skip start
rc_failed 0 ; rc_status -v ; continue ;;
*) # another error, set it and continue
rc_failed 1 ; rc_status -v ; continue ;;
esac
fi
# openvpn may ask for auth ...
echo ""
$openvpn --daemon \
--writepid "$pidfile" \
--config "$conf" \
--cd $confdir || \
{
rc_status -v1
if [ ! -w "$piddir" ]; then
# this is one possible reason, but common to
# all instances and better than nothing ...
echo " Can not write $pidfile"
rc_exit
fi
echo " See /var/log/messages for the failure reason"
rc_failed 1
continue
}
# write the status one line up
rc_status -v1
done
test -n "$name" || {
echo -n "Starting $DAEMON${config:+ [$config]} -- not configured"
rc_failed 6
rc_status -v
}
;;
stop)
## Stop daemon with killproc(8) and if this fails
## set echo the echo return value.
name=""
for pidfile in $piddir/${config:-*}.pid; do
test -f "$pidfile" || continue
name=$(basename "${pidfile%%.pid}")
echo -n "Shutting down $DAEMON [$name] "
killproc -p "$pidfile" $openvpn
rc_status -v
rm -f "$pidfile"
done
test -n "$name" || {
echo -n "Shutting down $DAEMON${config:+ [$config]} -- not running"
rc_status -v
}
;;
try-restart)
## Do a restart only if the service was active before.
## Note: try-restart is now part of LSB (as of 1.9).
## RH has a similar command named condrestart.
$0 status ${config:+"$config"}
if test $? = 0; then
$0 restart ${config:+"$config"}
else
rc_reset # Not running is not a failure.
fi
# Remember status and be quiet
rc_status
;;
restart)
## Stop the service and regardless of whether it was
## running or not, start it again.
# When nothing is running, start specified config or
# the defult (autostart) set. Otherwise we stop the
# specified one or all that are currently running.
# Then start specified one or all that were running
# before and have a config. Makes sense? :-)
name=""
list=($config)
for pidfile in $piddir/${config:-*}.pid; do
test -f "$pidfile" || continue
name=$(basename "${pidfile%%.pid}")
$0 stop "$name"
rc_status
test "x$name" = "x$config" && continue # in list
test -f "$confdir/${name}.conf" && list+=("$name")
done
test "x$name" = x || sleep 3 # for what was this needed?
$0 start "${list[@]}"
# Remember status and be quiet
rc_status
;;
reload|force-reload)
for pidfile in $piddir/${config:-*}.pid; do
test -f "$pidfile" || continue
name=$(basename "${pidfile%%.pid}")
echo -n "Reload service $DAEMON [$name] "
killproc -p "$pidfile" -HUP $openvpn
rc_status -v
done
rc_status
;;
reopen)
for pidfile in $piddir/${config:-*}.pid; do
test -f "$pidfile" || continue
name=$(basename "${pidfile%%.pid}")
echo -n "Reopen service $DAEMON [$name] "
killproc -p "$pidfile" -USR1 $openvpn
rc_status -v
done
rc_status
;;
status)
name=""
for pidfile in $piddir/${config:-*}.pid; do
test -f "$pidfile" || continue
name=$(basename "${pidfile%%.pid}")
echo -n "Checking for $DAEMON [$name] "
killproc -p "$pidfile" -USR2 $openvpn
rc_status -v
done
if test -n "$name" ; then
echo "$DAEMON status written to /var/log/messages"
else
echo -n "Checking for $DAEMON "
rc_failed 3
rc_status -v
fi
;;
probe)
## Optional: Probe for the necessity of a reload, print out the
## argument to this init script which is required for a reload.
## Note: probe is not (yet) part of LSB (as of 1.9)
result=""
for conf in $confdir/${config:-*}.conf ; do
test -f "$conf" || continue
name=$(basename "${conf%%.conf}")
autostart_filter "$name" || continue
pidfile="$piddir/${name}.pid"
if test ! -f "$pidfile" ; then
result="restart"
elif test "$conf" -nt "$pidfile" ; then
test "$result" = "restart" || \
result="reload"
fi
done
for pidfile in $piddir/${config:-*}.pid; do
test -f "$pidfile" || continue
name=$(basename "${pidfile%%.pid}")
conf="$confdir/${name}.conf"
test -f "$conf" && result="restart"
done
test -n "$result" && echo "$result"
;;
*)
echo "Usage: $0 {start|stop|status|try-restart|restart|reload|reopen|probe}"
exit 1
esac
rc_exit
