conntrack-tools: add new recipe

Includes failover script for pacemaker.

Signed-off-by: Roman I Khimov <khimov@altell.ru>

diff --git a/recipes/conntrack-tools/conntrack-tools_0.9.14.bb b/recipes/conntrack-tools/conntrack-tools_0.9.14.bb
new file mode 100644 (file)
index 0000000..c35930d
--- /dev/null
+++ b/recipes/conntrack-tools/conntrack-tools_0.9.14.bb
@@ -0,0 +1,24 @@
+DESCRIPTION = "Connection tracking userspace tools for Linux"
+LICENSE = "GPL"
+DEPENDS = "libnfnetlink libnetfilter-conntrack"
+
+SRC_URI = " \
+       http://www.netfilter.org/projects/conntrack-tools/files/conntrack-tools-${PV}.tar.bz2;name=tar \
+       file://conntrack-failover \
+       file://init \
+       "
+SRC_URI[tar.md5sum] = "7e9344fe85bb68bcf65c35034add6655"
+SRC_URI[tar.sha256sum] = ""
+
+inherit autotools
+inherit update-rc.d
+
+INITSCRIPT_NAME = "conntrackd"
+
+do_install_append() {
+       install -d ${D}/${sysconfdir}/conntrackd
+       install -d ${D}/${sysconfdir}/init.d
+       install -m 0644 doc/sync/ftfw/conntrackd.conf ${D}/${sysconfdir}/conntrackd/conntrackd.conf.sample
+       install -m 0755 ${WORKDIR}/conntrack-failover ${D}/${sysconfdir}/init.d/conntrack-failover
+       install -m 0755 ${WORKDIR}/init ${D}/${sysconfdir}/init.d/conntrackd
+}
\ No newline at end of file

diff --git a/recipes/conntrack-tools/files/conntrack-failover b/recipes/conntrack-tools/files/conntrack-failover
new file mode 100644 (file)
index 0000000..6d92e63
--- /dev/null
+++ b/recipes/conntrack-tools/files/conntrack-failover
@@ -0,0 +1,77 @@
+#!/bin/sh
+# 
+# (C) 2008 by Pablo Neira Ayuso <pablo@netfilter.org>
+# (C) 2009 Roman I Khimov <khimov@altell.ru>
+#
+# This software may be used and distributed according to the terms
+# of the GNU General Public License, incorporated herein by reference.
+#
+# Description:
+#
+# This is the script for primary-backup setups for keepalived
+# (http://www.keepalived.org). You may adapt it to make it work with other
+# high-availability managers.
+#
+# Do not forget to include the required modifications to your keepalived.conf
+# file to invoke this script during keepalived's state transitions.
+#
+# Contributions to improve this script are welcome :).
+#
+## Modified to work as init.d script under pacemaker control
+
+CONNTRACKD_BIN=/usr/sbin/conntrackd
+CONNTRACKD_LOCK=/var/lock/conntrack.lock
+CONNTRACKD_CONFIG=/etc/conntrackd/conntrackd.conf
+
+case "$1" in
+  start)
+    #
+    # commit the external cache into the kernel table
+    #
+    $CONNTRACKD_BIN -C $CONNTRACKD_CONFIG -c
+    if [ $? -eq 1 ]
+    then
+        logger "ERROR: failed to invoke conntrackd -c"
+    fi
+
+    #
+    # flush the internal and the external caches
+    #
+    $CONNTRACKD_BIN -C $CONNTRACKD_CONFIG -f
+    if [ $? -eq 1 ]
+    then
+       logger "ERROR: failed to invoke conntrackd -f"
+    fi
+
+    #
+    # resynchronize my internal cache to the kernel table
+    #
+    $CONNTRACKD_BIN -C $CONNTRACKD_CONFIG -R
+    if [ $? -eq 1 ]
+    then
+       logger "ERROR: failed to invoke conntrackd -R"
+    fi
+
+    #
+    # send a bulk update to backups 
+    #
+    $CONNTRACKD_BIN -C $CONNTRACKD_CONFIG -B
+    if [ $? -eq 1 ]
+    then
+        logger "ERROR: failed to invoke conntrackd -B"
+    fi
+    ;;
+  stop)
+       $CONNTRACKD_BIN -t
+       $CONNTRACKD_BIN -n
+       ;;
+  status)
+       ;;
+  *)
+    logger "ERROR: unknown command"
+    echo "Usage: conntrack-failover {start|stop|status}"
+    exit 1
+    ;;
+esac
+
+exit 0

diff --git a/recipes/conntrack-tools/files/init b/recipes/conntrack-tools/files/init
new file mode 100644 (file)
index 0000000..6e2f442
--- /dev/null
+++ b/recipes/conntrack-tools/files/init
@@ -0,0 +1,77 @@
+#!/bin/sh
+#
+# /etc/init.d/conntrackd
+#
+# Maximilian Wilhelm <max@rfc2324.org>
+#  -- Mon, 06 Nov 2006 18:39:07 +0100
+#
+# Roman I Khimov <khimov@altell.ru>
+#  -- Tue, 27 Oct 2009 14:34:00 +0300
+
+export PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
+
+NAME="conntrackd"
+DAEMON="/usr/sbin/conntrackd"
+CONFIG="/etc/conntrackd/conntrackd.conf"
+PIDFILE="/var/run/${NAME}.pid"
+
+
+# Gracefully exit if there is no daemon (debian way of life)
+if [ ! -x "${DAEMON}" ]; then
+       exit 0
+fi
+
+# Check for config file
+if [ ! -f /etc/conntrackd/conntrackd.conf ]; then
+       echo "Error: There is no config file for $NAME" >&2
+       exit 1;
+fi
+
+case "$1" in
+  start)
+        echo -n "Starting $NAME: "
+       for i in nf_conntrack_netlink nf_conntrack_netbios_ns nf_conntrack_proto_dccp nf_conntrack_tftp \
+               nf_conntrack_sane nf_conntrack_pptp nf_conntrack_irc nf_conntrack_amanda nf_conntrack_h323 \
+               nf_conntrack_proto_udplite nf_conntrack_proto_gre nf_conntrack_proto_sctp nf_conntrack_ftp \
+               nf_conntrack_sip; do
+               modprobe $i >/dev/null 2>/dev/null &
+       done
+       start-stop-daemon --start --quiet --make-pidfile --pidfile "/var/run/${NAME}.pid" --background --exec "${DAEMON}"
+       RET=$?
+       if [ "$?" == "0" ]; then
+               sleep 2
+               # Sync with other server
+               conntrackd -n
+               echo "done."
+       else
+               echo "FAILED!"
+       fi
+       exit $RET
+       ;;
+  stop)
+        echo -n "Stopping $NAME:"
+       start-stop-daemon --stop --quiet --oknodo --pidfile "/var/run/${NAME}.pid" && echo "done." || echo "FAILED!"
+       ;;
+  status)
+       echo -n "conntrackd "
+       start-stop-daemon -q -K -t -x $DAEMON
+       RET=$?
+       if [ "$RET" == "0" ]; then
+                PID=`cat $PIDFILE`
+               echo "($PID) is running"
+       else
+               echo "is not running"
+               exit $RET
+       fi
+       ;;
+  restart)
+       $0 start
+       $0 stop
+       ;;
+
+  *)
+       echo "Usage: /etc/init.d/conntrackd {start|stop|restart}"
+       exit 1
+esac
+
+exit 0