Debian 11 to 12¶

Pre update check
Edit this section
Stretch check

Check if any sources still point to buster

cd /etc/apt
grep -nr buster .

If so, bring those up to bullseye and run updates first
https://redmine.palantetech.coop/projects/commons/wiki/Debian_10_to_11
Edit this section
Metapackage check

Check to make sure kernel metapackage is installed, not just specific kernel

dpkg -l "linux-image*" | grep ^ii | grep -i meta should have results
If not, install metapackage
https://www.debian.org/releases/bookworm/amd64/release-notes/ch-upgrading.en.html#kernel-metapackage
Edit this section
Purged package check

List and purge removed packages with config files remaining
https://www.debian.org/releases/bookworm/amd64/release-notes/ch-upgrading.en.html#purge-removed-packages

aptitude search '~c'
aptitude purge '~c'

Edit this section
Hold check

These commands should have no results

aptitude search "~ahold"
dpkg --get-selections | grep 'hold$'

Edit this section
Update sources list

Check which sources exist that point to bullseye

cd /etc/apt
grep -nr bullseye .

Edit the main list, and any others that come up

vim /etc/apt/sources.list

replace bullseye with bookworm

:%s/bullseye/bookworm/g

replace bullseye/updates with bookworm-security

:%s/bookworm\/updates/bookworm-security/g

https://www.debian.org/releases/bookworm/amd64/release-notes/ch-information.en.html#security-archive
Edit this section
Upgrade the system
Edit this section
Update the sources

apt-get update

If you get a NO_PUBKEY error, see https://redmine.palantetech.coop/projects/commons/wiki/Debian_10_to_11#Common-problems
Edit this section
Check for Necessary Disk Space

apt-get -o APT::Get::Trivial-Only=true dist-upgrade

Edit this section
Minimal Upgrade

apt-get upgrade

if it asks whether to change /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg, say yes
    other things it asks to change, say no, keep the existing file

Edit this section
Full Upgrade

apt-get dist-upgrade

Edit this section
Change configs during full upgrade?
package change configs
nrpe no
sudoers no
journald no
backupninja no
nginx yes but recheck after
redis yes but recheck after
sshd_config yes but recheck after
glibc yes
logrotate.d/apache2 yes
Edit this section
Upgrade MySQL databases (if MySQL/MariaDB installed)

mysql_upgrade

Edit this section
Check that things are up

if a web server, make sure websites are up
    if an infrastructure server, test and make sure all parts of the infrastructure are working properly
    if a PTC server check the recovery plan entry for that server to make sure everything has recovered

Edit this section
Check what packages were removed

cat /var/log/apt/history.log | grep Remove
    copy that into ongoing updates documentation for records
    Make sure there was nothing important in there
    If there were important packages in there
        check aptitude to see if newer versions were already installed
        check debian package search to search for what version is appropriate
        https://packages.debian.org/

Edit this section
Common problems
Edit this section
NO_PUBKEY during update

W: GPG error: https://apt.postgresql.org/pub/repos/apt bullseye-pgdg InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7FCC7D46ACCC4CF8

Add the key for the specified repository:

0 meat:/etc/apt# sudo gpg -a --export 7FCC7D46ACCC4CF8 | sudo apt-key add -

See https://askubuntu.com/questions/13065/how-do-i-fix-the-gpg-error-no-pubkey for more information
Edit this section
Backupninja changes

After update, backupninja likely needs to be patched
https://redmine.palantetech.coop/projects/pt/wiki/Icinga2#Patch-the-backupninja-binary

Borg backup jobs to May First need to have port = 2201 added to the destination section.