PT Commons

Debian 11 to 12 » History » Revision 4

Revision 3 (Hannah Siwiec, 01/25/2024 04:36 PM) → Revision 4/9 (Hannah Siwiec, 01/25/2024 04:41 PM)

h1. Debian 11 to 12 

 h2. Pre update check 

 h3. 
 Edit this section 
 Stretch check 

 Check if any sources still point to buster 

 <pre> 
 cd /etc/apt 
 grep -nr buster . 
 </pre> 

 If so, bring those up to bullseye and run updates first 
 https://redmine.palantetech.coop/projects/commons/wiki/Debian_10_to_11 

 h3. 
 Edit this section 
 Metapackage check 

 Check to make sure kernel metapackage is installed, not just specific kernel 

 <pre> 
 dpkg -l "linux-image*" | grep ^ii | grep -i meta 
 </pre>  

 should have results 

 
 If not, install metapackage 
 https://www.debian.org/releases/bookworm/amd64/release-notes/ch-upgrading.en.html#kernel-metapackage 

 h3. 
 Edit this section 
 Purged package check 

 List and purge removed packages with config files remaining 
 https://www.debian.org/releases/bookworm/amd64/release-notes/ch-upgrading.en.html#purge-removed-packages 

 <pre> 
 aptitude search '~c' 
 aptitude purge '~c' 

 </pre> 

 h3. Edit this section 
 Hold check 

 These commands should have no results 

 <pre> 
 aptitude search "~ahold"  
 dpkg --get-selections | grep 'hold$' 

 Edit this section 
 </pre> 


 h3. Update sources list 

 Check which sources exist that point to bullseye 

 <pre> 
 cd /etc/apt 
 grep -nr bullseye . 
 </pre> 

 Edit the main list, and any others that come up 

 <pre> 
 vim /etc/apt/sources.list 
 </pre> 

 replace bullseye with bookworm 

 <pre> 
 :%s/bullseye/bookworm/g 
 </pre> 

 replace bullseye/updates with bookworm-security 

 <pre> 
 :%s/bookworm\/updates/bookworm-security/g 
 </pre> 

 https://www.debian.org/releases/bookworm/amd64/release-notes/ch-information.en.html#security-archive 

 h2. 
 Edit this section 
 Upgrade the system 

 h3. 
 Edit this section 
 Update the sources 

 <pre> 
 apt-get update 
 </pre> 

 If you get a NO_PUBKEY error, see https://redmine.palantetech.coop/projects/commons/wiki/Debian_10_to_11#Common-problems 

 h3. 
 Edit this section 
 Check for Necessary Disk Space 

 <pre> 
 apt-get -o APT::Get::Trivial-Only=true dist-upgrade 

 Edit this section 
 </pre> 


 h3. Minimal Upgrade 

 <pre> 
  

  apt-get upgrade 
 </pre> 

     if it asks whether to change /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg, say yes 
     other things it asks to change, say no, keep the existing file 


 h3. 

 Edit this section 
 Full Upgrade 

 <pre> 
 apt-get dist-upgrade 

 Edit this section 
 </pre> 


 Change configs during full upgrade? 
 |package | package  	 change configs| configs 
 | nrpe |  	 no | 
 | sudoers |  	 no | 
 | journald |  	 no | 
 | backupninja |  	 no | 
 | nginx |  	 yes but recheck after | 
 | redis |  	 yes but recheck after | 
 | sshd_config |  	 yes but recheck after | 
 | glibc |  	 yes | 
 | logrotate.d/apache2 |  	 yes | 

 h3. 
 Edit this section 
 Upgrade MySQL databases (if MySQL/MariaDB installed) 

 <pre> 
 mysql_upgrade 

 Edit this section 
 </pre> 


 h2. Check that things are up 

     if a web server, make sure websites are up 
     if an infrastructure server, test and make sure all parts of the infrastructure are working properly 
     if a PTC server check the recovery plan entry for that server to make sure everything has recovered 

 h3.  
 Edit this section 
 Check what packages were removed 

 <pre> 
     

     cat /var/log/apt/history.log | grep Remove 
 </pre> 
     copy that into ongoing updates documentation for records 
     Make sure there was nothing important in there 
     If there were important packages in there 
         check aptitude to see if newer versions were already installed 
         check debian package search to search for what version is appropriate 
         https://packages.debian.org/ 


 h2. 

 Edit this section 
 Common problems 


 h3. 
 Edit this section 
 NO_PUBKEY during update 

 W: GPG error: https://apt.postgresql.org/pub/repos/apt bullseye-pgdg InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7FCC7D46ACCC4CF8 


 Add the key for the specified repository: 

 <pre> 
 0 meat:/etc/apt# sudo gpg -a --export 7FCC7D46ACCC4CF8 | sudo apt-key add - 
 </pre> 


 See https://askubuntu.com/questions/13065/how-do-i-fix-the-gpg-error-no-pubkey for more information 

 h3. 
 Edit this section 
 Backupninja changes 

 After update, backupninja likely needs to be patched 
 https://redmine.palantetech.coop/projects/pt/wiki/Icinga2#Patch-the-backupninja-binary 

 Borg backup jobs to May First need to have port = 2201 added to the destination section.