Enhancement #648
Debian Buster Migration
Start date:
2019-04-21
Due date:
% Done:
50%
Estimated time:
Patch Available:
Confirmed:
No
Branch:
Entity:
DuckCorp
Security:
Help Needed:
Description
Please update the TODOs below and add a note to comment on the progress.
Identified oneshot changes:- before migration:
add buster in our repo and check if packages needs to be ported(spoolinger is done, lxd needs more work, nothing else needs porting)Migrating from legacy network interface names(all machines migrated to the new Naming Rules)
- after migration:
- /usr is now merged by default and most softwares expect path to be updated (look at the softwares incompatible with usrmerge layout below): apt install usrmerge
- SysV init related packages no longer required: apt purge initscripts sysv-rc insserv startpar
PostgreSQL databases need to be reindexed(in fact pg_upgradecluster dumps/imports so it is not necessary)apt-transport-https is no longer necessary- on web servers php7.0-common needs to be removed manually: : apt purge php7.0-common
- systemd-journal-upload/systemd-journal-gatewayd services user/group can be removed as they are now dynamically allocated (which ones?)
hidepid with systemd and polkit: see https://wiki.debian.org/Hardening#Mounting_.2Fproc_with_hidepidinstall debian-security-support
- phpmyadmin: not in Buster but still in Debian; I see a RFA with work towards newer versions but that requires many new dependencies, thus a backport of the latest 4.6.6 in our repo seems to be the way to go as I don't think an official backport is going to happen
ftp-ssl: still in Debian but missing in Buster because it was not ready for openssl 1.1; 0.17.34+0.2-4.1 contains a patch and could be backported in our repo (unless it comes in Debian first)- softwares incompatible with usrmerge layout:
molly-guard problems (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930131)(molly-guard and usrmerge backported in our repo)
Related issues
Associated revisions
dc-base: Make systemd-logind work with hidepid
refs #648
also install debian-security-support
refs #648
dc-base: Make systemd-logind work with hidepid
refs #648
History
Updated by Marc Dequènes 4 months ago
Updated by - Status changed from New to In Progress
- Assignee set to Marc Dequènes
Updated by Marc Dequènes about 1 month ago
- Blocked by Bug #655: Lost files on Toushirou-OLD added
Updated by Marc Dequènes about 1 month ago
- Blocked by Bug #595: Create missing systemd configuration for SYSV compatibility services added
Updated by Marc Dequènes about 1 month ago
- Blocks Enhancement #640: Migrate main wiki from Moinmoin to Mediawiki added
Updated by Marc Dequènes about 1 month ago
- Blocks Enhancement #647: Patched softwares, how to handle them? added
Updated by Marc Dequènes about 1 month ago
- Blocks deleted (Enhancement #640: Migrate main wiki from Moinmoin to Mediawiki)
Updated by Marc Dequènes about 1 month ago
- Blocked by Enhancement #640: Migrate main wiki from Moinmoin to Mediawiki added
Updated by Marc Dequènes about 1 month ago
- Blocks deleted (Enhancement #647: Patched softwares, how to handle them?)
Updated by Marc Dequènes about 1 month ago
- Blocked by Enhancement #647: Patched softwares, how to handle them? added
Updated by Marc Dequènes about 1 month ago
- Subject changed from Blocking tasks for Debian Buster migration to Debian Buster Migration
Updated by Marc Dequènes 12 days ago
- % Done changed from 20 to 30
Elwing is now migrated and I pushed some updates for the services.
Updated by Marc Dequènes 5 days ago
- % Done changed from 30 to 40
Orfeo migrated to Buster, few fixes and potential improvement ticket were filled but nothing big.
Updated by Marc Dequènes 5 days ago
- % Done changed from 40 to 50
Thorfinn migrated to Buster, PHP config fixes.
Updated by Marc Dequènes 5 days ago
As for #655, Toushirou missed these files when migrating body and upgrading is not going to change anything, especially because Redmine is not in stable anymore. Until a backport is available, at which point we'll try to port the patches, migrating to Buster is not gonna change anything, thus disconnecting this blocker bug.
As for #647 there is no resolution yet, so I already went ahead and reapplied the patch for wikitrans. ruby-mail is on hold at the moment so its fate is undecided. Anyway we can proceed with the migration and fix that later, thus disconnecting this blocker bug.
Updated by Marc Dequènes 5 days ago
- Blocked by deleted (Enhancement #647: Patched softwares, how to handle them?)
Updated by Marc Dequènes 3 days ago
Toushirou migrated to Buster.
Needed actions:- redmine is not available (my bad), installed ruby-rouge from unstable and it was possible to install
- redmine plugin readme_at_repositories does not work anymore and is not maintained, contribution to test, disabled for now
- redmine plugin redmine_graphs:
- had a missing dependency on ruby-svg-graph, easy to fix
- ruby-svg-graph uses parsedate library, last seen in Ruby 1.8.7, patches available, disabled for now, do we need it?, need to notify Debian maintainer
- unmaintained, patch available
- tt-rss: updated to latest git to get rid of PHP warnings
- stuffcloud needed an update
- stuffcloud upgraded from 15.0.9 to 16.0.4
- stuffcloud plugin weather was not working because it requires curl_exec which was disabled for security reason, disabled
- apache2 startup problem after reboot, see Debian#910368, suggested solution
Aug 20 12:30:26 Toushirou apachectl[2438]: (99)Cannot assign requested address: AH00072: make_sock: could not bind to address [2001:67c:1740:9001::3]:80
- su PAM service was split into su-l, added it to login services in dc-ldap
- mediawiki adaptations (new path, config…) and a loading bug
also install debian-security-support
refs #648