Enhancement #648
Debian Buster Migration
100%
Description
Please update the TODOs below and add a note to comment on the progress.
Identified oneshot changes:- before migration:
add buster in our repo and check if packages needs to be ported(spoolinger is done, lxd needs more work, nothing else needs porting)Migrating from legacy network interface names(all machines migrated to the new Naming Rules)
- after migration:
/usr is now merged by default and most softwares expect path to be updated (look at the softwares incompatible with usrmerge layout below): apt install usrmerge(done)SysV init related packages no longer required: apt purge initscripts sysv-rc insserv startpar(done)PostgreSQL databases need to be reindexed(in fact pg_upgradecluster dumps/imports so it is not necessary)apt-transport-https is no longer necessaryon web servers php7.0-common needs to be removed manually: : apt purge php7.0-common(done)systemd-journal-upload/systemd-journal-gatewayd services user/group can be removed as they are now dynamically allocated(none found)
hidepid with systemd and polkit: see https://wiki.debian.org/Hardening#Mounting_.2Fproc_with_hidepidinstall debian-security-support
phpmyadmin: not in Buster but still in Debian; I see a RFA with work towards newer versions but that requires several new dependencies(backport builds done and working, see #670)ftp-ssl: still in Debian but missing in Buster because it was not ready for openssl 1.1; 0.17.34+0.2-4.1 contains a patch and could be backported in our repo (unless it comes in Debian first)- softwares incompatible with usrmerge layout:
molly-guard problems (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930131)(molly-guard and usrmerge backported in our repo)
Related issues
Associated revisions
dc-base: Make systemd-logind work with hidepid
refs #648
also install debian-security-support
refs #648
dc-base: Make systemd-logind work with hidepid
refs #648
History
Updated by Marc Dequènes 6 months ago
Updated by - Status changed from New to In Progress
- Assignee set to Marc Dequènes
Updated by Marc Dequènes 4 months ago
- Blocked by Bug #595: Create missing systemd configuration for SYSV compatibility services added
Updated by Marc Dequènes 4 months ago
- Blocks Enhancement #640: Migrate main wiki from Moinmoin to Mediawiki added
Updated by Marc Dequènes 4 months ago
- Blocks Enhancement #647: Patched softwares, how to handle them? added
Updated by Marc Dequènes 4 months ago
- Blocks deleted (Enhancement #640: Migrate main wiki from Moinmoin to Mediawiki)
Updated by Marc Dequènes 4 months ago
- Blocked by Enhancement #640: Migrate main wiki from Moinmoin to Mediawiki added
Updated by Marc Dequènes 4 months ago
- Blocks deleted (Enhancement #647: Patched softwares, how to handle them?)
Updated by Marc Dequènes 4 months ago
- Blocked by Enhancement #647: Patched softwares, how to handle them? added
Updated by Marc Dequènes 4 months ago
- Subject changed from Blocking tasks for Debian Buster migration to Debian Buster Migration
Updated by Marc Dequènes 2 months ago
- % Done changed from 20 to 30
Elwing is now migrated and I pushed some updates for the services.
Updated by Marc Dequènes 2 months ago
- % Done changed from 30 to 40
Orfeo migrated to Buster, few fixes and potential improvement ticket were filled but nothing big.
Updated by Marc Dequènes 2 months ago
- % Done changed from 40 to 50
Thorfinn migrated to Buster, PHP config fixes.
Updated by Marc Dequènes 2 months ago
As for #655, Toushirou missed these files when migrating body and upgrading is not going to change anything, especially because Redmine is not in stable anymore. Until a backport is available, at which point we'll try to port the patches, migrating to Buster is not gonna change anything, thus disconnecting this blocker bug.
As for #647 there is no resolution yet, so I already went ahead and reapplied the patch for wikitrans. ruby-mail is on hold at the moment so its fate is undecided. Anyway we can proceed with the migration and fix that later, thus disconnecting this blocker bug.
Updated by Marc Dequènes 2 months ago
- Blocked by deleted (Bug #655: Lost files on Toushirou-OLD)
Updated by Marc Dequènes 2 months ago
- Blocked by deleted (Enhancement #647: Patched softwares, how to handle them?)
Updated by Marc Dequènes 2 months ago
Toushirou migrated to Buster.
Needed actions:- redmine is not available (my bad), installed ruby-rouge from unstable and it was possible to install
- redmine plugin readme_at_repositories does not work anymore and is not maintained, contribution to test, applied, working
- redmine plugin redmine_graphs:
- had a missing dependency on ruby-svg-graph, fixed
- ruby-svg-graph uses parsedate library, last seen in Ruby 1.8.7, patches available, Debian upload done
- unmaintained, patch available, partially applied (unrelated changes around), working
- tt-rss: updated to latest git to get rid of PHP warnings
- stuffcloud needed an update
- stuffcloud upgraded from 15.0.9 to 16.0.4
- stuffcloud plugin weather was not working because it requires curl_exec which was disabled for security reason, disabled
- apache2 startup problem after reboot, see Debian#910368, suggested solution and updated our deployment accordingly in the meanwhile
Aug 20 12:30:26 Toushirou apachectl[2438]: (99)Cannot assign requested address: AH00072: make_sock: could not bind to address [2001:67c:1740:9001::3]:80
- su PAM service was split into su-l, added it to login services in dc-ldap
- mediawiki adaptations (new path, config…) and a loading bug
Updated by Marc Dequènes about 2 months ago
- Description updated (diff)
- Status changed from In Progress to Resolved
- % Done changed from 50 to 100
All tasks related to the migration are now done. A few post-migration tickets were opened for future enhancements now possible.
Users did not report any problem, thus closing.
also install debian-security-support
refs #648