Project

General

Profile

Enhancement #648

Updated by Marc Dequènes about 2 months ago

Please update the TODOs below and add a note to comment on the progress.

Identified oneshot changes:
* -add buster in our repo and check if packages needs to be ported- (spoolinger is done, lxd needs more work, nothing else needs porting)
* Migrating from legacy network interface names: see https://www.debian.org/releases/buster/amd64/release-notes/ch-information.en.html#migrate-interface-names
* /usr is now merged by default and most softwares expect path to be updated: there is no reason to diverge from the Debian installation and that would cause annoying config changes; installing the `usrmerge` package solves it
** -molly-guard problems (https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930131)- (molly-guard and usrmerge backported in our repo)
* SysV init related packages no longer required: apt purge initscripts sysv-rc insserv startpar
* PostgreSQL databases need to be reindexed: sudo -u postgres reindexdb --all

Identified deployment changes:
* hidepid with systemd and polkit: see https://wiki.debian.org/Hardening#Mounting_.2Fproc_with_hidepid
* install debian-security-support

Problematic softwares:
* phpmyadmin: not in Buster but still in Debian; I see a [https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879741 RFA] with work around newer versions but that requires many new dependencies, so a backport of the latest 4.6.6 in our repo seems to will there be the way to go as I don't think a backport is going to happen backports?

Back