bock_upgrade_debian_10_-_11
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
bock_upgrade_debian_10_-_11 [2024/06/20 20:32] SLUUG Administration |
bock_upgrade_debian_10_-_11 [2025/02/26 00:40] (current) SLUUG Administration Add cloning steps |
||
|---|---|---|---|
| Line 53: | Line 53: | ||
| * Web - apache | * Web - apache | ||
| - | * Email - postfix, etc. | + | * Email - postfix, dovecot, clamav, spamasasson, etc. |
| * DNS - unpublished master for SLUUG domains w/named | * DNS - unpublished master for SLUUG domains w/named | ||
| * SSH - sshd | * SSH - sshd | ||
| Line 248: | Line 248: | ||
| - | ===== Step 1 - Upgrade Bock2 Clone 0 ===== | + | ===== Step 1 - Test upgrade - Bock2 Clone 0 ===== |
| + | |||
| + | === Possible preparation steps if copying to a clone === | ||
| + | |||
| + | * Update DNS | ||
| + | * hostname to IP | ||
| + | * reverse for IP | ||
| + | * SPF TXT record | ||
| + | * Warn admins to not make changes during the copying | ||
| + | * Shut down e-mail during the copy | ||
| + | * Make the copy | ||
| + | * Restart e-mail | ||
| + | * All further actions are on the clone | ||
| + | * /etc/hosts | ||
| + | * /etc/hostname | ||
| + | * /etc/fstab | ||
| + | * /etc/motd | ||
| + | * /boot/grub/grub.cfg ? | ||
| + | * /boot/initrd.img* ? | ||
| + | * Others changed that haven't been discovered? | ||
| + | * Change /etc/postfix/main.cf myhostname,mydomain,mydestination | ||
| + | * Disable production mailing lists: | ||
| + | * Stop mailman processes | ||
| + | * mkdir /var/lib/mailman/lists-disabled/ | ||
| + | * mv /var/lib/mailman/lists/[a-ln-su-z]* /var/lib/mailman/lists-disabled/ | ||
| + | * Start mailman processes | ||
| + | * Check logs, test | ||
| + | * Separate Letsencrypt | ||
| + | * Separate git | ||
| + | * Change the recipient of debian-upgrade-reminder.sh | ||
| + | * Inform admins of the status | ||
| ==== Start with basic procedure ==== | ==== Start with basic procedure ==== | ||
| Line 274: | Line 304: | ||
| deb http://deb.debian.org/debian bullseye-updates main | deb http://deb.debian.org/debian bullseye-updates main | ||
| deb-src http://deb.debian.org/debian bullseye-updates main | deb-src http://deb.debian.org/debian bullseye-updates main | ||
| + | | ||
| + | | ||
| + | This is what the sources.list looks like after the upgrade: | ||
| + | |||
| + | # | ||
| + | # deb cdrom:[Debian GNU/Linux 9.4.0 _Stretch_ - Official amd64 NETINST 20180310-11:21]/ stretch main | ||
| + | #deb cdrom:[Debian GNU/Linux 9.4.0 _Stretch_ - Official amd64 NETINST 20180310-11:21]/ stretch main | ||
| + | deb http://ftp.us.debian.org/debian/ bullseye main | ||
| + | deb-src http://ftp.us.debian.org/debian/ bullseye main | ||
| + | deb https://security.debian.org/debian-security bullseye-security main | ||
| + | deb-src https://security.debian.org/debian-security bullseye-security main | ||
| + | # stretch-updates, previously known as 'volatile' | ||
| + | deb http://ftp.us.debian.org/debian/ bullseye-updates main | ||
| + | deb-src http://ftp.us.debian.org/debian/ bullseye-updates main | ||
| + | # Backports for Certbot | ||
| + | #deb http://ftp.debian.org/debian bullseye-backports main | ||
| Update with new sources | Update with new sources | ||
| - | ''apt update'' | + | ''apt update && apt upgrade -y'' |
| During the upgrade process you will be prompted: | During the upgrade process you will be prompted: | ||
| Line 296: | Line 342: | ||
| ''Port 2206'' | ''Port 2206'' | ||
| - | 6. SSH Server Config - sshd_config question: '' | + | 6. SSH Server Config - sshd_config question: Choose the three-way merge option |
| - | + | ||
| - | Do a three-way merge | + | |
| Open the file with ''vim /etc/ssh/sshd_config.merge-error'' | Open the file with ''vim /etc/ssh/sshd_config.merge-error'' | ||
| Line 308: | Line 352: | ||
| ''cp /etc/ssh/sshd_config.merge-error /etc/ssh/sshd_config'' | ''cp /etc/ssh/sshd_config.merge-error /etc/ssh/sshd_config'' | ||
| - | Chose keep the local version. | + | Choose keep the local version. |
| + | |||
| + | Choose services to be restarted: ''None'' | ||
| + | |||
| + | Reboot the system | ||
| + | |||
| + | ''reboot'' | ||
| + | |||
| + | ==== Check services ==== | ||
| + | |||
| + | curl http://bock2.sluug.org | ||
| + | ===== Step 2 - Clone Bock and Upgrade - Take #2 ===== | ||
| + | |||
| + | === Summary of steps === | ||
| + | |||
| + | * Edit /etc/apt/sources.list | ||
| + | * apt-get update | ||
| + | * apt-get install python-is-python2 | ||
| + | * apt-get upgrade --without-new-pkgs | ||
| + | * See the wiki for responses to prompts | ||
| + | * apt-get full-upgrade | ||
| + | * Verify mailman hasn't been removed. | ||
| + | * Check logs | ||
| + | * Reboot, etc. | ||
| + | * Check logs, test, document. | ||
| + | * apt-get --purge autoremove # With cautions | ||
| + | * Check logs, test, document. | ||
| + | * apt-get upgrade | ||
| + | * apt-get autoremove | ||
| + | [[upgrade.log]] | ||
bock_upgrade_debian_10_-_11.1718933560.txt.gz · Last modified: 2024/06/20 20:32 by SLUUG Administration
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
