[debian-edu-commits] [Debian Wiki] Update of "DebianEdu/Documentation/Buster/Upgrades" by WolfgangSchweer

[Debian Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Debian Wiki" for change notification.

The "DebianEdu/Documentation/Buster/Upgrades" page has been changed by WolfgangSchweer:
https://wiki.debian.org/DebianEdu/Documentation/Buster/Upgrades?action=diff&rev1=17&rev2=18

Comment:
update upgrade information

  
  /!\ Be prepared: make sure you have tested the upgrade from Stretch in a test environment or have backups ready to be able to go back. 
  
- Please note that the following recipe applies to a default Debian Edu main server installation (desktop=kde, profiles Main Server, Workstation, LTSP Server). (For a general overview concerning stretch to buster upgrade, see:
+ Please note that the following recipe applies to a default Debian Edu main server installation (desktop=xfce, profiles Main Server, Workstation, LTSP Server). (For a general overview concerning stretch to buster upgrade, see:
  https://www.debian.org/releases/buster/releasenotes)
  
  Don't use X, use a virtual console, log in as root.
- 
- Please note one difference between {{{apt}}} and {{{apt-get}}}:
- By default {{{apt-get}}} keeps downloaded packages, {{{apt}}} removes them from the cache (after successful installation).
  
  If {{{apt}}} finishes with an error, try to fix it and/or run {{{apt -f install}}} and then {{{apt -y full-upgrade}}} once again.
  
@@ -44, +41 @@

  
   * Cleanup the package cache:
  {{{
- apt-get clean
+ apt clean
  }}}
+ 
+  * Make sure you have enough disk space. (For both ''/usr'' and ''/var'' about 5 GiB in addition will be needed.)<<BR>>
+    See the related [[DebianEdu/Documentation/Buster/HowTo/Administration#Resizing_Partitions|manual chapter]] for more information. 
  
   * Prepare and start the upgrade to Buster:
  {{{
+ export LC_ALL=C        # optional (to get English output)
  sed -i 's/stretch/buster/g' /etc/apt/sources.list
  apt update
+ apt purge atftpd       # needed because tftpd will be installed
+ apt install libcurl4   # needed to replace libcurl3
+ apt install apache2    # needed first to avoid additional work later on
  apt full-upgrade
  }}}	
  
-  * apt-list-changes: be prepared for a lot of NEWS to read; press <return> to scroll down, <q> to leave the pager.
+  * apt-list-changes: be prepared for a lot of NEWS to read; press <return> to scroll down, <q> to leave the pager. All information will be mailed to root so that you can read it again (using ''mailx'' or ''mutt''). Please note that the GOsa² information is wrong, see below how to adjust the password encryption properly.
  
   * Read all debconf information carefully, choose 'keep your currently-installed version' unless stated differently below; in most cases hitting return will be fine.
+   * restart services: Choose yes. 
+   * ntp: Choose N.
+   * smb
+   * dovecot
+   * grub
  
-  * You will see some prompts about package configurations:
-   * FIXME: list promps about package configuration here.
+  * Apply and adjust configuration: 
+ {{{
+ cf-agent -I -D installation
+ }}}
  
   * Get the new Debian Edu Buster artwork:
  {{{
  apt install debian-edu-artwork-buster
  }}}	
  
+  * Enable PHP 7.3 support:
+ {{{
+ apt purge php7.0*
+ a2enmod php7.3
+ a2enconf php7.3-cgi
+ service apache2 restart
+ }}}
+ 
+  * Adjust GOsa² access (changed encryption method):
+   * backup /etc/gosa/gosa.conf.orig
+   * replace the long (hashed) password in /etc/gosa/gosa.conf with the short (random) password from /etc/gosa/gosa.conf.orig (for both ''adminPassword'' and ''snapshotAdminPassword'')
+   * remove /etc/gosa/gosa.secrets
+   * run {{{gosa-encrypt-passwords}}}
+   * run {{{service apache2 reload}}}
  
   * After reboot, do some more cleanup:
  {{{
  apt purge linux-image-4.9.0-*
- apt purge linux-headers-4.9.0-*  
+ apt purge linux-headers-4.9.0-*
+ apt --purge autoremove
  }}}
  
   * Check if the upgraded system works:
@@ -86, +112 @@

  
  === Upgrading a workstation ===
  
- Do all the basic things like on the main-server and without doing the things not needed. And then do this in addition.
+ Do all the basic things like on the main-server and without doing the things not needed.
- 
-  * To enable LDAP connection, renew the server certificate: 
- {{{
- rm /etc/ldap/ssl/ldap-server-pubkey.pem
- service nslcd stop
- service fetch-ldap-cert restart
- service nslcd start
- }}} 
  
  === Upgrading LTSP chroots ===