[Pkg-puppet-devel] Bug#1079793: puppetserver 7 upgrade doesn't clean up old puppetmaster 5 files

[thomas at goirand.fr]

On Aug 27, 2024 4:15 PM, Jérôme Charaoui <jerome at riseup.net> wrote:

>

> Hello, 

>

> Just a note of caution: the upgrade from puppet-master to puppetserver 

> uses the same "puppet.conf" configuration, which sometimes has the 

> "vardir" setting defined to "/var/lib/puppet". If that's the case, then 

> this directory will not only contain the "old puppetmaster" files, but 

> also the new ones. 

>

> As for the ssl files, puppetserver has some heuristics to move the files 

> itself on upgrade, see the "puppetserver migrate" command. Since the 

> puppetserver CA files are quite sensitive and losing them can cause a 

> serious outage, my preference would be to *not* touch these at all with 

> the package maintscripts. 

>

> In general, I'm weary of dealing with this issue because the medicine 

> might end up being worse than the disease (a few stray files). 

> Maintainer's time is also scarce, and I'm also tempted to mention that 

> the 5.5 -> 7 upgrade ship in Debian has sailed... 


I agree to all you wrote.


Thomas Goirand (zigo)


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-puppet-devel/attachments/20240827/511c88f6/attachment.htm>