updates for trixie

tengel 2025-08-25 08:38:27 -05:00
parent 7cfbe6f921
commit 0c2938c54b

@ -1,6 +1,6 @@
# Debian Upgrade
> bullseye (11) to bookworm (12)
> bookworm (12) to trixie (13)
## Prep
@ -21,25 +21,24 @@ reboot
## Sources
The path name of Security changed from Buster to Bullseye, Bookwork adds non-free-firmware; basic example:
```
deb http://deb.debian.org/debian/ bookworm main contrib non-free non-free-firmware
deb-src http://deb.debian.org/debian/ bookworm main contrib non-free non-free-firmware
deb http://deb.debian.org/debian/ trixie main contrib non-free non-free-firmware
deb-src http://deb.debian.org/debian/ trixie main contrib non-free non-free-firmware
deb http://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware
deb-src http://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware
deb http://security.debian.org/debian-security trixie-security main contrib non-free non-free-firmware
deb-src http://security.debian.org/debian-security trixie-security main contrib non-free non-free-firmware
deb http://deb.debian.org/debian/ bookwork-updates main contrib non-free non-free-firmware
deb-src http://deb.debian.org/debian/ bookworm-updates main contrib non-free non-free-firmware
deb http://deb.debian.org/debian/ trixie-updates main contrib non-free non-free-firmware
deb-src http://deb.debian.org/debian/ trixie-updates main contrib non-free non-free-firmware
```
## Upgrade
Notes:
- choose "yes" to restart services automatically
- keep existing configs as desired
- let GRUB re-install to the boot disk
- keep existing configs as desired (usually Keep)
- let GRUB re-install to the boot disk if asked
```bash
apt-get update
@ -49,15 +48,23 @@ apt-get full-upgrade
## Check
Some upgrades change behaviour and need to be reverted prior to a reboot, such as this bugfix in the D11 kernel which is incompatible with the D12 kernel:
Some upgrades change behaviour and need to be addressed prior to a reboot; for example Nginx configs have set the `server_tokens off;` setting by default in Trixie (13), which will lead to an error and a failure to restart - as the local config is now a duplicate:
```console
$ cat /etc/modprobe.d/iwlwifi.conf
# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969264
#options iwlwifi enable_ini=N
```
nginx[45027]: [emerg] 45027#45027: "server_tokens" directive is duplicate in /etc/nginx/conf.d/security.conf:9
nginx[45027]: nginx: configuration file /etc/nginx/nginx.conf test failed
systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE
```
This setting must be disabled prior to reboot or the `iwlwifi` module will fail to load on boot in D12 as it does not support this option flag.
Fix the issues, e.g.:
```console
$ vim /etc/nginx/conf.d/server.conf
#server_tokens off;
```
Re-run `apt-get full-upgrade` and the process will complete.
## Reboot
@ -78,37 +85,20 @@ dpkg -l | grep -v ^ii
apt-get purge python
```
Look for installed packages not in the repo anymore:
Look for installed packages not in the repo anymore (bsoleted):
```bash
aptitude search "?installed?not(?narrow(?installed,?origin(^Debian$)?archive(^stable)))"
i A cpp-10 - GNU C preprocessor
i A gcc-10 - GNU C compiler
i gcc-10-base - GCC, the GNU Compiler Collection
i gcc-9-base - GCC, the GNU Compiler Collection
i libbpf0 - eBPF helper library (shared library)
i libdns-export1110 - Exported DNS Shared Library
i libffi7 - Foreign Function Interface library
i A libgcc-10-dev - GCC support library (development files)
i libisc-export1105 - Exported ISC Shared Library
i libprocps8 - library for accessing process information
i A libruby2.7 - Libraries necessary to run Ruby 2.7
i libsepol1 - SELinux library for manipulating binary
i libssl1.1 - Secure Sockets Layer toolkit - shared
i A linux-image-5.10.0-26-amd64 - Linux 5.10 for 64-bit PCs (signed)
apt list '~o'
apt purge '~o'
```
Remove the packages which are safe and their unnecessary dependencies:
Look for stale/leftover configs from removed packages:
```bash
apt-get remove --autoremove --purge cpp-10 gcc-10 gcc-10-base \
gcc-9-base libbpf0 libdns-export1110 libffi7 libgcc-10-dev \
libisc-export1105 libprocps8 libruby2.7 libsepol1 libssl1.1 \
linux-image-5.10.0-26-amd64
apt list '~c'
apt purge '~c'
```
Run a quick metadata clean on apt, it should show messages about deleting old index data, packages or other legacy data.
Run a metadata clean on apt, it should show messages about deleting old index data, packages or other legacy data.
```bash
apt-get autoclean