From 0c2938c54b01a1ee524bcc90167df6786d9e82ec Mon Sep 17 00:00:00 2001 From: tengel Date: Mon, 25 Aug 2025 08:38:27 -0500 Subject: [PATCH] updates for trixie --- Debian-Upgrade.md | 70 ++++++++++++++++++++--------------------------- 1 file changed, 30 insertions(+), 40 deletions(-) diff --git a/Debian-Upgrade.md b/Debian-Upgrade.md index aa40d52..903764f 100644 --- a/Debian-Upgrade.md +++ b/Debian-Upgrade.md @@ -1,6 +1,6 @@ # Debian Upgrade -> bullseye (11) to bookworm (12) +> bookworm (12) to trixie (13) ## Prep @@ -21,25 +21,24 @@ reboot ## Sources -The path name of Security changed from Buster to Bullseye, Bookwork adds non-free-firmware; basic example: ``` -deb http://deb.debian.org/debian/ bookworm main contrib non-free non-free-firmware -deb-src http://deb.debian.org/debian/ bookworm main contrib non-free non-free-firmware +deb http://deb.debian.org/debian/ trixie main contrib non-free non-free-firmware +deb-src http://deb.debian.org/debian/ trixie main contrib non-free non-free-firmware -deb http://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware -deb-src http://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware +deb http://security.debian.org/debian-security trixie-security main contrib non-free non-free-firmware +deb-src http://security.debian.org/debian-security trixie-security main contrib non-free non-free-firmware -deb http://deb.debian.org/debian/ bookwork-updates main contrib non-free non-free-firmware -deb-src http://deb.debian.org/debian/ bookworm-updates main contrib non-free non-free-firmware +deb http://deb.debian.org/debian/ trixie-updates main contrib non-free non-free-firmware +deb-src http://deb.debian.org/debian/ trixie-updates main contrib non-free non-free-firmware ``` ## Upgrade Notes: - choose "yes" to restart services automatically - - keep existing configs as desired - - let GRUB re-install to the boot disk + - keep existing configs as desired (usually Keep) + - let GRUB re-install to the boot disk if asked ```bash apt-get update @@ -49,15 +48,23 @@ apt-get full-upgrade ## Check -Some upgrades change behaviour and need to be reverted prior to a reboot, such as this bugfix in the D11 kernel which is incompatible with the D12 kernel: +Some upgrades change behaviour and need to be addressed prior to a reboot; for example Nginx configs have set the `server_tokens off;` setting by default in Trixie (13), which will lead to an error and a failure to restart - as the local config is now a duplicate: -```console -$ cat /etc/modprobe.d/iwlwifi.conf -# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969264 -#options iwlwifi enable_ini=N +``` +nginx[45027]: [emerg] 45027#45027: "server_tokens" directive is duplicate in /etc/nginx/conf.d/security.conf:9 +nginx[45027]: nginx: configuration file /etc/nginx/nginx.conf test failed +systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE ``` -This setting must be disabled prior to reboot or the `iwlwifi` module will fail to load on boot in D12 as it does not support this option flag. +Fix the issues, e.g.: + +```console +$ vim /etc/nginx/conf.d/server.conf +#server_tokens off; +``` + +Re-run `apt-get full-upgrade` and the process will complete. + ## Reboot @@ -78,37 +85,20 @@ dpkg -l | grep -v ^ii apt-get purge python ``` -Look for installed packages not in the repo anymore: +Look for installed packages not in the repo anymore (bsoleted): ```bash -aptitude search "?installed?not(?narrow(?installed,?origin(^Debian$)?archive(^stable)))" - -i A cpp-10 - GNU C preprocessor -i A gcc-10 - GNU C compiler -i gcc-10-base - GCC, the GNU Compiler Collection -i gcc-9-base - GCC, the GNU Compiler Collection -i libbpf0 - eBPF helper library (shared library) -i libdns-export1110 - Exported DNS Shared Library -i libffi7 - Foreign Function Interface library -i A libgcc-10-dev - GCC support library (development files) -i libisc-export1105 - Exported ISC Shared Library -i libprocps8 - library for accessing process information -i A libruby2.7 - Libraries necessary to run Ruby 2.7 -i libsepol1 - SELinux library for manipulating binary -i libssl1.1 - Secure Sockets Layer toolkit - shared -i A linux-image-5.10.0-26-amd64 - Linux 5.10 for 64-bit PCs (signed) +apt list '~o' +apt purge '~o' ``` -Remove the packages which are safe and their unnecessary dependencies: - +Look for stale/leftover configs from removed packages: ```bash -apt-get remove --autoremove --purge cpp-10 gcc-10 gcc-10-base \ - gcc-9-base libbpf0 libdns-export1110 libffi7 libgcc-10-dev \ - libisc-export1105 libprocps8 libruby2.7 libsepol1 libssl1.1 \ - linux-image-5.10.0-26-amd64 +apt list '~c' +apt purge '~c' ``` -Run a quick metadata clean on apt, it should show messages about deleting old index data, packages or other legacy data. +Run a metadata clean on apt, it should show messages about deleting old index data, packages or other legacy data. ```bash apt-get autoclean