updates for trixie

tengel 2025-08-25 08:38:27 -05:00
parent 7cfbe6f921
commit 0c2938c54b

@ -1,6 +1,6 @@
# Debian Upgrade # Debian Upgrade
> bullseye (11) to bookworm (12) > bookworm (12) to trixie (13)
## Prep ## Prep
@ -21,25 +21,24 @@ reboot
## Sources ## Sources
The path name of Security changed from Buster to Bullseye, Bookwork adds non-free-firmware; basic example:
``` ```
deb http://deb.debian.org/debian/ bookworm main contrib non-free non-free-firmware deb http://deb.debian.org/debian/ trixie main contrib non-free non-free-firmware
deb-src http://deb.debian.org/debian/ bookworm main contrib non-free non-free-firmware deb-src http://deb.debian.org/debian/ trixie main contrib non-free non-free-firmware
deb http://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware deb http://security.debian.org/debian-security trixie-security main contrib non-free non-free-firmware
deb-src http://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware deb-src http://security.debian.org/debian-security trixie-security main contrib non-free non-free-firmware
deb http://deb.debian.org/debian/ bookwork-updates main contrib non-free non-free-firmware deb http://deb.debian.org/debian/ trixie-updates main contrib non-free non-free-firmware
deb-src http://deb.debian.org/debian/ bookworm-updates main contrib non-free non-free-firmware deb-src http://deb.debian.org/debian/ trixie-updates main contrib non-free non-free-firmware
``` ```
## Upgrade ## Upgrade
Notes: Notes:
- choose "yes" to restart services automatically - choose "yes" to restart services automatically
- keep existing configs as desired - keep existing configs as desired (usually Keep)
- let GRUB re-install to the boot disk - let GRUB re-install to the boot disk if asked
```bash ```bash
apt-get update apt-get update
@ -49,15 +48,23 @@ apt-get full-upgrade
## Check ## Check
Some upgrades change behaviour and need to be reverted prior to a reboot, such as this bugfix in the D11 kernel which is incompatible with the D12 kernel: Some upgrades change behaviour and need to be addressed prior to a reboot; for example Nginx configs have set the `server_tokens off;` setting by default in Trixie (13), which will lead to an error and a failure to restart - as the local config is now a duplicate:
```console ```
$ cat /etc/modprobe.d/iwlwifi.conf nginx[45027]: [emerg] 45027#45027: "server_tokens" directive is duplicate in /etc/nginx/conf.d/security.conf:9
# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969264 nginx[45027]: nginx: configuration file /etc/nginx/nginx.conf test failed
#options iwlwifi enable_ini=N systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE
``` ```
This setting must be disabled prior to reboot or the `iwlwifi` module will fail to load on boot in D12 as it does not support this option flag. Fix the issues, e.g.:
```console
$ vim /etc/nginx/conf.d/server.conf
#server_tokens off;
```
Re-run `apt-get full-upgrade` and the process will complete.
## Reboot ## Reboot
@ -78,37 +85,20 @@ dpkg -l | grep -v ^ii
apt-get purge python apt-get purge python
``` ```
Look for installed packages not in the repo anymore: Look for installed packages not in the repo anymore (bsoleted):
```bash ```bash
aptitude search "?installed?not(?narrow(?installed,?origin(^Debian$)?archive(^stable)))" apt list '~o'
apt purge '~o'
i A cpp-10 - GNU C preprocessor
i A gcc-10 - GNU C compiler
i gcc-10-base - GCC, the GNU Compiler Collection
i gcc-9-base - GCC, the GNU Compiler Collection
i libbpf0 - eBPF helper library (shared library)
i libdns-export1110 - Exported DNS Shared Library
i libffi7 - Foreign Function Interface library
i A libgcc-10-dev - GCC support library (development files)
i libisc-export1105 - Exported ISC Shared Library
i libprocps8 - library for accessing process information
i A libruby2.7 - Libraries necessary to run Ruby 2.7
i libsepol1 - SELinux library for manipulating binary
i libssl1.1 - Secure Sockets Layer toolkit - shared
i A linux-image-5.10.0-26-amd64 - Linux 5.10 for 64-bit PCs (signed)
``` ```
Remove the packages which are safe and their unnecessary dependencies: Look for stale/leftover configs from removed packages:
```bash ```bash
apt-get remove --autoremove --purge cpp-10 gcc-10 gcc-10-base \ apt list '~c'
gcc-9-base libbpf0 libdns-export1110 libffi7 libgcc-10-dev \ apt purge '~c'
libisc-export1105 libprocps8 libruby2.7 libsepol1 libssl1.1 \
linux-image-5.10.0-26-amd64
``` ```
Run a quick metadata clean on apt, it should show messages about deleting old index data, packages or other legacy data. Run a metadata clean on apt, it should show messages about deleting old index data, packages or other legacy data.
```bash ```bash
apt-get autoclean apt-get autoclean