{"id":293,"date":"2015-10-08T21:19:21","date_gmt":"2015-10-08T21:19:21","guid":{"rendered":"http:\/\/www.micha.name\/blog\/?p=293"},"modified":"2015-10-14T21:27:43","modified_gmt":"2015-10-14T21:27:43","slug":"upgrading-server-from-debian-7-wheezy-to-8-jessie","status":"publish","type":"post","link":"https:\/\/www.micha.name\/blog\/2015\/10\/08\/upgrading-server-from-debian-7-wheezy-to-8-jessie\/","title":{"rendered":"Upgrading server from Debian 7 “wheezy” to 8 “jessie”"},"content":{"rendered":"

Now that Debian 8.2 “Jessie” was released I decided to finally upgrade anaconda<\/strong> from “Wheezy” (Debian 7).<\/p>\n

Preparing for the Upgrade<\/h2>\n

The main issue was how to avoid systemd? Well, simple – pin the offending packages:
\n\/etc\/apt\/preferences.d\/systemd:<\/span>

\n

Package: systemd
\nPin: origin \"\"
\nPin-Priority: -1<\/code><\/p>\n

Package: *systemd*
\nPin: origin “”
\nPin-Priority: -1<\/p>\n

Package: systemd:i386
\nPin: origin “”
\nPin-Priority: -1<\/p>\n

Package: *systemd*:i386
\nPin: origin “”
\nPin-Priority: -1<\/p>\n<\/div>\n

Performing the Upgrade<\/h2>\n

It was a simple matter of replacing “wheezy” with “jessie” in all of the apt-sources, and performing an\u00a0apt-get dist-upgrade<\/code>, which proceeded smoothly. I answered “No” to all the requests to replace configuration files with the new ones,\u00a0preferring to fix them later\u00a0as necessary.<\/p>\n

I then spent some time looking through \/etc<\/code> to see which packages had updated configurations:<\/p>\n

$ find . -name \"*.dpkg*\"<\/code><\/p>\n

What Worked<\/h2>\n

The majority of packages “just worked”, needing little to no post-upgrade maintenance:<\/p>\n

    \n
  • bind9 – DNS<\/li>\n
  • exim4 – SMTP<\/li>\n
  • courier – IMAP<\/li>\n
  • mailman –\u00a0Mailing list manager<\/li>\n
  • mysql – Database server<\/li>\n
  • samba – Windows file server<\/li>\n
  • Mediatomb – UPnP media server<\/li>\n<\/ul>\n

    What Needed Work<\/h2>\n

    The following were\u00a0the main post-upgrade notes:<\/p>\n

    Apache (web server)<\/h3>\n

    There was a bit of a format\u00a0and layout change of the Apache configuration, which broke things including all web-based services. Mostly it was a case of applying the Apache-specific fixes to bring everything else back up.<\/p>\n

      \n
    • New format for Allow\/Deny; required updating various configuration files.<\/li>\n
    • All directories which are outside the Document Root now need an explicit Allow statement, otherwise they can’t be accessed:\n
        \n
      • Require all\u00a0granted<\/code><\/li>\n<\/ul>\n<\/li>\n
      • The\u00a0conf.d<\/code> directory was deprecated in favour of\u00a0conf-available<\/code>, so various configuration files had to be moved; also, all configuration files must now have a “.conf” ending.<\/li>\n<\/ul>\n

        Squid (web proxy)<\/h3>\n

        The main problem is that I was still running a very\u00a0obsolete squid v2 package, but had already installed squid v3 as well. I removed the old squid, and then to get\u00a0squidview<\/strong> working again, created a symlink from \/var\/log\/squid3<\/code> to \/var\/log\/squid<\/code>. Simples.<\/p>\n

        Roundcube (web email)<\/h3>\n

        Mainly worked (following the Apache changes; see above), however, my CA certificate got wiped from the list of trusted certificates so that needed to be reinstalled into \/etc\/ssl\/certs<\/code>.<\/p>\n

        Hobbit\/Xymon (system monitor)<\/h3>\n

        Hobbit is now deprecated in favour of Xymon; I have not yet completed the change-over, but it requires a bit of config copying between the old and the new paths.<\/p>\n

        Major Changes<\/h2>\n

        Applications<\/h3>\n

        Well, obviously – the main reason for an upgrade! Various software packages have had greater or lesser bumps to their versions since the last version of Debian.<\/p>\n

        Filesystem<\/h3>\n

        There’s some filesystem layout changes; for better or worse. Some of the ones I’ve noticed:<\/p>\n

        \/var\/run<\/code> -> \/run<\/code><\/p>\n

        \/var\/www<\/code> -> \/var\/www\/html<\/code><\/p>\n

        Not entirely sure I agree with some of these, especially moving the run directory, as that means more root-directory spam.<\/p>\n

         <\/p>\n

        There are various other notes and issues listed here:<\/p>\n

        https:\/\/www.debian.org\/releases\/stable\/i386\/release-notes\/ch-information.en.html<\/p>\n","protected":false},"excerpt":{"rendered":"

        My experience upgrading anaconda from Debian 7 “wheezy” to Debian 8 “jessie”.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[11,56,29],"tags":[12,21,30],"_links":{"self":[{"href":"https:\/\/www.micha.name\/blog\/wp-json\/wp\/v2\/posts\/293"}],"collection":[{"href":"https:\/\/www.micha.name\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.micha.name\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.micha.name\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.micha.name\/blog\/wp-json\/wp\/v2\/comments?post=293"}],"version-history":[{"count":5,"href":"https:\/\/www.micha.name\/blog\/wp-json\/wp\/v2\/posts\/293\/revisions"}],"predecessor-version":[{"id":304,"href":"https:\/\/www.micha.name\/blog\/wp-json\/wp\/v2\/posts\/293\/revisions\/304"}],"wp:attachment":[{"href":"https:\/\/www.micha.name\/blog\/wp-json\/wp\/v2\/media?parent=293"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.micha.name\/blog\/wp-json\/wp\/v2\/categories?post=293"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.micha.name\/blog\/wp-json\/wp\/v2\/tags?post=293"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}