Differences between revisions 5 and 6
Revision 5 as of 2009-05-30 17:57:26
Size: 9183
Editor: HolgerLevsen
Comment: remove FIXMEs as the Lenny version should be developed now
Revision 6 as of 2009-09-01 06:31:55
Size: 9127
Editor: GeoffSimmons
Comment: DebianBug, fix formatting.
Deletions are marked like this. Additions are marked like this.
Line 36: Line 36:
        {{{ /etc/init.d/squid stop         {{{
/etc/init.d/squid stop
Line 49: Line 50:
        {{{mount /var         {{{
mount /var
Line 54: Line 56:
     {{{deb http://ftp.debian.org/debian etch main      {{{
deb http://ftp.debian.org/debian etch main
Line 59: Line 62:
     {{{aptitude update      {{{
aptitude update
Line 105: Line 109:
{{{Errors were encountered while processing: {{{
Errors were encountered while processing:
Line 121: Line 126:
{{{Errors were encountered while processing: {{{
Errors were encountered while processing:
Line 129: Line 135:
{{{ chown -R openldap:openldap /etc/ldap/ {{{
chown -R openldap:openldap /etc/ldap/
Line 138: Line 145:
{{{Errors were encountered while processing: {{{
Errors were encountered while processing:
Line 155: Line 163:
See [[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=386791|#386791]] for more information. See DebianBug:386791 for more information.
Line 173: Line 181:
Upgrades from the woody based Debian Edu / Skolelinux installation are not supported. Upgrade to the sarge based version first, a howto can be found at [[http://wiki.debian.org/DebianEdu/HowTo/UpgradeFrom1.0]]. Then upgrade to Terrra (etch-based Release). Upgrades from the woody based Debian Edu / Skolelinux installation are not supported. Upgrade to the sarge based version first, a howto can be found at [[DebianEdu/HowTo/UpgradeFrom1.0]]. Then upgrade to Terrra (etch-based Release).


Before explaining how to upgrade, please note, that you do this update on your productive server on your own risk. Debian Edu/Skolelinux comes with ABSOLUTELY NO WARRANTY, to the extent permitted by applicable law. Please read this chapter completly before attempting to upgrade.

More information about the Debian etch release is available in its installation manual.

If you want to be sure that after the upgrade everything works like before , you should test the upgrade on a test server, which is configured the same way as your production server. There you can test the upgrade without risk and see if everything works as it should.

Also it might be wise to wait a bit and keep running sarge for some more weeks, so that others can test the upgrade, experience problems and document them here. Debian Edu sarge will receive continued support for some time in the future, but when Debian ceases support for sarge, Debian Edu will (have to) do that too. This is expected to happen in April 2008.

Upgrades from Debian Edu sarge

Please read this chapter completly before you start upgrading your systems.

In case of problems you could also read the releasenotes for Debian etch. (Debian Edu/Skolelinux "2.0 Terra" installed a 2.6 kernel as default, but if you are running a 2.4 kernel, you should read the notes on upgrading from kernel 2.4 to 2.6 before you upgrade!)

Partioning scheme changed

The main problem upgrading from the sarge-based Release to Terra is that the Partition Scheme changed completly. The sarge-based Release has two volume Groups:

  • vg_data which holds the Data Partition as /skole/tjener/home0, ...
  • vg_system contains System Partitions as /var, /usr /var/spool/squid

But the etch based release has only 1 Volume Group due to internal changes of the Installer.

The main problem is that the vg_system volumegroup is quite small since the data in this partition is mostly static. When trying the upgrade on a virtual machine with an 8GB harddrive, the upgrade failed since it was not possible to free more space on the vg_sytem. Please note that you should have about 1,5GB free space on /var and about 600MB free space on /usr. If this is not the case the upgrade will fail because of too little free space on the device.

Prepare the system

If you have enough space in the vg_system volumegroup but not in the lv_var partition, you have to resize this partition:

  • 1.) Umount the /var partition, you 'll have to umount the /var/spool/squid partition for this to work, too:

    • /etc/init.d/squid stop
      umount /var/spool/squid
      umount -fl /var 
    2.) fsck the partition:
    • e2fsck -f /dev/vg_system/lv_data 
    3.) resize the partition:
    • lvextend -L +1GB /dev/vg_system/lv_data 
    4.) resize the filesystem:
    • resize2fs /dev/vg_system/lv_data
    5.) mount the partitions again:
    • mount /var
      mount /var/spool/squid
      /etc/init.d/squid start 

Now modify /etc/apt/sources.list to contain these lines

  • deb http://ftp.debian.org/debian etch main
    deb http://security.debian.org/ etch/updates main 
    deb http://ftp.skolelinux.org/skolelinux etch local

And start the upgrade with:

  • aptitude update
    aptitude dist-upgrade 

Answers to debconf questions raising during upgrade

Here we can give you some hints, what you should answer to the debconf question during the upgrade. But please note: This upgrade HowTo is based on a very plain fresh installation of an mainserver + terminalserver.

Which questions exactly raise up in addition to the ones described here depends on what is additionally installed on your system. (Additionally to what is installed as default in the sarge based Debian Edu release). So if there are any questions which you don't know how to answer, don't hesitate to ask us at the mailinglist (debian-edu@lists.debian.org) or at IRC (irc.oftc.net): #debian-edu.

* Configure nagios-common.

  • Here you have to enter a password for the nagiosadmin user.

* Configure console-data

  • Choose "Don't change keyboard layout"

* Configure openssh-server

  • Don't deactivate challenge-response Auth.

* Configure systat

  • Choose the default (yes) here.

* Configure popularity-contest

  • If you choose "yes", this will help us improve Debian Edu. (We'll get an weekly report which programs are how often used). The data is gathered anonymously and you have the option to say "no".

* Configure libnss-ldap

  1. Change the prompt to: ldaps://ldap/

  2. Change the prompt to: dc=skole,dc=skolelinux,dc=no

  3. Use ldapversion 3 here
  4. Which account should root use for ldap lookups
  5. Which password should root use here

* Upgrade glibc now. Answer "yes".

* Restart Services. Answer "yes".

These are the debconf questions you will see if you have no additional packages installed.

Now the upgrade process will start to upgrade the packages.

Please note: You will be asked several times if you want to keep your old modified version of a configfile or if you want to get the latest. The default is to keep your modified one. Unless you really have modified something, please always choose: "Install the latest one".

The upgrade will fail with this error message:

Errors were encountered while processing:
E: Sub-process /usr/bin/dpkg returned an error code (1)

To fix this you have to edit these two files: /var/lib/dpkg/info/mozilla-firefox-locale-it.postrm and /var/lib/dpkg/info/mozilla-firefox-local-el.postrm and comment out in both the line containing: update-mozilla-firefox-chrome. Then restart the upgrade process with:

apt-get -f install

Now the upgrade continues:

* Several Modified configuration files (nagios)

  • You should always keep your installed one (default) and hit enter

Then the installation failes another time:

Errors were encountered while processing:
E: Sub-process /usr/bin/dpkg returned an error code (1)

In order to fix this, rename this directory: /var/backups/dc=skole,dc=skolelinux,dc=no-2.2.23-8.ldapdb and since openldap now runs as user openldap (instead of as root) the permissions of the configuration files have to be changed:

chown -R openldap:openldap /etc/ldap/
apt-get -f install

Then the installation should finish without an error. Since now many packages are not upgrades please restart the dist-upgrade process again with:

aptitude dist-upgrade

The next error raising up is this one:

Errors were encountered while processing:
E: Sub-process /usr/bin/dpkg returned an error code (1)

Please remove the package: courier-ldap with

aptitude remove courier-ldap

and wait until it is finished.Then restart the dist-upgrade process again.

If you have only the default packages installed the upgrade process should now finish without raising more errors.

Problem upgrading bind

The only remaining upgrade issue is that the user of bind9 has changed, so you'll have to chown all bind-configuration files.

chown bind:root -R /etc/bind 

See 386791 for more information.

Samba groupmaps handeling changed

There has been a change in how samba handles groupmaps between sarge and etch. Samba in sarge handled groupmaps internally, so a unix group was also a samba group. In etch samba keeps groupmap information in the LDAP database. Unfortunatly this issue was discovered too late for our LDAP admin tool "lwat" to be aware of the situation.

When you upgrade your LDAP from a sarge installation, you must make sure to create the Domain Admins account, neccessary for correct samba domain operation. Create the Domain Admins account with the command:

/usr/bin/net groupmap add rid=512 unixgroup=admins \
             type=domain ntgroup="Domain Admins" \
             comment="All system administrators in the school"

If you want your Windows computers to be aware of what groups users are in, you must create the groupmaps in LDAP manually, this is explained in more detail in the HowTo/NetworkClients chapter of this manual.

Upgrades from older Debian Edu / Skolelinux installations

Upgrades from the woody based Debian Edu / Skolelinux installation are not supported. Upgrade to the sarge based version first, a howto can be found at ?DebianEdu/HowTo/UpgradeFrom1.0. Then upgrade to Terrra (etch-based Release).