[tech] Upgrade of Murasoi - Tonight
James Arcus
jimbo at ucc.asn.au
Mon Jul 6 20:54:54 AWST 2020
Hi all,
Good news, the Stretch -> Buster upgrade went off nearly without a
hitch. Murasoi is now running a full Buster kernel and system, with
updates and backports repos enabled. That's a bit of a simplification of
the APT sources prepared to previous, with pinning removed and it no
longer pulling from testing or unstable repos.
There were quite a lot of config changes to manage, most of them were
essentially reverting UCC changes and so I stuck with the original
version. fail2ban got a major upgrade which advised re-writing configs,
however after seemingly not doing anything for a short while after
reboot, it seems to be working fine. The smbd.conf and nmbd.conf got
reverted to package versions, so probably need re-amending if needed.
The wireguard link came back up without a hitch.
Thankfully, the Debian maintainers have kept the functionality of udev's
persistent-net rules in this release, meaning we could continue using
the eth{0,1,2} names instead of the new "predictable" interface names.
That certainly made the job easier, but it's officially unsupported now,
and likely to be removed. We should work on updating murasoi's config to
work with the predictable names and migrate to them.
Thankfully, there weren't any package conflicts or really much manual
intervention required at all. Thanks to [NTU] for working with me and
getting that done.
Cheers,
James [MPT]
On 6/7/20 4:44 pm, James Arcus wrote:
> Hi all,
>
> Murasoi, the main Linux router/firewall, is well and truly due an
> upgrade which I am going to perform tonight. It's currently on the
> previous stable version of Debian, Stretch (9), and will be upgraded
> to Buster (10).
>
> If all goes as it should, there should be minimal disruption to UCC
> services. If it ends up breaking in some way though, most of UCC will
> become inaccessible to the internet for a short time while it is
> repaired. I am currently in the clubroom ready to intervene in person
> if necessary.
>
> Cheers,
>
> James [MPT]
>
> _______________________________________________
> List Archives: http://lists.ucc.asn.au/pipermail/tech
>
> Unsubscribe here:
> https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/jimbo%40ucc.asn.au
More information about the tech
mailing list