[tech] Upgrade of Murasoi - Tonight

James Arcus jimbo at ucc.asn.au
Mon Jul 6 20:54:54 AWST 2020


Hi all,

Good news, the Stretch -> Buster upgrade went off nearly without a 
hitch. Murasoi is now running a full Buster kernel and system, with 
updates and backports repos enabled. That's a bit of a simplification of 
the APT sources prepared to previous, with pinning removed and it no 
longer pulling from testing or unstable repos.

There were quite a lot of config changes to manage, most of them were 
essentially reverting UCC changes and so I stuck with the original 
version. fail2ban got a major upgrade which advised re-writing configs, 
however after seemingly not doing anything for a short while after 
reboot, it seems to be working fine. The smbd.conf and nmbd.conf got 
reverted to package versions, so probably need re-amending if needed. 
The wireguard link came back up without a hitch.

Thankfully, the Debian maintainers have kept the functionality of udev's 
persistent-net rules in this release, meaning we could continue using 
the eth{0,1,2} names instead of the new "predictable" interface names. 
That certainly made the job easier, but it's officially unsupported now, 
and likely to be removed. We should work on updating murasoi's config to 
work with the predictable names and migrate to them.

Thankfully, there weren't any package conflicts or really much manual 
intervention required at all. Thanks to [NTU] for working with me and 
getting that done.

Cheers,

James [MPT]

On 6/7/20 4:44 pm, James Arcus wrote:
> Hi all,
>
> Murasoi, the main Linux router/firewall, is well and truly due an 
> upgrade which I am going to perform tonight. It's currently on the 
> previous stable version of Debian, Stretch (9), and will be upgraded 
> to Buster (10).
>
> If all goes as it should, there should be minimal disruption to UCC 
> services. If it ends up breaking in some way though, most of UCC will 
> become inaccessible to the internet for a short time while it is 
> repaired. I am currently in the clubroom ready to intervene in person 
> if necessary.
>
> Cheers,
>
> James [MPT]
>
> _______________________________________________
> List Archives: http://lists.ucc.asn.au/pipermail/tech
>
> Unsubscribe here: 
> https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/jimbo%40ucc.asn.au


More information about the tech mailing list