Last active 6 months ago

Revision 0f0d9af3fe47ee5696e994c6141fedf2277c794b

squeeze2wheezy.sh Raw
1Please also refer to http://www.debian.org/releases/wheezy/releasenotes and use your brain!
2For Roundcube and Sqlite Backend see: http://wiki.debian.org/Roundcube/DeprecationOfSQLitev2
3
4
5# upgrade to UTF-8 locales (http://www.debian.org/releases/testing/i386/release-notes/ap-old-stuff.en.html#switch-utf8)
6dpkg-reconfigure locales
7
8# remove unused config file
9rm -rf /etc/network/options /etc/environment
10
11# change distro (please move 3rd party sources to /etc/apt/sources.list.d/), maybe look into http://ftp.cyconet.org/debian/sources.list.d/
12sed -i s/squeeze/wheezy/g /etc/apt/sources.list*
13sed -i "s/ stable/ wheezy/g" /etc/apt/sources.list*
14sed -i s/squeeze/wheezy/g /etc/apt/preferences*
15sed -i /proposed-updates/d /etc/apt/sources.list*
16sed -i /volatile/d /etc/apt/sources.list*
17sed -i /etch/d /etc/apt/sources.list*
18sed -i /lenny/d /etc/apt/sources.list*
19sed -i s#/backports.org/debian#/ftp.de.debian.org/debian#g /etc/apt/sources.list*
20sed -i s/debian-backports/debian/g /etc/apt/sources.list*
21if [ "$( dpkg -l | grep "^ii.*php5-suhosin" | wc -l)" -ge "1" ]; then \
22 wget http://ftp.cyconet.org/debian/sources.list.d/wheezy-updates-cyconet.list \
23 -O /etc/apt/sources.list.d/wheezy-updates-cyconet.list
24fi
25aptitude update
26
27# check package status
28dpkg --audit
29aptitude search "~ahold" | grep "^.h"
30dpkg --get-selections | grep hold
31
32# unmark packages auto
33aptitude unmarkauto vim
34aptitude unmarkauto $(dpkg-query -W 'linux-image-2.6.*' | cut -f1)
35
36# have a look into required and free disk space
37apt-get -o APT::Get::Trivial-Only=true dist-upgrade || df -h
38
39# check if we have PAE available (http://www.debian.org/releases/testing/i386/release-notes/ch-upgrading.en.html#idp573136)
40grep -q '^flags.*\bpae\b' /proc/cpuinfo && echo "We support PAE: yes" \
41|| echo "We support PAE: no (please install linux-image-486 and remove linux-image-.*-686)"
42
43# record session
44script -t 2>~/upgrade-wheezy.time -a ~/upgrade-wheezy.script
45
46# install our preseed so libc doesn't whine
47cat > /tmp/wheezy.preseed <<EOF
48libc6 glibc/upgrade boolean true
49libc6 glibc/restart-services string
50libc6 libraries/restart-without-asking boolean true
51EOF
52/usr/bin/debconf-set-selections /tmp/wheezy.preseed
53
54# minimal system upgrade
55aptitude upgrade
56
57# randomize crontab
58sed -i 's#root cd#root perl -e "sleep int(rand(300))" \&\& cd#' /etc/crontab
59sed -i 's#root\ttest#root\tperl -e "sleep int(rand(3600))" \&\& test#' /etc/crontab
60
61# phpmyadmin
62sed -i "s/\['auth_type'\] = 'cookie'/\['auth_type'\] = 'http'/" /etc/phpmyadmin/config.inc.php
63sed -i "s#//\$cfg\['Servers'\]\[\$i\]\['auth_type'\] = 'http';#\$cfg['Servers'][\$i]['auth_type'] = 'http';#" /etc/phpmyadmin/config.inc.php
64
65# remove anonymous mysql access
66mysql -u root -p -e "DELETE FROM mysql.user WHERE User=''; DELETE FROM mysql.db WHERE Db='test' AND Host='%' OR Db='test\\_%' AND Host='%'; FLUSH PRIVILEGES;"
67
68# dont use iptables when creating xen vifs
69cp /etc/xen/scripts/vif-bridge /etc/xen/scripts/vif-bridge-local
70sed -i "s/^ handle_iptable/ true/g" /etc/xen/scripts/vif-bridge-local
71sed -i "s/^(vif-script vif-bridge)/(vif-script vif-bridge-local)/" /etc/xen/xend-config.sxp
72
73# xen
74/bin/sed -i -e 's/^[# ]*\((dom0-min-mem\).*\().*\)$/\1 512\2/' /etc/xen/xend-config.sxp
75sed -i s/XENDOMAINS_RESTORE=true/XENDOMAINS_RESTORE=false/ /etc/default/xendomains
76sed -i s#XENDOMAINS_SAVE=/var/lib/xen/save#XENDOMAINS_SAVE=\"\"# /etc/default/xendomains
77dpkg-divert --divert /etc/grub.d/09_linux_xen --rename /etc/grub.d/20_linux_xen
78#mv /etc/grub.d/20_linux_xen /etc/grub.d/09_linux_xen
79echo 'GRUB_CMDLINE_XEN="dom0_mem=512M"' >> /etc/default/grub
80
81# maybe we want to change some shorewall config stuff again
82sed -i s/^startup=0/startup=1/ /etc/default/shorewall
83
84# dist-upgrade
85aptitude dist-upgrade
86
87# migrate expose.ini
88[ -f /etc/php5/conf.d/expose.ini ] && mv /etc/php5/conf.d/expose.ini \
89 /etc/php5/mods-available/local-expose.ini && php5enmod local-expose/90
90# migrate local suhosin config
91find /etc/php5/conf.d/ -type f -name "*suhosin.ini" -exec mv '{}' \
92 /etc/php5/mods-available/local-suhosin.ini \; && php5enmod local-suhosin/90
93
94# mysql
95
96# vsftpd and chroot_local_user?
97if [ "$(grep -i ^chroot_local_user=yes /etc/vsftpd.conf | wc -l)" -ge "1" ]; then \
98 aptitude update; aptitude install -t wheezy-updates vsftpd && \
99 echo "allow_writeable_chroot=YES" >> /etc/vsftpd.conf && /etc/init.d/vsftpd restart; \
100fi
101
102# install fixed quotatool
103dpkg -l | grep quotatool && aptitude update; aptitude safe-upgrade -t wheezy-updates quotatool
104
105# remove old squeeze packages left around (keep eyes open!)
106apt-get autoremove
107aptitude search ?obsolete
108dpkg -l | grep etch | grep -v xen | grep -v unbound | grep -v finch | awk '{print $2}' | xargs aptitude -y purge
109dpkg -l | grep lenny | grep -v xen | awk '{print $2}' | xargs aptitude -y purge
110dpkg -l | grep squeeze | grep -v xen | grep -v linux-image | awk '{print $2}' | xargs aptitude -y purge
111aptitude -y install deborphan && deborphan | grep -v xen | grep -v libpam-cracklib | xargs aptitude -y purge
112dpkg -l | grep ^r | awk '{print $2}' | xargs aptitude -y purge
113