Last active 6 months ago

Revision f20474de26276f1364bbc6f907444e3fa0a673fa

squeeze2wheezy.sh Raw
1Please also refer to http://www.debian.org/releases/wheezy/releasenotes and use your brain!
2For Roundcube and Sqlite Backend see: http://wiki.debian.org/Roundcube/DeprecationOfSQLitev2
3
4
5# upgrade to UTF-8 locales (http://www.debian.org/releases/testing/i386/release-notes/ap-old-stuff.en.html#switch-utf8)
6dpkg-reconfigure locales
7
8# remove unused config file
9rm -rf /etc/network/options /etc/environment
10
11# change distro (please move 3rd party sources to /etc/apt/sources.list.d/), maybe look into http://ftp.cyconet.org/debian/sources.list.d/
12sed -i s/squeeze/wheezy/g /etc/apt/sources.list*
13sed -i "s/ stable/ wheezy/g" /etc/apt/sources.list*
14sed -i s/squeeze/wheezy/g /etc/apt/preferences*
15sed -i /proposed-updates/d /etc/apt/sources.list*
16sed -i /volatile/d /etc/apt/sources.list*
17sed -i /etch/d /etc/apt/sources.list*
18sed -i /lenny/d /etc/apt/sources.list*
19sed -i s#/backports.org/debian#/ftp.de.debian.org/debian#g /etc/apt/sources.list*
20sed -i s/debian-backports/debian/g /etc/apt/sources.list*
21if [ "$( dpkg -l | grep "^ii.*php5-suhosin" | wc -l)" -ge "1" ]; then \
22 wget http://ftp.cyconet.org/debian/sources.list.d/wheezy-updates-cyconet.list \
23 -O /etc/apt/sources.list.d/wheezy-updates-cyconet.list
24fi
25cat >> /etc/apt/preferences <<EOF
26Package: *
27Pin: release a=squeeze-lts
28Pin-Priority: 200
29
30EOF
31aptitude update
32
33# check package status
34dpkg --audit
35aptitude search "~ahold" | grep "^.h"
36dpkg --get-selections | grep hold
37
38# unmark packages auto
39aptitude unmarkauto vim
40aptitude unmarkauto $(dpkg-query -W 'linux-image-2.6.*' | cut -f1)
41
42# have a look into required and free disk space
43apt-get -o APT::Get::Trivial-Only=true dist-upgrade || df -h
44
45# check if we have PAE available (http://www.debian.org/releases/testing/i386/release-notes/ch-upgrading.en.html#idp573136)
46grep -q '^flags.*\bpae\b' /proc/cpuinfo && echo "We support PAE: yes" \
47|| echo "We support PAE: no (please install linux-image-486 and remove linux-image-.*-686)"
48
49# record session
50script -t 2>~/upgrade-wheezy.time -a ~/upgrade-wheezy.script
51
52# install our preseed so libc doesn't whine
53cat > /tmp/wheezy.preseed <<EOF
54libc6 glibc/upgrade boolean true
55libc6 glibc/restart-services string
56libc6 libraries/restart-without-asking boolean true
57EOF
58/usr/bin/debconf-set-selections /tmp/wheezy.preseed
59
60# minimal system upgrade
61aptitude upgrade
62
63# randomize crontab
64sed -i 's#root cd#root perl -e "sleep int(rand(300))" \&\& cd#' /etc/crontab
65sed -i 's#root\ttest#root\tperl -e "sleep int(rand(3600))" \&\& test#' /etc/crontab
66
67# phpmyadmin
68sed -i "s/\['auth_type'\] = 'cookie'/\['auth_type'\] = 'http'/" /etc/phpmyadmin/config.inc.php
69sed -i "s#//\$cfg\['Servers'\]\[\$i\]\['auth_type'\] = 'http';#\$cfg['Servers'][\$i]['auth_type'] = 'http';#" /etc/phpmyadmin/config.inc.php
70
71# remove anonymous mysql access
72mysql -u root -p -e "DELETE FROM mysql.user WHERE User=''; DELETE FROM mysql.db WHERE Db='test' AND Host='%' OR Db='test\\_%' AND Host='%'; FLUSH PRIVILEGES;"
73
74# dont use iptables when creating xen vifs
75cp /etc/xen/scripts/vif-bridge /etc/xen/scripts/vif-bridge-local
76sed -i "s/^ handle_iptable/ true/g" /etc/xen/scripts/vif-bridge-local
77sed -i "s/^(vif-script vif-bridge)/(vif-script vif-bridge-local)/" /etc/xen/xend-config.sxp
78
79# xen
80/bin/sed -i -e 's/^[# ]*\((dom0-min-mem\).*\().*\)$/\1 512\2/' /etc/xen/xend-config.sxp
81sed -i s/XENDOMAINS_RESTORE=true/XENDOMAINS_RESTORE=false/ /etc/default/xendomains
82sed -i s#XENDOMAINS_SAVE=/var/lib/xen/save#XENDOMAINS_SAVE=\"\"# /etc/default/xendomains
83dpkg-divert --divert /etc/grub.d/09_linux_xen --rename /etc/grub.d/20_linux_xen
84#mv /etc/grub.d/20_linux_xen /etc/grub.d/09_linux_xen
85echo 'GRUB_CMDLINE_XEN="dom0_mem=512M"' >> /etc/default/grub
86
87# chrony update
88sed -i s/debian.pool/de.pool/g /etc/chrony/chrony.conf && /etc/init.d/chrony restart
89
90# maybe we want to change some shorewall config stuff again
91sed -i s/^startup=0/startup=1/ /etc/default/shorewall
92
93# dist-upgrade
94aptitude dist-upgrade
95
96# migrate expose.ini
97[ -f /etc/php5/conf.d/expose.ini ] && mv /etc/php5/conf.d/expose.ini \
98 /etc/php5/mods-available/local-expose.ini && php5enmod local-expose/90
99# migrate local suhosin config
100find /etc/php5/conf.d/ -type f -name "*suhosin.ini" -exec mv '{}' \
101 /etc/php5/mods-available/local-suhosin.ini \; && php5enmod local-suhosin/90
102
103# mysql
104
105# vsftpd and chroot_local_user?
106if [ "$(grep -i ^chroot_local_user=yes /etc/vsftpd.conf | wc -l)" -ge "1" ]; then \
107 aptitude update; aptitude install -t wheezy-updates vsftpd && \
108 echo "allow_writeable_chroot=YES" >> /etc/vsftpd.conf && /etc/init.d/vsftpd restart; \
109fi
110
111# install fixed quotatool
112dpkg -l | grep quotatool && aptitude update; aptitude safe-upgrade -t wheezy-updates quotatool
113
114# remove old squeeze packages left around (keep eyes open!)
115apt-get autoremove
116aptitude search ?obsolete
117dpkg -l | grep etch | grep -v xen | grep -v unbound | grep -v finch | awk '{print $2}' | xargs aptitude -y purge
118dpkg -l | grep lenny | grep -v xen | awk '{print $2}' | xargs aptitude -y purge
119dpkg -l | grep squeeze | grep -v xen | grep -v linux-image | awk '{print $2}' | xargs aptitude -y purge
120aptitude -y install deborphan && deborphan | grep -v xen | grep -v libpam-cracklib | xargs aptitude -y purge
121dpkg -l | grep ^r | awk '{print $2}' | xargs aptitude -y purge
122