跳至内容

Jixun's Blog 填坑还是开坑,这是个好问题。

从 Debian 10 升级到 11

Debian 11 发布了,这两天把几个服务器升级测试一下效果。

博客所在的服务器已经升级了,体验起来没有什么大问题。

把执行的指令记录了一下。升级过程中的下线时间大概在半小时到一小时之间。

# 可选: 开启记录,方便差错
script -t 2>~/upgrade-bullseye.time -a ~/upgrade-bullseye.script
# scriptreplay ~/upgrade-bullseye.time ~/upgrade-bullseye.script

# 更新系统的包到最新
apt update
apt full-upgrade

# 修改系统的新源
# 注意: “debian-security buster/updates main” 要变成 “debian-security bullseye-security/updates main”
sed -i 's/buster/bullseye/g' /etc/apt/sources.list
sed -i 's#debian-security bullseye/updates main#debian-security bullseye-security/updates main#g' /etc/apt/sources.list

# backports
if [ -f /etc/apt/sources.list.d/buster-backports.list ]; then
  sed -i 's/buster/bullseye/g' /etc/apt/sources.list.d/buster-backports.list
  mv /etc/apt/sources.list.d/{buster,bullseye}-backports.list
fi

# node.js
if [ -f /etc/apt/sources.list.d/nodesource.list ]; then
  sed -i 's/buster/bullseye/g' /etc/apt/sources.list.d/nodesource.list
fi

# docker
if [ -f  /etc/apt/sources.list.d/download_docker_com_linux_debian.list ]; then
  curl -fsSL https://download.docker.com/linux/debian/gpg |\
    gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
  echo "deb [arch=amd64 signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] \
    https://download.docker.com/linux/debian \
    $(lsb_release -cs) stable" > /etc/apt/sources.list.d/docker.list
  rm  /etc/apt/sources.list.d/download_docker_com_linux_debian.list
elif [ -f /etc/apt/sources.list.d/docker.list ]; then
  sed -i 's/buster/bullseye/g' /etc/apt/sources.list.d/docker.list
fi

# 之前配置的奇怪的地址修正…
sed -i 's#security.debian.org bullseye/updates main#security.debian.org/debian-security bullseye-security/updates main#g' /etc/apt/sources.list

# 更新,注意手动确认是否需要替换为包维护者的配置文件。
apt update
apt full-upgrade --autoremove

# 检查下是否需要手动替换或删除的配置文件:
find /etc -xdev -name '*.dpkg-new'
find /etc -xdev -name '*.dpkg-old'

# sshd_config: Port 行前加入 "Include /etc/ssh/sshd_config.d/*.conf"
sed -i '/^Port /i Include /etc/ssh/sshd_config.d/*.conf' /etc/ssh/sshd_config

# 替换 PHP 7.3 到 7.4 (可惜官方源还没有 8)
# 然后重启 nginx
grep -Rl 'php7\.3-fpm' /etc/nginx |\
  xargs --no-run-if-empty -- sed -i 's/php7\.3-fpm/php7\.4-fpm/g'
nginx -s reload

# 如果机器内存 < 512MB 则禁用 dpkg 的清理任务
< /proc/meminfo awk '$1 == "MemTotal:" && $2 > 524288 { exit 1 }' && \
  mv /etc/cron.daily/dpkg{,.disabled}

# 如果需要升级 Docker@buster 的包到 bullseye
# apt --reinstall install docker-ce=5:20.10.8~3-0~debian-bullseye docker-ce-cli=5:20.10.8~3-0~debian-bullseye containerd.io=1.4.9-1

# 检查下 SSH 能否正常登入,然后重启

#   reboot

# 检查下 dkms 模块是否都加载了(如果有)
command -v dkms && dkms status

参考资料

  1. debian.org: Chapter 4. Upgrades from Debian 10 (buster)
  2. ubuntu.org: Configuration

知识共享许可协议 本作品采用知识共享署名-相同方式共享 4.0 国际许可协议进行许可。

评论区