upgrade virt01 to EL9 - Githubissues

theforeman / foreman-infra

Puppet modules and scripts to manage Foreman project infrastructure

https://theforeman.github.io/foreman-infra

Apache License 2.0

24 stars 51 forks source link

upgrade virt01 to EL9 #2050

Closed evgeni closed 1 month ago

evgeni commented 1 month ago

[x] https://github.com/theforeman/foreman-infra/pull/2068

[root@virt01 ~]# dnf install https://kojihub.stream.centos.org/kojifiles/packages/leapp/0.17.0/1.el8/noarch/leapp-0.17.0-1.el8.noarch.rpm https://kojihub.stream.centos.org/kojifiles/packages/leapp/0.17.0/1.el8/noarch/leapp-deps-0.17.0-1.el8.noarch.rpm https://kojihub.stream.centos.org/kojifiles/packages/leapp/0.17.0/1.el8/noarch/python3-leapp-0.17.0-1.el8.noarch.rpm

[root@virt01 ~]# dnf copr enable packit/evgeni-leapp-repository-2

[root@virt01 ~]# dnf install leapp-upgrade-el8toel9

[root@virt01 ~]# vi /etc/leapp/files/leapp_upgrade_repositories.repo
<adding cs9 repos>

[root@virt01 ~]# leapp preupgrade
…
Upgrade has been inhibited due to the following problems:
    1. Firewalld Configuration AllowZoneDrifting Is Unsupported
    2. Newest installed kernel not in use

Not crazy. AllowZoneDrifting I expected, and I didn't reboot yet.

evgeni commented 1 month ago

I've set AllowZoneDrifting=no in /etc/firewalld/firewalld.conf and rebooted the host.

leapp preupgrade now finishes fine.

evgeni commented 1 month ago

@ekohl @ehelms any objections of "just do" the upgrade Wednesday (CEST) morning?

ehelms commented 1 month ago

@ekohl @ehelms any objections of "just do" the upgrade Wednesday (CEST) morning?

None.

ekohl commented 1 month ago

Nope, just announce the maintenance and proceed

evgeni commented 1 month ago

https://community.theforeman.org/t/virt01-maintenance-2024-05-15-07-00-utc/37952

evgeni commented 1 month ago

This has been successfully completed.

Couple of notes:

For some reason the machine had puppet-agent and puppet-release installed for EL7. I didn't have Puppet repos enabled during the upgrade, so afterwards I've just installed http://yum.puppet.com/puppet7-release-el-9.noarch.rpm and upgraded puppet-agent from there
SELinux is enforcing again (Leapp defaults to permissive)
EL9 doesn't support Spice/QXL graphics anymore, so I had to reconfigure all VMs to use VNC/Cirrus (see https://bugzilla.redhat.com/show_bug.cgi?id=2030592 and https://issues.redhat.com/browse/RHEL-16530)
nbdkit in EL9 has currently broken dependencies (see https://issues.redhat.com/browse/RHEL-35852) which makes dnf upgrade unhappy -- I did not investigate whether this can be just removed, let's hope they'll fix the composes
I've removed all EL8 packages but shim-x64 as for some reason the package in EL9 is the same as in EL8, including the el8 %{dist} macro :confused:

evgeni commented 1 month ago

Oh, and HPE's hponcfg was broken, so I had to patch it a bit: https://www.die-welt.net/2024/05/using-hponcfg-on-centos-stream-9-with-openssl-32/