Re: Update from 6.5 to 7.3
> On Sep 9, 2023, at 00:54, Alessandro Baggi wrote: >> Il 08/09/23 19:54, Marc Espie ha scritto: >> On Fri, Sep 08, 2023 at 06:36:57PM +0200, Alessandro Baggi wrote: >>> >>> Il 08/09/23 18:24, Peter N. M. Hansteen ha scritto: On Fri, Sep 08, 2023 at 10:01:45AM +0200, Alessandro Baggi wrote: > I've a problem. I need to upgrade OpenBSD from 6.5 to 7.3 on an APU2D. > This > is a firewall. If you are planning to go the supported route and upgrade from release to release, you have eight rounds of upgrading ahead. >>> >>> Actually I upgraded from 6.5 to 7.0 and I learned many new things. Wow...I >>> love OpenBSD. >> Please tell us about your experience ! it's probably going to be rather >> interesting. > > The process is really easy I’ll echo Alessandro’s comments, and add: I’ve been upgrading two OpenBSD Vultr instances since at LEAST 6.4. I can say this authoritatively because I have a directory for each release, with a “Pre” and “Post” file of what to do. I’m actually pretty sure I’ve done it since 6.0, but wasn’t smart enough to keep notes back then. My general process is: * Clone the instance to a new instance * Upgrade the clone and walk through everything in the upgradeXX.html page * sysupgrade * sysmerge * pkg_add -u * pkg_delete -a (check what it does!) * sysclean (confirm what it’s deleting!) * syspatch * reboot * Rinse and repeat until everything comes up cleanly, documenting the things that often have to be handled: * Sysmerge issues (usually pretty straightforward, but sometimes I do wish I could (easily) use sdiff. :-) (it’s pretty easy to do it “manually”, but it took me a few tries to figure it out). * pkg_add -u issues (I’m lookin’ at you, PHP. OMG. I run roundcube, and every other release I have to put back in some extensions to PHP.). <- THIS IS WHERE THE NOTES ARE HELPFUL (doing the same thing over and over again). * The VERY rare “and make sure you do before you even start” type stuff * Take a snapshot * Run the upgrade process with the notes. To date, I’ve never had to revert to the snapshot for a failure. I got WAY behind when OpenSMTPD changes syntax on a bunch of stuff, so I did 6.4->7.1 in like a month. Note, these are my production mail servers (yeah, personal mail servers, but still — the family is NOT happy when mail doesn’t work). The biggest hiccup was having to ask Vultr to mark the instance as an OpenBSD 7.0 instance (which fixed some vm problem causing my instance to reboot randomly). This worked so well, I started to do it for the ALIX/APUs at the house I use for firewalls. Generally, same process. Before that, I had a git repository of installation scripts (I still have that, and used it to go from the ALIX to the APU firewalls, rather than just copying files — keeps the installation bits fresh. :-)). I’ll also say that the more you understand what you’re running on the system, how it’s configured, and how it works, the easier it is when something unexpected happens. So don’t just install using recipes on the web. I mean, it’s fine to use them as a guide, but understand what each step is doing, and why. It really helps a couple of years later when you’re upgrading, and something breaks. Sean
Re: Update from 6.5 to 7.3
Il 08/09/23 19:54, Marc Espie ha scritto: On Fri, Sep 08, 2023 at 06:36:57PM +0200, Alessandro Baggi wrote: Il 08/09/23 18:24, Peter N. M. Hansteen ha scritto: On Fri, Sep 08, 2023 at 10:01:45AM +0200, Alessandro Baggi wrote: I've a problem. I need to upgrade OpenBSD from 6.5 to 7.3 on an APU2D. This is a firewall. The problem is that I cannot find older ISO of OpenBSD. Can someone point me in the right direction? If you are planning to go the supported route and upgrade from release to release, you have eight rounds of upgrading ahead. If this is a firewall that does not do anything else, I would join a few of the other posters here in recommending that you back up the tiny number of files that could differ from a default install do a fresh reinstall, only editing in the things you need from your old /etc/ such as (likely most of) pf.conf. - Peter Actually I upgraded from 6.5 to 7.0 and I learned many new things. Wow...I love OpenBSD. Please tell us about your experience ! it's probably going to be rather interesting. The process is really easy, more easy than on Linux distros. I used media installation images until I learned about sysupgrade, but I can't run it due to cert.pem expired so I did proceed with media installation from 6.5 to 7.0. At 7.0 I copied a valid cert.pem from a 7.3 install and tried to run sysupgrade but it took very long time to get upgrades. I don't know if this is due to my APU2D low resources (on a VM with 7.3 it did very quickly) but sysupgrade stay there for several minutes before starting something (that I can read). I learned also about sysmerge and syspatch, I love this tools. On 6.5 I installed wget with pkg_add and (obviously) running wget from 6.5 to 7.0 got seg fault. So I proceeded to remove all packages installed with pkg_add. Here I learned new things about tool pkg_info. So I reinstalled needed packages with pkg_add. This process is really easy and clean. I learned about a new tool called sysclean but I have not yet tried it. Plus before every upgrade, I read notes from https://www.openbsd.org/faq/upgradeXX.html I got good information about what's updated and what changed for critical services like pf.conf syntax changes. This helped me to reduce errors during upgrade. During the upgrade process from 6.5 to 7.3 I expected a big changes in the system but this is not the case. I love this, OpenBSD (through upgrades) remains modern with new packages (including feautures) and removing unsupported/obsolete software without modifing the core system deeply. The best it does not change to much from 6.5 to 7.0 and this is very good because it maintans a compatibility with scripts and software used in older release (except is some case but it is rare in my usage case). This is not the case of Linux like RHEL upgrades from one major release to another one (I call that a big bang upgrade) where you need to re-deploy all due to incompatibility. Probably the best linux distro that is similar to OpenBSD is Slackware (witch I love) and in second place debian. This is my experiences running upgrades on OpenBSD. PS: I noticed that I can found many resources (blog post, maling list archives, reddit posts) that helped me to solve some problem Best regards
Re: Update from 6.5 to 7.3
I did a few from 6.6 to 7.3 and it was real easy. The source I used was: http://ftp.eu.openbsd.org/pub/OpenBSD/ Looks like this it the one that have the most files from the older version. They have all the files from 2.0 and up. (; Nice if you want to see how the system evolved over time. (; Not saying it's the only one, but that's the best I found with all the oldest one and it worked like a charm. The only thing is that the file system change for the default type in 6.7 from ffs to ffs2. The sysupgrade started in 6.6, so may be that's why my upgrades were super easy. But anything older then 6.7, I did the fresh installed because of the file system change in 6.7 I didn't have any issue with softraid either for any systems that were 6.7 all the way to 7.3 and it was fairly quick. At the end I also used the sysclean as well, BUT SETUP the /etc/sysclean.ignore FIRST. Really that was took me more time to be sure I did this right. But if your careful and know your systems, I see no problem. If you use it without being careful, you CAN MESS YOURSELF real bad! Anything 6.6 and older I did fresh install to change the file system use by default. On softraid system upgrade from 6.7 to 7.3 easy as well. And you can see the file syetem you use as well. Softraid here: sp1$ doas dumpfs /dev/rsd2a | head -1 magic 19540119 (FFS2) timeFri Sep 8 16:38:40 2023 So that's the only hickup may be that I can see. One NONE Softraid system you see the same thing except this is $ doas dumpfs /dev/rsd0a | head -1 magic 11954 (FFS1)timeThu Aug 24 16:29:48 2023 But on system like Octeon, the space from the /usr is just a bit to small. :( I didn't try top do it because of this. Hope this help you and answer your question. Daniel On 9/8/23 1:54 PM, Marc Espie wrote: On Fri, Sep 08, 2023 at 06:36:57PM +0200, Alessandro Baggi wrote: Il 08/09/23 18:24, Peter N. M. Hansteen ha scritto: On Fri, Sep 08, 2023 at 10:01:45AM +0200, Alessandro Baggi wrote: I've a problem. I need to upgrade OpenBSD from 6.5 to 7.3 on an APU2D. This is a firewall. The problem is that I cannot find older ISO of OpenBSD. Can someone point me in the right direction? If you are planning to go the supported route and upgrade from release to release, you have eight rounds of upgrading ahead. If this is a firewall that does not do anything else, I would join a few of the other posters here in recommending that you back up the tiny number of files that could differ from a default install do a fresh reinstall, only editing in the things you need from your old /etc/ such as (likely most of) pf.conf. - Peter Actually I upgraded from 6.5 to 7.0 and I learned many new things. Wow...I love OpenBSD. Please tell us about your experience ! it's probably going to be rather interesting.
Re: Update from 6.5 to 7.3
On Fri, Sep 08, 2023 at 06:36:57PM +0200, Alessandro Baggi wrote: > > > Il 08/09/23 18:24, Peter N. M. Hansteen ha scritto: > > On Fri, Sep 08, 2023 at 10:01:45AM +0200, Alessandro Baggi wrote: > > > I've a problem. I need to upgrade OpenBSD from 6.5 to 7.3 on an APU2D. > > > This > > > is a firewall. > > > The problem is that I cannot find older ISO of OpenBSD. Can someone point > > > me > > > in the right direction? > > > > If you are planning to go the supported route and upgrade from release to > > release, > > you have eight rounds of upgrading ahead. > > > > If this is a firewall that does not do anything else, I would join a few of > > the > > other posters here in recommending that you back up the tiny number of files > > that could differ from a default install do a fresh reinstall, only editing > > in the things you need from your old /etc/ such as (likely most of) pf.conf. > > > > - Peter > > > > Actually I upgraded from 6.5 to 7.0 and I learned many new things. Wow...I > love OpenBSD. Please tell us about your experience ! it's probably going to be rather interesting.
Re: Update from 6.5 to 7.3
Il 08/09/23 18:24, Peter N. M. Hansteen ha scritto: On Fri, Sep 08, 2023 at 10:01:45AM +0200, Alessandro Baggi wrote: I've a problem. I need to upgrade OpenBSD from 6.5 to 7.3 on an APU2D. This is a firewall. The problem is that I cannot find older ISO of OpenBSD. Can someone point me in the right direction? If you are planning to go the supported route and upgrade from release to release, you have eight rounds of upgrading ahead. If this is a firewall that does not do anything else, I would join a few of the other posters here in recommending that you back up the tiny number of files that could differ from a default install do a fresh reinstall, only editing in the things you need from your old /etc/ such as (likely most of) pf.conf. - Peter Actually I upgraded from 6.5 to 7.0 and I learned many new things. Wow...I love OpenBSD. Definitely I will install fresh from 7.3. Thank you for your suggestions. Best regards
Re: Update from 6.5 to 7.3
On Fri, Sep 08, 2023 at 10:01:45AM +0200, Alessandro Baggi wrote: > I've a problem. I need to upgrade OpenBSD from 6.5 to 7.3 on an APU2D. This > is a firewall. > The problem is that I cannot find older ISO of OpenBSD. Can someone point me > in the right direction? If you are planning to go the supported route and upgrade from release to release, you have eight rounds of upgrading ahead. If this is a firewall that does not do anything else, I would join a few of the other posters here in recommending that you back up the tiny number of files that could differ from a default install do a fresh reinstall, only editing in the things you need from your old /etc/ such as (likely most of) pf.conf. - Peter -- Peter N. M. Hansteen, member of the first RFC 1149 implementation team https://bsdly.blogspot.com/ https://www.bsdly.net/ https://www.nuug.no/ "Remember to set the evil bit on all malicious network traffic" delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
Re: Update from 6.5 to 7.3
Once upon a time I provided an official OpenBSD mirror with every release that had a CD release, going back to 2.3, but then the drive failed and I didn't have time to rebuild it. 73 diana On September 8, 2023 2:12:57 AM MDT, "Herbert J. Skuhra" wrote: >On Fri, 08 Sep 2023 10:01:45 +0200, Alessandro Baggi wrote: >> >> Hi list, >> I've a problem. I need to upgrade OpenBSD from 6.5 to 7.3 on an >> APU2D. This is a firewall. >> The problem is that I cannot find older ISO of OpenBSD. Can someone >> point me in the right direction? >> >> Thank you in advance. > >Mirror in Australia: > >https://mirror.aarnet.edu.au/pub/OpenBSD/ > >-- >Herbert >
Re: Update from 6.5 to 7.3
If it's a firewall, chances are that what it's worth is a few files in /etc. It might be much easier to backup, reinstall with 7.3 and give those few files some love. Jan On Sep 08 10:01:45, alessandro.ba...@gmail.com wrote: > Hi list, > I've a problem. I need to upgrade OpenBSD from 6.5 to 7.3 on an APU2D. This > is a firewall. > The problem is that I cannot find older ISO of OpenBSD. Can someone point me > in the right direction? > > Thank you in advance. > >
Re: Update from 6.5 to 7.3
The minimum size for /usr has changed recently. If you used auto partitioning when you installed 6.5, /usr is probably too small for 7.3. On Fri, Sep 8, 2023 at 6:52 AM Zé Loff wrote: > On Fri, Sep 08, 2023 at 10:01:45AM +0200, Alessandro Baggi wrote: > > Hi list, > > I've a problem. I need to upgrade OpenBSD from 6.5 to 7.3 on an APU2D. > This > > is a firewall. > > The problem is that I cannot find older ISO of OpenBSD. Can someone > point me > > in the right direction? > > > > Thank you in advance. > > > > Considering this is a firewall I'm assuming it doesn't differ > significantly from a base install (network config, pf.conf, perhaps some > ssh keys, a couple of packages). If this is the case I'd much rather do > a fresh install and redo the changes. Unless you have a very complex > setup, it's much quicker to start from scratch than do eight upgrades in > a row. > > -- > > >
Re: Update from 6.5 to 7.3
On Fri, Sep 08, 2023 at 10:01:45AM +0200, Alessandro Baggi wrote: > Hi list, > I've a problem. I need to upgrade OpenBSD from 6.5 to 7.3 on an APU2D. This > is a firewall. > The problem is that I cannot find older ISO of OpenBSD. Can someone point me > in the right direction? > > Thank you in advance. > Considering this is a firewall I'm assuming it doesn't differ significantly from a base install (network config, pf.conf, perhaps some ssh keys, a couple of packages). If this is the case I'd much rather do a fresh install and redo the changes. Unless you have a very complex setup, it's much quicker to start from scratch than do eight upgrades in a row. --
Re: Update from 6.5 to 7.3
Il 08/09/23 10:12, Herbert J. Skuhra ha scritto: On Fri, 08 Sep 2023 10:01:45 +0200, Alessandro Baggi wrote: Hi list, I've a problem. I need to upgrade OpenBSD from 6.5 to 7.3 on an APU2D. This is a firewall. The problem is that I cannot find older ISO of OpenBSD. Can someone point me in the right direction? Thank you in advance. Mirror in Australia: https://mirror.aarnet.edu.au/pub/OpenBSD/ -- Herbert Hi Herbert, thank you very much for the resource. Best regards.
Re: Update from 6.5 to 7.3
On Fri, 08 Sep 2023 10:01:45 +0200, Alessandro Baggi wrote: > > Hi list, > I've a problem. I need to upgrade OpenBSD from 6.5 to 7.3 on an > APU2D. This is a firewall. > The problem is that I cannot find older ISO of OpenBSD. Can someone > point me in the right direction? > > Thank you in advance. Mirror in Australia: https://mirror.aarnet.edu.au/pub/OpenBSD/ -- Herbert
