upgrade puppet01 to EL9

[evgeni]

No description provided.

[evgeni]

• Upgrade to Foreman 3.11 #2098
• prepare system for upgrade

[root@puppet01 ~]# sed -i 's/^mirrorlist/#&/; s/^#baseurl/baseurl/; s/mirror.centos.org/vault.centos.org/' /etc/yum.repos.d/CentOS-Stream-*.repo
[root@puppet01 ~]# puppet agent -t 

• migrate PostgreSQL to 13 (yes, really, damn modules)

[root@puppet01 ~]# dnf module switch-to postgresql:13

• upgrade to 3.11

[root@puppet01 ~]# dnf upgrade
[root@puppet01 ~]# systemctl restart foreman-proxy

• Leapp

[root@virt01 ~]# lvcreate --size 20G --name puppet01_snap --snapshot /dev/mapper/cs_node01-virt_puppet01
  Logical volume "puppet01_snap" created.

[root@puppet01 ~]# dnf copr enable @theforeman/leapp
[root@puppet01 ~]# dnf install leapp leapp-upgrade-el8toel9 leapp-data-centos

[root@puppet01 ~]# vi /etc/leapp/files/leapp_upgrade_repositories.repo 
<add puppet and foreman repos>

[root@puppet01 ~]# leapp preupgrade
…
Upgrade has been inhibited due to the following problems:
    1. Cannot perform the VDO check of block devices
    2. Newest installed kernel not in use
    3. Detected RPMs with RSA/SHA1 signature
    4. Firewalld Configuration AllowZoneDrifting Is Unsupported
    5. Missing required answers in the answer file

[root@puppet01 ~]# dnf install vdo
[root@puppet01 ~]# vi /etc/firewalld/firewalld.conf
<AllowZoneDrifting=no>

[root@puppet01 ~]# dnf remove python3-pexpect # that's the SHA1 signed package, which we don't need anymore
[root@puppet01 ~]# reboot

[root@puppet01 ~]# leapp preupgrade
<happy>
[root@puppet01 ~]# leapp upgrade
[root@puppet01 ~]# reboot
<wait>
in the first boot process, leapp_resume failed to call foreman-installer as we don't use it, but finished everything else, and the machine seems to work fine

[root@puppet01 ~]# vi /etc/selinux/config 
[root@puppet01 ~]# reboot

[root@puppet01 ~]# dnf remove python39-ptyprocess-0.7.0-1.el8.noarch  kernel-modules-4.18.0-552.1.1.el8.x86_64 kernel-modules-4.18.0-553.6.1.el8.x86_64 kernel-core-4.18.0-552.1.1.el8.x86_64  kernel-4.18.0-552.1.1.el8.x86_64  python39-pexpect-4.8.0-2.el8.noarch  kernel-core-4.18.0-553.6.1.el8.x86_64  kernel-4.18.0-553.6.1.el8.x86_64  python39-lockfile-0.12.2-1.el8.noarch 
[root@puppet01 ~]# dnf upgrade epel-release
[root@puppet01 ~]# dnf upgrade

[root@puppet01 ~]# vi /etc/dnf/dnf.conf 
<remove leapp exclude>
[root@puppet01 ~]# dnf remove \*leapp\*

[root@puppet01 ~]# rm /boot/vmlinuz-*rescue* /boot/initramfs-*rescue* 
rm: remove regular file '/boot/vmlinuz-0-rescue-56d6f370894645d39ab9ffd1d3b1ed19'? y
rm: remove regular file '/boot/initramfs-0-rescue-56d6f370894645d39ab9ffd1d3b1ed19.img'? y
[root@puppet01 ~]# /usr/lib/kernel/install.d/51-dracut-rescue.install add "$(uname -r)" /boot "/boot/vmlinuz-$(uname -r)"

[evgeni]

And dropped the snapshot:

[root@virt01 ~]# lvremove cs_node01/puppet01_snap
Do you really want to remove active logical volume cs_node01/puppet01_snap? [y/n]: y
  Logical volume "puppet01_snap" successfully removed.

[evgeni]

huh, this broke secretsgit. investigating.

[evgeni]

#2100