diff --git a/migration-centos7-2-an8/leapp-report.txt b/migration-centos7-2-an8/leapp-report.txt new file mode 100644 index 0000000000000000000000000000000000000000..a27be9015dd2e1997d4c8db8b47a19a15704aa62 --- /dev/null +++ b/migration-centos7-2-an8/leapp-report.txt @@ -0,0 +1,204 @@ +Risk Factor: high +Title: Some important changes about glibc +Summary: The GLIBC version of Anolis8 is 2.28. This version no longer supports nss related modules, no longer providing libnss_nis.so, libnss_nisplus.so. +/etc/nsswitch.conf deletes all configurations related to nis. The fast cache mechanism provided by the sssd can enhance the parsing performance of user and groups, /etc/nsswitch.conf defaults to set the preferences for passwd and group for sss. +All code that relies and uses the nis module requires rectification, you can use tirpc instead. +Key: 4a827ef2a5b9e218369ef2ce0f383ff05f8ffb86 +---------------------------------------- +Risk Factor: high +Title: Packages not signed by Red Hat found on the system +Summary: The following packages have not been signed by Red Hat and may be removed during the upgrade process in case Red Hat-signed packages to be removed during the upgrade depend on them: +- aliyun_assist +- gpg-pubkey +Key: 13f0791ae5f19f50e7d0d606fb6501f91b1efb2c +---------------------------------------- +Risk Factor: high +Title: GRUB core will be updated during upgrade +Summary: On legacy (BIOS) systems, GRUB core (located in the gap between the MBR and the first partition) does not get automatically updated when GRUB is upgraded. +Key: baa75fad370c42fd037481909201cde9495dacf4 +---------------------------------------- +Risk Factor: high +Title: Difference in Python versions and support in Anolis 8 +Summary: In Anolis 8, there is no 'python' command. Python 3 (backward incompatible) is the primary Python version and Python 2 is available with limited support and limited set of packages. +Remediation: [hint] Please run "alternatives --set python /usr/bin/python3" after upgrade +Key: 0beebf1bd0aa0fc6d980036608e2405993598d7c +---------------------------------------- +Risk Factor: high +Title: systemd related configs have importand changes in new version +Summary: /etc/systemd/journal.conf import two options: SystemMaxFiles and RuntimeMaxFiles. These two options are used to limit the count of journal files, default is 100. So in Anolis8, the default journal files will be 100, and the journal files olderthan 100 will be removed, thus system logs will be lost when os has large number of logs. +/etc/systemd/journal.conf move option ForwordToSyslog from yes to no by default, this means that logs recevied by journal are no longer forwarded to syslog by default, Anolis8 use rsyslog by default and rsyslog reads directly journal data. +/etc/systemd/system.conf rename CrashChVT to CrashChangeVT, the old options are still compatible, but the valut meaning of CrashChangeVT has changed. Centos7 accepts int type parameters, where a positive number represents the virtual terminal corresponding to this number when systemd crashes, such as /dev/tty1, and a zero or negative number indicates that systemd does not switch virtual terminals when systemd crashes. In anolis8, it accepts positive or bool type parameters, but it is still compatible with the old parameter types. A positive number means that systemd will switch to the virtual terminal corresponding to this number when a crash occurs. A negative number /0/no/n/false/f/off means that systemd will not switch the virtual terminal when a crash occurs. The yes/y/true/t/on parameter represents the virtual terminal that switches to the kernel log printing when systemd crashes. The value of this parameter changes from 1 to no before and after the switch, indicating that the terminal will not be switched when systemd crashes. +/etc/systemd/system.conf configuration option DefaultTasksMax changes: There is no limit by default in centos7. In anolis8.2, the number of threads that each service can have is min (kernel.pid_max, kernel.threads-max, pids.max of root-cgroup) * 80% by default. + +Key: f77a08e99af1a1b39188c31c3763c635135d8dbb +---------------------------------------- +Risk Factor: high +Title: openssl ciphers have import changes between 1.0.2 and 1.1.1 +Summary: Anolis8 will introduce openssl 1.1.1, openssl-1.1.1 remove some ciphers which are default enabled on openssl-1.0.2, these ciphers are: +DH-DSS-AES256-GCM-SHA384 +DH-RSA-AES256-GCM-SHA384 +DH-RSA-AES256-SHA256 +DH-DSS-AES256-SHA256 +DH-RSA-AES256-SHA +DH-DSS-AES256-SHA +DH-RSA-CAMELLIA256-SHA +DH-DSS-CAMELLIA256-SHA +ECDH-RSA-AES256-GCM-SHA384 +ECDH-ECDSA-AES256-GCM-SHA384 +ECDH-RSA-AES256-SHA384 +ECDH-ECDSA-AES256-SHA384 +ECDH-RSA-AES256-SHA +ECDH-ECDSA-AES256-SHA +DH-DSS-AES128-GCM-SHA256 +DH-RSA-AES128-GCM-SHA256 +DH-RSA-AES128-SHA256 +DH-DSS-AES128-SHA256 +DH-RSA-AES128-SHA +DH-DSS-AES128-SHA +DH-RSA-SEED-SHA +DH-DSS-SEED-SHA +DH-RSA-CAMELLIA128-SHA +DH-DSS-CAMELLIA128-SHA +ECDH-RSA-AES128-GCM-SHA256 +ECDH-ECDSA-AES128-GCM-SHA256 +ECDH-RSA-AES128-SHA256 +ECDH-ECDSA-AES128-SHA256 +ECDH-RSA-AES128-SHA +ECDH-ECDSA-AES128-SHA +EDH-RSA-DES-CBC3-SHA +EDH-DSS-DES-CBC3-SHA +DH-RSA-DES-CBC3-SHA +DH-DSS-DES-CBC3-SHA +ECDH-RSA-DES-CBC3-SHA +ECDH-ECDSA-DES-CBC3-SHA +KRB5-IDEA-CBC-SHA +KRB5-DES-CBC3-SHA +KRB5-IDEA-CBC-MD5 +KRB5-DES-CBC3-MD5 +ECDH-RSA-RC4-SHA +ECDH-ECDSA-RC4-SHA +RC4-MD5 +KRB5-RC4-SHA +KRB5-RC4-MD5 +Remediation: [hint] Please make sure your application do not use these ciphers and modify to use other ciphers. +Key: bf75fb7983c69074993888215d35600da270353b +---------------------------------------- +Risk Factor: high +Title: Some RHEL 7 packages have not been upgraded +Summary: Following RHEL 7 packages have not been upgraded: +python-enum34-1.0.4-1.el7 +python-pyudev-0.15-9.el7 +yum-plugin-fastestmirror-1.1.31-54.el7_8 +kernel-3.10.0-1160.66.1.el7 +kernel-3.10.0-1160.el7 +Please remove these packages to keep your system in supported state. + +Key: dc7229d4c442eeaa872ef37c9703976de9f2ccfc +---------------------------------------- +Risk Factor: medium +Title: Module pam_pkcs11 will be removed from PAM configuration +Summary: Module pam_pkcs11 was surpassed by SSSD and therefore it was removed from Anolis-8. Keeping it in PAM configuration may lock out the system thus it will be automatically removed from PAM configuration before upgrading to Anolis-8. Please switch to SSSD to recover the functionality of pam_pkcs11. +Remediation: [hint] Configure SSSD to replace pam_pkcs11 +Key: bf47e7305d6805e8bbeaa7593cf01e38030c23f3 +---------------------------------------- +Risk Factor: low +Title: Grep has incompatible changes in the next major version +Summary: If a file contains data improperly encoded for the current locale, and this is discovered before any of the file's contents are output, grep now treats the file as binary. +The 'grep -P' no longer reports an error and exits when given invalid UTF-8 data. Instead, it considers the data to be non-matching. +In locales with multibyte character encodings other than UTF-8, grep -P now reports an error and exits instead of misbehaving. +When searching binary data, grep now may treat non-text bytes as line terminators. This can boost performance significantly. +The 'grep -z' no longer automatically treats the byte '\200' as binary data. +Context no longer excludes selected lines omitted because of -m. For example, 'grep "^" -m1 -A1' now outputs the first two input lines, not just the first line. + +Remediation: [hint] Please update your scripts to be compatible with the changes. +Key: 94665a499e2eeee35eca3e7093a7abe183384b16 +---------------------------------------- +Risk Factor: low +Title: chrony using non-default configuration +Summary: chrony behavior will not change in Anolis8 +Key: 9acbfcce3d310a70b602c7ab0a9c2cb94eb6b63f +---------------------------------------- +Risk Factor: low +Title: sysstat cron task is replaced by sysstat-collect and sysstat-summary +Summary: In Anolis8, sysstat-collect will collect system activity accounting, sysstat-summary will generate a daily summary of process accounting./etc/cron.d/sysstat is removed from sysstat for cron task is replaced by sysstat-collect.timer and sysstat-summary.timer. +Key: cc7b1df5dd965668517d85bae51e303bf506974c +---------------------------------------- +Risk Factor: low +Title: man-db.cron is not enabled by default +Summary: Anolis8 move /etc/cron.d/man-db.cron from man-db to man-db-cron, man-db.cron is used to periodic update of man-db cache, if you need this feature, please instal man-db-cron. +Key: b17537db9c42ff141519da3d12da11af02270a98 +---------------------------------------- +Risk Factor: low +Title: audispd is moved from audit to audispd-plugins +Summary: In Anolis8, audispd related files is moved to audispd-plugins package, and audispd-plugins is not installed by default, if you want to use audispd, please install audispd-plugins. +Key: 644c880c9bb477a6df0d9a175d23d9f575248d05 +---------------------------------------- +Risk Factor: low +Title: Some enabled RPM repositories are unknown to Leapp +Summary: The following repositories with Red Hat-signed packages are unknown to Leapp: +- migration +And the following packages installed from those repositories may not be upgraded: +- python2-leapp +- leapp-repository-deps +- leapp-repository +- leapp-deps +- leapp +Remediation: [hint] You can file a request to add this repository to the scope of in-place upgrades by filing a support ticket +Key: 8e89e20c645cea600b240156071d81c64daab7ad +---------------------------------------- +Risk Factor: low +Title: sysvinit-tools is replaced by util-linux and procps-ng +Summary: In Anolis 8, sysvinit-tools is removed, sysvinit-tools contains the following commands: last, lastb, mesg, wall, pidof and killall5. In Anolis 8 system, last, lastb, mesg and wall are provided by util-linux, pidof is provided by procps-ng. +Killall5 is a systemV command, the Centos 7 / Centos 8 are now based on systemd. In addition, pidof provided by sysvinit-tools is actually a soft link to killall5. In Anolis 8, pidof is provided by procps-ng instead. So, sysvinit-tools in Anolis 8 is replaced by util-linux and procps-ng. +Key: a1e45711615f14f4df19143de10b2208a5f0b9a3 +---------------------------------------- +Risk Factor: low +Title: Postfix has incompatible changes in the next major version +Summary: Postfix 3.x has so called "compatibility safety net" that runs Postfix programs with backwards-compatible default settings. It will log a warning whenever backwards-compatible default setting may be required for continuity of service. Based on this logging the system administrator can decide if any backwards-compatible settings need to be made permanent in main.cf or master.cf, before turning off the backwards-compatibility safety net. +The backward compatibility safety net is by default turned off in Red Hat Enterprise Linux 8. +It can be turned on by running: "postconf -e compatibility_level=0 +It can be turned off by running: "postconf -e compatibility_level=2 + +In the Postfix MySQL database client, the default "option_group" value has changed to "client", i.e. it now reads options from the [client] group from the MySQL configuration file. To disable it, set "option_group" to the empty string. + +The postqueue command no longer forces all message arrival times to be reported in UTC. To get the old behavior, set TZ=UTC in main.cf:import_environment. + +Postfix 3.2 enables elliptic curve negotiation. This changes the default smtpd_tls_eecdh_grade setting to "auto", and introduces a new parameter "tls_eecdh_auto_curves" with the names of curves that may be negotiated. + +The "master.cf" chroot default value has changed from "y" (yes) to "n" (no). This applies to master.cf services where chroot field is not explicitly specified. + +The "append_dot_mydomain" default value has changed from "yes" to "no". You may need changing it to "yes" if senders cannot use complete domain names in e-mail addresses. + +The "relay_domains" default value has changed from "$mydestination" to the empty value. This could result in unexpected "Relay access denied" errors or ETRN errors, because now will postfix by default relay only for the localhost. + +The "mynetworks_style" default value has changed from "subnet" to "host". This parameter is used to implement the "permit_mynetworks" feature. The change could result in unexpected "access denied" errors, because postfix will now by default trust only the local machine, not the remote SMTP clients on the same IP subnetwork. + +Postfix now supports dynamically loaded database plugins. Plugins are shipped in individual RPM sub-packages. Correct database plugins have to be installed, otherwise the specific database client will not work. For example for PostgreSQL map to work, the postfix-pgsql RPM package has to be installed. + +Key: 5721e0a07a67d82cf7e5ea6f17662cd4f82e0a33 +---------------------------------------- +Risk Factor: info +Title: Current PAM and nsswitch.conf configuration will be kept. +Summary: There is a new tool called authselect in Anolis8 that replaced authconfig. The upgrade process was unable to find an authselect profile that would be equivalent to your current configuration. Therefore your configuration will be left intact. +Key: 40c4ab1da4a30dc1ca40e543f6385e1336d8810c +---------------------------------------- +Risk Factor: info +Title: SElinux disabled +Summary: SElinux disabled, continuing... +Key: 4f25fea9b15b9d1d07d52cc1de02073f295dac3d +---------------------------------------- +Risk Factor: info +Title: GRUB core successfully updated +Summary: GRUB core on /dev/vda was successfully updated +Key: 8e10774a3c44f221dfacf6bac184356b233872d0 +---------------------------------------- +Risk Factor: info +Title: Leapp resume systemd service enabled +Summary: leapp_resume.service enabled as oneshot systemd service to resume Leapp execution after reboot. +Key: 1b1583aaca45c500e78d18b5c0f2066cb1a2bc4c +---------------------------------------- +Risk Factor: info +Title: "leapp_resume.service" service deleted +Summary: "leapp_resume.service" was taking care of resuming upgrade process after the first reboot. +Key: 47ca952fd7eb5b1844a9a58b41003daf349cee74 +---------------------------------------- \ No newline at end of file diff --git a/migrationcentos7-2-anolis7/centos2anolis.log b/migrationcentos7-2-anolis7/centos2anolis.log new file mode 100644 index 0000000000000000000000000000000000000000..dc5b5f3eeced66cc62287dcde1fa48a67c6b45b4 --- /dev/null +++ b/migrationcentos7-2-anolis7/centos2anolis.log @@ -0,0 +1,42 @@ +2022-06-23 15:37:31.448[INFO ]: ====== Start ====== +2022-06-23 15:37:31.448[INFO ]: Checking if the tool is executed by root user +2022-06-23 15:37:31.448[INFO ]: Get current OS version. +2022-06-23 15:37:31.453[INFO ]: Version is 7.9 +2022-06-23 15:37:31.453[INFO ]: Checking the version of Anolis OS +2022-06-23 15:37:31.454[INFO ]: Switch to Anolis OS 7.9 +2022-06-23 15:37:31.455[INFO ]: Checking required packages +2022-06-23 15:37:31.469[INFO ]: Checking i686 packages +2022-06-23 15:37:32.221[INFO ]: Verify before +2022-06-23 15:37:32.222[INFO ]: Checking: distribution +2022-06-23 15:37:32.265[INFO ]: centos-release-7-9.2009.1.el7.centos.x86_64 +2022-06-23 15:37:32.266[INFO ]: Checking: yum lock +2022-06-23 15:37:32.267[INFO ]: Checking network environment +2022-06-23 15:37:32.502[INFO ]: Check internal network environment is True +2022-06-23 15:37:32.503[INFO ]: Check dnf modules +2022-06-23 15:37:32.504[INFO ]: Looking for yumdownloader +2022-06-23 15:37:32.511[INFO ]: Process yum-utils install +2022-06-23 15:37:34.653[INFO ]: Checking mysql version +2022-06-23 15:37:34.696[INFO ]: Finding your repository directory +2022-06-23 15:37:34.696[INFO ]: Backing up and removing old repository files... +2022-06-23 15:37:36.243[INFO ]: Processing contentdir in repo files... +2022-06-23 15:37:36.248[INFO ]: Backing up and removing 3rd-part repository files... +2022-06-23 15:37:36.257[INFO ]: switch to anolis.repo +2022-06-23 15:37:36.269[INFO ]: Removing CentOS-specific yum configuration from /etc/yum.conf ... +2022-06-23 15:37:36.270[INFO ]: Downloading Anolis OS release package... +2022-06-23 15:37:37.797[INFO ]: Switching old release package with Anolis OS... +2022-06-23 15:37:37.963[INFO ]: optimise repofile +2022-06-23 15:37:37.978[INFO ]: Installing base packages for Anolis OS... +2022-06-23 15:37:54.745[INFO ]: Updating initrd... +2022-06-23 15:38:21.604[INFO ]: process pkgs for c7 +2022-06-23 15:38:27.139[INFO ]: Distro sync +2022-06-23 15:42:51.625[INFO ]: Process enabled modules +2022-06-23 15:42:51.627[INFO ]: Swap centos-logos related packages with Anolis OS packages +2022-06-23 15:42:54.248[INFO ]: Packages related to rhn are not provided by Anolis OS +2022-06-23 15:42:54.289[INFO ]: Package python3-syspurpose is not provided by Anolis OS +2022-06-23 15:42:54.331[INFO ]: Remove centos gpg-pubkey +2022-06-23 15:42:54.420[INFO ]: Removing yum cache +2022-06-23 15:42:54.447[INFO ]: Verify after +2022-06-23 15:42:54.448[INFO ]: Sync successfully, update grub.cfg. +2022-06-23 15:42:55.439[INFO ]: Resume 3rd-part repository files... +2022-06-23 15:42:55.445[INFO ]: Yum clean all +2022-06-23 15:43:03.239[INFO ]: Switch complete. Anolis OS recommends rebooting this system. \ No newline at end of file