Pre-upgrade checks?

Are there any checks I can run pre-upgrade to avoid the upgrade to stop midway?

I tried to upgrade to 5.2-3 yesterday (from 5.0-10 errata1318) and got various messages (one of them that errata had to be a higher one than installed) and at some point there was no progress anymore, so I restored a backup of the VM.

How can I check if Keycloak has been set up correctly and that there are no references to Kopano anymore?

There were errors regarding that, also but I had to have the system running again as I’m going on holiday.

Ideally I want to solve any problems the upgrade might run into beforehand.

Thank you very much.

1 Like

Hello,

this is doumented here.

Regards

I’ve found this in the meantime.

The script shows everything as ok but if I start the upgrade, I get errors regarding

  • Keycloak migration status old objects
  • some Nagios LDAP objects which have to be removed
  • LDAP migration works but the descripiton (Migration of OpenLDAP database backend from BDB to MDB) says to “service start slapd” which results in an error telling to “systemctl daemon-reload”. Not a biggie but I would expect descriptions from Univention staff to be correct.
  • errors about ProFTPd (which I have removed now)
  • pkgdb sort order (don’t know if this is translated correctly as I use a German version), I couldn’t find anything about this in the forum but it seems to be related to Postgres which I upgraded to v15 some time ago without any problems (afair).

NONE of those showed in the pre-upgrade check script!

But what I have found to be the worst error is that after taking care of all of this (except for the pkgdb errors as those only showed later) the upgrade to 5.1-0 fails and the errata level is 0 (zero) afterwards and nothing works afterwards.

So I’ve gone back to a backup and done everything which I already know I have to do and am making a backup now before trying again.

After taking care of the errors above and making a backup, I again get the PG errors mentioned above and, again, the upgrade fails.

And again, the errata level is 0

I don’t know why the network should not be available for this specific VM.
I can ping internal & external IPs but the DNS resolver does not seem to work

The pre-update script only checks certain requirements for the respective upgrade, but understandably cannot check or point out all potential sources of error. The respective exams can be followed [here] (updates.software-univention.de).

They appear to have several sources of error that now need to be successively identified and eliminated in order for the upgrade to be successful. Since they are upgrading from 5.0 to 5.2, they should run all update checks available for the respective UCS version and not just the one for the target version.

  • Keycloak: If necessary, does our documentation help?
  • Nagios: Maybe that will help?
  • slapd.service: check with journalctl which error messages prevent the service from starting.
  • proFTPD: So everything is ok?
  • Connection lost during upgrade: is the network stable and has been checked? Upgrades via the command line should always be done with a terminal multiplexer such as screen or tmux (you can’t see it in the screenshot).

Since there are several error patterns here, you should check the system thoroughly and also carry out the system diagnosis. Unfortunately, concrete information is not possible without knowledge and history of the system, setup and components involved. If necessary, we have a partner network where you can hire partners for troubleshooting. Maybe this is an option for you?

Hey @toko42

This sounds familiar to what I went through.

The 5.1.0 becoming disconnected, strange pkgdb errors Upgrade from UCS 5.0-10 to 5.2 failed - #5 by dzidek23

I had to remove the univention-dhcp before the update and reinstall once on 5.2

If you search this forum, you should find most answers for 5.0 to 5.2 upgrade. Pre-update checks, Keycloak migration, etc… have backups of the machine available and you can definitely do it.

good luck

I have searched the forums for Keycloak migration but wonder why this is not checked pre-update if this is indeed a prerequisite of the upgrade.

Nagios is no longer installed, so I will just remove the LDAP-entries.

Didn’t bother to check the journal as there was no error after “systemctl” and the migration was shown as being complete.

Proftpd removed, so no error on that side anymore.

I am on Hyper-V console, so this is a direct connection, not SSH.

This is a private server, so I have to find solutions either myself or via the community.

The system diagnosis revealed the following which should not be of import for the upgrade:

The first message relates to a computer name, the second one to the http port of nextcloud which I have configured after the message appeared (but which was obsolete after rolling back).

Will follow with a new message below with the latest errors and system description.

I have seen that topic and removed univention-dhcp prior to upgrade but to no avail.

The errors are still the same but I did get a bit further than the last time (see below).

I first installed UCS with version 2, already, and upgraded ever since.
A new install was only ever necessary during my first tries.

I replaced a Windows DC with this and used Kopano to replace an Exchange server and installed also Nextcloud to replace a no longer supported Windows version of Owncloud.

So, all in all, this is a very basic home use installation, running on Windows server in a Hyper-V environment with only one UCS server, about a dozen computers and VMs (Windows and Linux) and only a handful of family users.

I have been able to upgrade and replace defunct apps so far using the internet and the Univention forums but this time it is far more complicated than in the past.

Next steps I will try is to

The last try ended with the following errors:

I tried to run the command but ran into more errors as per below:

I am grateful for any other hints to resolve the above problems.

I have found a link regarding the PG errors but am hesitant to follow it at the moment:

Thank you very much and a happy weekend to everyone.

Look here for the pgkdb collation version mismatch

But it didn’t work for me :expressionless:

Also (but you might know this already) when searching the forum, start with


this filters a lot of the noise and useless posts

As I don’t do anything on my own in Python, I disregarded the paragraph " Python 3.11 compatibility" (Release notes for the installation and update of Univention Corporate Server (UCS) 5.2-0 — UCS 5.2-0 Release Notes) but have now checked anyway.

Output for version is: Python 2.7.16

I couldn’t find anything on how to upgrade this manually in UCS via commandline or web portal.