Trying to upgrade UCS 5.0-10 to 5.2 (and 5.2-1) but all I’m getting is failed update.
I tried twice now and on both occasions get exact same error.
@MiracErde Any suggestions how to resolve this?
Hi dzidek23,
check and send me the /var/log/univention/updater.log to get more info, why the upgrade failed.
Kind regards,
Mirac
The problem is this is happening at a stage where all network connections drop. I can only access UCS from Proxmox VNC and there’s no easy way to get the log file out. I’ll see if I can do it…
Hi dzidek23
Maybe you could clone the vm in this status, make an roleback so the system works again and after that you could try to get the updater.log.
Kind regards,
Mirac
Hier dasselbe 
Abbruch beim Upgrade —> 5.2
Fehler traten auf beim Bearbeiten von:
univention-dhcp
E: Sub-process /usr/bin/dpkg returned an error code (1)
Error: Failed to execute “apt-get -o DPkg::Options::=–force-confold -o DPkg::Options::=–force-overwrite -o DPkg::Options::=–force-overwrite-dir --trivial-only=no --assume-yes --quiet=1 -u dist-upgrade”
exitcode of univention-updater: 1
ERROR: update failed. Please check /var/log/univention/updater.log
Ich hab’ dann ein Neustart ausgeführt und das Upgrade neu gestartet:
Starting univention-upgrade. Current UCS version is 5.1-0 errata0
Checking for release updates: found: UCS 5.2-0
Do you want to update to 5.2-0 [Y|n]?
Starting update to UCS version 5.2-0
Starting /tmp/tmps_1289hw/https:__updates.software-univention.de_dists_ucs520_preup.sh (Sa 29. Mär 09:42:28 CET 2025):
Do you want to continue [Y/n]?
Checking blocking_apps … FAIL
Checking package_status … FAIL
Checking ssh … FAIL
ssh:
WARNING: You are logged in using SSH – this may interrupt the update and result in an inconsistent system!
Please log in under the console or re-run with “–ignoressh” to ignore it.
package_status:
The package state on this system is inconsistent.
Please run ‘dpkg --configure -a’ manually
blocking_apps:
The update to 5.2 is currently not possible,
because the following Apps are not available for UCS 5.2:
- Print server (CUPS)
- DHCP server
- Fetchmail
- Mail server
- Active Directory-compatible Domain Controller
Error: Please check “/var/log/univention/updater.log” for details.
ERROR: update failed. Please check /var/log/univention/updater.log
Wie angegeben “dpkg --configure -a” ausgeführt:
univention-dhcp (16.0.2) wird eingerichtet …
File: /etc/logrotate.d/univention-dhcp
File: /etc/dhcp/dhcpd.conf
Not updating dhcpd/autostart
Setting security/packetfilter/package/univention-dhcp/udp/67/all
Setting security/packetfilter/package/univention-dhcp/udp/67/all/en
Setting security/packetfilter/package/univention-dhcp/udp/68/all
Setting security/packetfilter/package/univention-dhcp/udp/68/all/en
Not updating dhcpd/restart/listener
File: /etc/security/packetfilter.d/10_univention-firewall_start.sh
File: /etc/security/packetfilter.d/80_univention-firewall_policy.sh
2025-03-29 09:48:10.239324971+01:00 (in joinscript_init)
isc-dhcp-server.service is not a native service, redirecting to systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install is-enabled isc-dhcp-server
univention-firewall.service is not a native service, redirecting to systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install is-enabled univention-firewall
Could not execute systemctl: at /usr/bin/deb-systemd-invoke line 145.
dpkg: Fehler beim Bearbeiten des Paketes univention-dhcp (–configure):
»installiertes post-installation-Skript des Paketes univention-dhcp«-Unterprozess gab den Fehlerwert 1 zurück
Fehler traten auf beim Bearbeiten von:
univention-dhcp
Wer kann helfen?
Gruß Toprsten
Edith:
root@ucs-8484:~# lsb_release -a
No LSB modules are available.
Distributor ID: Ucs
Description: Univention Corporate Server 5.2
Release: 5.2
Codename: bookworm
root@ucs-8484:~# uname -a
Linux ucs-8484 5.10.0-0.deb10.33-amd64 #1 SMP Debian 5.10.226-1~deb10u1 (2024-10-07) x86_64 GNU/Linux
…und nochmal Hallo,
ich habe nochmal versucht “univention-dhcp” neu zu konfigurieren:;
root@ucs-8484:~# dpkg --configure univention-dhcp
univention-dhcp (16.0.2) wird eingerichtet …
File: /etc/logrotate.d/univention-dhcp
File: /etc/dhcp/dhcpd.conf
Not updating dhcpd/autostart
Setting security/packetfilter/package/univention-dhcp/udp/67/all
Setting security/packetfilter/package/univention-dhcp/udp/67/all/en
Setting security/packetfilter/package/univention-dhcp/udp/68/all
Setting security/packetfilter/package/univention-dhcp/udp/68/all/en
Not updating dhcpd/restart/listener
File: /etc/security/packetfilter.d/80_univention-firewall_policy.sh
File: /etc/security/packetfilter.d/10_univention-firewall_start.sh
2025-03-29 10:15:47.151100885+01:00 (in joinscript_init)
isc-dhcp-server.service is not a native service, redirecting to systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install is-enabled isc-dhcp-server
univention-firewall.service is not a native service, redirecting to systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install is-enabled univention-firewall
dann “./pre-update-checks-5.2-0” ausgeführt:
Starting ./pre-update-checks-5.2-0 (Sa 29. Mär 10:29:14 CET 2025):
Checking auth_faillog … OK
Checking blocking_apps … FAIL
Checking disk_space … OK
Checking docker_storage_driver … OK
Checking failed_ldif … OK
Checking for_postgresql96 … OK
Checking hold_packages … OK
Checking keycloak_migration … OK
Checking ldap_connection … OK
Checking ldap_schema … OK
Checking legacy_objects … OK
Checking master_version … OK
Checking min_version … OK
Checking minimum_ucs_version_of_all_systems_in_domain … OK
Checking openldap_bdb … OK
Checking overwritten_umc_templates … OK
Checking package_status … OK
Checking role_package_removed … OK
Checking selinux_deactivated … OK
Checking slapd_on_member … OK
Checking system_date_too_old … OK
Checking user_country_mapping … OK
Checking valid_machine_credentials … OK
Checking verify_translog_schema … OK
The system can not be updated to UCS 5.2 due to the following reasons:
blocking_apps:
The update to 5.2 is currently not possible,
because the following Apps are not available for UCS 5.2:
- Print server (CUPS)*
- DHCP server*
- Fetchmail*
- Mail server*
- Active Directory-compatible Domain Controller*
@MiracErde Any suggestions how to resolve this?
Gruß Torsten
Edith:
Zusätzliches Info:
root@ucs-8484:~# univention-app info
UCS: 5.1-0 errata0
Installed: cups=2.3.3 dhcp-server=15.0 fetchmail=6.4.16 mailserver=15.0 samba4=4.18 5.0/keycloak=25.0.6-ucs4
Upgradable:
Irgendwie passt das alles nicht zusammen, oder?
At the moment I don’t have access to the environment. Will try to get this log on Wednesday.
Good morning, I am currently experiencing the same issues. I have executed the commands dpkg --configure -a and apt --fix-broken install
, but these also result in errors. Please find my log file attached, hope you can provide assistance.
*26.09.25 09:44:06.035 DEBUG_INIT
**** Starting univention-updater 5.0-9 with parameter=[‘/usr/share/univention-updater/univention-updater’, ‘net’, ‘–updateto’, ‘5.2-0’, ‘–ignoressh’, ‘–ignoreterm’]
—>DBG:update_available(mode=net)
Checking network repository
Update to = 5.0-10
**** Downloading scripts at Fri Sep 26 09:44:06 2025
**** Starting actual update at Fri Sep 26 09:44:06 2025
Starting /tmp/tmp231c84iw/https:__updates.software-univention.de_dists_ucs5010_preup.sh (Fr 26. Sep 09:44:06 CEST 2025):
HINT:
Please check the release notes carefully BEFORE updating to UCS 5.0-10:
English version: Release notes for the installation and update of Univention Corporate Server (UCS) 5.0-10 — UCS 5.0-10 Release Notes
German version: Release Notes für die Inbetriebnahme und Aktualisierung von Univention Corporate Server (UCS) 5.0-10 — UCS 5.0-10 Release Notes
Please also consider documents of following release updates and
3rd party components.
Do you want to continue [Y/n]?
Checking disk_space … OK
Checking failed_ldif … OK
Checking hold_packages … OK
Checking kernel … OK
Checking ldap_connection … OK
Checking ldap_schema … OK
Checking master_version … OK
Checking minimum_ucs_version_of_all_systems_in_domain … OK
Checking overwritten_umc_templates … Ignoring test as requested by update50/ignore_apache_template_checks IGNORED
Checking package_status … iU bind9 1:9.11.5.P4+dfsg-5.1+deb10u14A~5.0.9.202502241049 amd64 Internet Domain Name Server
iU bind9-host 1:9.11.5.P4+dfsg-5.1+deb10u14A~5.0.9.202502241049 amd64 DNS lookup utility (deprecated)
iU bind9utils 1:9.11.5.P4+dfsg-5.1+deb10u14A~5.0.9.202502241049 amd64 Utilities for BIND
iU clamav 1.0.7+dfsg-1~deb10u1A~5.0.9.202412100051 amd64 anti-virus utility for Unix - command-line interface
iU clamav-daemon 1.0.7+dfsg-1~deb10u1A~5.0.9.202412100051 amd64 anti-virus utility for Unix - scanner daemon
iU clamav-freshclam 1.0.7+dfsg-1~deb10u1A~5.0.9.202412100051 amd64 anti-virus utility for Unix - virus database update utility
iU clamdscan 1.0.7+dfsg-1~deb10u1A~5.0.9.202412100051 amd64 anti-virus utility for Unix - scanner client
iF cups 2.2.10-6+deb10u11A~5.0.9.202410071504 amd64 Common UNIX Printing System™ - PPD/driver support, web interface
iF cups-bsd 2.2.10-6+deb10u11A~5.0.9.202410071504 amd64 Common UNIX Printing System™ - BSD commands
iU curl 7.64.0-4+deb10u11 amd64 command line tool for transferring data with URL syntax
iU dnsutils 1:9.11.5.P4+dfsg-5.1+deb10u14A~5.0.9.202502241049 amd64 Clients provided with BIND
iU libbind9-161:amd64 1:9.11.5.P4+dfsg-5.1+deb10u14A~5.0.9.202502241049 amd64 BIND9 Shared Library used by BIND
iU libc6-dev:amd64 2.28-10+deb10u5 amd64 GNU C Library: Development Libraries and Header Files
iU libclamav11:amd64 1.0.7+dfsg-1~deb10u1A~5.0.9.202412100051 amd64 anti-virus utility for Unix - library
iU libcurl4:amd64 7.64.0-4+deb10u11 amd64 easy-to-use client-side URL transfer library (OpenSSL flavour)
iU libdns-export1104 1:9.11.5.P4+dfsg-5.1+deb10u14A~5.0.9.202502241049 amd64 Exported DNS Shared Library
iU libdns1104:amd64 1:9.11.5.P4+dfsg-5.1+deb10u14A~5.0.9.202502241049 amd64 DNS Shared Library used by BIND
iU libirs161:amd64 1:9.11.5.P4+dfsg-5.1+deb10u14A~5.0.9.202502241049 amd64 DNS Shared Library used by BIND
iU libisc-export1100:amd64 1:9.11.5.P4+dfsg-5.1+deb10u14A~5.0.9.202502241049 amd64 Exported ISC Shared Library
iU libisc1100:amd64 1:9.11.5.P4+dfsg-5.1+deb10u14A~5.0.9.202502241049 amd64 ISC Shared Library used by BIND
iU libisccc161:amd64 1:9.11.5.P4+dfsg-5.1+deb10u14A~5.0.9.202502241049 amd64 Command Channel Library used by BIND
iU libisccfg163:amd64 1:9.11.5.P4+dfsg-5.1+deb10u14A~5.0.9.202502241049 amd64 Config File Handling Library used by BIND
iU libnss-winbind:amd64 2:4.18.3-1A~5.0.0.202411191740 amd64 Samba nameservice integration plugins
iU libpam-winbind:amd64 2:4.18.3-1A~5.0.0.202411191740 amd64 Windows domain authentication integration plugin
iU libpq5:amd64 11.22-0+deb10u5 amd64 PostgreSQL C client library
iU libpython2.7-stdlib:amd64 2.7.16-2+deb10u5 amd64 Interactive high-level object-oriented language (standard library, version 2.7)
iU libpython3.7:amd64 3.7.3-2+deb10u10 amd64 Shared Python runtime library (version 3.7)
iU libpython3.7-minimal:amd64 3.7.3-2+deb10u10 amd64 Minimal subset of the Python language (version 3.7)
iU libpython3.7-stdlib:amd64 3.7.3-2+deb10u10 amd64 Interactive high-level object-oriented language (standard library, version 3.7)
iF libssl1.1:amd64 1.1.1n-0+deb10u7 amd64 Secure Sockets Layer toolkit - shared libraries
iU mariadb-server 1:10.3.39-0+deb10u3 all MariaDB database server (metapackage depending on the latest version)
iF mariadb-server-10.3 1:10.3.39-0+deb10u3 amd64 MariaDB database server binaries
iU ntp 1:4.2.8p12+dfsg-4+deb10u1 amd64 Network Time Protocol daemon and utility programs
iU ntpdate 1:4.2.8p12+dfsg-4+deb10u1 amd64 client for setting system time from NTP servers (deprecated)
iU open-vm-tools 2:10.3.10-1+deb10u7 amd64 Open VMware Tools for virtual machines hosted on VMware (CLI)
iU openssh-client 1:7.9p1-10+deb10u5 amd64 secure shell (SSH) client, for secure access to remote machines
iU openssh-server 1:7.9p1-10+deb10u5 amd64 secure shell (SSH) server, for secure access from remote machines
iU openssh-sftp-server 1:7.9p1-10+deb10u5 amd64 secure shell (SSH) sftp server module, for SFTP access from remote machines
iU openssl 1.1.1n-0+deb10u7 amd64 Secure Sockets Layer toolkit - cryptographic utility
iU php7.3 7.3.31-1~deb10u10 all server-side, HTML-embedded scripting language (metapackage)
iU php7.3-cgi 7.3.31-1~deb10u10 amd64 server-side, HTML-embedded scripting language (CGI binary)
iU php7.3-cli 7.3.31-1~deb10u10 amd64 command-line interpreter for the PHP scripting language
iU php7.3-common 7.3.31-1~deb10u10 amd64 documentation, examples and common module for PHP
iU php7.3-curl 7.3.31-1~deb10u10 amd64 CURL module for PHP
iU php7.3-json 7.3.31-1~deb10u10 amd64 JSON module for PHP
iU php7.3-ldap 7.3.31-1~deb10u10 amd64 LDAP module for PHP
iU php7.3-opcache 7.3.31-1~deb10u10 amd64 Zend OpCache module for PHP
iU php7.3-readline 7.3.31-1~deb10u10 amd64 readline module for PHP
iU php7.3-xml 7.3.31-1~deb10u10 amd64 DOM, SimpleXML, WDDX, XML, and XSL module for PHP
iU postgresql-11 11.22-0+deb10u5 amd64 object-relational SQL database, version 11 server
iU postgresql-client-11 11.22-0+deb10u5 amd64 front-end programs for PostgreSQL 11
iU printer-driver-hpcups 3.18.12+dfsg0-2+deb10u1 amd64 HP Linux Printing and Imaging - CUPS Raster driver (hpcups)
iU python-univention-appcenter 9.0.13-4 all Library for Univention App Center
iU python-univention-appcenter-docker 9.0.13-4 all Docker integration for Univention App Center
iU python2.7 2.7.16-2+deb10u5 amd64 Interactive high-level object-oriented language (version 2.7)
iU python3-univention-appcenter 9.0.13-4 all Library for Univention App Center
iU python3-univention-appcenter-docker 9.0.13-4 all Docker integration for Univention App Center
iU python3-univention-directory-manager 15.0.28-8 all UCS - Modules for administration tools
iU python3-univention-directory-manager-cli 15.0.28-8 all UCS - Modules for administration tools
iU python3.7 3.7.3-2+deb10u10 amd64 Interactive high-level object-oriented language (version 3.7)
iU python3.7-minimal 3.7.3-2+deb10u10 amd64 Minimal subset of the Python language (version 3.7)
iU samba 2:4.18.3-1A~5.0.0.202411191740 amd64 SMB/CIFS file, print, and login server for Unix
iU samba-ad-dc 2:4.18.3-1A~5.0.0.202411191740 all Samba control files to run AD Domain Controller
iF samba-common 2:4.18.3-1A~5.0.0.202411191740 all common files used by both the Samba server and client
iU samba-common-bin 2:4.18.3-1A~5.0.0.202411191740 amd64 Samba common files used by both the server and the client
iU smbclient 2:4.18.3-1A~5.0.0.202411191740 amd64 command-line SMB/CIFS clients for Unix
iU univention-appcenter 9.0.13-4 all Tools for Univention App Center
iU univention-appcenter-docker 9.0.13-4 all Docker integration for Univention App Center
iU univention-directory-manager-tools 15.0.28-8 all UCS - Command-line based administration tools
iU univention-ldap-acl-master 16.0.17-6 all UCS - LDAP server ACLs for Primary and Backup Directory Nodes
iU univention-ldap-config-master 16.0.17-6 all UCS - LDAP configuration for Primary and Backup Directory Nodes
iU univention-ldap-server 16.0.17-6 all UCS - LDAP server configuration
iU univention-management-console-module-appcenter 9.0.13-4 all UMC module for software management
iU univention-management-console-module-apps 9.0.13-4 all UMC module for application overview
iU univention-management-console-module-udm 10.0.13-2 all UMC module for UCS Directory Manager
iU univention-management-console-module-updater 15.0.18-5 all UMC module for UCS updater
iU univention-samba4 9.0.18-3 amd64 UCS - Samba4 integration package
iU univention-saml 7.0.12-2 all Integrates simpleSAMLphp Identity Provider into UCS
iU univention-updater 15.0.18-5 all UCS - system upgrading tool
iU winbind 2:4.18.3-1A~5.0.0.202411191740 amd64 service to resolve user and group information from Windows NT servers
FAIL
Checking role_package_removed … OK
Checking slapd_on_member … OK
Checking ssh … OK
Checking system_date_too_old … OK
Checking term … OK
Checking valid_machine_credentials … OK
The system can not be updated to UCS 5.0 due to the following reasons:
package_status:
The package state on this system is inconsistent.
Please run ‘dpkg --configure -a’ manually
Error: Update aborted by pre-update script of release 5.0-10*
So my error was linked to what seemed PostgresDB and the Univention DHCP package.
I found removing the package just before allowed me to upgrade. After the successful update, I installed the package again and all was fine (the configuration was retained).
1 Like