Update from 5.0-10 to 5.2 fails with errors from univention-dhcp

Trying to upgrade UCS 5.0-10 to 5.2 (and 5.2-1) but all I’m getting is failed update.

I tried twice now and on both occasions get exact same error.
@MiracErde Any suggestions how to resolve this?

Hi dzidek23,

check and send me the /var/log/univention/updater.log to get more info, why the upgrade failed.

Kind regards,
Mirac

The problem is this is happening at a stage where all network connections drop. I can only access UCS from Proxmox VNC and there’s no easy way to get the log file out. I’ll see if I can do it…

Hi dzidek23

Maybe you could clone the vm in this status, make an roleback so the system works again and after that you could try to get the updater.log.

Kind regards,
Mirac

Hier dasselbe :frowning:
Abbruch beim Upgrade —> 5.2

Fehler traten auf beim Bearbeiten von:
univention-dhcp
E: Sub-process /usr/bin/dpkg returned an error code (1)
Error: Failed to execute “apt-get -o DPkg::Options::=–force-confold -o DPkg::Options::=–force-overwrite -o DPkg::Options::=–force-overwrite-dir --trivial-only=no --assume-yes --quiet=1 -u dist-upgrade”
exitcode of univention-updater: 1
ERROR: update failed. Please check /var/log/univention/updater.log

Ich hab’ dann ein Neustart ausgeführt und das Upgrade neu gestartet:
Starting univention-upgrade. Current UCS version is 5.1-0 errata0

Checking for release updates: found: UCS 5.2-0
Do you want to update to 5.2-0 [Y|n]?
Starting update to UCS version 5.2-0
Starting /tmp/tmps_1289hw/https:__updates.software-univention.de_dists_ucs520_preup.sh (Sa 29. Mär 09:42:28 CET 2025):
Do you want to continue [Y/n]?

Checking blocking_apps … FAIL
Checking package_status … FAIL
Checking ssh … FAIL

ssh:
WARNING: You are logged in using SSH – this may interrupt the update and result in an inconsistent system!
Please log in under the console or re-run with “–ignoressh” to ignore it.

package_status:
The package state on this system is inconsistent.
Please run ‘dpkg --configure -a’ manually

blocking_apps:
The update to 5.2 is currently not possible,
because the following Apps are not available for UCS 5.2:

  • Print server (CUPS)
  • DHCP server
  • Fetchmail
  • Mail server
  • Active Directory-compatible Domain Controller

Error: Please check “/var/log/univention/updater.log” for details.
ERROR: update failed. Please check /var/log/univention/updater.log

Wie angegeben “dpkg --configure -a” ausgeführt:
univention-dhcp (16.0.2) wird eingerichtet …
File: /etc/logrotate.d/univention-dhcp
File: /etc/dhcp/dhcpd.conf
Not updating dhcpd/autostart
Setting security/packetfilter/package/univention-dhcp/udp/67/all
Setting security/packetfilter/package/univention-dhcp/udp/67/all/en
Setting security/packetfilter/package/univention-dhcp/udp/68/all
Setting security/packetfilter/package/univention-dhcp/udp/68/all/en
Not updating dhcpd/restart/listener
File: /etc/security/packetfilter.d/10_univention-firewall_start.sh
File: /etc/security/packetfilter.d/80_univention-firewall_policy.sh
2025-03-29 09:48:10.239324971+01:00 (in joinscript_init)
isc-dhcp-server.service is not a native service, redirecting to systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install is-enabled isc-dhcp-server
univention-firewall.service is not a native service, redirecting to systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install is-enabled univention-firewall
Could not execute systemctl: at /usr/bin/deb-systemd-invoke line 145.
dpkg: Fehler beim Bearbeiten des Paketes univention-dhcp (–configure):
»installiertes post-installation-Skript des Paketes univention-dhcp«-Unterprozess gab den Fehlerwert 1 zurück
Fehler traten auf beim Bearbeiten von:
univention-dhcp

Wer kann helfen?
Gruß Toprsten

Edith:
root@ucs-8484:~# lsb_release -a
No LSB modules are available.
Distributor ID: Ucs
Description: Univention Corporate Server 5.2
Release: 5.2
Codename: bookworm

root@ucs-8484:~# uname -a
Linux ucs-8484 5.10.0-0.deb10.33-amd64 #1 SMP Debian 5.10.226-1~deb10u1 (2024-10-07) x86_64 GNU/Linux

…und nochmal Hallo,
ich habe nochmal versucht “univention-dhcp” neu zu konfigurieren:;
root@ucs-8484:~# dpkg --configure univention-dhcp
univention-dhcp (16.0.2) wird eingerichtet …
File: /etc/logrotate.d/univention-dhcp
File: /etc/dhcp/dhcpd.conf
Not updating dhcpd/autostart
Setting security/packetfilter/package/univention-dhcp/udp/67/all
Setting security/packetfilter/package/univention-dhcp/udp/67/all/en
Setting security/packetfilter/package/univention-dhcp/udp/68/all
Setting security/packetfilter/package/univention-dhcp/udp/68/all/en
Not updating dhcpd/restart/listener
File: /etc/security/packetfilter.d/80_univention-firewall_policy.sh
File: /etc/security/packetfilter.d/10_univention-firewall_start.sh
2025-03-29 10:15:47.151100885+01:00 (in joinscript_init)
isc-dhcp-server.service is not a native service, redirecting to systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install is-enabled isc-dhcp-server
univention-firewall.service is not a native service, redirecting to systemd-sysv-install.
Executing: /lib/systemd/systemd-sysv-install is-enabled univention-firewall

dann “./pre-update-checks-5.2-0” ausgeführt:
Starting ./pre-update-checks-5.2-0 (Sa 29. Mär 10:29:14 CET 2025):
Checking auth_faillog … OK
Checking blocking_apps … FAIL
Checking disk_space … OK
Checking docker_storage_driver … OK
Checking failed_ldif … OK
Checking for_postgresql96 … OK
Checking hold_packages … OK
Checking keycloak_migration … OK
Checking ldap_connection … OK
Checking ldap_schema … OK
Checking legacy_objects … OK
Checking master_version … OK
Checking min_version … OK
Checking minimum_ucs_version_of_all_systems_in_domain … OK
Checking openldap_bdb … OK
Checking overwritten_umc_templates … OK
Checking package_status … OK
Checking role_package_removed … OK
Checking selinux_deactivated … OK
Checking slapd_on_member … OK
Checking system_date_too_old … OK
Checking user_country_mapping … OK
Checking valid_machine_credentials … OK
Checking verify_translog_schema … OK

The system can not be updated to UCS 5.2 due to the following reasons:

blocking_apps:
The update to 5.2 is currently not possible,
because the following Apps are not available for UCS 5.2:

  • Print server (CUPS)*
  • DHCP server*
  • Fetchmail*
  • Mail server*
  • Active Directory-compatible Domain Controller*

@MiracErde Any suggestions how to resolve this?

Gruß Torsten

Edith:
Zusätzliches Info:

root@ucs-8484:~# univention-app info
UCS: 5.1-0 errata0
Installed: cups=2.3.3 dhcp-server=15.0 fetchmail=6.4.16 mailserver=15.0 samba4=4.18 5.0/keycloak=25.0.6-ucs4
Upgradable:

Irgendwie passt das alles nicht zusammen, oder?

At the moment I don’t have access to the environment. Will try to get this log on Wednesday.