port puppet-managed configs to Debian bullseye
as part of the %Debian 11 bullseye upgrade, we have a bunch of (sometimes really old) configuration that needs to be ported to the new stuff that's in bullseye. I have identified, so far:
-
/etc/apt/apt.conf.d/50unattended-upgrades
: to be investigated. probably mostly whitespace changes, but also possibly missing features. complicated by the fact that this is a third party Puppet module and would require significant work to catchup with the Debian package -
/etc/unbound/unbound.conf
: switch toinclude-toplevel
after the fleet is upgraded (does not work in buster) -
/etc/sudoers
: use@include
instead of#include
, former added only in bullseye and later. should be split out in asudoers.d
file to avoid future conflicts and, generally, split in snippets per service instead of this monolithic file -
/etc/syslog-ng/syslog-ng.conf
: silly version number logic in the template, needs to be ported to newer config or replaced with rsyslog or journald -
the latter/etc/ferm/ferm.conf
:web-cymru-01
had diffs pending from the previous upgrade (presumably?), might be worth catching up to buster, that is, unless we just ditch ferm completely (#40554) -
/etc/lvm/lvm.conf
: same as above -
fallax retired/etc/bind/named.conf.options
: TBD, on fallax
if a file is added in the above list, do not forget to add it to the conflicts resolution list in the upgrade procedure.
more such issues could come up, but for now that's what I got. for now the diff for those has been minimized as much as possible and the proposed version from the Debian package should generally be ignored.