Upgrade Debian 10 to Debian 11#

This document will describe step-by-step how to update your eduVPN / Let’s Connect! 2.x server from Debian 10 to Debian 11.

Official Debian release upgrade instructions can be found here. You SHOULD review them carefully.

If you have the opportunity, you SHOULD make a snapshot of your system, e.g. through your VM platform so you can rollback immediately if the upgrade doesn’t work.

After performing the upgrade to Debian 11, feel free to move directly to Debian 12!

Step by Step#

On a typical system, the below instructions will upgrade your server without having to read through the release upgrade instructions linked above. Please look at every line and make sure you understand it. This ONLY works for systems that were installed with deploy_debian.sh and are fairly standard clean Debian installations. If your organization (heavily) modifies standard Debian you MAY run into trouble! You have been warned! :-)

Preparation#

First, make sure your Debian 10 system is fully up to date and reboot it:

$ sudo vpn-maint-update-system
$ sudo reboot

Make sure everything (portal, apps, connecting to VPN) still works as expected before continuing.

Upgrade#

The below commands SHOULD be enough to fully upgrade your system:

# change to bullseye repo for all repository configurations that mention 
# "buster"
$ sudo find /etc/apt \
    -type f -name '*.list' \
    -exec sed -i 's/buster/bullseye/g' {} +

# adapt to new bullseye security repository configuration
# @see https://www.debian.org/releases/bullseye/amd64/release-notes/ch-information.en.html#security-archive
$ sudo find /etc/apt \
    -type f -name '*.list' \
    -exec sed -i 's/bullseye\/updates/bullseye-security/g' {} +

# perform update/upgrade
$ sudo apt update
$ sudo apt full-upgrade

# enable php-fpm 7.4 (upgrade from 7.3 in Debian 10)
$ sudo a2enconf php7.4-fpm

In case you modified the PHP configuration options, as recommended here, you need to reapply those as well for PHP version 7.4!

Now, reboot your system and make sure everything still works. Then you can continue to perform some additional cleanup steps:

$ sudo apt autoremove
$ apt list "~o"
$ sudo apt purge "~o"
$ apt list "~c"
$ sudo apt purge "~c"

To make sure you are running with the latest configuration applied, run this:

$ sudo vpn-maint-apply-changes

After this is complete, you can reboot again. Make sure all comes back as expected and your portal and VPN still works.