Upgrade has been inhibited due to the following problems: 1. Firewalld Configuration AllowZoneDrifting Is Unsupported 2. Possible problems with remote login using root account 3. Cannot perform the VDO check of block devices 4. Missing required answers in the answer file
HIGH and MEDIUM severity reports: 1. GRUB2 core will be automatically updated during the upgrade 2. Remote root logins globally allowed using password
Reports summary: Errors: 0 Inhibitors: 4 HIGH severity reports: 2 MEDIUM severity reports: 0 LOW severity reports: 1 INFO severity reports: 3
Before continuing, review the full report below for details about discovered problems and possible remediation instructions: A report has been generated at /var/log/leapp/leapp-report.txt A report has been generated at /var/log/leapp/leapp-report.json
============================================================ END OF REPORT OVERVIEW ============================================================
Answerfile has been generated at /var/log/leapp/answerfile
Reviewing the pre-upgrade report.
~]# less /var/log/leapp/leapp-report.txt Risk Factor: high (inhibitor) Title: Firewalld Configuration AllowZoneDrifting Is Unsupported Summary: Firewalld has enabled configuration option "AllowZoneDrifting"which has been removed in RHEL-9. New behavior is as if"AllowZoneDrifting" was set to "no". Related links: - Changes in firewalld related to Zone Drifting: https://access.redhat.com/articles/4855631 - Leapp Preupgrade check fails with error - "Inhibitor: Firewalld Configuration AllowZoneDrifting Is Unsupported".: https://access.redhat.com/so lutions/6969130 Remediation: [hint] Set AllowZoneDrifting=no in /etc/firewalld/firewalld.conf [command] sed -i s/^AllowZoneDrifting=.*/AllowZoneDrifting=no/ /etc/firewalld/firewalld.conf Key: 5b1cf050e1a877b0358b6e8c612277c591d40c13 ---------------------------------------- Risk Factor: high (inhibitor) Title: Possible problems with remote login using root account Summary: OpenSSH configuration file will get updated to RHEL9 version, no longer allowing root login with password. It is a good practice to use non -root administrative user and non-password authentications, but if you rely on the remote root login, this change can lock you out of this system. Related links: - Why Leapp Preupgrade for RHEL 8 to 9 getting "Possible problems with remote login using root account" ?: https://access.redhat.com/solutions/7 003083 Remediation: [hint] If you depend on remote root logins using passwords, consider setting up a different user for remote administration or adding a comment into the sshd_config next to the "PermitRootLogin yes" directive to prevent rpm replacing it during the upgrade. Key: 3d21e8cc9e1c09dc60429de7716165787e99515f ---------------------------------------- Risk Factor: high (inhibitor) Title: Cannot perform the VDO check of block devices Summary: The check of block devices could not be performed as the 'vdo' package is not installed. All VDO devices must be converted to LVM managemen t prior to the upgrade to prevent the loss of data. Related links: - Importing existing VDO volumes to LVM: https://red.ht/import-existing-vdo-volumes-to-lvm Remediation: [hint] Install the 'vdo' package and re-run upgrade to check for VDO devices requiring conversion or confirm that all VDO devices, if a ny, are managed by LVM. Key: 429a99e13b19a7eebadbb8cb35233d8119bcf255 ---------------------------------------- Risk Factor: high (inhibitor) Title: Missing required answers in the answer file Summary: One or more sections in answerfile are missing user choices: check_vdo.confirm For more information consult https://red.ht/leapp-dialogs. Related links: - Leapp upgrade fail with error "Inhibitor: Missing required answers in the answer file.": https://access.redhat.com/solutions/7035321 Remediation: [hint] Please register user choices with leapp answer cli command or by manually editing the answerfile. [command] leapp answer --section check_vdo.confirm=True Key: 2f9802dc91315806c7cdc3c18d7b74f2a2383285 ---------------------------------------- Risk Factor: high Title: GRUB2 core will be automatically updated during the upgrade Summary: On legacy (BIOS) systems, GRUB2 core (located in the gap between the MBR and the first partition) cannot be updated during the rpm transaction and Leapp has to initiate the update running "grub2-install" after the transaction. No action is needed before the upgrade. After the upgrade, it is recommended to check the GRUB configuration. Key: ac7030e05d2ee248d34f08a9fa040b352bc410a3 ---------------------------------------- Risk Factor: high Title: Remote root logins globally allowed using password Summary: RHEL9 no longer allows remote root logins, but the server configuration explicitly overrides this default. The configuration file will not be updated and root is still going to be allowed to login with password. This is not recommended and considered as a security risk. Remediation: [hint] If you depend on remote root logins using passwords, consider setting up a different user for remote administration. Otherwise you can ignore this message. Key: e738f78bc8f3a84411a4210e3b609057139d1855 ----------------------------------------
Manually resolve all the reported problems.
~]# sed -i s/^AllowZoneDrifting=.*/AllowZoneDrifting=no/ /etc/firewalld/firewalld.conf ~]# grep -Ev '^$|^#' /etc/firewalld/firewalld.conf
~]# sed -i 's/^PermitRootLogin.*/PermitRootLogin yes #rootlogin is required/' /etc/ssh/sshd_config ~]# grep -Ev '^$|^#' /etc/ssh/sshd_config ~]# systemctl restart sshd
Total size: 876 M DNF will only download packages, install gpg keys, and check the transaction. Downloading Packages: Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Complete! ====> * add_upgrade_boot_entry Add new boot entry for Leapp provided initramfs. A reboot is required to continue. Please reboot your system.
Debug output written to /var/log/leapp/leapp-upgrade.log
HIGH and MEDIUM severity reports: 1. GRUB2 core will be automatically updated during the upgrade 2. Remote root logins globally allowed using password
Reports summary: Errors: 0 Inhibitors: 0 HIGH severity reports: 2 MEDIUM severity reports: 0 LOW severity reports: 2 INFO severity reports: 5
Before continuing, review the full report below for details about discovered problems and possible remediation instructions: A report has been generated at /var/log/leapp/leapp-report.txt A report has been generated at /var/log/leapp/leapp-report.json
============================================================ END OF REPORT OVERVIEW ============================================================
Answerfile has been generated at /var/log/leapp/answerfile Reboot the system to continue with the upgrade. This might take a while depending on the system configuration. Make sure you have console access to view the actual upgrade process.
~]# reboot
Performing post-upgrade tasks
Verify that the Leapp utility has finished all actions in the upgrade process and the system is ready to be used.
~]# [ -e "/etc/systemd/system/leapp_resume.service" ] || ps -e | grep -q leapp && echo"Leapp has not finished the execution yet!"
Verify that the current OS and kernel version.
~]# cat /etc/redhat-release Red Hat Enterprise Linux release 9.6 (Plow)
~]# uname -r 5.14.0-570.12.1.el9_6.x86_64
Remove any remaining Leapp packages from the exclude list in the /etc/dnf/dnf.conf configuration file.
~]# dnf config-manager --save --setopt exclude=''
Remove remaining RHEL 8 packages, including old kernel packages, and remaining Leapp packages.
Traceback (most recent call last): File "/bin/leapp", line 11, in <module> load_entry_point('leapp==0.21.0', 'console_scripts', 'leapp')() File "/usr/lib/python3.6/site-packages/leapp/cli/__init__.py", line 51, in main cli.command.execute('leapp version {}'.format(VERSION)) File "/usr/lib/python3.6/site-packages/leapp/utils/clicmd.py", line 111, in execute args.func(args) File "/usr/lib/python3.6/site-packages/leapp/utils/clicmd.py", line 133, in called self.target(args) File "/usr/lib/python3.6/site-packages/leapp/cli/commands/upgrade/breadcrumbs.py", line 169, in wrapper return f(*args, breadcrumbs=breadcrumbs, **kwargs) File "/usr/lib/python3.6/site-packages/leapp/cli/commands/preupgrade/__init__.py", line 84, in preupgrade workflow = repositories.lookup_workflow('IPUWorkflow')() TypeError: 'NoneType' object is not callable
