Date: Wed, 19 Dec 2018 10:24:39 -0800 From: Brian Neal <brian@aceshardware.com> To: Matt Garber <matt.garber@gmail.com> Cc: "freebsd-stable@freebsd.org" <freebsd-stable@freebsd.org> Subject: Re: Upgrading 11.2 -> 12.0 on EC2 Message-ID: <68E503D2-A227-4662-9A72-F74D66BF32E9@aceshardware.com> In-Reply-To: <8FE35DD1-6D07-4430-9706-A873E0D8ECCE@gmail.com> References: <5c19ea68.1c69fb81.1febf.ddb2SMTPIN_ADDED_MISSING@mx.google.com> <8FE35DD1-6D07-4430-9706-A873E0D8ECCE@gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--Apple-Mail-0DB254FF-DE89-47A2-8D10-C931498B1594 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Thanks, Matt. I did try the update procedure from the handbook and found the= instance hanging on boot with a repeated socket error. If I have to rebuild= from scratch, I=E2=80=99d prefer to find some jail/deployment-automation so= I don=E2=80=99t have to manually rebuild everything on each release. FWIW, I= did have to recreate the instance when moving from 10 to 11. Cheers, -Brian > On Dec 19, 2018, at 7:33 AM, Matt Garber <matt.garber@gmail.com> wrote: >=20 >=20 >> On Dec 19, 2018, at 1:50 AM, Brian Neal <brian@aceshardware.com> wrote: >>=20 >> I=E2=80=99m looking for advice on doing a release upgrade of a running in= stance. It looks like the normal procedure using freebsd-update requires a r= eboot between invocations of the install command, but after the first reboot= , most of the userland is non-functional, including most importantly sshd. I= s it safe to run the install commands back to back without rebooting? Or is= the only safe procedure to build a new instance from scratch for each relea= se? >=20 > Brian, >=20 > It=E2=80=99s not true that after the first reboot the userland is non-func= tional; sshd and friends should still be working fine. The first reboot swit= ches you to the 12.0 kernel, which is necessary as the first step before upg= rading the userland to 12.0 =E2=80=93 and of course potentially using `pkg-s= tatic` or ports to rebuild/reinstall your packages/ports against the new ABI= . >=20 > If you=E2=80=99re running any kind of public-facing service, the safest me= thod in my opinion *with as little downtime as possible* is to deploy a new i= nstance and then point to it once everything is successfully reinstalled (e.= g., DNS change, elastic IP change, elastic load balancer, etc.). Otherwise, t= he =E2=80=9Csafe=E2=80=9D method to upgrade in place is to follow what the h= andbook says, including when to reboot between invocations of `freebsd-updat= e`. As long as you follow exactly when it instructs a reboot, and when to up= grade/reinstall userland and packages/ports, you should be fine. If you=E2=80= =99re still nervous, just snapshot your boot EBS volume first as an extra pr= ecautionary measure, and destroy it once you verify everything post-upgrade.= >=20 >=20 > -- > Matt Garber >=20 --Apple-Mail-0DB254FF-DE89-47A2-8D10-C931498B1594 Content-Type: application/pkcs7-signature; name=smime.p7s Content-Disposition: attachment; filename=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCBfMw ggXvMIIE16ADAgECAhBAAWIlyeWHXiIZxzH/ofDPMA0GCSqGSIb3DQEBCwUAMDoxCzAJBgNVBAYT AlVTMRIwEAYDVQQKEwlJZGVuVHJ1c3QxFzAVBgNVBAMTDlRydXN0SUQgQ0EgQTEyMB4XDTE4MDMx NDE4MzMzMVoXDTE5MDMxNDE4MzMzMVowgYkxLzAtBgNVBAsMJlZlcmlmaWVkIEVtYWlsOiBicmlh bkBhY2VzaGFyZHdhcmUuY29tMSUwIwYJKoZIhvcNAQkBFhZicmlhbkBhY2VzaGFyZHdhcmUuY29t MS8wLQYKCZImiZPyLGQBARMfQTAxNDI3RDAwMDAwMTYyMjVDOUU1NEMwMDAxNzJGMTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBALhyBKgQXz2NuGB7Bzr5WREwCvKCHPzM3k+4ETElnThi eDR5lnB3DvOpQOY/WWC2GmHCe0OQPp75JSbDXq7OiuRcU4TikJ4Lh0X00FtWqh8SiwmqyY20jojA PACJAhvKU8FKWfVZ6OiSkZDTwhwGfl70YJZNtPOSUeMJtY0g9ffJpQOfl4mzbU3qX2WcFI6hGM+x Kvl9BCezllYpxGPjaEzBl4lhx2y9y/nZs3DdsR/hx0kKwYFF9d3vzV5tYDXS/Xi2yQCLdfgOzJ3r +mHhGo7CfCyvJGXzxh19KYLsk5tkP+99EBvOgxYZkx2KVAV7BEnqroVqiDVfKGwIiXiOkykCAwEA AaOCAp8wggKbMA4GA1UdDwEB/wQEAwIFoDCBhAYIKwYBBQUHAQEEeDB2MDAGCCsGAQUFBzABhiRo dHRwOi8vY29tbWVyY2lhbC5vY3NwLmlkZW50cnVzdC5jb20wQgYIKwYBBQUHMAKGNmh0dHA6Ly92 YWxpZGF0aW9uLmlkZW50cnVzdC5jb20vY2VydHMvdHJ1c3RpZGNhYTEyLnA3YzAfBgNVHSMEGDAW gBSkc9rvaTWKdcygGXsIMvhrieRC7DAJBgNVHRMEAjAAMIIBLAYDVR0gBIIBIzCCAR8wggEbBgtg hkgBhvkvAAYLATCCAQowSgYIKwYBBQUHAgEWPmh0dHBzOi8vc2VjdXJlLmlkZW50cnVzdC5jb20v Y2VydGlmaWNhdGVzL3BvbGljeS90cy9pbmRleC5odG1sMIG7BggrBgEFBQcCAjCBrhqBq1RoaXMg VHJ1c3RJRCBDZXJ0aWZpY2F0ZSBoYXMgYmVlbiBpc3N1ZWQgaW4gYWNjb3JkYW5jZSB3aXRoIApJ ZGVuVHJ1c3QncyBUcnVzdElEIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL3Nl Y3VyZS5pZGVudHJ1c3QuY29tL2NlcnRpZmljYXRlcy9wb2xpY3kvdHMvaW5kZXguaHRtbDBFBgNV HR8EPjA8MDqgOKA2hjRodHRwOi8vdmFsaWRhdGlvbi5pZGVudHJ1c3QuY29tL2NybC90cnVzdGlk Y2FhMTIuY3JsMCEGA1UdEQQaMBiBFmJyaWFuQGFjZXNoYXJkd2FyZS5jb20wHQYDVR0OBBYEFBgK MyeLKbLzjyTWuYz7VdJKoHB8MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDANBgkqhkiG 9w0BAQsFAAOCAQEA0WwXTVjWeVNWZFh5MGDxyAgd7JyLf/SO/dRyNpI1l5ddODm1P1YwYhB6M/i1 8cdO45UHBpzeNwMdSoeBnHEQwjwDMiGL4+BMYHuo+ygrTlKJkTLfNRUJZWRrYLk2Y3KxroVf96Mp avIlsZDHgjUM2jCIcsfjQ/HapK9S8n1TvMloDFmByBAB4Eo5/1YOXEHh8Ifcsvrwqan8Vblt+e3t aGkppF58osSp3B7/G4vn3kGv/UvH3dfAx9hgku+HDGMkO3ACo0DXsossN3vXCQklVvimCqzZQtGC W+ff6D9TtCiEI/P80e9DQ7oyc6Z6w7jYjjKtssKPRi7ioBvFeHSfljGCAqYwggKiAgEBME4wOjEL MAkGA1UEBhMCVVMxEjAQBgNVBAoTCUlkZW5UcnVzdDEXMBUGA1UEAxMOVHJ1c3RJRCBDQSBBMTIC EEABYiXJ5YdeIhnHMf+h8M8wDQYJYIZIAWUDBAIBBQCgggEpMBgGCSqGSIb3DQEJAzELBgkqhkiG 9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE4MTIxOTE4MjQ0MFowLwYJKoZIhvcNAQkEMSIEIDitskC3 yxdYuJQ2vz8MFwHQOZgU4nLBdRSuuUXreg96MF0GCSsGAQQBgjcQBDFQME4wOjELMAkGA1UEBhMC VVMxEjAQBgNVBAoTCUlkZW5UcnVzdDEXMBUGA1UEAxMOVHJ1c3RJRCBDQSBBMTICEEABYiXJ5Yde IhnHMf+h8M8wXwYLKoZIhvcNAQkQAgsxUKBOMDoxCzAJBgNVBAYTAlVTMRIwEAYDVQQKEwlJZGVu VHJ1c3QxFzAVBgNVBAMTDlRydXN0SUQgQ0EgQTEyAhBAAWIlyeWHXiIZxzH/ofDPMA0GCSqGSIb3 DQEBAQUABIIBAGX8IhPmdMpgWkHXQ+K/CfKYFXj6SkUmdc34S3GYzc6+MMsv70SwHsJ/mpKkJVDC Vti5F1HJXLVBQh+Vx0qTNhwvI0raUShndp/Sj8EdpGhetlBye8UQJs26cP9Huo+3KCSCEQtAdF7s Dyucv3OXL3gEluJgTekHqUqSoVwJVYjS206+Ya1EI6qWoyIbVV/TChVH36GNsvbKWIw9HzoVZzjD FkkRCNs1mHcdxfb/psImvaaELJwsUyywVMNpxM6wmbk+6wkp2JstT15EpcId7LffgkQ0MviI80sT w6FVA8l0OHY49Dg9zGhmiwoEiVey7bR1Mr1HpjFHSdbUKe4jmS8AAAAAAAA= --Apple-Mail-0DB254FF-DE89-47A2-8D10-C931498B1594--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?68E503D2-A227-4662-9A72-F74D66BF32E9>