Upgrade OpenBSD 7.0 dengan sysupgrade
Bismillah,
Alhamdulillah, saya berkesempatan menuliskan catatan tentang upgrade OpenBSD 7.0 pada mesin gateway yang saat ini masih saya kelola.
Baik, pertama login dan tampilkan versi OpenBSD saat ini.
Last login: Tue Dec 21 06:42:10 2021 from 114.122.228.47
OpenBSD 6.9 (GENERIC.MP) #4: Tue Aug 10 08:12:23 MDT 2021
Welcome to OpenBSD: The proactively secure Unix-like operating system.
Please use the sendbug(1) utility to report bugs in the system.
Before reporting a bug, please try to reproduce it with the latest
version of the code. With bug reports, please try to ensure that
enough information to reproduce the problem is enclosed, and if a
known fix for it exists, include that as well.
gateway$ uname -a
OpenBSD gateway.muntaza.id 6.9 GENERIC.MP#4 amd64
gateway$
Cek setting mirror saat ini:
gateway$ cat /etc/installurl
https://mirror.labkom.id/pub/OpenBSD
Jalankan sysupgrade
gateway$ doas sysupgrade
Fetching from https://mirror.labkom.id/pub/OpenBSD/7.0/amd64/
SHA256.sig 100% |************************************************| 2144 00:00
Signature Verified
Verifying old sets.
base70.tgz 47% |************************************************| 302 MB 01:28
bsd 100% |************************************************| 21090 KB 00:08
bsd.mp 100% |************************************************| 21181 KB 00:07
bsd.rd 100% |************************************************| 4109 KB 00:03
comp70.tgz 100% |************************************************| 73002 KB 00:22
game70.tgz 100% |************************************************| 2743 KB 00:02
man70.tgz 100% |************************************************| 7580 KB 00:13
xbase70.tgz 100% |************************************************| 54408 KB 00:16
xfont70.tgz 100% |************************************************| 22965 KB 00:08
xserv70.tgz 100% |************************************************| 19659 KB 00:08
xshare70.tgz 100% |************************************************| 4494 KB 00:03
Verifying sets.
Upgrading.
Connection to aset.muntaza.id closed by remote host.
Connection to aset.muntaza.id closed.
Perhatikan, gunakan mirror terdekat agar proses download lebih cepat. File SHA256.sig di verifikasi dengan public key yang ada di bsd.rd. Kemudian, file set lainnya di verifikasi dengan SHA256.sig
Setelah semua file terdownload, mesin melakukan reboot dan melakukan proses upgrade tanpa perintah (otomatis).
Setelah selesai upgrade, saya coba login dan cek versi sekarang.
Last login: Tue Dec 21 06:57:04 2021 from 114.122.228.47
OpenBSD 7.0 (GENERIC.MP) #232: Thu Sep 30 14:25:29 MDT 2021
Welcome to OpenBSD: The proactively secure Unix-like operating system.
Please use the sendbug(1) utility to report bugs in the system.
Before reporting a bug, please try to reproduce it with the latest
version of the code. With bug reports, please try to ensure that
enough information to reproduce the problem is enclosed, and if a
known fix for it exists, include that as well.
gateway$
gateway$ uname -a
OpenBSD gateway.muntaza.id 7.0 GENERIC.MP#232 amd64
Untuk update konfigurasi, saya jalankan sysmerge, file akan saya review diff nya, kalau ternyata aman untuk di delete, saya delete file baru dengan perintah ādā, sehingga config tetap file lama.
gateway$ doas sysmerge
Use 'd' to delete the temporary ./etc/ssh/sshd_config
Use 'i' to install the temporary ./etc/ssh/sshd_config
Use 'm' to merge the temporary and installed versions
Use 'v' to view the diff results again
Default is to leave the temporary file to deal with by hand
How should I deal with this? [Leave it for later] d
===> Deleting ./etc/ssh/sshd_config
delete file sementara
Tidak lupa dengan syspatch,
gateway$ doas syspatch
Get/Verify syspatch70-001_nsd.tgz 100% |**************************| 760 KB 00:01
Installing patch 001_nsd
Get/Verify syspatch70-002_bpf.tgz 100% |**************************| 106 KB 00:00
Installing patch 002_bpf
Get/Verify syspatch70-003_uipc.tgz 100% |*************************| 91867 00:00
Installing patch 003_uipc
Get/Verify syspatch70-004_rpki.tgz 100% |*************************| 168 KB 00:00
Installing patch 004_rpki
Get/Verify syspatch70-005_unpcon.tgz 100% |***********************| 91953 00:00
Installing patch 005_unpcon
Get/Verify syspatch70-006_x509.tgz 100% |*************************| 17614 KB 00:09
Installing patch 006_x509
Get/Verify syspatch70-007_xserver... 100% |***********************| 4341 KB 00:04
Installing patch 007_xserver
Get/Verify syspatch70-008_mrt.tgz 100% |**************************| 139 KB 00:00
Installing patch 008_mrt
Relinking to create unique kernel... done; reboot to load the new kernel
Errata can be reviewed under /var/syspatch
gateway$
Tentunya, harus reboot setelah install patch kernel
gateway$ doas reboot
doas (muntaza@gateway.muntaza.id) password:
Connection to aset.muntaza.id closed by remote host.
Connection to aset.muntaza.id closed.
Login lagi dan verifikasi hasil instalasi syspatch
OpenBSD 7.0 (GENERIC.MP) #3: Wed Dec 15 13:14:26 MST 2021
Welcome to OpenBSD: The proactively secure Unix-like operating system.
Please use the sendbug(1) utility to report bugs in the system.
Before reporting a bug, please try to reproduce it with the latest
version of the code. With bug reports, please try to ensure that
enough information to reproduce the problem is enclosed, and if a
known fix for it exists, include that as well.
gateway$ syspatch -l
001_nsd
002_bpf
003_uipc
004_rpki
005_unpcon
006_x509
007_xserver
008_mrt
gateway$
gateway$ uname -a
OpenBSD gateway.muntaza.id 7.0 GENERIC.MP#3 amd64
gateway$
Demikian dari saya, semoga bermanfaat bagi saya pribadi dan pengguna OpenBSD lainnya.