Overview#

This page describes the process upgrading a Fedora machine including Dogtag instances in it. The process assumes that the machine already has at least one Dogtag instance with a DS instance.

Pre-Upgrade Preparations#

Update all packages before upgrading Fedora:

$ yum update

Make sure all Dogtag components are upgraded to the latest available version for the old Fedora:

$ pki-upgrade --status
$ pki-server-upgrade --status

Optional: Add Yum Repository#

To test a new build, add a test yum repository into /etc/yum.repos.d:

[Dogtag]
name=Dogtag $releasever - $basearch
failovermethod=priority
baseurl=http://server/pub/fedora/linux/releases/$releasever/Everything/$basearch/os/
enabled=1
gpgcheck=0

Optional: Remove rescue images from /boot#

To increase /boot filesystem, remove the rescue images:

$ rm -f /boot/vmlinuz-0-rescue-*
$ rm -f /boot/initramfs-0-rescue-*

Upgrading to Stable Fedora#

Upgrading with fedora-upgrade#

$ yum install fedora-upgrade
$ fedora-upgrade

Upgrading with FedUp#

$ yum install fedup
$ fedup-cli --network 20
$ reboot

Upgrading with DNF#

$ dnf upgrade --refresh
$ dnf install dnf-plugin-system-upgrade
$ dnf system-upgrade download --releasever=27
$ dnf system-upgrade reboot

Upgrading to Rawhide#

See also:

With fedup#

$ dnf install fedup
$ fedup --network rawhide --nogpgcheck
$ reboot

With yum#

Edit /etc/yum.repos.d/*.repo to use the new repos.

$ yum update yum
$ yum upgrade
$ yum --releasever=rawhide distro-sync
$ reboot

With DNF#

$ dnf upgrade
$ dnf install dnf-plugins-core fedora-repos-rawhide
$ dnf config-manager --set-disabled fedora updates updates-testing
$ dnf config-manager --set-enabled rawhide
$ dnf clean -q dbcache plugins metadata
$ dnf --releasever=rawhide --setopt=deltarpm=false distro-sync --nogpgcheck

With DNF System Upgrade#

$ dnf update --refresh
$ reboot
$ dnf install dnf-plugin-system-upgrade
$ rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-29-primary
$ dnf system-upgrade download --releasever=rawhide
$ dnf system-upgrade reboot
$ dnf system-upgrade clean

Post-Upgrade Validation#

Restart PKI server to make sure it still works after upgrading the system:

$ systemctl start dirsrv@pki-tomcat.service
$ systemctl start pki-tomcatd@pki-tomcat.service

Make sure all PKI components are upgraded to the latest available version for the system:

$ pki-upgrade --status
$ pki-server-upgrade --status

References#