Comments on 2021-08-30 Upgrading Debian Buster (10) to Bullseye (11)

Today I looked at my mail on the server…

It turns out that all the packages I had installed using pip have somehow disappeared. I’m guessing that’s due to the change of making Python 3 the default? I have no idea.

pip install
pip install html2text

And I had apparently installed two Perl libraries for my system Perl. Yikes! They had gotten converted to Debian packages, and those were still lying around, so I could simply reinstall them. No upgrades.

dpkg -i libmojo-useragent-role-queued-perl_1.15-1_all.deb
dpkg -i libtext-spanningtable-perl_1.000000-1_all.deb

In one of the bash scripts I had to replace tempfile with mktemp.

– Alex 2021-08-31 05:30 UTC

Firewall rules need to be reinstalled after a reboot:

# Set up iptables rules. Match with banlist and drop traffic
ipset create banlist hash:ip hashsize 4096
iptables -I INPUT -m set --match-set banlist src -j DROP
iptables -I FORWARD -m set --match-set banlist src -j DROP
# For IPv6
ipset create banlist6 hash:net hashsize 4096 family inet6
ip6tables -I INPUT -m set --match-set banlist6 src -j DROP
ip6tables -I FORWARD -m set --match-set banlist6 src -j DROP

The reason being some bot programmer who ignores the “slow down” error messages they are getting.

ipset add banlist
ipset add banlist6 2001:41d0:302:2200::180

Both belong to OVH France.

Hopefully getting all their packets dropped makes them think for a moment.

– Alex 2021-08-31 14:37 UTC

More packages missing.

pip install cairosvg

– Alex 2021-09-05 09:02 UTC

Something about Exim is also broken. I get mails from root saying “Tainted ’/var/mail/alex’ (file or directory name for mail_spool transport) not permitted” and chapter 5 of the release notes tells me that something has changed regarding taint checking. Gah!

Old Debian Exim configuration files also will not work unmodified; the new configuration needs to be installed with local modifications merged in. – 5.1.17. Exim 4.94, in chapter 5. Issues to be aware of for bullseye

OK. I don’t think I did much configuring of Exim, to be honest. I just need local delivery so that I can read the error messages by all the jobs that I run.

As root:

dpkg-reconfigure exim4-config

Choose “local delivery only”, and then just use the defaults, I think.

– Alex 2021-09-05 09:22 UTC

Yikes. That didn’t solve it. I still don’t understand what I’m supposed to do after reading the Exim section in chapter 5, so now I’m doing it hardcore:

apt purge exim4-config
apt install bsd-mailx exim4

Beware, this nukes your config!

Anyway, with this I was able to send myself some local mail without receiving any warnings. Also, this purged exim4-daemon-heavy and installed exim4-daemon-light, with no config questions asked. I like it.

– Alex 2021-09-07 06:17 UTC

Looks like radicale did not get restarted after the update (self hosted calendars and contacts). On our phones, I saw that the calendars were not syncing.

service radicale start

That did not immediately help. It took a while. The log said “Malformed token” a few times… but without me changing anything, these messages disappeared after a few minutes and the phones say the calendars are OK, now.

journalctl --unit radicale --follow

– Alex 2021-09-10 09:10 UTC

Please make sure you contribute only your own work, or work licensed under the GNU Free Documentation License. Note: in order to facilitate peer review and fight vandalism, we will store your IP number for a number of days. See Privacy Policy for more information. See Info for text formatting rules. You can edit this page if you need to fix typos. You can subscribe to updates by email without leaving a comment.

To save this page you must answer this question:

Just say HELLO