this post was submitted on 15 Jan 2024
30 points (89.5% liked)

Linux

48372 readers
1591 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 

I'm a generalist SysAdmin. I use Linux when necessary or convenient. I find that when I need to upgrade a specific solution it's often easier to just spin up an entirely new instance and start from scratch. Is this normal or am I doing it wrong? For instance, this morning I'm looking at a Linux VM whose only task is to run Acme.sh to update an SSL cert. I'm currently upgrading the release. When this is done I'll need to upgrade acme.sh. I expect some kind of failure that will require several hours to troubleshoot, at which point I'll give up and start from scratch. I'm wondering if this is my ignorance of Linux or common practice?

top 13 comments
sorted by: hot top controversial new old
[–] [email protected] 12 points 10 months ago

Your experience may depend on which distro you use and how you install things. If you use a distro with a stable upgrade path such as Debian and stick to system packages there should be almost no issues with upgrades. If you use external installers or install from source you may experience issues depending on how the installer works.

For anything complex these days I'd recommend going with containers that way the application and the OS can be upgraded independently. It also makes producing a working copy of your production system for testing a trivial task.

[–] ikidd 10 points 10 months ago (1 children)

Dockerfile, especially for something like a CLI app like that. Change your dockerfile and rebuild when you need to upgrade.

[–] [email protected] 6 points 10 months ago (1 children)

Yeah, my first thought was "this is doing containers the hard way".

lxc and docker are your friends.

[–] ikidd 3 points 10 months ago* (last edited 10 months ago)

Yah, and we aren't the first, of course: https://github.com/mraming/docker-nginx-acme

[–] hperrin 8 points 10 months ago

If you’ve designed everything correctly, then yes, it should be much easier to deploy a new instance on a new machine than to upgrade an existing machine.

[–] [email protected] 7 points 10 months ago* (last edited 10 months ago)

There's nothing ignorant IMO about avoiding headaches, and keeping environments new-car-smell fresh.

[–] Thade780 5 points 10 months ago

It depends on what you need to upgrade/do. I usually upgrade stuff, but at the same time I also have templates in case I quickly need to spin up something new.

If that's the case, I seed the new instance whatever conf files are needed and I am up and running quickly. Consider that in my work environment we rarely use containers (more of a philosophy at this point than a real reason, since we also have a relatively big K8s cluster for big data).

Linux sysadmin here, for the past 25 years.

[–] [email protected] 5 points 10 months ago

I think yes. In general if you have good setup instructions (preferably automated) then it will be easier to start from scratch. This is because when starting from scratch you need to worry about the new setup. But when upgrading you need to worry about the new setup as well as any cruft that has been carried over from the previous setup. Basically starting clean has some advantages.

However it is important to make sure that you can go back to the old working state if required. Either via backups or leaving the old machine around working until the new one has been proven to be operational.

I also really like NixOS for this reason. It means that you can upgrade your system with very little cruft carrying over. Basically it behaves like a clean install every update. But it is easier to roll back if you need to.

[–] [email protected] 2 points 10 months ago

Whatever makes you happiest in the moment.

If you have any concerns whatsoever that an upgrade over the top of an existing system might cause problems and/or leave cruft behind that will bug you, however harmless it might be: backup, format the system partition, install fresh.

Otherwise, backup, install the upgrade.

One strategy might be to upgrade a couple of times and then for the next upgrade, start afresh instead.

That might be what I choose to do when the next version of my distro comes out since I've upgraded the last couple of times. Prior to that I basically started afresh because I changed distro. Maybe I'll change distro again.

I should probably mention that I'm a home user in charge of one PC and have never been a main sysadmin (sysadmin gofer and work monkey, yes; boss, no), so you might want to take this under advisement.

[–] [email protected] 1 points 10 months ago

Both sides are absolutely valid. A complete new install is very easy when you only need to run a few scripts. A small setup with minimal dependencies should also not break that easily when you upgrade your distro release.

I personally always make sure that the way i do things in a distro is the way they intended. That's how i keep my minimalistic Arch install and multiple larger Debian deployments going for years.

[–] [email protected] 1 points 10 months ago* (last edited 10 months ago)

It depends on the type of machine you're talking about. Pet machines, bare metal or VMs, such as workstations, desktops, laptops are generally upgraded because it takes a while to re-setup everything. Cattle machines such as servers are generally recreated. With that said, creation of such machines typically involves some sort of automation that does the work for you. Setup scripts are the very basic, however configuration as code systems such as Ansible, SaltStack are much preferable. So if I had a VM that runs acme.sh, I'd write an Ansible runbook that creates it from a vanilla OS installation. I stop here for my own infrastructure. When we do this in cloud environments where we need to spin up more than one such VM and quickly, we'd have the OS install and Ansible run in a Jenkins job which builds a VM image that's pushed to the cloud. Then we spin up ready acme.sh VMs from that image which takes seconds.

[–] [email protected] 1 points 10 months ago

I would use distrobox for that. It just spins up either docker or podman containers and has system integration. It favors podman so I would just install distrobox and podman on your local system.

[–] [email protected] 1 points 10 months ago* (last edited 10 months ago)

I'm a sysadmin as well and I consider spinning up a new instance and rebuilding a system from scratch to be an essential part of the backup and recovery process.

Upgrades are fine, but they can sometimes be risky and over a long enough period of time your system is likely accumulating many changes that are not documented and it can be difficult to know exactly which settings or customizations are important to running your applications. VM snapshots are great but they aren't always portable and they don't solve the problem of accumulating undocumented changes over time.

Instead if you can reinstall an OS, copy data, apply a config and get things working again then you know exactly what configuration is necessary and when something breaks you can more easily get back to a healthy state.

Generally these days I use a preseed file for my Linux installs to partition disks, install essential packages, add users and set ssh keys. Then I use Ansible playbooks to deploy a config and install/start applications. If I ever break something that takes longer than 20 minutes to fix I can just reinstall the whole OS and be back up and running, no problem.