Completing Postupgrade Tasks

4 Completing Postupgrade Tasks

Important:

The following tasks aren't comprehensive. Depending on the setup, you might need to perform other procedures to return the newly upgraded system back into operation. Review the /var/log/leapp/leapp-report.txt that's generated after the upgrade. This report might contain more recommendations to ensure that the upgraded system remains in a supported state.

Enable the firewall.

sudo systemctl start firewalld
sudo systemctl enable firewalld

Check that the network connections are operational, for example, by pinging the system and see if connectivity is obtained with the system.
If you had dnf customizations before the upgrade, restore them in the upgraded system's /etc/dnf/dnf.conf file, for example:
```
proxy=proxy-url:port
```
Restore network mounted file systems that you unmounted before the upgrade. See File Systems and Storage Issues.
Set SELinux to run in Enforcing mode.

During the upgrade, the Leapp utility sets SELinux to run in Permissive mode. To restore the setting: To revert to Enforcing mode and verify the setting, type:
```
sudo setenforce enforcing
```
You can verify the mode of SELinux as follows:
```
getenforce
```
```
Enforcing
```
To make this setting persist across system reboots, add the following line to /etc/selinux/config:
```
SELINUX=enforcing
```
Then run the following command:
```
sudo grubby --update-kernel=ALL --remove-args="enforcing=0"
```
Reevaluate then reapply the security policies such as setting cryptographic policies.
Inspect the system for unneeded configurations and files.

Note:
Some of these unneeded files might be reported in the generated /var/log/leapp/leapp-report.txt after the upgrade. Ensure that you review this report and complete its post upgrade recommendations.

This step aims to ensure that the configurations are consistent with the new OS version. The completion of this step would vary, depending on what you deem is important to retain from the previous system's state. Consider the following guidelines:
- Remove kernels and kernel modules that are no longer applicable.
- If you remove kernels, you might also need to update the GRUB menu so that the menu options only reflect the actual kernels on the system.
- Review /etc/yum.repos.d for entries that might need to be addressed, such as customized repositories.
  
  For example, during system updates, *.rpmnew files might be created to prevent overwriting corresponding existing *.rpm files. You would need to use the contents of the *.rpmnew files to guide you when changing the corresponding *.rpm files.
- Remove residual packages from the previous Oracle Linux version.
  1. Edit /etc/dnf/dnf.conf by removing or commenting out exclude= lines that refer to leapp packages.
  2. Use commands such as rpm -qa to list packages that can be removed.
```
rpm -qa | grep el9
rpm -qa | grep leapp
```
  3. Use the sudo dnf remove command to remove the packages listed by the queries.
Caution:

Residual el9 packages that remain on the system do not receive updates. Vulnerability scanners or other security audits might report warnings or failures about these packages.
Remove the /root/tmp_leapp_py3 directory, which is no longer needed.
If you removed the system from ULN to perform the upgrade, register the system again and configure the appropriate channels.

For more information, see Registering an Oracle Linux System With ULN and ULN Channel Subscription Management in Oracle Linux: Managing Software on Oracle Linux.