draft Preupgrade Assistant migration tool This is a checklist of configuration settings intended to be used as RedHat Enterprise Linux migration tool. The checklist can be processed by varius tools which enable users to: define profiles with customized security policies, audit systems to determine compliance with targeted security policy and adjust system configuration. This XCCDF has been automatically generated, it should only serve as a baseline! Defense Information Systems Agency - Security Technical Implementation Guides (DISA STIG) Payment Card Industry - Data Security Standard (PCI DSS) 1.0 Preupgrade assistant default This profile is designed for the Preupgrade Assistant tool. Backup Configuration Files to Review 1 /root/preupgrade/RHEL6_7/backup/NoverifyConfigs 1 admin solution.txt /root/preupgrade Configuration Files to Review This module stores some system configuration files that can have been modified by the user when it is not possible to automatically upgrade them. Some packages do not track the possible performed changes to system configuration files; therefore, it cannot be easily determined if the files have been modified by the user or not. In order to allow for later examination, all configuration files not handled by the migration scripts are stored in the dirtyconf/ directory. The list of the stored files is available in the ./kickstart/noverifycfg file. The user is advised to verify the functionality of configuration files stored by this tool after a successful upgrade. File Lists for Manual Migration 1 /root/preupgrade/RHEL6_7/backup/UntrackedFiles 1 admin solution.txt /root/preupgrade File Lists for Manual Migration This module generates lists of files, such as temporary, application, and user data files, which are not automatically migrated. Some user data, such as user home directories and temporary files, are not tracked by the RPM database. This data will not be automatically migrated. To assist you with migrating the data, this module has generated the following three files. * The ./kickstart/untrackedsystem file lists the regular files on the system that will not be migrated. The list does not contain files mounted over the network, files created by runtime system operations, files in temporary locations, and user files in the /home/ or /root/ directory. * The ./kickstart/untrackeduser file lists the regular local files in the /home/ and /root/ directories that will not be migrated. If the /home/ and /root/ directories are on a file system mounted over the network, this file can be empty. * The ./kickstart/untrackedexpected file lists the regular files and symlinks created by runtime system operations (for example handling runlevels, alternatives and active SELinux modules). Most likely you don't need to care about them, list is available just for completeness. * The ./kickstart/untrackedtemporary file lists all temporary local files on the system that will not be migrated. This is essentially everything in the /cgroup/, /tmp/, and /var/ directories. Most likely you don't need to care about them, list is available just for completeness. It is recommended that you backup all data before proceeding with the upgrade to Red Hat Enterprise Linux 7. This data can be quite large. If you are performing an in-place upgrade, this data should remain in its current location after the upgrade. Configuration files and other data should be reviewed to determine if any modifications are needed for use with Red Hat Enterprise Linux 7. You should verify that all data was successfully maintained. If you are performing a migration upgrade, this data must be backed up to another storage medium. You will need to copy the data you wish to have on the new installation back into place after the upgrade is complete. Configuration files and other data should be reviewed to determine if any modifications are needed for use with Red Hat Enterprise Linux 7. Bacula Backup Software 1 /root/preupgrade/RHEL6_7/backup/bacula 1 admin bacula.txt /root/preupgrade Bacula Backup Software This module verifies the directory permissions for the Bacula service. This module verifies that the permissions on the /etc/bacula/ directory are correctly set. For more information about Bacula, see the "Installation and migration guide for Bacula backuping software" Knowledge Base article at https://access.redhat.com/site/articles/642483. Databases MySQL contents for migration MySQL configuration 1 /root/preupgrade/RHEL6_7/databases/mysql/configuration_changes 1 admin solution.txt /root/preupgrade MySQL configuration Check MySQL configuration During in-place upgrade, the old MySQL 5.1 RPM package is uninstalled and the new MariaDB 5.5 RPM package is installed, but RPM does not take this operations as an update. Note that the MySQL RPM renames /etc/my.cnf to /etc/my.cnf.rpmsave on uninstall. After installing MariaDB you should do the following to restore your old configuration options: root> mv -vi /etc/my.cnf.rpmsave /etc/my.cnf Migration of the MySQL data stack 1 /root/preupgrade/RHEL6_7/databases/mysql/data_migration 1 admin solution.txt /root/preupgrade Migration of the MySQL data stack Migrate the MySQL data stack to the new version of MariaDB Changes related to moving from MySQL to MariaDB 1 /root/preupgrade/RHEL6_7/databases/mysql/general_changes 1 admin solution.txt /root/preupgrade Changes related to moving from MySQL to MariaDB Mind that MySQL is replaced by MariaDB in default MySQL implementation PostgreSQL upgrade content 1 /root/preupgrade/RHEL6_7/databases/postgresql 1 admin solution.txt /root/preupgrade PostgreSQL upgrade content PostgreSQL upgrade content Desktop GNOME Desktop Environment underwent several design modifications in Red Hat Enterprise Linux 7 release 1 /root/preupgrade/RHEL6_7/desktop/GNOME 1 admin solution.txt /root/preupgrade GNOME Desktop Environment underwent several design modifications in Red Hat Enterprise Linux 7 release GNOME Desktop Environment underwent several design modifications in Red Hat Enterprise Linux 7 release. KDE Desktop Environment underwent several design modifications in Red Hat Enterprise Linux 7 release 1 /root/preupgrade/RHEL6_7/desktop/KDE 1 admin solution.txt /root/preupgrade KDE Desktop Environment underwent several design modifications in Red Hat Enterprise Linux 7 release KDE Desktop Environment underwent several design modifications in Red Hat Enterprise Linux 7 release. Drivers several graphic drivers not supported in Red Hat Enterprise Linux 7 1 /root/preupgrade/RHEL6_7/drivers/ObsoletedGraphicDrivers 1 admin solution.txt /root/preupgrade several graphic drivers not supported in Red Hat Enterprise Linux 7 Several graphic drivers packages were deprecated or removed in Red Hat Enterprise Linux 7. several input drivers not supported in Red Hat Enterprise Linux 7 1 /root/preupgrade/RHEL6_7/drivers/ObsoletedInputDrivers 1 admin solution.txt /root/preupgrade several input drivers not supported in Red Hat Enterprise Linux 7 Several input drivers packages were deprecated or removed in Red Hat Enterprise Linux 7. several kernel networking drivers not available in Red Hat Enterprise Linux 7 1 /root/preupgrade/RHEL6_7/drivers/ObsoletedNetworkDrivers 1 admin solution.txt /root/preupgrade several kernel networking drivers not available in Red Hat Enterprise Linux 7 Several kernel networking drivers were removed from Red Hat Enterprise Linux 7. _drivers_ObsoletedNetworkDrivers_SOLUTION_MSG_TEXT several kernel storage drivers not available in Red Hat Enterprise Linux 7 1 /root/preupgrade/RHEL6_7/drivers/ObsoletedStorageDrivers 1 admin solution.txt /root/preupgrade several kernel storage drivers not available in Red Hat Enterprise Linux 7 Several kernel storage drivers were deprecated or removed in Red Hat Enterprise Linux 7. _drivers_ObsoletedStorageDrivers_SOLUTION_MSG_TEXT Networking Names, Options and Output Format Changes in arptables 1 /root/preupgrade/RHEL6_7/networking/arptables_jf 1 admin solution.txt /root/preupgrade Names, Options and Output Format Changes in arptables The basic chain names, some command-line options, and some output formats have been changed between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Additionally, the name of the packages has been changed from arptables_jf to arptables. This module provides you with the list of incompatibilities. The names of some basic chains have changed, for example, the IN and OUT chains in arptables_jf have become INPUT and OUTPUT in arptables. The output of the "arptables -L" command is different: in arptables_jf, the rules are listed in a human-readable tabular form, while in arptables, each rule is written as a list of "arptables -A chain ..." command-line options and values, which should be used to add the rule. The arptables-save utility has been modified. In arptables_jf, arptables-save is a binary that accepts several command-line options and which produces output of rules in the form of a parameter list that can be used to add the rule and includes time stamps and COMMIT in the last line. In arptables, arptables-save is a Perl script that accepts no command-line options. The script runs the "arptables -t filter -L -n" command and modifies its output to look similar to the output of arptables-save in arptables_jf, but without time stamps and COMMIT in the last line." In arptables_jf, the arptables-restore utility is a binary, while in arptables, the utility is a Perl script. Also, the arptables packages contain an extension to classify an arp packet. The following list provides an overview of the changes to option names between arptables_jf and arptables. arptables_jf: -s --source --src arptables: -s --source-ip --src-ip arptables_jf: -d --destination --dst --target --tgt arptables: -d --destination-ip --dst-ip arptables_jf: -z --source-hw --source-mac --src-hw --src-mac arptables: --source-mac --src-mac arptables_jf: -y --target-hw --target-mac --tgt-mac --tgt-hw --dst-hw arptables: --destination-mac --dst-mac arptables_jf: --mangle-hw-s arptables: --mangle-mac-s arptables_jf: --mangle-hw-d arptables: --mangle-mac-d The following options also differ in the form of the value: In arptables_jf, the value is always in hexadecimal form (without '0x'), while in arptables the form of the value can differ. arptables_jf: -a --arhln arptables: -l --h-length (only a decimal value, an invalid value always inserts '0') arptables_jf: -p --arpop arptables: --opcode (only a decimal value) arptables_jf: -H --arphrd arptables: --h-type (always hexadecimal, either with '0x' or without) arptables_jf: -w --arpro arptables: --proto-type (if prefixed '0x' then hexadecimal, otherwise decimal) The following parameters are included only in arptables_jf: -c --set-counters The following parameters are included only in arptables: --p-length (not supported though) -m --match -V --version --set-class BIND9 BIND9 running in a chroot environment check. 1 /root/preupgrade/RHEL6_7/networking/bind/bind-chroot 1 admin solution.txt /root/preupgrade BIND9 running in a chroot environment check. The way how BIND9 running in a chroot environment is started changed between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. This module checks if chroot environment specific packages for BIND9 have been installed and points the administrator to the Red Hat Knowledgebase article. The way how BIND9 running in a chroot environment is started changed between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. For more information, please read the following Red Hat Knowledgebase article located at Customer Portal: https://access.redhat.com/site/node/770133/ The article describes: - How BIND can be run in a chroot environment on Red Hat Enterprise Linux 7 - What is the difference compared to Red Hat Enterprise Linux 6 - Recommendations when running BIND in a chroot environment BIND9 configuration compatibility check 1 /root/preupgrade/RHEL6_7/networking/bind/configuration 1 admin solution.txt /root/preupgrade BIND9 configuration compatibility check Checks BIND9 configuration compatibility File(s) affected: /etc/named.conf Move dhcpd/dhcprelay arguments from /etc/sysconfig/* to *.service files 1 /root/preupgrade/RHEL6_7/networking/dhcp 1 admin solution.txt /root/preupgrade Move dhcpd/dhcprelay arguments from /etc/sysconfig/* to *.service files Files /etc/sysconfig/[dhcpd|dhcrelay] containing customization arguments are deprecated in favour of *.service files. The arguments are automatically moved during update. This content checks if user specified any arguments and if so, informs him about the move. The files "/etc/sysconfig/[dhcpd|dhcpd6|dhcrelay]" used for specifying user's customization arguments are deprecated in RHEL7. Instead, these arguments can be specified in "[dhcpd|dhcpd6|dhcrelay].service" files on "ExecStart" line. The specified arguments are automatically moved from /etc/sysconfig/* files into *.service files during upgrade. Please check if they are moved correctly and everything works as expected. DNSMASQ configuration compatibility check 1 /root/preupgrade/RHEL6_7/networking/dnsmasq 1 admin solution.txt /root/preupgrade DNSMASQ configuration compatibility check Checks DNSMASQ configuration compatibility File(s) affected: /etc/dnsmasq.conf Dovecot configuration compatibility check 1 /root/preupgrade/RHEL6_7/networking/dovecot 1 admin solution.txt /root/preupgrade Dovecot configuration compatibility check Checks Dovecot configuration compatibility File(s) affected: /etc/dovecot/dovecot.conf Compatibility Between iptables and ip6tables 1 /root/preupgrade/RHEL6_7/networking/iptables 1 admin solution.txt /root/preupgrade Compatibility Between iptables and ip6tables The firewalld service is now the default firewall service. File(s) affected: /etc/sysconfig/iptables /etc/sysconfig/ip6tables If you are migrating from Red Hat Enterprise Linux 6 to Red Hat Enterprise Linux 7, verify whether you have the iptables-services packages installed after performing the upgrade by running the "rpm -q iptables-services" command as root. Also, verify that iptables and ip6tables services are enabled by running the "systemctl is-enabled iptables" and "systemctl is-enabled ip6tables" commands as root. For more details about migrating the firewall service from Red Hat Enterprise Linux 6, see the section about the firewalld service in the Red Hat Enterprise Linux 7 Migration Planning guide at https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Migration_Planning_Guide/. If you perform a clean installation of Red Hat Enterprise Linux 7, the firewalld service will be installed on your system instead of iptables and ip6tables. For further details about the firewalld service, see the section about firewalls in Red Hat Enterprise Linux 7 Security Guide. You can access the guide at https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Security_Guide/. Net-SNMP check 1 /root/preupgrade/RHEL6_7/networking/net-snmp 1 admin solution.txt /root/preupgrade Net-SNMP check Check if Net-SNMP daemon (snmpd) is enabled. Check NFSv2 1 /root/preupgrade/RHEL6_7/networking/nfsv2 1 admin solution.txt /root/preupgrade Check NFSv2 NFSv2 is not supported since RHEL 7. Therefore check if exists configuration which requires directly NFSv2 and fix it if it's possible. NFS protocol version 2 is not supported since RHEL7. ----------------------------------------------------- Check AuthorizedKeysCommand 1 /root/preupgrade/RHEL6_7/networking/openssh 1 admin solution.txt /root/preupgrade Check AuthorizedKeysCommand AuthorizedKeysCommand and AuthorizedKeysCommandUser are not accepted if they are under Match section. Check openssh-keycat 1 /root/preupgrade/RHEL6_7/networking/openssh-keycat 1 admin solution.txt /root/preupgrade Check openssh-keycat ssh-keycat is moved to own subpackage ssh-keycat files (below) are moved to new package 'openssh-keycat': /etc/pam.d/ssh-keycat /usr/libexec/openssh/ssh-keycat /usr/share/doc/openssh-server-5.3p1/HOWTO.ssh-keycat If you want ssh-keycat anymore, you need install openssh-keycat package. Postfix configuration compatibility check 1 /root/preupgrade/RHEL6_7/networking/postfix 1 admin solution.txt /root/preupgrade Postfix configuration compatibility check Checks postfix configuration compatibility File(s) affected: /etc/postfix/main.cf Please upgrade your configuration by: postfix upgrade-configuration If you plan to use postscreen daemon, please restart postfix service by: systemctl restart postfix There is new smtpd_relay_restrictions parameter with the built-in default settings: smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination This safety net prevents open relay problems due to mistakes with spam filter rules in smtpd_recipient_restrictions. If your site has a complex mail relay policy configured under smtpd_recipient_restrictions, this safety net may defer mail that Postfix should accept. To fix this safety net, take one of the following actions: - Set smtpd_relay_restrictions empty, and keep using the existing mail relay authorization policy in smtpd_recipient_restrictions. - Copy the existing mail relay authorization policy from smtpd_recipient_restrictions to smtpd_relay_restrictions. There is no need to change the value of smtpd_recipient_restrictions. Sendmail configuration compatibility check 1 /root/preupgrade/RHEL6_7/networking/sendmail 1 admin solution.txt /root/preupgrade Sendmail configuration compatibility check Checks sendmail configuration compatibility File(s) affected: /etc/sysconfig/sendmail Squid configuration compatibility check 1 /root/preupgrade/RHEL6_7/networking/squid 1 admin solution.txt /root/preupgrade Squid configuration compatibility check Checks squid configuration compatibility File(s) affected: /etc/squid/squid.conf Very Secure FTP daemon configuration 1 /root/preupgrade/RHEL6_7/networking/vsftpd 1 admin solution.txt /root/preupgrade Very Secure FTP daemon configuration Listen and listen_ipv6 has now little different behaviour on RHEL7 systems. On RHEL-6 systems listens to only IPv4 by default. Switching listen=NO and listen_ipv6=YES causes the daemon listens to only IPv6. But on RHEL-7 listens to IPv6 as well as IPv4 by default. Be default listening on the IPv6 'any' address will accept connections from both (IPv6 and IPv4) clients. If you want listen on specific adresses then you must run two copies of vsftpd with two configuration files. For more details see man 5 vsftpd.conf. Others Reusable Configuration Files 1 /root/preupgrade/RHEL6_7/others/NoVersionChangeEtc 1 admin solution.txt /root/preupgrade Reusable Configuration Files The module provides a list of the configuration files that can be reused in Red Hat Enterprise Linux 7. Some packages are the same in Red Hat Enterprise Linux 7 and Red Hat Enterprise Linux 6, therefore the current configuration files for these packages can be safely reused. This module stores these files in the /root/preupgrade/cleanconf/etc/ directory. Check changed config files 1 /root/preupgrade/RHEL6_7/others/configchanges 1 admin solution.txt /root/preupgrade Check changed config files Print modified config noreplace files which can generate .rpmnew (or .rpmsave) files. Specially check audit.rules which is generated by /sbin/augenrules since RHEL-6.6. It's recommended check these config files after upgrade on RHEL7: /root/.bashrc /etc/libuser.conf /etc/yum.conf Rsyslog configuration icompatibility 1 /root/preupgrade/RHEL6_7/others/rsyslog 1 admin solution.txt /root/preupgrade Rsyslog configuration icompatibility There is a change with journal (and thus socket logging) and some other incompatibilities in v7 as compared with older v5 version of rsyslog. See [0] and [1] for more information about new logging system on RHEL-7 and solutions of possible compatibility problems. [0] https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/System_Administrators_Guide/s1-interaction_of_rsyslog_and_journal.html [1] http://www.rsyslog.com/doc/v7-stable/compatibility/index.html VCS repositories 1 /root/preupgrade/RHEL6_7/others/vcsrepos 1 admin solution.txt /root/preupgrade VCS repositories Find Versin Control System repositories in /home and /root - git, svn, cvs, bzr. VCS repositories not found. Packages Added options in packages Added and extended options for BIND9 configuration 1 /root/preupgrade/RHEL6_7/packages/AddedOptions/bind 1 admin solution.txt /root/preupgrade Added and extended options for BIND9 configuration Some useful options have been added or extended in the configuration of the Berkeley Internet Name Domain (BIND9) utility on Red Hat Enterprise Linux 7. This module provides overview of the changes in the options between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. The following options have been extended or added to the BIND utility version 9.9.4: * inline-signing This option can be used in zone Statement. If set to "yes", the unsecured zone, which is either loaded from the disk or transferred, is signed in real time and served as signed. * request-ixfr This option can now also be used in a zone block of the configuration. Setting this option overrides the global setting or the view setting for the respective zone. * serial-update-method This new option can be used to specify an automatic zone serial number for zones configured for a dynamic DNS (DDNS). The available options are "increment" for incrementing the serial number by one after each zone update, or "unixtime" for setting the serial number to the number of seconds since the UNIX epoch. * also-notify This option now has the same syntax as the zone's "master" option. This means it is now possible to specify which transaction signature (TSIG) key to use when sending an update to a remote server or to include an explicit named masters list. * dnssec-loadkeys-interval This new option can be used to set the frequency of the checks for new keys if the zone has been configured with the "auto-dnssec maintain;" option. The time is specified in minutes with the default value set to 60 minutes. The minimum value is 1 minute and the maximum is 1440 minutes (24 hours). Any greater value is silently reduced to 1440 minutes. For more information, see the BIND9 Administrator Reference Manual located in the /usr/share/doc/bind-9.9.4/ directory. Added options in DNSMASQ configuration 1 /root/preupgrade/RHEL6_7/packages/AddedOptions/dnsmasq 1 admin solution.txt /root/preupgrade Added options in DNSMASQ configuration Some useful options were added in DNSMASQ configuration between RHEL 6 and RHEL 7. This informative content lists such changes. Some options in DNSMASQ configuration were added between RHEL 6 and RHEL 7. Some of these changes may be helpful in your DNSAMSQ configuration. IPv6 support for DHCP has been added: ------------------------------------- DNSMASQ version distributed in RHEL 7 now supports DHCPv6 protocol. The DHCPv6 server provides the same set of functionality as the DHCPv4 server. In addition it supports: - router advertisements - feature which allows naming for clients which use DHCPv4 for IPv4 configuration, and only stateless auto-configuration for IPv6 configuration. - Address allocation (both DHCPv6 and Router Advertisements) from subnets which are dynamically delegated via DHCPv6 prefix delegation. New "--bind-dynamic" dnsmasq network mode has been added: --------------------------------------------------------- New network mode "bind-dynamic" has been added into DNSMASQ version distributed in RHEL 7. The new network mode which is a hybrid between --bind-interfaces and the default. Dnsmasq will bind to addresses of individual interfaces, allowing multiple dnsmasq instances. If new interfaces or addresses appear on the system, it will automatically bind to them and start listening (this behaviour is subject to any access-control configuration). This makes dynamically created interfaces work in the same way as the default. The following configuration options have been added: "--tag-if=set:<tag>[,set:<tag>[,tag:<tag>[,tag:<tag>]]]" -------------------------------------------------------- The option "--tag-if" has been added to enable boolean operations on tags. Any tag appearing as 'set:<tag>' is set if all the tags which appear as 'tag:<tag>' are set (or unset when 'tag:!<tag>' is used). If there is no 'tag:<tag>' after 'set:<tag>', tags are set unconditionally. It is possible to use multiple 'set:' and 'tag:' arguments in any order. "--tag-if" statements ares processed in the same order they appear in the configuration, so if the <tag> in 'tag:<tag>' is a tag set by another "--tag-if" statement, the statement which sets the <tag> must precede the one which tests it. "--dhcp-proxy[=<ip addr>]..." ----------------------------- !!! IPv4 ONLY option !!! A normal DHCP relay agent is only used to forward the initial parts of the DHCP interaction to the DHCP server. Once the client is fully configured, it communicates directly with the server. A full DHCP relay server can use the (RFC 5107) 'serverid-override' option to force the DHCP server to use the relay as a full proxy, with all packets passing through it. The option "--dhcp-proxy" has been added to provide an alternative method of doing the same thing, for relays which don't support RFC 5107. Given alone, it manipulates the server-id for all interactions via relays. If a list of IP addresses is given, only interactions via relays with given addresses are affected. "--dhcp-generate-names=tag:<tag>[,tag:<tag>]" --------------------------------------------- !!! IPv4 ONLY option !!! The option "--dhcp-generate-names" has been added, which instructs dnsmasq to generate a name for each DHCP client which does not otherwise have one. The name is generated using the MAC address expressed in hexadecimal form, separated by dashes. Note that if the host provides a name, it will be preferred to the generated one, unless "--dhcp-ignore-names" option is used. "--max-ttl=<time>" ------------------ The option "--max-ttl=<time>" has been added to instruct dnsmasq to set the maximum TTL value of the DNS answer, that will be passed to clients. The specified maximum TTL will be set in the DNS answer to clients instead of the true TTL value, if the true TTL value is higher. The true TTL value is however kept in the cache to avoid flooding of upstream DNS servers. "--rebind-localhost-ok" ----------------------- The option "--rebind-localhost-ok" has been added to except 127.0.0.1/8 address range from rebinding checks. This address range is returned by real-time black hole servers, so blocking it may disable these services. "--rebind-domain-ok=[<domain>]|[[/<domain>/[<domain>/]" ------------------------------------------------------- The "--rebind-domain-ok" option has been added to disable detection and blocking of dns-rebind on queries to given domains. The argument may be either a single domain, or multiple domains surrounded and separated by '/'. "--dhcp-sequential-ip" ---------------------- The option "--dhcp-sequential-ip" has been added to instruct DHCP server to assign IP addresses to DHCP clients sequentially. The address allocation starts from the lowest available address. Note that in the sequential mode, clients which allow their lease to expire are much more likely to get their IP address changed. "--add-mac" ----------- The option "--add-mac" has been added to enable adding the MAC address of the DNS client to DNS queries which are forwarded to upstream servers. This may be used for filtering purposes by the upstream server. The MAC address can be added only if the DNS client is on the same subnet as the dnsmasq server. Note that the mechanism used to achieve this (an EDNS0 option) is not yet standardised, therefore it should be considered experimental. Also note that exposing MAC addresses in this way may have SECURITY and PRIVACY implications. "--tftp-lowercase" ------------------ The option "--tftp-lowercase" instructs the TFTP server to convert filenames in TFTP requests to lowercase. This is useful for requests from machines which use case-insensitive filesystem. "--dhcp-client-update" ---------------------- By default dnsmasq sets a flag in the FQDN option, when giving a DHCP lease, to tell the client not to attempt a DDNS update with its name and IP address. This flag disables this default behaviour. "--dhcp-duid=<enterprise-id>,<uid>" ----------------------------------- !!! IPv6 ONLY option !!! The option "--dhcp-duid" has been added to enable specification of the persistent UID used by DHCPv6 server. This option is not normally required as dnsmasq creates a DUID automatically when first needed. If used, this option provides dnsmasq the data required to create a DUID-EN type DUID. The <enterprise-id> is assigned by IANA, and the <uid> is a string of hexadecimal octets unique to a particular device. "--host-record=<name>[,<name>....],[<IPv4-address>],[<IPv6-address>]" -------------------------------------------------------------------- The option "--host-record" enables the user to add A, AAAA and PTR records to the DNS. It adds one or more names to the DNS with associated IPv4 (A) and/or IPv6 (AAAA) records. The same name may appear in multiple host-record statements. This will result in assignment of multiple addresses to the same name. Only the first address creates a PTR record linking the address to the name. "--dns-rr=<name>,<RR-number>,[<hex data>]" ------------------------------------------ The option "--dns-rr" enabled dnsmasq to return an arbitrary DNS Resource Record. The <RR-number> is the type of the record (which is always of the IN class). The value of the record is given by the <hex data>, which may be of the form "01:23:45" or "01 23 45" or "012345" or any mixture of these. "--max-cache-ttl=<time>" ------------------------ The option "--max-cache-ttl" can be used to set the maximum TTL value of cached DNS answers. "--ipset=/<domain>/[domain/]<ipset>[,<ipset>]" ---------------------------------------------- The option "--ipset" can be used to place the resolved IP addresses of queries for specified domains in the specified netfilter ipsets. These ipsets must already exist. For more information please see ipset manpage ('man 8 ipset'). For more information, please see the DNSMASQ man page ('man 8 dnsmasq'). Print removed and moved utilities 1 /root/preupgrade/RHEL6_7/packages/GenericUtilities 1 admin solution.txt /root/preupgrade Print removed and moved utilities Print utilities which were removed from packages, moved into another package or changed destination directory. Some utilities were removed, moved between packages of change path. Please, check your scripts for possible problems. Below are appended brief lists. If you want see details, please look at another contents. Lists don't contain utilities from removed packages, which are not replaced by another packages. Likewise don't contain utilities which are moved into packages which replace or obsolete original packages. Replaced utilities: /bin/iptables-xml-1.4.7 (iptables) — iptables-xml /sbin/iptables-1.4.7 (iptables) — iptables /sbin/iptables-multi-1.4.7 (iptables) — iptables-multi /sbin/iptables-restore-1.4.7 (iptables) — iptables-restore /sbin/iptables-save-1.4.7 (iptables) — iptables-save /sbin/ip6tables-1.4.7 (iptables-ipv6) — ip6tables /sbin/ip6tables-multi-1.4.7 (iptables-ipv6) — ip6tables-multi /sbin/ip6tables-restore-1.4.7 (iptables-ipv6) — ip6tables-restore /sbin/ip6tables-save-1.4.7 (iptables-ipv6) — ip6tables-save /usr/bin/python2.6 (python) — python2.7 /usr/bin/easy_install-2.6 (python-setuptools) — easy_install-2.7 /sbin/udevd (udev) — /usr/lib/systemd/systemd-udevd Removed utilities (some removed utilities have still alternative): /usr/bin/ck-history (ConsoleKit) /usr/bin/ck-launch-session (ConsoleKit) /usr/bin/ck-list-sessions (ConsoleKit) /usr/sbin/ck-log-system-restart (ConsoleKit) /usr/sbin/ck-log-system-start (ConsoleKit) /usr/sbin/ck-log-system-stop (ConsoleKit) /usr/sbin/console-kit-daemon (ConsoleKit) /usr/sbin/packagekitd (PackageKit) /usr/bin/abrt-dedup-client (abrt-addon-ccpp) — the server side no longer exists /usr/bin/btparser (btparser) — see man satyr:satyr /usr/bin/ca-legacy (ca-certificates) /usr/sbin/cpuspeed (cpuspeed) /usr/bin/berkeley_db_svc (db4-utils) /usr/bin/db_codegen (db4-utils) /sbin/fsck.ext4dev (e2fsprogs) — not needed /sbin/mkfs.ext4dev (e2fsprogs) — not needed /usr/bin/volname (eject) — use blkid instead /usr/bin/.fipscheck.hmac (fipscheck) /usr/bin/protoize (gcc) /usr/bin/unprotoize (gcc) /usr/bin/gdbtui (gdb) /usr/bin/update-gdk-pixbuf-loaders (gdk-pixbuf2) /usr/bin/update-gio-modules (glib2) /usr/sbin/tzdata-update (glibc-common) /usr/bin/gpgkey2ssh (gnupg2) /sbin/grub (grub) /sbin/grub-crypt (grub) /sbin/grub-install (grub) /sbin/grub-md5-crypt (grub) /sbin/grub-terminfo (grub) /usr/bin/mbchk (grub) /sbin/umount.hal (hal) /usr/bin/hal-device (hal) /usr/bin/hal-disable-polling (hal) /usr/bin/hal-find-by-capability (hal) /usr/bin/hal-find-by-property (hal) /usr/bin/hal-get-property (hal) /usr/bin/hal-is-caller-locked-out (hal) /usr/bin/hal-lock (hal) /usr/bin/hal-set-property (hal) /usr/bin/hal-setup-keymap (hal) /usr/bin/lshal (hal) /usr/sbin/hald (hal) /usr/sbin/httpd.event (httpd) /usr/sbin/httpd.worker (httpd) /sbin/fstab-decode (initscripts) /sbin/getkey (initscripts) /sbin/securetty (initscripts) /sbin/setsysfont (initscripts) /usr/sbin/togglesebool (libselinux-utils) /usr/bin/man2html (man) — man -H, see more "man man" and "man groff" /usr/sbin/makewhatis (man) /usr/bin/mcmfmt (mc) — removed by upstream /sbin/microcode_ctl (microcode_ctl) /sbin/mingetty (mingetty) — obsoleted by agetty:util-linux /sbin/insmod.static (module-init-tools) — not needed in kmod /sbin/nfs_cache_getent (nfs-utils) — not needed anymore by kernel /usr/bin/.ssh.hmac (openssh-clients) /usr/sbin/.sshd.hmac (openssh-server) /usr/bin/dprofpp (perl) — you can install Devel-DProf from CPAN /usr/bin/perl5.10.1 (perl) — newer version /usr/bin/lwp-rget (perl-libwww-perl) — not maintained anymore /usr/bin/rhgb-client (plymouth) — use plymouth /usr/sbin/open_init_pty (policycoreutils) — not needed anymore due to systemd /usr/sbin/run_init (policycoreutils) — not needed anymore due to systemd /usr/bin/chardetect (python-chardet) /sbin/readahead (readahead) /sbin/readahead-collector (readahead) /usr/bin/rpmargs (rpmdevtools) — fakeroot is removed /usr/bin/rpmelfsym (rpmdevtools) — fakeroot is removed /usr/bin/rpmfile (rpmdevtools) — fakeroot is removed /usr/bin/rpmpeek (rpmdevtools) — fakeroot is removed /usr/bin/rpmsodiff (rpmdevtools) — fakeroot is removed /usr/bin/rpmsoname (rpmdevtools) — fakeroot is removed /sbin/scsi_id (udev) /sbin/start_udev (udev) /sbin/initctl (upstart) — functionality implemented in systemd /sbin/reload (upstart) — functionality implemented in systemd /sbin/restart (upstart) — functionality implemented in systemd /sbin/start (upstart) — functionality implemented in systemd /sbin/status (upstart) — functionality implemented in systemd /sbin/stop (upstart) — functionality implemented in systemd /sbin/mount.tmpfs (util-linux-ng) — see man 8 mount /usr/bin/ddate (util-linux-ng) — useless /usr/bin/floppy (util-linux-ng) — obsolete /usr/sbin/tunelp (util-linux-ng) — obsolete /sbin/vconfig (vconfig) — see man ip from iproute Utilities moved between packages (with same location): /bin/su (coreutils) -> (util-linux) /sbin/runuser (coreutils) -> (util-linux) /sbin/matchpathcon (libselinux) -> (libselinux-utils) /bin/mountpoint (sysvinit-tools) -> (util-linux) /sbin/sulogin (sysvinit-tools) -> (util-linux) Check packages from other variants 1 /root/preupgrade/RHEL6_7/packages/InterVariants 1 admin solution.txt /root/preupgrade Check packages from other variants Packages from different variants could be installed on system. Print these packages which are from other variants. Packages not signed by Red Hat 1 /root/preupgrade/RHEL6_7/packages/NonRHSignedPkg 1 admin solution.txt /root/preupgrade Packages not signed by Red Hat Packages not signed by Red Hat will not be upgraded Packages which are not signed with the official Red Hat keys will not be upgraded. These packages are typically provided by third parties or have been modified in some way. There is a high risk of incompatibility with these packages as they have not been verified by Red Hat. For upgrade assistance, contact the vendors of these packages. You can find a list of all unsigned packages including the vendor names in the kickstart/nonrhpkgs file. Obsoleted rpms 1 /root/preupgrade/RHEL6_7/packages/ObsoletedPackages 1 admin solution.txt /root/preupgrade Obsoleted rpms Some rpms were obsoleted from the set of the packages between RHEL 6 and RHEL 7. This content checks for the package obsoletes from your set of Red Hat packages. Some of the packages were obsoleted between RHEL 6 and RHEL 7. This means Red Hat provides some alternative for them, but these alternatives may be not 100% compatible - thus we don't replace them automatically. For some of the obsoletes you will get the incompatibilities from separate preupgrade contents and you can adjust your workflow according to the changes. Sometimes, package might be replaced by several others. Following packages were obsoleted by different ones: ConsoleKit was obsoleted by systemd PackageKit-gtk-module was obsoleted by PackageKit-gtk3-module btparser was obsoleted by satyr cpuspeed was obsoleted by kernel-tools,kernel eggdbus was obsoleted by glib2 grub was obsoleted by grub2 hal was obsoleted by systemd mingetty was obsoleted by util-linux mysql-libs was obsoleted by mariadb-libs pam_passwdqc was obsoleted by libpwquality readahead was obsoleted by systemd udev was obsoleted by systemd upstart was obsoleted by systemd vconfig was obsoleted by iproute If some NonRH signed package requires these packages, you may need to check if the alternative solution provided by Red Hat does work for you or get the missing package from different sources than RHEL. You need to install these new packages yourself after the assessment, as Red Hat can't assess the compatibility for you. w3m not available in Red Hat Enterprise Linux 7 1 /root/preupgrade/RHEL6_7/packages/ObsoletedW3m 1 admin solution.txt /root/preupgrade w3m not available in Red Hat Enterprise Linux 7 The w3m package is not available in Red Hat Enterprise Linux 7. The w3m package is not available for Red Hat Enterprise Linux 7. Red Hat provides the Lynx and ELinks text-based web browsers. They provide similar features to the w3m browser, however their syntax is different. As a consequence, a change of workflow might be required after the upgrade. report incompatibilities between Red Hat Enterprise Linux 6 and 7 in qemu-guest-agent package 1 /root/preupgrade/RHEL6_7/packages/QemuGuestAgent 1 admin solution.txt /root/preupgrade report incompatibilities between Red Hat Enterprise Linux 6 and 7 in qemu-guest-agent package Report incompatibilities between Red Hat Enterprise Linux 6 and 7 in qemu-guest-agent package. The service name for qemu-guest-agent was modified in Red Hat Enterprise Linux 7 from qemu-ga to qemu-guest-agent. Please make sure that you modify the scripts that might use the old service name. The main hook script location was modified in Red Hat Enterprise Linux 7 from /usr/libexec/qemu-ga/fsfreeze-hook to /etc/qemu-ga/fsfreeze-hook. The default hook log file location was modified in Red Hat Enterprise Linux 7 from /var/log/qemu-ga/fsfreeze-hook.log to /var/log/qemu-ga/fsfreeze-hook.log. The app-specific hook script directory location was modified in Red Hat Enterprise Linux 7 from /usr/libexec/qemu-ga/fsfreeze-hook.d to the following three locations listed in the decreasing order of precedence: /run/qemu-ga/fsfreeze-hook.d /etc/qemu-ga/fsfreeze-hook.d /lib/qemu-ga/fsfreeze-hook.d The format of guest agent config file /etc/sysconfig/qemu-ga was modified in Red Hat Enterprise Linux 7 from shell script to systemd environment file. Only the BLACKLIST_RPC and FSFREEZE_HOOK_PATHNAME options remain valid. The option FSFREEZE_HOOK_ENABLE was merged with the FSFREEZE_HOOK_PATHNAME settings. The port settings for virtio-serial were moved to /usr/lib/systemd/system/qemu-guest-agent.service and /usr/lib/udev/rules.d/99-qemu-guest-agent.rules files -- the systemd daemon needs to be reloaded with 'systemctl daemon-reload' command in order to apply the changes. The option for PID file was removed as with the systemd, there is no longer any need for PID files. The option for log file was removed as the systemd journal is used for logging purposes. Please note the new locations of all the files and configuration options and update your scripts that use the old locations accordingly. Removed options in packages Removed Options in coreutils 1 /root/preupgrade/RHEL6_7/packages/RemovedOptions/coreutils 1 admin solution.txt /root/preupgrade Removed Options in coreutils Some options and binary files were removed from the coreutils packages between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. A number of options and binary files have been removed from the coreutils packages in Red Hat Enterprise Linux 7. The functionality of some scripts can be affected. This is a complete list of removed options and binary files, including the solutions and new options: * For the "factor" invocation, the "--verbose" option has been renamed to "--debug". * For the "install" invocation, the "--preserve_context" option has been removed. The "--preserve-context" option can be used instead. * For the "nl" invocation, the "--page-increment" option, which was deprecated in Red Hat Enterprise Linux 6, has been removed. The "--line-increment" option can be used instead. * The "runuser" and "su" binaries have been moved to the util-linux package. * For the "stat" invocation, the "--context" option and its short form, "-Z", have been removed. SELinux context is now a part of the stat default output format. * For the "mkdir", "mknod", "mkfifo", "cp", and "install" invocations, the "-Z" option no longer accepts any arguments and automatically sets the default SELinux setting context. To set a specific context, the "--context=[context]" option has to be used. * For the "touch" invocation, the deprecated "--file" option has been removed. The "--reference" option can be used instead. Please verify that your scripts have been updated to work with these changes. Removed options in gawk binaries 1 /root/preupgrade/RHEL6_7/packages/RemovedOptions/gawk 1 admin solution.txt /root/preupgrade Removed options in gawk binaries Some options and binaries were removed from gawk package between RHEL 6 and RHEL 7. This informative content lists the incompatibilities. Some options were removed from gawk package binaries between RHEL 6 and RHEL 7. This may break functionality of some of your scripts. All option removals with solutions are listed bellow. awk/gawk/pgawk: --compat - option was removed, alternative is --traditional --copyleft - option was removed, alternative is --copyright/-C --gen-po - option was replaced by --gen-pot option --usage -D - short form of --parsedebug was changed to -Y Please check that your scripts are aware of these changes. Removed options in grep binaries 1 /root/preupgrade/RHEL6_7/packages/RemovedOptions/grep 1 admin solution.txt /root/preupgrade Removed options in grep binaries Some commandline options are removed or deprecated in packages. Print list of changes. Option "-K" was removed from grep, egrep and fgrep utilities on RHEL 7 system. This option wasn't docummented before on RHEL 6. Removed options in netstat binary 1 /root/preupgrade/RHEL6_7/packages/RemovedOptions/nettools 1 admin solution.txt /root/preupgrade Removed options in netstat binary Some options were removed from netstat binary between RHEL 6 and RHEL 7. This informative content lists the incompatibilities. Some options were removed from netstat binary of net-tools package between RHEL 6 and RHEL 7. This may break functionality of some of your scripts. All option removals with solutions are listed bellow. netstat : -T/--notrim renamed to -W/--wide Please check that your scripts are aware of these changes. Removed options in quota tools 1 /root/preupgrade/RHEL6_7/packages/RemovedOptions/quota 1 admin solution.txt /root/preupgrade Removed options in quota tools Some options have been renamed at quota tools between Red Hat Enterprise 6 and 7. This informative content lists the incompatibilities. Some options were renamed at quota tools between Red Hat Enterprise Linux 6 and 7. This may break functionality of some of your scripts. The changes are: /usr/bin/quota: Option --nfs-all was corrected to --all-nfs in the usage help output. Both versions still recognize the --all-nfs option. /usr/sbin/quota_nld: Option --no-daemon was renamed to --foreground. Short option -F is unchanged. This is not an issue if you run quota_nld as daemon, e.g. via init script. /usr/sbin/repquota: Option --batch-translation was corrected to --cache in the usage help output. Both versions still recognize the --cache option. /usr/sbin/repquota: Option --no-batch-translation was corrected to --no-cache in the usage help output. Both versions still recognize the --no-cache option. Please check that your scripts are aware of these changes. Removed or deprecated options in util-linux (util-linux-ng) binaries 1 /root/preupgrade/RHEL6_7/packages/RemovedOptions/util-linux 1 admin solution.txt /root/preupgrade Removed or deprecated options in util-linux (util-linux-ng) binaries Some commandline options are removed or deprecated in some packages. Print list of changes for util-linux. Some options were removed or deprecated from util-linux-ng (on RHEL 7 is renamed back to util-linux) package binaries between RHEL 6 and RHEL 7. This may break functionality of some of your scripts. All option removals with solutions are listed bellow. blkid: -w - options is deprecated (undocumented on RHEL7) fallocate: --lenght - replaced by --length findmnt --fsroot - replaced by --nofsroot losetup: -s - short option removed, available only --show mount: -p, --pass-fd - options are deprecated (undcummented on RHEL7) partx: --gpt - undocumented and removed readprofile: -t - removed sfdisk: -? - replaced by -h blkid,fsck,hexdump,hwclock,mkfs,mount,renice: -v is deprecated and replaced by -V (print version) Removed rpms 1 /root/preupgrade/RHEL6_7/packages/RemovedPackages 1 admin solution.txt /root/preupgrade Removed rpms Some rpms were removed from the set of the packages between RHEL 6 and RHEL 7. This content checks for the package removals from your set of Red Hat packages. Some of the packages were removed between RHEL 6 and RHEL 7. This may break the upgrade for some of your packages. We are not aware of any compatible replacement for these packages. Following packages are no longer available: ConsoleKit-libs MAKEDEV atmel-firmware b43-fwcutter b43-openfwwf busybox cloog-ppl dash fakeroot fakeroot-libs hal-info hal-libs ipw2100-firmware ipw2200-firmware libertas-usb8388-firmware libgssglue libnih pcmciautils ppl python-argparse python-iwlib system-config-network-tui wireless-tools zd1211-firmware If some NonRH signed package requires these packages, you may need to ask your vendor to provide alternative solution or get the missing package from different sources than RHEL. taskjuggler not available in Red Hat Enterprise Linux 7 1 /root/preupgrade/RHEL6_7/packages/RemovedTaskjuggler 1 admin solution.txt /root/preupgrade taskjuggler not available in Red Hat Enterprise Linux 7 The taskjuggler packages are not available in Red Hat Enterprise Linux 7. The taskjuggler and taskjuggler-libs packages are not available for Red Hat Enterprise Linux 7. Upstream stopped support for taskjuggler 2 ( as the rewrite to QT 4 is not an easy task) and taskjuggler 3 written in ruby is not compatible. Unfortunately, there is no replacement supported by Red Hat. If your processes require these packages, you may either compile the kdelibs 3 and kdepim 3 stack (bringing QT3 stuff into RHEL 7) or migrate to taskjuggler 3 (from upstream, www.taskjuggler.org). Replaced rpms 1 /root/preupgrade/RHEL6_7/packages/ReplacedPackages 1 admin solution.txt /root/preupgrade Replaced rpms Some rpms were replaced between RHEL 6 and RHEL 7. This content checks for the package replacements from your set of Red Hat packages and generates the list of RH packages/yum groups for RHEL 7 kickstart. Some of the packages were replaced between RHEL 6 and RHEL 7. This means package with different name provides 100% compatible functionality, so we can replace them automatically in the package set. For some of the replacements provides were not handled by the packages, therefore preupgrade asistant migrates them after the upgrade if necessary. Following packages were replaced: Red_Hat_Enterprise_Linux-Release_Notes-6-en-US was replaced by Red_Hat_Enterprise_Linux-Release_Notes-7-en-US bfa-firmware was replaced by linux-firmware coreutils-libs was replaced by coreutils cryptsetup-luks-libs was replaced by cryptsetup-libs cryptsetup-luks was replaced by cryptsetup db4-utils was replaced by libdb-utils db4 was replaced by libdb dracut-kernel was replaced by dracut eject was replaced by util-linux iptables-ipv6 was replaced by iptables-services kernel-firmware was replaced by linux-firmware libudev was replaced by systemd-libs libusb1 was replaced by libusbx man was replaced by man-db module-init-tools (required by NonRH signed package(s):qa-tools ) was replaced by kmod nfs-utils-lib was replaced by libnfsidmap perl-Compress-Zlib was replaced by perl-IO-Compress perl-IO-Compress-Base was replaced by perl-IO-Compress perl-IO-Compress-Zlib was replaced by perl-IO-Compress procps (required by NonRH signed package(s):qa-tools ) was replaced by procps-ng ql2100-firmware was replaced by linux-firmware ql2200-firmware was replaced by linux-firmware ql23xx-firmware was replaced by linux-firmware ql2400-firmware was replaced by linux-firmware ql2500-firmware was replaced by linux-firmware rt61pci-firmware was replaced by linux-firmware rt73usb-firmware was replaced by linux-firmware util-linux-ng was replaced by util-linux xorg-x11-drv-ati-firmware was replaced by linux-firmware yum-plugin-security was replaced by yum If some NonRH signed package requires these packages, you still may want to monitor them closely. Although the replacement should be compatible, it can have some minor differences expectable even in the case of common application lifecycle. GMP library incompatibilities 1 /root/preupgrade/RHEL6_7/packages/gmp 1 admin solution.txt /root/preupgrade GMP library incompatibilities Incompatibilities between GMP 4 and GMP 5.1 libraries. GMP 5.1 is compatible with GMP 4 in major features. Incompatible changes affect only functions, which should not be used by user applications at all: - mpn_bdivmod function - BSDMP-like interface libmp.so optional channel problems 1 /root/preupgrade/RHEL6_7/packages/optional-channel 1 admin solution.txt /root/preupgrade optional channel problems detects upgrade problems with RHEL optional channel Either you have directly enabled some of the Red Hat Enterprise Linux 6 'optional' yum repositories on your system, or you have installed some packages which have been moved from "base" to "optional" repository in Red Hat Enterprise Linux 7. This will very likely cause fail during upgrade of your system. Please, provide additional yum repository to redhat-upgrade-tool to make packages residing in RHEL 7 optional channel updated. For this purpose, use following additional option for redhat-upgrade-tool: --addrepo rhel-7-optional=<path to the optional repository> Optionally, you could remove all packages which reside in RHEL 7 optional repository before you start the system upgrade. package downgrades 1 /root/preupgrade/RHEL6_7/packages/pkgdowngrades 1 admin solution.txt /root/preupgrade package downgrades detects package downgrades from RHEL6 to RHEL7 Some packages installed on your system have broken upgrade path from Red Hat Enterprise Linux version 6 to version 7 (the version of package is lower in newer Enterprise Linux). This does not cause fail of redhat-upgrade-tool run and it could potentially left system in inconsistent state (mixed RHEL 6 and RHEL 7 packages installed). Pre-upgrade scripts makes best effort to force redhat-upgrade-tool in-place upgrade process install packages with broken upgrade path but you should be aware of that and know what is happening. Optionally, if possible, you may remove packages in question from RHEL 6 system. SELinux issues SELinux Custom Policy 1 /root/preupgrade/RHEL6_7/selinux/CustomPolicy 1 admin solution.txt /root/preupgrade SELinux Custom Policy Solve problem with custom SE policy modules after migration Custom SELinux policy modules couldn't be found by sesearch. This is fixed by removing selinux module sandbox.pp which is repalced by sandboxX.pp and is disabled by default on RHEL7 systems. This solve some other issues between sandbox.pp and sandboxX.pp too. So module is removed be default now by postcript: /root/preupgrade/postupgrade.d/fix_SELinuxCustomPolicy.sh restore custom selinux configuration 1 /root/preupgrade/RHEL6_7/selinux/RestoreConfig 1 admin solution.txt /root/preupgrade restore custom selinux configuration Content with postupgrade script that restores custom selinux configuration. Custom SELinux configuration options managed by semanage command are lost after upgrade. This preupgrade assistant content stores the custom configuration options, restores them once the upgrade is complete and issues the SELinux relabel mechanism upon the next reboot to accomodate the possible changes that might have been raised by these modifications. No manual user action is necessary upon upgrade. General 1 /root/preupgrade/RHEL6_7/selinux/general 1 admin solution.txt /root/preupgrade General There has to be some steps performed in order to have working SELinux on RHEL 7. We have detected that you are using SELinux. There were changes in policies which require to apply custom command before upgrade process. In order to have working SELinux on Red Hat Enterprise Linux 7, you HAVE TO run command prior to running redhat-upgrade-tool: semodule -r sandbox samba shared directories selinux 1 /root/preupgrade/RHEL6_7/selinux/samba 1 admin solution.txt /root/preupgrade samba shared directories selinux Samba shared directories that might need their selinux context restored. We found some samba shared directories. These should be labelled as samba_shared_t, unless they are system directories, which should carry some another label. Since autorelabel will be performed after upgrade, please check if they are labelled correctly on the upgraded system. Services CUPS Browsing/BrowsePoll configuration 1 /root/preupgrade/RHEL6_7/services/cupsbrowsing 1 admin solution.txt /root/preupgrade CUPS Browsing/BrowsePoll configuration The CUPS Browsing and BrowsePoll configuration directives have been removed from CUPS. A replacement is provided in the form of the cups-browsed service. File(s) affected: /etc/cups/cupsd.conf CVS Package Split 1 /root/preupgrade/RHEL6_7/services/cvs 1 admin solution.txt /root/preupgrade CVS Package Split Some Concurrent Versions System (CVS) tools and documentation have been moved into separate packages and are no longer provided by the cvs packages. The Concurrent Versions System (CVS) server and client have not been changed significantly and should be fully compatible. However, some tools and documentation have been moved to other packages which could concern some users. The rcs2log and contrib utilities have been moved into the new cvs-contrib packages in order to remove the cvs packages dependency on perl and reduce the size of the cvs packages. If you require the rcs2log and contrib tools, you can install the packages manually by running the "yum install cvs-contrib" command as root. Additional documentation, such as books concerning CVS tools in the PDF format and revision control system (RCS) specification files, has been moved into the new cvs-doc package to reduce the size of the cvs packages. If you want to access this additional documentation, install the package manually by running the "yum install cvs-doc" command as root. The manual and Texinfo pages are still included in the cvs packages. These utilities and the supplemental documentation are not used by the CVS client or server. Their absence does not pose a risk when upgrading the cvs packages. FreeRADIUS Upgrade Verification 1 /root/preupgrade/RHEL6_7/services/freeradius 1 admin solution.txt /root/preupgrade FreeRADIUS Upgrade Verification This module determines if there is a version of the FreeRADIUS service prior to version 3.x installed on the system. These earlier versions have an incompatible configuration and need to be configured manually using the resources mentioned below. Red Hat Enterprise Linux 7 contains the FreeRADIUS service version 3.x, which is a major version upgrade from version 2.x on Red Hat Enterprise Linux 6. The configuration of the FreeRADIUS service version 3.x is not compatible with version 2.x. There are no automated mechanisms to convert a FreeRADIUS 2.x configuration into a FreeRADIUS 3.x configuration, therefore the conversion must be performed manually by an experienced administrator. The user is advised to install the default FreeRADIUS configuration and make incremental changes while testing each minor alteration. Placing the FreeRADIUS configuration files located in the /etc/raddb/ directory under version control is recommended. Using a source code management (SCM) tool, such as Git or Apache Subversion, enables the user to track changes over time. Available resources for performing the upgrade include the following: * Files located in the /usr/share/doc/freeradius*/ directories. Many of these documents are installed by the freeradius-doc subpackage. It is recommended that you install this package. * The FreeRADIUS man pages, especially unlang(5), and radiusd.conf(5). To see a list of available manpages, run the "man -k radius" command. * The in-line comments located within the configuration files in the /etc/raddb/ directory. This is where the majority of the FreeRADIUS documentation can be found, and it is of vital importance to read the contents of the configuration files. * The upstream website http://freeradius.org and especially the wiki located at wiki.freeradius.org * The FreeRADIUS users mailing list available at: http://lists.freeradius.org/mailman/listinfo/freeradius-users * Further information at: http://freeradius.org/version3.html and https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/raddb/README.rst httpd configuration compatibility check 1 /root/preupgrade/RHEL6_7/services/httpd 1 admin solution.txt /root/preupgrade httpd configuration compatibility check Checks httpd configuration compatibility File(s) affected: /etc/httpd/conf/httpd.conf * httpd.conf does not include conf.modules.d/*.conf. This directory will be included automatically. * httpd.conf loads modules which are loaded in conf.modules.d/*conf in new httpd version. Following modules will be therefore removed from httpd.conf: modules\/mod_actions.so modules\/mod_alias.so modules\/mod_auth_basic.so modules\/mod_auth_digest.so modules\/mod_authn_anon.so modules\/mod_authn_dbm.so modules\/mod_authn_file.so modules\/mod_authz_dbm.so modules\/mod_authz_groupfile.so modules\/mod_authz_host.so modules\/mod_authz_owner.so modules\/mod_authz_user.so modules\/mod_autoindex.so modules\/mod_cache.so modules\/mod_deflate.so modules\/mod_dir.so modules\/mod_env.so modules\/mod_expires.so modules\/mod_ext_filter.so modules\/mod_headers.so modules\/mod_include.so modules\/mod_info.so modules\/mod_log_config.so modules\/mod_logio.so modules\/mod_mime_magic.so modules\/mod_mime.so modules\/mod_negotiation.so modules\/mod_rewrite.so modules\/mod_setenvif.so modules\/mod_status.so modules\/mod_substitute.so modules\/mod_suexec.so modules\/mod_userdir.so modules\/mod_version.so modules\/mod_vhost_alias.so modules\/mod_dav.so modules\/mod_dav_fs.so modules\/mod_proxy.so modules\/mod_proxy_ajp.so modules\/mod_proxy_balancer.so modules\/mod_proxy_connect.so modules\/mod_proxy_ftp.so modules\/mod_proxy_http.so modules\/mod_disk_cache.so modules\/mod_cgi.so modules\/mod_ldap.so modules\/mod_authnz_ldap.so modules\/mod_speling.so modules\/mod_usertrack.so * httpd.conf loads default modules which have been removed in new version of httpd. Following modules will be therefore removed from httpd.conf: modules\/mod_authn_alias.so modules\/mod_authn_default.so modules\/mod_authz_default.so * httpd config files contain deprecated Access control directives Order, Allow, Deny, and Satisfy. The old access control idioms should be replaced by the new authentication mechanisms, although for compatibility with old configurations, the new module mod_access_compat is provided and loaded by default. Read more on http://httpd.apache.org/docs/2.4/upgrading.html to find out solutions for these problems. This section of solution text shows the difference between this system configuration of httpd and the default httpd 2.2 configuration: --- httpd.conf 2015-05-13 10:13:21.000000000 -0400 +++ /etc/httpd//conf/httpd.conf 2015-03-03 12:01:17.000000000 -0500 @@ -630,7 +630,7 @@ AddIcon /icons/uuencoded.gif .uu AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl AddIcon /icons/tex.gif .tex -AddIcon /icons/bomb.gif core +AddIcon /icons/bomb.gif /core AddIcon /icons/back.gif .. AddIcon /icons/hand.right.gif README IPA (Identity-Policy-Audit) bind-dyndb-ldap 1 /root/preupgrade/RHEL6_7/services/ipa/bind-dyndb-ldap 1 admin solution.txt /root/preupgrade bind-dyndb-ldap Check configuration file for bind-dyndb-ldap plug-in. File(s) affected: /etc/named.conf Identity Management Server compatibility check 1 /root/preupgrade/RHEL6_7/services/ipa/ipa-server 1 admin solution_risk.txt /root/preupgrade Identity Management Server compatibility check Checks Identity Management Server (IPA) configuration compatibility File(s) affected: /etc/ipa/default.conf This machine has Identity Management Server (IPA) configured. Unfortunatelly, IPA does not support in-place upgrade between RHEL 6 and RHEL 7 major versions and needs to be migrated. Please refer to the following Knowledge Base article for detailed instructions how to migrate Identity Management Server: https://access.redhat.com/site/articles/894063 IPA Server CA Verification 1 /root/preupgrade/RHEL6_7/services/ipa/pki-ca 1 admin solution.txt /root/preupgrade IPA Server CA Verification This module verifies the IPA CA configuration compatibility. File(s) affected: /etc/sysconfig/pki/ca/* Identity, Policy and Audit (IPA) installations that use a Certificate Authority (CA) provided by the pki-ca package are not able to be upgraded in-place between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. This module verifies whether there is an IPA CA installed, in which case you need to upgrade the IPA installation manually. For detailed instructions on how to upgrade an IPA installation, please refer to the following Knowledge Base article: https://access.redhat.com/site/articles/894063 NTP NTP configuration 1 /root/preupgrade/RHEL6_7/services/ntp/configuration 1 admin solution.txt /root/preupgrade NTP configuration Save ntp and ntpdate configuration files which are not tracked by rpm. File(s) affected: /etc/ntp.conf /etc/ntp/step-tickers Information on time-sync.target 1 /root/preupgrade/RHEL6_7/services/ntp/timesync 1 admin solution.txt /root/preupgrade Information on time-sync.target Check if ntpdate service is enabled and print information on starting services with clock set OpenLDAP /etc/sysconfig and data compatibility 1 /root/preupgrade/RHEL6_7/services/openldap 1 admin solution.txt /root/preupgrade OpenLDAP /etc/sysconfig and data compatibility Some shell variables and minor syntax have been changed in the OpenLDAP sysconfig file between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. This module detects such changes and advices the user with possible solution. The module also advices the user on how to proceed with a database upgrade. File(s) affected: /etc/sysconfig/ldap OpenSSH OpenSSH sshd_config migration content 1 /root/preupgrade/RHEL6_7/services/openssh/sshd 1 admin solution-sshd.txt /root/preupgrade OpenSSH sshd_config migration content This content has a aim to convert /etc/ssh/sshd_config file from openssh-server package File(s) affected: /etc/ssh/sshd_config OpenSSH sysconfig migration content 1 /root/preupgrade/RHEL6_7/services/openssh/sysconfig 1 admin solution-sysconfig.txt /root/preupgrade OpenSSH sysconfig migration content This content has a aim to convert /etc/sysconfig/sshd file from openssh-server package File(s) affected: /etc/sysconfig/sshd /etc/sysconfig/sshd will not be a shell script in RHEL 7 anymore so all 'export VARIABLE=VALUE' has to be changed to 'VARIABLE=VALUE'. # sed -i 's/^export //' /etc/sysconfig/sshd There is the /root/preupgrade/cleanconf//etc/sysconfig/sshd with the fixed configuration. Quota NLD Configuration for quota_nld service 1 /root/preupgrade/RHEL6_7/services/quota_nld/configuration 1 admin solution.txt /root/preupgrade Configuration for quota_nld service Back configuration for quota_nld service up File(s) affected: /etc/sysconfig/quota_nld quota_nld service configuration is fully compatible. Service is in factory settings. Default configuration will be used on the new system. Disk quota netlink message daemon moved into quota-nld package 1 /root/preupgrade/RHEL6_7/services/quota_nld/new_package 1 admin solution.txt /root/preupgrade Disk quota netlink message daemon moved into quota-nld package Install quota-nld package if the quota_nld service is enabled Quota netlink daemon has been moved from "quota" package into "quota-nld" package. "quota_nld" service is not enabled on the old system. "quota-nld" package will not be installed into the new system. Check rsync 1 /root/preupgrade/RHEL6_7/services/rsync 1 admin solution.txt /root/preupgrade Check rsync There is now problem with rsync socket activation on RHEL-7. SSSD compatibility check 1 /root/preupgrade/RHEL6_7/services/sssd 1 admin solution.txt /root/preupgrade SSSD compatibility check 'Checks sssd configuration compatibility' File(s) affected: /etc/sssd/sssd.conf Storage Detect LUKS devices using Whirlpool for password hash. 1 /root/preupgrade/RHEL6_7/storage/cryptsetup-luks 1 admin solution.txt /root/preupgrade Detect LUKS devices using Whirlpool for password hash. 'Whirlpool hash implementation in libgcrypt of version <= 1.5.3 is broken. This content checks current system for presence of LUKS devices possibly using the bogus hash. In target system libgcrypt library is patched to use correct implementation so after reboot the freshly updated system may remain with LUKS devices imposibble to unlock.' File(s) affected: /etc/crypttab The libgcrypt library in RHEL6 has a flaw in Whirlpool algorithm implementation. The bug is fixed in later version of the library included with RHEL7. LUKS containers created using the libgcrypt present in RHEL6 can't be unlocked using the one present in RHEL7 unless GCRYPT_WHIRLPOOL_BUG environmental variable is set. For optional LUKS containers (not involved in system boot) it's not a critical obstacle and admins can unlock such containers using the enviromnetale variable above. The situation is different when we deal with mandatory volumes: In case the preupgrade script has detected the Whirlpool hash in one of volumes involved in the system boot (any volume listed in configuration file /etc/crypttab), it's considered to be a blocking event for in-place upgrade to continue. We strongly recommend to rehash the LUKS header using the cryptsetup-reencrypt package added to RHEL6.6 and later. Example command for rehashing the LUKS header without changing the master key: # cryptsetup-reencrypt -h sha1 --keep-key <path_to_luks_device> Supply a device identified to be using the Whirlpool hash instead of pattern: <path_to_luks_device>. sha1 is recommended hash function for LUKS headers in RHEL6 and also in RHEL7. We recommend to rehash also all optional volumes. Luks encrypted partition 1 /root/preupgrade/RHEL6_7/storage/luks 1 admin solution.txt /root/preupgrade Luks encrypted partition Checks whether partition is crypted by CRYPTO-LUKS. Partitions like /, /var or /usr crypted by CRYPTO_LUKS are not recommended for in-place upgrade. Clvmd and cmirrord daemon management. 1 /root/preupgrade/RHEL6_7/storage/lvm2-cluster 1 admin solution.txt /root/preupgrade Clvmd and cmirrord daemon management. The clvmd and cmirrord daemon needs to be defined as 'clvm' cluster resource instead of running it as a system service. The only supported and official way of running clvmd and cmirrord daemon in RHEL7 is to have these daemons managed by cluster resource manager directly (e.g. using the pacemaker) instead of running it as a system service defined by an initscript or a systemd unit. Therefore, the lvm2-cluster (where clvmd daemon is packaged) and the cmirror package (where cmirrord daemon is packaged) now requires the resource-agents package which contains a resource named 'clvm'. The clvm resource provides both clvmd and cmirrord daemon management. The cmirrord is an optional part of the clvm resource and it can be enabled by using 'with_cmirrord=1' parameter when setting up the this resource. See the clvm resource description for more information (e.g. by running 'pcs resource describe ocf:heartbeat:clvm') Although there is still a possibility to run the clvmd and cmirrord daemon as a standalone system service without a need for cluster resource manager, such a setup should be used for testing purposes only and it should not be used in production. For this scenario, the new and optional packages called lvm2-cluster-standalone and cmirror-standalone contain respective systemd units to run clvmd (via lvm2-cluster-activation.service) and cmirrord (via lvm2-cmirrord.service) as standalone system services without cluster resource manager involvement. State of LVM2 services. 1 /root/preupgrade/RHEL6_7/storage/lvm2-services 1 admin solution.txt /root/preupgrade State of LVM2 services. Some services are important for proper LVM functionality. This content checks for current state of existing services and makes sure the state is preserved over upgrade. Also, some systemd units should be enabled by default to allow for service's on-demand activation if needed. RHEL7 uses systemd for service management. When upgrading from RHEL6, we need to be sure that certain services (systemd units) are enabled or prepared for on-demand activation. The LVM2 monitoring service inherits the old state, which means that if the 'lvm2-monitor' service was enabled in RHEL6, it will also be enabled in RHEL7 (lvm2-monitor.service) and vice versa. In addition to that these systemd units are enabled to allow for on-demand service activation: dm-event.socket lvm2-lvmetad.socket The dm-event.socket is used for on-demand activation of dm-event.service. This is an essential part of device-mapper monitoring feature (which also covers monitoring of LVM devices). The lvm2-lvmetad.socket is used for on-demand activation of lvm2-lvmetad.service which starts the lvmetad - LVM metadata daemon that is used to cache LVM metadata so LVM commands don't need to scan devices all the time and they can reuse cached metadata. This functionality is used by default in RHEL7. device-mapper-multipath configuration compatibility check 1 /root/preupgrade/RHEL6_7/storage/multipath 1 admin solution.txt /root/preupgrade device-mapper-multipath configuration compatibility check Checks multipath configuration compatibility. Also, removes old udev multipath rules. File(s) affected: /etc/multipath.conf In RHEL7, multipath no longer uses the getuid_callout to determine the wwid of a multipath device. Instead is gets the value from the udev environment, using the attribute defined by the uid_attribute configuration parameter. Multipath will issue warnings if /etc/multipath.conf defines getuid_callout in RHEL7, and will use the built-in value for uid_attribute instead. The way multipath determines if a user defined device configuration should modify a builtin device configuration or create a new device configuration has changed in RHEL7. By default in RHEL6, the user config only modified a builtin one if the vendor, product, and revision strings of the user configuration exactly matched the vendor, product and revision strings in the built-in configuration. However, the vendor, product, and revision strings are interpreted as regular expressions in order to determine which configuration to use with a particular device. In RHEL7 this same regular expression matching is used to determine whether or not a user defined device config should modify a builtin device config. If the user config's vendor, product, and revision strings regex-match a builtin device config's vendor, product and revision regular expressions, then it modifies the existing config. This means that in RHEL6, user device configs sometimes needed to user regular expressions as their vendor, product, and revision strings. In RHEL7, these should be plain strings. On upgrade, "hw_str_match yes" will be added to the defaults section of /etc/multipath.conf to force multipath to use the RHEL6 behavior, if necessary. The default multipath.conf file used on fresh RHEL7 installs enables find_multipaths by default. This will not be set on upgrades from RHEL6. A number of builtin configuration settings have changed in RHEL7. These changes were designed to improve performance in the general case. However, they may not be optimal for every configuration. Users who were using the builtin configurations for their devices should verify that the new defaults still work well for them. Removal of scsi-target-utils 1 /root/preupgrade/RHEL6_7/storage/tgtd 1 admin solution.txt /root/preupgrade Removal of scsi-target-utils The scsi-target-utils packages are no longer available in Red Hat Enterprise Linux 7. File(s) affected: /etc/tgt/targets.conf Red Hat Enterprise Linux 7 now uses the LIO kernel target for the Internet Small Computer System Interface (iSCSI) target capability. Red Hat Enterprise Linux 7 is configured using the targetcli packages. The scsi-target-utils packages are no longer available, and the configuration needs to be modified for Red Hat Enterprise Linux 7. Warnquota contents for migration Configuration for warnquota tool 1 /root/preupgrade/RHEL6_7/storage/warnquota/configuration 1 admin solution.txt /root/preupgrade Configuration for warnquota tool Back configuration for warnquota tool up File(s) affected: /etc/quotagrpadmins /etc/quotatab /etc/warnquota.conf warnquota tool configuration is fully compatible. /etc/quotagrpadmins has not been changed. Default configuration file will be used on the new system. /etc/quotatab has not been changed. Default configuration file will be used on the new system. /etc/warnquota.conf has not been changed. Default configuration file will be used on the new system. Disk quota tool warnquota moved into quota-warnquota package 1 /root/preupgrade/RHEL6_7/storage/warnquota/new_package 1 admin solution.txt /root/preupgrade Disk quota tool warnquota moved into quota-warnquota package Install quota-warnquota if need warnquota tool Quota tool warnquota(8) has been moved from "quota" package into "quota-warnquota" package. If you used warnquota on the old system, please install quota-warnquota package with this command on the new system: # yum --assumeyes install quota-warnquota Please do not forget to check warnquota configutation files (/etc/quotagrpadmins, /etc/quotatab, and /etc/warnquota.conf) before using the tool. Please do not forget to install a cron job to execute the warnquota tool periodically, if you used it on the the old system. System Check for Add-On availability 1 /root/preupgrade/RHEL6_7/system/AddOns 1 admin addons.txt /root/preupgrade Check for Add-On availability Content checks availability of High Availability, ResilientStorage and LoadBalancer Add-Ons. The following Add-Ons were detected on the system. Architecture Support 1 /root/preupgrade/RHEL6_7/system/Architecture 1 admin solution.txt /root/preupgrade Architecture Support Red Hat Enterprise Linux 7 does not support installations on 32-bit architectures, and performing an in-place upgrade is not possible on 32-bit systems. Only 64-bit systems are supported in Red Hat Enterprise Linux 7. If you have a 32-bit system, an in-place upgrade is not supported. However, you can use the output from the Preupgrade Assistant to reach a configuration and package set suitable for migrating to a 64-bit Red Hat Enterprise Linux 7 system. All the necessary information for migrating the system to a 64-bit version is available in the /root/preupgrade/kickstart/ directory. Binary rebuilds 1 /root/preupgrade/RHEL6_7/system/BinariesRebuild 1 admin solution.txt /root/preupgrade Binary rebuilds Check all binaries installed on the assessment system which needs to be rebuilded on the target system This content generates the list of binaries which needs to be rebuilt You can find the list at: kickstart/binaries Debuginfo packages 1 /root/preupgrade/RHEL6_7/system/Debuginfo 1 admin solution.txt /root/preupgrade Debuginfo packages This content checks for debuginfo packages and inform about potential risks for in-place upgrade. Debuginfo packages are required for easier debugging of the application run and crashes. These need to have the same version as the rpm for which they provide the debuginfo information. As the debuginfo packages are located in the different repository than application packages you need to provide the additional repository to the redhat-upgrade-tool if you want to have the debuginfo packages updated. Without updating them these are useless after the upgrade. To make them updated add --addrepo debuginfoupg=<path to the repository with debuginfo> to the redhat-upgrade-tool syntax. After the upgrade, you may need to install additional debuginfo packages brought in by new dependencies. If your policy requires to have all debuginfos installed, you will need to do this manually after the in-place upgrade. Filesystem Hierarchy Standard Read Only FHS directories 1 /root/preupgrade/RHEL6_7/system/FHS/ReadOnlyFHS 1 admin solution.txt /root/preupgrade Read Only FHS directories Check that critical directories of Filesystem Hierarchy Standard are not mounted read-only. Read-only paths in Filesystem Hierarchy Standard might cause in-place-upgrade to fail. Check FHS for /var incompabilities. 1 /root/preupgrade/RHEL6_7/system/FHS/Run 1 admin solution.txt /root/preupgrade Check FHS for /var incompabilities. Since RHEL 7 are some changes in FHS, which could be in conflicts with old system (e.g. movement /var/run -> /run). Since RHEL 7 exists '/run' directory where tmpfs is mounted for runtime data. Original '/var/run' is symlink to this directory and likewise '/var/lock' points to the '/run/lock/' now. '/run' directory is emptied on reboot, so all runtime files must be created on boot again. See RHEL 7 Migration Planning Guidelines. In-place Upgrade Requirements for the /usr/ Directory 1 /root/preupgrade/RHEL6_7/system/FHS/UsrPartition 1 admin solution.txt /root/preupgrade In-place Upgrade Requirements for the /usr/ Directory This module determines if the /usr/ directory is located on a separate partition. Performing an in-place upgrade is not possible if the /usr/ directory is located on a separate partition. In Red Hat Enterprise Linux 6, this was allowed, but in Red Hat Enterprise Linux 7, the /usr/ directory cannot be on a separate partition because of the requirements of the systemd service. HA-Cluster Cluster and High Availability 1 /root/preupgrade/RHEL6_7/system/HA-Cluster/ha-cluster 1 admin hacluster.txt /root/preupgrade Cluster and High Availability Content checks Cluster and High Availability solutions for upgrade. Changes to the entire HA solution, ranging from on-wire network protocols to resource management, core engines, makes it impossible to migrate from RHEL 6 to RHEL 7. Quorum implementation 1 /root/preupgrade/RHEL6_7/system/HA-Cluster/quorum 1 admin quorum.txt /root/preupgrade Quorum implementation Content checks quorum implementation for upgrade. qdiskd has been removed from Red HAt Enterprise Linux 6. The new quorum implementation is provided by votequorum, which is included in the corosync package, and which has been extended to replace qdiskd for most use cases. The extensions (wait_for_all, auto_tie_breaker and last_man_standing) are fully documented in the votequorum.5 man page fix krb5kdc config file 1 /root/preupgrade/RHEL6_7/system/KrbMigration 1 admin solution.txt /root/preupgrade fix krb5kdc config file The content that fixes the /etc/sysconfig/krb5kdc file. The configuration option KRB5REALM was merged with the option KRB5KDC_ARGS in file /etc/sysconfig/krb5kdc in Red Hat Enterprise Linux 7. This content transforms the old configuration file to the new one while keeping the settings intact. No manual user action is necessary upon upgrade. krb5-appl is no longer in RHEL 7. Use openssh. Instead of rcp, ftp use scp, sftp. Instead of telnet, rlogin or rsh use slogin and ssh. The clients and servers support GSSAPI authentication using Kerberos, and the sloging and ssh commands can be passed with -K flag to delegate credential to the remote host. File Systems, Partitions and Mounts Configuration Review 1 /root/preupgrade/RHEL6_7/system/PartitionMounts 1 admin solution.txt /root/preupgrade File Systems, Partitions and Mounts Configuration Review This module describes the new default file system and stores the partitions and mounts configuration. Red Hat Enterprise Linux 7 now uses the XFS file system as the default file system instead of the ext4 file system. If you intend to migrate the system to another machine or create a new file system, you can consider using XFS instead of ext4. Users who use a Kickstart installation can consider modifying the Kickstart configuration to use XFS. Additionally, information about the partitions and mounts configuration has been saved in the /root/preupgrade/kickstart/ directory. This information can be useful to users who choose to perform a system migration or convert their file systems to XFS. Removable media in fstab 1 /root/preupgrade/RHEL6_7/system/RemovableMedia 1 admin solution.txt /root/preupgrade Removable media in fstab Warn about removable media preventing boot If there are any removable media listed in /etc/fstab, it is necessary to add "nofail" flag to each one of them. Red Hat Enterprise Linux 7 will fail to boot if the medium is not present and "nofail" is not specified. It is not possible to check this automatically with 100% confidence. Please check your /etc/fstab. Sonamebumped libs 1 /root/preupgrade/RHEL6_7/system/SonameBump 1 admin solution.txt /root/preupgrade Sonamebumped libs If the dynamic library breaks the API/ABI compatibility, it is supposed to change its soname. This content checks for the soname bumps between RHEL 6 and RHEL 7 in your Red Hat packages. Application developed in C may use dynamic libraries (.so files) to reuse the common functions/symbols in the binary. If the library bumped its soname ( changed major version, API/ABI incompatibility), application that depends on it may not run. Some of the libraries changed the soname version between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. From your RHEL 6 packages, following libraries changed soname: libanonymous.so.2 from cyrus-sasl-lib changed to libanonymous.so.3 libarchive.so.2 from libarchive changed to libarchive.so.13 libbind9.so.80 from bind-libs changed to libbind9.so.90 libcryptsetup.so.1 from cryptsetup-luks-libs changed to libcryptsetup.so.4 libdns.so.81 from bind-libs changed to libdns.so.100 libdrm_nouveau.so.1 from libdrm changed to libdrm_nouveau.so.2 libffi.so.5 from libffi changed to libffi.so.6 libgdbm.so.2 from gdbm changed to libgdbm.so.4 libgmp.so.3 from gmp changed to libgmp.so.10 libgnutls.so.26 from gnutls changed to libgnutls.so.28 libgnutlsxx.so.26 from gnutls changed to libgnutlsxx.so.28 libisc.so.83 from bind-libs changed to libisc.so.95 libisccc.so.80 from bind-libs changed to libisccc.so.90 libisccfg.so.82 from bind-libs changed to libisccfg.so.90 libkdb5.so.6 from krb5-libs changed to libkdb5.so.7 liblogin.so.2 from cyrus-sasl-plain changed to liblogin.so.3 liblwres.so.80 from bind-libs changed to liblwres.so.90 libmpfr.so.1 from mpfr changed to libmpfr.so.4 libmysqlclient.so.16 from mysql-libs changed to libmysqlclient.so.18 libpackagekit-glib2.so.12 from PackageKit-glib changed to libpackagekit-glib2.so.16 libpcre.so.0 from pcre changed to libpcre.so.1 libplain.so.2 from cyrus-sasl-plain changed to libplain.so.3 libproxy.so.0 from libproxy changed to libproxy.so.1 librpm.so.1 from rpm-libs changed to librpm.so.3 librpmbuild.so.1 from rpm-libs changed to librpmbuild.so.3 librpmio.so.1 from rpm-libs changed to librpmio.so.3 libsasl2.so.2 from cyrus-sasl-lib changed to libsasl2.so.3 libsasldb.so.2 from cyrus-sasl-lib changed to libsasldb.so.3 libtasn1.so.3 from libtasn1 changed to libtasn1.so.6 libtiff.so.3 from libtiff changed to libtiff.so.5 libtiffxx.so.3 from libtiff changed to libtiffxx.so.5 libudev.so.0 from libudev changed to libudev.so.1 libverto.so.0 from krb5-libs changed to libverto.so.1 libxtables.so.4 from iptables changed to libxtables.so.10 We checked the requirements in Non-RH signed packages, but for the non rpm-packaged binaries, you should check the compatibility list yourself by using e.g. ldd <binary> command. If some of your application uses the library on the list above, you will need to rebuild such package/application against new library. Red Hat Enterprise Linux applications available on the RHEL 7 will handle these bumps automatically by the update/migration to new Red Hat Enterprise Linux as they were already built against these libraries. SonameKept Reusable Dynamic Libraries 1 /root/preupgrade/RHEL6_7/system/SonameKept 1 admin solution.txt /root/preupgrade SonameKept Reusable Dynamic Libraries This module provides an overview of the dynamic libraries from Red Hat Enterprise Linux 6 that can be reused in Red Hat Enterprise Linux 7, as the dynamic libraries remain compatible with both the application programming interface (API) and the application binary interface (ABI). Applications developed in the C programming language can use dynamic libraries (.so files) to reuse common functions and symbols in the binary. When the library changes its soname in a major version, the binaries normally need to be rebuilt for the new system. Some libraries have not changed their soname between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7 so it could be possible to reuse third party applications which use only these libraries without rebuilding. You can find the list of the unchanged dynamic libraries and their package names in the following file: ./kickstart/NoSonameBumpLibs If it is not clear what libraries the third party binary or RPM uses, it is possible to use the ldd utility for the C binary, or run the "rpm -q --whatrequires SONAME" command for the whole RPM package. No problems are expected to occur if there are only .so files listed in the NoSonameBumpLibs file and unversioned shared libraries. Removed .so libs 1 /root/preupgrade/RHEL6_7/system/SonameRemoval 1 admin solution.txt /root/preupgrade Removed .so libs Dynamic libraries are used provides symbols/functions to binaries. Some of the libraries were removed between RHEL 6 and RHEL 7. This content checks for the .so libraries removal between RHEL 6 and RHEL 7 in your Red Hat packages. Application developed in C may use dynamic libraries (.so files) to reuse the common functions/symbols in the binary. If the library is missing, application will not run. Some of the libraries were removed between RHEL 6 and RHEL 7. From your Red Hat Enterprise Linux 6 packages, following libraries disappeared: libck-connector.so.0 from ConsoleKit-libs libnih-dbus.so.1 from libnih libnih.so.1 from libnih libabrt_web.so.0 from libreport libbtparser.so.2 from btparser libck-connector.so.0 from ConsoleKit-libs libcloog.so.0 from cloog-ppl libcupsdriver.so.1 from cups-libs libdrm_nouveau2.so.2 from libdrm libeggdbus-1.so.0 from eggdbus libevent-1.4.so.2 from libevent libevent_core-1.4.so.2 from libevent libevent_extra-1.4.so.2 from libevent libgnutls-extra.so.26 from gnutls libgpgme-pth.so.11 from gpgme libgssglue.so.1 from libgssglue libhal-storage.so.1 from hal-libs libhal.so.1 from hal-libs libhunspell-1.2.so.0 from hunspell libiw.so.29 from wireless-tools libldif-2.4.so.2 from openldap libmp.so.3 from gmp libmysqlclient_r.so.16 from mysql-libs libnih-dbus.so.1 from libnih libnih.so.1 from libnih libpackagekit-glib.so.12 from PackageKit-glib libpangox-1.0.so.0 from pango libparted-2.1.so.0 from parted libpolkit-backend-1.so.0 from polkit libppl.so.7 from ppl libppl_c.so.2 from ppl libpython2.6.so.1.0 from python-libs librpcsecgss.so.3 from nfs-utils-lib libusbpp-0.1.so.4 from libusb libverto-k5ev.so.0 from krb5-libs _speedups.so from python-jinja2 (required by NonRH signed package(s):beaker-client ) pam_ck_connector.so from ConsoleKit-libs ANSI_X3.110.so from glibc ARMSCII-8.so from glibc ASMO_449.so from glibc B.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) BIG5.so from glibc BIG5HKSCS.so from glibc BRF.so from glibc Base64.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Byte.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) CN.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) CP10007.so from glibc CP1125.so from glibc CP1250.so from glibc CP1251.so from glibc CP1252.so from glibc CP1253.so from glibc CP1254.so from glibc CP1255.so from glibc CP1256.so from glibc CP1257.so from glibc CP1258.so from glibc CP737.so from glibc CP775.so from glibc CP932.so from glibc CSN_369103.so from glibc CWI.so from glibc Call.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Cwd.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) DB_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) DEC-MCS.so from glibc DProf.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Dumper.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) EBCDIC-AT-DE-A.so from glibc EBCDIC-AT-DE.so from glibc EBCDIC-CA-FR.so from glibc EBCDIC-DK-NO-A.so from glibc EBCDIC-DK-NO.so from glibc EBCDIC-ES-A.so from glibc EBCDIC-ES-S.so from glibc EBCDIC-ES.so from glibc EBCDIC-FI-SE-A.so from glibc EBCDIC-FI-SE.so from glibc EBCDIC-FR.so from glibc EBCDIC-IS-FRISS.so from glibc EBCDIC-IT.so from glibc EBCDIC-PT.so from glibc EBCDIC-UK.so from glibc EBCDIC-US.so from glibc EBCDIC.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) ECMA-CYRILLIC.so from glibc EUC-CN.so from glibc EUC-JISX0213.so from glibc EUC-JP-MS.so from glibc EUC-JP.so from glibc EUC-KR.so from glibc EUC-TW.so from glibc Encode.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Expat.so from perl-XML-Parser (required by NonRH signed package(s):tps-devel ) FastCalc.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Fcntl.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) FieldHash.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) GB18030.so from glibc GBBIG5.so from glibc GBGBK.so from glibc GBK.so from glibc GDBM_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) GEORGIAN-ACADEMY.so from glibc GEORGIAN-PS.so from glibc GOST_19768-74.so from glibc GREEK-CCITT.so from glibc GREEK7-OLD.so from glibc GREEK7.so from glibc Glob.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) HP-GREEK8.so from glibc HP-ROMAN8.so from glibc HP-ROMAN9.so from glibc HP-THAI8.so from glibc HP-TURKISH8.so from glibc Hostname.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) IBM037.so from glibc IBM038.so from glibc IBM1004.so from glibc IBM1008.so from glibc IBM1008_420.so from glibc IBM1025.so from glibc IBM1026.so from glibc IBM1046.so from glibc IBM1047.so from glibc IBM1097.so from glibc IBM1112.so from glibc IBM1122.so from glibc IBM1123.so from glibc IBM1124.so from glibc IBM1129.so from glibc IBM1130.so from glibc IBM1132.so from glibc IBM1133.so from glibc IBM1137.so from glibc IBM1140.so from glibc IBM1141.so from glibc IBM1142.so from glibc IBM1143.so from glibc IBM1144.so from glibc IBM1145.so from glibc IBM1146.so from glibc IBM1147.so from glibc IBM1148.so from glibc IBM1149.so from glibc IBM1153.so from glibc IBM1154.so from glibc IBM1155.so from glibc IBM1156.so from glibc IBM1157.so from glibc IBM1158.so from glibc IBM1160.so from glibc IBM1161.so from glibc IBM1162.so from glibc IBM1163.so from glibc IBM1164.so from glibc IBM1166.so from glibc IBM1167.so from glibc IBM12712.so from glibc IBM1364.so from glibc IBM1371.so from glibc IBM1388.so from glibc IBM1390.so from glibc IBM1399.so from glibc IBM16804.so from glibc IBM256.so from glibc IBM273.so from glibc IBM274.so from glibc IBM275.so from glibc IBM277.so from glibc IBM278.so from glibc IBM280.so from glibc IBM281.so from glibc IBM284.so from glibc IBM285.so from glibc IBM290.so from glibc IBM297.so from glibc IBM420.so from glibc IBM423.so from glibc IBM424.so from glibc IBM437.so from glibc IBM4517.so from glibc IBM4899.so from glibc IBM4909.so from glibc IBM4971.so from glibc IBM500.so from glibc IBM5347.so from glibc IBM803.so from glibc IBM850.so from glibc IBM851.so from glibc IBM852.so from glibc IBM855.so from glibc IBM856.so from glibc IBM857.so from glibc IBM860.so from glibc IBM861.so from glibc IBM862.so from glibc IBM863.so from glibc IBM864.so from glibc IBM865.so from glibc IBM866.so from glibc IBM866NAV.so from glibc IBM868.so from glibc IBM869.so from glibc IBM870.so from glibc IBM871.so from glibc IBM874.so from glibc IBM875.so from glibc IBM880.so from glibc IBM891.so from glibc IBM901.so from glibc IBM902.so from glibc IBM903.so from glibc IBM9030.so from glibc IBM904.so from glibc IBM905.so from glibc IBM9066.so from glibc IBM918.so from glibc IBM921.so from glibc IBM922.so from glibc IBM930.so from glibc IBM932.so from glibc IBM933.so from glibc IBM935.so from glibc IBM937.so from glibc IBM939.so from glibc IBM943.so from glibc IBM9448.so from glibc IEC_P27-1.so from glibc INIS-8.so from glibc INIS-CYRILLIC.so from glibc INIS.so from glibc IO.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) ISIRI-3342.so from glibc ISO-2022-CN-EXT.so from glibc ISO-2022-CN.so from glibc ISO-2022-JP-3.so from glibc ISO-2022-JP.so from glibc ISO-2022-KR.so from glibc ISO-IR-197.so from glibc ISO-IR-209.so from glibc ISO646.so from glibc ISO8859-1.so from glibc ISO8859-10.so from glibc ISO8859-11.so from glibc ISO8859-13.so from glibc ISO8859-14.so from glibc ISO8859-15.so from glibc ISO8859-16.so from glibc ISO8859-2.so from glibc ISO8859-3.so from glibc ISO8859-4.so from glibc ISO8859-5.so from glibc ISO8859-6.so from glibc ISO8859-7.so from glibc ISO8859-8.so from glibc ISO8859-9.so from glibc ISO8859-9E.so from glibc ISO_10367-BOX.so from glibc ISO_11548-1.so from glibc ISO_2033.so from glibc ISO_5427-EXT.so from glibc ISO_5427.so from glibc ISO_5428.so from glibc ISO_6937-2.so from glibc ISO_6937.so from glibc JOHAB.so from glibc JP.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) KOI-8.so from glibc KOI8-R.so from glibc KOI8-RU.so from glibc KOI8-T.so from glibc KOI8-U.so from glibc KR.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) LATIN-GREEK-1.so from glibc LATIN-GREEK.so from glibc Langinfo.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) MAC-CENTRALEUROPE.so from glibc MAC-IS.so from glibc MAC-SAMI.so from glibc MAC-UK.so from glibc MACINTOSH.so from glibc MD5.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) MIK.so from glibc NATS-DANO.so from glibc NATS-SEFI.so from glibc NDBM_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Normalize.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Opcode.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) POSIX.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) PPPort.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) PT154.so from glibc Peek.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) RK1048.so from glibc SAMI-WS2.so from glibc SDBM_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) SHIFT_JISX0213.so from glibc SJIS.so from glibc SSL.so from pyOpenSSL Socket.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Soundex.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Storable.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Symbol.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) SysV.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Syslog.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) T.61.so from glibc TCVN5712-1.so from glibc TIS-620.so from glibc TSCII.so from glibc TW.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) UHC.so from glibc UNICODE.so from glibc UTF-16.so from glibc UTF-32.so from glibc UTF-7.so from glibc Unicode.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Util.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) VISCII.so from glibc Zlib.so from perl-Compress-Raw-Zlib __m2crypto.so from m2crypto _bisectmodule.so from python-libs _bsddb.so from python-libs _bytesio.so from python-libs _certificate.so from python-rhsm (required by NonRH signed package(s):redhat-upgrade-tool ) _codecs_cn.so from python-libs _codecs_hk.so from python-libs _codecs_iso2022.so from python-libs _codecs_jp.so from python-libs _codecs_kr.so from python-libs _codecs_tw.so from python-libs _collectionsmodule.so from python-libs _cryptmodule.so from python-libs _csv.so from python-libs _ctypes.so from python-libs _curses.so from python-libs _curses_panel.so from python-libs _dbus_bindings.so from dbus-python _dbus_glib_bindings.so from dbus-python _elementtree.so from python-libs _fileio.so from python-libs _functoolsmodule.so from python-libs _gio.so from pygobject2 _glib.so from pygobject2 _gobject.so from pygobject2 _gpgme.so from pygpgme _hashlib.so from python-libs _heapq.so from python-libs _hotshot.so from python-libs _json.so from python-libs _localemodule.so from python-libs _lsprof.so from python-libs _multibytecodecmodule.so from python-libs _multiprocessing.so from python-libs _pyabrt.so from abrt-python _pyreport.so from libreport-python _randommodule.so from python-libs _reportclient.so from libreport-python _rpmbmodule.so from rpm-python (required by NonRH signed package(s):preupgrade-assistant preupgrade-assistant-contents ) _rpmmodule.so from rpm-python (required by NonRH signed package(s):preupgrade-assistant preupgrade-assistant-contents ) _snackmodule.so from newt-python _socketmodule.so from python-libs _sqlite3.so from python-libs _sqlitecache.so from yum-metadata-parser _ssl.so from python-libs _struct.so from python-libs _weakref.so from python-libs acutilmodule.so from authconfig apr_ldap-1.so from apr-util-ldap arraymodule.so from python-libs attrs.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) audioop.so from python-libs binascii.so from python-libs bz2.so from python-libs cPickle.so from python-libs cStringIO.so from python-libs cmathmodule.so from python-libs config_direct.so from libproxy config_envvar.so from libproxy config_file.so from libproxy config_wpad.so from libproxy context-filter.so from aspell (required by NonRH signed package(s):qa-tools ) crypto.so from pyOpenSSL datetime.so from python-libs dbm.so from python-libs details.so from plymouth dlmodule.so from python-libs dmidecodemod.so from python-dmidecode drm.so from plymouth email-filter.so from aspell (required by NonRH signed package(s):qa-tools ) encoding.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) ethtool.so from python-ethtool etree.so from python-lxml (required by NonRH signed package(s):beaker-client ) fcntlmodule.so from python-libs frame-buffer.so from plymouth future_builtins.so from python-libs gdbmmodule.so from python-libs grpmodule.so from python-libs gudev.so from python-gudev ignore_domain.so from libproxy ignore_ip.so from libproxy imageop.so from python-libs imfile.so from rsyslog imklog.so from rsyslog immark.so from rsyslog impstats.so from rsyslog imptcp.so from rsyslog imtcp.so from rsyslog imudp.so from rsyslog imuxsock.so from rsyslog itertoolsmodule.so from python-libs iwlib.so from python-iwlib krbVmodule.so from python-krbV (required by NonRH signed package(s):beaker-redhat beaker-client ) libbfd-2.20.51.0.2-5.43.el6.so from binutils libcapi.so from openssl libebl_aarch64-0.161.so from elfutils-libs libebl_alpha-0.161.so from elfutils-libs libebl_arm-0.161.so from elfutils-libs libebl_i386-0.161.so from elfutils-libs libebl_ia64-0.161.so from elfutils-libs libebl_ppc-0.161.so from elfutils-libs libebl_ppc64-0.161.so from elfutils-libs libebl_s390-0.161.so from elfutils-libs libebl_sh-0.161.so from elfutils-libs libebl_sparc-0.161.so from elfutils-libs libebl_tilegx-0.161.so from elfutils-libs libebl_x86_64-0.161.so from elfutils-libs libexpect5.44.1.15.so from expect libfakeroot-0.so from fakeroot-libs libip6t_SET.so from iptables-ipv6 libip6t_set.so from iptables-ipv6 libipt_SET.so from iptables libipt_addrtype.so from iptables libipt_ecn.so from iptables libipt_set.so from iptables libnullbackend.so from polkit libopcodes-2.20.51.0.2-5.43.el6.so from binutils libpackagekit-action-lookup.so from PackageKit libpadlock.so from openssl libpkexec-action-lookup.so from polkit libproc-3.2.8.so from procps (required by NonRH signed package(s):qa-tools ) libstdbuf.so from coreutils-libs linuxaudiodev.so from python-libs lmnet.so from rsyslog lmnetstrms.so from rsyslog lmnsd_ptcp.so from rsyslog lmregexp.so from rsyslog lmstrmsrv.so from rsyslog lmtcpclt.so from rsyslog lmtcpsrv.so from rsyslog lmzlibw.so from rsyslog m_xt.so from iproute mathmodule.so from python-libs mmapmodule.so from python-libs mod_actions.so from httpd mod_alias.so from httpd mod_asis.so from httpd mod_auth_basic.so from httpd mod_auth_digest.so from httpd mod_authn_alias.so from httpd mod_authn_anon.so from httpd mod_authn_dbd.so from httpd mod_authn_dbm.so from httpd mod_authn_default.so from httpd mod_authn_file.so from httpd mod_authnz_ldap.so from httpd mod_authz_dbm.so from httpd mod_authz_default.so from httpd mod_authz_groupfile.so from httpd mod_authz_host.so from httpd mod_authz_owner.so from httpd mod_authz_user.so from httpd mod_autoindex.so from httpd mod_cache.so from httpd mod_cern_meta.so from httpd mod_cgi.so from httpd mod_cgid.so from httpd mod_dav.so from httpd mod_dav_fs.so from httpd mod_dbd.so from httpd mod_deflate.so from httpd mod_dir.so from httpd mod_disk_cache.so from httpd mod_dumpio.so from httpd mod_env.so from httpd mod_expires.so from httpd mod_ext_filter.so from httpd mod_filter.so from httpd mod_headers.so from httpd mod_ident.so from httpd mod_include.so from httpd mod_info.so from httpd mod_ldap.so from httpd mod_log_config.so from httpd mod_log_forensic.so from httpd mod_logio.so from httpd mod_mime.so from httpd mod_mime_magic.so from httpd mod_negotiation.so from httpd mod_proxy.so from httpd mod_proxy_ajp.so from httpd mod_proxy_balancer.so from httpd mod_proxy_connect.so from httpd mod_proxy_ftp.so from httpd mod_proxy_http.so from httpd mod_proxy_scgi.so from httpd mod_reqtimeout.so from httpd mod_rewrite.so from httpd mod_setenvif.so from httpd mod_speling.so from httpd mod_status.so from httpd mod_substitute.so from httpd mod_suexec.so from httpd mod_unique_id.so from httpd mod_userdir.so from httpd mod_usertrack.so from httpd mod_version.so from httpd mod_vhost_alias.so from httpd mod_wsgi.so from mod_wsgi (required by NonRH signed package(s):preupgrade-assistant-ui ) mro.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) network_networkmanager.so from libproxy nismodule.so from python-libs nroff-filter.so from aspell (required by NonRH signed package(s):qa-tools ) nsswitch.so from nfs-utils-lib objectify.so from python-lxml (required by NonRH signed package(s):beaker-client ) ommail.so from rsyslog omprog.so from rsyslog omruleset.so from rsyslog omtesting.so from rsyslog omuxsock.so from rsyslog operator.so from python-libs ossaudiodev.so from python-libs p11-kit-trust.so from p11-kit-trust pam_access.so from pam pam_cap.so from libcap pam_chroot.so from pam pam_ck_connector.so from ConsoleKit-libs pam_console.so from pam pam_cracklib.so from pam pam_debug.so from pam pam_deny.so from pam pam_echo.so from pam pam_env.so from pam pam_exec.so from pam pam_faildelay.so from pam pam_faillock.so from pam pam_filter.so from pam pam_fprintd.so from fprintd-pam pam_ftp.so from pam pam_group.so from pam pam_issue.so from pam pam_keyinit.so from pam pam_lastlog.so from pam pam_limits.so from pam pam_listfile.so from pam pam_localuser.so from pam pam_loginuid.so from pam pam_mail.so from pam pam_mkhomedir.so from pam pam_motd.so from pam pam_namespace.so from pam pam_nologin.so from pam pam_passwdqc.so from pam_passwdqc pam_permit.so from pam pam_postgresok.so from pam pam_pwhistory.so from pam pam_rhosts.so from pam pam_rootok.so from pam pam_securetty.so from pam pam_selinux.so from pam pam_sepermit.so from pam pam_shells.so from pam pam_stress.so from pam pam_succeed_if.so from pam pam_tally2.so from pam pam_time.so from pam pam_timestamp.so from pam pam_tty_audit.so from pam pam_umask.so from pam pam_unix.so from pam pam_userdb.so from pam pam_warn.so from pam pam_wheel.so from pam pam_xauth.so from pam pango-arabic-fc.so from pango pango-arabic-lang.so from pango pango-basic-x.so from pango pango-hangul-fc.so from pango pango-hebrew-fc.so from pango pango-indic-fc.so from pango pango-indic-lang.so from pango pango-khmer-fc.so from pango pango-syriac-fc.so from pango pango-thai-fc.so from pango pango-thai-lang.so from pango pango-tibetan-fc.so from pango parsermodule.so from python-libs pmlastmsg.so from rsyslog pycurl.so from python-pycurl pyexpat.so from python-libs rand.so from pyOpenSSL re.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) readline.so from python-libs resource.so from python-libs scalar.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) selectmodule.so from python-libs sgml-filter.so from aspell (required by NonRH signed package(s):qa-tools ) shared.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) smixer-ac97.so from alsa-lib smixer-hda.so from alsa-lib smixer-sbase.so from alsa-lib spwdmodule.so from python-libs staplog.so from systemtap-runtime static.so from nfs-utils-lib stropmodule.so from python-libs syslog.so from python-libs termios.so from python-libs tex-filter.so from aspell (required by NonRH signed package(s):qa-tools ) texinfo-filter.so from aspell (required by NonRH signed package(s):qa-tools ) text.so from plymouth threads.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) timemodule.so from python-libs timingmodule.so from python-libs umich_ldap.so from nfs-utils-lib unicodedata.so from python-libs unix.so from pygobject2 via.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) wpad_dns.so from libproxy wpad_dnsdevolution.so from libproxy xxsubtype.so from python-libs zlibmodule.so from python-libs We checked the requirements in Non-RH signed packages, but for the non rpm-packaged binaries, you should check the compatibility list yourself by using e.g. ldd <binary> command. If some of your application uses the library on the list above, you may need to get the .so library from different place or search for an alternative. Check the system version 1 /root/preupgrade/RHEL6_7/system/SystemVersion 1 admin solution.txt /root/preupgrade Check the system version Check if the system is last released version CA certificate bundles modified 1 /root/preupgrade/RHEL6_7/system/ca-certificates 1 admin solution.txt /root/preupgrade CA certificate bundles modified Later versions of RHEL include a shared store for certificate authorities. Additional trusted certificate authorities must be placed in the new location rather that modifying the distributed certificate authority bundles. The Preupgrade assistant cannot automatically identify how certificate bundles have been modified on this system. RHEL 7.0 and later include a shared store for certificate authorities. You can find out more information about this shared store by reading the following manual page on a RHEL 7.x system: $ man update-ca-trust In previous versions of RHEL modifying the distributed certificate bundles (such as /etc/pki/tls/certs/ca-bundle.trust.crt) was the defacto way of adding an additional trusted certificate authority to the system. These additional trusted certificate authorities must be ported forward to the RHEL 7.0 system manually. You can place them as certificate (PEM or DER) files in the following directory: /etc/pki/ca-trust/source/anchors And then run the following command # update-ca-trust Please read the update-ca-trust manual page for more information. Developer Tool Set packages 1 /root/preupgrade/RHEL6_7/system/dts 1 admin dts.txt /root/preupgrade Developer Tool Set packages Content checks whether Red Hat Developer Tool Set packages are installed. For upgrade from RHEL 6 to RHEL 7 perform following steps: 1) Uninstall all Red Hat Developer Toolset packages 2) Upgrade system 3) Update Red Hat Developer Toolset repo 4) Install your Developer Toolset packages again Check for GRUB splash.xpm.gz file 1 /root/preupgrade/RHEL6_7/system/grub 1 admin grub.txt /root/preupgrade Check for GRUB splash.xpm.gz file Content checks whether splash.xpm.gz file exists and backups them Grub package is used as loader of linux system. Preupgrade assistant will backup file /boot/grub/splash.xpm.gz and restore restore them after inplace upgrade to /boot/grub directory. Modification of boot parameters is not possible without that file. Workaround for crashing grubby. 1 /root/preupgrade/RHEL6_7/system/grubby 1 admin solution.txt /root/preupgrade Workaround for crashing grubby. Workaround for crashing grubby. Fill initrd in /boot/grub/grub.conf by a postupgrade script. This content works around crashing grubby. It modifies /boot/grub/grub.conf by adding initrd. Obsoleted HAL (Hardware Abstraction Layer) 1 /root/preupgrade/RHEL6_7/system/hal 1 admin solution.txt /root/preupgrade Obsoleted HAL (Hardware Abstraction Layer) Check for packages dependent on hal. HAL (Hardware Abstraction Layer) is obsoleted, but not provided, by systemd. It is neccessary to migrate applications dependent on HAL to udev/systemd. Hyper-V 1 /root/preupgrade/RHEL6_7/system/hyperv 1 admin solution.txt /root/preupgrade Hyper-V Check if this system runs on Hyper-V. In-place upgrade of Red Hat Enterprise Linux 7 as a guest on Hyper-V is not currently supported. Initscripts contents for migration Content for enabling and disabling services based on RHEL 6 system 1 /root/preupgrade/RHEL6_7/system/initscripts/control 1 admin solution.txt /root/preupgrade Content for enabling and disabling services based on RHEL 6 system The content checks what services are enabled or disabled on assessment system and if the services will be enabled or disabled on RHEL 7 system. The content detects some services who are disabled by default on Red Hat Enterprise Linux 7 system. Check for ethernet interface naming 1 /root/preupgrade/RHEL6_7/system/initscripts/ifcfg 1 admin solution.txt /root/preupgrade Check for ethernet interface naming The content checks if network interface names set through /etc/sysconfig/network-scripts/ifcfg-* files are compatible with device naming in Red Hat Enterprise Linux 7. Red Hat Enterprise Linux 7 still offers possibility to specifying names for network interface by setting DEVICE and HWADDR options in /etc/sysconfig/network-scripts/ifcfg-* configuration files. Unfortunally udev does not support swapping interface names anymore. In the case that you set ethX names to multiple network card and kernel discovers them in different order, udev rule 60-net.rules will most likely fail. It is highly recommended to rename such interfaces or remove DEVICE line from ifcfg configuration files. Red Hat Enterprise Linux 7 also introduces predictable network interface device names: http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/ User modification in /etc/rc.local and /etc/rc.d/rc.local 1 /root/preupgrade/RHEL6_7/system/initscripts/rc-local 1 admin rclocal.txt /root/preupgrade User modification in /etc/rc.local and /etc/rc.d/rc.local The content checks whether user modifies files /etc/rc.local and /etc/rc.d/rc.local It is highly advisable to create own systemd services or udev rules to run scripts during boot instead of using this file. In constrast to previous versions due to parallel execution during boot this script will NOT be run after all other services. Please note that you must run 'chmod +x /etc/rc.d/rc.local' to ensure that this script will be executed during boot. Kernel-kdump package on s390x architecture 1 /root/preupgrade/RHEL6_7/system/kernel-kdump 1 admin solution.txt /root/preupgrade Kernel-kdump package on s390x architecture Content checks whether kernel-kdump is installed on s390x architecture The content checks whether package kernel-kdump has been installed on s390x architecture. If so then check /etc/zipl.conf file for presence of the kernel-kdump. During preupgrade kernel-kdump is removed and /etc/zipl.conf file is updated appropriately. cgroups configuration compatibility check 1 /root/preupgrade/RHEL6_7/system/libcgroup 1 admin solution.txt /root/preupgrade cgroups configuration compatibility check Checks libcgroup configuration files File(s) affected: /etc/cgconfig.conf /etc/cgrules.conf /etc/cgconfig.d In previous versions of Red Hat Enterprise Linux, system administrators built custom cgroup hierarchies with use of the cgconfig command from the libcgroup package. This package is now deprecated. There is only special situation, in which libgroups should be used. Red Hat Enterprise Linux 7 moves the resource management settings from the process level to the application level by binding the cgroup hierarchy with the systemd unit hierarchy. Therefore, you can manage the cgroup tree with systemctl commands. For more details see Red Hat Enterprise Linux 7 Resource Management Guide, Chapter 2 (Using Control Groups): https://documentation-devel.engineering.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Resource_Management_Guide/ch-Using_Control_Groups.html Chapter 3 (Using libcgroup Tools) https://documentation-devel.engineering.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Resource_Management_Guide/ch-Using_libcgroup_Tools.html Plugable authentication modules (PAM) 1 /root/preupgrade/RHEL6_7/system/pam 1 admin pam.txt /root/preupgrade Plugable authentication modules (PAM) Content checks for no-longer supported pluggable authentication modules Pluggable authentication modules are the core of user authentication in any modern linux distribution. Modules pam_passwdqc and pam_ecryptfs were removed between RHEL 6 and RHEL 7, thus making some PAM configuration files no longer valid. Preupgrade assistant will comment out these modules in your PAM configuration files after the in-place upgrade automatically, but you should review and regain the authentication functionality other way, if these modules were required for your authentication policy. Foreign Perl modules 1 /root/preupgrade/RHEL6_7/system/perl 1 admin solution.txt /root/preupgrade Foreign Perl modules Find Perl modules which need to be checked for proper functionality with newer Perl version on the Red Hat Enterprise Linux 7 system because they are not distributed by Red Hat Perl was updated from version 5.10 to version 5.16. Please read Perl section in the Red Hat Enterprise Linux 7 Developer Guide for more details. Following Perl module files located in system Perl paths are either not handled by any package or not signed by Red Hat: PHP modules 1 /root/preupgrade/RHEL6_7/system/php 1 admin solution.txt /root/preupgrade PHP modules Find PHP modules which need to be checked for proper functionality with newer PHP version on the Red Hat Enterprise Linux 7 system because they are not distributed by Red Hat PolicyKit (alias polkit) config files 1 /root/preupgrade/RHEL6_7/system/polkit 1 admin solution.txt /root/preupgrade PolicyKit (alias polkit) config files PolicyKit has important changes of config files. Check modyfied and owns config files. PolicyKit (alias polkit) doesn't use *.conf *.pkla file. Everything is inside *.rules files instead, which contains rules written in javascript (See more in Red Hat Enterprise Linux 7 Desktop Migration and Administration Guide, chapter 4). Python 2.7.5 1 /root/preupgrade/RHEL6_7/system/python 1 admin python.txt /root/preupgrade Python 2.7.5 This module provides you with a list of packages that need to be rebuilt for version 2.7.5 of the Python programming language that is shipped with Red Hat Enterprise Linux 7. This solution text contains a list of packages that need to be rebuilt for Python 2.7.5, which is shipped with Red Hat Enterprise Linux 7. Red Hat Enterprise Linux 7 contains Python version 2.7.5. For information about the differences from older versions and for further details, see https://access.redhat.com/site/articles/676453. The files and directories listed below are not owned by any RPM package or are owned by an RPM package that is not signed by Red Hat. These packages need to be rebuilt and reinstalled in order to work with Python 2.7.5. You can find more details at https://access.redhat.com/site/articles/676453. Save repositories for kickstart 1 /root/preupgrade/RHEL6_7/system/repositories 1 admin solution.txt /root/preupgrade Save repositories for kickstart Content checks enabled repositories. Name and baseurl are stored to file available-repos in kickstart directory. The content stores enabled repositories for kickstart issues in file ./kickstart/available-repos During kickstart generation these repositories are added to kickstart script. Check system requirements 1 /root/preupgrade/RHEL6_7/system/requirements 1 admin solution.txt /root/preupgrade Check system requirements Check if system comply minimum requirements Minimum required diskspace is: 10GB ( 10737418240 B ) Get diskspace /usr: (only for migration process) Estimated needed free space: 1827453 kB Estimated safe free space: 2101563 kB Available free space: 2911128 kB /var: (only for migration process) Estimated needed free space: 1827453 kB Estimated safe free space: 2101563 kB Available free space: 2911128 kB Ruby 2.0.0 1 /root/preupgrade/RHEL6_7/system/ruby 1 admin ruby.txt /root/preupgrade Ruby 2.0.0 This module provides you with a list of packages that need to be rebuilt for version 2.0.0 of the Ruby programming language, which is shipped with Red Hat Enterprise Linux 7. Red Hat Enterprise Linux 7 contains Ruby version 2.0.0. The system paths for libraries and gems have changed from Red Hat Enterprise Linux 6. The files and directories listed below are not owned by any RPM package or are owned by an RPM package that is not signed by Red Hat. These packages need to be rebuilt and reinstalled in order to work with Ruby 2.0.0. For information on how to migrate Ruby from Red Hat Enterprise Linux 6 to Red Hat Enterprise Linux 7, please refer to the following Knowledge Base article: https://access.redhat.com/site/articles/790123 SCL collections 1 /root/preupgrade/RHEL6_7/system/scl-collection 1 admin scl.txt /root/preupgrade SCL collections Content checks whether RHSCL are installed For upgrade from RHEL 6 to RHEL 7 perform following steps: 1) Uninstall all Red Hat Software Collections packages 2) Upgrade system 3) Update Red Hat Software Collections repo 4) Install your collections again Red Hat Network Classic Unsupported 1 /root/preupgrade/RHEL6_7/system/subscription 1 admin subscription.txt /root/preupgrade Red Hat Network Classic Unsupported This module determines if this system is registered with the Red Hat Network Classic. Red Hat Network Classic is not supported in Red Hat Enterprise Linux 7. If your system is registered with Red Hat Network Classic, you will need to migrate to the certificate-based Red Hat Network. You can find instructions on how to migrate from Red Hat Network Classic to the certificate-based Red Hat Network using Red Hat Subscription Manager in the Knowledge Base article available at https://access.redhat.com/site/solutions/129723. Red Hat Subscription Manager 1 /root/preupgrade/RHEL6_7/system/subscription-manager 1 admin solution.txt /root/preupgrade Red Hat Subscription Manager This module adds new option to the configuration file, if it is not there already. If you see this, the check script probably failed to install the post-upgrade script. System kickstart 1 /root/preupgrade/RHEL6_7/system/system-kickstart 1 admin solution.txt /root/preupgrade System kickstart Copy system kickstart from /root/ to directory with results This content tries to copy kickstart generated by anaconda after system installation. Tuned profiles 1 /root/preupgrade/RHEL6_7/system/tuned 1 admin solution.txt /root/preupgrade Tuned profiles Content checks tuned custom profiles on the system and store them to postupgrade directory. The content stores tuned custom profiles located at /etc/tune-profiles to POSTUPGRADE_DIR. After an upgrade to RHEL 7 the profile can be migrated manually with the help of commands tuned-man and tuned-profiles to directory /etc/tuned. There is also a web page which describes tuned http://docs.fedoraproject.org/en-US/Fedora/20/html/Power_Management_Guide/tuned.html. UEFI bootloader 1 /root/preupgrade/RHEL6_7/system/uefi 1 admin solution.txt /root/preupgrade UEFI bootloader It is necessary to migrate UEFI systems to grub2-efi This system does not use EFI. Preupgrade Assistant will not replace your current bootloader automatically, it is too dangerous. If you wish to use GRUB2, do it manually after the upgrade using grub2-install and grub2-mkconfig. YABOOT bootloader 1 /root/preupgrade/RHEL6_7/system/yaboot 1 admin solution.txt /root/preupgrade YABOOT bootloader It is necessary to migrate YABOOT to grub2 The content is valid only on PPC64 architecture. The content checks if yaboot is installed on PPC64 machine. Administrator has to create a grub2.conf to /root/preupgrade/preupgrade-scripts directory otherwise upgrade will be blocked. grub2.conf should contains rows like ### BEGIN /etc/grub.d which are checked by preupgrade script. YUM 1 /root/preupgrade/RHEL6_7/system/yum 1 admin yum.txt /root/preupgrade YUM Content checks YUM configuration file In RHEL 7 functionality of yum-plugin-security is a part of yum core. After the upgrade it will be impossible to undo/redo/rollback to pre-upgrade yum transactions. Please run 'yum history new' after the upgrade to start a new history file. The way yum groups work has changed in RHEL 7. By default yum treats groups as objects now. Please refer to the documentation for more information. User Management Check for usage of dangerous ranges of UID and GIDs 1 /root/preupgrade/RHEL6_7/usrmgmt/DangerousRanges 1 admin solution.txt /root/preupgrade Check for usage of dangerous ranges of UID and GIDs This module checks for IDs in the 0-199 range used without reservations. This module also checks for IDs which need to be moved from the 501-999 range prior to migration. Incorrect usage of reserved UID/GIDs 1 /root/preupgrade/RHEL6_7/usrmgmt/ReservedIDs 1 admin solution.txt /root/preupgrade Incorrect usage of reserved UID/GIDs Reserved user and group IDs by setup package changed between the RHEL 6 and RHEL 7. This may in some cases cause the unfunctionality of your system after the migration. This check should mitigate the risks. Packages may create system accounts with static ids based on the reservation in /usr/share/doc/setup-*/uidgid file. If you have some violations against the uidgid file reservation, applications might not work properly or it may cause some unexpected behavior. In your case, no important divergence from the reservations was found. Even the smaller findings - like different login shells and application home directories - may be worth to check - you can find these in warnings. Flaws in reserved ids were not found on your system, so this check passed even the warnings may exist. Check libuser.conf 1 /root/preupgrade/RHEL6_7/usrmgmt/libuser 1 admin solution.txt /root/preupgrade Check libuser.conf Check for rejected configuration in /etc/libuser.conf about combination ldap module with others, due to ambiguity in password handling. NIS ypbind config files back-up 1 /root/preupgrade/RHEL6_7/usrmgmt/ypbind 1 admin solution.txt /root/preupgrade NIS ypbind config files back-up Saving NIS ypbind config files. File(s) affected: /etc/yp.conf /etc/sysconfig/ypbind ypserv NIS Makefile back-up 1 /root/preupgrade/RHEL6_7/usrmgmt/ypserv/makefile_config 1 admin solution.txt /root/preupgrade NIS Makefile back-up Content for saving NIS Makefile for generationg maps. File(s) affected: /var/yp/Makefile NIS server maps check 1 /root/preupgrade/RHEL6_7/usrmgmt/ypserv/maps_dbm 1 admin solution.txt /root/preupgrade NIS server maps check This content only warns user that maps need to be re-generated because a different back-end format is used in RHEL 7 for caching maps. NIS server MAXUID and MAXGID limits check 1 /root/preupgrade/RHEL6_7/usrmgmt/ypserv/max_uid_gid 1 admin solution.txt /root/preupgrade NIS server MAXUID and MAXGID limits check Check if some users managed by NIS ypserv use UID/GID between 500 and 1000, which might cause issues after upgrade NIS server config file back-up 1 /root/preupgrade/RHEL6_7/usrmgmt/ypserv/service_configs 1 admin solution.txt /root/preupgrade NIS server config file back-up Content for saving NIS ypserv and yppasswdd config files. File(s) affected: /etc/ypserv.conf /etc/sysconfig/yppasswdd OSCAP Scan Result root qeos-3.lab.eng.rdu2.redhat.com 127.0.0.1 172.16.36.3 10.8.52.164 0:0:0:0:0:0:0:1 fe80:0:0:0:f816:3eff:feac:8ef4 OpenSCAP 1.0.10 00:00:00:00:00:00 FA:16:3E:AC:8E:F4 FA:16:3E:AC:8E:F4 00:00:00:00:00:00 FA:16:3E:AC:8E:F4 needs_inspection INPLACERISK: SLIGHT: We detected some files where modifications are not tracked in the rpms. You may need to check their functionality after successful upgrade. needs_inspection INPLACERISK: SLIGHT: We detected some files untracked by rpms. Some of these may need manual check/migration after redhat-upgrade-tool and/or can cause conflicts or troubles during the installation. Try to reduce unnecessary untracked files before running redhat-upgrade-tool. notapplicable INFO [unknown]: Package bacula-common is not installed notapplicable INFO [unknown]: Package mysql is not installed notapplicable INFO [unknown]: Package mysql-server is not installed INFO [unknown]: Package mysql is not installed notapplicable INFO [unknown]: Package mysql-server is not installed INFO [unknown]: Package mysql is not installed notapplicable INFO [unknown]: Package postgresql-server is not installed notapplicable INFO [unknown]: Package xorg-x11-server-Xorg is not installed notapplicable INFO [unknown]: Package xorg-x11-server-Xorg is not installed notapplicable INFO [unknown]: Package xorg-x11-server-Xorg is not installed notapplicable INFO [unknown]: Package xorg-x11-server-Xorg is not installed pass pass notapplicable INFO [unknown]: Package arptables_jf is not installed notapplicable INFO [unknown]: Package bind-chroot is not installed notapplicable INFO unknown: Package bind is not installed notapplicable INFO [unknown]: Package dhcp is not installed notapplicable INFO unknown: Package dnsmasq is not installed notapplicable INFO [unknown]: Package dovecot is not installed informational INFO iptables: Creating /root/preupgrade/postupgrade.d/reenable-iptables WARNING iptables: Please read Remediation instructions. notapplicable INFO [unknown]: Package net-snmp is not installed informational pass needs_inspection INPLACERISK: MEDIUM: ssh-keycat files are moved to openssh-keycat informational notapplicable INFO sendmail: Package sendmail is not installed notapplicable INFO squid: Package squid is not installed notapplicable INFO [unknown]: Package vsftpd is not installed pass needs_inspection error: file /root/preupgrade/RHEL6_7/others/configchanges/etc/yum.repos.d/epel-testing.repo: No such file or directory /root/preupgrade/RHEL6_7/others/configchanges/check.sh: line 53: & 16 : syntax error: operand expected (error token is "& 16 ") INPLACERISK: SLIGHT: Some config files are changed and .rpmnew files will be generated. informational informational notapplicable INFO [unknown]: Package bind is not installed notapplicable INFO [unknown]: Package dnsmasq is not installed needs_inspection INPLACERISK: SLIGHT: Some utilities were removed, moved between packages or change path. pass needs_action INPLACERISK: HIGH: We detected some non-RH signed packages, you can find the list in /root/preupgrade/./kickstart/nonrhpkgs. You need to handle them yourself! needs_inspection INPLACERISK: MEDIUM: We detected some packages installed on the system were removed (obsoleted) between RHEL 6 and RHEL 7. This may break the functionality of the packages depending on them. notapplicable INFO [unknown]: Package w3m is not installed notapplicable INFO [unknown]: Package qemu-guest-agent is not installed informational informational informational informational informational informational needs_action INPLACERISK: HIGH: After upgrading to RHEL 7 there are still some el6 packages left. Add --cleanup-post option to redhat-upgrade-tool if you want to remove them automatically. INPLACERISK: MEDIUM: We detected some packages installed on the system were removed between RHEL 6 and RHEL 7. This may break the functionality of the packages depending on them. notapplicable INFO [unknown]: Package taskjuggler is not installed fixed INPLACERISK: SLIGHT: Package module-init-tools (required by NonRH signed package(s):qa-tools ) replaced between RHEL 6 and RHEL 7 INPLACERISK: SLIGHT: Package procps (required by NonRH signed package(s):qa-tools ) replaced between RHEL 6 and RHEL 7 Red_Hat_Enterprise_Linux-Release_Notes-6-en-US Red Hat, Inc. RSA/8, Tue 07 Apr 2015 11:47:12 AM EDT, Key ID 938a80caf21541eb bfa-firmware Red Hat, Inc. RSA/8, Mon 23 Jun 2014 03:56:03 AM EDT, Key ID 938a80caf21541eb coreutils-libs Red Hat, Inc. RSA/8, Tue 22 Jul 2014 09:36:40 AM EDT, Key ID 199e2f91fd431d51 cryptsetup-luks-libs Red Hat, Inc. RSA/8, Mon 23 Jun 2014 11:53:44 AM EDT, Key ID 938a80caf21541eb cryptsetup-luks Red Hat, Inc. RSA/8, Mon 23 Jun 2014 11:53:36 AM EDT, Key ID 938a80caf21541eb db4-utils Red Hat, Inc. RSA/8, Tue 09 Jun 2015 07:29:49 AM EDT, Key ID 199e2f91fd431d51 db4 Red Hat, Inc. RSA/8, Tue 09 Jun 2015 07:30:07 AM EDT, Key ID 199e2f91fd431d51 dracut-kernel Red Hat, Inc. RSA/8, Wed 10 Jun 2015 07:58:12 AM EDT, Key ID 938a80caf21541eb eject Red Hat, Inc. RSA/8, Mon 16 Aug 2010 11:59:19 AM EDT, Key ID 199e2f91fd431d51 iptables-ipv6 Red Hat, Inc. RSA/8, Fri 27 Mar 2015 08:40:06 AM EDT, Key ID 199e2f91fd431d51 kernel-firmware Red Hat, Inc. RSA/8, Wed 10 Jun 2015 11:31:23 AM EDT, Key ID 938a80caf21541eb libudev Red Hat, Inc. RSA/8, Tue 09 Jun 2015 04:45:14 AM EDT, Key ID 199e2f91fd431d51 libusb1 Red Hat, Inc. RSA/8, Thu 17 Jan 2013 06:18:42 AM EST, Key ID 199e2f91fd431d51 man Red Hat, Inc. RSA/8, Fri 04 Jan 2013 10:34:52 AM EST, Key ID 199e2f91fd431d51 module-init-tools Red Hat, Inc. RSA/8, Wed 04 Mar 2015 07:14:51 AM EST, Key ID 938a80caf21541eb nfs-utils-lib Red Hat, Inc. RSA/8, Tue 02 Jun 2015 11:48:49 AM EDT, Key ID 938a80caf21541eb perl-Compress-Zlib Red Hat, Inc. RSA/8, Tue 17 Mar 2015 06:03:26 AM EDT, Key ID 199e2f91fd431d51 perl-IO-Compress-Base Red Hat, Inc. RSA/8, Tue 17 Mar 2015 06:03:32 AM EDT, Key ID 199e2f91fd431d51 perl-IO-Compress-Zlib Red Hat, Inc. RSA/8, Tue 17 Mar 2015 06:03:36 AM EDT, Key ID 199e2f91fd431d51 procps Red Hat, Inc. RSA/8, Wed 04 Mar 2015 11:50:57 AM EST, Key ID 938a80caf21541eb ql2100-firmware Red Hat, Inc. RSA/8, Mon 16 Aug 2010 03:36:52 PM EDT, Key ID 199e2f91fd431d51 ql2200-firmware Red Hat, Inc. RSA/8, Mon 16 Aug 2010 03:36:52 PM EDT, Key ID 199e2f91fd431d51 ql23xx-firmware Red Hat, Inc. RSA/8, Mon 16 Aug 2010 03:36:53 PM EDT, Key ID 199e2f91fd431d51 ql2400-firmware Red Hat, Inc. RSA/8, Mon 23 Jun 2014 05:27:26 AM EDT, Key ID 938a80caf21541eb ql2500-firmware Red Hat, Inc. RSA/8, Mon 23 Jun 2014 05:27:26 AM EDT, Key ID 938a80caf21541eb rt61pci-firmware Red Hat, Inc. RSA/8, Mon 16 Aug 2010 03:48:01 PM EDT, Key ID 199e2f91fd431d51 rt73usb-firmware Red Hat, Inc. RSA/8, Mon 16 Aug 2010 03:48:02 PM EDT, Key ID 199e2f91fd431d51 util-linux-ng Red Hat, Inc. RSA/8, Tue 12 Aug 2014 01:37:13 PM EDT, Key ID 938a80caf21541eb xorg-x11-drv-ati-firmware Red Hat, Inc. RSA/8, Wed 04 Mar 2015 07:37:16 AM EST, Key ID 938a80caf21541eb yum-plugin-security Red Hat, Inc. RSA/8, Tue 12 Aug 2014 02:33:01 AM EDT, Key ID 199e2f91fd431d51 INPLACERISK: MEDIUM: Package Red_Hat_Enterprise_Linux-Release_Notes-6-en-US not provided by its replacement Red_Hat_Enterprise_Linux-Release_Notes-7-en-US. In-place upgrade might not work properly, will be finished by postupgrade script! INPLACERISK: MEDIUM: Package rt73usb-firmware not provided by its replacement linux-firmware. In-place upgrade might not work properly, will be finished by postupgrade script! INPLACERISK: MEDIUM: Package bfa-firmware not provided by its replacement linux-firmware. In-place upgrade might not work properly, will be finished by postupgrade script! INPLACERISK: MEDIUM: Package ql2400-firmware not provided by its replacement linux-firmware. In-place upgrade might not work properly, will be finished by postupgrade script! INPLACERISK: MEDIUM: Package ql2100-firmware not provided by its replacement linux-firmware. In-place upgrade might not work properly, will be finished by postupgrade script! INPLACERISK: MEDIUM: Package ql2500-firmware not provided by its replacement linux-firmware. In-place upgrade might not work properly, will be finished by postupgrade script! INPLACERISK: MEDIUM: Package libudev not provided by its replacement systemd-libs. In-place upgrade might not work properly, will be finished by postupgrade script! INPLACERISK: MEDIUM: Package rt61pci-firmware not provided by its replacement linux-firmware. In-place upgrade might not work properly, will be finished by postupgrade script! INPLACERISK: MEDIUM: Package ql2200-firmware not provided by its replacement linux-firmware. In-place upgrade might not work properly, will be finished by postupgrade script! INPLACERISK: MEDIUM: Package coreutils-libs not provided by its replacement coreutils. In-place upgrade might not work properly, will be finished by postupgrade script! INPLACERISK: MEDIUM: Package ql23xx-firmware not provided by its replacement linux-firmware. In-place upgrade might not work properly, will be finished by postupgrade script! INPLACERISK: SLIGHT: We detected some packages installed on the system changed their name between RHEL 6 and RHEL 7. Although they should be compatible, monitoring after the update is recommended. informational needs_action DEBUG [unknown]: checking problems from Server INPLACERISK: HIGH: Packages [xz-lzma-compat perl-YAML-Syck libreport-compat libproxy-bin libproxy-python apr-util-ldap libreport-plugin-logger PackageKit-yum-plugin system-config-firewall-tui groff aspell libreport-plugin-kerneloops] have been moved to Server Optional channel. fixed ERROR [unknown]: at least packages elfutils satyr grep python-chardet dmidecode nss-sysinit libpciaccess mdadm gtk2 vim-common irqbalance subscription-manager json-c elfutils-libs python-six tzdata ca-certificates biosdevname strace nspr nss libxcb libX11-common sos openldap kpartx vim-filesystem vim-minimal systemtap-client redhat-support-lib-python redhat-support-tool nss-tools pixman python-urllib3 nss-util libdrm libX11 python-rhsm systemtap-runtime libXi python-requests systemtap-devel systemtap vim-enhanced elfutils-libelf are downgraded in RHEL7 INPLACERISK: MEDIUM: having one of [elfutils satyr grep python-chardet dmidecode nss-sysinit libpciaccess mdadm gtk2 vim-common irqbalance subscription-manager json-c elfutils-libs python-six tzdata ca-certificates biosdevname strace nspr nss libxcb libX11-common sos openldap kpartx vim-filesystem vim-minimal systemtap-client redhat-support-lib-python redhat-support-tool nss-tools pixman python-urllib3 nss-util libdrm libX11 python-rhsm systemtap-runtime libXi python-requests systemtap-devel systemtap vim-enhanced elfutils-libelf] installed can break the upgrade fixed notapplicable INFO [unknown]: Package policycoreutils-python is not installed needs_action INPLACERISK: HIGH: There were changes in SELinux policies between RHEL 6 and RHEL 7. Please, check solution in order to resolve this issue. notapplicable INFO samba: Package samba is not installed notapplicable INFO [unknown]: Package cups is not installed notapplicable INFO [unknown]: Package cvs is not installed notapplicable INFO unknown: Package freeradius is not installed informational LoadModule auth_basic_module modules/mod_auth_basic.so LoadModule auth_digest_module modules/mod_auth_digest.so LoadModule authn_file_module modules/mod_authn_file.so LoadModule authn_alias_module modules/mod_authn_alias.so LoadModule authn_anon_module modules/mod_authn_anon.so LoadModule authn_dbm_module modules/mod_authn_dbm.so LoadModule authn_default_module modules/mod_authn_default.so LoadModule authz_host_module modules/mod_authz_host.so LoadModule authz_user_module modules/mod_authz_user.so LoadModule authz_owner_module modules/mod_authz_owner.so LoadModule authz_groupfile_module modules/mod_authz_groupfile.so LoadModule authz_dbm_module modules/mod_authz_dbm.so LoadModule authz_default_module modules/mod_authz_default.so LoadModule ldap_module modules/mod_ldap.so LoadModule authnz_ldap_module modules/mod_authnz_ldap.so LoadModule include_module modules/mod_include.so LoadModule log_config_module modules/mod_log_config.so LoadModule logio_module modules/mod_logio.so LoadModule env_module modules/mod_env.so LoadModule ext_filter_module modules/mod_ext_filter.so LoadModule mime_magic_module modules/mod_mime_magic.so LoadModule expires_module modules/mod_expires.so LoadModule deflate_module modules/mod_deflate.so LoadModule headers_module modules/mod_headers.so LoadModule usertrack_module modules/mod_usertrack.so LoadModule setenvif_module modules/mod_setenvif.so LoadModule mime_module modules/mod_mime.so LoadModule dav_module modules/mod_dav.so LoadModule status_module modules/mod_status.so LoadModule autoindex_module modules/mod_autoindex.so LoadModule info_module modules/mod_info.so LoadModule dav_fs_module modules/mod_dav_fs.so LoadModule vhost_alias_module modules/mod_vhost_alias.so LoadModule negotiation_module modules/mod_negotiation.so LoadModule dir_module modules/mod_dir.so LoadModule actions_module modules/mod_actions.so LoadModule speling_module modules/mod_speling.so LoadModule userdir_module modules/mod_userdir.so LoadModule alias_module modules/mod_alias.so LoadModule substitute_module modules/mod_substitute.so LoadModule rewrite_module modules/mod_rewrite.so LoadModule proxy_module modules/mod_proxy.so LoadModule proxy_balancer_module modules/mod_proxy_balancer.so LoadModule proxy_ftp_module modules/mod_proxy_ftp.so LoadModule proxy_http_module modules/mod_proxy_http.so LoadModule proxy_ajp_module modules/mod_proxy_ajp.so LoadModule proxy_connect_module modules/mod_proxy_connect.so LoadModule cache_module modules/mod_cache.so LoadModule suexec_module modules/mod_suexec.so LoadModule disk_cache_module modules/mod_disk_cache.so LoadModule cgi_module modules/mod_cgi.so LoadModule version_module modules/mod_version.so LoadModule actions_module modules/mod_actions.so LoadModule alias_module modules/mod_alias.so LoadModule auth_basic_module modules/mod_auth_basic.so LoadModule auth_digest_module modules/mod_auth_digest.so LoadModule authn_anon_module modules/mod_authn_anon.so LoadModule authn_dbm_module modules/mod_authn_dbm.so LoadModule authn_file_module modules/mod_authn_file.so LoadModule authz_dbm_module modules/mod_authz_dbm.so LoadModule authz_groupfile_module modules/mod_authz_groupfile.so LoadModule authz_host_module modules/mod_authz_host.so LoadModule authz_owner_module modules/mod_authz_owner.so LoadModule authz_user_module modules/mod_authz_user.so LoadModule autoindex_module modules/mod_autoindex.so LoadModule cache_module modules/mod_cache.so LoadModule deflate_module modules/mod_deflate.so LoadModule dir_module modules/mod_dir.so LoadModule env_module modules/mod_env.so LoadModule expires_module modules/mod_expires.so LoadModule ext_filter_module modules/mod_ext_filter.so LoadModule headers_module modules/mod_headers.so LoadModule include_module modules/mod_include.so LoadModule info_module modules/mod_info.so LoadModule log_config_module modules/mod_log_config.so LoadModule logio_module modules/mod_logio.so LoadModule mime_magic_module modules/mod_mime_magic.so LoadModule mime_module modules/mod_mime.so LoadModule negotiation_module modules/mod_negotiation.so LoadModule rewrite_module modules/mod_rewrite.so LoadModule setenvif_module modules/mod_setenvif.so LoadModule status_module modules/mod_status.so LoadModule substitute_module modules/mod_substitute.so LoadModule suexec_module modules/mod_suexec.so LoadModule userdir_module modules/mod_userdir.so LoadModule version_module modules/mod_version.so LoadModule vhost_alias_module modules/mod_vhost_alias.so LoadModule dav_module modules/mod_dav.so LoadModule dav_fs_module modules/mod_dav_fs.so LoadModule proxy_module modules/mod_proxy.so LoadModule proxy_ajp_module modules/mod_proxy_ajp.so LoadModule proxy_balancer_module modules/mod_proxy_balancer.so LoadModule proxy_connect_module modules/mod_proxy_connect.so LoadModule proxy_ftp_module modules/mod_proxy_ftp.so LoadModule proxy_http_module modules/mod_proxy_http.so LoadModule disk_cache_module modules/mod_disk_cache.so LoadModule cgi_module modules/mod_cgi.so LoadModule ldap_module modules/mod_ldap.so LoadModule authnz_ldap_module modules/mod_authnz_ldap.so LoadModule speling_module modules/mod_speling.so LoadModule usertrack_module modules/mod_usertrack.so LoadModule authn_alias_module modules/mod_authn_alias.so LoadModule authn_default_module modules/mod_authn_default.so LoadModule authz_default_module modules/mod_authz_default.so LoadModule ldap_module modules/mod_ldap.so LoadModule speling_module modules/mod_speling.so LoadModule usertrack_module modules/mod_usertrack.so /etc/httpd//conf/httpd.conf: Order allow,deny /etc/httpd//conf/httpd.conf:# Order allow,deny /etc/httpd//conf/httpd.conf:# Order deny,allow /etc/httpd//conf/httpd.conf: Order allow,deny /etc/httpd//conf/httpd.conf: Order allow,deny /etc/httpd//conf/httpd.conf: Order allow,deny /etc/httpd//conf/httpd.conf: Order allow,deny /etc/httpd//conf/httpd.conf:# Order deny,allow /etc/httpd//conf/httpd.conf:# Order deny,allow /etc/httpd//conf/httpd.conf:# Order deny,allow /etc/httpd//conf.d/99-preup-httpd.conf: Order allow,deny notapplicable INFO [unknown]: Package bind-dyndb-ldap is not installed notapplicable INFO unknown: Package ipa-server is not installed notapplicable INFO [unknown]: Package pki-ca is not installed pass pass notapplicable INFO [unknown]: Package openldap-servers is not installed pass fixed export SSH_USE_STRONG_RNG=0 INPLACERISK: SLIGHT: export shell commands will be deleted from /etc/sysconfig/sshd pass pass pass notapplicable INFO [unknown]: Package sssd is not installed pass INFO cryptsetup-luks: Checking devices in /root/preupgrade/etc/crypttab INFO cryptsetup-luks: Check remaining devices in system using blkid pass notapplicable INFO [unknown]: Package lvm2-cluster is not installed fixed INFO device-mapper-event lvm2: The lvm2-monitor service is enabled. notapplicable INFO [unknown]: Package device-mapper-multipath is not installed notapplicable INFO [unknown]: Package scsi-target-utils is not installed pass informational pass pass needs_inspection INPLACERISK: SLIGHT: Some scripts untracked by RPM were discovered on the system and may not work properly after upgrade. pass grep: invalid argument 'ebuginfo[[:space:]]' for '--directories' Valid arguments are: - 'read' - 'recurse' - 'skip' Usage: grep [OPTION]... PATTERN [FILE]... Try 'grep --help' for more information. informational INPLACERISK: MEDIUM: Mount point /mnt/redhat is mounted read-only. INPLACERISK: MEDIUM: Mount point /mnt/qa is mounted read-only. INFO filesystem: Checking if /etc/mtab contains paths: ('/usr', '/var', '/var/run', '/var/lock') informational pass DEBUG distribution: The script checks whether /usr directory is on separate partition. DEBUG distribution: Checking /etc/fstab file DEBUG distribution: Checking /etc/fstab file done DEBUG distribution: /usr directory is not on separate partition. In-place upgrade is possible pass notapplicable INFO [unknown]: Package cman is not installed notapplicable INFO [unknown]: Package krb5-server is not installed informational informational informational INPLACERISK: MEDIUM: We detected some soname bumps in the libraries installed on the system. This may break the functionality of some of your 3rd party applications. They may need rebuild. Please check their requirements. informational needs_action INPLACERISK: HIGH: Library python-jinja2 (required by NonRH signed package(s):beaker-client ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl-XML-Parser (required by NonRH signed package(s):tps-devel ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library python-rhsm (required by NonRH signed package(s):redhat-upgrade-tool ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library rpm-python (required by NonRH signed package(s):preupgrade-assistant preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library rpm-python (required by NonRH signed package(s):preupgrade-assistant preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library aspell (required by NonRH signed package(s):qa-tools ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library aspell (required by NonRH signed package(s):qa-tools ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library python-lxml (required by NonRH signed package(s):beaker-client ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library python-krbV (required by NonRH signed package(s):beaker-redhat beaker-client ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library procps (required by NonRH signed package(s):qa-tools ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library mod_wsgi (required by NonRH signed package(s):preupgrade-assistant-ui ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library aspell (required by NonRH signed package(s):qa-tools ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library python-lxml (required by NonRH signed package(s):beaker-client ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library aspell (required by NonRH signed package(s):qa-tools ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library aspell (required by NonRH signed package(s):qa-tools ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library aspell (required by NonRH signed package(s):qa-tools ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library perl (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 _speedups.so from python-jinja2 (required by NonRH signed package(s):beaker-client ) B.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Base64.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Byte.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) CN.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Call.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Cwd.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) DB_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) DProf.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Dumper.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) EBCDIC.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Encode.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Expat.so from perl-XML-Parser (required by NonRH signed package(s):tps-devel ) FastCalc.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Fcntl.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) FieldHash.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) GDBM_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Glob.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Hostname.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) IO.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) JP.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) KR.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Langinfo.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) MD5.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) NDBM_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Normalize.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Opcode.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) POSIX.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) PPPort.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Peek.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) SDBM_File.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Socket.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Soundex.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Storable.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Symbol.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) SysV.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Syslog.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) TW.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Unicode.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) Util.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) _certificate.so from python-rhsm (required by NonRH signed package(s):redhat-upgrade-tool ) _rpmbmodule.so from rpm-python (required by NonRH signed package(s):preupgrade-assistant preupgrade-assistant-contents ) _rpmmodule.so from rpm-python (required by NonRH signed package(s):preupgrade-assistant preupgrade-assistant-contents ) attrs.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) context-filter.so from aspell (required by NonRH signed package(s):qa-tools ) email-filter.so from aspell (required by NonRH signed package(s):qa-tools ) encoding.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) etree.so from python-lxml (required by NonRH signed package(s):beaker-client ) krbVmodule.so from python-krbV (required by NonRH signed package(s):beaker-redhat beaker-client ) libproc-3.2.8.so from procps (required by NonRH signed package(s):qa-tools ) mod_wsgi.so from mod_wsgi (required by NonRH signed package(s):preupgrade-assistant-ui ) mro.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) nroff-filter.so from aspell (required by NonRH signed package(s):qa-tools ) objectify.so from python-lxml (required by NonRH signed package(s):beaker-client ) re.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) scalar.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) sgml-filter.so from aspell (required by NonRH signed package(s):qa-tools ) shared.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) tex-filter.so from aspell (required by NonRH signed package(s):qa-tools ) texinfo-filter.so from aspell (required by NonRH signed package(s):qa-tools ) threads.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) via.so from perl (required by NonRH signed package(s):preupgrade-assistant-contents ) INPLACERISK: MEDIUM: We detected some .so libraries installed on the system were removed between RHEL 6 and RHEL 7. This may break the functionality of some of your 3rd party applications. pass pass pass needs_inspection INPLACERISK: SLIGHT: File splash.xpm.gz was backuped for inplace upgrade case and editing grub options fixed pass pass needs_action INPLACERISK: HIGH: The service blk-availability on RHEL 7 is disabled by default. Enable them via commands: systemctl enable blk-availability && systemctl start blk-availability.service . INPLACERISK: HIGH: The service haldaemon on RHEL 7 is disabled by default. Enable them via commands: systemctl enable haldaemon && systemctl start haldaemon.service . INPLACERISK: HIGH: The service ip6tables on RHEL 7 is disabled by default. Enable them via commands: systemctl enable ip6tables && systemctl start ip6tables.service . INPLACERISK: HIGH: The service messagebus on RHEL 7 is disabled by default. Enable them via commands: systemctl enable messagebus && systemctl start messagebus.service . INPLACERISK: HIGH: The service netfs on RHEL 7 is disabled by default. Enable them via commands: systemctl enable netfs && systemctl start netfs.service . INPLACERISK: HIGH: The service network on RHEL 7 is disabled by default. Enable them via commands: systemctl enable network && systemctl start network.service . INPLACERISK: HIGH: The service nfslock on RHEL 7 is disabled by default. Enable them via commands: systemctl enable nfslock && systemctl start nfslock.service . INPLACERISK: HIGH: The service postfix on RHEL 7 is disabled by default. Enable them via commands: systemctl enable postfix && systemctl start postfix.service . INPLACERISK: HIGH: The service rhsmcertd on RHEL 7 is disabled by default. Enable them via commands: systemctl enable rhsmcertd && systemctl start rhsmcertd.service . INPLACERISK: HIGH: The service rpcgssd on RHEL 7 is disabled by default. Enable them via commands: systemctl enable rpcgssd && systemctl start rpcgssd.service . INPLACERISK: HIGH: The service udev-post on RHEL 7 is disabled by default. Enable them via commands: systemctl enable udev-post && systemctl start udev-post.service . needs_inspection INPLACERISK: SLIGHT: /etc/sysconfig/network-scripts/ifcfg-eth0 is old style ethX name without HWADDR, its name can change after upgrade. DEBUG initscripts: checking ifcfg-lo, name: lo hwaddr: False DEBUG initscripts: checking ifcfg-eth0, name: eth0 hwaddr: False pass notapplicable notapplicable INFO libcgroup: Package libcgroup is not installed pass informational notapplicable INFO [unknown]: Package php-common is not installed informational needs_inspection INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/Babel-0.9.4-py2.6.egg-info is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/babel is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/backports is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/bkr is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/bkr-20.1-py2.6.egg-info is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/bkr.client-20.1-py2.6.egg-info is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/kobo is not owned by any RPM package. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/prettytable-0.6.1-py2.6.egg-info is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/preup is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/preup_ui is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/preupgrade_assistant-0.11.12-py2.6.egg-info is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/preuputils is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/redhat_upgrade_tool is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/rhts is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/snake is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/report is not owned by any RPM package. INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/reportclient is not owned by any RPM package. needs_inspection INPLACERISK: SLIGHT: Repo beaker-harness is enabled. INPLACERISK: SLIGHT: Repo rhel-source is not enabled. INPLACERISK: SLIGHT: Repo rhel-source-beta is not enabled. INPLACERISK: SLIGHT: Repo beaker-client is enabled. INPLACERISK: SLIGHT: Repo beaker-client-testing is not enabled. INPLACERISK: SLIGHT: Repo rhel is enabled. INPLACERISK: SLIGHT: Repo rhel-opt is enabled. INPLACERISK: SLIGHT: Repo qa-tools is enabled. INPLACERISK: SLIGHT: Repo qa-tools-testing is not enabled. INPLACERISK: SLIGHT: Repo epel is not enabled. INPLACERISK: SLIGHT: Repo epel-debuginfo is not enabled. INPLACERISK: SLIGHT: Repo epel-source is not enabled. INPLACERISK: SLIGHT: Repo rhel-debuginfo is not enabled. INPLACERISK: SLIGHT: Repo rhel-opt-debuginfo is not enabled. INPLACERISK: SLIGHT: Repo preupgrade-assistant is enabled. INPLACERISK: SLIGHT: Repo beaker-tasks is not enabled. INPLACERISK: SLIGHT: Enabled repo files for kickstart generation are stored /root/preupgrade/kickstart/available-repos. needs_action INPLACERISK: HIGH: Diskspace is lower then minimum requirements for correct run of new system! notapplicable INFO [unknown]: Package ruby is not installed pass error INPLACERISK: MEDIUM: The system is registered either with RHN Sattelite or RHN Proxy. Ensure that Your RHN Sattelite or RHN Proxy doesn't use RHN Classic as the source of updates. RHN Classic does not provide updates for RHEL 7. pass pass notapplicable informational notapplicable informational pass pass INFO distribution: Incorrect shell used for adm account - now /sbin/nologin, should be /bin/bash based on reservation data WARNING distribution: Invalid gid used for games account - now 100, should be 20. INFO distribution: Incorrect shell used for rpcuser account - now /sbin/nologin, should be /bin/false based on reservation data INFO distribution: Incorrect homedir used for rpc account - now /var/cache/rpcbind, should be / based on reservation data INFO distribution: Incorrect shell used for rpc account - now /sbin/nologin, should be /bin/false based on reservation data INFO distribution: Incorrect shell used for apache account - now /sbin/nologin, should be /bin/false based on reservation data INFO distribution: Incorrect shell used for postfix account - now /sbin/nologin, should be /bin/true based on reservation data pass notapplicable INFO [unknown]: Package ypbind is not installed notapplicable INFO [unknown]: Package ypserv is not installed notapplicable INFO [unknown]: Package ypserv is not installed notapplicable INFO [unknown]: Package ypserv is not installed notapplicable INFO [unknown]: Package ypserv is not installed 65.416672 38.000000