draft Preupgrade Assistant migration tool This is a checklist of configuration settings intended to be used as RedHat Enterprise Linux migration tool. The checklist can be processed by varius tools which enable users to: define profiles with customized security policies, audit systems to determine compliance with targeted security policy and adjust system configuration. This XCCDF has been automatically generated, it should only serve as a baseline! Defense Information Systems Agency - Security Technical Implementation Guides (DISA STIG) Payment Card Industry - Data Security Standard (PCI DSS) 1.0 Preupgrade assistant default This profile is designed for the Preupgrade Assistant tool. /root/preupgrade 0 sign 1 1 /root/preupgrade/RHEL6_7 Backup Configuration Files to Review admin /root/preupgrade/RHEL6_7/backup/NoverifyConfigs solution.txt Configuration Files to Review This module stores some system configuration files that can have been modified by the user when it is not possible to automatically upgrade them. Some packages do not track the possible performed changes to system configuration files; therefore, it cannot be easily determined if the files have been modified by the user or not. In order to allow for later examination, all configuration files not handled by the migration scripts are stored in the dirtyconf/ directory. The list of the stored files is available in the ./kickstart/noverifycfg file. The user is advised to verify the functionality of configuration files stored by this tool after a successful upgrade. File Lists for Manual Migration admin /root/preupgrade/RHEL6_7/backup/UntrackedFiles solution.txt File Lists for Manual Migration This module generates lists of files, such as temporary, application, and user data files, which are not automatically migrated. Some user data, such as user home directories and temporary files, are not tracked by the RPM database. This data will not be automatically migrated. To assist you with migrating the data, this module has generated the following three files. * The ./kickstart/untrackedsystem file lists the regular files on the system that will not be migrated. The list does not contain files mounted over the network, files created by runtime system operations, files in temporary locations, and user files in the /home/ or /root/ directory. * The ./kickstart/untrackeduser file lists the regular local files in the /home/ and /root/ directories that will not be migrated. If the /home/ and /root/ directories are on a file system mounted over the network, this file can be empty. * The ./kickstart/untrackedexpected file lists the regular files and symlinks created by runtime system operations (for example handling runlevels, alternatives and active SELinux modules). Most likely you don't need to care about them, list is available just for completeness. * The ./kickstart/untrackedtemporary file lists all temporary local files on the system that will not be migrated. This is essentially everything in the /cgroup/, /tmp/, and /var/ directories. Most likely you don't need to care about them, list is available just for completeness. It is recommended that you backup all data before proceeding with the upgrade to Red Hat Enterprise Linux 7. This data can be quite large. If you are performing an in-place upgrade, this data should remain in its current location after the upgrade. Configuration files and other data should be reviewed to determine if any modifications are needed for use with Red Hat Enterprise Linux 7. You should verify that all data was successfully maintained. If you are performing a migration upgrade, this data must be backed up to another storage medium. You will need to copy the data you wish to have on the new installation back into place after the upgrade is complete. Configuration files and other data should be reviewed to determine if any modifications are needed for use with Red Hat Enterprise Linux 7. Bacula Backup Software admin /root/preupgrade/RHEL6_7/backup/bacula bacula.txt Bacula Backup Software This module verifies the directory permissions for the Bacula service. This module verifies that the permissions on the /etc/bacula/ directory are correctly set. For more information about Bacula, see the "Installation and migration guide for Bacula backuping software" Knowledge Base article at https://access.redhat.com/site/articles/642483. Databases MySQL contents for migration MySQL configuration admin /root/preupgrade/RHEL6_7/databases/mysql/configuration_changes solution.txt MySQL configuration Check MySQL configuration During in-place upgrade, the old MySQL 5.1 RPM package is uninstalled and the new MariaDB 5.5 RPM package is installed, but RPM does not take this operations as an update. Note that the MySQL RPM renames /etc/my.cnf to /etc/my.cnf.rpmsave on uninstall. After installing MariaDB you should do the following to restore your old configuration options: root> mv -vi /etc/my.cnf.rpmsave /etc/my.cnf You can find more on: https://access.redhat.com/articles/723833 Migration of the MySQL data stack admin /root/preupgrade/RHEL6_7/databases/mysql/data_migration solution.txt Migration of the MySQL data stack Migrate the MySQL data stack to the new version of MariaDB Changes related to moving from MySQL to MariaDB admin /root/preupgrade/RHEL6_7/databases/mysql/general_changes solution.txt Changes related to moving from MySQL to MariaDB Mind that MySQL is replaced by MariaDB in default MySQL implementation PostgreSQL upgrade content admin /root/preupgrade/RHEL6_7/databases/postgresql solution.txt PostgreSQL upgrade content PostgreSQL upgrade content Desktop GNOME Desktop Environment underwent several design modifications in Red Hat Enterprise Linux 7 release admin /root/preupgrade/RHEL6_7/desktop/GNOME solution.txt GNOME Desktop Environment underwent several design modifications in Red Hat Enterprise Linux 7 release GNOME Desktop Environment underwent several design modifications in Red Hat Enterprise Linux 7 release. KDE Desktop Environment underwent several design modifications in Red Hat Enterprise Linux 7 release admin /root/preupgrade/RHEL6_7/desktop/KDE solution.txt KDE Desktop Environment underwent several design modifications in Red Hat Enterprise Linux 7 release KDE Desktop Environment underwent several design modifications in Red Hat Enterprise Linux 7 release. Drivers POWER6 processors are unsupported on ppc in Red Hat Enterprise Linux 7 admin /root/preupgrade/RHEL6_7/drivers/ObsoletePOWER6Processors solution.txt POWER6 processors are unsupported on ppc in Red Hat Enterprise Linux 7 POWER6 processors are unsupported on ppc architecture in Red Hat Enterprise Linux 7. POWER6 processors are unsupported on ppc architecture in Red Hat Enterprise Linux 7. Upgrade will not be possible from Red Hat Enterprise Linux 6. several graphic drivers not supported in Red Hat Enterprise Linux 7 admin /root/preupgrade/RHEL6_7/drivers/ObsoletedGraphicDrivers solution.txt several graphic drivers not supported in Red Hat Enterprise Linux 7 Several graphic drivers packages were deprecated or removed in Red Hat Enterprise Linux 7. several input drivers not supported in Red Hat Enterprise Linux 7 admin /root/preupgrade/RHEL6_7/drivers/ObsoletedInputDrivers solution.txt several input drivers not supported in Red Hat Enterprise Linux 7 Several input drivers packages were deprecated or removed in Red Hat Enterprise Linux 7. several kernel networking drivers not available in Red Hat Enterprise Linux 7 admin /root/preupgrade/RHEL6_7/drivers/ObsoletedNetworkDrivers solution.txt several kernel networking drivers not available in Red Hat Enterprise Linux 7 Several kernel networking drivers were removed from Red Hat Enterprise Linux 7. several kernel storage drivers not available in Red Hat Enterprise Linux 7 admin /root/preupgrade/RHEL6_7/drivers/ObsoletedStorageDrivers solution.txt several kernel storage drivers not available in Red Hat Enterprise Linux 7 Several kernel storage drivers were deprecated or removed in Red Hat Enterprise Linux 7. Networking Names, Options and Output Format Changes in arptables admin /root/preupgrade/RHEL6_7/networking/arptables_jf solution.txt Names, Options and Output Format Changes in arptables The basic chain names, some command-line options, and some output formats have been changed between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Additionally, the name of the packages has been changed from arptables_jf to arptables. This module provides you with the list of incompatibilities. The names of some basic chains have changed, for example, the IN and OUT chains in arptables_jf have become INPUT and OUTPUT in arptables. The output of the "arptables -L" command is different: in arptables_jf, the rules are listed in a human-readable tabular form, while in arptables, each rule is written as a list of "arptables -A chain ..." command-line options and values, which should be used to add the rule. The arptables-save utility has been modified. In arptables_jf, arptables-save is a binary that accepts several command-line options and which produces output of rules in the form of a parameter list that can be used to add the rule and includes time stamps and COMMIT in the last line. In arptables, arptables-save is a Perl script that accepts no command-line options. The script runs the "arptables -t filter -L -n" command and modifies its output to look similar to the output of arptables-save in arptables_jf, but without time stamps and COMMIT in the last line." In arptables_jf, the arptables-restore utility is a binary, while in arptables, the utility is a Perl script. Also, the arptables packages contain an extension to classify an arp packet. The following list provides an overview of the changes to option names between arptables_jf and arptables. arptables_jf: -s --source --src arptables: -s --source-ip --src-ip arptables_jf: -d --destination --dst --target --tgt arptables: -d --destination-ip --dst-ip arptables_jf: -z --source-hw --source-mac --src-hw --src-mac arptables: --source-mac --src-mac arptables_jf: -y --target-hw --target-mac --tgt-mac --tgt-hw --dst-hw arptables: --destination-mac --dst-mac arptables_jf: --mangle-hw-s arptables: --mangle-mac-s arptables_jf: --mangle-hw-d arptables: --mangle-mac-d The following options also differ in the form of the value: In arptables_jf, the value is always in hexadecimal form (without '0x'), while in arptables the form of the value can differ. arptables_jf: -a --arhln arptables: -l --h-length (only a decimal value, an invalid value always inserts '0') arptables_jf: -p --arpop arptables: --opcode (only a decimal value) arptables_jf: -H --arphrd arptables: --h-type (always hexadecimal, either with '0x' or without) arptables_jf: -w --arpro arptables: --proto-type (if prefixed '0x' then hexadecimal, otherwise decimal) The following parameters are included only in arptables_jf: -c --set-counters The following parameters are included only in arptables: --p-length (not supported though) -m --match -V --version --set-class BIND9 BIND9 running in a chroot environment check. admin /root/preupgrade/RHEL6_7/networking/bind/bind-chroot solution.txt BIND9 running in a chroot environment check. The way how BIND9 running in a chroot environment is started changed between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. This module checks if chroot environment specific packages for BIND9 have been installed and points the administrator to the Red Hat Knowledgebase article. The way how BIND9 running in a chroot environment is started changed between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. For more information, please read the following Red Hat Knowledgebase article located at Customer Portal: https://access.redhat.com/site/node/770133/ The article describes: - How BIND can be run in a chroot environment on Red Hat Enterprise Linux 7 - What is the difference compared to Red Hat Enterprise Linux 6 - Recommendations when running BIND in a chroot environment BIND9 configuration compatibility check admin /root/preupgrade/RHEL6_7/networking/bind/configuration solution.txt BIND9 configuration compatibility check Checks BIND9 configuration compatibility File(s) affected: /etc/named.conf Move dhcpd/dhcprelay arguments from /etc/sysconfig/* to *.service files admin /root/preupgrade/RHEL6_7/networking/dhcp solution.txt Move dhcpd/dhcprelay arguments from /etc/sysconfig/* to *.service files Files /etc/sysconfig/[dhcpd|dhcrelay] containing customization arguments are deprecated in favour of *.service files. The arguments are automatically moved during update. This content checks if user specified any arguments and if so, informs him about the move. The files "/etc/sysconfig/[dhcpd|dhcpd6|dhcrelay]" used for specifying user's customization arguments are deprecated in RHEL7. Instead, these arguments can be specified in "[dhcpd|dhcpd6|dhcrelay].service" files on "ExecStart" line. The specified arguments are automatically moved from /etc/sysconfig/* files into *.service files during upgrade. Please check if they are moved correctly and everything works as expected. DNSMASQ configuration compatibility check admin /root/preupgrade/RHEL6_7/networking/dnsmasq solution.txt DNSMASQ configuration compatibility check Checks DNSMASQ configuration compatibility File(s) affected: /etc/dnsmasq.conf Dovecot configuration compatibility check admin /root/preupgrade/RHEL6_7/networking/dovecot solution.txt Dovecot configuration compatibility check Checks Dovecot configuration compatibility File(s) affected: /etc/dovecot/dovecot.conf Compatibility Between iptables and ip6tables admin /root/preupgrade/RHEL6_7/networking/iptables solution.txt Compatibility Between iptables and ip6tables The firewalld service is now the default firewall service. File(s) affected: /etc/sysconfig/iptables /etc/sysconfig/ip6tables If you are migrating from Red Hat Enterprise Linux 6 to Red Hat Enterprise Linux 7, verify whether you have the iptables-services packages installed after performing the upgrade by running the "rpm -q iptables-services" command as root. Also, verify that iptables and ip6tables services are enabled by running the "systemctl is-enabled iptables" and "systemctl is-enabled ip6tables" commands as root. For more details about migrating the firewall service from Red Hat Enterprise Linux 6, see the section about the firewalld service in the Red Hat Enterprise Linux 7 Migration Planning guide at https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Migration_Planning_Guide/. If you perform a clean installation of Red Hat Enterprise Linux 7, the firewalld service will be installed on your system instead of iptables and ip6tables. For further details about the firewalld service, see the section about firewalls in Red Hat Enterprise Linux 7 Security Guide. You can access the guide at https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Security_Guide/. Net-SNMP check admin /root/preupgrade/RHEL6_7/networking/net-snmp solution.txt Net-SNMP check Check if Net-SNMP daemon (snmpd) is enabled. Check NFSv2 admin /root/preupgrade/RHEL6_7/networking/nfsv2 solution.txt Check NFSv2 NFSv2 is not supported since RHEL 7. Therefore check if exists configuration which requires directly NFSv2 and fix it if it's possible. NFS protocol version 2 is not supported since RHEL7. ----------------------------------------------------- Check ssh configuration file and fix ssh keys admin /root/preupgrade/RHEL6_7/networking/openssh solution.txt Check ssh configuration file and fix ssh keys AuthorizedKeysCommand and AuthorizedKeysCommandUser are not accepted if they are under Match section. Server's ssh keys have different permissions and group on RHEL 7. Private server's ssh keys inside /etc/ssh have different group and permissions on RHEL 7 system. These keys will be fixed by postupgrade script. Check openssh-keycat admin /root/preupgrade/RHEL6_7/networking/openssh-keycat solution.txt Check openssh-keycat ssh-keycat is moved to own subpackage ssh-keycat files (below) are moved to new package 'openssh-keycat': /etc/pam.d/ssh-keycat /usr/libexec/openssh/ssh-keycat /usr/share/doc/openssh-server-5.3p1/HOWTO.ssh-keycat If you want ssh-keycat anymore, you need install openssh-keycat package. Postfix configuration compatibility check admin /root/preupgrade/RHEL6_7/networking/postfix solution.txt Postfix configuration compatibility check Checks postfix configuration compatibility File(s) affected: /etc/postfix/main.cf Please upgrade your configuration by: postfix upgrade-configuration If you plan to use postscreen daemon, please restart postfix service by: systemctl restart postfix There is new smtpd_relay_restrictions parameter with the built-in default settings: smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination This safety net prevents open relay problems due to mistakes with spam filter rules in smtpd_recipient_restrictions. If your site has a complex mail relay policy configured under smtpd_recipient_restrictions, this safety net may defer mail that Postfix should accept. To fix this safety net, take one of the following actions: - Set smtpd_relay_restrictions empty, and keep using the existing mail relay authorization policy in smtpd_recipient_restrictions. - Copy the existing mail relay authorization policy from smtpd_recipient_restrictions to smtpd_relay_restrictions. There is no need to change the value of smtpd_recipient_restrictions. Sendmail configuration compatibility check admin /root/preupgrade/RHEL6_7/networking/sendmail solution.txt Sendmail configuration compatibility check Checks sendmail configuration compatibility File(s) affected: /etc/sysconfig/sendmail If you need to run sendmail with special parameters, you can add them to SENDMAIL_OPTS variable in /etc/sysconfig/sendmail. Please do not remove queue processing interval (e.g. -q1h) from the SENDMAIL_OPTS, otherwise your further e-mails will be not processed / delivered. Squid configuration compatibility check admin /root/preupgrade/RHEL6_7/networking/squid solution.txt Squid configuration compatibility check Checks squid configuration compatibility File(s) affected: /etc/squid/squid.conf Very Secure FTP daemon configuration admin /root/preupgrade/RHEL6_7/networking/vsftpd solution.txt Very Secure FTP daemon configuration Listen and listen_ipv6 has now little different behaviour on RHEL7 systems. On RHEL-6 systems listens to only IPv4 by default. Switching listen=NO and listen_ipv6=YES causes the daemon listens to only IPv6. But on RHEL-7 listens to IPv6 as well as IPv4 by default. Be default listening on the IPv6 'any' address will accept connections from both (IPv6 and IPv4) clients. If you want listen on specific adresses then you must run two copies of vsftpd with two configuration files. For more details see man 5 vsftpd.conf. Others Reusable Configuration Files admin /root/preupgrade/RHEL6_7/others/NoVersionChangeEtc solution.txt Reusable Configuration Files The module provides a list of the configuration files that can be reused in Red Hat Enterprise Linux 7. Some packages are the same in Red Hat Enterprise Linux 7 and Red Hat Enterprise Linux 6, therefore the current configuration files for these packages can be safely reused. This module stores these files in the /root/preupgrade/cleanconf/etc/ directory. Check changed config files admin /root/preupgrade/RHEL6_7/others/configchanges solution.txt Check changed config files Print modified config noreplace files which can generate .rpmnew (or .rpmsave) files. Specially check audit.rules which is generated by /sbin/augenrules since RHEL-6.6. It's recommended check these config files after upgrade on RHEL7: /etc/pam.d/fingerprint-auth /etc/pam.d/password-auth /etc/pam.d/smartcard-auth /etc/pam.d/system-auth /etc/beah.conf /etc/beah_beaker.conf /etc/securetty /etc/sysconfig/readahead /etc/inittab /etc/sysconfig/init Rsyslog configuration icompatibility admin /root/preupgrade/RHEL6_7/others/rsyslog solution.txt Rsyslog configuration icompatibility There is a change with journal (and thus socket logging) and some other incompatibilities in v7 as compared with older v5 version of rsyslog. See [0] and [1] for more information about new logging system on RHEL-7 and solutions of possible compatibility problems. [0] https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/System_Administrators_Guide/s1-interaction_of_rsyslog_and_journal.html [1] http://www.rsyslog.com/doc/v7-stable/compatibility/index.html VCS repositories admin /root/preupgrade/RHEL6_7/others/vcsrepos solution.txt VCS repositories Find Versin Control System repositories in /home and /root - git, svn, cvs, bzr. Packages Added options in packages Added and extended options for BIND9 configuration admin /root/preupgrade/RHEL6_7/packages/AddedOptions/bind solution.txt Added and extended options for BIND9 configuration Some useful options have been added or extended in the configuration of the Berkeley Internet Name Domain (BIND9) utility on Red Hat Enterprise Linux 7. This module provides overview of the changes in the options between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. The following options have been extended or added to the BIND utility version 9.9.4: * inline-signing This option can be used in zone Statement. If set to "yes", the unsecured zone, which is either loaded from the disk or transferred, is signed in real time and served as signed. * request-ixfr This option can now also be used in a zone block of the configuration. Setting this option overrides the global setting or the view setting for the respective zone. * serial-update-method This new option can be used to specify an automatic zone serial number for zones configured for a dynamic DNS (DDNS). The available options are "increment" for incrementing the serial number by one after each zone update, or "unixtime" for setting the serial number to the number of seconds since the UNIX epoch. * also-notify This option now has the same syntax as the zone's "master" option. This means it is now possible to specify which transaction signature (TSIG) key to use when sending an update to a remote server or to include an explicit named masters list. * dnssec-loadkeys-interval This new option can be used to set the frequency of the checks for new keys if the zone has been configured with the "auto-dnssec maintain;" option. The time is specified in minutes with the default value set to 60 minutes. The minimum value is 1 minute and the maximum is 1440 minutes (24 hours). Any greater value is silently reduced to 1440 minutes. For more information, see the BIND9 Administrator Reference Manual located in the /usr/share/doc/bind-9.9.4/ directory. Added options in DNSMASQ configuration admin /root/preupgrade/RHEL6_7/packages/AddedOptions/dnsmasq solution.txt Added options in DNSMASQ configuration Some useful options were added in DNSMASQ configuration between RHEL 6 and RHEL 7. This informative content lists such changes. Some options in DNSMASQ configuration were added between RHEL 6 and RHEL 7. Some of these changes may be helpful in your DNSAMSQ configuration. IPv6 support for DHCP has been added: ------------------------------------- DNSMASQ version distributed in RHEL 7 now supports DHCPv6 protocol. The DHCPv6 server provides the same set of functionality as the DHCPv4 server. In addition it supports: - router advertisements - feature which allows naming for clients which use DHCPv4 for IPv4 configuration, and only stateless auto-configuration for IPv6 configuration. - Address allocation (both DHCPv6 and Router Advertisements) from subnets which are dynamically delegated via DHCPv6 prefix delegation. New "--bind-dynamic" dnsmasq network mode has been added: --------------------------------------------------------- New network mode "bind-dynamic" has been added into DNSMASQ version distributed in RHEL 7. The new network mode which is a hybrid between --bind-interfaces and the default. Dnsmasq will bind to addresses of individual interfaces, allowing multiple dnsmasq instances. If new interfaces or addresses appear on the system, it will automatically bind to them and start listening (this behaviour is subject to any access-control configuration). This makes dynamically created interfaces work in the same way as the default. The following configuration options have been added: "--tag-if=set:<tag>[,set:<tag>[,tag:<tag>[,tag:<tag>]]]" -------------------------------------------------------- The option "--tag-if" has been added to enable boolean operations on tags. Any tag appearing as 'set:<tag>' is set if all the tags which appear as 'tag:<tag>' are set (or unset when 'tag:!<tag>' is used). If there is no 'tag:<tag>' after 'set:<tag>', tags are set unconditionally. It is possible to use multiple 'set:' and 'tag:' arguments in any order. "--tag-if" statements ares processed in the same order they appear in the configuration, so if the <tag> in 'tag:<tag>' is a tag set by another "--tag-if" statement, the statement which sets the <tag> must precede the one which tests it. "--dhcp-proxy[=<ip addr>]..." ----------------------------- !!! IPv4 ONLY option !!! A normal DHCP relay agent is only used to forward the initial parts of the DHCP interaction to the DHCP server. Once the client is fully configured, it communicates directly with the server. A full DHCP relay server can use the (RFC 5107) 'serverid-override' option to force the DHCP server to use the relay as a full proxy, with all packets passing through it. The option "--dhcp-proxy" has been added to provide an alternative method of doing the same thing, for relays which don't support RFC 5107. Given alone, it manipulates the server-id for all interactions via relays. If a list of IP addresses is given, only interactions via relays with given addresses are affected. "--dhcp-generate-names=tag:<tag>[,tag:<tag>]" --------------------------------------------- !!! IPv4 ONLY option !!! The option "--dhcp-generate-names" has been added, which instructs dnsmasq to generate a name for each DHCP client which does not otherwise have one. The name is generated using the MAC address expressed in hexadecimal form, separated by dashes. Note that if the host provides a name, it will be preferred to the generated one, unless "--dhcp-ignore-names" option is used. "--max-ttl=<time>" ------------------ The option "--max-ttl=<time>" has been added to instruct dnsmasq to set the maximum TTL value of the DNS answer, that will be passed to clients. The specified maximum TTL will be set in the DNS answer to clients instead of the true TTL value, if the true TTL value is higher. The true TTL value is however kept in the cache to avoid flooding of upstream DNS servers. "--rebind-localhost-ok" ----------------------- The option "--rebind-localhost-ok" has been added to except 127.0.0.1/8 address range from rebinding checks. This address range is returned by real-time black hole servers, so blocking it may disable these services. "--rebind-domain-ok=[<domain>]|[[/<domain>/[<domain>/]" ------------------------------------------------------- The "--rebind-domain-ok" option has been added to disable detection and blocking of dns-rebind on queries to given domains. The argument may be either a single domain, or multiple domains surrounded and separated by '/'. "--dhcp-sequential-ip" ---------------------- The option "--dhcp-sequential-ip" has been added to instruct DHCP server to assign IP addresses to DHCP clients sequentially. The address allocation starts from the lowest available address. Note that in the sequential mode, clients which allow their lease to expire are much more likely to get their IP address changed. "--add-mac" ----------- The option "--add-mac" has been added to enable adding the MAC address of the DNS client to DNS queries which are forwarded to upstream servers. This may be used for filtering purposes by the upstream server. The MAC address can be added only if the DNS client is on the same subnet as the dnsmasq server. Note that the mechanism used to achieve this (an EDNS0 option) is not yet standardised, therefore it should be considered experimental. Also note that exposing MAC addresses in this way may have SECURITY and PRIVACY implications. "--tftp-lowercase" ------------------ The option "--tftp-lowercase" instructs the TFTP server to convert filenames in TFTP requests to lowercase. This is useful for requests from machines which use case-insensitive filesystem. "--dhcp-client-update" ---------------------- By default dnsmasq sets a flag in the FQDN option, when giving a DHCP lease, to tell the client not to attempt a DDNS update with its name and IP address. This flag disables this default behaviour. "--dhcp-duid=<enterprise-id>,<uid>" ----------------------------------- !!! IPv6 ONLY option !!! The option "--dhcp-duid" has been added to enable specification of the persistent UID used by DHCPv6 server. This option is not normally required as dnsmasq creates a DUID automatically when first needed. If used, this option provides dnsmasq the data required to create a DUID-EN type DUID. The <enterprise-id> is assigned by IANA, and the <uid> is a string of hexadecimal octets unique to a particular device. "--host-record=<name>[,<name>....],[<IPv4-address>],[<IPv6-address>]" -------------------------------------------------------------------- The option "--host-record" enables the user to add A, AAAA and PTR records to the DNS. It adds one or more names to the DNS with associated IPv4 (A) and/or IPv6 (AAAA) records. The same name may appear in multiple host-record statements. This will result in assignment of multiple addresses to the same name. Only the first address creates a PTR record linking the address to the name. "--dns-rr=<name>,<RR-number>,[<hex data>]" ------------------------------------------ The option "--dns-rr" enabled dnsmasq to return an arbitrary DNS Resource Record. The <RR-number> is the type of the record (which is always of the IN class). The value of the record is given by the <hex data>, which may be of the form "01:23:45" or "01 23 45" or "012345" or any mixture of these. "--max-cache-ttl=<time>" ------------------------ The option "--max-cache-ttl" can be used to set the maximum TTL value of cached DNS answers. "--ipset=/<domain>/[domain/]<ipset>[,<ipset>]" ---------------------------------------------- The option "--ipset" can be used to place the resolved IP addresses of queries for specified domains in the specified netfilter ipsets. These ipsets must already exist. For more information please see ipset manpage ('man 8 ipset'). For more information, please see the DNSMASQ man page ('man 8 dnsmasq'). Print removed and moved utilities admin /root/preupgrade/RHEL6_7/packages/GenericUtilities solution.txt Print removed and moved utilities Print utilities which were removed from packages, moved into another package or changed destination directory. Some utilities were removed, moved between packages of change path. Please, check your scripts for possible problems. Below are appended brief lists. If you want see details, please look at another contents. Lists don't contain utilities from removed packages, which are not replaced by another packages. Likewise don't contain utilities which are moved into packages which replace or obsolete original packages. Replaced utilities: /usr/bin/aclocal-1.11 (automake) — aclocal /usr/bin/automake-1.11 (automake) — automake /usr/bin/emacs-23.1 (emacs) — emacs-24.3 /bin/iptables-xml-1.4.7 (iptables) — iptables-xml /sbin/iptables-1.4.7 (iptables) — iptables /sbin/iptables-multi-1.4.7 (iptables) — iptables-multi /sbin/iptables-restore-1.4.7 (iptables) — iptables-restore /sbin/iptables-save-1.4.7 (iptables) — iptables-save /sbin/ip6tables-1.4.7 (iptables-ipv6) — ip6tables /sbin/ip6tables-multi-1.4.7 (iptables-ipv6) — ip6tables-multi /sbin/ip6tables-restore-1.4.7 (iptables-ipv6) — ip6tables-restore /sbin/ip6tables-save-1.4.7 (iptables-ipv6) — ip6tables-save /usr/bin/rsvg (librsvg2) — librsvg-convert:librsvg2-tools /usr/bin/rsvg-view (librsvg2) — rsvg-view-3:librsvg2-tools /usr/bin/python2.6 (python) — python2.7 /usr/bin/easy_install-2.6 (python-setuptools) — easy_install-2.7 /sbin/udevd (udev) — /usr/lib/systemd/systemd-udevd Removed utilities (some removed utilities have still alternative): /usr/bin/ck-history (ConsoleKit) /usr/bin/ck-launch-session (ConsoleKit) /usr/bin/ck-list-sessions (ConsoleKit) /usr/sbin/ck-log-system-restart (ConsoleKit) /usr/sbin/ck-log-system-start (ConsoleKit) /usr/sbin/ck-log-system-stop (ConsoleKit) /usr/sbin/console-kit-daemon (ConsoleKit) /usr/bin/abrt-dedup-client (abrt-addon-ccpp) — the server side no longer exists /usr/bin/abrt-cli-root (abrt-tui) /usr/sbin/cpuspeed (cpuspeed) /usr/bin/berkeley_db_svc (db4-utils) /usr/bin/db_codegen (db4-utils) /usr/bin/doxytag (doxygen) /sbin/fsck.ext4dev (e2fsprogs) — not needed /sbin/mkfs.ext4dev (e2fsprogs) — not needed /usr/bin/volname (eject) — use blkid instead /usr/bin/b2m (emacs-common) — removed /usr/bin/rcs-checkin (emacs-common) — removed by upstream /usr/bin/.fipscheck.hmac (fipscheck) /usr/bin/protoize (gcc) /usr/bin/unprotoize (gcc) /usr/bin/gdbtui (gdb) /usr/bin/update-gdk-pixbuf-loaders (gdk-pixbuf2) /usr/bin/bdftops (ghostscript) /usr/bin/dumphint (ghostscript) /usr/bin/pdfopt (ghostscript) /usr/bin/pv.sh (ghostscript) /usr/bin/update-gio-modules (glib2) /usr/sbin/tzdata-update (glibc-common) /usr/bin/gpgkey2ssh (gnupg2) /sbin/grub (grub) /sbin/grub-crypt (grub) /sbin/grub-install (grub) /sbin/grub-md5-crypt (grub) /sbin/grub-terminfo (grub) /usr/bin/mbchk (grub) /sbin/umount.hal (hal) /usr/bin/hal-device (hal) /usr/bin/hal-disable-polling (hal) /usr/bin/hal-find-by-capability (hal) /usr/bin/hal-find-by-property (hal) /usr/bin/hal-get-property (hal) /usr/bin/hal-is-caller-locked-out (hal) /usr/bin/hal-lock (hal) /usr/bin/hal-set-property (hal) /usr/bin/hal-setup-keymap (hal) /usr/bin/lshal (hal) /usr/sbin/hald (hal) /sbin/fstab-decode (initscripts) /sbin/getkey (initscripts) /sbin/securetty (initscripts) /sbin/setsysfont (initscripts) /usr/sbin/togglesebool (libselinux-utils) /usr/bin/man2html (man) — man -H, see more "man man" and "man groff" /usr/sbin/makewhatis (man) /usr/bin/mcmfmt (mc) — removed by upstream /sbin/microcode_ctl (microcode_ctl) /sbin/mingetty (mingetty) — obsoleted by agetty:util-linux /sbin/insmod.static (module-init-tools) — not needed in kmod /sbin/nfs_cache_getent (nfs-utils) — not needed anymore by kernel /usr/bin/.ssh.hmac (openssh-clients) /usr/sbin/.sshd.hmac (openssh-server) /usr/bin/dprofpp (perl) — you can install Devel-DProf from CPAN /usr/bin/perl5.10.1 (perl) — newer version /usr/bin/lwp-rget (perl-libwww-perl) — not maintained anymore /usr/bin/rhgb-client (plymouth) — use plymouth /usr/sbin/open_init_pty (policycoreutils) — not needed anymore due to systemd /usr/sbin/run_init (policycoreutils) — not needed anymore due to systemd /usr/bin/mktap (python-twisted-core) — removed by upstream - broken in trunk /usr/bin/assistant_adp (qt-x11) /sbin/readahead (readahead) /sbin/readahead-collector (readahead) /usr/bin/rpmargs (rpmdevtools) — fakeroot is removed /usr/bin/rpmelfsym (rpmdevtools) — fakeroot is removed /usr/bin/rpmfile (rpmdevtools) — fakeroot is removed /usr/bin/rpmpeek (rpmdevtools) — fakeroot is removed /usr/bin/rpmsodiff (rpmdevtools) — fakeroot is removed /usr/bin/rpmsoname (rpmdevtools) — fakeroot is removed /sbin/scsi_id (udev) /sbin/start_udev (udev) /sbin/initctl (upstart) — functionality implemented in systemd /sbin/reload (upstart) — functionality implemented in systemd /sbin/restart (upstart) — functionality implemented in systemd /sbin/start (upstart) — functionality implemented in systemd /sbin/status (upstart) — functionality implemented in systemd /sbin/stop (upstart) — functionality implemented in systemd /sbin/mount.tmpfs (util-linux-ng) — see man 8 mount /usr/bin/ddate (util-linux-ng) — useless /usr/bin/floppy (util-linux-ng) — obsolete /usr/sbin/tunelp (util-linux-ng) — obsolete /sbin/vconfig (vconfig) — see man ip from iproute Utilities moved between packages (with same location): /bin/su (coreutils) -> (util-linux) /sbin/runuser (coreutils) -> (util-linux) /bin/cgclassify (libcgroup) -> (libcgroup-tools) /bin/cgcreate (libcgroup) -> (libcgroup-tools) /bin/cgdelete (libcgroup) -> (libcgroup-tools) /bin/cgexec (libcgroup) -> (libcgroup-tools) /bin/cgget (libcgroup) -> (libcgroup-tools) /bin/cgset (libcgroup) -> (libcgroup-tools) /bin/cgsnapshot (libcgroup) -> (libcgroup-tools) /bin/lscgroup (libcgroup) -> (libcgroup-tools) /bin/lssubsys (libcgroup) -> (libcgroup-tools) /sbin/cgclear (libcgroup) -> (libcgroup-tools) /sbin/cgconfigparser (libcgroup) -> (libcgroup-tools) /sbin/cgrulesengd (libcgroup) -> (libcgroup-tools) /sbin/matchpathcon (libselinux) -> (libselinux-utils) /sbin/blkdeactivate (lvm2) -> (device-mapper) /bin/mountpoint (sysvinit-tools) -> (util-linux) /sbin/sulogin (sysvinit-tools) -> (util-linux) Check packages from other variants admin /root/preupgrade/RHEL6_7/packages/InterVariants solution.txt Check packages from other variants Packages from different variants could be installed on system. Print these packages which are from other variants. Some Red Hat signed packages are appointed for different variant RHEL systems. In this case we don't support inplace upgrade to new RHEL-7 systems with these packages. These packages will be probably removed: ConsoleKit ConsoleKit-libs MAKEDEV ORBit2 PyXML Red_Hat_Enterprise_Linux-Release_Notes-6-en-US SOAPpy alsa-utils apr apr-util atk-devel atmel-firmware autoconf automake b43-fwcutter b43-openfwwf bfa-firmware bison busybox byacc cairo-devel cloog-ppl coreutils-libs cpuspeed cryptsetup-luks cryptsetup-luks-libs cscope ctags cvs cyrus-sasl-devel dash db4 db4-cxx db4-devel db4-utils dbus-devel diffstat doxygen dracut-kernel eggdbus eject emacs emacs-common expect fakeroot fakeroot-libs flex fontconfig-devel foomatic foomatic-db foomatic-db-filesystem foomatic-db-ppds freetype-devel gcc-c++ gcc-gfortran gdk-pixbuf2-devel gettext-devel gettext-libs git glib2-devel groff grub gtk2-devel hal hal-info hal-libs indent intltool iptables-ipv6 ipw2100-firmware ipw2200-firmware jna jpackage-utils kernel-firmware keyutils-libs-devel krb5-devel lcms-libs libICE-devel libIDL libSM-devel libX11-devel libXau-devel libXcomposite-devel libXcursor-devel libXdamage-devel libXext-devel libXfixes-devel libXft-devel libXi-devel libXinerama-devel libXmu-devel libXp-devel libXrandr-devel libXrender-devel libXt-devel libXtst-devel libXxf86vm-devel libart_lgpl libcom_err-devel libdrm-devel libertas-usb8388-firmware libgcj libgsf libgssglue libjpeg-turbo-devel libmng-devel libnih liboil libotf libpng-devel libproxy-bin libproxy-python libreport-compat libreport-plugin-kerneloops libreport-plugin-logger libselinux-devel libsepol-devel libstdc++-devel libtool libudev libusb1 libvirt-devel libvirt-java libvirt-java-devel libxcb-devel libxml2-devel m17n-db m17n-db-datafiles m17n-lib man mc mesa-dri-filesystem mesa-dri1-drivers mesa-libGL-devel mesa-libGLU mesa-libGLU-devel mesa-libGLw mesa-libGLw-devel mingetty module-init-tools mysql-libs nc ncurses-devel neon nfs-utils-lib nspr-devel nss-devel nss-softokn-devel nss-softokn-freebl-devel nss-util-devel numactl openldap-devel openmotif openmotif-devel openscap openscap-scanner openscap-utils openssl-devel pakchois pam-devel pam_passwdqc pango-devel patchutils pcmciautils perl-Compress-Zlib perl-Error perl-Git perl-IO-Compress-Base perl-IO-Compress-Zlib pixman-devel portreserve ppl procmail procps python-argparse python-fpconst python-iwlib python-twisted-core python-twisted-web python-zope-filesystem python-zope-interface ql2100-firmware ql2200-firmware ql23xx-firmware ql2400-firmware ql2500-firmware qt-devel qt-sqlite qt3 qt3-devel rcs readahead redhat-lsb redhat-lsb-compat redhat-lsb-graphics redhat-lsb-printing redhat-release-server redhat-rpm-config rpm-build rpmdevtools rt61pci-firmware rt73usb-firmware screen sendmail subversion swig system-config-firewall-tui system-config-network-tui tcl udev upstart util-linux-ng vconfig wireless-tools xorg-x11-docs xorg-x11-drv-ati-firmware xorg-x11-proto-devel xz-lzma-compat yum-plugin-security zd1211-firmware zlib-devel Packages not signed by Red Hat admin /root/preupgrade/RHEL6_7/packages/NonRHSignedPkg solution.txt Packages not signed by Red Hat Packages not signed by Red Hat will not be upgraded Packages which are not signed with the official Red Hat keys will not be upgraded. These packages are typically provided by third parties or have been modified in some way. There is a high risk of incompatibility with these packages as they have not been verified by Red Hat. For upgrade assistance, contact the vendors of these packages. You can find a list of all unsigned packages including the vendor names in the kickstart/nonrhpkgs file. Obsoleted rpms admin /root/preupgrade/RHEL6_7/packages/ObsoletedPackages solution.txt Obsoleted rpms Some rpms were obsoleted from the set of the packages between RHEL 6 and RHEL 7. This content checks for the package obsoletes from your set of Red Hat packages. Some packages were obsoleted between RHEL 6 and RHEL 7. Red Hat provides alternatives for them, but these alternatives may not be 100% compatible. Because of this, we don't replace them automatically. For some of the obsoleted packages you will get the incompatibilities list from separate preupgrade contents and you can adjust your migration or upgrade as required. Sometimes, the functionality of a package requires more than one new package to acheive the same functionality. Please Note: All packages from the debug repositories are skipped and Red Hat recommends that you remove them before upgrade. The following packages are obsoleted and replaced by new ones: ConsoleKit was obsoleted by systemd cpuspeed was obsoleted by kernel-tools,kernel eggdbus was obsoleted by glib2 grub was obsoleted by grub2 hal was obsoleted by systemd mingetty was obsoleted by util-linux mysql-libs was obsoleted by mariadb-libs nc was obsoleted by nmap-ncat pam_passwdqc was obsoleted by libpwquality readahead was obsoleted by systemd udev was obsoleted by systemd upstart was obsoleted by systemd vconfig was obsoleted by iproute If a Non Red Hat signed package requires these packages, you may need to check if the alternative solution provided by Red Hat works for you. You may need to get the missing package from a source other than the RHEL repositories. You will need to install these new packages yourself after the assessment, as Red Hat cannot assess the suitablility of the replacements for your workload. w3m not available in Red Hat Enterprise Linux 7 admin /root/preupgrade/RHEL6_7/packages/ObsoletedW3m solution.txt w3m not available in Red Hat Enterprise Linux 7 The w3m package is not available in Red Hat Enterprise Linux 7. The w3m package is not available for Red Hat Enterprise Linux 7. Red Hat provides the Lynx and ELinks text-based web browsers. They provide similar features to the w3m browser, however their syntax is different. As a consequence, a change of workflow might be required after the upgrade. report incompatibilities between Red Hat Enterprise Linux 6 and 7 in qemu-guest-agent package admin /root/preupgrade/RHEL6_7/packages/QemuGuestAgent solution.txt report incompatibilities between Red Hat Enterprise Linux 6 and 7 in qemu-guest-agent package Report incompatibilities between Red Hat Enterprise Linux 6 and 7 in qemu-guest-agent package. The service name for qemu-guest-agent was modified in Red Hat Enterprise Linux 7 from qemu-ga to qemu-guest-agent. Please make sure that you modify the scripts that might use the old service name. The main hook script location was modified in Red Hat Enterprise Linux 7 from /usr/libexec/qemu-ga/fsfreeze-hook to /etc/qemu-ga/fsfreeze-hook. The default hook log file location was modified in Red Hat Enterprise Linux 7 from /var/log/qemu-ga/fsfreeze-hook.log to /var/log/qemu-ga/fsfreeze-hook.log. The app-specific hook script directory location was modified in Red Hat Enterprise Linux 7 from /usr/libexec/qemu-ga/fsfreeze-hook.d to the following three locations listed in the decreasing order of precedence: /run/qemu-ga/fsfreeze-hook.d /etc/qemu-ga/fsfreeze-hook.d /lib/qemu-ga/fsfreeze-hook.d The format of guest agent config file /etc/sysconfig/qemu-ga was modified in Red Hat Enterprise Linux 7 from shell script to systemd environment file. Only the BLACKLIST_RPC and FSFREEZE_HOOK_PATHNAME options remain valid. The option FSFREEZE_HOOK_ENABLE was merged with the FSFREEZE_HOOK_PATHNAME settings. The port settings for virtio-serial were moved to /usr/lib/systemd/system/qemu-guest-agent.service and /usr/lib/udev/rules.d/99-qemu-guest-agent.rules files -- the systemd daemon needs to be reloaded with 'systemctl daemon-reload' command in order to apply the changes. The option for PID file was removed as with the systemd, there is no longer any need for PID files. The option for log file was removed as the systemd journal is used for logging purposes. Please note the new locations of all the files and configuration options and update your scripts that use the old locations accordingly. Removed options in packages Removed Options in coreutils admin /root/preupgrade/RHEL6_7/packages/RemovedOptions/coreutils solution.txt Removed Options in coreutils Some options and binary files were removed from the coreutils packages between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. A number of options and binary files have been removed from the coreutils packages in Red Hat Enterprise Linux 7. The functionality of some scripts can be affected. This is a complete list of removed options and binary files, including the solutions and new options: * For the "factor" invocation, the "--verbose" option has been renamed to "--debug". * For the "install" invocation, the "--preserve_context" option has been removed. The "--preserve-context" option can be used instead. * For the "nl" invocation, the "--page-increment" option, which was deprecated in Red Hat Enterprise Linux 6, has been removed. The "--line-increment" option can be used instead. * The "runuser" and "su" binaries have been moved to the util-linux package. * For the "stat" invocation, the "--context" option and its short form, "-Z", have been removed. SELinux context is now a part of the stat default output format. * For the "mkdir", "mknod", "mkfifo", "cp", and "install" invocations, the "-Z" option no longer accepts any arguments and automatically sets the default SELinux setting context. To set a specific context, the "--context=[context]" option has to be used. * For the "touch" invocation, the deprecated "--file" option has been removed. The "--reference" option can be used instead. Please verify that your scripts have been updated to work with these changes. Removed options in gawk binaries admin /root/preupgrade/RHEL6_7/packages/RemovedOptions/gawk solution.txt Removed options in gawk binaries Some options and binaries were removed from gawk package between RHEL 6 and RHEL 7. This informative content lists the incompatibilities. Some options were removed from gawk package binaries between RHEL 6 and RHEL 7. This may break functionality of some of your scripts. All option removals with solutions are listed bellow. awk/gawk/pgawk: --compat - option was removed, alternative is --traditional --copyleft - option was removed, alternative is --copyright/-C --gen-po - option was replaced by --gen-pot option --usage -D - short form of --parsedebug was changed to -Y Please check that your scripts are aware of these changes. Removed options in grep binaries admin /root/preupgrade/RHEL6_7/packages/RemovedOptions/grep solution.txt Removed options in grep binaries Some commandline options are removed or deprecated in packages. Print list of changes. Option "-K" was removed from grep, egrep and fgrep utilities on RHEL 7 system. This option wasn't docummented before on RHEL 6. Removed options in netstat binary admin /root/preupgrade/RHEL6_7/packages/RemovedOptions/nettools solution.txt Removed options in netstat binary Some options were removed from netstat binary between RHEL 6 and RHEL 7. This informative content lists the incompatibilities. Some options were removed from netstat binary of net-tools package between RHEL 6 and RHEL 7. This may break functionality of some of your scripts. All option removals with solutions are listed bellow. netstat : -T/--notrim renamed to -W/--wide Please check that your scripts are aware of these changes. Removed options in quota tools admin /root/preupgrade/RHEL6_7/packages/RemovedOptions/quota solution.txt Removed options in quota tools Some options have been renamed at quota tools between Red Hat Enterprise 6 and 7. This informative content lists the incompatibilities. Some options were renamed at quota tools between Red Hat Enterprise Linux 6 and 7. This may break functionality of some of your scripts. The changes are: /usr/bin/quota: Option --nfs-all was corrected to --all-nfs in the usage help output. Both versions still recognize the --all-nfs option. /usr/sbin/quota_nld: Option --no-daemon was renamed to --foreground. Short option -F is unchanged. This is not an issue if you run quota_nld as daemon, e.g. via init script. /usr/sbin/repquota: Option --batch-translation was corrected to --cache in the usage help output. Both versions still recognize the --cache option. /usr/sbin/repquota: Option --no-batch-translation was corrected to --no-cache in the usage help output. Both versions still recognize the --no-cache option. Please check that your scripts are aware of these changes. Removed or deprecated options in util-linux (util-linux-ng) binaries admin /root/preupgrade/RHEL6_7/packages/RemovedOptions/util-linux solution.txt Removed or deprecated options in util-linux (util-linux-ng) binaries Some commandline options are removed or deprecated in some packages. Print list of changes for util-linux. Some options were removed or deprecated from util-linux-ng (on RHEL 7 is renamed back to util-linux) package binaries between RHEL 6 and RHEL 7. This may break functionality of some of your scripts. All option removals with solutions are listed bellow. blkid: -w - options is deprecated (undocumented on RHEL7) fallocate: --lenght - replaced by --length findmnt --fsroot - replaced by --nofsroot losetup: -s - short option removed, available only --show mount: -p, --pass-fd - options are deprecated (undcummented on RHEL7) partx: --gpt - undocumented and removed readprofile: -t - removed sfdisk: -? - replaced by -h blkid,fsck,hexdump,hwclock,mkfs,mount,renice: -v is deprecated and replaced by -V (print version) Removed rpms admin /root/preupgrade/RHEL6_7/packages/RemovedPackages solution.txt Removed rpms Some rpms were removed from the set of the packages between RHEL 6 and RHEL 7. This content checks for the package removals from your set of Red Hat packages. Some of the packages were removed between RHEL 6 and RHEL 7. This may break the upgrade for some of your packages. We are not aware of any compatible replacement for these packages. Following packages are no longer available: ConsoleKit-libs MAKEDEV SOAPpy atmel-firmware b43-fwcutter b43-openfwwf kexec-tools gcc dracut rpmdevtools fakeroot hal hal ipw2100-firmware ipw2200-firmware lcms-libs libertas-usb8388-firmware libgcj nfs-utils-lib libnih mesa-dri-drivers pcmciautils ppl nfs-utils system-config-network-tui python-zope-interface system-config-network-tui python-iwlib zd1211-firmware If some NonRH signed package requires these packages, you may need to ask your vendor to provide alternative solution or get the missing package from different sources than RHEL. taskjuggler not available in Red Hat Enterprise Linux 7 admin /root/preupgrade/RHEL6_7/packages/RemovedTaskjuggler solution.txt taskjuggler not available in Red Hat Enterprise Linux 7 The taskjuggler packages are not available in Red Hat Enterprise Linux 7. The taskjuggler and taskjuggler-libs packages are not available for Red Hat Enterprise Linux 7. Upstream stopped support for taskjuggler 2 ( as the rewrite to QT 4 is not an easy task) and taskjuggler 3 written in ruby is not compatible. Unfortunately, there is no replacement supported by Red Hat. If your processes require these packages, you may either compile the kdelibs 3 and kdepim 3 stack (bringing QT3 stuff into RHEL 7) or migrate to taskjuggler 3 (from upstream, www.taskjuggler.org). Replaced rpms admin /root/preupgrade/RHEL6_7/packages/ReplacedPackages solution.txt Replaced rpms Some rpms were replaced between RHEL 6 and RHEL 7. This content checks for the package replacements from your set of Red Hat packages and generates the list of replaced RH packages for RHEL 7 kickstart. Between RHEL 6 and RHEL 7, some packages have either been replaced or renamed. Replacement packages are compatible with previous versions. In some cases, preupgrade assistant will migrate the package after the upgrade has completed. Please Note: This tool will not check debug repositories. Red Hat recommends that all debuginfo packages are removed before upgrade and manually reinstalled as required on the upgraded system. The following packages were replaced: redhat-lsb-graphics was replaced by redhat-lsb-desktop perl-Compress-Zlib was replaced by perl-IO-Compress db4-utils was replaced by libdb-utils Red_Hat_Enterprise_Linux-Release_Notes-6-en-US was replaced by Red_Hat_Enterprise_Linux-Release_Notes-7-en-US man was replaced by man-db db4-cxx was replaced by libdb-cxx (optional channel in RHEL 7) xorg-x11-drv-ati-firmware was replaced by linux-firmware rt73usb-firmware was replaced by linux-firmware perl-IO-Compress-Base was replaced by perl-IO-Compress jpackage-utils was replaced by javapackages-tools openmotif was replaced by motif cryptsetup-luks-libs was replaced by cryptsetup-libs dracut-kernel was replaced by dracut qt-sqlite was replaced by qt mesa-dri-filesystem was replaced by mesa-filesystem perl-IO-Compress-Zlib was replaced by perl-IO-Compress db4 was replaced by libdb procps was replaced by procps-ng db4-devel was replaced by libdb-devel module-init-tools was replaced by kmod libusb1 was replaced by libusbx nfs-utils-lib was replaced by libnfsidmap iptables-ipv6 was replaced by iptables-services kernel-firmware was replaced by linux-firmware bfa-firmware was replaced by linux-firmware yum-plugin-security was replaced by yum ql2400-firmware was replaced by linux-firmware ql2100-firmware was replaced by linux-firmware ql2500-firmware was replaced by linux-firmware rt61pci-firmware was replaced by linux-firmware ql2200-firmware was replaced by linux-firmware util-linux-ng was replaced by util-linux cryptsetup-luks was replaced by cryptsetup redhat-lsb-compat was replaced by redhat-lsb-core m17n-db-datafiles was replaced by m17n-db-extras (optional channel in RHEL 7) openmotif-devel was replaced by motif-devel libudev was replaced by systemd-libs eject was replaced by util-linux ql23xx-firmware was replaced by linux-firmware coreutils-libs was replaced by coreutils If a Non Red Hat signed package requires these packages, you may want to monitor them closely. Although the replacement should be compatible, it may have some minor differences, even in the case of common application lifecycles. One or more replacement packages are available only in other repositories. You need to provide these repositories to make the upgrade or migration successful. Be aware, that for in-place upgrades, only the optional repository is supported. Packages from other repositories should be removed first. For this purpose, if you want to upgrade, use the following additional option to redhat-upgrade-tool: --addrepo rhel-7-optional=<path to the optional repository> Alternatively, you could remove all packages where the replacement is part of the RHEL 7 Optional repository before you start the system upgrade. If you want to migrate, you will need register your machine with subscription-manager after the first boot of your new system and attach subscriptions that provide: Red Hat Enterprise Linux 7 Server (RPMs) Then you must enable any equivalent repositories (if they are disabled) and install any needed packages. For this purpose, you can run a prepared script: /root/preupgrade/kickstart/noauto_postupgrade.d/install_rpmlist.sh /root/preupgrade/kickstart/RHRHEL7rpmlist_replaced-notbase which will install any remaining packages from these repositories. Please Note: The repositories listed above may not be exhaustive and we are unable to confirm whther further repositories are needed for some packages. This problem is already under consideration for a future fix. GMP library incompatibilities admin /root/preupgrade/RHEL6_7/packages/gmp solution.txt GMP library incompatibilities Incompatibilities between GMP 4 and GMP 5.1 libraries. GMP 6 is compatible with GMP 4 in major features. Incompatible changes affect only functions, which should not be used by user applications at all: - mpn_bdivmod function - BSDMP-like interface libmp.so Packages providing 'java' changed admin /root/preupgrade/RHEL6_7/packages/java-provide solution.txt Packages providing 'java' changed Install java after upgrade if java is currently installed In Red Hat Enterprise Linux 7, different rpm packages provide 'java' than in Red Hat Enterprise Linux 6. This can cause missing 'java' virtual provide on upgraded system and break 3rd party packages that depend on 'java'. Postupgrade script will install java after upgrade. RHEL not-base channels required admin /root/preupgrade/RHEL6_7/packages/notbase-channel solution.txt RHEL not-base channels required Detects upgrade problems with RHEL 'not-base' channels Some installed packages are either from outside of the base channel for Red Hat Enterprise Linux 6, or replaced by a package in a RHEL 7 non base channel. Repositories such as 'Optional' will cause this message. This will probably cause a failure in the upgrade of your system. The following packages are affected: SOAPpy (optional channel) groff (optional channel) liboil (optional channel) libproxy-bin (optional channel) libproxy-python (optional channel) libreport-compat (optional channel) libreport-plugin-kerneloops (optional channel) libreport-plugin-logger (optional channel) openscap-engine-sce (optional channel) python-fpconst (optional channel) python-twisted-core (optional channel) python-twisted-web (optional channel) python-zope-interface (optional channel) system-config-firewall-tui (optional channel) xz-lzma-compat (optional channel) To enable the updating of packages that are now located in the RHEL 7 Optional repository, please provide the location of the Optional channel repository to redhat-upgrade-tool. The syntax for the additional parameter is: --addrepo rhel-7-optional=<path to the optional repository> Alternatively, you could remove all packages which reside in the RHEL 7 Optional repository before starting the system upgrade. One or more packages are available only in other repositories. If you want to install them later, you will need to attach subscriptions that provide: Red Hat Enterprise Linux 7 Server (RPMs) Then you must enable any equivalent repositories (if they are disabled) and install any needed packages. For this purpose, you can run a prepared script: /root/preupgrade/kickstart/noauto_postupgrade.d/install_rpmlist.sh <some-rpmlist-file> Please Note: The repositories listed above may not be exhaustive and we are unable to confirm whther further repositories are needed for some packages. This problem is already under consideration for a future fix. package downgrades admin /root/preupgrade/RHEL6_7/packages/pkgdowngrades solution.txt package downgrades detects package downgrades from RHEL6 to RHEL7 Some packages installed on your system have broken upgrade path from Red Hat Enterprise Linux version 6 to version 7 (the version of package is lower in newer Enterprise Linux). This does not cause fail of redhat-upgrade-tool run and it could potentially left system in inconsistent state (mixed RHEL 6 and RHEL 7 packages installed). Pre-upgrade scripts makes best effort to force redhat-upgrade-tool in-place upgrade process install packages with broken upgrade path but you should be aware of that and know what is happening. Optionally, if possible, you may remove packages in question from RHEL 6 system. SELinux issues SELinux Custom Policy admin /root/preupgrade/RHEL6_7/selinux/CustomPolicy solution.txt SELinux Custom Policy Solve problem with custom SE policy modules after migration Custom SELinux policy modules couldn't be found by sesearch. This is fixed by removing selinux module sandbox.pp which is repalced by sandboxX.pp and is disabled by default on RHEL7 systems. This solve some other issues between sandbox.pp and sandboxX.pp too. So module is removed be default now by postcript: /root/preupgrade/postupgrade.d/fix_SELinuxCustomPolicy.sh restore custom selinux configuration admin /root/preupgrade/RHEL6_7/selinux/RestoreConfig solution.txt restore custom selinux configuration Content with postupgrade script that restores custom selinux configuration. Custom SELinux configuration options managed by semanage command are lost after upgrade. This preupgrade assistant content stores the custom configuration options, restores them once the upgrade is complete and issues the SELinux relabel mechanism upon the next reboot to accomodate the possible changes that might have been raised by these modifications. No manual user action is necessary upon upgrade. General admin /root/preupgrade/RHEL6_7/selinux/general solution.txt General There has to be some steps performed in order to have working SELinux on RHEL 7. We have detected that you are using SELinux. There were changes in policies which require to apply custom command before upgrade process. In order to have working SELinux on Red Hat Enterprise Linux 7, you HAVE TO run command prior to running redhat-upgrade-tool: semodule -r sandbox samba shared directories selinux admin /root/preupgrade/RHEL6_7/selinux/samba solution.txt samba shared directories selinux Samba shared directories that might need their selinux context restored. We found some samba shared directories. These should be labelled as samba_shared_t, unless they are system directories, which should carry some another label. Since autorelabel will be performed after upgrade, please check if they are labelled correctly on the upgraded system. Services CUPS Browsing/BrowsePoll configuration admin /root/preupgrade/RHEL6_7/services/cupsbrowsing solution.txt CUPS Browsing/BrowsePoll configuration The CUPS Browsing and BrowsePoll configuration directives have been removed from CUPS. A replacement is provided in the form of the cups-browsed service. File(s) affected: /etc/cups/cupsd.conf The Browsing and BrowsePoll configuration directives have been removed from CUPS. The cups-browsed service replaces these two directives. This module identifies possible incompatibilities in the configuration file. The browsing configuration using the CUPS Browsing protocol has been migrated to the cleanconf/etc/cups/cups-browsed.conf file, and the cups-browsed service will be enabled after upgrade. CVS Package Split admin /root/preupgrade/RHEL6_7/services/cvs solution.txt CVS Package Split Some Concurrent Versions System (CVS) tools and documentation have been moved into separate packages and are no longer provided by the cvs packages. The Concurrent Versions System (CVS) server and client have not been changed significantly and should be fully compatible. However, some tools and documentation have been moved to other packages which could concern some users. The rcs2log and contrib utilities have been moved into the new cvs-contrib packages in order to remove the cvs packages dependency on perl and reduce the size of the cvs packages. If you require the rcs2log and contrib tools, you can install the packages manually by running the "yum install cvs-contrib" command as root. Additional documentation, such as books concerning CVS tools in the PDF format and revision control system (RCS) specification files, has been moved into the new cvs-doc package to reduce the size of the cvs packages. If you want to access this additional documentation, install the package manually by running the "yum install cvs-doc" command as root. The manual and Texinfo pages are still included in the cvs packages. These utilities and the supplemental documentation are not used by the CVS client or server. Their absence does not pose a risk when upgrading the cvs packages. FreeRADIUS Upgrade Verification admin /root/preupgrade/RHEL6_7/services/freeradius solution.txt FreeRADIUS Upgrade Verification This module determines if there is a version of the FreeRADIUS service prior to version 3.x installed on the system. These earlier versions have an incompatible configuration and need to be configured manually using the resources mentioned below. Red Hat Enterprise Linux 7 contains the FreeRADIUS service version 3.x, which is a major version upgrade from version 2.x on Red Hat Enterprise Linux 6. The configuration of the FreeRADIUS service version 3.x is not compatible with version 2.x. There are no automated mechanisms to convert a FreeRADIUS 2.x configuration into a FreeRADIUS 3.x configuration, therefore the conversion must be performed manually by an experienced administrator. The user is advised to install the default FreeRADIUS configuration and make incremental changes while testing each minor alteration. Placing the FreeRADIUS configuration files located in the /etc/raddb/ directory under version control is recommended. Using a source code management (SCM) tool, such as Git or Apache Subversion, enables the user to track changes over time. Available resources for performing the upgrade include the following: * Files located in the /usr/share/doc/freeradius*/ directories. Many of these documents are installed by the freeradius-doc subpackage. It is recommended that you install this package. * The FreeRADIUS man pages, especially unlang(5), and radiusd.conf(5). To see a list of available manpages, run the "man -k radius" command. * The in-line comments located within the configuration files in the /etc/raddb/ directory. This is where the majority of the FreeRADIUS documentation can be found, and it is of vital importance to read the contents of the configuration files. * The upstream website http://freeradius.org and especially the wiki located at wiki.freeradius.org * The FreeRADIUS users mailing list available at: http://lists.freeradius.org/mailman/listinfo/freeradius-users * Further information at: http://freeradius.org/version3.html and https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/raddb/README.rst httpd configuration compatibility check admin /root/preupgrade/RHEL6_7/services/httpd solution.txt httpd configuration compatibility check Checks httpd configuration compatibility File(s) affected: /etc/httpd/conf/httpd.conf IPA (Identity-Policy-Audit) bind-dyndb-ldap admin /root/preupgrade/RHEL6_7/services/ipa/bind-dyndb-ldap solution.txt bind-dyndb-ldap Check configuration file for bind-dyndb-ldap plug-in. File(s) affected: /etc/named.conf Identity Management Server compatibility check admin /root/preupgrade/RHEL6_7/services/ipa/ipa-server solution_risk.txt Identity Management Server compatibility check Checks Identity Management Server (IPA) configuration compatibility File(s) affected: /etc/ipa/default.conf This machine has Identity Management Server (IPA) configured. Unfortunatelly, IPA does not support in-place upgrade between RHEL 6 and RHEL 7 major versions and needs to be migrated. Please refer to the following Knowledge Base article for detailed instructions how to migrate Identity Management Server: https://access.redhat.com/site/articles/894063 IPA Server CA Verification admin /root/preupgrade/RHEL6_7/services/ipa/pki-ca solution.txt IPA Server CA Verification This module verifies the IPA CA configuration compatibility. File(s) affected: /etc/sysconfig/pki/ca/* Identity, Policy and Audit (IPA) installations that use a Certificate Authority (CA) provided by the pki-ca package are not able to be upgraded in-place between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. This module verifies whether there is an IPA CA installed, in which case you need to upgrade the IPA installation manually. For detailed instructions on how to upgrade an IPA installation, please refer to the following Knowledge Base article: https://access.redhat.com/site/articles/894063 NTP NTP configuration admin /root/preupgrade/RHEL6_7/services/ntp/configuration solution.txt NTP configuration Save ntp and ntpdate configuration files which are not tracked by rpm. File(s) affected: /etc/ntp.conf /etc/ntp/step-tickers Information on time-sync.target admin /root/preupgrade/RHEL6_7/services/ntp/timesync solution.txt Information on time-sync.target Check if ntpdate service is enabled and print information on starting services with clock set The ntpdate service is enabled on this system. In RHEL7 the system services are managed by systemd, which starts services in parallel unless an ordering dependency is specified. If you have a service that needs to be started after the system clock was set by ntpdate, in RHEL7 you will need to add "After=time-sync.target" to the systemd unit file of the service. The time-sync target is provided also by other services available in RHEL7. They they can be used as a replacement of the ntpdate service. The services are ntp-wait from package ntp-perl (which waits until the ntpd service has synchronized the clock), sntp service from package sntp, and chrony-wait service from package chrony (which waits until the chronyd service has synchronized the clock). Please see RHEL7 System Administrator's Guide for more information. OpenLDAP /etc/sysconfig and data compatibility admin /root/preupgrade/RHEL6_7/services/openldap solution.txt OpenLDAP /etc/sysconfig and data compatibility Some shell variables and minor syntax have been changed in the OpenLDAP sysconfig file between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. This module detects such changes and advices the user with possible solution. The module also advices the user on how to proceed with a database upgrade. File(s) affected: /etc/sysconfig/ldap OpenSSH OpenSSH sshd_config migration content admin /root/preupgrade/RHEL6_7/services/openssh/sshd solution-sshd.txt OpenSSH sshd_config migration content This content has a aim to convert /etc/ssh/sshd_config file from openssh-server package File(s) affected: /etc/ssh/sshd_config OpenSSH sysconfig migration content admin /root/preupgrade/RHEL6_7/services/openssh/sysconfig solution-sysconfig.txt OpenSSH sysconfig migration content This content has a aim to convert /etc/sysconfig/sshd file from openssh-server package File(s) affected: /etc/sysconfig/sshd /etc/sysconfig/sshd will not be a shell script in RHEL 7 anymore so all 'export VARIABLE=VALUE' has to be changed to 'VARIABLE=VALUE'. # sed -i 's/^export //' /etc/sysconfig/sshd There is the /root/preupgrade/cleanconf//etc/sysconfig/sshd with the fixed configuration. Quota NLD Configuration for quota_nld service admin /root/preupgrade/RHEL6_7/services/quota_nld/configuration solution.txt Configuration for quota_nld service Back configuration for quota_nld service up File(s) affected: /etc/sysconfig/quota_nld quota_nld service configuration is fully compatible. Service is in factory settings. Default configuration will be used on the new system. Disk quota netlink message daemon moved into quota-nld package admin /root/preupgrade/RHEL6_7/services/quota_nld/new_package solution.txt Disk quota netlink message daemon moved into quota-nld package Install quota-nld package if the quota_nld service is enabled Quota netlink daemon has been moved from "quota" package into "quota-nld" package. "quota_nld" service is not enabled on the old system. "quota-nld" package will not be installed into the new system. SSSD compatibility check admin /root/preupgrade/RHEL6_7/services/sssd solution.txt SSSD compatibility check 'Checks sssd configuration compatibility' File(s) affected: /etc/sssd/sssd.conf Storage Detect LUKS devices using Whirlpool for password hash. admin /root/preupgrade/RHEL6_7/storage/cryptsetup-luks solution.txt Detect LUKS devices using Whirlpool for password hash. 'Whirlpool hash implementation in libgcrypt of version <= 1.5.3 is broken. This content checks current system for presence of LUKS devices possibly using the bogus hash. In target system libgcrypt library is patched to use correct implementation so after reboot the freshly updated system may remain with LUKS devices imposibble to unlock.' File(s) affected: /etc/crypttab The libgcrypt library in RHEL6 has a flaw in Whirlpool algorithm implementation. The bug is fixed in later version of the library included with RHEL7. LUKS containers created using the libgcrypt present in RHEL6 can't be unlocked using the one present in RHEL7 unless GCRYPT_WHIRLPOOL_BUG environmental variable is set. For optional LUKS containers (not involved in system boot) it's not a critical obstacle and admins can unlock such containers using the enviromnetale variable above. The situation is different when we deal with mandatory volumes: In case the preupgrade script has detected the Whirlpool hash in one of volumes involved in the system boot (any volume listed in configuration file /etc/crypttab), it's considered to be a blocking event for in-place upgrade to continue. We strongly recommend to rehash the LUKS header using the cryptsetup-reencrypt package added to RHEL6.6 and later. Example command for rehashing the LUKS header without changing the master key: # cryptsetup-reencrypt -h sha1 --keep-key <path_to_luks_device> Supply a device identified to be using the Whirlpool hash instead of pattern: <path_to_luks_device>. sha1 is recommended hash function for LUKS headers in RHEL6 and also in RHEL7. We recommend to rehash also all optional volumes. Clvmd and cmirrord daemon management. admin /root/preupgrade/RHEL6_7/storage/lvm2-cluster solution.txt Clvmd and cmirrord daemon management. The clvmd and cmirrord daemon needs to be defined as 'clvm' cluster resource instead of running it as a system service. The only supported and official way of running clvmd and cmirrord daemon in RHEL7 is to have these daemons managed by cluster resource manager directly (e.g. using the pacemaker) instead of running it as a system service defined by an initscript or a systemd unit. Therefore, the lvm2-cluster (where clvmd daemon is packaged) and the cmirror package (where cmirrord daemon is packaged) now requires the resource-agents package which contains a resource named 'clvm'. The clvm resource provides both clvmd and cmirrord daemon management. The cmirrord is an optional part of the clvm resource and it can be enabled by using 'with_cmirrord=1' parameter when setting up the this resource. See the clvm resource description for more information (e.g. by running 'pcs resource describe ocf:heartbeat:clvm') Although there is still a possibility to run the clvmd and cmirrord daemon as a standalone system service without a need for cluster resource manager, such a setup should be used for testing purposes only and it should not be used in production. For this scenario, the new and optional packages called lvm2-cluster-standalone and cmirror-standalone contain respective systemd units to run clvmd (via lvm2-cluster-activation.service) and cmirrord (via lvm2-cmirrord.service) as standalone system services without cluster resource manager involvement. State of LVM2 services. admin /root/preupgrade/RHEL6_7/storage/lvm2-services solution.txt State of LVM2 services. Some services are important for proper LVM functionality. This content checks for current state of existing services and makes sure the state is preserved over upgrade. Also, some systemd units should be enabled by default to allow for service's on-demand activation if needed. RHEL7 uses systemd for service management. When upgrading from RHEL6, we need to be sure that certain services (systemd units) are enabled or prepared for on-demand activation. The LVM2 monitoring service inherits the old state, which means that if the 'lvm2-monitor' service was enabled in RHEL6, it will also be enabled in RHEL7 (lvm2-monitor.service) and vice versa. In addition to that these systemd units are enabled to allow for on-demand service activation: dm-event.socket lvm2-lvmetad.socket The dm-event.socket is used for on-demand activation of dm-event.service. This is an essential part of device-mapper monitoring feature (which also covers monitoring of LVM devices). The lvm2-lvmetad.socket is used for on-demand activation of lvm2-lvmetad.service which starts the lvmetad - LVM metadata daemon that is used to cache LVM metadata so LVM commands don't need to scan devices all the time and they can reuse cached metadata. This functionality is used by default in RHEL7. device-mapper-multipath configuration compatibility check admin /root/preupgrade/RHEL6_7/storage/multipath solution.txt device-mapper-multipath configuration compatibility check Checks multipath configuration compatibility. Also, removes old udev multipath rules. File(s) affected: /etc/multipath.conf In RHEL7, multipath no longer uses the getuid_callout to determine the wwid of a multipath device. Instead is gets the value from the udev environment, using the attribute defined by the uid_attribute configuration parameter. Multipath will issue warnings if /etc/multipath.conf defines getuid_callout in RHEL7, and will use the built-in value for uid_attribute instead. The way multipath determines if a user defined device configuration should modify a builtin device configuration or create a new device configuration has changed in RHEL7. By default in RHEL6, the user config only modified a builtin one if the vendor, product, and revision strings of the user configuration exactly matched the vendor, product and revision strings in the built-in configuration. However, the vendor, product, and revision strings are interpreted as regular expressions in order to determine which configuration to use with a particular device. In RHEL7 this same regular expression matching is used to determine whether or not a user defined device config should modify a builtin device config. If the user config's vendor, product, and revision strings regex-match a builtin device config's vendor, product and revision regular expressions, then it modifies the existing config. This means that in RHEL6, user device configs sometimes needed to user regular expressions as their vendor, product, and revision strings. In RHEL7, these should be plain strings. On upgrade, "hw_str_match yes" will be added to the defaults section of /etc/multipath.conf to force multipath to use the RHEL6 behavior, if necessary. The default multipath.conf file used on fresh RHEL7 installs enables find_multipaths by default. This will not be set on upgrades from RHEL6. A number of builtin configuration settings have changed in RHEL7. These changes were designed to improve performance in the general case. However, they may not be optimal for every configuration. Users who were using the builtin configurations for their devices should verify that the new defaults still work well for them. Removal of scsi-target-utils admin /root/preupgrade/RHEL6_7/storage/tgtd solution.txt Removal of scsi-target-utils The scsi-target-utils packages are no longer available in Red Hat Enterprise Linux 7. File(s) affected: /etc/tgt/targets.conf Red Hat Enterprise Linux 7 now uses the LIO kernel target for the Internet Small Computer System Interface (iSCSI) target capability. Red Hat Enterprise Linux 7 is configured using the targetcli packages. The scsi-target-utils packages are no longer available, and the configuration needs to be modified for Red Hat Enterprise Linux 7. Warnquota contents for migration Configuration for warnquota tool admin /root/preupgrade/RHEL6_7/storage/warnquota/configuration solution.txt Configuration for warnquota tool Back configuration for warnquota tool up File(s) affected: /etc/quotagrpadmins /etc/quotatab /etc/warnquota.conf warnquota tool configuration is fully compatible. /etc/quotagrpadmins has not been changed. Default configuration file will be used on the new system. /etc/quotatab has not been changed. Default configuration file will be used on the new system. /etc/warnquota.conf has not been changed. Default configuration file will be used on the new system. Disk quota tool warnquota moved into quota-warnquota package admin /root/preupgrade/RHEL6_7/storage/warnquota/new_package solution.txt Disk quota tool warnquota moved into quota-warnquota package Install quota-warnquota if need warnquota tool Quota tool warnquota(8) has been moved from "quota" package into "quota-warnquota" package. If you used warnquota on the old system, please install quota-warnquota package with this command on the new system: # yum --assumeyes install quota-warnquota Please do not forget to check warnquota configutation files (/etc/quotagrpadmins, /etc/quotatab, and /etc/warnquota.conf) before using the tool. Please do not forget to install a cron job to execute the warnquota tool periodically, if you used it on the the old system. System Check for Add-On availability admin /root/preupgrade/RHEL6_7/system/AddOns addons.txt Check for Add-On availability Content checks availability of High Availability, ResilientStorage and LoadBalancer Add-Ons. The following Add-Ons were detected on the system. Architecture Support admin /root/preupgrade/RHEL6_7/system/Architecture solution.txt Architecture Support Red Hat Enterprise Linux 7 does not support installations on 32-bit architectures, and performing an in-place upgrade is not possible on 32-bit systems. Only 64-bit systems are supported in Red Hat Enterprise Linux 7. If you have a 32-bit system, an in-place upgrade is not supported. However, you can use the output from the Preupgrade Assistant to reach a configuration and package set suitable for migrating to a 64-bit Red Hat Enterprise Linux 7 system. All the necessary information for migrating the system to a 64-bit version is available in the /root/preupgrade/kickstart/ directory. Binary rebuilds admin /root/preupgrade/RHEL6_7/system/BinariesRebuild solution.txt Binary rebuilds Check all binaries installed on the assessment system which needs to be rebuilded on the target system This content generates the list of binaries which needs to be rebuilt You can find the list at: kickstart/binaries Debuginfo packages admin /root/preupgrade/RHEL6_7/system/Debuginfo solution.txt Debuginfo packages This content checks for debuginfo packages and inform about potential risks for in-place upgrade. Debuginfo packages are required for easier debugging of the application run and crashes. These need to have the same version as the rpm for which they provide the debuginfo information. As the debuginfo packages are located in the different repository than application packages you need to provide the additional repository to the redhat-upgrade-tool if you want to have the debuginfo packages updated. Without updating them these are useless after the upgrade. To make them updated add --addrepo debuginfoupg=<path to the repository with debuginfo> to the redhat-upgrade-tool syntax. After the upgrade, you may need to install additional debuginfo packages brought in by new dependencies. If your policy requires to have all debuginfos installed, you will need to do this manually after the in-place upgrade. Filesystem Hierarchy Standard Read Only FHS directories admin /root/preupgrade/RHEL6_7/system/FHS/ReadOnlyFHS solution.txt Read Only FHS directories Check that critical directories of Filesystem Hierarchy Standard are not mounted read-only. Read-only paths in Filesystem Hierarchy Standard might cause in-place-upgrade to fail. Check FHS for /var incompabilities. admin /root/preupgrade/RHEL6_7/system/FHS/Run solution.txt Check FHS for /var incompabilities. Since RHEL 7 are some changes in FHS, which could be in conflicts with old system (e.g. movement /var/run -> /run). Since RHEL 7 exists '/run' directory where tmpfs is mounted for runtime data. Original '/var/run' is symlink to this directory and likewise '/var/lock' points to the '/run/lock/' now. '/run' directory is emptied on reboot, so all runtime files must be created on boot again. See RHEL 7 Migration Planning Guidelines. In-place Upgrade Requirements for the /usr/ Directory admin /root/preupgrade/RHEL6_7/system/FHS/UsrPartition solution.txt In-place Upgrade Requirements for the /usr/ Directory This module determines if the /usr/ directory is located on a separate partition. Performing an in-place upgrade is not possible if the /usr/ directory is located on a separate partition. In Red Hat Enterprise Linux 6, this was allowed, but in Red Hat Enterprise Linux 7, the /usr/ directory cannot be on a separate partition because of the requirements of the systemd service. HA-Cluster Cluster and High Availability admin /root/preupgrade/RHEL6_7/system/HA-Cluster/ha-cluster hacluster.txt Cluster and High Availability Content checks Cluster and High Availability solutions for upgrade. Changes to the entire HA solution, ranging from on-wire network protocols to resource management, core engines, makes it impossible to migrate from RHEL 6 to RHEL 7. Quorum implementation admin /root/preupgrade/RHEL6_7/system/HA-Cluster/quorum quorum.txt Quorum implementation Content checks quorum implementation for upgrade. qdiskd has been removed from Red HAt Enterprise Linux 6. The new quorum implementation is provided by votequorum, which is included in the corosync package, and which has been extended to replace qdiskd for most use cases. The extensions (wait_for_all, auto_tie_breaker and last_man_standing) are fully documented in the votequorum.5 man page fix krb5kdc config file admin /root/preupgrade/RHEL6_7/system/KrbMigration solution.txt fix krb5kdc config file The content that fixes the /etc/sysconfig/krb5kdc file. The configuration option KRB5REALM was merged with the option KRB5KDC_ARGS in file /etc/sysconfig/krb5kdc in Red Hat Enterprise Linux 7. This content transforms the old configuration file to the new one while keeping the settings intact. No manual user action is necessary upon upgrade. krb5-appl is no longer in RHEL 7. Use openssh. Instead of rcp, ftp use scp, sftp. Instead of telnet, rlogin or rsh use slogin and ssh. The clients and servers support GSSAPI authentication using Kerberos, and the sloging and ssh commands can be passed with -K flag to delegate credential to the remote host. File Systems, Partitions and Mounts Configuration Review admin /root/preupgrade/RHEL6_7/system/PartitionMounts solution.txt File Systems, Partitions and Mounts Configuration Review This module describes the new default file system and stores the partitions and mounts configuration. Red Hat Enterprise Linux 7 now uses the XFS file system as the default file system instead of the ext4 file system. If you intend to migrate the system to another machine or create a new file system, you can consider using XFS instead of ext4. Users who use a Kickstart installation can consider modifying the Kickstart configuration to use XFS. Additionally, information about the partitions and mounts configuration has been saved in the /root/preupgrade/kickstart/ directory. This information can be useful to users who choose to perform a system migration or convert their file systems to XFS. Removable media in fstab admin /root/preupgrade/RHEL6_7/system/RemovableMedia solution.txt Removable media in fstab Warn about removable media preventing boot If there are any removable media listed in /etc/fstab, it is necessary to add "nofail" flag to each one of them. Red Hat Enterprise Linux 7 will fail to boot if the medium is not present and "nofail" is not specified. It is not possible to check this automatically with 100% confidence. Please check your /etc/fstab. Sonamebumped libs admin /root/preupgrade/RHEL6_7/system/SonameBump solution.txt Sonamebumped libs If the dynamic library breaks the API/ABI compatibility, it is supposed to change its soname. This content checks for the soname bumps between RHEL 6 and RHEL 7 in your Red Hat packages. Application developed in C may use dynamic libraries (.so files) to reuse the common functions/symbols in the binary. If the library bumped its soname ( changed major version, API/ABI incompatibility), application that depends on it may not run. Some of the libraries changed the soname version between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. From your RHEL 6 packages, following libraries changed soname: libanonymous.so.2 from cyrus-sasl-plain changed to libanonymous.so.3 libbind9.so.80 from bind-utils changed to libbind9.so.90 libcrammd5.so.2 from libvirt-client changed to libcrammd5.so.3 libcryptsetup.so.1 from cryptsetup-luks changed to libcryptsetup.so.4 libdigestmd5.so.2 from libvirt-client changed to libdigestmd5.so.3 libdns.so.81 from bind-utils changed to libdns.so.100 libdrm_nouveau.so.1 from libdrm-devel changed to libdrm_nouveau.so.2 libffi.so.5 from jna changed to libffi.so.6 libgdbm.so.2 from gdbm-devel changed to libgdbm.so.4 libgmp.so.3 from coreutils changed to libgmp.so.10 libgnutls.so.26 from gnutls-utils changed to libgnutls.so.28 libgnutlsxx.so.26 from gnutls-utils changed to libgnutlsxx.so.28 libgs.so.8 from foomatic changed to libgs.so.9 libisc.so.83 from bind-utils changed to libisc.so.95 libisccc.so.80 from bind-utils changed to libisccc.so.90 libisccfg.so.82 from bind-utils changed to libisccfg.so.90 libkadm5srv_mit.so.8 from krb5-devel changed to libkadm5srv_mit.so.9 libkdb5.so.6 from krb5-devel changed to libkdb5.so.8 liblogin.so.2 from cyrus-sasl-plain changed to liblogin.so.3 liblwres.so.80 from bind-utils changed to liblwres.so.90 liblzma.so.0 from xz changed to liblzma.so.5 libmpfr.so.1 from mpfr changed to libmpfr.so.4 libmysqlclient.so.16 from postfix changed to libmysqlclient.so.18 libpcre.so.0 from postfix changed to libpcre.so.1 libplain.so.2 from cyrus-sasl-plain changed to libplain.so.3 libpoppler.so.5 from poppler-utils changed to libpoppler.so.46 libproxy.so.0 from libproxy-python changed to libproxy.so.1 librpm.so.1 from rpm-libs changed to librpm.so.3 librpmbuild.so.1 from rpm-libs changed to librpmbuild.so.3 librpmio.so.1 from rpm-libs changed to librpmio.so.3 libsasl2.so.2 from cyrus-sasl-plain changed to libsasl2.so.3 libsasldb.so.2 from cyrus-sasl-plain changed to libsasldb.so.3 libtasn1.so.3 from libtasn1 changed to libtasn1.so.6 libudev.so.0 from device-mapper changed to libudev.so.1 libverto.so.0 from krb5-devel changed to libverto.so.1 libyajl.so.1 from yajl changed to libyajl.so.2 We checked the requirements in Non-RH signed packages, but for the non rpm-packaged binaries, you should check the compatibility list yourself by using e.g. ldd <binary> command. If some of your application uses the library on the list above, you will need to rebuild such package/application against new library. Red Hat Enterprise Linux applications available on the RHEL 7 will handle these bumps automatically by the update/migration to new Red Hat Enterprise Linux as they were already built against these libraries. SonameKept Reusable Dynamic Libraries admin /root/preupgrade/RHEL6_7/system/SonameKept solution.txt SonameKept Reusable Dynamic Libraries This module provides an overview of the dynamic libraries from Red Hat Enterprise Linux 6 that can be reused in Red Hat Enterprise Linux 7, as the dynamic libraries remain compatible with both the application programming interface (API) and the application binary interface (ABI). Applications developed in the C programming language can use dynamic libraries (.so files) to reuse common functions and symbols in the binary. When the library changes its soname in a major version, the binaries normally need to be rebuilt for the new system. Some libraries have not changed their soname between Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7 so it could be possible to reuse third party applications which use only these libraries without rebuilding. You can find the list of the unchanged dynamic libraries and their package names in the following file: ./kickstart/NoSonameBumpLibs If it is not clear what libraries the third party binary or RPM uses, it is possible to use the ldd utility for the C binary, or run the "rpm -q --whatrequires SONAME" command for the whole RPM package. No problems are expected to occur if there are only .so files listed in the NoSonameBumpLibs file and unversioned shared libraries. Removed .so libs admin /root/preupgrade/RHEL6_7/system/SonameRemoval solution.txt Removed .so libs Dynamic libraries are used provides symbols/functions to binaries. Some of the libraries were removed between RHEL 6 and RHEL 7. This content checks for the .so libraries removal between RHEL 6 and RHEL 7 in your Red Hat packages. Application developed in C may use dynamic libraries (.so files) to reuse the common functions/symbols in the binary. If the library is missing, application will not run. Some of the libraries were removed between RHEL 6 and RHEL 7. From your Red Hat Enterprise Linux 6 packages, following libraries disappeared: /builddir/build/BUILD/jna-3.2.4/build-d64/native/libjnidispatch.so from libvirt-java ANSI_X3.110.so from prelink ARMSCII-8.so from prelink ASMO_449.so from prelink B.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) BIG5.so from prelink BIG5HKSCS.so from prelink BRF.so from prelink Base64.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) Byte.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) CN.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) CP10007.so from prelink CP1125.so from prelink CP1250.so from prelink CP1251.so from prelink CP1252.so from prelink CP1253.so from prelink CP1254.so from prelink CP1255.so from prelink CP1256.so from prelink CP1257.so from prelink CP1258.so from prelink CP737.so from prelink CP775.so from prelink CP932.so from prelink CSN_369103.so from prelink CWI.so from prelink Call.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) Cwd.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) DB_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) DEC-MCS.so from prelink DProf.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) Dumper.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) EBCDIC-AT-DE-A.so from prelink EBCDIC-AT-DE.so from prelink EBCDIC-CA-FR.so from prelink EBCDIC-DK-NO-A.so from prelink EBCDIC-DK-NO.so from prelink EBCDIC-ES-A.so from prelink EBCDIC-ES-S.so from prelink EBCDIC-ES.so from prelink EBCDIC-FI-SE-A.so from prelink EBCDIC-FI-SE.so from prelink EBCDIC-FR.so from prelink EBCDIC-IS-FRISS.so from prelink EBCDIC-IT.so from prelink EBCDIC-PT.so from prelink EBCDIC-UK.so from prelink EBCDIC-US.so from prelink EBCDIC.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) ECMA-CYRILLIC.so from prelink EUC-CN.so from prelink EUC-JISX0213.so from prelink EUC-JP-MS.so from prelink EUC-JP.so from prelink EUC-KR.so from prelink EUC-TW.so from prelink Encode.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) Everything_module.so from ORBit2 Expat.so from perl-XML-Parser FastCalc.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) Fcntl.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) FieldHash.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) GB18030.so from prelink GBBIG5.so from prelink GBGBK.so from prelink GBK.so from prelink GDBM_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) GEORGIAN-ACADEMY.so from prelink GEORGIAN-PS.so from prelink GOST_19768-74.so from prelink GREEK-CCITT.so from prelink GREEK7-OLD.so from prelink GREEK7.so from prelink Glob.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) HP-GREEK8.so from prelink HP-ROMAN8.so from prelink HP-ROMAN9.so from prelink HP-THAI8.so from prelink HP-TURKISH8.so from prelink Hostname.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) IBM037.so from prelink IBM038.so from prelink IBM1004.so from prelink IBM1008.so from prelink IBM1008_420.so from prelink IBM1025.so from prelink IBM1026.so from prelink IBM1046.so from prelink IBM1047.so from prelink IBM1097.so from prelink IBM1112.so from prelink IBM1122.so from prelink IBM1123.so from prelink IBM1124.so from prelink IBM1129.so from prelink IBM1130.so from prelink IBM1132.so from prelink IBM1133.so from prelink IBM1137.so from prelink IBM1140.so from prelink IBM1141.so from prelink IBM1142.so from prelink IBM1143.so from prelink IBM1144.so from prelink IBM1145.so from prelink IBM1146.so from prelink IBM1147.so from prelink IBM1148.so from prelink IBM1149.so from prelink IBM1153.so from prelink IBM1154.so from prelink IBM1155.so from prelink IBM1156.so from prelink IBM1157.so from prelink IBM1158.so from prelink IBM1160.so from prelink IBM1161.so from prelink IBM1162.so from prelink IBM1163.so from prelink IBM1164.so from prelink IBM1166.so from prelink IBM1167.so from prelink IBM12712.so from prelink IBM1364.so from prelink IBM1371.so from prelink IBM1388.so from prelink IBM1390.so from prelink IBM1399.so from prelink IBM16804.so from prelink IBM256.so from prelink IBM273.so from prelink IBM274.so from prelink IBM275.so from prelink IBM277.so from prelink IBM278.so from prelink IBM280.so from prelink IBM281.so from prelink IBM284.so from prelink IBM285.so from prelink IBM290.so from prelink IBM297.so from prelink IBM420.so from prelink IBM423.so from prelink IBM424.so from prelink IBM437.so from prelink IBM4517.so from prelink IBM4899.so from prelink IBM4909.so from prelink IBM4971.so from prelink IBM500.so from prelink IBM5347.so from prelink IBM803.so from prelink IBM850.so from prelink IBM851.so from prelink IBM852.so from prelink IBM855.so from prelink IBM856.so from prelink IBM857.so from prelink IBM860.so from prelink IBM861.so from prelink IBM862.so from prelink IBM863.so from prelink IBM864.so from prelink IBM865.so from prelink IBM866.so from prelink IBM866NAV.so from prelink IBM868.so from prelink IBM869.so from prelink IBM870.so from prelink IBM871.so from prelink IBM874.so from prelink IBM875.so from prelink IBM880.so from prelink IBM891.so from prelink IBM901.so from prelink IBM902.so from prelink IBM903.so from prelink IBM9030.so from prelink IBM904.so from prelink IBM905.so from prelink IBM9066.so from prelink IBM918.so from prelink IBM921.so from prelink IBM922.so from prelink IBM930.so from prelink IBM932.so from prelink IBM933.so from prelink IBM935.so from prelink IBM937.so from prelink IBM939.so from prelink IBM943.so from prelink IBM9448.so from prelink IEC_P27-1.so from prelink INIS-8.so from prelink INIS-CYRILLIC.so from prelink INIS.so from prelink IO.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) ISIRI-3342.so from prelink ISO-2022-CN-EXT.so from prelink ISO-2022-CN.so from prelink ISO-2022-JP-3.so from prelink ISO-2022-JP.so from prelink ISO-2022-KR.so from prelink ISO-IR-197.so from prelink ISO-IR-209.so from prelink ISO646.so from prelink ISO8859-1.so from prelink ISO8859-10.so from prelink ISO8859-11.so from prelink ISO8859-13.so from prelink ISO8859-14.so from prelink ISO8859-15.so from prelink ISO8859-16.so from prelink ISO8859-2.so from prelink ISO8859-3.so from prelink ISO8859-4.so from prelink ISO8859-5.so from prelink ISO8859-6.so from prelink ISO8859-7.so from prelink ISO8859-8.so from prelink ISO8859-9.so from prelink ISO8859-9E.so from prelink ISO_10367-BOX.so from prelink ISO_11548-1.so from prelink ISO_2033.so from prelink ISO_5427-EXT.so from prelink ISO_5427.so from prelink ISO_5428.so from prelink ISO_6937-2.so from prelink ISO_6937.so from prelink JOHAB.so from prelink JP.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) KOI-8.so from prelink KOI8-R.so from prelink KOI8-RU.so from prelink KOI8-T.so from prelink KOI8-U.so from prelink KR.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) LATIN-GREEK-1.so from prelink LATIN-GREEK.so from prelink Langinfo.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) MAC-CENTRALEUROPE.so from prelink MAC-IS.so from prelink MAC-SAMI.so from prelink MAC-UK.so from prelink MACINTOSH.so from prelink MD5.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) MIK.so from prelink NATS-DANO.so from prelink NATS-SEFI.so from prelink NDBM_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) Normalize.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) Opcode.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) POSIX.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) PPPort.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) PT154.so from prelink Peek.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) RK1048.so from prelink SAMI-WS2.so from prelink SDBM_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) SHIFT_JISX0213.so from prelink SJIS.so from prelink SSL.so from python-twisted-core Socket.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) Soundex.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) Storable.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) Symbol.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) SysV.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) Syslog.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) T.61.so from prelink TCVN5712-1.so from prelink TIS-620.so from prelink TSCII.so from prelink TW.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) UHC.so from prelink UNICODE.so from prelink UTF-16.so from prelink UTF-32.so from prelink UTF-7.so from prelink Unicode.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) Util.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) VISCII.so from prelink X11.so from foomatic Zlib.so from perl-Compress-Raw-Zlib __m2crypto.so from yum-rhn-plugin _bisectmodule.so from python-libs _bsddb.so from python-libs _bytesio.so from python-libs _c_urlarg.so from python-twisted-web _certificate.so from redhat-upgrade-tool (required by NonRH signed package(s):redhat-upgrade-tool ) _client.so from subversion _codecs_cn.so from python-libs _codecs_hk.so from python-libs _codecs_iso2022.so from python-libs _codecs_jp.so from python-libs _codecs_kr.so from python-libs _codecs_tw.so from python-libs _collectionsmodule.so from python-libs _core.so from subversion _cryptmodule.so from python-libs _csv.so from python-libs _ctypes.so from python-libs _curses.so from python-libs _curses_panel.so from python-libs _dbus_bindings.so from system-config-network-tui _dbus_glib_bindings.so from system-config-network-tui _delta.so from subversion _diff.so from subversion _elementtree.so from python-libs _epoll.so from python-twisted-web _fileio.so from python-libs _fs.so from subversion _functoolsmodule.so from python-libs _gio.so from subscription-manager _glib.so from subscription-manager _gobject.so from subscription-manager _gpgme.so from yum _hashlib.so from python-libs _heapq.so from python-libs _hotshot.so from python-libs _json.so from python-libs _localemodule.so from python-libs _lsprof.so from python-libs _multibytecodecmodule.so from python-libs _multiprocessing.so from python-libs _pyabrt.so from abrt _pyreport.so from libreport _ra.so from subversion _randommodule.so from python-libs _reportclient.so from libreport _repos.so from subversion _rpmbmodule.so from preupgrade-assistant-contents (required by NonRH signed package(s):beakerlib preupgrade-assistant preupgrade-assistant-contents ) _rpmmodule.so from preupgrade-assistant-contents (required by NonRH signed package(s):beakerlib preupgrade-assistant preupgrade-assistant-contents ) _snackmodule.so from authconfig _socketmodule.so from python-libs _sqlite3.so from python-libs _sqlitecache.so from yum _ssl.so from python-libs _struct.so from python-libs _wc.so from subversion _weakref.so from python-libs _zope_interface_coptimizations.so from python-twisted-core acutilmodule.so from authconfig arraymodule.so from python-libs attrs.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) audioop.so from python-libs binascii.so from python-libs boolean.so from SOAPpy bz2.so from python-libs cPickle.so from python-libs cStringIO.so from python-libs cmathmodule.so from python-libs config_direct.so from libproxy-python config_envvar.so from libproxy-python config_file.so from libproxy-python config_wpad.so from libproxy-python crypto.so from python-twisted-core datetime.so from python-libs dbm.so from python-libs details.so from dracut dlmodule.so from python-libs dmidecodemod.so from subscription-manager drm.so from dracut encoding.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) ethtool.so from system-config-network-tui etree.so from redhat-support-tool fcntlmodule.so from python-libs frame-buffer.so from dracut future_builtins.so from python-libs gdbmmodule.so from python-libs grpmodule.so from python-libs gudev.so from rhn-client-tools ignore_domain.so from libproxy-python ignore_ip.so from libproxy-python imageop.so from python-libs imfile.so from rsyslog imklog.so from rsyslog immark.so from rsyslog impstats.so from rsyslog imptcp.so from rsyslog imtcp.so from rsyslog imudp.so from rsyslog imuxsock.so from rsyslog itertoolsmodule.so from python-libs iwlib.so from system-config-network-tui libLLVM-3.4-mesa.so from mesa-private-llvm libQtAssistantClient.so.4 from qt-x11 libabrt_web.so.0 from abrt libbfd-2.20.51.0.2-5.43.el6.so from rpm-build libcapi.so from openssl-devel libck-connector.so.0 from ConsoleKit-libs libcloog.so.0 from gcc libcupsdriver.so.1 from cups libdrm_nouveau2.so.2 from libdrm-devel libebl_aarch64-0.161.so from abrt-addon-ccpp libebl_alpha-0.161.so from abrt-addon-ccpp libebl_arm-0.161.so from abrt-addon-ccpp libebl_i386-0.161.so from abrt-addon-ccpp libebl_ia64-0.161.so from abrt-addon-ccpp libebl_ppc-0.161.so from abrt-addon-ccpp libebl_ppc64-0.161.so from abrt-addon-ccpp libebl_s390-0.161.so from abrt-addon-ccpp libebl_sh-0.161.so from abrt-addon-ccpp libebl_sparc-0.161.so from abrt-addon-ccpp libebl_tilegx-0.161.so from abrt-addon-ccpp libebl_x86_64-0.161.so from abrt-addon-ccpp libeggdbus-1.so.0 from eggdbus libevent-1.4.so.2 from nfs-utils libevent_core-1.4.so.2 from nfs-utils libevent_extra-1.4.so.2 from nfs-utils libexpect5.44.1.15.so from expect libfakeroot-0.so from fakeroot libgcj-tools.so.10 from libgcj libgcj.so.10 from libgcj libgcj_bc.so.1 from libgcj libgconfbackend-evoldap.so from libgsf libgettextlib-0.17.so from libvirt-client libgettextsrc-0.17.so from libvirt-client libgij.so.10 from libgcj libgjsmalsa.so from libgcj libgnutls-extra.so.26 from gnutls-utils libgpgme-pth.so.11 from gpgme libgssglue.so.1 from nfs-utils-lib libgstvideo4linux.so from gstreamer-plugins-base libgtkpeer.so from libgcj libhal-storage.so.1 from hal libhal.so.1 from hal libhunspell-1.2.so.0 from hunspell-en libip6t_SET.so from system-config-firewall-base libip6t_set.so from system-config-firewall-base libipt_SET.so from system-config-firewall-base libipt_addrtype.so from system-config-firewall-base libipt_ecn.so from system-config-firewall-base libipt_set.so from system-config-firewall-base libiw.so.29 from python-iwlib libjavamath.so from libgcj liblcms.so.1 from lcms-libs libldif-2.4.so.2 from postfix libmp.so.3 from coreutils libmysqlclient_r.so.16 from postfix libnih-dbus.so.1 from libnih libnih.so.1 from libnih libnullbackend.so from polkit libopcodes-2.20.51.0.2-5.43.el6.so from rpm-build libpadlock.so from openssl-devel libpangox-1.0.so.0 from pango-devel libparted-2.1.so.0 from parted libphonon_gstreamer.so from phonon-backend-gstreamer libpkexec-action-lookup.so from polkit libpolkit-backend-1.so.0 from polkit libppl.so.7 from ppl libppl_c.so.2 from ppl libproc-3.2.8.so from readahead libpython2.6.so.1.0 from python-libs librpcsecgss.so.3 from nfs-utils libstdbuf.so from coreutils libsvg.so from emacs libusbpp-0.1.so.4 from hal libverto-k5ev.so.0 from krb5-devel linuxaudiodev.so from python-libs lmnet.so from rsyslog lmnetstrms.so from rsyslog lmnsd_ptcp.so from rsyslog lmregexp.so from rsyslog lmstrmsrv.so from rsyslog lmtcpclt.so from rsyslog lmtcpsrv.so from rsyslog lmzlibw.so from rsyslog m_xt.so from iproute magic.so from redhat-access-insights mathmodule.so from python-libs mga_dri.so from mesa-dri-drivers mmapmodule.so from python-libs mro.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) network_networkmanager.so from libproxy-python nismodule.so from python-libs nsswitch.so from nfs-utils objectify.so from redhat-support-tool ommail.so from rsyslog omprog.so from rsyslog omruleset.so from rsyslog omtesting.so from rsyslog omuxsock.so from rsyslog operator.so from python-libs ossaudiodev.so from python-libs p11-kit-trust.so from ca-certificates pam_access.so from pam-devel pam_cap.so from nfs-utils pam_chroot.so from pam-devel pam_ck_connector.so from ConsoleKit-libs pam_console.so from pam-devel pam_cracklib.so from pam-devel pam_debug.so from pam-devel pam_deny.so from pam-devel pam_echo.so from pam-devel pam_env.so from pam-devel pam_exec.so from pam-devel pam_faildelay.so from pam-devel pam_faillock.so from pam-devel pam_filter.so from pam-devel pam_fprintd.so from fprintd-pam pam_ftp.so from pam-devel pam_group.so from pam-devel pam_issue.so from pam-devel pam_keyinit.so from pam-devel pam_lastlog.so from pam-devel pam_limits.so from pam-devel pam_listfile.so from pam-devel pam_localuser.so from pam-devel pam_loginuid.so from pam-devel pam_mail.so from pam-devel pam_mkhomedir.so from pam-devel pam_motd.so from pam-devel pam_namespace.so from pam-devel pam_nologin.so from pam-devel pam_passwdqc.so from pam_passwdqc pam_permit.so from pam-devel pam_postgresok.so from pam-devel pam_pwhistory.so from pam-devel pam_rhosts.so from pam-devel pam_rootok.so from pam-devel pam_securetty.so from pam-devel pam_selinux.so from pam-devel pam_sepermit.so from pam-devel pam_shells.so from pam-devel pam_stress.so from pam-devel pam_succeed_if.so from pam-devel pam_tally2.so from pam-devel pam_time.so from pam-devel pam_timestamp.so from pam-devel pam_tty_audit.so from pam-devel pam_umask.so from pam-devel pam_unix.so from pam-devel pam_userdb.so from pam-devel pam_warn.so from pam-devel pam_wheel.so from pam-devel pam_xauth.so from pam-devel pango-arabic-fc.so from pango-devel pango-arabic-lang.so from pango-devel pango-basic-x.so from pango-devel pango-hangul-fc.so from pango-devel pango-hebrew-fc.so from pango-devel pango-indic-fc.so from pango-devel pango-indic-lang.so from pango-devel pango-khmer-fc.so from pango-devel pango-syriac-fc.so from pango-devel pango-thai-fc.so from pango-devel pango-thai-lang.so from pango-devel pango-tibetan-fc.so from pango-devel parsermodule.so from python-libs pmlastmsg.so from rsyslog pycurl.so from python-urlgrabber pyexpat.so from python-libs r128_dri.so from mesa-dri-drivers raiser.so from python-twisted-web rand.so from python-twisted-core re.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) readline.so from python-libs resource.so from python-libs savage_dri.so from mesa-dri-drivers scalar.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) selectmodule.so from python-libs sgmlop.so from SOAPpy shared.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) smixer-ac97.so from alsa-lib smixer-hda.so from alsa-lib smixer-sbase.so from alsa-lib spwdmodule.so from python-libs staplog.so from systemtap-client static.so from nfs-utils stropmodule.so from python-libs svg_loader.so from emacs syslog.so from python-libs termios.so from python-libs text.so from dracut threads.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) timemodule.so from python-libs timingmodule.so from python-libs umich_ldap.so from nfs-utils unichrome_dri.so from mesa-dri-drivers unicodedata.so from python-libs unix.so from subscription-manager via.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) wpad_dns.so from libproxy-python wpad_dnsdevolution.so from libproxy-python xxsubtype.so from python-libs zlibmodule.so from python-libs We checked the requirements in Non-RH signed packages, but for the non rpm-packaged binaries, you should check the compatibility list yourself by using e.g. ldd <binary> command. If some of your application uses the library on the list above, you may need to get the .so library from different place or search for an alternative. CGROUP_DAEMON in sysconfig scripts admin /root/preupgrade/RHEL6_7/system/SysconfigCgroupDaemon solution.txt CGROUP_DAEMON in sysconfig scripts 'Check script searches /etc/sysconfig/* for CGROUP_DAEMON variable' `CGROUP_DAEMON` option can be used in any of the /etc/sysconfig files on a Red Hat Enterprise Linux 6 system to specify list of control groups that the daemon will be run in. For example, CGROUP_DAEMON="cpu:daemons cpuacct:/" will run it in the daemons group for the CPU controller, and the '/' group for the CPU accounting controller. We cannot automatically port this to systemd-based Red Hat Enterprise Linux 7. Please see https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/Resource_Management_Guide/index.html Check the system version admin /root/preupgrade/RHEL6_7/system/SystemVersion solution.txt Check the system version Check if the system is last released version Aide tool for "guarding" system integrity admin /root/preupgrade/RHEL6_7/system/aide solution.txt Aide tool for "guarding" system integrity Aide tool is used for "guarding" system integrity Aide tool is used for 'guarding' system integrity. After an upgrade run command: aide --update CA certificate bundles modified admin /root/preupgrade/RHEL6_7/system/ca-certificates solution.txt CA certificate bundles modified Later versions of RHEL include a shared store for certificate authorities. Additional trusted certificate authorities must be placed in the new location rather that modifying the distributed certificate authority bundles. The Preupgrade assistant cannot automatically identify how certificate bundles have been modified on this system. RHEL 7.0 and later include a shared store for certificate authorities. You can find out more information about this shared store by reading the following manual page on a RHEL 7.x system: $ man update-ca-trust In previous versions of RHEL modifying the distributed certificate bundles (such as /etc/pki/tls/certs/ca-bundle.trust.crt) was the defacto way of adding an additional trusted certificate authority to the system. These additional trusted certificate authorities must be ported forward to the RHEL 7.0 system manually. You can place them as certificate (PEM or DER) files in the following directory: /etc/pki/ca-trust/source/anchors And then run the following command # update-ca-trust Please read the update-ca-trust manual page for more information. Developer Tool Set packages admin /root/preupgrade/RHEL6_7/system/dts dts.txt Developer Tool Set packages Content checks whether Red Hat Developer Tool Set packages are installed. For upgrade from RHEL 6 to RHEL 7 perform following steps: 1) Uninstall all Red Hat Developer Toolset packages 2) Upgrade system 3) Update Red Hat Developer Toolset repo 4) Install your Developer Toolset packages again Check for GRUB splash.xpm.gz file admin /root/preupgrade/RHEL6_7/system/grub grub.txt Check for GRUB splash.xpm.gz file Content checks whether splash.xpm.gz file exists and backups them Grub package is used as loader of linux system. Preupgrade assistant will backup file /boot/grub/splash.xpm.gz and restore restore them after inplace upgrade to /boot/grub directory. Modification of boot parameters is not possible without that file. Workaround for crashing grubby. admin /root/preupgrade/RHEL6_7/system/grubby solution.txt Workaround for crashing grubby. Workaround for crashing grubby. Fill initrd in /boot/grub/grub.conf by a postupgrade script. This content works around crashing grubby. It modifies /boot/grub/grub.conf by adding initrd. Obsoleted HAL (Hardware Abstraction Layer) admin /root/preupgrade/RHEL6_7/system/hal solution.txt Obsoleted HAL (Hardware Abstraction Layer) Check for packages dependent on hal. HAL (Hardware Abstraction Layer) is obsoleted, but not provided, by systemd. It is neccessary to migrate applications dependent on HAL to udev/systemd. Hyper-V admin /root/preupgrade/RHEL6_7/system/hyperv solution.txt Hyper-V Check if this system runs on Hyper-V. In-place upgrade of Red Hat Enterprise Linux 7 as a guest on Hyper-V is not currently supported. Initscripts contents for migration Content for enabling and disabling services based on RHEL 6 system admin /root/preupgrade/RHEL6_7/system/initscripts/control solution.txt Content for enabling and disabling services based on RHEL 6 system The content checks what services are enabled or disabled on assessment system and if the services will be enabled or disabled on RHEL 7 system. The content detects some services which are disabled by default on Red Hat Enterprise Linux 7 system. Check for ethernet interface naming admin /root/preupgrade/RHEL6_7/system/initscripts/ifcfg solution.txt Check for ethernet interface naming The content checks if network interface names set through /etc/sysconfig/network-scripts/ifcfg-* files are compatible with device naming in Red Hat Enterprise Linux 7. Red Hat Enterprise Linux 7 still offers possibility to specifying names for network interface by setting DEVICE and HWADDR options in /etc/sysconfig/network-scripts/ifcfg-* configuration files. Unfortunally udev does not support swapping interface names anymore. In the case that you set ethX names to multiple network card and kernel discovers them in different order, udev rule 60-net.rules will most likely fail. It is highly recommended to rename such interfaces or remove DEVICE line from ifcfg configuration files. Red Hat Enterprise Linux 7 also introduces predictable network interface device names: http://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/ User modification in /etc/rc.local and /etc/rc.d/rc.local admin /root/preupgrade/RHEL6_7/system/initscripts/rc-local rclocal.txt User modification in /etc/rc.local and /etc/rc.d/rc.local The content checks whether user modifies files /etc/rc.local and /etc/rc.d/rc.local It is highly advisable to create own systemd services or udev rules to run scripts during boot instead of using this file. In constrast to previous versions due to parallel execution during boot this script will NOT be run after all other services. Please note that you must run 'chmod +x /etc/rc.d/rc.local' to ensure that this script will be executed during boot. Kernel-kdump package on s390x architecture admin /root/preupgrade/RHEL6_7/system/kernel-kdump solution.txt Kernel-kdump package on s390x architecture Check for invalid /etc/zipl.conf records on s390x architecture There's a bug in the installer of RHEL-6 which results in one or more invalid records added to zipl.conf if kernel-kdump package was part of initial installation. If these invalid records persist, system may not be able to boot into upgraded RHEL-7. It is recommended to review the zipl.conf file and remove the invalid records manually. Otherwise, redhat-upgrade-tool will attempt to remove them. cgroups configuration compatibility check admin /root/preupgrade/RHEL6_7/system/libcgroup solution.txt cgroups configuration compatibility check Checks libcgroup configuration files File(s) affected: /etc/cgconfig.conf /etc/cgrules.conf /etc/cgconfig.d In previous versions of Red Hat Enterprise Linux, system administrators built custom cgroup hierarchies with use of the cgconfig command from the libcgroup package. This package is now deprecated. There is only special situation, in which libgroups should be used. Red Hat Enterprise Linux 7 moves the resource management settings from the process level to the application level by binding the cgroup hierarchy with the systemd unit hierarchy. Therefore, you can manage the cgroup tree with systemctl commands. For more details see Red Hat Enterprise Linux 7 Resource Management Guide, Chapter 2 (Using Control Groups): https://documentation-devel.engineering.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Resource_Management_Guide/ch-Using_Control_Groups.html Chapter 3 (Using libcgroup Tools) https://documentation-devel.engineering.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Resource_Management_Guide/ch-Using_libcgroup_Tools.html Plugable authentication modules (PAM) admin /root/preupgrade/RHEL6_7/system/pam pam.txt Plugable authentication modules (PAM) Content checks for no-longer supported pluggable authentication modules Pluggable authentication modules are the core of user authentication in any modern linux distribution. Modules pam_passwdqc and pam_ecryptfs were removed between RHEL 6 and RHEL 7, thus making some PAM configuration files no longer valid. Preupgrade assistant will comment out these modules in your PAM configuration files after the in-place upgrade automatically, but you should review and regain the authentication functionality other way, if these modules were required for your authentication policy. Foreign Perl modules admin /root/preupgrade/RHEL6_7/system/perl solution.txt Foreign Perl modules Find Perl modules which need to be checked for proper functionality with newer Perl version on the Red Hat Enterprise Linux 7 system because they are not distributed by Red Hat Perl was updated from version 5.10 to version 5.16. Please read Perl section in the Red Hat Enterprise Linux 7 Developer Guide for more details. Following Perl module files located in system Perl paths are either not handled by any package or not signed by Red Hat: PHP modules admin /root/preupgrade/RHEL6_7/system/php solution.txt PHP modules Find PHP modules which need to be checked for proper functionality with newer PHP version on the Red Hat Enterprise Linux 7 system because they are not distributed by Red Hat PolicyKit (alias polkit) config files admin /root/preupgrade/RHEL6_7/system/polkit solution.txt PolicyKit (alias polkit) config files PolicyKit has important changes of config files. Check modyfied and owns config files. PolicyKit (alias polkit) doesn't use *.conf *.pkla file. Everything is inside *.rules files instead, which contains rules written in javascript (See more in Red Hat Enterprise Linux 7 Desktop Migration and Administration Guide, chapter 4). Python 2.7.5 admin /root/preupgrade/RHEL6_7/system/python python.txt Python 2.7.5 This module provides you with a list of packages that need to be rebuilt for version 2.7.5 of the Python programming language that is shipped with Red Hat Enterprise Linux 7. This solution text contains a list of packages that need to be rebuilt for Python 2.7.5, which is shipped with Red Hat Enterprise Linux 7. Red Hat Enterprise Linux 7 contains Python version 2.7.5. For information about the differences from older versions and for further details, see https://access.redhat.com/site/articles/676453. The files and directories listed below are not owned by any RPM package or are owned by an RPM package that is not signed by Red Hat. These packages need to be rebuilt and reinstalled in order to work with Python 2.7.5. You can find more details at https://access.redhat.com/site/articles/676453. Save repositories for kickstart admin /root/preupgrade/RHEL6_7/system/repositories solution.txt Save repositories for kickstart Content checks enabled repositories. Name and baseurl are stored to file available-repos in kickstart directory. The content stores enabled repositories for kickstart issues in file ./kickstart/available-repos During kickstart generation these repositories are added to kickstart script. Check system requirements admin /root/preupgrade/RHEL6_7/system/requirements solution.txt Check system requirements Check if system comply minimum requirements /usr: (only for migration process) Estimated needed free space: 2296441 kB Estimated safe free space: 2640901 kB Available free space: 46546492 kB /var: (only for migration process) Estimated needed free space: 2296441 kB Estimated safe free space: 2640901 kB Available free space: 46546492 kB Ruby 2.0.0 admin /root/preupgrade/RHEL6_7/system/ruby ruby.txt Ruby 2.0.0 This module provides you with a list of packages that need to be rebuilt for version 2.0.0 of the Ruby programming language, which is shipped with Red Hat Enterprise Linux 7. Red Hat Enterprise Linux 7 contains Ruby version 2.0.0. The system paths for libraries and gems have changed from Red Hat Enterprise Linux 6. The files and directories listed below are not owned by any RPM package or are owned by an RPM package that is not signed by Red Hat. These packages need to be rebuilt and reinstalled in order to work with Ruby 2.0.0. For information on how to migrate Ruby from Red Hat Enterprise Linux 6 to Red Hat Enterprise Linux 7, please refer to the following Knowledge Base article: https://access.redhat.com/site/articles/790123 SCL collections admin /root/preupgrade/RHEL6_7/system/scl-collection scl.txt SCL collections Content checks whether RHSCL are installed For upgrade from RHEL 6 to RHEL 7 perform following steps: 1) Uninstall all Red Hat Software Collections packages 2) Upgrade system 3) Update Red Hat Software Collections repo 4) Install your collections again Red Hat Network Classic Unsupported admin /root/preupgrade/RHEL6_7/system/subscription subscription.txt Red Hat Network Classic Unsupported This module determines if this system is registered with the Red Hat Network Classic. Red Hat Network Classic is not supported in Red Hat Enterprise Linux 7. If your system is registered with Red Hat Network Classic, you will need to migrate to the certificate-based Red Hat Network. You can find instructions on how to migrate from Red Hat Network Classic to the certificate-based Red Hat Network using Red Hat Subscription Manager in the Knowledge Base article available at https://access.redhat.com/site/solutions/129723. Red Hat Subscription Manager admin /root/preupgrade/RHEL6_7/system/subscription-manager solution.txt Red Hat Subscription Manager This module adds new option to the configuration file, if it is not there already. If you see this, the check script probably failed to install the post-upgrade script. System kickstart admin /root/preupgrade/RHEL6_7/system/system-kickstart solution.txt System kickstart Copy system kickstart from /root/ to directory with results This content tries to copy kickstart generated by anaconda after system installation. Tuned profiles admin /root/preupgrade/RHEL6_7/system/tuned solution.txt Tuned profiles Content checks tuned custom profiles on the system and store them to postupgrade directory. The content stores tuned custom profiles located at /etc/tune-profiles to POSTUPGRADE_DIR. After an upgrade to RHEL 7 the profile can be migrated manually with the help of commands tuned-man and tuned-profiles to directory /etc/tuned. There is also a web page which describes tuned http://docs.fedoraproject.org/en-US/Fedora/20/html/Power_Management_Guide/tuned.html. UEFI bootloader admin /root/preupgrade/RHEL6_7/system/uefi solution.txt UEFI bootloader It is necessary to migrate UEFI systems to grub2-efi This system does not use EFI. Preupgrade Assistant will not replace your current bootloader automatically, it is too dangerous. If you wish to use GRUB2, do it manually after the upgrade using grub2-install and grub2-mkconfig. YABOOT bootloader admin /root/preupgrade/RHEL6_7/system/yaboot solution.txt YABOOT bootloader It is necessary to migrate YABOOT to grub2 The content is valid only on PPC64 architecture. The content checks if yaboot is installed on PPC64 machine. Yaboot can not boot Red Hat Enterprise Linux 7. Redhat-upgrade-tool will install grub2 during the upgrade. It is necessary to create /etc/default/grub before running redhat-upgrade-tool to ensure correct grub2 configuration. Misconfiguration can make the system unbootable. File /etc/default/grub has been created for this system. Kernel command-line options were converted to new RHEL-7 format and put into /etc/default/grub. YUM admin /root/preupgrade/RHEL6_7/system/yum yum.txt YUM Content checks YUM configuration file In RHEL 7 functionality of yum-plugin-security is a part of yum core. After the upgrade it will be impossible to undo/redo/rollback to pre-upgrade yum transactions. Please run 'yum history new' after the upgrade to start a new history file. The way yum groups work has changed in RHEL 7. By default yum treats groups as objects now. Please refer to the documentation for more information. User Management Check for usage of dangerous ranges of UID and GIDs admin /root/preupgrade/RHEL6_7/usrmgmt/DangerousRanges solution.txt Check for usage of dangerous ranges of UID and GIDs This module checks for IDs in the 0-199 range used without reservations. This module also checks for IDs which need to be moved from the 501-999 range prior to migration. In Red Hat Enterprise Linux 6, the range reserved for system account IDs is 0-500 while in Red Hat Enterprise Linux 7 it is 0-999 which may cause troubles during migration. In addition, the 0-199 range is prohibited from use without a static ID reservation in the setup package. IDs which are in this range might be reserved and used later by a package and using them may cause malfunction of the package. The following problems were found on your system: Your system contains user or group ids in the range between 500 and 1000. Therefore we will keep the Red Hat Enterprise Linux 6 defaults (system accounts limit on id 499) to prevent mix up of system and user accounts. If you can easily migrate your user accounts above 1000, please do so and adjust /etc/login.defs file to the values used in Red Hat Enterprise Linux 7. It might be non-trivial task for some system setups, though. Incorrect usage of reserved UID/GIDs admin /root/preupgrade/RHEL6_7/usrmgmt/ReservedIDs solution.txt Incorrect usage of reserved UID/GIDs Reserved user and group IDs by setup package changed between the RHEL 6 and RHEL 7. This may in some cases cause the unfunctionality of your system after the migration. This check should mitigate the risks. Packages may create system accounts with static ids based on the reservation in /usr/share/doc/setup-*/uidgid file. If you have some violations against the uidgid file reservation, applications might not work properly or it may cause some unexpected behavior. In your case, no important divergence from the reservations was found. Even the smaller findings - like different login shells and application home directories - may be worth to check - you can find these in warnings. Flaws in reserved ids were not found on your system, so this check passed even the warnings may exist. Check libuser.conf admin /root/preupgrade/RHEL6_7/usrmgmt/libuser solution.txt Check libuser.conf Check for rejected configuration in /etc/libuser.conf about combination ldap module with others, due to ambiguity in password handling. NIS ypbind config files back-up admin /root/preupgrade/RHEL6_7/usrmgmt/ypbind solution.txt NIS ypbind config files back-up Saving NIS ypbind config files. File(s) affected: /etc/yp.conf /etc/sysconfig/ypbind ypserv NIS Makefile back-up admin /root/preupgrade/RHEL6_7/usrmgmt/ypserv/makefile_config solution.txt NIS Makefile back-up Content for saving NIS Makefile for generationg maps. File(s) affected: /var/yp/Makefile NIS server maps check admin /root/preupgrade/RHEL6_7/usrmgmt/ypserv/maps_dbm solution.txt NIS server maps check This content only warns user that maps need to be re-generated because a different back-end format is used in RHEL 7 for caching maps. NIS server MAXUID and MAXGID limits check admin /root/preupgrade/RHEL6_7/usrmgmt/ypserv/max_uid_gid solution.txt NIS server MAXUID and MAXGID limits check Check if some users managed by NIS ypserv use UID/GID between 500 and 1000, which might cause issues after upgrade NIS server config file back-up admin /root/preupgrade/RHEL6_7/usrmgmt/ypserv/service_configs solution.txt NIS server config file back-up Content for saving NIS ypserv and yppasswdd config files. File(s) affected: /etc/ypserv.conf /etc/sysconfig/yppasswdd OSCAP Scan Result root intel-waimeabay-hedt-01.ml3.eng.bos.redhat.com 127.0.0.1 10.19.176.38 0:0:0:0:0:0:0:1 2620:52:0:13b0:3a60:77ff:fe87:765c fe80:0:0:0:3a60:77ff:fe87:765c OpenSCAP 1.0.10 00:00:00:00:00:00 38:60:77:87:76:5C 00:00:00:00:00:00 38:60:77:87:76:5C 38:60:77:87:76:5C needs_inspection INPLACERISK: SLIGHT: We detected some files where modifications are not tracked in the rpms. You may need to check their functionality after successful upgrade. needs_inspection INPLACERISK: SLIGHT: We detected some files untracked by rpms. Some of these may need manual check/migration after redhat-upgrade-tool and/or can cause conflicts or troubles during the installation. Try to reduce unnecessary untracked files before running redhat-upgrade-tool. notapplicable INFO [unknown]: Package bacula-common is not installed notapplicable INFO [unknown]: Package mysql is not installed notapplicable INFO [unknown]: Package mysql-server is not installed INFO [unknown]: Package mysql is not installed notapplicable INFO [unknown]: Package mysql-server is not installed INFO [unknown]: Package mysql is not installed notapplicable INFO [unknown]: Package postgresql-server is not installed notapplicable INFO [unknown]: Package xorg-x11-server-Xorg is not installed notapplicable INFO [unknown]: Package xorg-x11-server-Xorg is not installed pass notapplicable INFO [unknown]: Package xorg-x11-server-Xorg is not installed notapplicable INFO [unknown]: Package xorg-x11-server-Xorg is not installed pass pass notapplicable INFO [unknown]: Package arptables_jf is not installed notapplicable INFO [unknown]: Package bind-chroot is not installed notapplicable INFO unknown: Package bind is not installed notapplicable INFO [unknown]: Package dhcp is not installed notapplicable INFO unknown: Package dnsmasq is not installed notapplicable INFO [unknown]: Package dovecot is not installed informational INFO iptables: Creating /root/preupgrade/postupgrade.d/reenable-iptables WARNING iptables: Please read Remediation instructions. notapplicable INFO [unknown]: Package net-snmp is not installed informational fixed needs_inspection INPLACERISK: MEDIUM: ssh-keycat files are moved to openssh-keycat informational pass notapplicable INFO squid: Package squid is not installed notapplicable INFO [unknown]: Package vsftpd is not installed pass needs_inspection INPLACERISK: SLIGHT: Some config files are changed and .rpmnew files will be generated. informational informational notapplicable INFO [unknown]: Package bind is not installed notapplicable INFO [unknown]: Package dnsmasq is not installed needs_inspection INPLACERISK: SLIGHT: Some utilities were removed, moved between packages or change path. needs_action ls: cannot access /root/preupgrade/RHEL6_7/common/default-kept-pkgs: No such file or directory INPLACERISK: HIGH: You have installed Red Hat signed packages for different variant of RHEL system! needs_action INPLACERISK: HIGH: We detected some non-RH signed packages, you can find the list in /root/preupgrade/./kickstart/nonrhpkgs. You need to handle them yourself! needs_inspection INPLACERISK: MEDIUM: Some packages installed on the system were removed (obsoleted) between RHEL 6 and RHEL 7. This may break the functionality of packages depending on them. notapplicable INFO [unknown]: Package w3m is not installed notapplicable INFO [unknown]: Package qemu-guest-agent is not installed informational informational informational informational informational informational needs_action INPLACERISK: HIGH: After upgrading to RHEL 7 there are still some el6 packages left. Add --cleanup-post option to redhat-upgrade-tool if you want to remove them automatically. INPLACERISK: MEDIUM: We detected some packages installed on the system were removed between RHEL 6 and RHEL 7. This may break the functionality of the packages depending on them. notapplicable INFO [unknown]: Package taskjuggler is not installed needs_action INPLACERISK: HIGH: Package db4-cxx replacement moved to optional channel between RHEL 6 and RHEL 7. You need to enable this channel for upgrade. INPLACERISK: HIGH: Package m17n-db-datafiles replacement moved to optional channel between RHEL 6 and RHEL 7. You need to enable this channel for upgrade. INPLACERISK: SLIGHT: Some packages installed on the system changed their name between RHEL 6 and RHEL 7. Although they should be compatible, monitoring after the update is recommended. informational informational needs_action INPLACERISK: HIGH: Package SOAPpy moved to the Optional channel between RHEL 6 and RHEL 7. INPLACERISK: HIGH: Package groff moved to the Optional channel between RHEL 6 and RHEL 7. INPLACERISK: HIGH: Package liboil moved to the Optional channel between RHEL 6 and RHEL 7. INPLACERISK: HIGH: Package libproxy-bin moved to the Optional channel between RHEL 6 and RHEL 7. INPLACERISK: HIGH: Package libproxy-python moved to the Optional channel between RHEL 6 and RHEL 7. INPLACERISK: HIGH: Package libreport-compat moved to the Optional channel between RHEL 6 and RHEL 7. INPLACERISK: HIGH: Package libreport-plugin-kerneloops moved to the Optional channel between RHEL 6 and RHEL 7. INPLACERISK: HIGH: Package libreport-plugin-logger moved to the Optional channel between RHEL 6 and RHEL 7. INPLACERISK: HIGH: Package openscap-engine-sce is available in The Optional channel. INPLACERISK: HIGH: Package python-fpconst moved to the Optional channel between RHEL 6 and RHEL 7. INPLACERISK: HIGH: Package python-twisted-core moved to the Optional channel between RHEL 6 and RHEL 7. INPLACERISK: HIGH: Package python-twisted-web moved to the Optional channel between RHEL 6 and RHEL 7. INPLACERISK: HIGH: Package python-zope-interface moved to the Optional channel between RHEL 6 and RHEL 7. INPLACERISK: HIGH: Package system-config-firewall-tui moved to the Optional channel between RHEL 6 and RHEL 7. INPLACERISK: HIGH: Package xz-lzma-compat moved to the Optional channel between RHEL 6 and RHEL 7. fixed ERROR [unknown]: at least packages grep tzdata vim-filesystem python-requests vim-common vim-minimal vim-enhanced mesa-libGLU mesa-libGLU-devel json-c satyr kpartx are downgraded in RHEL7 INPLACERISK: MEDIUM: having one of [grep tzdata vim-filesystem python-requests vim-common vim-minimal vim-enhanced mesa-libGLU mesa-libGLU-devel json-c satyr kpartx] installed can break the upgrade fixed notapplicable INFO [unknown]: Package policycoreutils-python is not installed needs_action INPLACERISK: HIGH: There were changes in SELinux policies between RHEL 6 and RHEL 7. Please, check solution in order to resolve this issue. notapplicable INFO samba: Package samba is not installed fixed informational notapplicable INFO unknown: Package freeradius is not installed notapplicable INFO [unknown]: Package httpd is not installed notapplicable INFO [unknown]: Package bind-dyndb-ldap is not installed notapplicable INFO unknown: Package ipa-server is not installed notapplicable INFO [unknown]: Package pki-ca is not installed pass informational notapplicable INFO [unknown]: Package openldap-servers is not installed pass fixed export SSH_USE_STRONG_RNG=0 INPLACERISK: SLIGHT: export shell commands will be deleted from /etc/sysconfig/sshd pass pass notapplicable INFO [unknown]: Package sssd is not installed pass INFO cryptsetup-luks: Checking devices in /root/preupgrade/etc/crypttab INFO cryptsetup-luks: Check remaining devices in system using blkid notapplicable INFO [unknown]: Package lvm2-cluster is not installed fixed INFO device-mapper-event lvm2: The lvm2-monitor service is enabled. notapplicable INFO [unknown]: Package device-mapper-multipath is not installed notapplicable INFO [unknown]: Package scsi-target-utils is not installed pass informational pass ls: cannot access *.pem: No such file or directory ls: cannot access *.pem: No such file or directory ls: cannot access *.pem: No such file or directory ls: cannot access *.pem: No such file or directory pass needs_inspection INPLACERISK: SLIGHT: Some scripts untracked by RPM were discovered on the system and may not work properly after upgrade. pass pass INFO filesystem: Checking if /etc/mtab contains paths: ('/usr', '/var', '/var/run', '/var/lock') informational pass pass notapplicable INFO [unknown]: Package cman is not installed notapplicable INFO [unknown]: Package krb5-server is not installed informational informational needs_inspection INPLACERISK: MEDIUM: We detected some soname bumps in the libraries installed on the system. This may break the functionality of some of your 3rd party applications. They may need rebuild. Please check their requirements. informational needs_action INPLACERISK: HIGH: Library B.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Base64.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Byte.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library CN.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Call.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Cwd.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library DB_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library DProf.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Dumper.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library EBCDIC.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Encode.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library FastCalc.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Fcntl.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library FieldHash.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library GDBM_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Glob.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Hostname.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library IO.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library JP.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library KR.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Langinfo.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library MD5.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library NDBM_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Normalize.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Opcode.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library POSIX.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library PPPort.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Peek.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library SDBM_File.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Socket.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Soundex.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Storable.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Symbol.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library SysV.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Syslog.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library TW.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Unicode.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library Util.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library _certificate.so from redhat-upgrade-tool (required by NonRH signed package(s):redhat-upgrade-tool ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library _rpmbmodule.so from preupgrade-assistant-contents (required by NonRH signed package(s):beakerlib preupgrade-assistant preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library _rpmmodule.so from preupgrade-assistant-contents (required by NonRH signed package(s):beakerlib preupgrade-assistant preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library attrs.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library encoding.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library mro.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library re.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library scalar.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library shared.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library threads.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: HIGH: Library via.so from preupgrade-assistant-contents (required by NonRH signed package(s):preupgrade-assistant-contents ) removed between RHEL 6 and RHEL 7 INPLACERISK: MEDIUM: We detected some .so libraries installed on the system were removed between RHEL 6 and RHEL 7. This may break the functionality of some of your 3rd party applications. pass pass notapplicable INFO [unknown]: Package aide is not installed pass pass needs_inspection INPLACERISK: SLIGHT: File splash.xpm.gz was backuped for inplace upgrade case and editing grub options fixed pass pass needs_action INPLACERISK: MEDIUM: The service beah-beaker-backend is not installed by RedHat signed packages and will not be automatically enabled after in-place upgrade. INPLACERISK: MEDIUM: The service beah-fwd-backend is not installed by RedHat signed packages and will not be automatically enabled after in-place upgrade. INPLACERISK: MEDIUM: The service beah-srv is not installed by RedHat signed packages and will not be automatically enabled after in-place upgrade. INPLACERISK: HIGH: The service blk-availability on RHEL 7 is disabled by default. Enable them via commands: systemctl enable blk-availability && systemctl start blk-availability.service . INPLACERISK: MEDIUM: The name cups-lpd was changed on RHEL 7 to one of these services: cups-lpd.socket cups-lpd@.service INPLACERISK: HIGH: The service haldaemon on RHEL 7 is disabled by default. Enable them via commands: systemctl enable haldaemon && systemctl start haldaemon.service . INPLACERISK: HIGH: The service ip6tables on RHEL 7 is disabled by default. Enable them via commands: systemctl enable ip6tables && systemctl start ip6tables.service . INPLACERISK: HIGH: The service libvirt-guests on RHEL 7 is disabled by default. Enable them via commands: systemctl enable libvirt-guests && systemctl start libvirt-guests.service . INPLACERISK: HIGH: The service messagebus on RHEL 7 is disabled by default. Enable them via commands: systemctl enable messagebus && systemctl start messagebus.service . INPLACERISK: HIGH: The service netfs on RHEL 7 is disabled by default. Enable them via commands: systemctl enable netfs && systemctl start netfs.service . INPLACERISK: HIGH: The service network on RHEL 7 is disabled by default. Enable them via commands: systemctl enable network && systemctl start network.service . INPLACERISK: HIGH: The service nfslock on RHEL 7 is disabled by default. Enable them via commands: systemctl enable nfslock && systemctl start nfslock.service . INPLACERISK: HIGH: The service ntpd on RHEL 7 is disabled by default. Enable them via commands: systemctl enable ntpd && systemctl start ntpd.service . INPLACERISK: HIGH: The service ntpdate on RHEL 7 is disabled by default. Enable them via commands: systemctl enable ntpdate && systemctl start ntpdate.service . INPLACERISK: HIGH: The service portreserve on RHEL 7 is disabled by default. Enable them via commands: systemctl enable portreserve && systemctl start portreserve.service . INPLACERISK: HIGH: The service rhsmcertd on RHEL 7 is disabled by default. Enable them via commands: systemctl enable rhsmcertd && systemctl start rhsmcertd.service . INPLACERISK: HIGH: The service rpcgssd on RHEL 7 is disabled by default. Enable them via commands: systemctl enable rpcgssd && systemctl start rpcgssd.service . INPLACERISK: HIGH: The service sendmail on RHEL 7 is disabled by default. Enable them via commands: systemctl enable sendmail && systemctl start sendmail.service . INPLACERISK: HIGH: The service udev-post on RHEL 7 is disabled by default. Enable them via commands: systemctl enable udev-post && systemctl start udev-post.service . INPLACERISK: MEDIUM: The service anamon is disabled and not handled by any package. It will be disabled after an in-place upgrade. INPLACERISK: MEDIUM: The service beah-fakelc is disabled and not installed by RedHat signed packages. It will be disabled after an in-place upgrade. INPLACERISK: MEDIUM: The service rhts-compat is disabled and not installed by RedHat signed packages. It will be disabled after an in-place upgrade. needs_inspection INPLACERISK: SLIGHT: You use one network device with old style 'ethX' name. This will work as long as you only have one but will break with multiple such devices. INPLACERISK: MEDIUM: You use multiple network devices with old style 'ethX' names. pass notapplicable needs_action INPLACERISK: HIGH: additional libcgroup configuration files were created (/etc/cgconfig.d) pass informational notapplicable INFO [unknown]: Package php-common is not installed informational needs_inspection WARNING python: Package python-backportspython-backports-ssl_match_hostname is not installed on Red Hat Enterprise Linux system. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/backports is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/beah is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/beah-0.7.9.dev201508261529-py2.6.egg-info is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/preup is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/preupgrade_assistant-2.1.4-py2.6.egg-info is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/preuputils is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/redhat_access_insights is not owned by any RPM package. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/redhat_upgrade_tool is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib/python2.6/site-packages/rhts is owned by an RPM package that was not signed by Red Hat. INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/report is not owned by any RPM package. INPLACERISK: SLIGHT: /usr/lib64/python2.6/site-packages/reportclient is not owned by any RPM package. needs_inspection INPLACERISK: SLIGHT: Repo beaker-Server is enabled. INPLACERISK: SLIGHT: Repo beaker-Server-SAP is enabled. INPLACERISK: SLIGHT: Repo beaker-Server-optional-debuginfo is enabled. INPLACERISK: SLIGHT: Repo beaker-Server-optional is enabled. INPLACERISK: SLIGHT: Repo beaker-Server-debuginfo is enabled. INPLACERISK: SLIGHT: Repo beaker-HighAvailability is enabled. INPLACERISK: SLIGHT: Repo beaker-harness is enabled. INPLACERISK: SLIGHT: Repo rhel-source is not enabled. INPLACERISK: SLIGHT: Repo rhel-source-beta is not enabled. INPLACERISK: SLIGHT: Repo preupgrade-assistant is enabled. INPLACERISK: SLIGHT: Repo beaker-Server-SAP-debuginfo is enabled. INPLACERISK: SLIGHT: Repo beaker-ResilientStorage is enabled. INPLACERISK: SLIGHT: Repo beaker-tasks is enabled. INPLACERISK: SLIGHT: Repo beaker-LoadBalancer is enabled. INPLACERISK: SLIGHT: Repo beaker-Server-SAPHANA-debuginfo is enabled. INPLACERISK: SLIGHT: Repo beaker-Server-SAPHANA is enabled. INPLACERISK: SLIGHT: Repo beaker-ScalableFileSystem is enabled. INPLACERISK: SLIGHT: Enabled repo files for kickstart generation are stored /root/preupgrade/kickstart/available-repos. pass notapplicable INFO [unknown]: Package ruby is not installed pass notapplicable pass pass notapplicable informational notapplicable informational fixed pass INFO distribution: Incorrect shell used for adm account - now /sbin/nologin, should be /bin/bash based on reservation data WARNING distribution: Invalid gid used for games account - now 100, should be 20. INFO distribution: Incorrect shell used for rpcuser account - now /sbin/nologin, should be /bin/false based on reservation data INFO distribution: Incorrect homedir used for rpc account - now /var/cache/rpcbind, should be / based on reservation data INFO distribution: Incorrect shell used for rpc account - now /sbin/nologin, should be /bin/false based on reservation data INFO distribution: Incorrect shell used for mailnull account - now /sbin/nologin, should be /dev/null based on reservation data INFO distribution: Incorrect shell used for smmsp account - now /sbin/nologin, should be /dev/null based on reservation data INFO distribution: Incorrect shell used for postfix account - now /sbin/nologin, should be /bin/true based on reservation data pass notapplicable INFO [unknown]: Package ypbind is not installed notapplicable INFO [unknown]: Package ypserv is not installed notapplicable INFO [unknown]: Package ypserv is not installed notapplicable INFO [unknown]: Package ypserv is not installed notapplicable INFO [unknown]: Package ypserv is not installed 64.849998 39.000000