NPO Hosting en Streaming

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
~~META:
title = C2021D06: Software updates april 2021
~~
{{htmlmetatags>
metatag-keywords=(software update)
metatag-og:title=(Software updates april 2021)
metatag-og:description=(
	In de periode van 12--15 april worden er software updates in de
	NPO hosting omgeving uitgevoerd. Het betreft:
	keepalived, nginx, php, tomcat, newrelic-java, elasticsearch,
	grafana, influxdb, openldap, imagemagick, rclone, dovecot,
	syslog-ng, spamassassin, unrar, bind, git en sudo.
	Verder zijn er meldingen betreffende 
	PowerDNS upgrade,
	Verwijdering van NodeJS-10 executables van het platform en
	OS upgrades hosting omgeving afgerond
	)
}}
====== C2021D06: Software updates april 2021 ======
====== Aankondiging: Software onderhoud hosting omgeving ======
Beste klant/collega,

(Is dit bericht niet goed leesbaar? Bekijk dan de [[|online versie]].)

Wij vragen aandacht voor het volgende:
  - PowerDNS upgrade
  - Verwijdering van NodeJS-10 executables van het platform
  - OS upgrades hosting omgeving afgerond
  - Reguliere software updates

==== PowerDNS upgrade ====
Eind vorig jaar is een nieuwe major versie van PowerDNS uitgekomen
(4.4) en inmiddels is de eerste minor upgrade daarvan ook beschikbaar
(4.4.1). Daarmee is ook de support vervallen voor 4.1. Momenteel
gebruiken we een mix van 4.1 en 4.3. Alle bestaande versies worden
geüpgrade naar versie 4.4.1. De systemen worden stuk-voor-stuk
geüpgrade waarmee geen onderbreking in de dienstverlening zal
optreden.

In detail gaat het om de volgende publiek bereikbare systemen:
^server			^van	^naar^
|ns1.npohosting.nl	|4.1.14	|4.4.1|
|ns2.npohosting.eu	|4.1.14	|4.4.1|
|ns3.npohosting.nl	|4.1.14	|4.4.1|
|jim.npodns.nl		|4.3.1	|4.4.1|
|june.npodns.net	|4.3.1	|4.4.1|

==== Verwijdering van NodeJS-10 executables van het platform ====
NodeJS versie 10 is per 30 april 2021 End-Of-Life. De afgelopen tijd
zijn de NodeJS gebruikers op het platform overgestapt naar een nieuwere
versie (12). Aangezien versie 10 nu niet meer gebruikt wordt wordt deze
versie op 2 april verwijderd van de testomgeving en in productie op
maandag 12 april.

==== OS upgrades hosting omgeving afgerond ====
Vorige maand
[[c2021d04-software-updates-202103#status_os_upgrades_team_hosting_streaming|berichtten]]
we over de voortgang van de Linux OS upgrades binnen de hosting
omgeving. Inmiddels zijn deze upgrades afgerond en draait het gehele
platform weer een supported versie van linux, te weten 
[[https://wiki.centos.org/Manuals/ReleaseNotes/CentOSStream|CentOS 8 Stream]].

===== Software update rooster =====
Het software update rooster voor de komende tijd ziet er als volgt uit:
^Actie					^uitrol in test	^gelegenheid tot testen	^uitrol in productie	^
|software updates April			|1--2 april	|5--9 april		|12--15 april		|
|upgrade PowerDNS			|-		|-			|12--15 april		|
|verwijderen NodeJS-10			|2 april	|5--9 april		|12 april		|
|software updates Mei			|29--30 april	|3--7 mei		|10--13 mei		|
|software updates Juni			|27--28 mei	|31 mei -- 4 juni	|7--10 juni		|

===== Reguliere software updates =====
De updates worden op 1--2 april op het testcluster doorgevoerd,
waarna de week van 5--9 april gebruikt kan worden om te testen.
In de periode van 12--15 april worden de updates op de
productie-omgevingen doorgevoerd volgens onderstaand schema:

/* Dingen die deze ronde niet meedoen zijn uit ge-comment */
^wat			^impact	^op	^van		^ naar		^
|keepalived		|0	|W	|2.2.1		|[[http://www.keepalived.org/changelog.html|2.2.2]]|
/*|icecast		|0	|W	|2.4.0-kh15	|[[https://github.com/karlheyes/icecast-kh|2.4.0-kh15]] |*/
/*^ ^^^^^*/
/*|dhcp			|0	|D1	|4.4.2		|[[https://ftp.isc.org/isc/dhcp/4.4.2/dhcp-4.4.2-RELNOTES|4.4.2]] |*/
/*|freeipmi		|0	|D1	|1.6.7		|[[https://www.gnu.org/software/freeipmi/NEWS|1.6.7]] |*/
/*|nrpe			|0	|D1	|4.0.3		|[[https://github.com/NagiosEnterprises/nrpe/blob/master/CHANGELOG.md|4.0.3]] |*/
/*|cacti			|0	|D1	|1.2.16		|[[https://www.cacti.net/changelog.php|1.2.16]]	|*/
/*|cacti-spine		|0	|D1	|1.2.16		|[[https://www.cacti.net/spine_changelog.php|1.2.16]] |*/
/*|phpmyadmin		|0	|D1	|5.1.0		|[[https://www.phpmyadmin.net/files/5.1.0/|5.1.0]]	|*/
/*|openssh		|0	|D1	|8.5p1		|[[https://www.openssh.com/releasenotes.html|8.5p1]] |*/
/*|GeoIP		|0	|D1	|1.6.12		|1.6.12 | */
/*|geoipupdate		|0	|D1	|3.1.1		|[[https://github.com/maxmind/geoipupdate/blob/master/CHANGELOG.md|3.1.1]] |*/
/*|fcron		|0	|D1	|3.2.1		|[[http://fcron.free.fr/doc/en/changes.html|3.2.1]] |*/
/*|chrony		|0	|D1	|3.5		|[[https://chrony.tuxfamily.org/news.html|3.5.1]] |*/
|openldap		|1	|D1	|2.4.57		|[[https://www.openldap.org/software/release/changes.html|2.4.58]] |
/*|freeradius 3.x	|1	|D1	|3.0.20		|[[https://freeradius.org/release_notes/?br=3.0.x&re=3.0.21|3.0.21]] |*/
|dovecot		|1	|D1	|2.3.13		|[[https://www.dovecot.org/|2.3.14]] |
/*|mailman		|1	|D1	|2.1.33		|[[https://launchpad.net/mailman/2.1/2.1.34|2.1.34]] |*/
/*|mongodb		|1	|D1	|4.4.0		|[[https://docs.mongodb.com/manual/release-notes/4.4/|4.4.1]] |*/
/*|mongodb-database-tools	|0	|D1	|100.1.1	|[[https://docs.mongodb.com/database-tools/release-notes/database-tools-changelog/|100.2.0]] |*/
/*|graylog		|1	|D1	|3.3.5		|[[http://docs.graylog.org/en/3.3/pages/changelog.html|3.3.8]] |*/
|influxdb		|1	|D1	|1.8.3		|[[https://docs.influxdata.com/influxdb/v2.0/reference/release-notes/influxdb/|2.0.4]] |
|grafana		|1	|D1	|7.4.3		|[[https://github.com/grafana/grafana/blob/master/CHANGELOG.md|7.5.1]] |
/*|postgresql 		|1	|D1	|9.6.21		|[[https://www.postgresql.org/docs/9.6/static/release.html|9.6.21]]|*/
/*|alsa-utils		|0	|D1	|1.2.4		|[[https://www.alsa-project.org/wiki/Main_Page|1.2.4]] |*/
/*|mp4split		|0	|D1	|1.10.28	|[[https://docs.unified-streaming.com/installation/distributions.html|1.10.28]]	|*/
/*|mod_smooth_streaming	|0	|D1	|1.10.28	|[[https://docs.unified-streaming.com/installation/distributions.html|1.10.28]]	|*/
/*|atop			|0	|D1	|2.6.0		|[[https://www.atoptool.nl/downloadatop.php|2.6.0]]	|*/
|sudo			|0	|D1	|1.9.5p2	|[[https://www.sudo.ws/changes.html|1.9.6p2]]	|
^ ^^^^^
|syslog-ng		|0	|D2	|3.30.1		|[[https://github.com/balabit/syslog-ng/blob/master/NEWS.md|3.31.1]]	|
/*|apache			|0	|D2	|2.4.43		|[[http://www.apache.org/dist/httpd/CHANGES_2.4.43|2.4.46]] |*/
|nginx			|0	|D2	|1.19.7		|[[http://nginx.org/en/CHANGES|1.19.9]]|
|php 7.3		|0	|D2	|7.3.27		|[[https://www.php.net/ChangeLog-7.php#7.3.27|7.3.27]]((openssl patch))	|
|php 7.4		|0	|D2	|7.4.15		|[[https://www.php.net/ChangeLog-7.php#7.4.16|7.4.16]]	|
/*|passenger		|0	|D2	|6.0.6		|[[https://github.com/phusion/passenger/blob/stable-6.0/CHANGELOG|6.0.7]] |*/
/*|ruby 2.6		|0	|D2	|2.6.6		|[[https://www.ruby-lang.org/en/news/2019/10/01/ruby-2-6-6-released/|2.6.6]] |*/
/*|python		|0	|D2	|2.7.17		|[[https://www.python.org/downloads/release/python-2717/|2.7.17]]	|*/
/*|python			|0	|D2	|3.8.8		|[[https://docs.python.org/3.8/whatsnew/changelog.html|3.8.8]] |*/
|node 10		|0	|D2	|10.24.0	|wordt verwijderd van platform	|
/*|node 12		|0	|D2	|12.21.0	|[[https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V12.md|12.21.0]]	|*/
/*|yarn			|0	|D2	|1.22.5		|[[https://github.com/yarnpkg/yarn/blob/master/CHANGELOG.md|1.22.5]]|*/
/*|perl			|0	|D2	|5.32.1		|[[https://perldoc.perl.org/index-history.html|5.32.1]]	|*/
/*|tomcat-native		|0	|D2	|1.2.26		|[[http://tomcat.apache.org/native-doc/miscellaneous/changelog.html|1.2.26]] |*/
|ImageMagick 		|0	|D2	|7.0.11-2	|[[https://www.imagemagick.org/script/changelog.php|7.0.11-4]] |
/*|curl			|0	|D2	|7.75.0		|[[https://curl.haxx.se/changes.html|7.75.0]] |*/
/*|goaccess		|0	|D2	|1.4.6		|[[https://goaccess.io/release-notes|1.4.6]] |*/
/*|gzip			|0	|D2	|1.10		|[[https://www.gnu.org/software/gzip/|1.10]] |*/
|rclone			|0	|D2	|1.54.0		|[[https://rclone.org/changelog/|1.54.1]] |
/*|ts			|0	|D2	|0.7.3		|[[http://freshmeat.sourceforge.net/projects/taskspooler|0.7.3]] |*/
/*|ffmpeg			|0	|D2	|4.3.2		|[[https://www.ffmpeg.org/download.html#releases|4.3.2]] |*/
/*|sox			|0	|D2	|14.4.2		|[[http://sox.sourceforge.net/|14.4.2]] |*/
|git			|0	|D2	|2.30.2		|[[https://git-scm.com/|2.31.1]] |
/*|netperf		|0	|D2	|2.7.0		|[[https://github.com/HewlettPackard/netperf/blob/master/Release_Notes|2.7.0]] |*/
/*|id3v2			|0	|D2	|0.1.11		|[[https://sourceforge.net/projects/id3v2/|0.1.12]] |*/
/*|httperf		|0	|D2	|2020-08-02	|[[https://github.com/httperf/httperf|2020-12-06]]	|*/
/*|wkhtmltox		|0	|D2	|0.11.0		|[[https://github.com/wkhtmltopdf/wkhtmltopdf/blob/master/CHANGELOG.md|0.12.6]] |*/
/*|postfix		|0	|D2	|3.5.9		|[[http://www.postfix.org/announcements/postfix-3.5.9.html|3.5.9]] |*/
/*|amavisd		|0	|D2	|2.11.1		|[[https://www.amavis.org/release-notes.txt|2.11.1]] |*/
/*|clamav			|0	|D2	|0.103.1	|[[https://blog.clamav.net/|0.103.1]] |*/
/*|p0f			|0	|D2	|3.09b		|[[https://lcamtuf.coredump.cx/p0f3/|3.09b]] |*/
/*|postgrey		|0	|D2	|1.37		|[[https://github.com/schweikert/postgrey/blob/master/Changes|1.37]] |*/
|spamassassin		|0	|D2	|3.4.4		|[[https://spamassassin.apache.org/news.html|3.4.5]] |
|unrar			|0	|D2	|6.0.3		|[[http://www.linuxfromscratch.org/blfs/view/svn/general/unrar.html|6.0.4]] |
|bind			|0	|D2	|9.11.28	|[[https://ftp.isc.org/isc/bind9/9.11.29/CHANGES|9.11.29]] |
/*|unbound		|0	|D2	|1.13.1		|[[http://www.unbound.net/download.html|1.13.1]]	|*/
/*|redis			|1	|D2	|6.2.1		|[[https://raw.githubusercontent.com/antirez/redis/6.2/00-RELEASENOTES|6.2.1]] |*/
^ ^^^^^
/*|memcached		|1--2	|N3	|1.6.8		|[[https://github.com/memcached/memcached/wiki/ReleaseNotes169|1.6.9]]|*/
/*|OpenJDK8U-jre		|2	|N3	|8u275b01 	|[[https://adoptopenjdk.net/release_notes.html|8u282b08]]	|*/
/*|OpenJDK11U-jre		|2	|N3	|11.0.9_11	|[[https://adoptopenjdk.net/release_notes.html|11.0.10_9 ]]	|*/
/*|OpenJDK11U-jdk		|2	|N3	|11.0.9_11	|[[https://adoptopenjdk.net/release_notes.html|11.0.10_9 ]]	|*/
|tomcat 8		|2	|N3	|8.5.63		|[[https://tomcat.apache.org/tomcat-8.5-doc/changelog.html|8.5.64]] |
|tomcat 9		|2	|N3	|9.0.43		|[[https://tomcat.apache.org/tomcat-9.0-doc/RELEASE-NOTES.txt|9.0.44]] |
/*|mysql-connector-java	|2	|N3	|8.0.23		|[[https://dev.mysql.com/doc/relnotes/connector-j/8.0/en/|8.0.23]] |8/
/*|mysql-connector-java5 |2	|N3	|5.1.49		|[[https://dev.mysql.com/doc/relnotes/connector-j/5.1/en/|5.1.49]] |*/
|newrelic-java		|2	|N3	|6.4.1		|[[https://docs.newrelic.com/docs/agents/java-agent|6.4.2]]	|
/*|ActiveMQ		|2	|N3	|5.16.1		|[[http://activemq.apache.org/activemq-51513-release.html|5.16.1]] |*/
/*|keycloak		|2	|N3	|12.0.4		|[[https://www.keycloak.org/docs/latest/release_notes/index.html|12.0.4]] |*/
/*|mariadb 		|1	|N3	|10.2.37	|[[https://mariadb.com/kb/en/library/mariadb-10237-release-notes/|10.2.37]] |*/
/*|mysql			|1	|N3	|5.7.33		|[[https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-33.html|5.7.33]] |*/
^ ^^^^^
|Elastic Search 7.x	|0	|D3	|7.11.2		|[[https://www.elastic.co/guide/en/elasticsearch/reference/7.12/es-release-notes.html|7.12.0]] |
^ ^^^^^

/* EOL spul */
/*|Elastic Search 5.x	|0	|D3	|5.6.15		|[[https://www.elastic.co/guide/en/elasticsearch/reference/5.6/es-release-notes.html|5.6.16]] |*/
/*|Elastic Search 6.x	|0	|D3	|6.8.12		|[[https://www.elastic.co/guide/en/elasticsearch/reference/6.8/es-release-notes.html|6.8.13]] |*/

==== Legenda ====
Veel software kan zonder, of met heel weinig impact ge-update worden.
Voor deze zaken
kiezen we ervoor om zo'n update overdag uit te voeren. Bij een aantal
andere componenten is er iets meer impact merkbaar. Die voeren we
uit in een nachtelijks change window. Hieronder is
de impact genummerd van 0 (geen impact) via 1 (korte onderbreking van
enkele seconden) tot 2 (onderbreking van enkele minuten op de
dienstverlening).
De tijdstippen zijn als volgt:
^code	^tijdstip	^
|D1	|maandag 12 april 8:00--17:00	|
|D2	|dinsdag 13 april 8:00--12:00	|
|N3	|woensdag 14 april 1:00--6:00 AM	|
|D3	|woensdag 14 april 8:00--17:00	|
|W	|12--15 april 8:00--17:00		|
/*|tbd	|te bepalen in overleg met de gebruikers	|*/

==== Bereikbaarheid ====
Team Hosting&Streaming is gedurende al het onderhoud via de normale
kanalen bereikbaar. Zie de [[:contact|contact pagina]].