From d3e0ea0f35c0b1696491b7c1750804c207abde32 Mon Sep 17 00:00:00 2001 From: Tommy Date: Tue, 28 May 2024 14:22:23 -0700 Subject: [PATCH] Add notes to fix FCOS 39 -> 40 upgrade Signed-off-by: Tommy --- README.md | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index cc9a6ce..fa2803b 100644 --- a/README.md +++ b/README.md @@ -7,4 +7,16 @@ Ignition configurations for Fedora CoreOS
3. If you create a passwordless user that requires administrative privileges, ensure that it is part of the `sudo` group (CoreOS allows this group to use sudo without a password) as the configs will disable empty password system authentication. 4. These configurations are made with a VPS in mind. You should adapt it for a bare metal deployment if that is what you are using (adding additional kernel parameters, configuring drive encryption, configuring storage, etc). You should also change the tuned profile from `virtual-guest` appropriately. 5. In most of these configs, the timezone is set to `America/Phoenix` and the automatic reboot time is set at 12 AM on Sunday. You need to be mindful of timezones with Daylight Savings per [Zincati documentation](https://coreos.github.io/zincati/usage/updates-strategy/). -6. The docker-compose-updater.service in `/etc/systemd/system` can be enabled to have automatic updates for your containers created by Docker Compose. Please make sure that the `WorkingDirectory` is appropriate. \ No newline at end of file +6. The docker-compose-updater.service in `/etc/systemd/system` can be enabled to have automatic updates for your containers created by Docker Compose. Please make sure that the `WorkingDirectory` is appropriate. + +# Upgrading from Fedora CoreOS 39 to 40 + +I am aware of a dependency issue which may cause the system to not automatically update itself to FCOS 40. To fix the problem, run: + +``` +systemctl stop zincati +rpm-ostree override reset clevis tpm2-tools tpm2-tss-fapi +rpm-ostree upgrade +rpm-ostree override remove clevis tpm2-tools tpm2-tss-fapi clevis-pin-tpm2 +reboot +``` \ No newline at end of file