Postfix in upgrade - Jessie to Ascii

Geoff 42 · 2018-04-03 09:41:20

During the upgrade from Jessie to Ascii, Postfix moves from version 2.11.3 to 3.1.8. In version 3 Postfix introduces a feature to warn you of possible negative effects of changes to default settings. The details can be found at http://www.postfix.org/COMPATIBILITY_README.html.

As I understand it, if there are any default settings which are being used and which have changed, then the old settings will be used, but any future negative effect on your mail delivery will be logged. I think that the idea is that you leave your mail system running, but check the logs and make any config changes that may be required. Once you are happy with your set-up, you can disable the compatability checking in main.cf by settting the compatability_level=N, where N is 2 in this case.

If you run /usr/sbin/postfix check you may notice that as well as the backwards-compatability messages, Postfix may also warn that some files differ. It appears that Postfix has copies of some files in /var/spool/postfix from /etc and /lib and then reports if they have changed. This has been answered at :-

https://serverfault.com/questions/39611 … fer#396127

/var/spool/postfix is where Postfix can run chroot-ed. If the files there are different, then there could be problems if you run chrooted. There were reportedly scripts for setting up the chroot environment in the source code distribution in examples/chroot-setup. Installing postfix-doc does pull in the documentation and create /usr/share/doc/postfix/examples, but doesn't populate it!

As myself I downloaded the sources, after creating the file /etc/apt/sources.list.d/sources.list :-
deb-src http://pkgmaster.devuan.org/merged/ ascii main

apt-get source postfix

This produces a directory postfix-3.1.8 which contains examples/chroot-setup/ which includes the file LINUX2, which sets-up the required files for chroot.

This should produce a copy of the file without having to download the sources :-

cat << EOF > LINUX2
#! /bin/sh

# LINUX2 - shell script to set up a Postfix chroot jail for Linux
# Tested on SuSE Linux 5.3 (libc5) and 7.0 (glibc2.1)

# Other testers reported as working:
#
# 2001-01-15 Debian sid (unstable)
#            Christian Kurz <shorty@getuid.de>

# Copyright (c) 2000 - 2001 by Matthias Andree
# Redistributable unter the MIT-style license that follows:
# Abstract: "do whatever you want except hold somebody liable or change
# the copyright information".

# Permission is hereby granted, free of charge, to any person obtaining a copy
# of this software and associated documentation files (the "Software"), to
# deal in the Software without restriction, including without limitation the
# rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
# sell copies of the Software, and to permit persons to whom the Software is
# furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in
# all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
# IN THE SOFTWARE.

# 2000-09-29
# v0.1: initial release

# 2000-12-05
# v0.2: copy libdb.* for libnss_db.so
#       remove /etc/localtime in case it's a broken symlink
#       restrict find to maxdepth 1 (faster)

# Revision 1.4  2001/01/15 09:36:35  emma
# add note it was successfully tested on Debian sid
#
# 20060101 /lib64 support by Keith Owens.
#

CP="cp -p"

cond_copy() {
  # find files as per pattern in $1
  # if any, copy to directory $2
  dir=`dirname "$1"`
  pat=`basename "$1"`
  lr=`find "$dir" -maxdepth 1 -name "$pat"`
  if test ! -d "$2" ; then exit 1 ; fi
  if test "x$lr" != "x" ; then $CP $1 "$2" ; fi
} 

set -e
umask 022

POSTFIX_DIR=${POSTFIX_DIR-/var/spool/postfix}
cd ${POSTFIX_DIR}

mkdir -p etc lib usr/lib/zoneinfo
test -d /lib64 && mkdir -p lib64

# find localtime (SuSE 5.3 does not have /etc/localtime)
lt=/etc/localtime
if test ! -f $lt ; then lt=/usr/lib/zoneinfo/localtime ; fi
if test ! -f $lt ; then lt=/usr/share/zoneinfo/localtime ; fi
if test ! -f $lt ; then echo "cannot find localtime" ; exit 1 ; fi
rm -f etc/localtime

# copy localtime and some other system files into the chroot's etc
$CP -f $lt /etc/services /etc/resolv.conf /etc/nsswitch.conf etc
$CP -f /etc/host.conf /etc/hosts /etc/passwd etc
ln -s -f /etc/localtime usr/lib/zoneinfo

# copy required libraries into the chroot
cond_copy '/lib/libnss_*.so*' lib
cond_copy '/lib/libresolv.so*' lib
cond_copy '/lib/libdb.so*' lib
if test -d /lib64; then
  cond_copy '/lib64/libnss_*.so*' lib64
  cond_copy '/lib64/libresolv.so*' lib64
  cond_copy '/lib64/libdb.so*' lib64
fi

postfix reload
EOF

As root :-

# cd ~user1/src/Devuan/postfix-3.1.8/examples/chroot-setup/
# source LINUX2
postfix: Postfix is running with backwards-compatible default settings
postfix: See http://www.postfix.org/COMPATIBILITY_README.html for details
postfix: To disable backwards compatibility use "postconf compatibility_level=2" and "postfix reload"
postfix/postfix-script: refreshing the Postfix mail system

This seems to have updated all of the files correctly.

Geoff

The officially official Devuan Forum!

#1 2018-04-03 09:41:20

Postfix in upgrade - Jessie to Ascii

Board footer