Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Once upon a time I introduced the following line in our sources.list file:

deb http://ftp.ch.debian.org/debian/ testing main

I did that because I needed version 3.4 of the octave package, whereas the latest version in stable (lenny) was 3.2.

Fast-forward a few months, when I have completely forgotten about this change, and I decide to do a full upgrade of that server. I dutifully run

aptitude update
aptitude full-upgrade

And after a while, I discover to my horror that I have just upgraded to a testing distribution (wheezy).

None of the services running on that machine appear broken and everything seems normal. However, what should I reasonably do now? The machine runs only services used internally which, although not mission-critical, would be a pain in the butt if they were to fail.

The machine is hosted in a remote data center to which I have no access, and I am rather unwilling to go to the trouble of reinstalling a server from scratch if I can avoid it.

Note also that I am not a full-time sysadmin. Like any techie in a startup team, I am just the de-facto Linux guy.

share|improve this question
    
What is your question? I mean "Now what?" is a fairly broad one. ;) Do you want to downgrade or do you just need opinions on whether Debian testing is stable enough for your needs? In the latter case I think you need to give some information on the use of the server. –  steenhulthin Aug 19 '11 at 7:39
    
I'd like to know whether downgrading is even possible at all, yes. If not, and I leave it in testing, will I still get security updates? –  lindelof Aug 19 '11 at 7:51

3 Answers 3

up vote 3 down vote accepted

I'd like to know whether downgrading is even possible at all

There is no simple method to downgrade in Debian based distributions.

If you must go back, then it is time to perform a restore from the backups you made.

will I still get security updates?

Yes, but not as fast as you get them on stable.

In the past the testing security team did not learn about embargoed security issues. I believe this may not be an issue anymore, but it still mentions this on the wiki. An embargoed security issue is one which is not publically known, and its existence is to be reported to responsible organizations.. So there may be security patches released for a critical zero-day exploits for stable, but the fix for testing will be delayed.

See this page for details: http://testing-security.debian.net/

The machine runs only services used internally which, although not mission-critical, would be a pain in the butt if they were to fail.

Testing is not stable, this means that they might introduce a change into a package that causes your system to break, that changes the format of configuration files, or many other things. Your system may be working today, but what happens when you run apt-get upgrade to get your security updates in a week, and you also get a new version of a critical service that you depend on, that was a major update and changed the config file format, or introduced a change incompatible with your system.

I would be extremely cautious about running a production system on the testing distro, particularly if you can't easily get to a real console as your question seems to suggest.

share|improve this answer

I would be tempted to run your tests and see if they pass. If they do, then it's probably easier to stick with what you have and keep a close eye on it for problems. The best solution is to reinstall and you may have to do that at some time unexpectedly. Make sure you have good backups. Run

dpkg --get-selections  > dpkglist.txt

to get a list of the packages on the system and copy the dpkglist.txt to a safe place away from the system.

share|improve this answer

If it's working, don't worry too much about it. Keep an eye on the security announcements for anything you're running that you might want to keep updated, but if it's an internal-only machine, that's a little less crucial than it would be if it were exposed to the Internet.

Also, make a note for next time: backports are your friend.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.