Chapter 7. Performing post-upgrade tasks on the RHEL 9 system

1. Remove any remaining Leapp packages from the exclude list in the /etc/dnf/dnf.conf configuration file, including the snactor package, which is a tool for upgrade extension development. During the in-place upgrade, Leapp packages that were installed with the Leapp utility are automatically added to the exclude list to prevent critical files from being removed or updated. After the in-place upgrade, these Leapp packages must be removed from the exclude list before they can be removed from the system.

   • To manually remove packages from the exclude list, edit the /etc/dnf/dnf.conf configuration file and remove the desired Leapp packages from the exclude list.

   • To remove all packages from the exclude list:

     Copy to Clipboard Toggle word wrap

     # dnf config-manager --save --setopt exclude=''

2. Remove remaining RHEL 8 packages, including remaining Leapp packages.

   1. Remove the old kernel packages from the RHEL 9 system. For more information on removing kernel packages, see the Red Hat Knowledgebase solution What is the proper method to remove old kernels from a Red Hat Enterprise Linux system?

   2. Locate remaining RHEL 8 packages:

      Copy to Clipboard Toggle word wrap

      # rpm -qa | grep -e '\.el[78]' | grep -vE '^(gpg-pubkey|libmodulemd|katello-ca-consumer)' | sort

   3. Remove remaining RHEL 8 packages from your RHEL 9 system. To ensure that RPM dependencies are maintained, use DNF when performing this action. Review the transaction before accepting to ensure no packages are unintentionally removed.

      For example:

      Copy to Clipboard Toggle word wrap

      # dnf remove $(rpm -qa | grep \.el[78] | grep -vE 'gpg-pubkey|libmodulemd|katello-ca-consumer')

   4. Remove remaining Leapp dependency packages:

      Copy to Clipboard Toggle word wrap

      # dnf remove leapp-deps-el9 leapp-repository-deps-el9

3. Optional: Remove all remaining upgrade-related data from the system:

   Copy to Clipboard Toggle word wrap

   # rm -rf /var/log/leapp /root/tmp_leapp_py3 /var/lib/leapp

   Important

   Removing this data might limit Red Hat Support’s ability to investigate and troubleshoot post-upgrade problems.

4. Disable DNF repositories whose packages are not RHEL 9-compatible. Repositories managed by RHSM are handled automatically. To disable these repositories:

   Copy to Clipboard Toggle word wrap

   # dnf config-manager --set-disabled <repository_id>

   Replace repository_id with the repository ID.

5. Replace the old rescue kernel and initial RAM disk with the current kernel and disk:

   1. Remove the existing rescue kernel and initial RAM disk:

      Copy to Clipboard Toggle word wrap

      # rm /boot/vmlinuz-*rescue* /boot/initramfs-*rescue* 

   2. Reinstall the rescue kernel and related initial RAM disk:

      Copy to Clipboard Toggle word wrap

      # /usr/lib/kernel/install.d/51-dracut-rescue.install add "$(uname -r)" /boot "/boot/vmlinuz-$(uname -r)"

   3. If your system is on the IBM Z architecture, update the zipl boot loader:

      Copy to Clipboard Toggle word wrap

      # zipl

6. . Optional: Check existing configuration files:

   • Review, remediate, and then remove the rpmnew, rpmsave, and leappsave files. Note that rpmsave and leappsave are equivalent and can be handled similarly. For more information, see What are rpmnew & rpmsave files?
   • Remove configuration files for RHEL 8 DNF modules from the /etc/dnf/modules.d/ directory that are no longer valid. Note that these files have no effect on the system when related DNF modules do not exist.
7. Re-evaluate and re-apply your security policies. Especially, change the SELinux mode to enforcing. For details, see Applying security policies.

Verification

1. Verify that the previously removed rescue kernel and rescue initial RAM disk files have been created for the current kernel:

   Copy to Clipboard Toggle word wrap

   # ls /boot/vmlinuz-*rescue* /boot/initramfs-*rescue* 
   # lsinitrd /boot/initramfs-*rescue*.img | grep -qm1 "$(uname -r)/kernel/" && echo "OK" || echo "FAIL"

2. Verify the rescue boot entry refers to the existing rescue files. See the grubby output:

   Copy to Clipboard Toggle word wrap

   # grubby --info /boot/vmlinuz-*rescue*

3. Review the grubby output and verify that no RHEL 8 boot entries are configured:

   Copy to Clipboard Toggle word wrap

   # grubby --info ALL

4. Verify that no files related to previous RHEL are present in the /boot/loader/entries file:

   Copy to Clipboard Toggle word wrap

   # grep -r ".el8" "/boot/loader/entries/" || echo "Everything seems ok."