Chapter 5. Issues to be aware of for bookworm

As described in Section 2.2, “Archive areas”, non-free firmware packages are now served from a dedicated archive component, called non-free-firmware. To ensure installed non-free firmware packages receive proper upgrades, changes to the APT configuration are required. Assuming the non-free component was only added to the APT sources-list to install firmware, the updated APT source-list entry could look like:

deb https://deb.debian.org/debian bookworm main non-free-firmware

If you were pointed to this chapter by apt you can prevent it from continuously notifying you about this change by creating an apt.conf(5) file named /etc/apt/apt.conf.d/no-bookworm-firmware.conf with the following content:

APT::Get::Update::SourceListWarnings::NonFreeFirmware "false";

Puppet has been upgraded from 5 to 7, skipping the Puppet 6 series altogether. This introduces major changes to the Puppet ecosystem.

The classic Ruby-based Puppet Master 5.5.x application has been deprecated upstream and is no longer available in Debian. It is replaced by Puppet Server 7.x, provided by the puppetserver package. The package is automatically installed as a dependency of the transitional puppet-master package.

In some cases, Puppet Server is a drop-in replacement for Puppet Master, but you should review the configuration files available under /etc/puppet/puppetserver to ensure the new defaults are suitable for your deployment. In particular the legacy format for the auth.conf file is deprecated, see the auth.conf documentation for details.

The recommended approach is to upgrade the server before clients. The Puppet 7 Server is backwards compatible with older clients; a Puppet 5 Server can still handle upgraded agents but cannot register new Puppet 7 agents. So if you deploy new Puppet 7 agents before upgrading the server, you will not be able to add them to the fleet.

The puppet package has been replaced by the puppet-agent package and is now a transitional package to ensure a smooth upgrade.

Finally, the puppetdb package was removed in bullseye but is reintroduced in bookworm.

The popular tool youtube-dl, which can download videos from a large variety of websites (including, but not limited to, YouTube) is no longer included in Debian. Instead, it has been replaced with an empty transitional package that pulls in the yt-dlp package instead. yt-dlp is a fork of youtube-dl where new development is currently happening.

There are no compatibility wrappers provided, so you'll need to modify your scripts and personal behavior to call yt-dlp instead of youtube-dl. The functionality should be mostly the same, although some options and behavioral details have changed. Be sure to check yt-dlp's man page for details, and in particular the Differences in default behavior section.

When apt full-upgrade has finished, the “formal” upgrade is complete. For the upgrade to bookworm, there are no special actions needed before performing a reboot.

When apt full-upgrade has finished, the “formal” upgrade is complete, but there are some other things that should be taken care of before the next reboot.

	add list of items here
	
      

There are some packages where Debian cannot promise to provide minimal backports for security issues. These are covered in the following subsections.

	Note
	The package debian-security-support helps to track the security support status of installed packages.

The Debian provided python3 interpreter packages (python3.11 and pypy3) are now marked as being externally-managed, following PEP-668. The version of python3-pip provided in Debian follows this, and will refuse to manually install packages on Debian's python interpreters, unless the --break-system-packages option is specified.

If you need to install a Python application (or version) that isn't packaged in Debian, we recommend that you install it with pipx (in the pipx Debian package). pipx will set up an environment isolated from other applications and system Python modules, and install the application and its dependencies into that.

If you need to install a Python library module (or version) that isn't packaged in Debian, we recommend installing it into a virtualenv, where possible. You can create virtualenvs with the venv Python stdlib module (in the python3-venv Debian package) or the virtualenv Python 3rd-party tool (in the virtualenv Debian package). For example, instead of running pip install --user foo, run: mkdir -p ~/.venvs && python3 -m venv ~/.venvs/foo && ~/.venvs/foo/bin/python -m pip install foo to install it in a dedicated virtualenv.

See /usr/share/doc/python3.11/README.venv for more details.

Text.

The following is a list of known and noteworthy obsolete packages (see Section 4.8, “Obsolete packages” for a description).

          TODO: Use the change-release information and sort by popcon

          This needs to be reviewed based on real upgrade logs (jfs)

          Alternative, another source of information is the UDD
          'not-in-testing' page:
          https://udd.debian.org/bapase.cgi?t=testing
	

The list of obsolete packages includes:

With the next release of Debian 13 (codenamed trixie) some features will be deprecated. Users will need to migrate to other alternatives to prevent trouble when updating to Debian 13.

This includes the following features:

For a number of `arch`-based devices that were supported in bullseye, it is no longer viable for Debian to build the required Linux kernel, due to hardware limitations. The unsupported devices are:

Users of these platforms who wish to upgrade to bookworm nevertheless should keep the bullseye APT sources enabled. Before upgrading they should add an APT preferences file containing:

Package: linux-image-marvell
Pin: release n=bullseye
Pin-Priority: 900
	

The security support for this configuration will only last until bullseye's End Of Life.