{ "schemaVersion": "0.11.0", "canonical": "https://www.pystone.net/notes/linux-distro-migration-checklist/", "atlas": "https://www.pystone.net/?node=linux-distro-migration-checklist#knowledge-atlas", "markdown": "https://www.pystone.net/notes/linux-distro-migration-checklist.md", "context": "https://www.pystone.net/notes/linux-distro-migration-checklist.context.json", "knowledgeVersion": "224c990773de.5fa8af6e39fa", "build": { "siteCommit": "224c990773de166d23a886306577dd90379529ce", "notesCommit": "5fa8af6e39fa3891d1b9b4832bfa6c4e0ecaaf0a", "builtAt": "1970-01-01T00:00:00.000Z", "version": "224c990773de.5fa8af6e39fa" }, "id": "note:linux-distro-migration-checklist", "slug": "linux-distro-migration-checklist", "title": "受支持 Linux 发行版的部署迁移检查清单", "type": "note", "visibility": "public", "idStability": "rename-stable", "author": { "name": "Perrin Yong", "profile": "https://www.pystone.net/profile/" }, "publisher": { "name": "Perrin Yong", "profile": "https://www.pystone.net/profile/" }, "aliases": [], "summary": "受支持 Linux 发行版的部署迁移检查清单", "contentRole": "unspecified", "isMoc": false, "mocRecognition": "none", "generated": false, "attribution": "unspecified", "domain": "10-计算机、信息技术与工程", "tags": [], "mocs": [], "contentHash": "71a9e1cd92d989021d42efd26e83d1668f0fe81e854b837c3fd5f1bfab5cbb48", "assets": [], "headings": [ { "depth": 1, "text": "受支持 Linux 发行版的部署迁移检查清单", "anchor": "受支持-linux-发行版的部署迁移检查清单", "citation": "https://www.pystone.net/notes/linux-distro-migration-checklist/#%E5%8F%97%E6%94%AF%E6%8C%81-linux-%E5%8F%91%E8%A1%8C%E7%89%88%E7%9A%84%E9%83%A8%E7%BD%B2%E8%BF%81%E7%A7%BB%E6%A3%80%E6%9F%A5%E6%B8%85%E5%8D%95" }, { "depth": 2, "text": "1. 盘点现状", "anchor": "1-盘点现状", "citation": "https://www.pystone.net/notes/linux-distro-migration-checklist/#1-%E7%9B%98%E7%82%B9%E7%8E%B0%E7%8A%B6" }, { "depth": 2, "text": "2. 选择目标", "anchor": "2-选择目标", "citation": "https://www.pystone.net/notes/linux-distro-migration-checklist/#2-%E9%80%89%E6%8B%A9%E7%9B%AE%E6%A0%87" }, { "depth": 2, "text": "3. 在隔离环境重建", "anchor": "3-在隔离环境重建", "citation": "https://www.pystone.net/notes/linux-distro-migration-checklist/#3-%E5%9C%A8%E9%9A%94%E7%A6%BB%E7%8E%AF%E5%A2%83%E9%87%8D%E5%BB%BA" }, { "depth": 2, "text": "4. 验证", "anchor": "4-验证", "citation": "https://www.pystone.net/notes/linux-distro-migration-checklist/#4-%E9%AA%8C%E8%AF%81" }, { "depth": 2, "text": "5. 切换与退役", "anchor": "5-切换与退役", "citation": "https://www.pystone.net/notes/linux-distro-migration-checklist/#5-%E5%88%87%E6%8D%A2%E4%B8%8E%E9%80%80%E5%BD%B9" }, { "depth": 2, "text": "参考资料", "anchor": "参考资料", "citation": "https://www.pystone.net/notes/linux-distro-migration-checklist/#%E5%8F%82%E8%80%83%E8%B5%84%E6%96%99" } ], "claims": [], "outgoing": [], "incoming": [ { "id": "note:unix-firewall-server-port-process", "title": "【OS Unix-like】防火墙,服务器,端口,进程", "url": "https://www.pystone.net/notes/unix-firewall-server-port-process/", "atlas": "https://www.pystone.net/?node=unix-firewall-server-port-process#knowledge-atlas", "label": "【OS Unix-like】防火墙,服务器,端口,进程", "origin": "explicit", "humanReviewed": true, "context": "文中的 CentOS 7 与部分 服务命令只用于遗留环境。CentOS Linux 7 已于 2024-06-30 停止维护；新系统应先确认发行版、网络管理器、//UFW 的当前实现，再执行变更。迁移步骤见 受支持Linux发行版的部署迁移检查清单。", "citation": "https://www.pystone.net/notes/unix-firewall-server-port-process/#os-unix-like%E9%98%B2%E7%81%AB%E5%A2%99%E6%9C%8D%E5%8A%A1%E5%99%A8%E7%AB%AF%E5%8F%A3%E8%BF%9B%E7%A8%8B" }, { "id": "note:centos7-network-configuration", "title": "【OS Unix-like】CentOS 7 网络配置", "url": "https://www.pystone.net/notes/centos7-network-configuration/", "atlas": "https://www.pystone.net/?node=centos7-network-configuration#knowledge-atlas", "label": "【OS Unix-like】CentOS 7 网络配置", "origin": "explicit", "humanReviewed": true, "context": "CentOS Linux 7 已于 2024-06-30 停止维护，不再获得常规安全更新。本文仅用于维护遗留环境；新部署应使用仍在支持期内的发行版，并以其当前网络管理文档为准。迁移步骤见 受支持Linux发行版的部署迁移检查清单。", "citation": "https://www.pystone.net/notes/centos7-network-configuration/#os-unix-likecentos-7-%E7%BD%91%E7%BB%9C%E9%85%8D%E7%BD%AE" }, { "id": "note:software-engineering-and-quality", "title": "软件工程与质量保障", "url": "https://www.pystone.net/notes/software-engineering-and-quality/", "atlas": "https://www.pystone.net/?node=software-engineering-and-quality#knowledge-atlas", "label": "软件工程与质量保障", "origin": "explicit", "humanReviewed": true, "context": "CI-CD与质量保障/CI-CD工具链中的“受支持Linux发行版的部署迁移检查清单”导航项", "citation": "https://www.pystone.net/notes/software-engineering-and-quality/#ci-cd%E4%B8%8E%E8%B4%A8%E9%87%8F%E4%BF%9D%E9%9A%9Cci-cd%E5%B7%A5%E5%85%B7%E9%93%BE" }, { "id": "note:vps-setup-guide", "title": "VPS 搭建教程（历史原文转写）", "url": "https://www.pystone.net/notes/vps-setup-guide/", "atlas": "https://www.pystone.net/?node=vps-setup-guide#knowledge-atlas", "label": "VPS 搭建教程（历史原文转写）", "origin": "explicit", "humanReviewed": true, "context": "参见：受支持Linux发行版的部署迁移检查清单。", "citation": "https://www.pystone.net/notes/vps-setup-guide/#%E5%BD%93%E5%89%8D%E4%BD%BF%E7%94%A8%E6%97%B6%E5%BF%85%E9%A1%BB%E6%9B%BF%E6%8D%A2%E7%9A%84%E5%81%9A%E6%B3%95" } ], "contentMarkdown": "# 受支持 Linux 发行版的部署迁移检查清单\n\n## 1. 盘点现状\n\n- 记录发行版、内核、CPU 架构、软件源和停止支持日期。\n- 导出服务清单、监听端口、定时任务、系统用户、证书和挂载点。\n- 记录包、语言运行时、数据库、容器与 CI 插件的版本。\n- 标出写入目录、状态数据、日志、密钥和外部依赖。\n\n## 2. 选择目标\n\n目标发行版必须仍在安全支持期内，并满足应用、驱动、云平台和运维工具兼容性。不要只按“命令与旧系统相似”选择；应核对官方生命周期、升级路径和软件源策略。\n\n对已经停止维护的 CentOS Linux 7，通常优先考虑在新主机上重建并迁移服务，而不是继续在原系统原地叠加第三方补丁。具体可以评估 RHEL、兼容的企业 Linux 发行版、CentOS Stream 或 Ubuntu LTS，但最终选择取决于组织支持与应用认证。\n\n## 3. 在隔离环境重建\n\n- 使用基础设施代码或可重复脚本创建主机。\n- 从可信源安装最小软件集，禁用不需要的服务。\n- 单独恢复配置和数据，不直接复制整个旧系统根目录。\n- 使用系统凭据管理或密钥管理服务重新签发秘密。\n- 配置主机防火墙，同时核对云安全组和负载均衡规则。\n\n## 4. 验证\n\n- 功能：启动、读写、队列、邮件、仓库与外部 API。\n- 数据：数量、摘要、权限、字符集与时区。\n- 性能：典型负载、峰值、磁盘和网络延迟。\n- 安全：补丁状态、最小权限、TLS、审计日志和漏洞扫描。\n- 运维：监控、告警、备份、恢复、扩容和回滚。\n\n## 5. 切换与退役\n\n1. 降低 DNS TTL，冻结高风险变更。\n2. 完成最终增量同步，并校验数据一致性。\n3. 小流量切换，观察错误率、延迟与资源使用。\n4. 保留明确时限的回滚窗口。\n5. 停止旧服务，撤销旧凭据并清理网络入口。\n6. 按合规要求保存必要日志与备份后再销毁旧主机。\n\n## 参考资料\n\n- [CentOS Linux 生命周期说明](https://www.centos.org/centos-linux/)\n- [CentOS 2024 年 6 月项目公告](https://blog.centos.org/2024/06/june-2024-news/)\n" }