From cb608618e9e65b1c7351ff5a67175d09225a40f4 Mon Sep 17 00:00:00 2001
From: SebastianHanz <SebastianHanz@gmx.de>
Date: Mon, 9 Feb 2026 20:12:42 +0100
Subject: [PATCH] New version to upgrade from Debian 12 do Debian 13

---
 system/upgrade_debian_12_to_13.sh | 92 ++++++++++++++++++++++---------
 1 file changed, 66 insertions(+), 26 deletions(-)

diff --git a/system/upgrade_debian_12_to_13.sh b/system/upgrade_debian_12_to_13.sh
index ab52622..a0444f4 100644
--- a/system/upgrade_debian_12_to_13.sh
+++ b/system/upgrade_debian_12_to_13.sh
@@ -1,50 +1,90 @@
 #!/bin/bash
 
-set -e  # Exit on any error
+set -e
 
-# Define color codes
+# --- Configuration & Colors ---
 RED='\e[31m'
 GREEN='\e[32m'
 YELLOW='\e[33m'
 BLUE='\e[34m'
-NC='\e[0m'  # No Color
+NC='\e[0m'
 
-# Ensure the script is run as root
 if [[ $EUID -ne 0 ]]; then
-    echo -e "${RED}This script must be run as root. Try running it with sudo.${NC}"
+    echo -e "${RED}Error: This script must be run as root.${NC}"
     exit 1
 fi
 
-echo -e "${BLUE}Updating package lists and upgrading installed packages...${NC}"
-DEBIAN_FRONTEND=noninteractive apt update && apt upgrade -y -o Dpkg::Options::="--force-confold"
+echo -e "${BLUE}=== Debian 12 to 13 (Trixie) Upgrade Suite ===${NC}"
 
-echo -e "${BLUE}Upgrading full system...${NC}"
-DEBIAN_FRONTEND=noninteractive apt full-upgrade -y -o Dpkg::Options::="--force-confold"
+# --- 1. HEALTH CHECKS ---
+echo -e "${YELLOW}[1/6] Running system health checks...${NC}"
+if dpkg --get-selections | grep -q 'hold'; then
+    echo -e "${RED}Error: You have packages on hold. Unhold them before upgrading.${NC}"
+    exit 1
+fi
 
-echo -e "${BLUE}Removing obsolete packages...${NC}"
+apt update && apt upgrade -y
 apt autoremove -y
 
-# Update all .list files in /etc/apt/sources.list.d/ and sources.list to Debian 12 Bookworm
-echo -e "${YELLOW}Updating APT sources list to Debian 12 (Bookworm)...${NC}"
-sed -i 's/bullseye/bookworm/g' /etc/apt/sources.list
-sed -i 's/bullseye-security/bookworm-security/g' /etc/apt/sources.list
-find /etc/apt/sources.list.d/ -type f -name "*.list" -exec sed -i 's/bullseye/bookworm/g' {} +
-find /etc/apt/sources.list.d/ -type f -name "*.list" -exec sed -i 's/bullseye-security/bookworm-security/g' {} +
+# --- 2. UPDATE SOURCES (Standard Format) ---
+echo -e "${YELLOW}[2/6] Updating APT sources to Trixie...${NC}"
+cp /etc/apt/sources.list /etc/apt/sources.list.bak
 
-# Update APT cache and perform upgrade
-echo -e "${BLUE}Updating package lists...${NC}"
+# Swap codenames
+sed -i 's/bookworm/trixie/g' /etc/apt/sources.list
+find /etc/apt/sources.list.d/ -type f -name "*.list" -exec sed -i 's/bookworm/trixie/g' {} +
+
+# Enforce non-free-firmware
+sed -i '/^deb .* main/ { /non-free-firmware/ ! s/$/ non-free-firmware/ }' /etc/apt/sources.list
+
+# --- 3. ATTEMPT MODERNIZATION (Skip on failure) ---
+echo -e "${YELLOW}[3/6] Attempting to modernize sources...${NC}"
+
+# Try to update apt binary first to unlock the command
+apt update || true
+apt install -y apt python3-debian || true
+
+if apt modernize-sources --assume-yes 2>/dev/null; then
+    echo -e "${GREEN}Successfully modernized sources to DEB822 format.${NC}"
+    [ -f /etc/apt/sources.list ] && mv /etc/apt/sources.list /etc/apt/sources.list.modernized
+else
+    echo -e "${RED}Warning: 'apt modernize-sources' not supported yet. Continuing with standard format...${NC}"
+fi
+
+# --- 4. TAILSCALE SPECIAL HANDLING ---
+echo -e "${YELLOW}[4/6] Finalizing Tailscale configuration...${NC}"
+
+# Refresh Keyring
+mkdir -p /usr/share/keyrings
+curl -fsSL https://pkgs.tailscale.com/stable/debian/trixie.noarmor.gpg -o /usr/share/keyrings/tailscale-archive-keyring.gpg || \
+curl -fsSL https://pkgs.tailscale.com/stable/debian/bookworm.noarmor.gpg -o /usr/share/keyrings/tailscale-archive-keyring.gpg
+
+# Remove legacy list file to prevent duplicates
+rm -f /etc/apt/sources.list.d/tailscale.list
+
+# Create/Overwrite modern DEB822 file
+cat <<EOF > /etc/apt/sources.list.d/tailscale.sources
+Types: deb
+URIs: https://pkgs.tailscale.com/stable/debian/
+Suites: trixie
+Components: main
+Signed-By: /usr/share/keyrings/tailscale-archive-keyring.gpg
+EOF
+
+# --- 5. MINIMAL UPGRADE ---
+echo -e "${BLUE}[5/6] Performing Minimal Upgrade...${NC}"
 apt update
+DEBIAN_FRONTEND=noninteractive apt upgrade -y --without-new-pkgs -o Dpkg::Options::="--force-confold"
 
-echo -e "${BLUE}Upgrading to Debian 12 Bookworm...${NC}"
-DEBIAN_FRONTEND=noninteractive apt upgrade -y -o Dpkg::Options::="--force-confold"
+# --- 6. FULL SYSTEM UPGRADE ---
+echo -e "${BLUE}[6/6] Performing Full System Upgrade...${NC}"
 DEBIAN_FRONTEND=noninteractive apt full-upgrade -y -o Dpkg::Options::="--force-confold"
 
-echo -e "${BLUE}Cleaning up unnecessary packages...${NC}"
-apt autoremove -y
-apt clean
+# Final Cleanup
+apt autoremove -y && apt clean
 
-echo -e "${GREEN}Upgrade completed. A system reboot is required.${NC}"
-read -p "Do you want to reboot now? (y/N) " answer
+echo -e "${GREEN}Upgrade complete!${NC}"
+read -p "Reboot now? (y/N) " answer
 if [[ "$answer" =~ ^[Yy]$ ]]; then
     reboot
-fi
+fi
\ No newline at end of file