SafeITExperts

SafeITExperts

Your expert guide to cybersecurity and digital privacy. Security hardening for all platforms : Windows, macOS, Linux, and Android. Solutions aligned standards : NIST and ANSSI for comprehensive digital protection.


openSUSE migration-tool: bugs & limitations 2026

Publié par Marc sur 15 Juin 2026, 19:46pm

Catégories : #opensuse, #Leap 15.6, #Leap 16.0, #Bugs, #migration-tools

openSUSE migration-tool: bugs & limitations 2026

This factual review examines the documented limitations of opensuse-migration-tool in 2025-2026 based on public reports, distinguishing confirmed bugs, potential side effects, and open questions.

A control panel explodes and databases shatter during an openSUSE migration
Illustration: migration tool failure – symbolic visualization.

openSUSE migration-tool: reported facts, documented limitations, and discussion points

This document presents a validated analysis in a neutral, structured, publishable format, without concluding a general failure of the tool.

Period: 2025-2026 Scope: public reports Position: factual assessment
Objective: distinguish bugs observed in specific cases, side effects inherent to major migrations, and community‑documented or improvable technical paths.

Impact diagram

opensuse-migration-tool
Bug 1: RPM bdb → ndb conversion
Migration freeze
Failure of filesystem %prein scriptlet
System left non‑operational in reported case
Bug 2: SELinux after migration
Services fail at boot
SELinux / AVC errors
No automatic relabeling in reported case
Bug 3: “Dry run completed” message
Misleading success message
Confusion about the actual migration state

Objective

📁 Reddit r/openSUSE

Based on 2025-2026 public reports

🐞 Bugzilla openSUSE

Specific observed bugs

💬 forums.openSUSE.org

Side effects of major migrations

📖 openSUSE wiki / SDB

Community‑documented technical leads

Community‑discussed technical workarounds

⚠️ Disclaimer: the following items come from community experience or related documentation. They are not official SUSE recommendations nor a guarantee of success. Test only in non‑critical environments, ideally with a snapshot or backup.
📦 1. Checking / converting the RPM database

Observation
In a documented case the migration stalled during conversion of an old bdb‑based RPM database, with a filesystem scriptlet failure leaving the system degraded. [source]

Verification

rpm --showrc | grep db_backend

Community suggestion if backend is bdb

rpm --define='%_db_backend ndb' --rebuilddb

Goal
Avoid the automatic conversion failure observed during migration.

🔒 2. SELinux relabeling after migration

Observation
A 2025 thread describes a case where SELinux was installed but inactive before migration, and several services failed to start after upgrading to Leap 16.0, with the tool apparently not triggering an automatic relabel. [source]

Community suggestion

touch /.autorelabel
reboot

Variant (read‑only root)

touch /etc/selinux/.autorelabel
reboot

Goal
Force a full file relabel to restore consistent SELinux contexts after migration.

📦 3. Preparing repositories before migration

Observation
Community feedback recommends simplifying the software environment before migration by temporarily limiting active repositories to reduce conflicts or inconsistencies between old and new sources. [source]

Community suggestion

  • Fully update the system before migrating.
  • Disable or remove non‑essential third‑party repositories.
  • Keep only the core repositories recommended for the target distribution at the critical moment.
⏱️ 4. Cautious two‑step execution

Observation
Some users describe a progressive approach: first run to see what the tool proposes, clean up repositories or adjust accordingly, then a second run to perform the full transition. [source]

Community suggestion

  • Do an initial observation / preparation pass.
  • Verify the repositories, options and proposed packages.
  • Run the actual migration in a simplified environment.
  • Reboot only after the process has truly finished.

Context: the tool’s place in the ecosystem

🛠️ openSUSE migration tool

Experimental tool focusing on repository management and technical switches. Explicitly stated to be not ready for production until a proper test suite is in place.

GitHub →

🐧 RHEL / Alma / Rocky ecosystem

The leapp tool is documented as a supported solution for major migrations, with strong emphasis on prerequisites and troubleshooting.

Maturity comparison, not a value judgement.

📢 Experimental status

The project itself describes the tool as experimental. The team explicitly states it is not intended for production use until a satisfactory test suite is available.

Leap 16 Beta announcement →

Reported bugs & observed behaviours

1. bdb → ndb conversion (March 2026)
Symptoms: freeze, filesystem scriptlet failure
Context: very old (bdb) RPM database
Certainty: automatic conversion failed → system left non‑operational
2. Hang after reboot (Jan. 2026)
Symptom: migration completed, system no longer boots
Hypothesis: initramfs or NVIDIA GPU issue
Certainty: abnormal boot in this specific case
3. SELinux errors (Oct. 2025)
Services fail, AVC errors
SELinux inactive before migration
No automatic relabeling
4. “Dry run completed” (Feb. 2026)
Misleading success message even after “abort”
A bug has been opened for this ambiguity

Open questions for the community

📀 Legacy RPM database

Is there an official recommended procedure to check or convert the RPM database before migration?

🔐 SELinux

Should the tool automatically trigger a relabel in certain cases? Is there any public documentation about the expected SELinux behaviour?

🧪 Dry run

Is a wording or logic change planned to resolve the observed ambiguity?

📦 Third‑party packages

Does the tool detect third‑party packages or non‑official repositories?

🗺️ Roadmap

Is there a public roadmap for moving the tool out of the “experimental” status?

Main references

📄 GitHub

openSUSE migration tool
Official project repository, source code and experimental documentation.

github.com/openSUSE/opensuse-migration-tool →

🐞 Forum

bdb → ndb (March 2026)
Freeze during RPM database conversion.

forums.opensuse.org/t/192610 →

🐞 Forum

Hang after reboot (Jan. 2026)
System no longer boots after migration.

forums.opensuse.org/t/191395 →

🐞 Forum

SELinux issue (Oct. 2025)
SELinux errors after migration, missing relabel.

forums.opensuse.org/t/188528 →

🐞 Forum

“Dry run completed” message (Feb. 2026)
Misleading success message.

forums.opensuse.org/t/191811 →

📢 Announcement

Leap 16 enters Beta (April 2025)
Experimental status of the migration tool confirmed.

news.opensuse.org →

📖 Forum

Repository preparation & staged migration
Community discussion about simplifying repositories before migration and two‑step execution.

forums.opensuse.org/t/193043 →

🐞 Forum

Migration progressive (March 2026)
Two‑step execution to reduce risks.

forums.opensuse.org/t/193043 →

Recommended readings on SafeITExperts

To go deeper into migration and Linux / openSUSE security.

📁 Guide

What’s new in openSUSE 2025: bridging heritage and innovation
Understand the evolution of the distribution and the challenges of cross‑version migrations.

What’s new in openSUSE 2025 →

⚙️ Guide

systemd 2025: understanding Linux architecture & security
Essential for troubleshooting services that fail to start after a major upgrade.

systemd 2025 →

🛡️ Guide

Immutable operating systems: an architectural revolution
Explore new paradigms that could change the way we think about large‑scale migrations.

Immutable OS →

🔭 Analysis

Linux kernels 2025: complete analysis
Security and performance insights that complement the low‑level aspects of a distribution migration.

Linux kernels 2025 →

About the author

Marc — Independent cybersecurity and privacy expert with 35 years of hands‑on IT experience. Specialised in Linux system hardening, privacy‑focused network architectures, and real‑world security assessments of Linux distributions under production conditions. All published configurations are battle‑tested in real production environments. His approach is inspired by GIAC GDSA principles: secure and resilient architectures, network segmentation, reverse proxies, and the Zero Trust model.

Published on SafeITExperts · Last updated · Contact: safeitexperts@safeitexperts.com

Pour être informé des derniers articles, inscrivez vous :
Commenter cet article

Archives

Nous sommes sociaux !

Facebook X Bluesky Mastodon GitHub Reddit RSS

Articles récents