Upgrading GitLab Community Edition from 15.11.2 to 16.2.2 fails

Summary

When trying to upgrade GitLab using apt update, then apt upgrade, apt upgrade fails in the pre-installation script subprocess. I ran gitlab-ctl reconfigure and tried apt update again getting the same failure.

I have been using this GitLab installation for many years upgrading it almost every month without problem.

I have some problem with the bug template. Therefor i provide missing stuff here.

  • Package version installation details: ii gitlab-ce 15.11.2-ce.0 amd64
  • Environment details:
    • Operating System: Ubuntu 18.04.6 LTS
    • Installation Target, remove incorrect values:
      • Bare Metal Machine
    • Installation Type, remove incorrect values:
    • Is there any other software running on the machine: yes
    • Is this a single or multiple node installation? Single node installation.
    • Resources
      • CPU: Intel(R) Celeron(R) CPU G1610T @ 2.30GHz
      • Memory total: 5.8G
    • Configuration details: gitlab.rb is included below the heading Provide the package version installation details.

Steps to reproduce

I ran:

root@scaleo:~# apt update
Hit:1 http://security.ubuntu.com/ubuntu bionic-security InRelease
Hit:3 http://us.archive.ubuntu.com/ubuntu bionic InRelease                                              
Hit:4 http://us.archive.ubuntu.com/ubuntu bionic-updates InRelease
Hit:2 https://packages.gitlab.com/gitlab/gitlab-ce/ubuntu bionic InRelease                 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
1 package can be upgraded. Run 'apt list --upgradable' to see it.
root@scaleo:~# apt upgrade
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Calculating upgrade... Done
The following security updates require Ubuntu Pro with 'esm-infra' enabled:
  screen libpython3.6-minimal libnghttp2-14 libisccfg160 linux-headers-generic
  vim-common libldap-2.4-2 linux-image-generic libpam-cap libpython3.6-stdlib
  libirs160 bind9-host open-iscsi dnsutils libpython2.7 libpython3.6 python3.6
  open-vm-tools openssh-sftp-server libisc169 amd64-microcode libx11-6
  python3-requests python3.6-minimal libisc-export169 libcap2 libcap2-bin
  libldap-common liblwres160 vim-runtime vim xxd openssh-server libx11-data
  openssh-client libdns-export1100 libpython2.7-minimal vim-tiny libisccc160
  libbind9-160 libdns1100 libpython2.7-stdlib linux-generic
Learn more about Ubuntu Pro for 18.04 at https://ubuntu.com/18-04
#
# An OpenSSL vulnerability has recently been fixed with USN-6188-1 & 6119-1:
# CVE-2023-2650: possible DoS translating ASN.1 object identifiers.
# Ensure you have updated the package to its latest version.
#
The following packages will be upgraded:
  gitlab-ce
1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
17 not fully installed or removed.
Need to get 1,335 MB of archives.
After this operation, 93.8 MB disk space will be freed.
Do you want to continue? [Y/n] 
Get:1 https://packages.gitlab.com/gitlab/gitlab-ce/ubuntu bionic/main amd64 gitlab-ce amd64 16.2.2-ce.0 [1,335 MB]
Fetched 1,335 MB in 13min 56s (1,596 kB/s)                                                                                                                                                                        
(Reading database ... 203607 files and directories currently installed.)
Preparing to unpack .../gitlab-ce_16.2.2-ce.0_amd64.deb ...
* praefect['certificate_path'] has been deprecated since 15.9 and was removed in 16.0. In GitLab 15.9, Praefect's configuration in Omnibus GitLab was changed to structurally match Praefect's own configuration. P
lease see the migration instructions at https://docs.gitlab.com/ee/update/#1590
* praefect['key_path'] has been deprecated since 15.9 and was removed in 16.0. In GitLab 15.9, Praefect's configuration in Omnibus GitLab was changed to structurally match Praefect's own configuration. Please se
e the migration instructions at https://docs.gitlab.com/ee/update/#1590
* gitaly['certificate_path'] has been deprecated since 15.10 and was removed in 16.0. In GitLab 15.10, Gitaly's configuration in Omnibus GitLab was changed to structurally match Gitaly's own configuration. Pleas
e see the migration instructions at https://docs.gitlab.com/ee/update/#15100
* gitaly['key_path'] has been deprecated since 15.10 and was removed in 16.0. In GitLab 15.10, Gitaly's configuration in Omnibus GitLab was changed to structurally match Gitaly's own configuration. Please see th
e migration instructions at https://docs.gitlab.com/ee/update/#15100
Deprecations found. Please correct them and try again.
dpkg: error processing archive /var/cache/apt/archives/gitlab-ce_16.2.2-ce.0_amd64.deb (--unpack):
 new gitlab-ce package pre-installation script subprocess returned error exit status 1
Errors were encountered while processing:
 /var/cache/apt/archives/gitlab-ce_16.2.2-ce.0_amd64.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)
root@scaleo:~# 

What is the current bug behavior?

Upgrade GitLab Community Edition from 15.11.2 to 16.2.2 fails.

What is the expected correct behavior?

Upgrade GitLab Community Edition from 15.11.2 to 16.2.2 succeeds.

Relevant logs

Relevant logs

Details of package version

Provide the package version installation details

external_url 'https://*************'
mattermost_external_url 
pages_external_url 
registry_external_url 

gitaly['certificate_path'] = "/etc/gitlab/ssl/gitaly.crt" gitaly['key_path'] = "/etc/gitlab/ssl/gitaly.key"

gitlab_pages['headers'] = ["Strict-Transport-Security: max-age=63072000"]

gitlab_rails['time_zone'] = "Stockholm" gitlab_rails['gitlab_email_from'] = "j***@" gitlab_rails['gitlab_email_display_name'] = "******" gitlab_rails['gitlab_shell_ssh_port'] = "22" gitlab_rails['omniauth_enabled'] = true gitlab_rails['omniauth_providers'] = [{"name"=>"github", "app_id"=>"7af3742670802e0bfe8f", "app_secret"=>"f95310eb343fd4fab2ef7398e9044f65442f0df1", "url"=>"https://github.com/", "args"=>{"scope"=>"user:email"}}]

mattermost_nginx['ssl_certificate'] = "/etc/gitlab/ssl/mattermost-nginx.crt" mattermost_nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/mattermost-nginx.key"

nginx['ssl_certificate'] = "/etc/ssl/certs/localhost.crt" nginx['ssl_certificate_key'] = "/etc/ssl/private/localhost.key" nginx['error_log_level'] = "debug" nginx['custom_gitlab_server_config'] = "ssl_client_certificate /etc/ssl/certs/ca.pem;\n ssl_verify_client on;"

pages_nginx['ssl_certificate'] = "/etc/gitlab/ssl/pages.crt" pages_nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/pages.key"

praefect['certificate_path'] = "/etc/gitlab/ssl/praefect.crt" praefect['key_path'] = "/etc/gitlab/ssl/praefect.key"

puma['worker_timeout'] = 300

registry_nginx['ssl_certificate'] = "/etc/gitlab/ssl/registry.crt" registry_nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/registry.key"