debian-knowledge-patchlisted

# Debian knowledge patch ## Navigate the references Choose references by the task at hand. Read every relevant file before changing an upgrade plan, package set, boot configuration, network configuration, or stateful service. | Reference | Topics | | --- | --- | | [packages-toolchains-desktops.md](references/packages-toolchains-desktops.md) | Core package versions, desktop stacks, compatibility packages, package splits, removals, and replacements | | [release-platform.md](references/release-platform.md) | Architecture support, ABI changes, filesystem and accounting defaults, boot media, hardware hardening, virtual machines, and support dates | | [security-networking.md](references/security-networking.md) | Remote upgrade access, OpenSSH, encrypted storage, sysctl, ping, interface naming, TLS, IPsec, sudo, and udev properties | | [services-data.md](references/services-data.md) | RabbitMQ, MariaDB, Dovecot, Bacula, WirePlumber, and legacy timezone data | | [upgrade-foundations.md](references/upgrade-foundations.md) | Boot-space checks, usrmerge warnings, upgrade sequencing, and migrations to complete before the next release | ## Triage breaking upgrade risks first Before approving an in-place upgrade, identify whether the host is: - reached only through SSH; - using a separate `/boot`; - mounting encrypted filesystems, especially plain-mode dm-crypt; - running RabbitMQ, MariaDB, Dovecot, or Bacula; - dependent on stable network-interface names or `/etc/sysctl.conf`; - usi