Bookworm was released on 2023-06-10, thus it's time to work on Fundraising environment support.
[x] import pxeboot kernel and get preseed working
[x] figure out puppet 7 changes, develop a v7 + v5.5 migration that allows us to support earlier Debian releases (see T338195)
[] work through each server role (add subtasks for this)
[] analytics
[x] auth - dist-upgrade, kerberos and freeradius/yubikey works
[x] backup - dist-upgraded
[x] banner_logger - kafkatee needs patching/packaging see https://gerrit.wikimedia.org/r/c/analytics/kafkatee/+/961174
[x] bastion - dist-upgraded
[x] build - dist upgraded, seems to require a CA refresh, didn't try to move CA dir to /etc per recommendation
[] civicrm
[] frdata
[] frdev
[x] frmx - dist-upgrade, basic SMTP works fine, SMTP TLS + letsencrypt cert still needs testing
[x] fundraising_database, frdb_* - perccli repackaged, mariadb upgrade has to happen after a reboot then puppet run
[x] logger - dist-upgrade, central logging works
[x] monitoring - dist-upgrade, prometheus/grafana basic function tested
[] network_security
[] pay_lvs - blocked on T200319
[] payments_listener
[] payments
[] queue
[x] siem - dist-upgraded, tested aiderator collection and reporting