Solaris How To: 2017 mercury move

Big Picture

Get security & authentication running
Do hardening - guide here: https://www.debian.org/doc/manuals/securing-debian-howto/ch-sec-services.en.html
Copy /local/ into place, copy everything else into /mercury_old/
Bring services on line one by one.
mercnew -> mercury, mercury -> mercold

we'll preserve services running on Bonmot and move without a major outage
we'll help Moose with $$ for hardware - say, disk, for about $400
there's no reason to stay with Solaris so we'll move to Debian Linux, virtualization by proxmox, inside an openvz container.

[x] DAN copy /etc/passwd & /etc/shadow over
[x] rsync + config files
[x] begin sync'ing old bonmot /local/ to new one
[ ] DOUG hardening from Debian guide (above)
[x] DOUG sudo
Move DNS
- [x] Configure named & copy zone files over, begin serving
- [x] Notify our secondary to being updating from new
- [x] Update glue record for bonmot.ca
[x] DAN rsync script
- [x] /local --> /local
- [x] everything else --> /mercury_old/
[x] bind9
[x] Dan: install mysql
[x] DOUG Change root password
[x] Get apache2 up, move httpd.conf, serving home directories
[x] Drupal 7
[x] Drupal 8
[x] make sure that only apache2 is coming up

In progress

[x] Patch with apt-get update ; apt-get dist-upgrade
[ ] Harden with fail2ban
[x] Move backup source from old to new machine.
[x] Decide on an http server -- apache2
[x] Move composium.org & paradisecinema.com
[-] Move gay.hfxns.org
[x] Move shinesre.com and a few more domains
[x] Test & document procedure for moving a Drupal site over (see below)
[x] One by one, move Drupal websites: condominiummana, cygnettrailers, crowfeather, wayves, geoearthing, w2sa
[x] Install Oddmuse & its modules
[-] Move shinesre.com
[-] Move performance.shinesre.com
[x] Get mail system running - postfix & dovecot
[x] Move rest of bonmot.ca sites - will be intense.
[x] Look at fail2ban configuration file & tune it
[ ] Fix up logs.daily
Move non-drupal databases: archives CycleMaint GayHalifax LayoutMachine

Several apache2 configs including gay.hfxns.org, needed this added:
- Require all granted
Perl::CGI didn't recognize old "startform" and "endform" - had to replace them all with start_form and end_form
rrd didn't come up for the graphs
- apt-get install rrdtool
- apt-get install librrds-perl
- cpan force install RRD::Simple (because the tests fail)
rrd complained about the database changing architecture
- rrdtool dump the old databases on the old machine
- rrdtool restore to the new one
/bin/perl didn't exist on the new machine so had to change to /usr/bin/perl in lots of places
Perl wouldn't read libraries in the same directories so had to add
- use lib './' ; # in a variety of places
MariaDB password format has changed so had to update: using mysql:
- SET PASSWORD for 'cyclemaint_web'@'localhost' = PASSWORD('xxxxxx') ;
perl GD library needed a bunch of gd Perl stuff including libgd-dev and then cpan install GD
symlinks didn't get preserved by the rsync so for all of the oddmuses, needed to

 cd data/modules/
 for i in * ; do echo $i ; rm $i; ln -s /local/oddmuse/modules/$i ./ ; done