Editing 2017 mercury move

Copied from [[2013-06 Move]] * New machine: mercnew.bonmot.ca 199.255.223.73 Debian 9.11 * Old mercold 199.255.223.69, Debian 7.11 ==Big Picture== # Get security & authentication running # Do hardening - guide here: https://www.debian.org/doc/manuals/securing-debian-howto/ch-sec-services.en.html # Copy /local/ into place, copy everything else into /mercury_old/ # Bring services on line one by one. # mercnew -> mercury, mercury -> mercold * we'll preserve services running on Bonmot and move without a major outage * we'll help Moose with $$ for hardware - say, disk, for about $400 * there's no reason to stay with Solaris so we'll move to Debian Linux, virtualization by proxmox, inside an openvz container. ==Tasks (roughly in order)== * [x] DAN copy /etc/passwd & /etc/shadow over * [x] rsync + config files * [x] begin sync'ing old bonmot /local/ to new one * [ ] DOUG hardening from Debian guide (above) * [x] DOUG sudo * Move DNS ** [x] Configure named & copy zone files over, begin serving ** [x] Notify our secondary to being updating from new ** [x] Update glue record for bonmot.ca * [x] DAN rsync script ** [x] /local --> /local ** [x] everything else --> /mercury_old/ * [x] bind9 * [x] Dan: install mysql * [x] DOUG Change root password * [x] Get apache2 up, move httpd.conf, serving home directories * [x] Drupal 7 * [x] Drupal 8 * [x] make sure that only apache2 is coming up In progress * [ ] Dan get $400 to Moose for hosting ===To be added to the to-do list maybe=== * [x] Patch with apt-get update ; apt-get dist-upgrade * [ ] Harden with fail2ban * [x] Move backup source from old to new machine. * [x] Decide on an http server -- apache2 * [x] Move composium.org & paradisecinema.com * [-] Move gay.hfxns.org * [x] Move shinesre.com and a few more domains * [x] Test & document procedure for moving a Drupal site over (see below) * [x] One by one, move Drupal websites: condominiummana, cygnettrailers, crowfeather, wayves, geoearthing, w2sa * [x] Install Oddmuse & its modules * [-] Move shinesre.com * [-] Move performance.shinesre.com * [x] Get mail system running - postfix & dovecot * [x] Move rest of bonmot.ca sites - will be intense. * [x] Look at fail2ban configuration file & tune it * [ ] Fix up logs.daily * Move non-drupal databases: archives CycleMaint GayHalifax LayoutMachine ===Unexpected Stuff=== * Several apache2 configs including gay.hfxns.org, needed this added: ** Require all granted * Perl::CGI didn't recognize old "startform" and "endform" - had to replace them all with start_form and end_form * rrd didn't come up for the graphs ** apt-get install rrdtool ** apt-get install librrds-perl ** cpan force install RRD::Simple (because the tests fail) * rrd complained about the database changing architecture ** rrdtool dump the old databases on the old machine ** rrdtool restore to the new one * /bin/perl didn't exist on the new machine so had to change to /usr/bin/perl in lots of places * Perl wouldn't read libraries in the same directories so had to add ** use lib './' ; # in a variety of places * MariaDB password format has changed so had to update: using mysql: ** SET PASSWORD for 'cyclemaint_web'@'localhost' = PASSWORD('xxxxxx') ; * perl GD library needed a bunch of gd Perl stuff including libgd-dev and then cpan install GD * symlinks didn't get preserved by the rsync so for all of the oddmuses, needed to cd data/modules/ for i in * ; do echo $i ; rm $i; ln -s /local/oddmuse/modules/$i ./ ; done ===Move Drupal Site=== # somehow lock the site so no changes can be made # mysqldump the database to e.g. wayves.ca.sql # scp wayves.sql over to mercnew:/tmp/wayves.ca.tar # scp both files to mercnew:/tmp # unpack the tarfile into /usr/share/drupal7/sites/ # mysql < /tmp/wayves.ca.sql # change the dns and wait for the traffic to move over

Summary:

This change is a minor edit.

Username: