This document describes the steps required for migrating a stand-alone Security Server from an existing Ubuntu 14.04 LTS host to a new Ubuntu 18.04 LTS host. The migration is done taking a backup of the security server configuration on the Ubuntu 14.04 host and restoring the backup on the Ubuntu 18.04 LTS host. Please read carefully through the whole document before starting the upgrade process.
Alternative method: Security Server Ubuntu 14.04 to 18.04 In-place Upgrade. |
Connecting a hardware security module (HSM) to a new server may require additional steps that are not covered by these instructions.
On the current server, use the admin UI to take a backup of the security server configuration and download it to a safe location.
sudo -iu xroad /usr/share/xroad/scripts/restore_xroad_proxy_configuration.sh -F -f <back
up file>
Optionally, copy the messagelog database and archived log records from the old server
On the old server, stop the xroad-proxy and dump message log data using pg_dump (note that the size of the messagelog database can be large, so this can take time and a space).
sudo service xroad-proxy stop
sudo -iu postgres pg_dump -d messagelog -Fc -f <dump_file>
(see https://www.postgresql.org/docs/9.3/app-pgdump.html for more information about creating a database dump)
sudo service xroad-proxy stop
sudo -iu postgres pg_restore -d messagelog -c <dump_file>
sudo service xroad-proxy start
Optionally, copy the operational monitoring database from the old server (if xroad-opmonitoring is installed)
On the old server, stop xroad-opmonitor and dump the database:
sudo service xroad-opmonitor stopsudo -iu postgres pg_dump -d "op-monitor" -F c -f <dump_file>
sudo service xroad-opmonitor stop
sudo -iu postgres pg_restore -d "op-monitor" -c <dump_file>
sudo service xroad-opmonitor start
Switch over to the upgraded server (stop the old server and update your network configuration accordingly).
Related articles appear here based on the labels you select. Click to edit the macro and add or change labels.
|