SERVER UPGRADE - LOG (Feb 2006) - from PB

*********contributed by PB**********************

krishna.radiosai.org (REDHAT 9) to krishna.radiosai.org (MANDRIVA 2006)

Why the shift?

Required new versions of mysql and php to implement the mail list (Phplist) to work.

Possible solutions:

1. Upgrade the mysql and php on the old server.

This had upgrade problems on the old server

2. Configure a new server and forward the request to the page through url redirect.

This was best if the directed url was a public ip.

3. Configure a new server and forward the request to the page through reverse proxy.

This had problems in installing mod_proxy_html on the old server. It rewrites HTML links into a proxy's address space i.e. href pointing to ./files would resolve to http://proxy_address/files.

4. Upgrade the server.

Finally choose to upgrade.

Major Changes:

Old Server	New Server
mysql-server-3.23.54a-11.i386.rpm	mysql-4.1.12-3mdk
php-4.2.2-17.i386.rpm	apache-mod_php-2.0.54_5.0.4-4mdk
httpd-2.0.40-21.i386.rpm	apache-conf-2.0.54-12mdk
postfix-1.1.11-11.i386.rpm	postfix-2.2.5-7mdk
vsftpd-1.1.3-8.i386.rpm	vsftpd-2.0.3-1mdk

Installation Steps:

Got a system having the same hardware configuration as the old one (except the display and ethernet cards)

Chose Mandriva 2006 DVD installation

Partitioned the drive (80GB Drive)

filesystem	Mounted On	Size
/dev/hda1	/	3.7 GB
/dev/hda3	/var	9.2 GB
/dev/hda4	/usr	9.2 GB
/dev/hda6	/tmp	942 MB
/dev/hda7	/home	50 GB

After partition, installation asks "You have the option to copy the contents of dvd to the hard drive before installation. It will then continue from the hard drive and the packages will remain available once the system is fully installed." (Check - copy the whole DVD checkbox)

After installation of required packages, added few other packages that were not in the DVD.

vsftpd-2.0.3-1mdk.i586.rpm (ftp server that supports virtual users) db3-utils-3.3.11-19mdk.i586.rpm (required for vsftpd password generation) libdb3.3-3.3.11-19mdk.i586.rpm (required for db3-utils)
mysql-administrator-1.1.6-linux-i386.tar.gz phplist-2.10.2 (Mailing list server) lame (required for automatic mp3 encoding) librrd (required for shoutstats)

Did a Mandriva update through the Mandriva Control Center (command: mcc)

Transferred required files from the old server

sgh, office, root, webroot
.ssh folders
crontabs (root and sgh)
postfix configuration files (needed slight modificaiton to point correct installation path)
dump of database records from the old server
firewall iptables configuration files
vsftpd (copy all the required files) db3-utils was required here.
icecast server files

Configured the mysql databases through mysql-administration (/root/mysql-administration/bin/mysql-administration)

Restored the dump of database records from the old server.

Ran Nessus to check for security holes. Fixed the following:

ServerTokens Prod (/etc/httpd/conf/httpd.conf) uninstalled mailman

Changed the hardisk in the old server to the new one.

Configured the network.

Enabled ipv4 packet forwarding using the Mandrake Control Center (cmd: mcc) Network Sharing.
This enables ip masquerading. The file /proc/sys/net/ipv4/ip_forward should be set to 1 for this to happen.

Uninstalled shorewall (mandrake firewall)

Restarted network and iptables

Installed nmap and ethereal

Stopped/started services on boot (through Mandrake Control Center).

Present disk stats

Mounted On	Size	Free
/	3.7 GB	3.2 GB
/var	9.2 GB	6.6 GB
/usr	9.2 GB	6.6 GB
/tmp	942 MB	878 MB
/home	50 GB	31 GB

Things to do:

Phplist (already running) to be customized, fine tuned and tested.
Take backup of files ( towrite24kbps to cds)
Write scripts to show the disk stats and database backup
Check for updates monthly (security updates, bug fixes, normal updates)
Clear hardisk regularly (office/sgh)
Automate the start of icecast on boot.
Install nessus

Things to remember:

Icecast location - /usr/local/icecast/bin/icecastmysql-administration location - /root/mysql-administrator/bin/mysql-administrator (admin passwd is same as su) Download files location(rpms,tgz,source files) - /root/Download

*********contributed by PB**********************