Upgrade paths to ns7

I did it but it doesn’t work as expected.

[root@NS7DEV2 ~]# rpm -qa nethserver-sssd
nethserver-sssd-1.0.6-1.17.gdac664a.ns7.noarch

[root@NS7DEV2 ~]# rpm -qa nethserver-directory
nethserver-directory-3.0.2-1.ns7.noarch

does it should work only with nethserver-dc

[root@NS7DEV2 ~]# getent passwd stephane
[root@NS7DEV2 ~]# getent passwd stephane@stephdl.xxx.org
stephane@stephdl.xxx.org:*:1001:1001:stephane:/var/lib/nethserver/home/stephane:/usr/libexec/openssh/sftp-server

EDIT: in fact the rpm is not the good one :frowning:

There’s no rpm yet! The workaround is a cut-paste to sssd.conf!

Yep it was what I discovered myself :slight_smile:

In fact no errors in logs, I can authenticate with tt-rss which relies on pam also.

It should be added ASAP

2 Likes

Nextcloud also works with nethserver-directory and the sssd trick

2 Likes

A package is available from testing!

yum localinstall http://packages.nethserver.org/nethserver/7.2.1511/testing/x86_64/Packages/nethserver-sssd-1.0.6-1.9.g67cc734.ns7.noarch.rpm
1 Like

As a side note a clear statement on deprecated/replaced packages, and migration between them might be helpful when the final version is released, extending the present release notes.

Upgrade from v6.x to v7, and maintenance period of current packages (this might already been answered somewhere).

This will fill the gaps on common questions like, for instance,

1 Like

Maybe other can chime in here like our brand new @ambassadors_group

1 Like

This is now on testing! /cc @quality_team

Migration from sme8 · Issue #5196 · NethServer/dev · GitHub

2 Likes

Upgrade ns6 to ns7: backup/restore

Let’s start with it: restore a backup set of ns6 on ns7.

Luckily, there are more similarites than differences. Most of the modules are 1-1 upgrade. I’d like to discuss about how to cope with differences!

The File server/Shared folders module received the biggest changes, and present the following issues:

  1. Authenticated access to shared folders. If the account provider is LDAP, authentication cannot work: Active Directory is required.

  2. Web access to shared folders. In ns7, web access is provided by a new package, nethserver-virtualhosts. Shared folders are accessible only as Samba shares (also SFTP and NFS soon - yes, this is another story).

This morning, I was discussing those points with @filippo_carletti and @giacomo.

About 1, a possible strategy could be:

  • retain nethserver-directory as ns6 (LDAP provider) after restore

  • If needed, perform an additional, separate, step: upgrade to nethserver-dc

The upgrade is technically possible because the ns6 LDAP backup contains the Samba SAM DB data.


About 2, there could be different solutions, depending on how a particular shared folder is used. Possible scenarios that come to mind:

  1. The shared folder was the virtual host web root: http://vhost.tld

  2. The shared folder was a path in a particular virtual host http://vhost.tld/ibayaliasname

  3. The shared folder was available from ANY virtual host (global): http://192.168.1.1/ibayaliasname, http://vhost.tld/ibayaliasname

  4. HTTP Basic Authentication was required

  5. Custom filesystem permissions are set

  6. (…did I miss something?)

It’s hard to catch them all. Let’s see some possible approaches:

I feel the “Upgrade to virtual host” action would cover a lot of upgrade requirements. It’s missing scenario 3. Because of it, a generated .conf file is still necessary.

Are we missing some other cases? What do you think? /cc @dev_team @quality_team @Lewis @Mario_Lanno @telekomiker (@alefattorini, please help me on notifying other people interested on this!)

1 Like

/cc @Alejandro_Guerra @lorentedford @petralemoisson @ArchParks

1 Like

@EddieA @mark_nl @robb @Lewis @phucktank @clinton

2 Likes

We just implemented the described behavior of 1, 2 and 3.
Shared folder available from ANY virtual host (global) are migrated to a new special virtual host named default.

3 Likes

The restore procedure now supports a ns6 backup set! This long awaited feature has been implemented and is now on testing!! /cc @quality_team

To test it, enable the nethserver-testing repo in /etc/yum.repos.d/NethServer.repo

Then follow the procedure described in the test case here:

Is there anyone that have tested the new procedure? We’d like to gather as many data as possible.

yes i do a quick test in past week-end, on my mail server+ file server
but i have no notes written :frowning:
i remember two problem:

  1. restore of apps seemed ok, but it seems to have some preblem on mail:
    mail was restored in /var/lib/nethserver/vmail/user
    instead of /var/lib/nethserver/vmail/user@test.net
    so reading mail from roundcube give me only emty mailboxes

  2. i use fetchmail on 6.8, where there was the General Tab to disable fetchmail,
    with getmail ther is no such option, so at the end of restore all the
    account in getmail was fully enabled. But i wanted to check if the restore was all good before
    re-enable getmail… in short: i miss an option to quickly disable getmail…

i hope to have some time soon to retest well the procedure

I guess that @nrauso (and not only…) would be interested in an enhancement like that

The ns6 upgrade and sme8 migration procedures have been released.

http://community.nethserver.org/t/accounts-provider-update/6804

Now it’s time for the live update! Did anyone try the deprecated upstream tool?

I hope it still works for a minimal set of upstream packages! I’d go with this procedure

  • pre-backup-config event
  • remove all nethserver packages. Only centos-minimal packages are preserved
  • run upgrade assistant
  • cross fingers
  • proceed with post-restore events

As usual, no UI at first.

1 Like

will also transfer the virtual machine/webvirtmgr?

The webvirtmgr package has been moved to nethforge repo in ns7: I don’t have any plan for it at the moment. Maybe @giacomo has more info about it!

Virtual machines are not migrated since they are not part of standard backup.

I suppose you can safely copy libvirt configuration and virtual disks, then restart everything from webvirtmgr.

1 Like