Upgrade orbi to Ubuntu Bionic
Server orbi (hosting KDE Identity) is running Ubuntu Xenial, which is out of "standard support" since April 2021. Full "end of life" is April 2024. The PHP PPA that we use also stopped supporting Xenial, so we won't get PHP updates anymore.
I did some local tests in a VM to figure out how to update it to Ubuntu Bionic.
- We need to move away from
libapache2-mod-fastcgi
and use the built-inproxy_fcgi
Apache module instead. This can be done while staying in Xenial, so it needs to be done first, before upgrading. - Ubuntu may want to install lxc/lxd stuff, which is unnecessary here, and may cause extra dependency issues when upgrading. If dist-upgrade wants to remove something LXC-related, allow it.
- After upgrading, we can install php5.6-imagick again and fix avatars.
Tasks (for upgrading in place, which we won't do)
- Switch from
libapache2-mod-fastcgi
toproxy_fcgi
. - Ensure everything still works.
- Check if any package needs to be marked autoinstalled (essentials, perl) to reduce dep conflicts.
- Take website down.
- Run backup script.
- Switch back to the PHP PPA.
- Replace xenial with bionic in all sources.list files (main, PHP PPA, ubuntu-esm, influxdata).
- apt update
- aptitude upgrade
- aptitude dist-upgrade
- Ensure everything still works.
UPDATE: we decided to make a new server with newer Ubuntu and migrate Identity there instead of updating in place.
-
Create new server aranea
-
Do common server setup (sshd hardening, bashrc, etc.) -
Configure email -
Deploy Identity website -
Turn off website in orbi to prevent users changing anything -
Migrate MySQL data -
Migrate LDAP data -
Change identity.kde.org DNS to point at aranea -
Change the LDAP SSH tunnel on all servers to use aranea -
Setup backups -
Switch ballot.k.o LDAP to new server
Edited by Nicolás Alvarez