The following information may have errors; It is not permissible to be read by anyone who has ever met a lawyer. Use is confined to Engineers with more than 370 course hours of electronic engineering for theoretical studies.

ph +1(785) 841 3089 Email inform@xtronics.com

Server Checklist

From Transwiki

Jump to: navigation, search

Contents

[edit] Moving server to new Box (real / virtual) Checklist

[edit] Pre machine move

  • Get providers support info
  • bkup to tarballs old machine
  • Bind set low ttl if IPs are changing
  • add new IPs to bind on old machine as
newserver.domain.com
and a listing for the old server:
oldserver.domain.com
or something shorter
  • create installed file list

[edit] Set up Box

  • Most minimal install of Debian
  • apt-get install wajig
  • wajig install ssh
    • ssh-keygen
    • AllowUsers username(s) - only those needed in sshd
    • move key over if needed
  • wajig fileinstall # list from old server - edit this list if appropriate - (sensors - mdadm not needed on virtual box - others? )
  • Set IP address - /etc/network/interfaces
grep old etc for current IP(s) to generate a list of files that need updating with the new IP(s)
  • setup sshfs of both servers and point meld at /etc
  • Move /homes /srv things in /var /bkup /root
  • usernames - passwords
  • ntp set server - run ntpdate -s
  • shorewall
  • fail2ban
  • denyhosts
  • checks - (regular ping script )
  • ulogd (puts shorewall stuff where it belongs)
    • Need a mini how-to here
  • Go over /etc/defaults
  • host name
  • bind cp etc move and test
  • exim - test with /etc/init.d/local - mail restart note
  • aliases
  • /root/bin
    • /root/bin/bkup
      • put bkups in home - link to /
      • bkup names
    • /root/bin/checks script need IPs updated - install in cron
  • Cron jobs
  • Apache
  • dhcpd
  • perl cgi scripts
  • PHP
  • SQL
  • sensors broken for now - cron - filter with logcheck.
  • awstats
  • raid
  • nut
  • pdrint to pdf
  • /etc/init.d/local
  • log rotate
  • ln -s /html
  • reverse DNS
  • sysv-rc-conf - Make sure services get started.
  • check dmseg - grep -i for warning and error
  • DNS
Edit bind db files for new IPs
add IPs to old box - to move services over one at a time keep old dns running for at least 4 -5 days
update DNS Registry Records to new IP address
update scanning service to new IP
  • openvpn
  • dovecot

[edit] Post move

  • set short TTL
  • test DNS test
  • test reverse delegation
  • test web, time, email
  • Reboot - retest
  • Force backup
  • analyze logs
Personal tools