[Spacewalk-list] migrate spacewalk server 2.4 from on premise server to AWS instance

[Yu, Matthew]

Hi,

I would like to migrate my spacewalk 2.4 to a new AWS instance (same CentOS 7.3 64 bit)  with different server name  and same version of spacewalk 2.4.
The current setup is the spacewalk server is connected to an another satellite server which hosts all the Local mirror Red Hat repositories.

I have followed the below steps and run into some issue with the ssl error for osa-dispather.log and my clients don't check in with the spacewalk server.

Is this a complete list of thing for migrating the spacewalk server ?  Thanks.

var/log/rhn/osa-dispatcher.log

2017/01/31 21:32:25 -04:00 8037 0.0.0.0: osad/jabber_lib.connect('ERROR', 'Traceback (most recent call last):\n  File "/usr/
share/rhn/osad/jabber_lib.py", line 642, in connect\n    ssl.do_handshake()\nError: [(\'SSL routines\', \'SSL3_GET_SERVER_CE
RTIFICATE\', \'certificate verify failed\')]\n')


Below is my steps.

Installation step:
============================================================================

Part I
Backup the DB on the source server. '

db-control online-backup /db_dump/postgresql-bk-1-31-2107

part II:

1. install Centos 7
2. install new spacewalk 2.4 and

yum install spacewalk-setup-postgresql

yum install spacewalk-postgresql

spacewalk-setup --disconnected

3. Restore and upgrade the db schema
                ==> Go to the target Server
                => db-control restore /var/satellite/postgresql-bk-1-31-2107
                => spacewalk-schema-upgrade

4. Restore /var/satellite & ~nocpulse/.ssh/nocpulse-identity* (with permissions & selinux)


> 4a. If you're keeping your original hostname:

  # Restore /root/ssl-build and rebuild the RPM with previous certificates:

> * Restore content of /root/ssl-build
> * cd /root
> * rhn-ssl-tool --gen-server --rpm-only

  # Now you have to install the RPM with your certs (previous command will tell
    you its exact path):

> * rpm -Uvh /root/ssl-build/<MACHINE_NAME>/rhn-org-httpd-ssl-key-pair-
> <VERSION>.noarch.rpm

  # And now you have to deploy the original CA cert:

> * rhn-deploy-ca-cert.pl \
>         --source-dir=/root/ssl-build \
>         --target-dir=/var/www/html/pub/
>
>
> 4b. If you're switching to a new hostname:
>
> * rhn-ssl-dbstore -vvv --ca-cert=/root/ssl-build/RHN-ORG-TRUSTED-SSL-CERT
> * spacewalk-hostname-rename <NEW-IP-ADDRESS>

______________________________________________________________________
Confidentiality Notice:  The information contained in this e-mail and any attachment(s) is confidential and for the use of the addressee(s) only.  If you are not the intended recipient of this e-mail, do not duplicate or redistribute it by any means.  Please delete this e-mail and any attachment(s) and notify us immediately.  Unauthorized use, reliance, disclosure or copying of the contents of this e-mail and any attachment(s), or any similar action, is strictly prohibited.  Fitch Ratings reserves the right, to the extent permitted by applicable law, to retain, monitor and intercept e-mail messages both to and from its systems.

This e-mail has been scanned by the MessageLabs Email Security System.  For more information, please visit http://www.messagelabs.com/email.
______________________________________________________________________
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20170202/b089e455/attachment.htm>