Migration of FreeIPA from one virtualization environment to another.

[Srikanth Reddy]

Currently our FreeIPA is running as a container on a virtual machine in VmWare environment. Now we are changing the virtualization environment from VmWare to Cloudstack, As part of this we need to migrate our FreeIPA from VmWare to Cloudstack environment. I need the best approach to do this FreeIPA server and data migration. If you could point me to any articles or documentation regarding this it would be much helpful for me.

Thanks in advance :)

[Satish Patel]

why don't you convert your vmdk into qcow2 format and import in a new cloud
location. That is what we did during vmware to openstack migration.

On Tue, Sep 19, 2023 at 1:51 AM Srikanth Reddy via FreeIPA-users <
[e-mail]> wrote:
> Currently our FreeIPA is running as a container on a virtual machine in
> VmWare environment. Now we are changing the virtualization environment from
> VmWare to Cloudstack, As part of this we need to migrate our FreeIPA from
> VmWare to Cloudstack environment. I need the best approach to do this
> FreeIPA server and data migration. If you could point me to any articles or
> documentation regarding this it would be much helpful for me.
>
> Thanks in advance :)
> _______________________________________________
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue

[Srikanth Reddy]

I am new to this FreeIPA. If you don't mind could you please just list down the steps that you have followed to achieve this

Thanks.

[Satish Patel]

This has nothing to do with freeIPA. This is about how to move a virtual
machine from one environment to another.

On Tue, Sep 19, 2023 at 9:20 AM Srikanth Reddy via FreeIPA-users <
[e-mail]> wrote:
> I am new to this FreeIPA. If you don't mind could you please just list
> down the steps that you have followed to achieve this
>
> Thanks.
> _______________________________________________
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue

[Srikanth C]

After creating the VM from the image. What would be the post steps. Do we need to add this new VM which is on Cloudstack as replica to the main server which is running on the VmWare. In the current setup we totally have 4 FreeIPA servers.

[Rob Crittenden]

Srikanth Reddy via FreeIPA-users wrote:
> Currently our FreeIPA is running as a container on a virtual machine in VmWare environment. Now we are changing the virtualization environment from VmWare to Cloudstack, As part of this we need to migrate our FreeIPA from VmWare to Cloudstack environment. I need the best approach to do this FreeIPA server and data migration. If you could point me to any articles or documentation regarding this it would be much helpful for me.

See this guide,
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/htm...

It is specifically for migrating from RHEL-8 to 9 but the steps are the
same for migrating from one box to another (wherever they may live).
This is of course assuming your vmware environment can network with
cloudstack so you can do it one machine at a time.

The basic idea is you setup a new IPA server in the cloud, verify that
everything is working. Then uninstall IPA on the vmware server. I'd
probably just add 3 additional hosts on the cloud, creating a topology
with the one you started with. Then remove the remaining vmware ones. So
you'll go from 4 servers 5 to 5 to 8 to 4.

This does not have to happen one after another. Verify that things are
running, that you have more than 2 CAs in the cloud, you can issue
certs, do DNS lookups, etc. This can take days and it's fine.

Follow closely the instructions on renewal master, CRL generator, etc in
the above docs.

rob

[Srikanth C]

Sure, Will go through it.

Thanks.