Hi — I recently performed a migration to a new server where I followed your support document at https://www.virtualmin.com/documentation/system/migrate
I migrated from a Debian 8 to Ubuntu 16.04.1 LTS system, which from what I tell, shouldn't be a problem as they're both 'Grade A' supported systems.
I uncovered a few problems during the migration, and perhaps a few suggestions:
- In the bind9 settings, allow-transfer and also-notify directives for my domains were not copied to the new server.
- dnssec keys from "/var/lib/bind/" were not copied to the new server.
- The DKIM selector in "/etc/dkim-keytable" was not updated when generating a new key. (I was trying to troubleshoot the dnssec key problem, and ended up trying to generate new DKIM keys)
- fail2ban gives errors for missing log files when activating jails.
client: ERROR No file(s) found for glob /var/log/nginx/access.log
client: ERROR No file(s) found for glob /var/log/roundcube/errors
client: ERROR Failed during configuration: Have not found any log file for roundcube-auth jail
The nginx error is from a filter that attempts to check both the default apache and nginx logs regardless of whether nginx has been installed. The roundcube log file should probably be selected based on where the script installers have installed the webmail system?
- When activating fail2ban jails, the filter-dropdown has the "3proxy" filter as the default filter no matter which jail I select. Would it be possible to have the corresponding filter as the default dropdown-selection? It took me a while to troubleshoot this before I realized my error.
- The GnuPG key used for encrypted backups was not transferred to the new server. The backup item along with the key continued to be listed in the system on the new server, but the backup would fail on every run due to the missing key. So I'm thinking either Virtualmin should handle copying the key, or should be more informative to the user that scheduled encrypted backup jobs cannot be migrated?
So all in all, the new server is setup and functioning now, but maybe fixes/changes for the above items may help reduce friction for another user.
A final request: Would you consider adding BackBlaze B2 at a cloud backup target? I've found it to be quite reliable and a lot cheaper than Amazon S3.