Migrate from CentOS 8

PrivX will terminate support for CentOS 8 by end of year 2021. From PrivX 21, Rocky Linux 8 is supported as replacement OS. This article concerns the customers who are running PrivX on CentOS 8.

Migrate PrivX server from CentOS 8 to Rocky Linux

If you have HA setup, the high-level migration steps involve adding Rocky Linux based PrivX nodes to existing HA and decommissioning of CentOS 8 nodes.

Steps

1. Upgrade primary PrivX node (CentOS 8) to PrivX 21. See High-Availability Upgrade
2. Verify the upgraded PrivX node works.
3. Add Rocky Linux node(s) to the HA. See PrivX-Server HA Setup
4. Verify the new HA setup works
5. Detach all CentOS 8 based nodes from load balancer

If your PrivX is running on a single server without load balancer, the high-level steps involve setting up new server, restoring backup and taking over IP and DNS from the old server to the new.

Steps

1. Upgrade the CentOS 8 server to PrivX 21
2. Verify the upgrade works
3. Take a PrivX backup and copy the backup to somewhere. See Manual PrivX-Server Backup and Restore
4. Copy trails files to somewhere if network storage is not used. The default location is /var/privx/audit
5. Shutdown the CentOS server
6. Configure the CentOS 8's IP address and DNS name to the Rocky Linux 8 server
7. Install PrivX 21 to the Rocky Linux server, DO Not run /opt/privx/scripts/postinstall.sh. See PrivX Server Setup
8. Restore the PrivX backup taken in step 3 to the Rocky Linux server
9. Copy the trails over to the Rocky Linux server
10. Run /opt/privx/scripts/postinstall.sh
11. Start PrivX on the Rocky Linux server

Migrate PrivX Web Carrier and Web Proxy

High level steps involve unregistering existing Web Carrier and Web Proxy and setting up the web access gateway on Rocky Linux servers with the same configuration.

Steps:

1. In PrivX UI, open Administration→Deployment→Deploy PrivX Web Access Gateways, locate the Web Carrier and Web Proxy configuration you want to migrate
2. Click ☰ and select Unregister.
3. Follow the instruction to setup Web Carrier and Web Proxy on the target Rocky Linux servers. Make sure the “Proxy Address” in configuration matches the new Rocky Linux Web Proxy host IP
4. Repeat the steps to migrate all CentOs 8 based Web Carriers and Web Proxies

Migrate PrivX Extender

High level steps involve unregistering existing PrivX extender and setting up new extender on Rocky Linux server with the same configuration.

Steps:

1. In PrivX UI, open Administration→Deployment→Deploy PrivX VPC/VPN Extender, locate the extender configuration you want to migrate
2. Click ☰ and select Unregister.
3. Follow the instruction to setup a new extender on the target Rocky Linux sever.
4. Repeat the steps to migrate all CentOS 8 based extenders