Step 1: On an Existing Production Server in the Cluster

1. Login as root.
2. Stop all services.

   shell> systemctl stop glassfishd
   shell> systemctl stop mysqld
   shell> systemctl stop slapd
   
   Ensure that all services have been stopped using the following commands:
   shell> nfn 8181
   shell> nfn 3306
   
   If mysqld and glassfishd are still active, list the process ID's and force kill the processes:
   shell> pf mysqld
   shell> pf str
   shell> pf glassfishd
   
   shell> kill -9 (pid from the above command)
   

3. Create a folder in which to store all of the backup files.

   shell> mkdir /usr/local/backups

4. Make a backup of /etc/hosts.

   shell> cp /etc/hosts /usr/local/backups

5. Make a backup of all ifcfg network configuration files, except for ifcfg-lo.

   shell> cp /etc/sysconfig/network-scripts/ifcfg-* /usr/local/backups

6. If using firewalld, make a backup of the firewall configuration.

   shell> cp -r /etc/firewalld/zones/public.xml /usr/local/backups

7. Make a backup of the firewall rules.

   shell> firewall-cmd --list-all >> /usr/local/backups/firewallrules

8. Make a backup of bashrc as well as all of the rc files it references at the bottom of the file, such as sakarc.

   shell> cp /etc/bashrc /usr/local/backups
   shell> cat /etc/bashrc
   shell> cp /etc/sakarc /usr/local/backups

9. Make a backup of the ssh config files.

   shell> cp /etc/ssh/ssh_config /etc/ssh/sshd_config /usr/local/backups

10. Make a backup of the service daemons.

    shell> cp /etc/init.d/glassfishd /etc/init.d/mysqld /usr/local/backups

    If using opendj, make a backup of opendjd.

    shell> cp -r /etc/init.d/opendjd /usr/local/backups

    If using openldap, make a backup of slapd.

    shell> cp -r /etc/systemd/system/multi-user.target.wants/slapd.service /usr/local/backups

11. Make a backup of my.cnf.

    shell> cp /etc/my.cnf /usr/local/backups

12. Backup the OpenLDAP Directory Server by authenticating to the production server as the “root” user:

    shell> slapcat -n 0 -l /usr/local/strongauth/dbdumps/config.ldif
    shell> slapcat -n 2 -l /usr/local/strongauth/dbdumps/databackup.ldif
    shell> chown -R strongauth. /usr/local/strongauth/dbdumps/config.ldif
    shell> chown -R strongauth. /usr/local/strongauth/dbdumps/databackup.ldif
    
    NOTE 1: If there is a warning message on CentOS which states:
    65ca5a28 hdb_db_open: warning - no DB_CONFIG file found in directory /var/lib/ldap
    
    Execute the following step:
    shell> cp /usr/share/openldap-servers/DB_CONFIG.example /var/lib/ldap/DB_CONFIG
    shell> chown ldap:ldap /var/lib/ldap/*
    

13. Make a backup of the strongauth folder in a zip file.

    shell> cd /usr/local/
    shell> zip -r backups/strongauth.zip strongauth 

14. Make a backup of the saka folder in /usr/local/software in a zip file.

    shell> cd /usr/local/software
    shell> zip -r /usr/local/backups/saka.zip saka

15. Put the entire /usr/local/backups folder onto an external storage device (USB) to hold it.
16. Plug USB with kickstart ISO onto the appliance and boot using this USB to install Rocky 9.3 on the machine.

    NOTE: Since the ISO is configured with the kickstart file, the kickstart file will install OS with all the necessary configurations (disk partitions, necessary packages, root account with default password - Abcd1234!). Since the ISO will have the kickstart installation option as first choice, it should be selected automatically. If it doesn't, then you will need to select an option 'Kickstart Install Rocky Linux 9.3' when booting from USB to automatically install Rocky Linux OS.