We want to up grade our box with more RAM, more CPU power and upgrade to the CentOS 6 at the same time.
I plan to hire someone to help me with this (already contracted hours) because one of the issues is security hardening, moving to the latest Apache to meet PCI requirement and other such needs all reaching critical mass. Our present box has been in operation since 2008, (cento OS5) and that a long time in the web world.
I want to draft a road map to do the migration in two weeks time (this is the window ServerPath/GoGrid gives to have two boxes running at no extra charge)... and since we are interested in security I am wondering the best way to proceed to be sure to "lose" any possible trojans or mal ware that might be sitting lurking in hidden directories. We were hacked with the WordPress Pharma Hack which we successfully shut down, but now I'm nervous about what "stuff" might have lying around. (e.g. they were writing to folders in dovecot (mail) that were owned by the same owner for the domain which of course was the owner for WordPress, so php scripts in Word Press could write to any folder in the OS framework that was owned by that owner, even if it was outside the public_html folder...fortunately, nothing too malicious, they were just doing black hat SEO and hi-jacking pages/posts with links to viagra/cialis sites.
i.e we want a "clean" migration; I am pretty certain the content inside each of the /home/Domain/public_html/directories is clean. as I am doing repeated scans on these contents, folders, files.
So, how do we proceed to move 7 web sites from one box to another? But ensure we are installing them on top of a 100% brand new shiny OS? I'm thinking that the Virtual Min migration tools are going to pack up a lot of directories including any garbage inside them... perhaps this is a wrong presumption on my part.
1) set up the new box 2) It comes with pre-installed images of Apache, PHP, MySQL etc... so we need to next run upgrade on all these because support says the images are "old" and just have the base CentOS6 on it. 3) create new /home directory by hand? 4) manually create directories for each domain and then manually move over the public_html folder to the new hard drives. 5) Then, at what point do we install set up VirtualMin and then re-instantiate those same domains again on the new box: which theoretically then goes out to build all the DoveCot (mail) and related directores for each of the users?
Perhaps we need to do it in the other order: 1) set up box 2) install virtualMin 3) Use Virtual Min to run all upgrades on Apache, MySQL, PostGres, PHP etc. 4) create the new domains 5) now move the public_html folder contents over 6) go back to our documentation for all httpd.conf and other customizations (we do keep records of all changes to httpd.conf and any other OS tweaks we do. 7) set up our new crons (I don't know how to migrate those...)
I will very much appreciate guidance here... Thank you!