Ce contenu n'est pas disponible dans la langue sélectionnée.
Chapter 7. Migrating JBoss EAP 7.x configurations to JBoss EAP 8.0
7.1. Migrating a JBoss EAP 7.x standalone server to JBoss EAP 8.0
By default, the JBoss Server Migration Tool performs the following tasks when migrating a standalone server configuration from JBoss EAP x to JBoss EAP 8.0.
7.1.1. Migrate JBoss Domain Properties
The words master and slave on Domain related property names were replaced with the words 'primary' and 'secondary', and the migration automatically fixes any usage of the old property names.
The console logs any property renamed by the migration.
INFO JBoss domain property jboss.domain.master.address migrated to jboss.domain.primary.address INFO JBoss domain property jboss.domain.master.port migrated to jboss.domain.primary.port INFO JBoss domain property jboss.domain.master.protocol migrated to jboss.domain.primary.protocol
If the properties are successfully renamed, the following message is displayed:
INFO JBoss domain properties migrated.
7.1.2. Remove unsupported subsystems
The JBoss Server Migration Tool removes all unsupported subsystem configurations and extensions from migrated server configurations. The tool logs each subsystem and extension to its log file and to the console as it is removed.
Any subsystem that was not supported in JBoss EAP 7.x, but was added by an administrator to that server, is also not supported in JBoss EAP 8.0 and will be removed.
To skip removal of the unsupported subsystems, set the subsystems.remove-unsupported-subsystems.skip environment property to true.
You can override the default behavior of the JBoss Server Migration Tool and specify which subsystems and extensions should be included or excluded during the migration using the following environment properties.
| Property name | Property description |
|---|---|
|
|
A list of module names of extensions that should never be migrated, for example, |
|
|
A list of module names of extensions that should always be migrated, for example, |
|
|
A list of subsystem namespaces, stripped of the version, that should never be migrated, for example, |
|
|
A list of subsystem namespaces, stripped of the version, that should always be migrated, for example, |
7.1.3. Migrate referenced modules for a standalone server
A configuration that is migrated from a source server to a target server might reference or depend on a module that is not installed on the target server. The JBoss Server Migration Tool detects this and automatically migrates the referenced modules, plus their dependent modules, from the source server to the target server.
A module referenced by a standalone server configuration is migrated using the following process.
-
A module referenced by the
datasourcesubsystem configuration is migrated as a datasource driver module. -
A module referenced by the
eesubsystem configuration is migrated as a global module. -
A module referenced by the
namingsubsystem configuration is migrated as an object factory module. -
A module referenced by the
messagingsubsystem configuration is migrated as a Jakarta Messaging bridge module. - Any extension that is not installed on the target configuration is migrated to the target server configuration.
The console logs a message noting the module ID for any module that is migrated. It is possible to exclude the migration of specific modules by specifying the module ID in the modules.excludes environment property.
7.1.4. Migrate referenced paths for a standalone server
A configuration that is migrated from a source server to a target server might reference or depend on file paths and directories that must also be migrated to the target server. The JBoss Server Migration Tool does not migrate absolute path references. It only migrates files or directories that are configured as relative to the source configuration. The console logs a message noting each path that is migrated.
7.1.5. Migrate legacy Security Realms
JBoss EAP 8 does not support the legacy Security Realms framework. The JBoss Server Migration Tool migrates the configuration to using the default JBoss EAP 8 Elytron replacements.
If the default legacy security realm was not used, you may need to manually configure Elytron.
The console logs configuration resources migrated to the default JBoss EAP 8 Elytron replacements.
INFO Legacy security XML configuration retrieved. WARN Migrated Remoting subsystem's http connector resource /subsystem/remoting/http-connector/http-remoting-connector using a legacy security-realm, to Elytron's default application SASL Authentication Factory migration-defaultApplicationSaslAuthenticationFactory. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! WARN Migrated Undertow subsystem https-listener resource /subsystem/undertow/server/default-server/https-listener/https using a legacy security-realm, to Elytron's default TLS ServerSSLContext migration-defaultTLSServerSSLContext. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! WARN Migrated Undertow subsystem http-invoker resource /subsystem/undertow/server/default-server/host/default-host/setting/http-invoker using a legacy security-realm, to Elytron's default Application HTTP AuthenticationFactory migration-defaultApplicationHttpAuthenticationFactory. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! INFO Legacy security realms migrated to Elytron.
7.1.6. Migrate legacy Security Domains
JBoss EAP 8 does not support the legacy Security Domains framework. The the JBoss Server Migration Tool migrates the configuration to using the default JBoss EAP 8 Elytron replacements.
If the default legacy security domain was not used, you may need to manually configure Elytron.
The console logs all configuration resources migrated to the default JBoss EAP 8 Elytron replacements.
WARN Migrated ejb3 subsystem resource /subsystem/ejb3/application-security-domain/other using legacy security domain other, to Elytron's default application Security Domain. Please note that further manual Elytron configuration may be needed if the legacy security domain being used was not the source server's default Application Domain configuration! WARN Migrated undertow subsystem resource /subsystem/undertow/application-security-domain/other using legacy security domain other, to Elytron's default application Security Domain. Please note that further manual Elytron configuration may be needed if the legacy security domain being used was not the source server's default Application Domain configuration!
7.1.7. Migrate keycloak subsystem
The keycloak subsystem is not supported in JBoss EAP 8 and is replaced by the elytron-oidc-client subsystem.
By default, the JBoss Server Migration Tool automatically migrates any legacy subsystem configuration. To skip this migration task, set the subsystem.keycloak.migrate.skip environment property value to true.
The legacy subsystem migration is performed without any interaction from the user.
When the legacy keycloak subsystem migration is completed, the following message is displayed in the migration console:
INFO Subsystem keycloak migrated.
Any issues encountered during the migration are written to the log files and displayed in the migration console.
7.1.8. Migrate picketlink-federation subsystem
The picketlink-federation subsystem is deprecated in JBoss EAP 8 and is replaced by the keycloak-saml subsystem.
By default, the JBoss Server Migration Tool automatically migrates any legacy subsystem configuration. To skip this migration task, set the subsystem.picketlink-federation.migrate.skip environment property value to true.
The legacy subsystem migration is performed without any interaction from the user.
The legacy subsystem migration can fail due to the following reasons:
-
The legacy
picketlink-federationsubsystem cannot be migrated to thekeycloak-samlsubsystem due to the target server missing the Keycloak client SAML adapter. -
Non-empty legacy
picketlink-federationsubsystem configurations that must be migrated manually.
When the legacy picketlink-federation subsystem migration is completed, the following message is displayed in the migration console:
INFO Subsystem picketlink-federation migrated.
Any issues encountered during the migration are written to the log files and displayed in the migration console.
For more information, see the Migration Guide.
7.1.9. Update jgroups subsystem configuration
The JBoss Server Migration Tool does not automate the migration of the jgroups subsystem configuration. The JBoss Server Migration Tool reverts the configuration to the default JBoss EAP 8 jgroups configuration.
If the default JBoss EAP 8 jgroups subsystem configuration was not used, you may need to manually configure the jgroups subsystem configuration.
The console logs a message when the jgroups subsystem configuration is updated:
WARN Configuration of JGroups protocols has been changed to match the default protocols of the target server. Please note that further manual configuration may be needed if the legacy configuration being used was not the source server's default configuration!
7.1.10. Add the health subsystem for a standalone server
The JBoss EAP 8.0 health subsystem provides support for a server’s health functionality. The JBoss Server Migration Tool automatically adds the default health subsystem configuration to the migrated configuration file.
To skip the addition of the health subsystem configuration, set the subsystem.health.add.skip environment property to true.
After you add the health subsystem to JBoss EAP 8.0, you’ll see the following message in your web console:
INFO Subsystem health added.
7.1.11. Add the metrics subsystem for a standalone server
The JBoss EAP 8.0 metrics subsystem provides support for a server’s metric functionality. The JBoss Server Migration Tool automatically adds the default metrics subsystem configuration to the migrated configuration file.
To skip the addition of the metrics subsystem configuration, set the subsystem.metrics.add.skip environment property to true.
After you add the metrics subsystem to JBoss EAP 8.0, you’ll see the following message in your web console:
INFO Subsystem metrics added.
7.1.12. Migrate deployments for a standalone server
The JBoss Server Migration Tool can migrate the following types of standalone server deployment configurations.
- Deployments it references, also known as persistent deployments.
- Deployments found in directories monitored by its deployment scanners.
- Deployment overlays it references.
The migration of a deployment consists of installing related file resources on the target server, and possibly updating the migrated configuration.
The JBoss Server Migration Tool is preconfigured to skip deployments by default when running in non-interactive mode. To enable migration of deployments, set the deployments.migrate-deployments.skip environment property to false.
Be aware that when you run the JBoss Server Migration Tool in interactive mode and enter invalid input, the resulting behavior depends on the value of the deployments.migrate-deployments environment property.
-
If
deployments.migrate-deployments.skipis set tofalseand you enter invalid input, the tool will try to migrate the deployments. -
If
deployments.migrate-deployments.skipis set totrueand you enter invalid input, the tool will skip the deployments migration.
The JBoss Server Migration Tool does not determine whether deployed resources are compatible with the target server. This means that applications or resources might not deploy, might not work as expected, or might not work at all. Also be aware that artifacts such as JBoss EAP 7.3 *-jms.xml configuration files are copied without modification and can cause the JBoss EAP server to boot with errors.
Red Hat recommends that you use the Migration Toolkit for Runtimes (MTR) to analyze deployments to determine compatibility among different JBoss EAP servers. For more information, see Product Documentation for Migration Toolkit for Runtimes.
7.1.12.1. Migrate persistent deployments for a standalone server
To enable migration of persistent deployments when running in non-interactive mode, set the deployments.migrate-persistent-deployments.skip environment property to false.
The JBoss Server Migration Tool searches for any persistent deployment references and lists them to the console.
INFO [ServerMigrationTask#67] Persistent deployments found: [cmtool-helloworld3.war, cmtool-helloworld4.war, cmtool-helloworld2.war, cmtool-helloworld1.war]
The processing workflow then depends on whether you are running the tool in interactive mode or in non-interactive mode, as described below.
Migrating persistent deployments in non-interactive mode
If you run the tool in non-interactive mode, the tool uses the preconfigured properties to determine whether to migrate the persistent deployments. Persistent deployments are migrated only if both the deployments.migrate-deployments.skip and deployments.migrate-persistent-deployments.skip properties are set to false.
Migrating persistent deployments in interactive mode
If you run the tool in interactive mode, the JBoss Server Migration Tool prompts you for each deployment using the following workflow.
After printing the persistent deployments it finds to the console, you see the following prompt.
This tool is not able to assert if persistent deployments found are compatible with the target server, skip persistent deployments migration? yes/no?
-
Respond with
yesto skip migration of persistent deployments. All deployment references are removed from the migrated configuration and you end this part of the migration process. -
Respond with
noto continue with the migration.
-
Respond with
If you choose to continue, you see the following prompt.
Migrate all persistent deployments found? yes/no?
-
Respond with
yesto automatically migrate all deployments and end this part of the migration process. -
Respond with
noto continue with the migration.
-
Respond with
If you choose to continue, you receive a prompt asking to confirm the migration for each referenced deployment.
Migrate persistent deployment 'helloworld01.war'? yes/no?
-
Respond with
yesto migrate the deployment. Respond with
noto remove the deployment from the migrated configuration.INFO [ServerMigrationTask#68] Removed persistent deployment from configuration /deployment=helloworld01.war
-
Respond with
7.1.12.2. Migrate Deployment scanner deployments for a standalone server
Deployment scanners, which are only used in standalone server configurations, monitor a directory for new files and manage their deployment automatically or through special deployment marker files.
To enable migration of deployments that are located in directories watched by a deployment scanner when running in non-interactive mode, set the deployments.migrate-deployment-scanner-deployments.skip environment property to false.
When migrating a standalone server configuration, the JBoss Server Migration Tool first searches for any configured deployment scanners. For each scanner found, it searches its monitored directories for deployments marked as deployed and prints the results to the console.
The processing workflow then depends on whether you are running the tool in interactive mode or in non-interactive mode, as described below.
Migrating Deployment scanner deployments in non-interactive mode
If you run the tool in non-interactive mode, the tool uses the preconfigured properties to determine whether to migrate the deployment scanner deployments. Deployment scanner deployments are migrated only if both the deployments.migrate-deployments.skip and deployments.migrate-deployment-scanner-deployments.skip properties are set to false.
Migrating Deployment scanner deployments in interactive mode
If you run the tool in interactive mode, the JBoss Server Migration Tool prompts you for each deployment using the following workflow.
After printing the deployment scanner deployments it finds to the console, you see the following prompt.
This tool is not able to assert if the scanner's deployments found are compatible with the target server, skip scanner's deployments migration? yes/no?
-
Respond with
yesto skip migration of deployment scanner deployments. All deployment references are removed from the migrated configuration and you end this part of the migration process. -
Respond with
noto continue with the migration.
-
Respond with
If you choose to continue, you see the following prompt.
Migrate all scanner's deployments found? yes/no?
-
Respond with
yesto automatically migrate all deployments and end this part of the migration process. -
Respond with
noto continue with the migration.
-
Respond with
If you choose to continue, you receive a prompt asking to confirm the migration for each referenced deployment.
Migrate scanner's deployment 'helloworld02.war'? yes/no?
-
Respond with
yesto migrate the deployment. Respond with
noto remove the deployment from the migrated configuration.INFO [ServerMigrationTask#69] Resource with path EAP_NEW_HOME/standalone/deployments/helloworld02.war migrated.
-
Respond with
7.1.12.3. Migrate deployment overlays for a standalone server
The migration of deployment overlays is a fully automated process. If you have enabled migration of deployments by setting the deployments.migrate-deployments.skip environment property to false, the JBoss Server Migration Tool searches for deployment overlays referenced in the standalone server configuration that are linked to migrated deployments. It automatically migrates those that are found, removes those that are not referenced, and logs the results to its log file and to the console.
7.2. Migrating a JBoss EAP 7.x managed domain to JBoss EAP 8.0
When you use the JBoss Server Migration Tool, migrate your domain controller before you migrate your hosts to ensure your domain controller must use the later version of JBoss EAP when compared to the version used by hosts. For example, a domain controller running on JBoss EAP 7 cannot handle a host running on JBoss EAP 8.0.
By default, the JBoss Server Migration Tool performs the following tasks when migrating a managed domain configuration from JBoss EAP 7 to JBoss EAP 8.0.
7.2.1. Migrate JBoss Domain Properties
The words master and slave on Domain related property names were replaced with the words 'primary' and 'secondary', and the migration automatically fixes any usage of the old property names.
The console logs any property renamed by the migration.
INFO JBoss domain property jboss.domain.master.address migrated to jboss.domain.primary.address INFO JBoss domain property jboss.domain.master.port migrated to jboss.domain.primary.port INFO JBoss domain property jboss.domain.master.protocol migrated to jboss.domain.primary.protocol
If the properties are successfully renamed, the following message is displayed:
INFO JBoss domain properties migrated.
7.2.2. Remove unsupported subsystems
The JBoss Server Migration Tool removes all unsupported subsystem configurations and extensions from migrated server configurations. The tool logs each subsystem and extension to its log file and to the console as it is removed.
Any subsystem that was not supported in JBoss EAP 7.x, but was added by an administrator to that server, is also not supported in JBoss EAP 8.0 and will be removed.
To skip removal of the unsupported subsystems, set the subsystems.remove-unsupported-subsystems.skip environment property to true.
You can override the default behavior of the JBoss Server Migration Tool and specify which subsystems and extensions should be included or excluded during the migration using the following environment properties.
| Property name | Property description |
|---|---|
|
|
A list of module names of extensions that should never be migrated, for example, |
|
|
A list of module names of extensions that should always be migrated, for example, |
|
|
A list of subsystem namespaces, stripped of the version, that should never be migrated, for example, |
|
|
A list of subsystem namespaces, stripped of the version, that should always be migrated, for example, |
7.2.3. Migrate referenced modules for a managed domain
A configuration that is migrated from a source server to a target server might reference or depend on a module that is not installed on the target server. The JBoss Server Migration Tool detects this and automatically migrates the referenced modules, plus their dependent modules, from the source server to the target server.
A module referenced by a managed domain configuration is migrated using the following process.
-
A module referenced by the
datasourcesubsystem configuration is migrated as a datasource driver module. -
A module referenced by the
eesubsystem configuration is migrated as a global module. -
A module referenced by the
namingsubsystem configuration is migrated as an object factory module. -
A module referenced by the
messagingsubsystem configuration is migrated as a Jakarta Messaging bridge module. - Any extension that is not installed on the target configuration is migrated to the target server configuration.
The console logs a message noting the module ID for any module that is migrated. It is possible to exclude the migration of specific modules by specifying the module ID in the modules.excludes environment property.
7.2.4. Migrate referenced paths for a managed domain
A configuration that is migrated from a source server to a target server might reference or depend on file paths and directories that must also be migrated to the target server. JBoss Server Migration Tool does not migrate absolute path references. It only migrates files or directories that are configured as relative to the source configuration. The console logs a message noting each path that is migrated.
7.2.5. Migrate legacy Security Realms
JBoss EAP 8 does not support the legacy Security Realms framework. The JBoss Server Migration Tool migrates the configuration to using the default JBoss EAP 8 Elytron replacements.
If the default legacy security domain is not used, you may need to manually configure Elytron.
The console logs configuration resources migrated to the default JBoss EAP 8 Elytron replacements.
INFO Legacy security XML configuration retrieved. WARN Migrated Remoting subsystem's http connector resource /profile/full-ha/subsystem/remoting/http-connector/http-remoting-connector using a legacy security-realm, to Elytron's default application SASL Authentication Factory migration-defaultApplicationSaslAuthenticationFactory. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! WARN Migrated Undertow subsystem https-listener resource /profile/full-ha/subsystem/undertow/server/default-server/https-listener/https using a legacy security-realm, to Elytron's default TLS ServerSSLContext migration-defaultTLSServerSSLContext. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! WARN Migrated Undertow subsystem http-invoker resource /profile/full-ha/subsystem/undertow/server/default-server/host/default-host/setting/http-invoker using a legacy security-realm, to Elytron's default Application HTTP AuthenticationFactory migration-defaultApplicationHttpAuthenticationFactory. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! INFO Legacy security realms migrated to Elytron. WARN Migrated Remoting subsystem's http connector resource /profile/full/subsystem/remoting/http-connector/http-remoting-connector using a legacy security-realm, to Elytron's default application SASL Authentication Factory migration-defaultApplicationSaslAuthenticationFactory. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! WARN Migrated Undertow subsystem https-listener resource /profile/full/subsystem/undertow/server/default-server/https-listener/https using a legacy security-realm, to Elytron's default TLS ServerSSLContext migration-defaultTLSServerSSLContext. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! WARN Migrated Undertow subsystem http-invoker resource /profile/full/subsystem/undertow/server/default-server/host/default-host/setting/http-invoker using a legacy security-realm, to Elytron's default Application HTTP AuthenticationFactory migration-defaultApplicationHttpAuthenticationFactory. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! INFO Legacy security realms migrated to Elytron. WARN Migrated Remoting subsystem's http connector resource /profile/ha/subsystem/remoting/http-connector/http-remoting-connector using a legacy security-realm, to Elytron's default application SASL Authentication Factory migration-defaultApplicationSaslAuthenticationFactory. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! WARN Migrated Undertow subsystem https-listener resource /profile/ha/subsystem/undertow/server/default-server/https-listener/https using a legacy security-realm, to Elytron's default TLS ServerSSLContext migration-defaultTLSServerSSLContext. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! WARN Migrated Undertow subsystem http-invoker resource /profile/ha/subsystem/undertow/server/default-server/host/default-host/setting/http-invoker using a legacy security-realm, to Elytron's default Application HTTP AuthenticationFactory migration-defaultApplicationHttpAuthenticationFactory. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! INFO Legacy security realms migrated to Elytron. WARN Migrated Remoting subsystem's http connector resource /profile/default/subsystem/remoting/http-connector/http-remoting-connector using a legacy security-realm, to Elytron's default application SASL Authentication Factory migration-defaultApplicationSaslAuthenticationFactory. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! WARN Migrated Undertow subsystem https-listener resource /profile/default/subsystem/undertow/server/default-server/https-listener/https using a legacy security-realm, to Elytron's default TLS ServerSSLContext migration-defaultTLSServerSSLContext. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! WARN Migrated Undertow subsystem http-invoker resource /profile/default/subsystem/undertow/server/default-server/host/default-host/setting/http-invoker using a legacy security-realm, to Elytron's default Application HTTP AuthenticationFactory migration-defaultApplicationHttpAuthenticationFactory. Please note that further manual Elytron configuration may be needed if the legacy security realm being used was not the source server's default Application Realm configuration! INFO Legacy security realms migrated to Elytron.
7.2.6. Migrate legacy Security Domains
JBoss EAP 8 does not support the legacy Security Domains framework. The JBoss Server Migration Tool migrates the configuration to using the default JBoss EAP 8 Elytron replacements.
If the default legacy security domain was not used, you may need to manually configure Elytron.
The console logs all configuration resources migrated to the default JBoss EAP 8 Elytron replacements.
WARN Migrated ejb3 subsystem resource /profile/default/subsystem/ejb3/application-security-domain/other using legacy security domain other, to Elytron's default application Security Domain. Please note that further manual Elytron configuration may be needed if the legacy security domain being used was not the source server's default Application Domain configuration! WARN Migrated undertow subsystem resource /profile/default/subsystem/undertow/application-security-domain/other using legacy security domain other, to Elytron's default application Security Domain. Please note that further manual Elytron configuration may be needed if the legacy security domain being used was not the source server's default Application Domain configuration! WARN Migrated ejb3 subsystem resource /profile/full/subsystem/ejb3/application-security-domain/other using legacy security domain other, to Elytron's default application Security Domain. Please note that further manual Elytron configuration may be needed if the legacy security domain being used was not the source server's default Application Domain configuration! WARN Migrated undertow subsystem resource /profile/full/subsystem/undertow/application-security-domain/other using legacy security domain other, to Elytron's default application Security Domain. Please note that further manual Elytron configuration may be needed if the legacy security domain being used was not the source server's default Application Domain configuration! WARN Migrated messaging-activemq subsystem server resource /profile/full/subsystem/messaging-activemq/server/default, to Elytron's default application Security Domain. Please note that further manual Elytron configuration may be needed if the legacy security domain being used was not the source server's default Application Domain configuration! WARN Migrated iiop-openjdk subsystem resource using legacy security domain to Elytron defaults. Please note that further manual Elytron configuration should be needed! WARN Migrated ejb3 subsystem resource /profile/ha/subsystem/ejb3/application-security-domain/other using legacy security domain other, to Elytron's default application Security Domain. Please note that further manual Elytron configuration may be needed if the legacy security domain being used was not the source server's default Application Domain configuration! WARN Migrated undertow subsystem resource /profile/ha/subsystem/undertow/application-security-domain/other using legacy security domain other, to Elytron's default application Security Domain. Please note that further manual Elytron configuration may be needed if the legacy security domain being used was not the source server's default Application Domain configuration! WARN Migrated ejb3 subsystem resource /profile/full-ha/subsystem/ejb3/application-security-domain/other using legacy security domain other, to Elytron's default application Security Domain. Please note that further manual Elytron configuration may be needed if the legacy security domain being used was not the source server's default Application Domain configuration! WARN Migrated undertow subsystem resource /profile/full-ha/subsystem/undertow/application-security-domain/other using legacy security domain other, to Elytron's default application Security Domain. Please note that further manual Elytron configuration may be needed if the legacy security domain being used was not the source server's default Application Domain configuration! WARN Migrated messaging-activemq subsystem server resource /profile/full-ha/subsystem/messaging-activemq/server/default, to Elytron's default application Security Domain. Please note that further manual Elytron configuration may be needed if the legacy security domain being used was not the source server's default Application Domain configuration! WARN Migrated iiop-openjdk subsystem resource using legacy security domain to Elytron defaults. Please note that further manual Elytron configuration should be needed!
7.2.7. Migrate keycloak subsystem
The keycloak subsystem is not supported in JBoss EAP 8 and is replaced by the elytron-oidc-client subsystem.
By default, the JBoss Server Migration Tool automatically migrates any legacy subsystem configuration. To skip this migration task, set the subsystem.keycloak.migrate.skip environment property value to true.
The legacy subsystem migration is performed without any interaction from the user.
When the legacy keycloak subsystem migration is completed, the following message is displayed in the migration console:
INFO Subsystem keycloak migrated.
Any issues encountered during the migration are written to the log files and displayed in the migration console.
7.2.8. Migrate picketlink-federation subsystem
The picketlink-federation subsystem is deprecated in JBoss EAP 8 and is replaced by the keycloak-saml subsystem.
By default, the JBoss Server Migration Tool automatically migrates any legacy subsystem configuration. To skip this migration task, set the subsystem.picketlink-federation.migrate.skip environment property value to true.
The legacy subsystem migration is performed without any interaction from the user.
The legacy subsystem migration can fail due to the following reasons:
-
The legacy
picketlink-federationsubsystem cannot be migrated to thekeycloak-samlsubsystem due to the target server missing the Keycloak client SAML adapter. -
Non-empty legacy
picketlink-federationsubsystem configurations that must be migrated manually.
When the legacy picketlink-federation subsystem migration is completed, the following message is displayed in the migration console:
INFO Subsystem picketlink-federation migrated.
Any issues encountered during the migration are written to the log files and displayed in the migration console.
For more information, see the Migration Guide.
7.2.9. Update jgroups subsystem configuration
The JBoss Server Migration Tool does not automate the migration of the jgroups subsystem configuration. The JBoss Server Migration Tool reverts the configuration to the default JBoss EAP 8 jgroups configuration.
If the default JBoss EAP 8 jgroups subsystem configuration was not used, you may need to manually configure the jgroups subsystem configuration.
The console logs a message when the jgroups subsystem configuration is updated:
WARN Configuration of JGroups protocols has been changed to match the default protocols of the target server. Please note that further manual configuration may be needed if the legacy configuration being used was not the source server's default configuration!
7.2.10. Add host excludes for managed domain migration
The JBoss EAP 8.0 domain controller can potentially include functionality that is not supported by hosts running on older versions of the server. The host-exclude configuration specifies the resources that should be hidden from those older versions.
When migrating a domain controller configuration, the JBoss Server Migration Tool adds to or replaces the source server’s host-exclude configuration with the configuration of the target JBoss EAP 8.0 server.
The JBoss Server Migration Tool automatically updates the host-exclude configuration and logs the results to its log file and to the console.
INFO Host-excludes configuration added.
7.2.11. Migrate deployments for a managed domain
The JBoss Server Migration Tool can migrate the following types of managed domain deployment configurations.
- Deployments it references, also known as persistent deployments.
- Deployment overlays it references.
The migration of a deployment consists of installing related file resources on the target server, and possibly updating the migrated configuration.
The JBoss Server Migration Tool is preconfigured to skip deployments by default when running in non-interactive mode. To enable migration of deployments, set the deployments.migrate-deployments.skip environment property to false.
Be aware that when you run the JBoss Server Migration Tool in interactive mode and enter invalid input, the resulting behavior depends on the value of the deployments.migrate-deployments environment property.
-
If
deployments.migrate-deployments.skipis set tofalseand you enter invalid input, the tool will try to migrate the deployments. -
If
deployments.migrate-deployments.skipis set totrueand you enter invalid input, the tool will skip the deployments migration.
The JBoss Server Migration Tool does not determine whether deployed resources are compatible with the target server. This means that applications or resources might not deploy, might not work as expected, or might not work at all. Also be aware that artifacts such as JBoss EAP 7.3 *-jms.xml configuration files are copied without modification and can cause the JBoss EAP server to boot with errors.
Red Hat recommends that you use the Migration Toolkit for Runtimes (MTR) to analyze deployments to determine compatibility among different JBoss EAP servers. For more information, see Product Documentation for Migration Toolkit for Runtimes.
7.2.11.1. Migrate persistent deployments for a managed domain
To enable migration of persistent deployments when running in non-interactive mode, set the deployments.migrate-persistent-deployments.skip environment property to false.
The JBoss Server Migration Tool searches for any persistent deployment references and lists them to the console.
INFO [ServerMigrationTask#67] Persistent deployments found: [cmtool-helloworld3.war, cmtool-helloworld4.war, cmtool-helloworld2.war, cmtool-helloworld1.war]
The processing workflow then depends on whether you are running the tool in interactive mode or in non-interactive mode, as described below.
Migrating persistent deployments in non-interactive mode
If you run the tool in non-interactive mode, the tool uses the preconfigured properties to determine whether to migrate the persistent deployments. Persistent deployments are migrated only if both the deployments.migrate-deployments.skip and deployments.migrate-persistent-deployments.skip properties are set to false.
Migrating persistent deployments in interactive mode
If you run the tool in interactive mode, the JBoss Server Migration Tool prompts you for each deployment using the following workflow.
After printing the persistent deployments it finds to the console, you see the following prompt.
This tool is not able to assert if persistent deployments found are compatible with the target server, skip persistent deployments migration? yes/no?
-
Respond with
yesto skip migration of persistent deployments. All deployment references are removed from the migrated configuration and you end this part of the migration process. -
Respond with
noto continue with the migration.
-
Respond with
If you choose to continue, you see the following prompt.
Migrate all persistent deployments found? yes/no?
-
Respond with
yesto automatically migrate all deployments and end this part of the migration process. -
Respond with
noto continue with the migration.
-
Respond with
If you choose to continue, you receive a prompt asking to confirm the migration for each referenced deployment.
Migrate persistent deployment 'helloworld01.war'? yes/no?
-
Respond with
yesto migrate the deployment. Respond with
noto remove the deployment from the migrated configuration.INFO [ServerMigrationTask#68] Removed persistent deployment from configuration /deployment=helloworld01.war
-
Respond with
7.2.11.2. Migrate deployment overlays for a managed domain
The migration of deployment overlays is a fully automated process. If you have enabled migration of deployments by setting the deployments.migrate-deployments.skip environment property to false, the JBoss Server Migration Tool searches for deployment overlays referenced in the standalone server configuration that are linked to migrated deployments. It automatically migrates those that are found, removes those that are not referenced, and logs the results to its log file and to the console.
7.3. Migrating a JBoss EAP 7.x host configuration to JBoss EAP 8.0
By default, the JBoss Server Migration Tool performs the following tasks when migrating a host server configuration from JBoss EAP 7.x to JBoss EAP 8.0.
7.3.1. Migrate JBoss Domain Properties
The words master and slave on Domain related property names were replaced with the words 'primary' and 'secondary', and the migration automatically fixes any usage of the old property names.
The console logs any property renamed by the migration.
INFO JBoss domain property jboss.domain.master.address migrated to jboss.domain.primary.address INFO JBoss domain property jboss.domain.master.port migrated to jboss.domain.primary.port INFO JBoss domain property jboss.domain.master.protocol migrated to jboss.domain.primary.protocol
If the properties are successfully renamed, the following message is displayed:
INFO JBoss domain properties migrated.
7.3.2. Migrate referenced modules for a host configuration
A configuration that is migrated from a source server to a target server might reference or depend on a module that is not installed on the target server. The JBoss Server Migration Tool detects this and automatically migrates the referenced modules, plus their dependent modules, from the source server to the target server.
A module referenced by a host server configuration is migrated using the following process.
- A module referenced by a security realm configuration is migrated as a plug-in module.
The console logs a message noting the module ID for any module that is migrated. It is possible to exclude the migration of specific modules by specifying the module ID in the modules.excludes environment property.
7.3.3. Migrate referenced paths for a host configuration
A configuration that is migrated from a source server to a target server might reference or depend on file paths and directories that must also be migrated to the target server. The JBoss Server Migration Tool does not migrate absolute path references. It only migrates files or directories that are configured as relative to the source configuration. The console logs a message noting each path that is migrated.
