Migration from Windows to Docker

10min
These instructions describe how to prepare and migrate Passwork installed on Windows Server to Docker installed on Linux.
These instructions are intended for a single Passworks installation and are not suitable for a fault-tolerant solution.
Preparation
Creating a MongoDB backup
Open powershell.exe as Administrator and navigate to the directory — cd "C:\Program Files\MongoDB\Server\x.x\bin"
Backup examples:
Local installation (MongoDB) without authorisation — mongodump.exe --archive="mongo.dump"
Local installation (MongoDB) with authorisation — mongodump.exe --authenticationDatabase admin --username=username --password=password --archive="mongo.dump"
Installing (MongoDB) on a separate server — mongodump --host host:port --authenticationDatabase admin --username=username --password=password --archive="mongo.dump"
Copying the config.ini file and the licence key
Create a copy of the default config.ini configuration file located:
Manual installation — C:\inetpub\wwwroot\app\config\config.ini
Using the Windows installer — C:\inetpub\wwwroot\passwork\app\config\config.ini
Create a copy of the passwork-*.keys licence key, located by default:
Manual installation — C:\inetpub\wwwroot\app\keys\passwork-*.keys
Using the Windows installer — C:\inetpub\wwwroot\passwork\app\keys\passwork-*.keys
Copying a certificate
If the Docker installation will use the same domain name and SSL certificate as the previous Passwork installation. You need to copy the SSL certificate manually (full certificate chain in pfx), or use the following PowerShell code:
PowerShell
$iisCerts = Get-ChildItem -Path "cert:\LocalMachine\My"

if ($iisCerts.Count -eq 0) {
    Write-Host "Certificates from IIS not found."
} else {
    Write-Host "List of certificates from IIS:"
    for ($i = 0; $i -lt $iisCerts.Count; $i++) {
        $cert = $iisCerts[$i]
        Write-Host "$($i+1). Subject: $($cert.Subject), Issuer: $($cert.Issuer), Valid from: $($cert.NotBefore), Valid until: $($cert.NotAfter)"
    }
    # Ask the user to select a certificate
    $selectedIndex = Read-Host "Select the certificate number to export"

    if ($selectedIndex -ge 1 -and $selectedIndex -le $iisCerts.Count) {
        $selectedCert = $iisCerts[$selectedIndex - 1]
        do {
            $scriptDirectory = $PWD
            # Specify the path to the PFX file in the current directory
            $pfxFilePath = Join-Path -Path $scriptDirectory -ChildPath "passwork.pfx"
            # Check if the file can be written to the specified directory
            if (-not (Test-Path $pfxFilePath -IsValid)) {
                Write-Host "Insufficient permissions to write a file to the specified directory."
                continue
            }
            break
        } while ($true)
        # Export the certificate to a PFX file
        Export-PfxCertificate -Cert $selectedCert -FilePath $pfxFilePath -Password (ConvertTo-SecureString -String "default" -Force -AsPlainText)
        Write-Host "The certificate has been successfully exported to $pfxFilePath."
    } else {
        Write-Host "Incorrect certificate number."
    }
}
$iisCerts = Get-ChildItem -Path "cert:\LocalMachine\My"

if ($iisCerts.Count -eq 0) {
    Write-Host "Certificates from IIS not found."
} else {
    Write-Host "List of certificates from IIS:"
    for ($i = 0; $i -lt $iisCerts.Count; $i++) {
        $cert = $iisCerts[$i]
        Write-Host "$($i+1). Subject: $($cert.Subject), Issuer: $($cert.Issuer), Valid from: $($cert.NotBefore), Valid until: $($cert.NotAfter)"
    }
    # Ask the user to select a certificate
    $selectedIndex = Read-Host "Select the certificate number to export"

    if ($selectedIndex -ge 1 -and $selectedIndex -le $iisCerts.Count) {
        $selectedCert = $iisCerts[$selectedIndex - 1]
        do {
            $scriptDirectory = $PWD
            # Specify the path to the PFX file in the current directory
            $pfxFilePath = Join-Path -Path $scriptDirectory -ChildPath "passwork.pfx"
            # Check if the file can be written to the specified directory
            if (-not (Test-Path $pfxFilePath -IsValid)) {
                Write-Host "Insufficient permissions to write a file to the specified directory."
                continue
            }
            break
        } while ($true)
        # Export the certificate to a PFX file
        Export-PfxCertificate -Cert $selectedCert -FilePath $pfxFilePath -Password (ConvertTo-SecureString -String "default" -Force -AsPlainText)
        Write-Host "The certificate has been successfully exported to $pfxFilePath."
    } else {
        Write-Host "Incorrect certificate number."
    }
}
﻿
Installation
Installation of the main components
Install Docker and Docker Compose 
Create and navigate to the directory where you plan to deploy the new Passwork Docker build.
Downloading scripts
Download the installation script — wget https://repos.passwork.pro/repository/docker/passwork_compose_install.sh
Download the migration script — wget https://repos.passwork.pro/repository/docker/migrate.sh
Assign execution rights — chmod +x ./*.sh
Transferring files from the "Preparation" stage
Create a directory — mkdir ./windows
Place the previously copied files from the "Preparation" step into the windows directory:
Configuration file — config.ini
Licence key — passwork-*.keys
MongoDB backup
Passwork website certificate
Starting the migration process
Run the script with the -mv flag — sudo ./passwork_compose_install.sh -mw
The installation script will perform a basic installation of the latest version of Passwork available in your licence and automatically run the migration script.
Additional settings after installation
After the scripts are finished, check that the new installation is working properly and make adjustments if necessary — https://docs.passwork.pro/online-installation#cMZWh﻿
To add mail server or LDAPS protocol root certificates to trusted certificates, copy the .pem or .crt root certificates to the ./conf/custom_ca directory and restart the PHP container — docker compose restart passwork_php
To change the SSL certificate used, copy the certificate/certificate chain to ./conf/ssl/fullchain.pem and the private key to ./conf/ssl/privkey.pem and restart the Nginx container — docker compose restart passwork_nginx
﻿
Updated 31 Oct 2024
Did this page help you?
Migration from Linux to Docker
Windows Server