Upgrade and Migrate Hermes SEG 18.04 to 20.04
Introduction
Hermes SEG version 18.04 is based on Ubuntu Server 18.04 LTS (Bionic Beaver). On May 31, 2023, Ubuntu will reach the end of the standard five year maintenance window for Long Term Support (LTS) for 18.04 which means there will be no more bug fixes or security patches unless you opt to upgrade to Ubuntu Pro which will extend support to 2028 or upgrade your Ubuntu installation to a higher version. Consequently, Hermes SEG is no longer supported on Ubuntu 18.04 LTS.
Fortunately, if you have an existing Hermes SEG installation on Ubuntu 18.04 LTS, you can perform a release upgrade to Ubuntu Server 20.04 LTS (Focal Fossa) which will extend the standard maintenance window to May 31, 2028.
Ensure that you have a recent and valid backup of your Hermes SEG installation before attempting any of the steps below. These instructions are offered with absolutely no warranty or guarantee of any kind. We cannot be held liable for any damage that my occur to your system by following the instructions below!
Install the latest updates and patches on Ubuntu Server 18.04 LTS
- Before you install the latest updates and patches it's a good idea to reboot your system in order for any automatic security updates that may have previously installed to take effect.
- Login to a console prompt as a user in the admin group (it's not recommended to attempt to perform the upgrade from a SSH session) and become root by running the following command and then typing your password when prompted:
sudo su- Run the following command to update the repositories, run the latest updates and remove any obsolete packages:
apt-get update && apt-get dist-upgrade -y && apt-get auto-remove -y- After the updates have been successfully installed reboot your system.
Perform a release upgrade of Ubuntu Server 18.04 LTS to Ubuntu Server 20.04 LTS
- In a console prompt as root, run the following command to begin the upgrade:
do-release-upgrade- You will be prompted to continue with a message regarding disabled third party entries in your sources.list. Press [ENTER] to continue:
Third party sources disabled
Some third party entries in your sources.list were disabled. You can
re-enable them after the upgrade with the 'software-properties' tool
or your package manager.
To continue please press [ENTER]
- Before any changes are made, you will be prompted with a summary of the upgrade before proceeding. enter y to continue:
Do you want to start the upgrade?
18 installed packages are no longer supported by Canonical. You can
still get support from the community.
20 packages are going to be removed. 190 new packages are going to be
installed. 752 packages are going to be upgraded.
You have to download a total of 616 M. This download will take about
2 minutes with your connection.
Installing the upgrade can take several hours. Once the download has
finished, the process cannot be canceled.
Continue [yN] Details [d]
- During the upgrade you will be repeatedly prompted to install the newer package configuration files. It's highly recommended that you always pick the default option by either pressing ENTER or N always keep the currently-installed version:
Figure 1
- On the Configuring lxd prompt, ensure you select the 4.0 LXD snap track to continue:
Figure 2
- Once the upgrade has completed successfully, reboot your system.
Run the Hermes SEG Migrate 18.04 to 20.04 Script
During the release upgrade, several obsolete packages are removed including packages that Hermes SEG requires to operate correctly. You must run the Hermes SEG Migrate 18.04 to 20.04 script in order to install newer versions of those packages and migrate the necessary settings.
- In a console prompt as root, remove any existing Hermes-Secure-Email-Gateway repositories from your system by running the command below:
rm -rf Hermes-Secure-Email-Gateway/- Git clone a fresh copy of the Hermes SEG Github repository by running the command below:
git clone https://github.com/deeztek/Hermes-Secure-Email-Gateway.git- Change to the newly created Hermes-Secure-Email-Gateway directory:
cd Hermes-Secure-Email-Gateway/- Make the hermes_migrate_1804_2004.sh script executable:
chmod +x hermes_migrate_1804_2004.sh- Run the hermes_migrate_1804_2004.sh script:
./hermes_migrate_1804_2004.sh- Follow the prompts to proceed with installation. Once the script has ran successfully, reboot your system.
- Ensure your system is operating successfully i.e. sending/receiving unencrypted/encrypted e-mail, the Hermes SEG admin/user consoles are working etc.
- Ensure that Ciphermail Web-GUI is operational and you can login successfully by navigating to https://[HERMES-SEG]/ciphermail where [HERMES-SEG] is the IP or FQDN of your Hermes SEG machine.
Hermes SEG Pro installations will display an INVALID license after the release upgrade due to a mismatch in the device ID. Please send your serial number to support@deeztek.com and we can help you re-activate it.
Issues
If you run into any issues with the upgrade, you can post your question on our Github Issues page or our Matrix Community Chat channel.