FAQ for the CYBERTEC Migrator.
-
Install
sqlnet.oraandtnsnames.orafrom the template files.➜ TNS_ADMIN=./volumes/core/config/oracle/network/admin ➜ cp "$TNS_ADMIN/templates"/*.ora "$TNS_ADMIN/"
-
Add the net service name of the secure connection to the
volumes/core/config/oracle/network/admin/tnsnames.ora. -
Create a client wallet containing the database server certificates and copy all wallet files to
./volumes/core/config/oracle/walletand restart the Migrator:➜ cp <client wallet files> volumes/core/config/oracle/wallet ➜ ./migrator down ➜ ./migrator up
-
When creating a new migration use the Oracle net service name defined in the previous steps. The URL format is
oracle://net_service_name. -
Alternatively, connect directly using the
protocolparameter (e.g.oracle://localhost:2484/pdb2?protocol=tcps). This requires at least the Oracle Wallet to have been set up correctly.
Generate the certificate with migrator configure --tls self-signed-cert and restart the Migrator.
➜ ./migrator configure --tls self-signed-cert
[INFO] Generating self-signed TLS/SSL certificate
Creating cybertec_migrator_web_gui_run ... done
Generating a RSA private key
.+++++
........................+++++
writing new private key to '/etc/nginx/certs/nginx.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:AT
State or Province Name (full name) [Some-State]:Lower Austria
Locality Name (eg, city) []:Wöllersdorf
Organization Name (eg, company) [Internet Widgits Pty Ltd]:CYBERTEC PostgreSQL International GmbH
Organizational Unit Name (eg, section) []:CYBERTEC Solutions
Common Name (e.g. server FQDN or YOUR name) []:
Email Address []:[email protected]
Creating cybertec_migrator_web_gui_run ... done
[OK] Generated self-signed TLS/SSL certificate
[INFO] Run './migrator up' to switch to new version
[WARN] Switching will abort running migrations
➜ ./migrator up
Recreating cybertec_migrator_core_db_1 ... done
Recreating cybertec_migrator_core_1 ... done
Recreating cybertec_migrator_web_gui_1 ... done
[OK] Started on 'https://example.org'Install the certificate and the private key with configure --tls cert:<file-location>, respective configure --tls key:<file-location>, and restart the Migrator.
For example if you have a certificate example.org.crt and the private key example.org.key located in /tmp.
➜ ./migrator configure --tls cert:/tmp/example.org.crt
[OK] Installed TLS/SSL certificate
➜ ./migrator configure --tls key:/tmp/example.org.key
[OK] Installed TLS/SSL certificate key
➜ ./migrator up
Recreating cybertec_migrator_core_db_1 ... done
Recreating cybertec_migrator_core_1 ... done
Recreating cybertec_migrator_web_gui_1 ... done
[OK] Started on 'https://example.org'The initial ./migrator configure command will generate a .env file, the contents of which will be used in the core docker compose service.
When editing, make sure not to alter the # —— Internal ⚠ —— section.
The Migrator requires the following permissions in order to introspect and migrate an Oracle database:
| Permission | Usage |
|---|---|
SELECT_CATALOG_ROLE |
Querying the system catalog |
SELECT ANY TABLE |
Migrating table data |
FLASHBACK ANY TABLE |
Migrating table data at a certain SCN |
- Open the file
volumes/core/config/oracle/network/admin/sqlnet.ora. If it does not exist, copy it from thetemplatesfolder. - Insert the line
DISABLE_OOB=ONat the beginning of the file. - Restart the migrator with
./migrator up.