jcoffey-dev
fdf6d9df5d
An administrator moves a domain in from inbuxa Admin. The server keeps the guide's answers as an inbuxa:Migration and runs the bundled inbuxa-migrate on them as a child process: preview, move, final pass, stop, the new passwords once, close. Spec: docs/spec/features/migrations.md. - sysMigrationRun, for administrators only; a tenant is refused. - The child writes as the administrator who started the migration, with a run token held in memory, taken from loopback only and never cached, and audited as via: migration. - The source's secret is held in memory and passed in the child's environment, which holds only it, the token and PATH. - The image carries inbuxa-migrate 27.1-rc.8, pinned by checksum. - Tests: system::migration with a stand-in engine, and on demand the real engine against a Dovecot (tests/resources/migrations/dovecot-source).