x83.net » Centos

Nginx + php 5.2.17 + php-fpm

Giany — Thu, 04 Aug 2011 12:30:17 +0000

Download the needed packages and store them in /usr/src:

http://us.php.net/distributions/php-5.2.17.tar.gz

http://php-fpm.org/downloads/php-5.2.17-fpm-0.5.14.diff.gz

http://nginx.org/download/nginx-1.1.0.tar.gz

Then run :

tar -xvzf php-5.2.17.tar.gz gzip -cd php-5.2.17-fpm-0.5.14.diff.gz | sudo patch -d php-5.2.17 -p1 cd php-5.2.17 ./configure --enable-fastcgi --enable-fpm --with-mcrypt --with-zlib --enable-mbstring --enable-pdo --with-curl --disable-debug --with-pic --disable-rpath --enable-inline-optimization --with-bz2 --enable-xml --with-zlib --enable-sockets --enable-sysvsem --enable-sysvshm --enable-pcntl --enable-mbregex --with-mhash --with-xsl --enable-zip --with-pcre-regex --with-gd --without-pdo-sqlite --with-pdo-mysql --without-sqlite --with-jpeg-dir=/usr/lib --with-png-dir=/usr/lib --with-mysql --enable-bcmath --enable-calendar --enable-exif --enable-ftp --with-gettext --with-imap --with-mysqli --with-openssl --with-kerberos --with-imap-ssl --enable-dbase --with-gmp --enable-shmop --enable-wddx

make all install

Note that you can add –prefix to install the binaries in a different location than the default one.

After compilation is done :

strip /usr/local/bin/php-cgi cp sapi/cgi/fpm/php-fpm /etc/init.d/ chmod +x /etc/init.d/php-fpm

cp /usr/src/php-5.2.17/php.ini-recommended /usr/local/lib/php.ini mkdir /etc/php/ ln -s /usr/local/lib/php.ini /etc/php/php.ini ln -s /usr/local/etc/php-fpm.conf /etc/php/php-fpm.conf

Make sure you edit /etc/php/php-fpm.conf and set the proper user/group (and permissions if its the case).

Then compile Nginx:

tar zxvf nginx-1.1.0.tar.gz ./configure --sbin-path=/usr/local/sbin --with-http_ssl_module --without-mail_pop3_module --without-mail_imap_module --without-mail_smtp_module --with-http_stub_status_module make && sudo make install

The same you can modify the –prefix here.

Plesk 10 nginx reverse proxy configuration in front of Apache

Giany — Mon, 01 Aug 2011 12:40:14 +0000

Plesk 10 nginx reverse proxy configuration

On older Plesk version (

websrvmng –set-http-port –port=8080

Starting with Plesk 10 this is not so easy since you have to edit a php file called /usr/local/psa/admin/conf/templates/default/domain/domainVirtualHost.php. In my case instead of :

domain->physicalHosting->ipAddress->address ?>:server->webserver->httpsPort : $VAR->server->webserver->httpPort ?>> ServerName "domain->asciiName ?>:server->webserver->httpsPort : $VAR->server->webserver->httpPort ?>"

I’ve set :

escapedAddress ?>:>
ServerName “domain->asciiName ?>:”

Where 8043 will be the new https port and 8080 will be the http port.

After this change I had to run :

/usr/local/psa/admin/bin/httpdmng –reconfigure-all

Note that this is only for Plesk 10.x. On 9.x we used to have

/usr/local/psa/admin/sbin/websrvmng –reconfigure-all

After this make sure that the Apache server has set in its configuration files (/etc/httpd/conf/httpd.conf) Listen 8080 instead of Listen 80. Same thing for the /etc/httpd/conf.d/ssl.conf file, Listen 8043 instead of Listen 443.

Then you need to install nginx (yum install nginx) and download this zip file that these guys provided http://www.grafxsoftware.com/download/nginx/nginx_setup.zip. Furthermore you can check their http://www.grafxsoftware.com/faq.php/HOW-TO-configure-PLESK-with-NGinx-proxy-reverse/1/1/.

Once downloaded run:

sh generate_nginx_conf.sh

Verify with “nginx -t” that there isn’t any error and finally restart the involved services :

service httpd restart
service nginx restart

Make sure that 8043 and 8080 accept connections. (Note that its not necessary to change the https port).

Centos 6.0 XenServer templates

Giany — Sun, 10 Jul 2011 20:43:18 +0000

To add templates for CentOS 6.0 you can use the RHEL 6.0 templates:

For CentOS 32 bit run:

xe vm-clone uuid=`xe template-list name-label=Red\ Hat\ Enterprise\ Linux\ 6\ $32-bit$ –minimal` new-name-label=”CentOS 6.0 (32-bit)”

For CentOS 64 bit run:

xe vm-clone uuid=`xe template-list name-label=Red\ Hat\ Enterprise\ Linux\ 6\ $64-bit$ –minimal` new-name-label=”CentOS 6.0 (64-bit)”

Centos 6 released

Giany — Sun, 10 Jul 2011 19:45:17 +0000

Finally after almost one hear since RHEL 6.0 was released now Centos 6.0 is available to download.

Check Release notes : http://wiki.centos.org/Manuals/ReleaseNotes/CentOS6.0

and official announcement:

http://lists.centos.org/pipermail/centos-announce/2011-July/017645.html

Installing mod_suphp

Giany — Fri, 22 Apr 2011 22:32:21 +0000

Usually if you add a simple VirtualHost and set the DocumentRoot into on /home/ then its possible for some files not to be owned by that (e.g: uploaded images via web interface, php sessions..etc).

A solution for this problem is to install mod_suphp which will make Apache to write in /home/ with permissions. To install mod_suphp :

Download http://www.suphp.org/download/suphp-0.7.1.tar.gz tar zxvf suphp-0.7.1.tar.gz cd suphp-0.7.1 yum install httpd-devel ./configure --with-apxs=/usr/sbin/apxs --with-apache-user=httpd --with-logfile=/var/log/httpd/suphp.log --with-setid-mode=paranoid --sysconfdir=/etc --with-apr=/usr/bin/apr-1-config --with-php=/usr/bin/php-cgi --enable-SUPHP_USE_USERGROUP=yes make make install cd /etc/httpd/conf.d/ mv php.conf php.conf.bk

Then create suphp.conf and put in it:
LoadModule suphp_module modules/mod_suphp.so suPHP_Engine on AddType application/x-httpd-php5 .php5 .php4 .php .php3 .php2 .phtml suPHP_AddHandler application/x-httpd-php5

Then create /etc/suphp.conf and put in it:

; This file is parse anew by suPHP for each request ; rather than being loaded once.


[global]

;Path to logfile

logfile=/var/log/httpd/suphp.log
;Loglevel

loglevel=info
;User Apache is running as

; MANDATORY

webserver_user=apache
; Path all scripts have to be in

; This works as a prefix when a trailing slash is not specified.

; e.g. /home will match /home /home2 /home3 etc While /home/ will only match /home/

;

; Changing this to a more specific path will improve security

docroot=/
;Path to chroot() to before executing script

;chroot=/home
; Security options

allow_file_group_writeable=true

allow_file_others_writeable=true

allow_directory_group_writeable=true

allow_directory_others_writeable=true
; Check whether script is within DOCUMENT_ROOT

; Does NOT perform this check on included scripts.

; i.e. include_once("/test3.php"); works even though it's in the root directory

;

; Changing this to true will improve security but make all php userdir requests fail

check_vhost_docroot=false
; Allow the user and group specified by a ~userdir request to override the

; suPHP_UserGroup directive inside the source virtualhost

;

; Changing this to false will improve security but make some types of php userdir

; requests fail

;userdir_overrides_usergroup=true
; suPHP Paranoid mode checks that the target script UID and GID match

; the UID and GID of the user running the script.  To disable these

; checks change the following values to false.  Without these checks, mod_suphp

; is effectively running in "Force" mode.

;paranoid_uid_check=true

;paranoid_gid_check=true
;Send minor error messages to browser

errors_to_browser=false
;PATH environment variable

env_path="/bin:/usr/bin"
;Umask to set, specify in octal notation

umask=0022
; Minimum UID

;min_uid=100
; Minimum GID

;min_gid=100
; Normally suPHP only displays the PHP binary in process lists (ps aux).

; Setting this option to 'true' will cause suPHP to display both the

; PHP binary and the script filename.

;full_php_process_display=true
[handlers]

;Handler for php-scripts

application/x-httpd-php="php:/usr/bin/php-cgi"

application/x-httpd-php4="php:/usr/php4/bin/php-cgi"

application/x-httpd-php5="php:/usr/bin/php-cgi"
;Handler for CGI-scripts

;x-suphp-cgi="execute:!self"

[phprc_paths] ;Uncommenting these will force all requests to that handler to use the php.ini ;in the specified directory regardless of suPHP_ConfigPath settings. ;application/x-httpd-php=/usr/local/lib/ ;application/x-httpd-php4=/usr/local/php4/lib/ ;application/x-httpd-php5=/usr/local/lib/

After this make sure that the VirtualHost contains :

suPHP_UserGroup user user

SuexecUserGroup user user

Also /etc/httpd/conf/httpd.conf should contain:

DirectoryIndex index.html.var index.htm index.html index.shtml index.xhtml index.wml index.perl index.pl index.plx index.ppl index.cgi index.jsp index.js index.jp index.php4 index.php3 index.php index.phtml default.htm default.html home.htm index.php5 Default.html Default.htm home.html

Finally do a service httpd restart

Check /var/log/httpd/suphp.log and error_log for possible errors. In my case I noticed this:

“[Fri Apr 22 14:36:55 2011] [warn] Mismatch between target UID (501) and UID (48) of file “/home/arpart/public_html/index.php”

Which means that some files were not owned by . Use chown -R user.user /home/user to fix the problem.

Yum and RPM Tricks

Giany — Tue, 19 Apr 2011 20:06:48 +0000

This applies to Centos 5.6 but most likely it works on any rpm based distro.

1. It happened many times to mess the permissions of a file and services not to work properly. In order to get fixed I run :

rpm -qf /path/to/file

rpm -ql Lists all files from a package.

This should show the package that contains the modified file. Then I run :

rpm --setperms

Also this command should show a list of modified files within a package:

rpm -V

2. To view the Changelog:

rpm -q --changelog | less

3. View package based on repo:

rpm -qa release="*rf*"

4. Extract just one File:

rpm2cpio logrotate-1.0-1.i386.rpm |cpio -ivd etc/logrotate.conf

5. Query Package Install Order and Dates

rpm -qa --last >~/RPMS_by_Install_Date

6. Query Available Packages from a Repo

Setting a PPTP VPN in CentOS 5.6

Giany — Tue, 19 Apr 2011 18:39:35 +0000

Scenario:

Setting a PPTP VPN in Centos. I’m using the following commands in order to set the VPN:

yum remove -y pptpd ppp iptables --flush POSTROUTING --table nat iptables --flush FORWARD rm -rf /etc/pptpd.conf rm -rf /etc/ppp


rpm -Uvh http://poptop.sourceforge.net/yum/stable/rhel5/pptp-release-current.noarch.rpm

yum --enablerepo=poptop-stable install pptpd
mknod /dev/ppp c 108 0

echo 1 > /proc/sys/net/ipv4/ip_forward

echo "mknod /dev/ppp c 108 0" >> /etc/rc.local

echo "echo 1 > /proc/sys/net/ipv4/ip_forward" >> /etc/rc.local

echo "localip 172.16.36.1" >> /etc/pptpd.conf

echo "remoteip 172.16.36.2-254" >> /etc/pptpd.conf

echo "ms-dns 8.8.8.8" >> /etc/ppp/options.pptpd

echo "ms-dns 8.8.4.4" >> /etc/ppp/options.pptpd
pass=`openssl rand 6 -base64`

if [ "$1" != "" ]

then pass=$1

fi

read -p "User: " user

echo "${user} pptpd ${pass} *" >> /etc/ppp/chap-secrets
iptables -t nat -A POSTROUTING -s 172.16.36.0/24 -j SNAT --to-source `ifconfig  | grep 'inet addr:'| grep -v '127.0.0.1' | cut -d: -f2 | awk 'NR==1 { print $1}'`

iptables -A FORWARD -p tcp --syn -s 172.16.36.0/24 -j TCPMSS --set-mss 1356

service iptables save
chkconfig iptables on

chkconfig pptpd on

service iptables start

service pptpd start

echo "VPN username is ${user}, VPN password is ${pass}"

Centos 5.6 templates for XenServer 5.5/5.6

Giany — Sun, 17 Apr 2011 07:47:45 +0000

As you probably know already CentOS 5.6 is out (http://wiki.centos.org/Manuals/ReleaseNotes/CentOS5.6 ) and since Xenserver 5.5/5.6 is missing this templates I had to add them manually. I’m using this script that clones the CentOS 5.3 template.

#!/bin/bash

CENTOS=$(xe template-list name-label=CentOS\ 5.3 --minimal) if [[ -z $CENTOS ]] ; then echo "Cant find CentOS 5.3 32bit template, are you on XenServer 5.5 or higher?" exit 1 fi

distro="CentOS 5.6" arches=("32-bit" "64-bit")


for arch in ${arches[@]} ; do

echo "Attempting $distro ($arch)"

if [[ -n $(xe template-list name-label="$distro ($arch)" params=uuid --minimal) ]] ; then

echo "$distro ($arch)" already exists, Skipping

else

NEWUUID=$(xe vm-clone uuid=$CENTOS new-name-label="$distro ($arch)") xe template-param-set uuid=$NEWUUID other-config:install-methods=http,ftp,nfs \ other-config:default_template=true echo "Success" fi done echo "Done"

http://wiki.centos.org/Manuals/ReleaseNotes/CentOS5.6

Install FFmpeg and FFmpeg-php on Centos 5 and Plesk

Giany — Thu, 22 Jul 2010 18:49:58 +0000

Run :

rpm -Uhv http://apt.sw.be/redhat/el5/en/i386/rpmforge/RPMS/rpmforge-release-0.3.6-1.el5.rf.i386.rpm
yum -y install ffmpeg ffmpeg-devel mplayer mencoder flvtool2
cd /usr/src
Download http://garr.dl.sourceforge.net/sourceforge/ffmpeg-php/ffmpeg-php-0.6.0.tbz2
tar jxvf ffmpeg-php-0.6.0.tbz2
cd ffmpeg-php-0.6.0
phpize
./configure
make
make install

Edit /etc/php.ini and add :

extension=ffmpeg.so

and then:

service httpd restart

Error compiling PHP on CentOS 64 bit

Giany — Fri, 23 Apr 2010 18:33:42 +0000

In order to compile PHP on 64 bit you need to use the option --with-libdir=lib64 otherwise you will stay forever with the following error

checking for MySQL support... yes checking for specified location of the MySQL UNIX socket... no checking for MySQL UNIX socket location... no checking for mysql_close in -lmysqlclient... no checking for mysql_error in -lmysqlclient... no configure: error: mysql configure failed. Please check config.log for more information.

Other possible reasons are :
1. missing the libtool-ltdl-devel package
2. missing the ncurses-devel
3. missing mysql-devel package