After going down the compiling route, as in my previous post due to the same out dated problems I actually found a useful and up-to-date repository. Along with this, my bias towards Debian drastically strengthed. Which after many years of working on a a variety of other distro’s never quiet happened.

Setting up and configuring Debian

The initial setup comprises of two steps, the first step is to configure the locales, the second is to add new repos to your sources.list file.

Set the Locale

On a fresh install, anytime you need to use apt-get for anything Debian always complains about ‘setting the locale failed’ like below:

perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = "en",
LC_ALL = (unset),
LANG = "en"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = "en",
LC_ALL = (unset),
LANG = "en"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = "en",
LC_ALL = (unset),
LANG = "en"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").

To set the locale you need to run:

sudo locale-gen
sudo dpkg-reconfigure locales

After running the second command, you will be asked to first configure which locales you want, and then to select a default one. After that your done.

Installing PHP and MySQL on Debian

Using dotbeb’s repository add the following to your /etc/apt/sources.list

deb http://packages.dotdeb.org stable all
deb-src http://packages.dotdeb.org stable all

After which you must run

apt-get update

Finally, install PHP and MySQL:

apt-get install php5-cgi php5-mysql php5-curl php5-gd php5-idn php-pear php5-imagick php5-imap php5-mcrypt php5-memcache  php5-mhash php5-ming php5-pspell php5-recode php5-snmp php5-sqlite php5-tidy php5-xmlrpc mysql-server mysql-client nginx

Resources:

• dodeb

apt-get install php5-dev
pecl install apc

If your using nginx make sure you enter no to install using ASPX (apache dynamic modules).

Then adding the module to your php.ini file

nano /etc/php5/cgi/conf.d/apc.ini
extension=apc.so

Finally you can then restart the php cgi instances

/etc/init.d/php-fcgi restart

APC also comes with an admin script, which by default is located at:

/usr/share/php/apc.php

Simply copy this to your web folder (of course change the username and password) and you will be able to see apc’s stats.

However, this morning I came across a strange error message when installing apc:

pear.php.net is using a unsupported protocal – This should never happen.
install failed.

After searching on-line and reading several posts it appears that both pear.php.net.reg and pecl.php.net.reg files seem to be partially complete. The solution is quiet simple, open up each file and insert the following completed version:

pear.php.net.reg

a:6:{s:7:"attribs";a:4:{s:7:"version";s:3:"1.0";s:5:"xmlns";s:31:"http://pear.php.net/channel-1.0";s:9:"xmlns:xsi";s:41:"http://www.w3.org/2001/XMLSchema-instance";s:18:"xsi:schemaLocation";s:71:"http://pear.php.net/channel-1.0 http://pear.php.net/dtd/channel-1.0.xsd";}s:4:"name";s:12:"pear.php.net";s:14:"suggestedalias";s:4:"pear";s:7:"summary";s:40:"PHP Extension and Application Repository";s:7:"servers";a:2:{s:7:"primary";a:1:{s:4:"rest";a:1:{s:7:"baseurl";a:4:{i:0;a:2:{s:7:"attribs";a:1:{s:4:"type";s:7:"REST1.0";}s:8:"_content";s:25:"http://pear.php.net/rest/";}i:1;a:2:{s:7:"attribs";a:1:{s:4:"type";s:7:"REST1.1";}s:8:"_content";s:25:"http://pear.php.net/rest/";}i:2;a:2:{s:7:"attribs";a:1:{s:4:"type";s:7:"REST1.2";}s:8:"_content";s:25:"http://pear.php.net/rest/";}i:3;a:2:{s:7:"attribs";a:1:{s:4:"type";s:7:"REST1.3";}s:8:"_content";s:25:"http://pear.php.net/rest/";}}}}s:6:"mirror";a:2:{i:0;a:2:{s:7:"attribs";a:1:{s:4:"host";s:15:"us.pear.php.net";}s:4:"rest";a:1:{s:7:"baseurl";a:4:{i:0;a:2:{s:7:"attribs";a:1:{s:4:"type";s:7:"REST1.0";}s:8:"_content";s:28:"http://us.pear.php.net/rest/";}i:1;a:2:{s:7:"attribs";a:1:{s:4:"type";s:7:"REST1.1";}s:8:"_content";s:28:"http://us.pear.php.net/rest/";}i:2;a:2:{s:7:"attribs";a:1:{s:4:"type";s:7:"REST1.2";}s:8:"_content";s:28:"http://us.pear.php.net/rest/";}i:3;a:2:{s:7:"attribs";a:1:{s:4:"type";s:7:"REST1.3";}s:8:"_content";s:28:"http://us.pear.php.net/rest/";}}}}i:1;a:2:{s:7:"attribs";a:3:{s:4:"host";s:15:"de.pear.php.net";s:3:"ssl";s:3:"yes";s:4:"port";s:4:"3452";}s:4:"rest";a:1:{s:7:"baseurl";a:4:{i:0;a:2:{s:7:"attribs";a:1:{s:4:"type";s:7:"REST1.0";}s:8:"_content";s:34:"https://de.pear.php.net:3452/rest/";}i:1;a:2:{s:7:"attribs";a:1:{s:4:"type";s:7:"REST1.1";}s:8:"_content";s:34:"https://de.pear.php.net:3452/rest/";}i:2;a:2:{s:7:"attribs";a:1:{s:4:"type";s:7:"REST1.2";}s:8:"_content";s:34:"https://de.pear.php.net:3452/rest/";}i:3;a:2:{s:7:"attribs";a:1:{s:4:"type";s:7:"REST1.3";}s:8:"_content";s:34:"https://de.pear.php.net:3452/rest/";}}}}}}s:13:"_lastmodified";a:2:{s:4:"ETag";s:20:""2fe96-59a-31a3fc80"";s:13:"Last-Modified";s:29:"Tue, 02 Jun 2009 05:55:46 GMT";}}

pecl.php.net.reg:

a:6:{s:4:"name";s:12:"pecl.php.net";s:14:"suggestedalias";s:4:"pecl";s:7:"summary";s:31:"PHP Extension Community Library";s:7:"servers";a:1:{s:7:"primary";a:2:{s:6:"xmlrpc";a:1:{s:8:"function";a:10:{i:0;a:2:{s:7:"attribs";a:1:{s:7:"version";s:3:"1.0";}s:8:"_content";s:9:"logintest";}i:1;a:2:{s:7:"attribs";a:1:{s:7:"version";s:3:"1.0";}s:8:"_content";s:26:"package.listLatestReleases";}i:2;a:2:{s:7:"attribs";a:1:{s:7:"version";s:3:"1.0";}s:8:"_content";s:15:"package.listAll";}i:3;a:2:{s:7:"attribs";a:1:{s:7:"version";s:3:"1.0";}s:8:"_content";s:12:"package.info";}i:4;a:2:{s:7:"attribs";a:1:{s:7:"version";s:3:"1.0";}s:8:"_content";s:22:"package.getDownloadURL";}i:5;a:2:{s:7:"attribs";a:1:{s:7:"version";s:3:"1.1";}s:8:"_content";s:22:"package.getDownloadURL";}i:6;a:2:{s:7:"attribs";a:1:{s:7:"version";s:3:"1.0";}s:8:"_content";s:25:"package.getDepDownloadURL";}i:7;a:2:{s:7:"attribs";a:1:{s:7:"version";s:3:"1.1";}s:8:"_content";s:25:"package.getDepDownloadURL";}i:8;a:2:{s:7:"attribs";a:1:{s:7:"version";s:3:"1.0";}s:8:"_content";s:14:"package.search";}i:9;a:2:{s:7:"attribs";a:1:{s:7:"version";s:3:"1.0";}s:8:"_content";s:15:"channel.listAll";}}}s:4:"rest";a:1:{s:7:"baseurl";a:2:{i:0;a:2:{s:7:"attribs";a:1:{s:4:"type";s:7:"REST1.0";}s:8:"_content";s:25:"http://pecl.php.net/rest/";}i:1;a:2:{s:7:"attribs";a:1:{s:4:"type";s:7:"REST1.1";}s:8:"_content";s:25:"http://pecl.php.net/rest/";}}}}}s:15:"validatepackage";a:2:{s:8:"_content";s:19:"PEAR_Validator_PECL";s:7:"attribs";a:1:{s:7:"version";s:3:"1.0";}}s:13:"_lastmodified";s:31:"Thu, 03 Jan 2008 11:48:06 -0700";}

Download nginx and install dependencies

We have to download the nginx source and perhaps a few modules. But before we can install this the system will need a few dependencies installed.

Download nginx from the website (http://wiki.nginx.org/Main)

wget http://sysoev.ru/nginx/nginx-0.7.64.tar.gz
tar -C /tmp nginx-0.7.64.tar.gz

Download addition modules (http://wiki.nginx.org/Nginx3rdPartyModules)
i.e. Headers more module:

wget http://github.com/agentzh/headers-more-nginx-module/tarball/v0.01
tar -C /tmp agentzh-headers-more-nginx-mdule-c131b08.tar.gz

We need to check for any dependencies and install them if needed. Therefore run:

aptitude show nginx

This will show you the list of dependencies. Next is to install them:

apt-get install libc6 libpcre3 libpcre3-dev libpcrecpp0 libssl0.9.8 libssl-dev zlib1g zlib1g-dev lsb-base

Configure and compiling nginx of debian

We can now go ahead and compile nginx on debian. The first thing to do is to configure the installation. Below I have set most of the options that will place nginx and its config/log files in similar locations to what your used to.

cd /tmp/nginx-0.7.64
./configure \
--sbin-path=/usr/sbin \
--conf-path=/etc/nginx/nginx.conf \
--error-log-path=/var/log/nginx/error.log \
--http-log-path=/var/log/nginx/access.log \
--user=www-data \
--group=www-data \
--pid-path=/var/run/nginx.pid \
--lock-path=/var/lock/nginx.lock \
--with-http_ssl_module \
--with-http_dav_module \
--with-http_flv_module \
--with-http_gzip_static_module \
--with-http_realip_module \
--with-http_stub_status_module \
--http-client-body-temp-path=/var/tmp/nginx/client/ \
--http-fastcgi-temp-path=/var/tmp/nginx/fcgi/ \
--add-module=/tmp/agentzh-headers-more-nginx-module-c131b08

Once the configure script has finished we can run make and install nginx

make && make install

Create the nginx init script

Just like all other services that you installed, we can create a nginx startup script. Create the file /etc/init.d/nginx and add the following:

#! /bin/sh

# Description: Startup script for nginx webserver on Debian. Place in /etc/init.d and
# run 'sudo update-rc.d nginx defaults', or use the appropriate command on your
# distro.
#
# Author:       Ryan Norbauer
# Modified:     Geoffrey Grosenbach http://topfunky.com

set -e

PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
DESC="nginx daemon"
NAME=nginx
DAEMON=/usr/sbin/$NAME
CONFIGFILE=/etc/nginx/nginx.conf
PIDFILE=/var/run/$NAME.pid
SCRIPTNAME=/etc/init.d/$NAME

# Gracefully exit if the package has been removed.
test -x $DAEMON || exit 0

d_start() {
 $DAEMON -c $CONFIGFILE || echo -n " already running"
}

d_stop() {
 kill -QUIT `cat $PIDFILE` || echo -n " not running"
}

d_reload() {
 kill -HUP `cat $PIDFILE` || echo -n " can't reload"
}

case "$1" in
 start)
 echo -n "Starting $DESC: $NAME"
 d_start
 echo "."
 ;;
 stop)
 echo -n "Stopping $DESC: $NAME"
 d_stop
 echo "."
 ;;
 reload)
 echo -n "Reloading $DESC configuration..."
 d_reload
 echo "reloaded."
 ;;
 restart)
 echo -n "Restarting $DESC: $NAME"
 d_stop
 # One second might not be time enough for a daemon to stop,
 # if this happens, d_start will fail (and dpkg will break if
 # the package is being upgraded). Change the timeout if needed
 # be, or change d_stop to have start-stop-daemon use --retry.
 # Notice that using --retry slows down the shutdown process somewhat.
 sleep 5
 d_start
 echo "."
 ;;
 *)
 echo "Usage: $SCRIPTNAME {start|stop|restart|force-reload}" >&2
 exit 3
 ;;
esac

exit 0

Make the nginx startup script executable so that we can run it

chmod +x /etc/init.d/nginx

Finally we can make this script start on system startup.

/usr/sbin/update-rc.d -f nginx defaults

Configuring virtual hosts on nginx

We have to create a few directories to hold each virtual host and log files:

mkdir /etc/nginx/sites-available/
mkdir /etc/nginx/sites-enabled/

Configure the nginx server by opening the config file

nano /etc/nginx/nginx.conf

Replace the text with the following:

user www-data;
worker_processes  1;

error_log  /var/log/nginx/error.log;
pid        /var/run/nginx.pid;

events {
 worker_connections  1024;
 # multi_accept on;
}

http {
 include       /etc/nginx/mime.types;

 access_log    /var/log/nginx/access.log;

 sendfile        on;
 #tcp_nopush     on;

 #keepalive_timeout  0;
 keepalive_timeout  65;
 tcp_nodelay        on;

 gzip  on;
 gzip_disable "MSIE [1-6]\.(?!.*SV1)";

 include /etc/nginx/conf.d/*.conf;
 include /etc/nginx/sites-enabled/*;

}

I like to store my virtual hosts in /var/www/vhosts/host.com/httpdocs. Therefore create the directories:

mkdir /var/www/vhosts/host.com/httpdocs
mkdir /var/www/vhosts/host.com/logs

We can now create a virtual host template. Therefore create the following file  /etc/nginx/sites-available/test.com and insert the content below making sure you change host.com to your domain name

# You may add here your
# server {
#    ...
# }
# statements for each of your virtual hosts

server {
 listen   80;
 server_name  host.com;

 access_log  /var/www/vhosts/host.com/logs/access.log;
 error_log  /var/www/vhosts/host.com/logs/error.log;    

 location / {
 root   /var/www/vhosts/host.com/httpdocs;
 index  index.html;
 }

 location /doc {
 root   /usr/share;
 autoindex on;
 allow 127.0.0.1;
 deny all;
 }

 location /images {
 root   /usr/share;
 autoindex on;
 }

 #error_page  404  /404.html;

 # redirect server error pages to the static page /50x.html
 #
 error_page   500 502 503 504  /50x.html;
 location = /50x.html {
 root   /var/www/nginx-default;
 }

 # proxy the PHP scripts to Apache listening on 127.0.0.1:80
 #
 #location ~ \.php$ {
 #proxy_pass   http://127.0.0.1;
 #}

 # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
 #

 #if (!-e $request_filename) {
 #  rewrite  ^(.*)$  /index.php?q=$1  last;
 #  break;
 #}
#        try_files $uri $uri/ /wordpress/index.php?q=$uri;

 #location ~ \.php$ {
 #fastcgi_pass   127.0.0.1:9000;
 #fastcgi_index  index.php;
 #fastcgi_param  SCRIPT_FILENAME  /var/www/vhosts/test/httpdocs$fastcgi_script_name;
 #include /etc/nginx/fastcgi_params;
 #}

 # deny access to .htaccess files, if Apache's document root
 # concurs with nginx's one
 #
 #location ~ /\.ht {
 #deny  all;
 #}
}

# another virtual host using mix of IP-, name-, and port-based configuration
#
#server {
#listen   8000;
#listen   somename:8080;
#server_name  somename  alias  another.alias;

#location / {
#root   html;
#index  index.html index.htm;
#}
#}

# HTTPS server
#
#server {
#listen   443;
#server_name  localhost;

#ssl  on;
#ssl_certificate  cert.pem;
#ssl_certificate_key  cert.key;

#ssl_session_timeout  5m;

#ssl_protocols  SSLv2 SSLv3 TLSv1;
#ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
#ssl_prefer_server_ciphers   on;

#location / {
#root   html;
#index  index.html index.htm;
#}
#}

Create a symlink which will make our virtual host config live:

ln -s /etc/nginx/sites-available/test /etc/nginx/sites-enabled/test

Finally we can now start the nginx server

/etc/init.d/nginx start

Now that we have nginx running, we need to make sure this service is always started. Therefore lets add it to our default run levels

update-rc.d -f nginx defualts

Hopefully you will now have the nginx server up and running. The next few blog posts will show how to incorporate PHP with nginx and to get both wordpress and symfony projects working.

Intalling dropbox on Ubuntuu 9.04

Following dropbox‘s instructions you are left at a dead end. There is no dropbox folder created even after nautilus has been restarted and I had logged out then back in. To complete the install of dropbox on Ubuntu, on the command line enter

dropbox start -i 

which will then download and install the daemon. Once that is done logout and back in and you should then be able to use your drop box.

Ubuntu users:

$sudo apt-get install keychain

After its install, you set it up by entering the keychain command followed by your private key (not the public key).

$ keychain ~/.ssh/id_rsa
KeyChain 2.6.6; http://www.gentoo.org/proj/en/keychain/ Copyright 2002-2004
Gentoo Foundation; Distributed under the GPL</pre>
* Initializing /home/timmy/.keychain/hostname-sh file...
* Initializing /home/timmy/.keychain/hostname-csh file...
* Initializing /home/timmy/.keychain/hostname-fish file...
* Starting ssh-agent
* Adding 1 ssh key(s)...
Enter passphrase for /home/timmy/.ssh/id_rsa:
Identity added: /home/timmy/.ssh/id_rsa (/home/timmy/.ssh/id_rsa)

Keychain then creates three files which correspond to various shell environments. As I am using bash, the file I will be referencing will be /home/timmy/.keychain/hostname-sh.

$ source ~/.keychain/hostname-sh

To make sure everything is fine run the following to make sure the the environment is in fact set up:

$ env | grep SSH_A
SSH_AGENT_PID=9607
SSH_AUTH_SOCK=/tmp/ssh-bMoLeb9606/agent.9606

Of course you will want this to happen automatically on login so add the following to your ~/.bashrc

keychain ~/.ssh/id_rsa
source ~/.keychain/hostname-sh

The last step is to add the following line to your backup script (including the .)

. /home/timmy/.keychain/hostname-sh

Backup Scripts
Ill only mention the two methods that i use.
1. scp: To copy files from one location to another
2. rsync: To sync a remote location to local location

SCP

. /home/timmy/.keychain/hostname-sh
scp -r /home/timmy/Server_Backups/web/* root@192.168.0.1:/var/backup/web

Rsync

. /home/timmy/.keychain/hostname-sh
rsync -rzvhlc --delete -e "ssh -p 22 -i /home/timmy/.ssh/id_rsa -o 'BatchMode yes'"
root@hostname:/var/www/vhosts/vhostname/httpd/ home/timmy/Server_Backups/web/

After that you should not get the error:

Permission denied, please try again.
Received disconnect from 192.168.0.10: 2: Too many authentication failures for root
lost connection

Well there are a few things:

1. Setup the firewall to handle them

2. Installing deny hosts

3. Configure your ssh daemon properly

4. Set up proper accounts for people

The methods that I deploy are points 1, 3 and 4.

Configuring SSH

In the sshd_conf do the following:

- change the port number: port 9999

- Allow no password auth: PasswordAuthentication no

- Allow public key auth: PubkeyAuthentication yes

- Only allow user accounts that belong to a group: AllowGroups groupName

By setting the above you have place a lot of restrictions on the who can access your server using ssh.

Configure your firewall iptables in linux

iptables -N SSH_CHECK
iptables -A INPUT -p tcp --dport 9999 -m state --state NEW -j SSH_CHECK
iptables -A SSH_CHECK -m recent --set --name SSH
iptables -A SSH_CHECK -m recent --update --minutes 60 --hitcount 4 --name SSH -j DROP

Finally the last thing is to configure the user accounts that can access the server. It is strongly recommended to add the users to the sudousers if they require any specialist privileges.

We use a base project that is configured for all our core developers, which means im not adding the same permissions and groups all the time.

How I configured it:

apache svn config:

<Location /projects/test2>
 DAV svn
 # Set this to the path to your repository
 SVNPath /var/svn/test2
 AuthType Basic
 AuthName "Test2 Project"
 AuthUserFile /var/trac/.htpasswd
 AuthzSVNAccessFile /var/svn/authz
 Require valid-user
</Location></pre>
<strong>apache trac config:</strong>
<pre><VirtualHost *:80>
RewriteEngine on
RewriteCond /var/trac/$1 -d
RewriteRule ^/([^/.]+)(/?.*) /trac.cgi$2 [S=1,E=TRAC_ENV:/var/trac/$1]

ServerAdmin tim@domain.com
ServerName trac.domain.com

DocumentRoot /usr/share/trac/cgi-bin/
AddHandler cgi-script .cgi

<Directory /usr/share/trac/cgi-bin/>
  Options Indexes FollowSymLinks MultiViews ExecCGI
  AllowOverride All
  Order allow,deny
  allow from all
</Directory>

Alias /trac "/usr/share/trac/htdocs"

<Location />
 SetEnv TRAC_ENV_PARENT_DIR "/var/trac"
 SetEnv PYTHON_EGG_CACHE /var/trac/egg_cache
<Location>

DirectoryIndex trac.cgi
 ErrorLog /var/log/apache2/error.trac.log
CustomLog /var/log/apache2/access.trac.log combined
</VirtualHost>

The above configuration means that all users are in one file, and can be controlled globally. Below are the plugins which i have installed and consider very helpful.

Plugins – Below are some of the plugin which I think really help

iniadmin

trac account manager

trac svn authz

trac web admin

timing and estimatation

pagetopdf

Trac table of contents macro

XMLRPC ]]> http://timothybowler.com/2008/07/31/trac-svn/feed/ 1 http://timothybowler.com/2008/06/29/ubuntu-php-and-exim4/ http://timothybowler.com/2008/06/29/ubuntu-php-and-exim4/#comments Sun, 29 Jun 2008 17:35:52 +0000 Tim Bowler http://timothybowler.com/2008/06/29/ubuntu-php-and-exim4/ Ubuntu 8.04 does not have sendmail installed by default. This was annoying when some of the php web apps that I created rely on sendmail to send out email notifications. But before going ahead and installing sendmail, I thought that I would try exim4. Installing on Ubuntu is very straight forward:

apt-get install exim4  exim4-config

After installation is complete, you must run:

dpkg-reconfigure exim4-config

This will allow you to configure the MTA. That is it, php will ‘just work’ because the installation also creates a symlink of sendmail to the exim binary.

If you do not run the above config command, you will see this in your exim/mainlog:

tim@*******.com R=nonlocal: Mailing to remote domains not supported

When pasting in your certifacte, in the certificate field make sure you copy and paste the private key first. Followed by the certificate. If you puchased an AV certificate (so your domain is green in the IE bar), make sure you get the root and intermediate certificates.

Look in the /etc/httpd/conf.d/ssl.conf for the line like:

<VirtualHost _default_:443>

If it exists you have to delete/comment this default SSL virtual host starting from the
“<VirtualHost _default_:443>” line and ending with “</VirtualHost>“.

Then stop and start (not restart!) Apache server.

http://kb.parallels.com/en/939
- private key then certifacte

- You must paste in the root certificate first! CA intermediator cerficate then root certifecate