From 40cc848456b08ad56131eff6b6b7fd495f3478c1 Mon Sep 17 00:00:00 2001 From: dxr <dxr@ispconfig3> Date: Mon, 23 Nov 2009 18:24:33 -0500 Subject: [PATCH] Update CHROOTED_DEBIAN_5.0.txt_beta --- docs/CHROOTED_DEBIAN_5.0.txt_beta | 61 +++++++++++++++++++----------- 1 files changed, 39 insertions(+), 22 deletions(-) diff --git a/docs/CHROOTED_DEBIAN_5.0.txt_beta b/docs/CHROOTED_DEBIAN_5.0.txt_beta index 471b5aa..d3f6cd1 100644 --- a/docs/CHROOTED_DEBIAN_5.0.txt_beta +++ b/docs/CHROOTED_DEBIAN_5.0.txt_beta @@ -50,7 +50,7 @@ /var/www/html/ Chroot system /var/www/html/var/log/apache2 Log partition (ext3) /var/www/html/var/www/html Webs partition (xfs) -/var/www/html/tmp Temporal dir (tmpfs, optiones: ) +/var/www/html/tmp Temporal dir (tmpfs, options: ) /dev/lvm_foobar1/chroot_lv -> /var/www/ (ext3) /dev/lvm_foobar2/apachelogs_lv -> /var/www/html/var/log/apache2 (ext3) @@ -68,7 +68,25 @@ 4. Prepair Chroot enviroment -apt-get install debootstrap libpcre3 libaprutil1 libxml2 mime-support patch make gcc mysql-server subversion + +# Install packages in real system +apt-get install debootstrap libpcre3 libaprutil1 libxml2 mime-support patch make gcc mysql-server subversion ssh openssh-server ntp ntpdate vim libdbd-mysql libdbi-perl dnsutils +# The non webserver will install outside of chroot +apt-get install postfix postfix-mysql postfix-doc mysql-client openssl getmail4 rkhunter amavisd-new spamassassin clamav clamav-daemon zoo unzip bzip2 arj nomarch lzop cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip libnet-dns-perl pure-ftpd-common pure-ftpd-mysql quota quotatool +# If you will use courier: +apt-get install courier-authdaemon courier-authlib-mysql courier-pop courier-pop-ssl courier-imap courier-imap-ssl libsasl2-2 libsasl2-modules libsasl2-modules-sql sasl2-bin libpam-mysql courier-maildrop +# If you will use dovecot: +#apt-get install dovecot-imapd dovecot-pop3d +# If you will use BIND: +apt-get install bind9 bind9utils + +# +# If we want execute php from real system (crontabs for example) we need install php dependencies in real system: +# libgd2-xpm libt1-5 libmagick10 libc-client2007b libmcrypt4 +# cat /var/log/ispconfig/cron.log +# ldd /usr/lib/php5/20060613/mcrypt.so +# + time debootstrap --arch=amd64 lenny /var/www/html/ ftp://ftp.fr.debian.org/debian/ echo "/proc /var/www/html/proc proc defaults 0 0">>/etc/fstab @@ -78,9 +96,6 @@ # We must create sshusers group echo "@sshusers - chroot /var/www/html/">>/etc/security/limits.conf - -# After copy, we must clean unnecessary users and groups -cp -r /etc/{passwd,group,apt} /var/www/html/etc/ chroot /var/www/html apt-get update chroot /var/www/html apt-get install fakeroot --force-yes -y @@ -95,15 +110,7 @@ mv /etc/apache2 /etc/apache2_old mv /etc/suphp /etc/suphp_old -chroot /var/www/html apt-get install apache2 apache2.2-common apache2-doc apache2-mpm-prefork apache2-utils libexpat1 ssl-cert libapache2-mod-php5 php5 php5-common php5-gd php5-mysql php5-imap phpmyadmin php5-cli php5-cgi libapache2-mod-fcgid apache2-suexec php-pear php-auth php5-mcrypt mcrypt php5-imagick imagemagick libapache2-mod-suphp libopenssl-ruby libapache2-mod-chroot php-apc vim libdbd-mysql libdbi-perl -# The non webserver will install outside of chroot -apt-get install postfix pure-ftpd-mysql amavisd-new clamav-getfiles clamav clamav-freshclam -# If you will use courier: -apt-get install courier-ssl courier-pop-ssl courier-pop courier-imap-ssl courier-imap courier-authdaemon -# If you will use dovecot: -apt-get install dovecot-imapd dovecot-pop3d -# If you will use BIND: -apt-get install bind9 bind9utils +chroot /var/www/html apt-get install apache2 apache2.2-common apache2-doc apache2-mpm-prefork apache2-utils libexpat1 ssl-cert libapache2-mod-php5 php5 php5-common php5-gd php5-mysql php5-imap phpmyadmin php5-cli php5-cgi libapache2-mod-fcgid apache2-suexec php-pear php-auth php5-mcrypt mcrypt php5-imagick imagemagick libapache2-mod-suphp libopenssl-ruby libapache2-mod-chroot php-apc libtimedate-perl chroot /var/www/html /etc/init.d/apache2 stop @@ -137,6 +144,7 @@ ln -s /var/www/html/var/lock/apache2 /var/lock/apache2 ln -s /var/www/html/var/lib/apache2 /var/lib/apache2 ln -s /var/www/html/usr/lib/php5 /usr/lib/php5 +ln -s /var/www/html/etc/init.d/apache2 /etc/init.d/apache2 # Neccessary for to install ispconfig3 from real system: ln -s /var/www/html/usr/bin/php5 /usr/bin/php5 ln -s /var/www/html/etc/alternatives/php /etc/alternatives/php @@ -158,14 +166,13 @@ mv /var/www/html/usr/sbin/sendmail /var/www/html/usr/sbin/sendmail_old cp mini_sendmail /var/www/html/usr/sbin/mini_sendmail cd /var/www/html/usr/lib/ && ln -s ../sbin/mini_sendmail sendmail -/var/www/html/usr/sbin && ln -s mini_sendmail sendmail +cd /var/www/html/usr/sbin && ln -s mini_sendmail sendmail # ./mini_sendmail -h # usage: ./mini_sendmail [-f<name>] [-t] [-s<server>] [-p<port>] [-T<timeout>] [-v] [address ...] #add to php.ini (/var/www/html/etc/php5/apache2/php.ini /var/www2/etc/php5/cli/php.ini /var/www2/etc/php5/cgi/php.ini line :672) - -sendmail_path = /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.com -s127.0.0.1 +# sendmail_path = /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.com -s127.0.0.1 sed -i -e 's#^;sendmail_path =$#sendmail_path = /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.com -s127.0.0.1#' /var/www/html/etc/php5/apache2/php.ini /var/www/html/etc/php5/cli/php.ini /var/www/html/etc/php5/cgi/php.ini @@ -173,13 +180,11 @@ 7. # Test apache2ctl restart -chroot /var/www/html/ # php -i|grep --color sendmail -sendmail_from => no value => no value -sendmail_path => /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.com -s127.0.0.1 => /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.com -s127.0.0.1 -Path to sendmail => /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.com -s127.0.0.1 -# +#sendmail_from => no value => no value +#sendmail_path => /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.com -s127.0.0.1 => /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.com -s127.0.0.1 +#Path to sendmail => /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.com -s127.0.0.1 # Sould be good idea check /var/www/html/usr/lib/sendmail /var/www/html/usr/sbin/sendmail and /var/www/html/usr/sbin/mini_sendmail with nagios alarm ;) @@ -188,8 +193,20 @@ cd /tmp/ svn co svn://svn.ispconfig.org/ispconfig3 svn.ispconfig.org + mv /usr/local/ispconfig /var/www/html/usr/local/ ln -s /var/www/html/usr/local/ispconfig /usr/local/ispconfig +mv /var/www/apps /var/www/html/var/www/ +mv /var/www/php-fcgi-scripts /var/www/html/var/www/ +mv /var/www/ispconfig /var/www/html/var/www/ +ln -s /var/www/html//var/www/ispconfig /var/www/ispconfig +ln -s /var/www/html/var/www/php-fcgi-scripts /var/www/php-fcgi-scripts +ln -s /var/www/html/var/www/apps /var/www/apps +# After copy, we must clean unnecessary users and groups +cp -r /etc/{passwd,group,apt} /var/www/html/etc/ +apache2ctl stop +apache2ctl start + ### Migration to other server ### Really easy: -- Gitblit v1.9.1