You are not logged in.
The package
Here are the good stabile versions of both Apache and PHP including the following stuff:
- support for these databases: mysql, postgresql, firebird
- gdi support
- mod_ssl along with a dummy certificate
- eaccelerator for PHP and the default configuration for it
- mod_gzip for pages compression
- mod_security for ids system (see Snort and making its rules compatible with mod_security). Also remember to disable rules if you get problems with PHP developement. mod_security tends to be too aggressive at first with these default rules.
The files
PKGBUILD
httpd
apache13.install
http.conf.d
httpd.conf.mod_gzip
httpd.conf.regression-v2
httpd.logrotate
Done
02.05.2005
- fixed apache13.install to properly stop the server before unistall
- set eaccelerator to be configured more like it is in cactus's package
01.05.2005
- backing up etc/php.ini and etc/httpd/conf/httpd.conf
- added logrotate support code from Judd's package
- phpize is now called from startdir instead of /usr/bin/phpize for eaccelerator
30.04.2005
- the package depends now on my firebirddb package. It was needed because
libgds.so is needed when firebird support is compiled in
- disabled imagick for the time being - got to find out how to make it compile properly by default
- cleaned up the code that sets up php (the manual file copying doesn't seem to be needed anymore with 4.3.11)
- made phpize to be called from ${startdir}
- set mod_security filtering to Off as default
29.04.2005 - updated php to v. 4.3.11
- Tested using Gallery 1.4.4-pl5 and my own project (a lot of database activity and file handling)
28.04.2005
- fixed eaccelerator and it now works (php.ini had eaccelerator's settings inserted wrong way with "-marks). The execution of some scripts that took before 0.075 - 0.09 seconds now only takes 0.03-0.04
27.04.2005
- cleaned up code a bit and old comments and disabled cookie format checking for mod_security that was causing 500 error
Todo and thoughts
<i>10.05.2005</i> - found a great guide about securely setting up apache and php
- it would be really great to implement a curses-based configuration where the PKGBUILD would be edited according to choices the users makes (because there are changes needed in many parts of the file) - this way the package would really be for everyone
- deleting default apache manual
- to get imagick to compile- graphicsmagick installation to work properly or to make it optional
(ignore the text about graphicmagic in PKGBUILD - it was just for my own tests)
Offline
have you tried to build that?
I can eyeball a few problem areas offhand that will cause errors.
I made a seperate package for eaccelerator, and it is here if you are interested:
here
"Be conservative in what you send; be liberal in what you accept." -- Postel's Law
"tacos" -- Cactus' Law
"t̥͍͎̪̪͗a̴̻̩͈͚ͨc̠o̩̙͈ͫͅs͙͎̙͊ ͔͇̫̜t͎̳̀a̜̞̗ͩc̗͍͚o̲̯̿s̖̣̤̙͌ ̖̜̈ț̰̫͓ạ̪͖̳c̲͎͕̰̯̃̈o͉ͅs̪ͪ ̜̻̖̜͕" -- -̖͚̫̙̓-̺̠͇ͤ̃ ̜̪̜ͯZ͔̗̭̞ͪA̝͈̙͖̩L͉̠̺͓G̙̞̦͖O̳̗͍
Offline
I built it today and tested again and compiling part went just fine. Only apache13.install was missing - it had pre-remove commands (if server is already running to stop it). Then removed the older same package (pacman -R) and replaced it with the new one. Then started up apache and had 500 error - it was caused by mod_security. Turned off cookie filter in httpd.conf.regression-v2 (SecFilterCheckCookieFormat Off) and then it started up fine.
The eaccelerator did not appear on php info page, so got to fix setting it up... Please let me know what else seems suspicious to you and what might cause errors.
Offline
I don't mean to whine, but you'll better upgrade PHP to 4.3.11 ASAP (security issues) :-)
To err is human... to really foul up requires the root password.
Offline
I found a way to configure apache and its modules - there is a script where user can select the needed parts and these will be automatically downloaded. It would need some efforts to make it fit for Arch's pacman, though. This script has been made specially for the older versions of apache and php.
Offline