2008-10 mercury upgrade
* [x] plan disk layout * [x] write venus:/BonMotBackup/backup.sh to back up bonmot.ca to casein.bonmot.ca . . . stupid autofs * [x] run sst * [x] configure apache * [ ] test that gd works with the "ship" database . . .
2K - last updated 2008-10-25 08:23 UTC by Dan
2010-04 venus packages
* aalib * alternatives * [x] apache2 DAN * arts * aspell * aspellen * audiofile * autoconf * bash * bbkeys . . .
3K - last updated 2010-08-20 13:55 UTC by DanielMacKay
2010-09-14 patches
Main pca patch log is in venus:/root/2010-09-14_patches Notice on shutdown: cannot remove pidfile /var/run/nrpe.pid . . . - check your privileges After reboot, cswapache2 didn't come up because there was no /var/run/apache2/ . . . gets cleared during a reboot. Change /etc/apache2/httpd.conf file to put the lockfiles into /var/run . . .
1K - last updated 2010-09-14 13:17 UTC by DanielMacKay
2011-05-26
Dan * upgraded all pkg-get info to pkgutil * [[Install pkgutil]] * de-installed pkg-get, and * ran pkgutil . . . -u Note to self: after upgrading cswapache2 you must create a symlink for the config directory, . . . zones can write to. So, on venus, * cd /opt/csw/apache2 * mv etc/ (to some other name or delete it) . . . * ln -s /etc/apache2 etc . . .
1K - last updated 2012-05-28 12:14 UTC by Dan
2011-09-07 patching
Dan * ran pkgutil -u cswapache2 service did not get copied to mercury. Manually copy the service over, . . . and then on venus, * cd /opt/csw/apache2 * mv etc/ (to some other name or delete it) . . . * ln -s /etc/apache2 etc pop server dovecot got deleted but did . . .
1K - last updated 2011-09-07 16:55 UTC by Dan
2012-06-19
Doug upgraded packages. Repository changed from "unstable" to "testing" and the version numbers on the . . . ... restart Apache, repeat for 20 times to get PHP running again. . . .
1K - last updated 2012-06-21 18:49 UTC by Dan
2012-10-22 oddmuse upgrade
||What ||Old ||Current || ||wiki.pl ||1.95 ||(2.1-38-ga41920a)|| ||calendar.pl ||1.57 || || ||canonical.pl . . . ||1.1 || || ||usemod.pl ||1.40 || || Apache/2.2.22 (Unix) PHP/5.3.10 Perl v5.8.9 no mod_perl . . .
1K - last updated 2012-10-22 12:41 UTC by Dan
2013-06 Move
Principles * we'll preserve services running on Bonmot and move without a major outage * we'll help Moose . . . so we can get to the conf files etc. * [x] Get apache2 up, move httpd.conf, serving home directories . . . a minor mess * [x] Decide on an http server -- apache2 * [ ] Move composium.org & paradisecinema.com . . .
3K - last updated 2013-10-24 21:11 UTC by Dan
2016-06 mercury admin
Upgrade notes for mercury.bonmot.ca Date: 22 June 2016 Notes 20:29h Initial update went OK. Looking for . . . directive in case you are not using Apache to serve your Drupal sites) in each of your . . . Wed, 29 Oct 2014 19:00:14 +0100 apache2 (2.2.22-13+deb7u2) stable; urgency=medium * . . . with some older clients, see /usr/share/doc/apache2/README.Debian.gz for a work-around. -- Stefan . . . Done The following packages will be upgraded: apache2 apache2-doc apache2-mpm-prefork apache2-utils . . .
12K - last updated 2016-06-23 10:47 UTC by Dan
2017 mercury move
Copied from [[2013-06 Move]] * New machine: mercnew.bonmot.ca 199.255.223.73 Debian 9.11 * Old mercold . . . mysql * [x] DOUG Change root password * [x] Get apache2 up, move httpd.conf, serving home directories . . . 7 * [x] Drupal 8 * [x] make sure that only apache2 is coming up In progress * [ ] Dan get $400 . . . new machine. * [x] Decide on an http server -- apache2 * [x] Move composium.org & paradisecinema.com . . . LayoutMachine ===Unexpected Stuff=== * Several apache2 configs including gay.hfxns.org, needed this . . .
4K - last updated 2020-02-04 23:30 UTC by Dan
2020-05-17
apache2 outage on mercury. No clue where the restart(s) might have come from <pre> [Sun May 17 18:28:43.586421 . . . 2020] [mpm_prefork:notice] [pid 20298] AH00163: Apache/2.4.25 (Debian) OpenSSL/1.0.2u configured -- . . . [pid 20298] AH00094: Command line: '/usr/sbin/apache2' [Sun May 17 18:29:00.628599 2020] [mpm_prefork:notice] . . . May 17 18:28:43 mercury systemd[1]: Stopping The Apache HTTP Server... May 17 18:28:43 mercury systemd[1]: . . . Stopped The Apache HTTP Server. May 17 18:28:43 mercury systemd[1]: . . .
2K - last updated 2020-05-19 10:00 UTC by Dan
2020-05-18
problem: apache2 crashing. fix by adding Restart=always into its [[systemd]] override file. systemctl . . . edit apache2 [Service] Restart=always Add email notifications . . . for apache2 restarts: vi /etc/systemd/system/notify-email@.service . . . and systemctl edit apache2 and add [Unit] OnFailure=notify-email@%i.service . . .
1K - last updated 2020-05-18 09:07 UTC by Dan
2020 mercury move
==Move Options== ; Pay Up : just give Giles $50/mo. Adv: no work required, Canadian, local ; canadianwebhosting . . . Greg for other hardening stuff : [x] copy /etc/apache2/ : [x] Drupal7 - tarr'd and copied all of /etc/drupal/7 . . .
4K - last updated 2021-11-04 14:37 UTC by Dan
2021-03-19
PHP upgrade due to security concerns <pre> root@mercury:/local/home/daniel/www/Recipes# apt list --upgradable . . . CLI interface. Use with caution in scripts. libapache2-mod-php/unknown 2:8.0+82+0~20210313.35+debian9~1.gbpa8195f . . . 2:7.4+73+0~20200221.21+debian9~1.gbp29416a] libapache2-mod-php7.4/unknown 7.4.16-1+0~20210305.42+debian9~1.gbpbbe65e . . . installed one thing. apt install php ... did libapache2-mod-php8.0 php8.0 php8.0-cli php8.0-common . . . But that still left a big list. So then libapache2-mod-php libapache2-mod-php7.4 ... which did . . .
11K - last updated 2021-03-19 11:49 UTC by Dan
2022-03-06
Disabled apache2 negotiation with a2dismod negotiation . . .
1K - last updated 2022-03-06 11:31 UTC by Dan
2023-01-12
OutagePage 04:03 (approx) "Cannot allocate memory" errors * 04:06:55 mercury systemd[1]: mariadb.service: . . . code=killed, status=9/KILL * bind9 shut down * apache2 damaged All the Drupal websites down because . . .
1K - last updated 2023-01-13 08:48 UTC by Dan
2023-01 update
Done on 2023-01-19 Original plan: upgrade mercury from Debian 9 "stretch" to 10, "buster." #nslug denizen . . . use is discouraged.. ===Fix Sequence=== # [x] apache2 just came up # [x] mariadb just acme up # [x] . . .
3K - last updated 2023-04-24 12:33 UTC by Dan
2023-05-04
Security scan by Paul Badcock (see zettelkasten) * cve-2006-20001 apache2.4.54. upgraded to 2.4.56 * . . . cve-2022-37436 apache2.4.55 * cve-2023-27522 apache2.4.55 * cve-2022-36760 . . . apache2.4.54 * cve-2023-25690 apache2.4.55 Ran "apt . . . upgrade apache2" and it did 124 upgraded, 3 newly installed, . . .
1K - last updated 2023-05-04 12:07 UTC by Dan
BonMotMove
== Notes / Discussion == * should we have a restricted /etc/hosts.allow on the global container? What . . . * Let's review AllowOverride & Options /etc/apache2/httpd.conf please * boot drive gets mirrored . . . to PATH in /etc/default/login * install apache * syslog management up * install mysql5 * install . . .
3K - last updated 2010-10-09 18:33 UTC by DanielMacKay
Drupal
=Common Drupal Procedures= * Drupal 10 is in /etc/drupal/10 ===Set Yer Var=== drupal=10 ===Update drupal=== . . . and modify a file for fruitcake.org in /etc/apache2/sites-available * a2ensite the site name. it . . . will tell you to do an apachectl restart ??? site=fruitcake.org drupal=9 cd . . . * Create (or copy & rename) a file in /etc/apache2/sites-enabled/bonmot.ca.fruitcake.conf Alias . . . /fruitcake /usr/share/drupal7 * ... and restart apache2 with systemctl reload apache2 * create the . . .
5K - last updated 2024-09-07 11:23 UTC by Dan
MaliciousPHP
2021: notice malicious PHP files written in EVERY apache-writable directory in the filesystem. Not very . . . directory on the system that's writeable by the apache process * it puts a e.g. .37eb5bf3.ico in one . . .
2K - last updated 2021-06-30 10:07 UTC by Dan
MercuryRebuild
== Packages == |Package name|Dan Comments|Doug Comments| |apache2 | | | |curl| | | |gd|graphics library . . .
16K - last updated 2023-06-21 13:26 UTC by Dan
SolarisHardening
unfinishedpage: maybe we should replace this with Sun's JASS tool or SANS' YASSP This document outlines . . . no-S15nfs.server mv S34dhcp no-S34dhcp mv S50apache no-S50apache mv S76snmpdx no-S76snmpdx mv S77dmi . . .
6K - last updated 2006-06-10 11:02 UTC by 6331
apache
Config is in /etc/apache2/ ==Useful Apache Commands== Enable / Disable: a2ensite fruitcake.ca a2dissite . . . It'll remind you to systemctl reload apache2 * [[php dot ini]] * Enable [[https]] instructions . . .
1K - last updated 2021-03-09 16:48 UTC by Dan
https
2020-03-18 * followed instructions at https://wiki.debian.org/LetsEncrypt * apt install python-certbot-apache . . . page says all you need to do is: sudo certbot --apache -d <domain> --post-hook "/usr/sbin/service apache2 . . . certbot --authenticator standalone --installer apache \ -dbonmot.ca -dperformance.bonmot.ca -drecipes.bonmot.ca . . . \ -dladdieswholunch.ca \ --pre-hook "service apache2 stop" --post-hook "service apache2 start" * . . .
2K - last updated 2025-02-03 15:27 UTC by Dan
php dot ini
php.ini Most annoying file in PHP located in: /etc/php/7.4/apache2/php.ini Change * max_execution_time . . .
1K - last updated 2020-03-19 14:05 UTC by Dan
systemd
=Useful Debian systemd commands= ===Apache=== a2ensite (config file) a2dissite (config file) ... and . . . then systemctl reload apache2 systemctl [start|stop] apache2 systemctl status . . . systemctl status apache2 ===failed services=== See them with systemctl . . . journalctl -u servicename.service systemctl edit apache2 # will edit the override file with nano systemctl . . . 2022-02-21 it was reporting "notify-email@apache2.service" was down. clear it with systemctl . . .
2K - last updated 2024-06-20 12:08 UTC by Dan
27 pages found.