Blog de Chrystophe Vergnaud
$ yum install ntp
$ chkconfig ntpd on
go to http://www.pool.ntp.org/fr/ to find the right zone
$ ntpdate pool.ntp.org
$ /etc/init.d/ntpd start
$ ntpq -p
A kick reminder on pear installation.
yum install php-pear pear install -a Mail
apt-get install php-pear pear install -a Mail
Installation completed.
Now you can use pear to authenticate your SMTP connection.
‘install nsclientpp on windows server. I used version 2012-12-02.
in’ nsclient.ini:
in NRPE section check the port and ssl parameter. allow arguments
in external script section:
enable argument.
in alias section ‘/’settings/external scripts/alias]
define the alias command that you will call from nagios. it helps to reduce parameters on server side, cpu or process example elow’ ‘:
; alias_cpu – Alias for alias_cpu. To configure this item add a section called: /settings/external scripts/alias/alias_cpu
alias_cpu = checkCPU arn=80′ ‘crit=90 time=5m time=1m time=30s
; alias_process – Alias for alias_process. To configure this item add a section called: /settings/external scripts/lias’/’alias_process
alias_process = checkProcState $ARG1$=started »
; bob (test with py script)
alias_bob = bob
then in wrapped scripts maps he’ ‘alias to a real script located on windows
; A list of wrappped scripts (ie. using the template mechanism)
[/settings/external scripts/wrapped cripts]
‘ ‘check_updates = scripts\\check_updates.vbs
bob = bob.py
and at last’
‘To search xxx » in all files present in the folder C:\opt\myapp\Log’ :
open Powershell and type:
ls C:\opt\myapp\Log |ForEach-Object {select-string »C:\opt\myapp\Log\$_ » -pattern xxx} »’
évidemment ruby 1.9.3 n’est pas encore disponible en paquet debian squeeze donc on compile, on installe et hop…
Comme d’habitude vérifier la présence de:
telecharger les sources de ruby lancer autoconf .configure make (regarder les messages d'erreur sur la creation des config) openssl doit passer si vous voulez l'utiliser (si il ne passe pas c'est qu'il manque la lib. Retournez dans aptitude) make install
Installer les paquets connexe via gem
gem install rails gem install fcgi gem install rack
Descendre les sources redmine suivre la doc redmine
Ajouter la dependance sur fcgi dans Gemfile supprimer le fichier Gemfile.lock relancer le bundle install:
bundle install --without development test postgresql sqlite rmagick
Installer passenger via gem:
gem install passenger
Compiler passenger pour apache:
passenger-install-apache2-module
Ajouter dans le module passenger dans /etc/site-available (copier/coller les lignes fournit en fin de compilation du passenger)
Ensuite creer le virtual host en pointant sur l’appli ruby.
<VirtualHost *:443>
ServerName www.domain.com
DocumentRoot /opt/redmine/current/public
<Directory /opt/redmine/current/public>
AllowOverride all
Options -MultiViews
</Directory>
ErrorLog /var/log/apache2/redmine_error.log
LogLevel error
CustomLog /var/log/apache2/redmine_cust.log combined
SSLEngine on
SSLCertificateFile /etc/ssl/certs/openways.com.crt
SSLCertificateKeyFile /etc/ssl/private/openways.com.key
SSLCertificateChainFile /etc/ssl/certs/gd_bundle.crt
</VirtualHost>
Apache embarque une directive qui permet de lancer une commande. Voici la’ doc avec exemple simpliste:
[utilisation de sslpassphrasedialog|http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslpassphrasedialog|en]
Attention la’ directive doit se trouver dans le root context (hors du virtual host) donc pour gérer du multi host il faut faire un script qui parse les args reçus.
keytool -genkeypair -v -alias app_zzz -keyalg RSA -keysize 1024 -dname "CN=zzz, OU=zzz, O=zzz, L=zzz,S=00, C=FR" -validity 3600 -keypass zzz -keystore zzz.bks -storepass zzz -storetype BKS -providerclass org.bouncycastle.jce.provider.BouncyCastleProvider -providerpath C:\Users\zzz\BouncyCastle\bcprov-jdk16-146.jar
keytool -importcert -trustcacerts -alias CA_zzz -file CA_zzz.crt -keypass zzz -keystore zzz.bks -storepass zzzz -storetype BKS -providerclass org.bouncycastle.jce.provider.BouncyCastleProvider -providerpath C:\Users\zzz\BouncyCastle\bcprov-jdk16-146.jar
keytool -list -keypass zzz -keystore zzz.bks -storepass zzz -storetype BKS -providerclass org.bouncycastle.jce.provider.BouncyCastleProvider -providerpath C:\Users\zzz\BouncyCastle\bcprov-jdk16-146.jar
ps : Cet exemple se base sur le keytool de la jdk 1.6 (les options sont un peu différentes sur la jdk 1.5)
Methode oldfashion du tout ce qui est non standard dans /opt donc :
./configure --prefix=/opt/php --exec-prefix=/opt/php --with-apxs2=/usr/bin/apxs2 --with-config-file-path=/etc/php/ --disable-ipv6 --with-curl --enable-ftp --with-gd --enable-intl --enable-mbstring --with-mcrypt --with-mhash --with-mysql=/opt/mysql --with-mysqli=/opt/mysql/bin/mysql_config --with-pdo-mysql=/opt/mysql --enable-soap --with-pear --with-xsl --with-zlib --with-openssl
make make test
Installation un peu forcée car l’installeur plante sur une modification de la conf apache (il faudra la faire manuellement).
make install --ignore-errors
‘
shell> groupadd mysql
shell> useradd -g' mysql mysql
# Beginning of source-build specific instructions
shell> tar zxvf mysql-VERSION.tar.gz
shell> cd mysql-VERSIONavec aptitude' recuperer:
libtool
g++
libstdLancer le script suivant:
#!/bin/sh
CFLAGS=-O3''
CXX=gcc
CXXFLAGS=''-O3 -felide-constructors' -fno-exceptions -fno-rtti''
./configure --prefix=/opt/mysql --enable-assembler --with-mysqld-ldflags=-all-static --with-collation=utf8_general_ci' --with-charset=utf8 --with-plugins=maxshell> make
shell> make install
shell> cd /opt/mysql
shell> chown -R mysql:mysql .
shell> mkdir ata'/'iblogs
shell> chown -R mysql data
shell> chown -R mysql /var/run/mysqldVerifier la config my.cnf (valoriser les repertoires data pour' innodb)
installer la base
shell> bin/mysql_install_db --user=mysqldemarrer en mode safe:
shell> mysqld_safechanger le password' root
update mysql.user set Password=PASSWORD('...') where user='root';Créer le user debian:
mysql> create user 'debian-sys-maint'@'localhost' identified' by '...';
mysql> grant shutdown'