Upgrade PHP-FPM Beta Branch Centmin Mod .09 beta branch Testing

FYI, possibly one step closer to getting free SSL certificates via Letsencrypt and automating it for Centmin Mod 123.09beta01+ SSL - Letsencrypt SSL certificate on Centmin Mod Nginx HTTP/2 | Centmin Mod Community Looking forward to next weeks updates to Letsencrypt client and hopefully Jakub's simplefs plugin for Letsencrypt gets added

---

 

FYI, 123.09beta01 has now been updated to default to PHP 5.5.29 for fresh installs

PHP 5.4 security support officially ends on September 14, 2015 so another 8 days and there will be no more security updates for PHP 5.4 branch PHP: Supported Versions. PHP 5.5 security support has another 10 months until July 10, 2016 and PHP 5.6 has 1yr 11 months until August 28, 2017.

Any testing and feedback on 123.09beta01 is always appreciated

 

Just did a test 123.09beta01 install and seems geoip PHP extension failed to install due to php.net connectivity timeouts, not sure if it's temporary or if I need to make any download source url changes for it.

checking the initial install log for CentOS 7

Code:

grep -Rn 'compiling geoip' -A9 /root/centminlogs/centminmod_1.2.3-eva2000.09_050915-143934_install.log

16543:compiling geoip PHP extension...
16544-svn: E175002: Unable to connect to a repository at URL 'http://svn.php.net/repository/pecl/geoip/trunk'
16545-svn: E175002: OPTIONS of 'http://svn.php.net/repository/pecl/geoip/trunk': Could not read status line: Connection reset by peer (http://svn.php.net)
16546-inc/geoip.inc: line 13: cd: geoip: No such file or directory
16547-Cannot find config.m4.
16548-Make sure that you run '/usr/local/bin/phpize' in the top level source directory of the module
16549-
16550-inc/geoip.inc: line 18: ./configure: No such file or directory
16551-make: *** No targets specified and no makefile found.  Stop.
16552-make: *** No rule to make target `install'.  Stop.

geoip PHP extension install function is lines 1-27 of inc/geoip.inc for 123.09beta01. So trying manually install to confirm if it was temp connectivity issue or not

Code:

DIR_TMP=/svr-setup
CONFIGSCANDIR='/etc/centminmod/php.d'
cd $DIR_TMP
svn checkout http://svn.php.net/repository/pecl/geoip/trunk geoip
cd geoip
/usr/local/bin/phpize
./configure --with-php-config=/usr/local/bin/php-config
make
make install

echo "extension=geoip.so" > ${CONFIGSCANDIR}/geoip.ini
echo "geoip.custom_directory=/usr/share/GeoIP" >> ${CONFIGSCANDIR}/geoip.ini

looks like temp connectivity issue as it works for svn checkout

Code:

svn checkout http://svn.php.net/repository/pecl/geoip/trunk geoip
A    geoip/config.m4
A    geoip/geoip.c
A    geoip/ChangeLog
A    geoip/package.xml
A    geoip/README
A    geoip/config.w32
A    geoip/geoip.def
A    geoip/php_geoip.h
A    geoip/LICENSE
A    geoip/tests
A    geoip/tests/001.phpt
A    geoip/tests/010.phpt
A    geoip/tests/002.phpt
A    geoip/tests/011.phpt
A    geoip/tests/003.phpt
A    geoip/tests/004.phpt
A    geoip/tests/013.phpt
A    geoip/tests/005.phpt
A    geoip/tests/014.phpt
A    geoip/tests/006.phpt
A    geoip/tests/015.phpt
A    geoip/tests/007.phpt
A    geoip/tests/016.phpt
A    geoip/tests/008.phpt
A    geoip/tests/017.phpt
A    geoip/tests/009.phpt
A    geoip/tests/018.phpt
U   geoip
Checked out revision 337756.

Code:

 php --ri geoip

geoip

geoip support => enabled
geoip extension version => 1.1.1-dev
geoip library version => 1005000

Directive => Local Value => Master Value
geoip.custom_directory => /usr/share/GeoIP => /usr/share/GeoIP

 

Updated both Centmin Mod 123.08stable and 123.09beta01 builds with a fix for missing mcrypt PHP extension for CentOS 6.7 servers. Like the bug at CentOS 7.x - How to help test .08 CentOS 7 Betas with Github code ? | Page 10 | Centmin Mod Community I missed the CentOS version increment for CentOS 6.7 version number. To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

Then you need to run centmin.sh menu option 5 to recompile your PHP versions 5.4.45, 5.5.29 or 5.6.13 for mcrypt PHP extension support.

 

Remove ports 111 & 2049 from CSF Firewall whitelist by default

Updated both Centmin Mod 123.08stable and 123.09beta01 builds and removed RPC/portmapper and NFS ports 111 and 2049 from CSF Firewall whitelist by default so that folks who only need it can open it up to specific server IP addresses see advance CSF Firewall rules at CSF - CSF Firewall info | Centmin Mod Community To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

Examples for allowing 111, 2049 TCP/UDP ports for only source/destination IP = 11.22.33.44 to be added to /etc/csf/csf.allow restart of CSF service is required

Code:

tcp|in|d=111|s=11.22.33.44
tcp|in|d=2049|s=11.22.33.44
tcp|out|d=111|d=11.22.33.44
tcp|out|d=2049|d=11.22.33.44
udp|in|d=111|s=11.22.33.44
udp|in|d=2049|s=11.22.33.44
udp|out|d=111|d=11.22.33.44
udp|out|d=2049|d=11.22.33.44

The automated removal will only remove ports 111, 2049 from TCP/UDP whitelist if detected NFS package not installed otherwise it will leave it in place if NFS yum packages are detected as that would suggest the likely hood that NFS share is in use or will be.

On updated Centmin Mod 123.08stable and 123.09beta01 and higher, just running centmin.sh again will auto remove the ports then you either manually restart CSF Firewall or wait for next CSF Firewall daily auto update to trigger the restart

 

MariaDB 10.0 to MariaDB 10.1 Upgrade Routine

MariaDB 10.0 is currently the default. However, MariaDB 10.1 branch has now reached Release Candidate stage in MariaDB 10.1.7, so added to Centmin Mod 123.09beta01 the centmin.sh menu option 11, submenu option 5 for MariaDB 10.0.x to MariaDB 10.1.x upgrades. Again I can not stress importance of MySQL database backup via mysqldump for all MySQL databases on server, before trying the upgrade. Do this on test server and not live production servers !

September 10, 2015 commits Commits · centminmod/centminmod · GitHub

Code:

--------------------------------------------------------
        MariaDB MySQL Upgrade Sub-Menu           
--------------------------------------------------------
1). MariaDB 5.2.x Branch Upgrade Only
2). MariaDB 5.2.x to MariaDB 5.5 YUM upgrade
3). MariaDB 5.5 to MariaDB 10.x YUM upgrade
4). MariaDB 5.5 to MariaDB 10.1.x YUM upgrade
5). MariaDB 10.x to MariaDB 10.1.x YUM upgrade
6). Back to Main menu
--------------------------------------------------------
Enter option [ 1 - 6 ] 5
--------------------------------------------------------

Code:

--------------------------------------------------------------------------------
This script's MariaDB 10.1.x upgrade process is still in beta testing stages.
So please test on a test server and not a live production server. But if you use
on live server or if MySQL databases already exist, please back them up before
running this upgrade script via mysqldump - instructions at:
http://dev.mysql.com/doc/refman/5.6/en/mysqldump.html.

###############################################################
###        IMPORTANT MYSQLDUMP BACKUP BEFORE UPGRADE        ###
###      OR RISK DATA LOSS DUE TO MARIADB 10.1 Changes      ###
###############################################################

For each DATABASENAME backup via mysqldump i.e.

  mysqldump --opt --routines DATABASENAME > /path/to/DATABASENAME_backup.sql
--------------------------------------------------------------------------------

Have you backed up your databases ? [y/n] y

MariaDB 10.1.x no longer works with mydumper
MySQL backup tool. But still works with MariaDB 5.2.x
Do you want to continue with upgrade to MariaDB 10.1.x ? [y/n] y

 

default-storage-engine = InnoDB

Updated both Centmin Mod 123.08stable and 123.09beta01 builds to switch MariaDB MySQL my.cnf templates from default-storage-engine MyISAM to InnoDB out of the box seeing as MariaDB 10.0.x is now default and does require InnoDB to be enabled unlike MariaDB 5.5.

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Disabled ATrpms YUM repo

Updated both Centmin Mod 123.08stable and 123.09beta01 builds and for now have disabled ATrpms from initial install disable ATrpms YUM repo · centminmod/centminmod@bb39e84 · GitHub as it seems atrpms.net site is down right now Unable to install FFMPEG PHP extension | Page 3 | Centmin Mod Community

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Updated curl one liner installs

One liner install commands have been updated and also use the https version of centminmod.com site from now on

Centmin Mod 123.08stable

Code:

curl -O https://centminmod.com/installer.sh && chmod 0700 installer.sh && bash installer.sh

Centmin Mod 123.09betas default to PHP 5.5.29

Code:

curl -O https://centminmod.com/betainstaller.sh && chmod 0700 betainstaller.sh && bash betainstaller.sh

Added additional curl one liner 123.09beta01 unattended installs methods which default to PHP 5.6.13.

Code:

curl -O https://centminmod.com/betainstaller56.sh && chmod 0700 betainstaller56.sh && bash betainstaller56.sh

 

postfix opportunistic TLS encryption for outgoing server mail

Updated both Centmin Mod 123.08stable and 123.09beta01 builds and enable by default on initial installs postfix opportunistic TLS encryption for outgoing server emails as per Postfix TLS Support

For existing users they can implement this via SSH command line using the following commands where first command checks current default postfix values which usually is empty and the last command checks the customised postfix config settings after

Code:

postconf -d smtp_tls_CAfile smtp_tls_security_level smtp_tls_loglevel smtp_tls_session_cache_database
postconf -e 'smtp_tls_CAfile=/etc/pki/tls/certs/ca-bundle.crt'
postconf -e 'smtp_tls_security_level = may'
postconf -e 'smtp_tls_loglevel = 1'
postconf -e 'smtp_tls_session_cache_database = btree:/var/lib/postfix/smtp_scache'
service postfix restart
postconf -n smtp_tls_CAfile smtp_tls_security_level smtp_tls_loglevel smtp_tls_session_cache_database

So last command to check if postfix settings are set shows the following

Code:

postconf -n smtp_tls_CAfile smtp_tls_security_level smtp_tls_loglevel smtp_tls_session_cache_database
smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
smtp_tls_security_level = may
smtp_tls_loglevel = 1
smtp_tls_session_cache_database = btree:/var/lib/postfix/smtp_scache

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

next time do as suggested and run command below for specific error messages

Code:

journalctl -xn

tried restart php-fpm service too ?

I have the postfix changes applied on this forums without problem.

 

ah that could explain it

 

Add NGINX_DEBUG variable support to centmin.sh

Updated both Centmin Mod 123.08stable and 123.09beta01 builds and added a new variable NGINX_DEBUG=n default, setting to NGINX_DEBUG=y and recompiling Nginx via centmin.sh menu option 4 and then setting error_log in nginx vhosts to debug will enabling Nginx debug mode outlined at nginx.org/en/docs/debugging_log.html & wiki.nginx.org/Debugging

You do not want to leave Nginx debug mode running forever, so after debugging, set NGINX_DEBUG=n in centmin.sh and recompile Nginx again via centmin.sh menu option 4 and remove error_log debugging mode to disable Nginx debug mode again.

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Update centmin.sh menu option 22

Updated both Centmin Mod 123.08stable and 123.09beta01 build's inc/wpsetup.inc file for the auto updater script
script setup. On centmin.sh menu option 22 wordpress auto install creates an cronjob script at /root/tools/wp_updater_${vhostname}.sh where vhostname = your site domain name. This script auto updates wordpress via wp-cli cmd tool. However, it's own wp-cli cli update command doesn't work as root user.

This command doesn't work as root user

Code:

/usr/bin/wp cli update --allow-root

so changing and replacing that line in /root/tools/wp_updater_${vhostname}.sh with following manual update lines

Code:

echo "update wp-cli"
rm -rf /usr/bin/wp
wget -cnv --no-check-certificate https://raw.github.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/bin/wp --tries=3
chmod 0700 /usr/bin/wp

For example, if you ran centmin.sh menu option 22 to setup a new wordpress site on domain newdomain.com, you would of created automatically a cronjob auto wordpress updater script at /root/tools/wp_updater_newdomain.com.sh

contents prior to above changes would be

Code:

#!/bin/bash
PATH=/usr/lib64/ccache:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin:/root/bin
EMAIL=your@emailaddress

{
cd /home/nginx/domains/newdomain.com/public
echo "/home/nginx/domains/newdomain.com/public"
/usr/bin/wp cli update --allow-root
/usr/bin/wp plugin status --allow-root
/usr/bin/wp plugin update --all --allow-root
} 2>&1 | mail -s "Wordpress WP-CLI Auto Update $(date)" $EMAIL

the above changes will now auto create the wordpress auto updater script contents as

Code:

#!/bin/bash
PATH=/usr/lib64/ccache:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin:/root/bin
EMAIL=your@emailaddress

{
cd /home/nginx/domains/newdomain.com/public
echo "/home/nginx/domains/newdomain.com/public"
#/usr/bin/wp cli update --allow-root
echo "update wp-cli"
rm -rf /usr/bin/wp
wget -cnv --no-check-certificate https://raw.github.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/bin/wp --tries=3
chmod 0700 /usr/bin/wp
/usr/bin/wp plugin status --allow-root
/usr/bin/wp plugin update --all --allow-root
#/usr/bin/wp core check-update --allow-root
#/usr/bin/wp core update --allow-root
#/usr/bin/wp core update-db --allow-root
} 2>&1 | mail -s "Wordpress WP-CLI Auto Update $(date)" $EMAIL

edit: added 3 more lines commented out

Right now only wordpress plugins auto update only. These lines auto update wordpress core and database if uncommented.

Code:

#/usr/bin/wp core check-update --allow-root
#/usr/bin/wp core update --allow-root
#/usr/bin/wp core update-db --allow-root

For existing users who created their wordpress site via centmin.sh menu option 22, you will need to manually edit each /root/tools/wp_updater_yourdomain.com.sh auto wordpress updating scripts with the new lines - github commit at update inc/wpsetup.inc auto updater script · centminmod/centminmod@5539013 · GitHub might make it clearer which lines were added.

For future centmin.sh 22 runs, you will want to update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread