Upgrade PHP-FPM Beta Branch Centmin Mod .09 beta branch Testing

wow that's fast ? specs ?

---

 

nice that is a beast of a server E5-1650v3

 

ouch raid 0

 

OpenSSL 1.1.0 Pre/Beta Patch Support for Nginx

Updated Centmin Mod 123.09beta01 branch, to add Nginx 1.11 patch to support early OpenSSL 1.1.0-pre6 testing. Details at OpenSSL - OpenSSL 1.1.0 is about to released | Centmin Mod Community

 

hmm testing 123.09beta01 latest fresh install seems to have developed an error for nginx compile routine will investigate 123.09beta01 install 11/08/16 ngixn error · GitHub

Code (Text):

make[1]: Entering directory `/svr-setup/nginx-1.11.3'
/usr/bin/clang -ferror-limit=0 -c -pipe  -O -Wall -Wextra -Wpointer-arith -Wconditional-uninitialized -Wno-unused-parameter -Werror -g -m64 -mtune=native -mfpmath=sse -g -O3 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wno-sign-compare -Wno-string-plus-int -Wno-deprecated-declarations -Wno-unused-parameter -Wno-unused-const-variable -Wno-conditional-uninitialized -Wno-mismatched-tags -Wno-c++11-extensions -Wno-sometimes-uninitialized -Wno-parentheses-equality -Wno-tautological-compare -Wno-self-assign -Wno-deprecated-register -Wno-deprecated -Wno-invalid-source-encoding -Wno-pointer-sign -Wno-parentheses -Wno-enum-conversion -Wno-c++11-compat-deprecated-writable-strings -Wno-write-strings -DNDK_SET_VAR -DNDK_UPSTREAM_LIST -I src/core -I src/event -I src/event/modules -I src/os/unix -I ../ngx_devel_kit-0.3.0/objs -I objs/addon/ndk -I ../pcre-8.39 -I ../libressl-2.4.2/.openssl/include -I objs \
        -o objs/src/core/nginx.o \
        src/core/nginx.c
src/core/nginx.c:431:49: error: expected ')'
        ngx_write_stderr("configure arguments:" NGX_CONFIGURE NGX_LINEFEED);
                                                ^
objs/ngx_auto_config.h:1:893: note: expanded from macro 'NGX_CONFIGURE'
#define NGX_CONFIGURE " --with-ld-opt='-lrt -ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-m64 -mtune=native -mfpmath=sse -g -O3 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wno-sign-compare -Wno-string-plus-int -Wno-deprecated-declarations -Wno-unused-parameter -Wno-unused-const-variable -Wno-conditional-uninitialized -Wno-mismatched-tags -Wno-c++11-extensions -Wno-sometimes-uninitialized -Wno-parentheses-equality -Wno-tautological-compare -Wno-self-assign -Wno-deprecated-register -Wno-deprecated -Wno-invalid-source-encoding -Wno-pointer-sign -Wno-parentheses -Wno-enum-conversion -Wno-c++11-compat-deprecated-writable-strings -Wno-write-strings' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_stub_status_module --with-http_secure_link_module --with-openssl-opt="enable-tlsext" --add-module=../nginx-module-vts --with-libatomic --with-threads --with-stream=dynamic --with-stream_ssl_module --with-http_gzip_static_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.0 --add-module=../ngx_cache_purge-2.3 --add-module=../ngx_devel_kit-0.3.0 --add-module=../set-misc-nginx-module-0.30 --add-module=../echo-nginx-module-0.59 --add-module=../redis2-nginx-module-0.13 --add-module=../ngx_http_redis-0.3.7 --add-module=../memc-nginx-module-0.17 --add-module=../srcache-nginx-module-0.31 --add-module=../headers-more-nginx-module-0.30 --with-pcre=../pcre-8.39 --with-pcre-jit --with-http_ssl_module --with-http_v2_module --with-openssl=../libressl-2.4.2"
                                                                                                                                                                                    src/core/nginx.c:431:25: note: to match this '('
        ngx_write_stderr("configure arguments:" NGX_CONFIGURE NGX_LINEFEED);
                        ^
1 error generated.

edit should be fixed Beta Branch - fix nginx compile on 123.09beta01 | Centmin Mod Community was related to last update i made at Beta Branch - fix to OpenSSL 1.1.0-pre6 and ngx_pagespeed compatibility 123.09beta01 | Centmin Mod Community

 

TCP Flaw CVE-2016-5696 Workaround

Updated both Centmin Mod 123.08stable and 123.09beta01 builds with workaround fixes for TCP Flaw CVE-2016-5696 outlined here. After updating your Centmin Mod installs via below instructions, run centmin.sh once and the workaround will be applied automatically. You can verify the workaround fix is in place via command

Code (Text):

sysctl -a | grep ack_limit                                                                

Which should return output of

Code (Text):

sysctl -a | grep ack_limit                                                                
net.ipv4.tcp_challenge_ack_limit = 999999999

Note, OpenVZ VPS systems are unable to adjust TCP values at server level, so need your web host to do it for you.

If for whatever reason the auto fix doesn't apply, you can do it manually via these 2 commands

For CentOS 6

Code (Text):

echo "net.ipv4.tcp_challenge_ack_limit = 999999999" >> /etc/sysctl.conf; sysctl -p;
sysctl -a | grep ack_limit

For CentOS 7

Code (Text):

echo "net.ipv4.tcp_challenge_ack_limit = 999999999" >> /etc/sysctl.d/101-sysctl.conf; sysctl -p;
sysctl -a | grep ack_limit

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread
• Example of centmin.sh menu option 23 git updating code.
• How to upgrade Centmin Mod + backing up customisations

 

Did a fresh 123.09beta01 curl one line test on a 2 cpu 512MB KVM VPS server with E3-1230v2 processor

On CentOS 6.8 64bit

Code (Text):

---------------------------------------------------------------------------
Total Curl Installer YUM Time: 118.2420 seconds
Total YUM Time: 54.310018173 seconds
Total YUM + Source Download Time: 87.7969
Total Nginx First Time Install Time: 159.9506
Total PHP First Time Install Time: 313.3301
Download Zip From Github Time: 45.9969
Total Time Other eg. source compiles: 238.9757
Total Centmin Mod Install Time: 800.0534
---------------------------------------------------------------------------
Total Install Time (curl yum + cm install + zip download): 964.2923 seconds
---------------------------------------------------------------------------

Code (Text):

--------------------------------------------------------
Check ccache Version:
--------------------------------------------------------
ccache version 3.2.5

Copyright (C) 2002-2007 Andrew Tridgell
Copyright (C) 2009-2016 Joel Rosdahl

This program is free software; you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by the Free Software
Foundation; either version 3 of the License, or (at your option) any later
version.

--------------------------------------------------------
Check Nginx Version:
--------------------------------------------------------
nginx version: nginx/1.11.3
built by clang 3.4.2 (tags/RELEASE_34/dot2-final)
built with LibreSSL 2.4.2
TLS SNI support enabled
configure arguments: --with-ld-opt='-lrt -ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-m64 -mtune=native -mfpmath=sse -g -O3 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wno-sign-compare -Wno-string-plus-int -Wno-deprecated-declarations -Wno-unused-parameter -Wno-unused-const-variable -Wno-conditional-uninitialized -Wno-mismatched-tags -Wno-c++11-extensions -Wno-sometimes-uninitialized -Wno-parentheses-equality -Wno-tautological-compare -Wno-self-assign -Wno-deprecated-register -Wno-deprecated -Wno-invalid-source-encoding -Wno-pointer-sign -Wno-parentheses -Wno-enum-conversion -Wno-c++11-compat-deprecated-writable-strings -Wno-write-strings' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_stub_status_module --with-http_secure_link_module --add-module=../nginx-module-vts --with-libatomic --with-threads --with-stream=dynamic --with-stream_ssl_module --with-http_gzip_static_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.0 --add-module=../ngx_cache_purge-2.3 --add-module=../ngx_devel_kit-0.3.0 --add-module=../set-misc-nginx-module-0.30 --add-module=../echo-nginx-module-0.59 --add-module=../redis2-nginx-module-0.13 --add-module=../ngx_http_redis-0.3.7 --add-module=../memc-nginx-module-0.17 --add-module=../srcache-nginx-module-0.31 --add-module=../headers-more-nginx-module-0.30 --with-pcre=../pcre-8.39 --with-pcre-jit --with-http_ssl_module --with-http_v2_module --with-openssl=../libressl-2.4.2

--------------------------------------------------------
Check PHP-FPM Version:
--------------------------------------------------------
PHP 5.6.24 (cli) (built: Aug 12 2016 22:13:38)
Copyright (c) 1997-2016 The PHP Group
Zend Engine v2.6.0, Copyright (c) 1998-2016 Zend Technologies
    with Zend OPcache v7.0.6-dev, Copyright (c) 1999-2016, by Zend Technologies

--------------------------------------------------------
Check MariaDB installed RPM Versions:
--------------------------------------------------------
MariaDB-compat-10.1.16-1.el6.x86_64
MariaDB-shared-10.1.16-1.el6.x86_64
MariaDB-common-10.1.16-1.el6.x86_64
MariaDB-server-10.1.16-1.el6.x86_64
MariaDB-client-10.1.16-1.el6.x86_64
MariaDB-devel-10.1.16-1.el6.x86_64

--------------------------------------------------------
Check Memcached Server Version:
--------------------------------------------------------
memcached 1.4.29

--------------------------------------------------------
Check CSF Firewall Version:
--------------------------------------------------------
csf: v9.11 (generic)

--------------------------------------------------------
Check Siege Benchmark Version:
--------------------------------------------------------
SIEGE 4.0.2

Copyright (C) 2016 by Jeffrey Fulmer, et al.
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS
FOR A PARTICULAR PURPOSE.


--------------------------------------------------------
Check mysqlreport version:
--------------------------------------------------------
mysqlreport v3.5-maria11 Jul 4 2013

--------------------------------------------------------
Check pure-ftpd Version:
--------------------------------------------------------
pure-ftpd v1.0.30

--------------------------------------------------------
Check YUM Repo List
--------------------------------------------------------
Loaded plugins: fastestmirror, priorities, security
Loading mirror speeds from cached hostfile
* base: mirror.5ninesolutions.com
* epel: reflector.westga.edu
* extras: mirror.5ninesolutions.com
* rpmforge: mirror.teklinks.com
* updates: mirror.5ninesolutions.com
1571 packages excluded due to repository priority protections
repo id        repo name                                             status
base           CentOS-6 - Base                                       5,093+1,603
epel           Extra Packages for Enterprise Linux 6 - x86_64        9,188+2,993
extras         CentOS-6 - Extras                                              62
mariadb        MariaDB                                                      13+4
rpmforge       RHEL 6 - RPMforge.net - dag                           3,227+1,491
slc6-scl       Scientific Linux CERN (SLC6) - SCL addons               2,233+239
updates        CentOS-6 - Updates                                         240+80
repolist: 20,056

--------------------------------------------------------
mytimes check:
/usr/bin/mytimes
--------------------------------------------------------
Fri Aug 12 22:16:50 UTC 2016    [UTC]
Sat Aug 13 08:16:50 AEST 2016   [Australia/Brisbane]
Fri Aug 12 15:16:50 PDT 2016    [America/Los_Angeles]
Fri Aug 12 17:16:50 CDT 2016    [America/Chicago]
Fri Aug 12 18:16:50 EDT 2016    [America/New_York]
Fri Aug 12 23:16:50 BST 2016    [Europe/London]
--------------------------------------------------------

 

FYI, if all goes to plan within next 48-72hrs, addons/acmetool.sh will land into updated 123.09beta01 for public beta testing Letsencrypt SSL certificate integration into Centmin Mod. Read how to prepare your testing servers at Letsencrypt - Official acmetool.sh testing thread for Centmin Mod 123.09beta01 | Centmin Mod Community

 

I've started adding some notices into centmin mod 123.09beta01 functions to point to centminmod.com site and forum documentation i.e. Beta Branch - update inc/nginx_addvhost.inc add notice in 123.09beta01 | Centmin Mod Community This is to tailor to those centmin mod users who DO NOT frequent the site or forums so do not get the full picture/information regarding some features.

Folks if you have some suggestions based on your own experiences using centmin mod, where would you love to see some more info/notices inline in centmin.sh routines to better explain the menu option or routine you are about to run ?

Guess you can think of these notices as inline help

 

yeah well addons/acemtool.sh testing should be done on test server not live

 

the old branch le versions was scrapped and addons/acmetool.sh is rewritten from scratch see https://centminmod.com/acmetool

 

ok will think about it

 

addons/acmetool.sh officially landed into 123.09beta01 for public beta testing Letsencrypt - Official acmetool.sh testing thread for Centmin Mod 123.09beta01 | Centmin Mod Community

 

updated 123.09beta01 centmin.sh menu option 22 wordpress auto installer routine for more wordpress ecommerce plugin cache exclusions Beta Branch - update inc/wpsetup.inc for easydigitaldownload wordpress plugin suppo… | Centmin Mod Community

 

update nginx compile switch -fstack-protector to -fstack-protector-strong if system supported in 123.09beta01 Beta Branch - update nginx compile switch -fstack-protector to -fstack-protector-st… | Centmin Mod Community