Upgrade PHP-FPM Beta Branch Centmin Mod .09 beta branch Testing

Interesting bug I sometimes get in 123.09beta01 initial installs as well as nginx upgrades involving LIBRESSL_SWITCH='n' to use openssl for Nginx. Seems openssl download domain reports invalid hostname on some servers despite the curl check working = HTTP/1.1 200 OK report !

Code (Text):

HTTP/1.1 200 OK
Download openssl-1.0.2k.tar.gz ...
2017-02-15 06:30:29 URL:https://www.openssl.org/source/openssl-1.0.2k.tar.gz [5309236/5309236] -> "openssl-1.0.2k.tar.gz" [1]
http://: Invalid host name.
FINISHED --2017-02-15 06:30:29--
Total wall clock time: 0.3s
Downloaded: 1 files, 5.1M in 0.3s (17.3 MB/s)
Error: openssl-1.0.2k.tar.gz download failed.
check Centmin Mod log for details at /root/centminlogs/
Aborting script...

Weird indeed only happens on some VPSes. Any other folks run into this ?

Seems download url uses Akamai backed DNS

Code (Text):

dig $(echo "${OPENSSL_LINK}" | awk -F "/" '{print $3}')      

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.47.rc1.el6_8.4 <<>> www.openssl.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35458
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.openssl.org.               IN      A

;; ANSWER SECTION:
www.openssl.org.        170     IN      CNAME   www-ds.openssl.org.edgekey.net.
www-ds.openssl.org.edgekey.net. 18844 IN CNAME  e3102.dscx.akamaiedge.net.
e3102.dscx.akamaiedge.net. 19   IN      A       23.78.224.101

;; Query time: 20 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Wed Feb 15 09:06:01 2017
;; MSG SIZE  rcvd: 129

---

Made some updates to 123.09beta01 to only attempt to download openssl tarball when LIBRESSL_SWITCH='n' is set. Default is for LIBRESSL_SWITCH='y' to use LibreSSL with Nginx.

 

Update for revised swap space detection and configuration routine in 123.09beta01 https://community.centminmod.com/th...for-non-openvz-systems-in-123-09beta01.10476/

I fixed previous posts, OpenSSL download routine https://community.centminmod.com/th...invalid-hostname-error-in-123-09beta01.10472/

 

Add devtoolset-6 GCC 6.2 support via optional DEVTOOLSETSIX='y' variable you can enable as alternative to devtoolset-4 GCC 5.3 for Nginx and PHP compiles community.centminmod.com/posts/45232/

 

Update tools/backup-perm.sh

Created dedicated thread for discussing this at https://community.centminmod.com/th...kup-restore-file-directory-permissions.10633/

From getting started guide step 2

When you upload via root user in sftp etc, you upload files as root user/group permissions so need to change them to nginx user/group. You can do that manually as per getting started guide step 2 or via cronjob run for tools/backup-perm.sh script. Just updated 123.09beta01's tools/backup-perm.sh script to also ensure nginx user/group permissions are set so you can copy the /usr/local/src/centminmod/tools/backup-perm.sh script to /home/nginx/domains/domain.com/tools/backup-perm.sh

copy archive flag to preserve permssions where domain.com is your domain name

Code (Text):

mkdir -p /home/nginx/domains/domain.com/tools
cp -a /usr/local/src/centminmod/tools/backup-perm.sh /home/nginx/domains/domain.com/tools/backup-perm.sh

then as per script instructions setup cronjob

the instructions

Code (Text):

################################################################
# 1, for centminmod.com LEMP stacks to be placed in
# /home/nginx/domains/domain.com/tools/backup-perm.sh
#
# 2. setup cronjob to run every 6 hours at 11th minute
# 11 */6 * * * /home/nginx/domains/domain.com/tools/backup-perm.sh backup 2>&1 /dev/null
#

set cronjob change domain.com to your domain name

Code (Text):

11 */6 * * * /home/nginx/domains/domain.com/tools/backup-perm.sh backup 2>&1 /dev/null

example manual run

Code (Text):

/home/nginx/domains/newdomain.com/tools/backup-perm.sh backup

-------------------------------------------------------
 backup directory & file permissions for:
 /home/nginx/domains/newdomain.com
-------------------------------------------------------
-rw-r--r-- 1 root nginx 3.8K Feb 26 04:11 /home/nginx/domains/newdomain.com/backup/permissions/permissions-260217-041103.acl
-------------------------------------------------------

ensure directory and files have correct nginx user:group permission
/usr/bin/chown -R nginx:nginx /home/nginx/domains/newdomain.com

total 0
drwxr-s--- 7 nginx nginx  73 Feb 26 03:57 .
drwxr-s--- 4 nginx nginx  49 Feb 26 03:57 ..
drwxr-s--- 3 nginx nginx  25 Feb 26 03:58 backup
drwxr-s--- 2 nginx nginx  41 Feb 26 03:57 log
drwxr-s--- 2 nginx nginx   6 Feb 26 03:57 private
drwxr-s--- 2 nginx nginx 191 Feb 26 04:00 public
drwxr-sr-x 2 nginx nginx  28 Feb 26 03:58 tools

Permissions backed up to /home/nginx/domains/newdomain.com/backup/permissions/permissions-260217-041103.acl

Example excerpt from contents of /home/nginx/domains/newdomain.com/backup/permissions/permissions-260217-041103.acl

Code (Text):

cat /home/nginx/domains/newdomain.com/backup/permissions/permissions-260217-041103.acl
# file: /home/nginx/domains/newdomain.com
# owner: nginx
# group: nginx
# flags: -s-
user::rwx
group::r-x
other::---

# file: /home/nginx/domains/newdomain.com/public
# owner: nginx
# group: nginx
# flags: -s-
user::rwx
group::r-x
other::---

# file: /home/nginx/domains/newdomain.com/public/index.html
# owner: nginx
# group: nginx
user::rw-
group::r--
other::---

Created dedicated thread for discussing this at https://community.centminmod.com/th...kup-restore-file-directory-permissions.10633/

 

betainstaller-latest.sh is as the name suggests it uses latest advances and enables what is usually disabled stuff from normal betainstaller.sh like switching to OpenSSL via LIBRESSL_SWITCH='n' via persistent config file so normal

 

Reminder that Centmin Mod beta users can play with Brotli compression too https://community.centminmod.com/th...sion-for-centmin-mod-nginx-web-servers.10688/

 

strange there shouldn't even be a line 3 in that file /usr/bin/centmin

Code (Text):

#!/bin/bash
pushd "/usr/local/src/centminmod"; bash centmin.sh

 

weird one !

When was last time you updated centmin mod code via centmin.sh menu option 23 ? some things have changed with more checks at centmin.sh menu launch and depending on your network connectivity speed could be slower.

You can run centmin.sh in verbose debug mode and see where the slowness is

Code (Text):

cd /usr/local/src/centminmod
bash -x centmin.sh

then hit 24 to exit menu

copy and paste output to gist.github.com or pastebin.com for investigating. You maybe able to visually see where it hangs up

 

Ah guess i need to revisit 123.08stable to 123.09beta01 upgrade routines

But yes, that means alot of initial centmin.sh triggered checks would happen to bring 123.08stable environment up to 123.09beta01 levels.

 

strange that would only happen if you set NGINX_OPENRESTY='n' in persistent config /etc/centminmod/custom_config.inc as that controls whether nginx set-misc-nginx-module is installed and it's required for redis cache at nginx level GitHub - openresty/set-misc-nginx-module

 

To troubleshoot initial installation, you need to check the initial install log at /root/centminlogs and instructions under Sharing logs and errors heading for using Pastebin.com or Gists to share a sanitised version of the contents of the initial install log. You can see full details at How to troubleshoot Centmin Mod initial install issues

Example list /root/centminlogs files in date ascending order and grep for install.log

Code (Text):

ls -lahrt /root/centminlogs | grep install.log

example output returns install log at /root/centminlogs/centminmod_1.2.3-eva2000.09.001_111016-112321_install.log

Code (Text):

ls -lahrt /root/centminlogs | grep install.log
-rw-r--r--  1 root root 2.2M Oct 11 01:40 centminmod_1.2.3-eva2000.09.001_111016-112321_install.log

in SSH use cat to ouput contents of /root/centminlogs/centminmod_1.2.3-eva2000.09.001_111016-112321_install.log. Clear your SSH client window/buffer so only output is the contents of the file

Code (Text):

cat /root/centminlogs/centminmod_1.2.3-eva2000.09.001_111016-112321_install.log

Then copy and paste into Pastebin.com or Gists entry. If your SSH window scroll buffer isn't that large to get the whole contents of the install log, you can download file manually and copy and paste contents. But makes sure it's sanitised version of the contents of the initial install log as outlined at How to troubleshoot Centmin Mod initial install issues

 

post output for

Code (Text):

nginx -V

to see if required Openresty nginx modules like set-misc are compiled

edit: just tested centmin.sh menu option 22 for wordpress auto install with redis caching at nginx level option 2 and works fine

bold highlight are some of Openresty nginx modules required for redis caching at nginx level when OPENRESTY_NGINX='y' is set (the default is enabled)

 

yup @Epic Internet Marketing you are missing all the highlighted Nginx modules from OPENRESTY_NGINX='y' setting in your output - check /etc/centminmod/custom_config.inc to see if you have set OPENRESTY_NGINX='n'. If you have remove the variable and then start centmin.sh to recompile nginx via centmin.sh menu option 4.