Upgrade PHP-FPM Beta Branch Centmin Mod .09 beta branch Testing

eva2000 · Oct 10, 2017

Updated 123.09beta01 with function to auto tune client_max_body_size value Beta Branch - update in/cpcheck total revision of nginxlarge_fix function and control auto tuning Beta Branch - update nginxlargefile_fix + add AUTOTUNE_CLIENTMAXBODY='y' variable

eva2000 · Nov 5, 2017

Centmin Mod 123.09beta01 updated with GCC 7.2.1 & Clang 4.0.1 support for CentOS 7.x systems https://community.centminmod.com/posts/56087/

eva2000 · Nov 23, 2017

add /usr/bin/cmupdate command in 123.09beta01

- typing command in SSH: cmupdate
- equivalent to running centmin.sh menu option 23 submenu option 2

https://community.centminmod.com/threads/add-usr-bin-cmupdate-command-in-123-09beta01.13327/

eva2000 · Dec 16, 2017

Just a heads up for a possibly big change update for 123.09beta01 which involves next nginx upgrades requiring alot of non-nginx service restarts i.e. php-fpm, mariadb mysql, postfix, etc will be auto restarted possibly on next nginx upgrade due to changes in the way Centmin Mod 123.09beta01 installs Nginx's custom zlib or cloudflare's zlib performance fork. I haven't committed the actual change yet in 123.09beta01, but provided it as a early patch if folks want to test it out first at Beta Branch - add optional Cloudflare zlib performance fork support in 123.09beta01

pamamolf · Dec 16, 2017

If it is not much better it may be better to avoid all that trouble

which involves next nginx upgrades requiring a lot of non-nginx service restarts
Click to expand...

Do you mean that every time that we need to recompile/update Nginx all of them must restart?

Hope NO please..... An option to avoid that using custom config ?

eva2000 · Dec 16, 2017

pamamolf said: ↑

Do you mean that every time that we need to recompile/update Nginx all of them must restart?
Click to expand...

just one time only not everytime to switch services to system zlib because current method may break future systems on next zlib version update causing premature SSH logouts before you can update nginx or php-fpm. That's why the change is needed to prevent this possible future bug.

pamamolf · Dec 16, 2017

Can we get an option for custom config to enable or disable this?

eva2000 · Dec 16, 2017

pamamolf said: ↑

Can we get an option for custom config to enable or disable this?
Click to expand...

not this once off service restart update, because if you do not do this update, you will never be able to properly update nginx anymore when a new zlib version update happens as SSH session will exit half way through your nginx update everytime

if the concern is service restarts, just pick an offpeak low traffic time to do the nginx update via centmin.sh menu option 4 when i commit the update to 123.09beta01 which will probably be within next 24-48hrs

pamamolf · Dec 16, 2017

That’s not a problem to do the restarts once ....

What I am thinking is if that fork one day has issues and not work it will be hard to revert or troubleshoot ...?

Compared to official release of it..

If I understand correctly

eva2000 · Dec 16, 2017

you mean cloudflare zlib vs custom std zlib ? cloudflare zlib is optional and disabled by default CLOUDFLARE_ZLIB='n' and already controlled via CLOUDFLARE_ZLIB persistent config variable and only enabled with CLOUDFLARE_ZLIB='y'

pamamolf · Dec 16, 2017

Ok then

As the restarts is only once and not every time that we compile/upgrade Nginx then ok all good

eva2000 · Dec 17, 2017

Full details for Nginx zlib routine update at 123.09beta01 Updated Nginx zlib routine with optional Cloudflare zlib support

eva2000 · Jan 23, 2018

Yes nginx and php upgrade logs now get auto compressed Beta Branch - auto compress nginx & php upgrade logs older than 90 days

Also for 123.09beta01 users a must read if you want to squeeze out even more performance Insight Guide - How to boost Centmin Mod LEMP stack performance

eva2000 · Jan 23, 2018

Just documenting some issues that folks may have it they aren't doing regular Centmin Mod updates. On virtualbox CentOS 6 has some errors with nginx compiles and libressl errors not sure if both are related maybe to my old centos 6 virtualbox install only. Though maybe others might run into this if you haven't updated your centmin mod centos 6/7 boxes in ages.

libressl part fails so nginx subsequent compile failed
Code (Text):
clang: error: no such file or directory: 'aes/.libs/libcrypto_la-aes-elf-x86_64.o'
clang: error: no such file or directory: 'aes/.libs/libcrypto_la-bsaes-elf-x86_64.o'
clang: error: no such file or directory: 'aes/.libs/libcrypto_la-vpaes-elf-x86_64.o'
clang: error: no such file or directory: 'aes/.libs/libcrypto_la-aesni-elf-x86_64.o'
clang: error: no such file or directory: 'aes/.libs/libcrypto_la-aesni-sha1-elf-x86_64.o'
clang: error: no such file or directory: 'bn/.libs/libcrypto_la-modexp512-elf-x86_64.o'
clang: error: no such file or directory: 'bn/.libs/libcrypto_la-mont-elf-x86_64.o'
clang: error: no such file or directory: 'bn/.libs/libcrypto_la-mont5-elf-x86_64.o'
clang: error: no such file or directory: 'bn/.libs/libcrypto_la-gf2m-elf-x86_64.o'
clang: error: no such file or directory: 'camellia/.libs/libcrypto_la-cmll-elf-x86_64.o'
clang: error: no such file or directory: 'md5/.libs/libcrypto_la-md5-elf-x86_64.o'
clang: error: no such file or directory: 'modes/.libs/libcrypto_la-ghash-elf-x86_64.o'
clang: error: no such file or directory: 'rc4/.libs/libcrypto_la-rc4-elf-x86_64.o'
clang: error: no such file or directory: 'rc4/.libs/libcrypto_la-rc4-md5-elf-x86_64.o'
clang: error: no such file or directory: 'sha/.libs/libcrypto_la-sha1-elf-x86_64.o'
clang: error: no such file or directory: 'sha/.libs/libcrypto_la-sha256-elf-x86_64.o'
clang: error: no such file or directory: 'sha/.libs/libcrypto_la-sha512-elf-x86_64.o'
clang: error: no such file or directory: 'whrlpool/.libs/libcrypto_la-wp-elf-x86_64.o'
clang: error: no such file or directory: '.libs/libcrypto_la-cpuid-elf-x86_64.o'
make[2]: *** [libcrypto.la] Error 1
make[2]: Leaving directory `/svr-setup/libressl-2.6.4/crypto'
make[1]: *** [all] Error 2
make[1]: Leaving directory `/svr-setup/libressl-2.6.4/crypto'
make: *** [all-recursive] Error 1
Making install in crypto
make[1]: Entering directory `/svr-setup/libressl-2.6.4/crypto'
make  install-am
make[2]: Entering directory `/svr-setup/libressl-2.6.4/crypto'
  CCLD     libcrypto.la
clang: error: no such file or directory: 'aes/.libs/libcrypto_la-aes-elf-x86_64.o'
clang: error: no such file or directory: 'aes/.libs/libcrypto_la-bsaes-elf-x86_64.o'
clang: error: no such file or directory: 'aes/.libs/libcrypto_la-vpaes-elf-x86_64.o'
clang: error: no such file or directory: 'aes/.libs/libcrypto_la-aesni-elf-x86_64.o'
clang: error: no such file or directory: 'aes/.libs/libcrypto_la-aesni-sha1-elf-x86_64.o'
clang: error: no such file or directory: 'bn/.libs/libcrypto_la-modexp512-elf-x86_64.o'
clang: error: no such file or directory: 'bn/.libs/libcrypto_la-mont-elf-x86_64.o'
clang: error: no such file or directory: 'bn/.libs/libcrypto_la-mont5-elf-x86_64.o'
clang: error: no such file or directory: 'bn/.libs/libcrypto_la-gf2m-elf-x86_64.o'
clang: error: no such file or directory: 'camellia/.libs/libcrypto_la-cmll-elf-x86_64.o'
clang: error: no such file or directory: 'md5/.libs/libcrypto_la-md5-elf-x86_64.o'
clang: error: no such file or directory: 'modes/.libs/libcrypto_la-ghash-elf-x86_64.o'
clang: error: no such file or directory: 'rc4/.libs/libcrypto_la-rc4-elf-x86_64.o'
clang: error: no such file or directory: 'rc4/.libs/libcrypto_la-rc4-md5-elf-x86_64.o'
clang: error: no such file or directory: 'sha/.libs/libcrypto_la-sha1-elf-x86_64.o'
clang: error: no such file or directory: 'sha/.libs/libcrypto_la-sha256-elf-x86_64.o'
clang: error: no such file or directory: 'sha/.libs/libcrypto_la-sha512-elf-x86_64.o'
clang: error: no such file or directory: 'whrlpool/.libs/libcrypto_la-wp-elf-x86_64.o'
clang: error: no such file or directory: '.libs/libcrypto_la-cpuid-elf-x86_64.o'
make[2]: *** [libcrypto.la] Error 1
make[2]: Leaving directory `/svr-setup/libressl-2.6.4/crypto'
make[1]: *** [install] Error 2
make[1]: Leaving directory `/svr-setup/libressl-2.6.4/crypto'
make: *** [install-recursive] Error 1
ln: creating symbolic link `/etc/ssl/openssl.cnf': File exists
-rw-r--r-- 1 root root 46 Jan 23 09:24 /root/centminlogs/centminmod_libresslinstalltime_230118-091527.log
seems problem is with LibreSSL 2.6.4
Code (Text):
              / ___| ___   _ __ ___   _ __  (_)| |(_) _ __    __ _
             | |    / _ \ | '_ ` _ \ | '_ \ | || || || '_ \  / _` |
             | |___| (_) || | | | | || |_) || || || || | | || (_| |
              \____|\___/ |_| |_| |_|| .__/ |_||_||_||_| |_| \__, |
                                     |_|                     |___/
                 _      _  _                 ____  ____   _   
                | |    (_)| |__   _ __  ___ / ___|/ ___| | | 
                | |    | || '_ \ | '__|/ _ \\___ \\___ \ | | 
                | |___ | || |_) || |  |  __/ ___) |___) || |___
                |_____||_||_.__/ |_|   \___||____/|____/ |_____|
                                                             
Compiling LibreSSL...
make: *** No rule to make target `clean'.  Stop.
checking build system type... x86_64-pc-linux-gnu
checking host system type... x86_64-pc-linux-gnu
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking whether make supports nested variables... (cached) yes
checking for gcc... ccache /usr/bin/clang -ferror-limit=0
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables...
checking whether we are cross compiling... no
checking for suffix of object files... configure: error: in `/svr-setup/libressl-2.6.4':
configure: error: cannot compute suffix of object files: cannot compile
See `config.log' for more details
make: *** No targets specified and no makefile found.  Stop.
make: *** No rule to make target `install'.  Stop.
ln: creating symbolic link `/etc/ssl/openssl.cnf': File exists
-rw-r--r-- 1 root root 44 Jan 23 09:47 /root/centminlogs/centminmod_libresslinstalltime_230118-094653.log
from config.log at /svr-setup/libressl-2.6.4/config.log seems it's the old problem with old zlib work around and needing to recompile ccache as outlined at 123.09beta01 Updated Nginx zlib routine with optional Cloudflare zlib support. This is because my virtualbox centos 6 snapshot hasn't been updated in a while on my local laptop for testing !
Code (Text):
cat /svr-setup/libressl-2.6.4/config.log

configure:3731: ccache /usr/bin/clang -ferror-limit=0 -o conftest    conftest.c  >&5
configure:3735: $? = 0
configure:3742: ./conftest
configure:3746: $? = 0
configure:3761: result: no
configure:3766: checking for suffix of object files
configure:3788: ccache /usr/bin/clang -ferror-limit=0 -c   conftest.c >&5
./configure: line 3790: 18586 Segmentation fault      $CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext 1>&5
configure:3792: $? = 139
so with ccache recompiled, nginx compile should work with clang on centos 6

nginx -V
nginx version: nginx/1.13.8
built by clang 3.4.2 (tags/RELEASE_34/dot2-final)
built with LibreSSL 2.6.4
TLS SNI support enabled
configure arguments: --with-ld-opt='-lrt -ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-m64 -mtune=native -g -O3 -fstack-protector -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wno-sign-compare -Wno-int-conversion -Wno-implicit-function-declaration -Wno-string-plus-int -Wno-deprecated-declarations -Wno-unused-parameter -Wno-unused-const-variable -Wno-conditional-uninitialized -Wno-mismatched-tags -Wno-sometimes-uninitialized -Wno-parentheses-equality -Wno-tautological-compare -Wno-self-assign -Wno-deprecated-register -Wno-deprecated -Wno-invalid-source-encoding -Wno-pointer-sign -Wno-parentheses -Wno-enum-conversion -Wno-c++11-compat-deprecated-writable-strings -Wno-write-strings' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-compat --with-http_stub_status_module --with-http_secure_link_module --with-libatomic --with-http_gzip_static_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream=dynamic --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.2 --add-module=../ngx_cache_purge-2.4.2 --add-module=../ngx_devel_kit-0.3.0 --add-dynamic-module=../set-misc-nginx-module-0.31 --add-dynamic-module=../echo-nginx-module-0.61 --add-module=../redis2-nginx-module-0.14 --add-module=../ngx_http_redis-0.3.7 --add-module=../memc-nginx-module-0.18 --add-module=../srcache-nginx-module-0.31 --add-dynamic-module=../headers-more-nginx-module-0.33 --with-pcre=../pcre-8.41 --with-pcre-jit --with-zlib=../zlib-1.2.11 --with-http_ssl_module --with-http_v2_module --with-openssl=../libressl-2.6.4
Click to expand...

Just thought I'd note this here for anyone who hasn't addressed the old Dec 2017 zlib workaround issue yet 123.09beta01 Updated Nginx zlib routine with optional Cloudflare zlib support

edit: see my CentOS 6 virtualbox instance was last updated 16/12/17 so just before zlib workaround issue heh

updated it to 23/1/18 version

eva2000 · Jan 24, 2018

Heads up I have updated Centmin Mod 123.09beta01 and extended Cloudflare's zlib performance fork library usage from just Nginx zlib to Centmin Mod's installed PHP-FPM version via optional control variable CLOUDFLARE_ZLIBPHP. Full details here.

eva2000 · Jan 27, 2018

Updated Centmin Mod 123.09beta01 and higher to include native support in all Nginx vhost auto generation routines to also download Cloudflare Authenticated Origin Pull certificates for HTTPS SSL nginx vhosts and add the 2 lines required but commented out by default Beta Branch - update nginx vhost routines cloudflare authenticated origin pull certificates support.

eva2000 · Feb 24, 2018

As at February 24, 2018 I have switched Centmin Mod 123.09beta01 to more performant defaults as outlined here. These have been tested for many months so I am confident now in setting them up as Centmin Mod 123.09beta01 and future versions' defaults.

switch from LibreSSL default to OpenSSL for Nginx crypto library by setting LIBRESSL_SWITCH='n' out of the box for better Nginx HTTPS/SSL performance potential

switch from Clang 3.4.2 default compiler for Nginx to GCC 7.2.1+ by setting out of box defaults to CLANG='n', DEVTOOLSETSEVEN='y' and NGINX_DEVTOOLSETGCC='y' for better Nginx performance potential

these may increase initial install times but result in potentially better performance

pamamolf · Feb 24, 2018

Will gcc be ok with my custom config?

Code:

NSD_INSTALL='n'
NGINX_SUB='n'
NGINX_ADDITION='n'
NGINX_IMAGEFILTER='n'
NGINX_HTTPCONCAT='n'
NGINX_PAGESPEED='n'
CLOUDFLARE_ZLIB='y'
CLOUDFLARE_ZLIBPHP='y'
PHP_TUNING='n'
PHP_OVERWRITECONF='n'
AUTOTUNE_CLIENTMAXBODY='n'
DISABLE_IPVSIX='y'
ENABLEMOTD='n'
LETSENCRYPT_DETECT='y'

eva2000 · Feb 24, 2018

yup

GamerJota · Feb 24, 2018

What about GCC 8 instead of 7?
Code:
DEVTOOLSETEIGHT='y'

Log in / Register

Forums

Welcome to Centmin Mod Community

Upgrade PHP-FPM Beta Branch Centmin Mod .09 beta branch Testing

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

pamamolf Premium Member Premium Member

eva2000 Administrator Staff Member

pamamolf Premium Member Premium Member

eva2000 Administrator Staff Member

pamamolf Premium Member Premium Member

eva2000 Administrator Staff Member

pamamolf Premium Member Premium Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

pamamolf Premium Member Premium Member

eva2000 Administrator Staff Member

GamerJota Member

.

Log in / Register

Useful Searches

Welcome to Centmin Mod Community

Upgrade PHP-FPM Beta Branch Centmin Mod .09 beta branch Testing

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

pamamolf Premium Member Premium Member

eva2000 Administrator Staff Member

pamamolf Premium Member Premium Member

eva2000 Administrator Staff Member

pamamolf Premium Member Premium Member

eva2000 Administrator Staff Member

pamamolf Premium Member Premium Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

pamamolf Premium Member Premium Member

eva2000 Administrator Staff Member

GamerJota Member

.