Install Centmin Mod 1.2.3-eva2000.08 how to install & update

As at May 8th, 2022, Centmin Mod 124.00stable and 130.00beta01 have been released now. Details at https://community.centminmod.com/threads/centmin-mod-124-00stable-130-00beta01-releases.22673/

---

Centmin Mod 1.2.3-eva2000.08 stable = 123.08stable github branch. The following links are to official install and upgrade pages including Getting Started Guide etc. Note if you want PHP 7.1+ support, you need to use Centmin Mod 123.09beta01 outlined here.

• How to Install Centmin Mod 1.2.3-eva2000.08 Stable
• How to upgrade Centmin Mod 1.2.3-eva2000.08+ stable via centmin.sh menu option 23 submenu options 1 and 2 [discussion thread]
• How to config automatic updates via cronjob
• Getting Started Guide and What's New and centmin.sh guide.

Centmin Mod 1.2.3-eva2000.08 Discussions

Official discussion thread located at Discuss Centmin Mod 1.2.3-eva2000.08 Stable Release

 

123.08stable commit updates

You will find any commit updates for 123.08stable listed at Commits · centminmod/centminmod · GitHub and will mention those more important and of note below.

• added CentOS 6.7+ support
• August 10th, 2015 commits for security fix outlined below
• August 20th, 2015 commit for PHP 7.0.0RC* version support

 

centmin.sh menu option 23

An illustrated example of using centmin.sh menu option 23 to first setup the git environment via submenu option 1. Then exiting centmin.sh and relauncing centmin.sh to use centmin.sh menu option 23 submenu option 2 to check for updates.

 

Security Fix

Highly recommend you update to latest 123.08stable branch = 1.2.3-eva2000.08 stable via instructions at centminmod.com/upgrade.html for outlined potential security exploit at Wordpress Exploit if you use Nano, VIM or VI linux text editors

• August 10th commits to 123.08stable branch = 1.2.3-eva2000.08 stable are for a potential security issue when using Linux text editors like nano, vi, vim, emacs and gedit to edit your config files for web facing apps like Wordpress. The Linux text editors temp files or auto backup routines may leave public web viewable or accessible versions of the files and thus reveal your web app's login, database details etc. See thread at Wordpress Exploit if you use Nano, VIM or VI linux text editors
• This fix for now is to block such temp created files from web view by adding a location match to /usr/local/nginx/conf/drop.conf which is by default included in create auto created Nginx vhost config file via centmin.sh menu option 2. You can do this automatically by updating to latest .08 stable version using instructions at centminmod.com/upgrade.html and then running centmin.sh once - it has a new blockeditorcheck function that checks your /usr/local/nginx/conf/drop.conf has the new line 6-7 of drop.conf. If the line is missing in your /usr/local/nginx/conf/drop.conf file, Centmin Mod updated .08 stable release will auto update the /usr/local/nginx/conf/drop.conf on your server with that new line by removing old /usr/local/nginx/conf/drop.conf and copying over a new version to /usr/local/nginx/conf/drop.conf.
• You can also manually update your /usr/local/nginx/conf/drop.conf by adding these 2 lines to /usr/local/nginx/conf/drop.conf
  Code:

      # for security see https://community.centminmod.com/posts/17234/
      location ~* \.(bak|php~|php#|php.save|php.swp|php.swo)$ { return 444; }
  

• In either case after auto or manual update of drop.conf file. Please restart Nginx server for changes to take effect.

Easy update via centmin.sh menu option 23

If you have git environment setup via centmin.sh menu option 23 submenu option 1. Then updating Centmin Mod is easy as selecting centmin.sh menu option 23 submenu option 2.

Code:

--------------------------------------------------------
Centmin Mod 1.2.3-eva2000.08 - http://centminmod.com
--------------------------------------------------------
                   Centmin Mod Menu          
--------------------------------------------------------
1).  Centmin Install
2).  Add Nginx vhost domain
3).  NSD setup domain name DNS
4).  Nginx Upgrade / Downgrade
5).  PHP Upgrade / Downgrade
6).  XCache Re-install
7).  APC Cache Re-install
8).  XCache Install
9).  APC Cache Install
10). Memcached Server Re-install
11). MariaDB 5.2/5.5 & 10.x Upgrade Sub-Menu
12). Zend OpCache Install/Re-install
13). Install ioping.sh vbtechsupport.com/1239/
14). SELinux disable
15). Install/Reinstall ImagicK PHP Extension
16). Change SSHD Port Number
17). Multi-thread compression: pigz,pbzip2,lbzip2...
18). Suhosin PHP Extension install
19). Install FFMPEG and FFMPEG PHP Extension
20). NSD Re-install
21). Update - Nginx + PHP-FPM + Siege
22). Add Wordpress Nginx vhost + WP Super Cache
23). Update Centmin Mod Code Base
24). Exit
--------------------------------------------------------
Enter option [ 1 - 24 ] 23
--------------------------------------------------------

Code:

--------------------------------------------------------
        Centmin Mod Updater Sub-Menu     
--------------------------------------------------------
1). Setup Centmin Mod Github Environment
2). Update Centmin Mod Current Branch
3). Update Centmin Mod Newer Branch
4). Back to Main menu
--------------------------------------------------------
Enter option [ 1 - 4 ] 2
--------------------------------------------------------

Updating Current Centmin Mod code branch via git
        cd /usr/local/src/centminmod
        git stash
        git pull
        chmod +x centmin.sh
No local changes to save
From https://github.com/centminmod/centminmod
   2328cce..f1ccca5  123.08stable -> origin/123.08stable
   21cec22..30a88a5  123.09beta01 -> origin/123.09beta01
   9c0eeae..9fdeff7  master     -> origin/master
Updating 2328cce..f1ccca5
Fast-forward
inc/cpcheck.inc |   10 ++++++++++
1 files changed, 10 insertions(+), 0 deletions(-)

You see that submenu option 2 updated my server's Centmin Mod code by updating the inc/cpcheck.inc file automatically.

Then I hit centmin.sh menu option 24 to exit. Then run centmin.sh one more time to trigger blockeditorcheck function in inc/cpcheck.inc. Then exit again and check contents of my /usr/local/nginx/conf/drop.conf file.

Code:

cat /usr/local/nginx/conf/drop.conf

Code:

        location = /robots.txt  { access_log off; log_not_found off; }
        location = /favicon.ico { access_log off; log_not_found off; expires 30d; }
        location ~ /\.          { access_log off; log_not_found off; deny all; }
        location ~ ~$           { access_log off; log_not_found off; deny all; }
        location ~ /\.git { access_log off; log_not_found off; deny all; }
        # for security see https://community.centminmod.com/posts/17234/
        location ~* \.(bak|php~|php#|php.save|php.swp|php.swo)$ { return 444; }

 

PHP 7.0.0RC version support update

• Updated Centmin Mod 1.2.3-eva2000.08 stable = 123.08stable git branch with PHP 7.0.0RC* version support. Full details here.

 

Updated default LibreSSL Version

Updated both Centmin Mod 1.2.3-eva2000.08 stable and 1.2.3-eva2000.09 beta01 to default to LibreSSL 2.2.3 for fresh installs. For existing installs you need to update to LibreSSL 2.2.3 as outlined here LibreSSL 2.2.3 Released for Centmin Mod Nginx | Centmin Mod Community

 

Backported 123.09beta01 Wordpress SSL Vhost Changes

Backported some changes from 123.09beta01 into 123.08stable to properly enable self-signed SSL vhost generation for centmin.sh menu option 22 backport from 123.09beta01 to 123.08stable inc/wpsetup.inc and vhost … · centminmod/centminmod@1d9c521 · GitHub To update your copy of Centmin Mod .08 stable follow the update instructions at centminmod.com/upgrade.html

• backport to inc/wpsetup.inc support for self signed ssl vhost generation with wordpress auto installer
• backport self signed ssl certificate variables to centmin.sh https://community.centminmod.com/posts/17872/
• backport to tools/nv.sh
• backport and add standalone tools/nvwp.sh wordpress install for PHP 7 usage as WP-CLI doesn't support PHP 7 and thus centmin.sh menu option 22 doesn't work for PHP 7 based servers

I've also added to official site a demo for the centmin.sh menu option 22 auto installer for Wordpress and Wordpress Super Cache at http://centminmod.com/nginx-wordpress-installer.html

 

Fix for missing mcrypt PHP extension

Updated both Centmin Mod 123.08stable and 123.09beta01 builds with a fix for missing mcrypt PHP extension for CentOS 6.7 servers. Like the bug at CentOS 7.x - How to help test .08 CentOS 7 Betas with Github code ? | Page 10 I missed the CentOS version increment for CentOS 6.7 version number. To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

Then you need to run centmin.sh menu option 5 to recompile your PHP versions 5.4.45, 5.5.29 or 5.6.13 for mcrypt PHP extension support.

 

Remove ports 111 & 2049 from CSF Firewall whitelist by default

Updated both Centmin Mod 123.08stable and 123.09beta01 builds and removed RPC/portmapper and NFS ports 111 and 2049 from CSF Firewall whitelist by default so that folks who only need it can open it up to specific server IP addresses see advance CSF Firewall rules at CSF - CSF Firewall info | Centmin Mod Community To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

Examples for allowing 111, 2049 TCP/UDP ports for only source/destination IP = 11.22.33.44 to be added to /etc/csf/csf.allow restart of CSF service is required

Code:

tcp|in|d=111|s=11.22.33.44
tcp|in|d=2049|s=11.22.33.44
tcp|out|d=111|d=11.22.33.44
tcp|out|d=2049|d=11.22.33.44
udp|in|d=111|s=11.22.33.44
udp|in|d=2049|s=11.22.33.44
udp|out|d=111|d=11.22.33.44
udp|out|d=2049|d=11.22.33.44

The automated removal will only remove ports 111, 2049 from TCP/UDP whitelist if detected NFS package not installed otherwise it will leave it in place if NFS yum packages are detected as that would suggest the likely hood that NFS share is in use or will be.

On updated Centmin Mod 123.08stable and 123.09beta01 and higher, just running centmin.sh again will auto remove the ports then you either manually restart CSF Firewall or wait for next CSF Firewall daily auto update to trigger the restart

 

default-storage-engine = InnoDB

Updated both Centmin Mod 123.08stable and 123.09beta01 builds to switch MariaDB MySQL my.cnf templates from default-storage-engine MyISAM to InnoDB out of the box seeing as MariaDB 10.0.x is now default and does require InnoDB to be enabled unlike MariaDB 5.5.

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Disabled ATrpms YUM repo

Updated both Centmin Mod 123.08stable and 123.09beta01 builds and for now have disabled ATrpms from initial install disable ATrpms YUM repo · centminmod/centminmod@bb39e84 · GitHub as it seems atrpms.net site is down right now Unable to install FFMPEG PHP extension | Page 3 | Centmin Mod Community

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Updated curl one liner installs

One liner install commands have been updated and also use the https version of centminmod.com site from now on

Centmin Mod 123.08stable

Code:

curl -O https://centminmod.com/installer.sh && chmod 0700 installer.sh && bash installer.sh

Centmin Mod 123.09betas default to PHP 5.5.29

Code:

curl -O https://centminmod.com/betainstaller.sh && chmod 0700 betainstaller.sh && bash betainstaller.sh

Added additional curl one liner 123.09beta01 unattended installs methods which default to PHP 5.6.13.

Code:

curl -O https://centminmod.com/betainstaller56.sh && chmod 0700 betainstaller56.sh && bash betainstaller56.sh

 

postfix opportunistic TLS encryption for outgoing server mail

Updated both Centmin Mod 123.08stable and 123.09beta01 builds and enable by default on initial installs postfix opportunistic TLS encryption for outgoing server emails as per Postfix TLS Support

For existing users they can implement this via SSH command line using the following commands where first command checks current default postfix values which usually is empty and the last command checks the customised postfix config settings after

Code:

postconf -d smtp_tls_CAfile smtp_tls_security_level smtp_tls_loglevel smtp_tls_session_cache_database
postconf -e 'smtp_tls_CAfile=/etc/pki/tls/certs/ca-bundle.crt'
postconf -e 'smtp_tls_security_level = may'
postconf -e 'smtp_tls_loglevel = 1'
postconf -e 'smtp_tls_session_cache_database = btree:/var/lib/postfix/smtp_scache'
service postfix restart
postconf -n smtp_tls_CAfile smtp_tls_security_level smtp_tls_loglevel smtp_tls_session_cache_database

So last command to check if postfix settings are set shows the following

Code:

postconf -n smtp_tls_CAfile smtp_tls_security_level smtp_tls_loglevel smtp_tls_session_cache_database
smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
smtp_tls_security_level = may
smtp_tls_loglevel = 1
smtp_tls_session_cache_database = btree:/var/lib/postfix/smtp_scache

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Add NGINX_DEBUG variable support to centmin.sh

Updated both Centmin Mod 123.08stable and 123.09beta01 builds and added a new variable NGINX_DEBUG=n default, setting to NGINX_DEBUG=y and recompiling Nginx via centmin.sh menu option 4 and then setting error_log in nginx vhosts to debug will enabling Nginx debug mode outlined at nginx.org/en/docs/debugging_log.html & wiki.nginx.org/Debugging

You do not want to leave Nginx debug mode running forever, so after debugging, set NGINX_DEBUG=n in centmin.sh and recompile Nginx again via centmin.sh menu option 4 and remove error_log debugging mode to disable Nginx debug mode again.

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Update centmin.sh menu option 22

Updated both Centmin Mod 123.08stable and 123.09beta01 build's inc/wpsetup.inc file for the auto updater script
script setup. On centmin.sh menu option 22 wordpress auto install creates an cronjob script at /root/tools/wp_updater_${vhostname}.sh where vhostname = your site domain name. This script auto updates wordpress via wp-cli cmd tool. However, it's own wp-cli cli update command doesn't work as root user.

This command doesn't work as root user

Code:

/usr/bin/wp cli update --allow-root

so changing and replacing that line in /root/tools/wp_updater_${vhostname}.sh with following manual update lines

Code:

echo "update wp-cli"
rm -rf /usr/bin/wp
wget -cnv --no-check-certificate https://raw.github.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/bin/wp --tries=3
chmod 0700 /usr/bin/wp

For example, if you ran centmin.sh menu option 22 to setup a new wordpress site on domain newdomain.com, you would of created automatically a cronjob auto wordpress updater script at /root/tools/wp_updater_newdomain.com.sh

contents prior to above changes would be

Code:

#!/bin/bash
PATH=/usr/lib64/ccache:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin:/root/bin
EMAIL=your@emailaddress

{
cd /home/nginx/domains/newdomain.com/public
echo "/home/nginx/domains/newdomain.com/public"
/usr/bin/wp cli update --allow-root
/usr/bin/wp plugin status --allow-root
/usr/bin/wp plugin update --all --allow-root
} 2>&1 | mail -s "Wordpress WP-CLI Auto Update $(date)" $EMAIL

the above changes will now auto create the wordpress auto updater script contents as

Code:

#!/bin/bash
PATH=/usr/lib64/ccache:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin:/root/bin
EMAIL=your@emailaddress

{
cd /home/nginx/domains/newdomain.com/public
echo "/home/nginx/domains/newdomain.com/public"
#/usr/bin/wp cli update --allow-root
echo "update wp-cli"
rm -rf /usr/bin/wp
wget -cnv --no-check-certificate https://raw.github.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -O /usr/bin/wp --tries=3
chmod 0700 /usr/bin/wp
/usr/bin/wp plugin status --allow-root
/usr/bin/wp plugin update --all --allow-root
#/usr/bin/wp core check-update --allow-root
#/usr/bin/wp core update --allow-root
#/usr/bin/wp core update-db --allow-root
} 2>&1 | mail -s "Wordpress WP-CLI Auto Update $(date)" $EMAIL

edit: added 3 more lines commented out

Right now only wordpress plugins auto update only. These lines auto update wordpress core and database if uncommented.

Code:

#/usr/bin/wp core check-update --allow-root
#/usr/bin/wp core update --allow-root
#/usr/bin/wp core update-db --allow-root

For existing users who created their wordpress site via centmin.sh menu option 22, you will need to manually edit each /root/tools/wp_updater_yourdomain.com.sh auto wordpress updating scripts with the new lines - github commit at update inc/wpsetup.inc auto updater script · centminmod/centminmod@5539013 · GitHub might make it clearer which lines were added.

For future centmin.sh 22 runs, you will want to update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Backport Nginx HTTP/2 Support into 123.08stable

In preparation for next Nginx 1.9.5 release which will switch from SPDY to HTTP/2 support officially, I just merged and backported Nginx HTTP/2 support routines from 123.09beta01 to 123.08stable branches - see September 18, 2015 commits Commits · centminmod/centminmod · GitHub. Updated: Centmin Mod now defaults to Nginx 1.9.5 with HTTP/2 enabled out of the box. Full details here.

The backported routine tries to automatically convert any existing Nginx SPDY SSL vhost configuration files within /usr/local/nginx/conf/conf.d/ directory from SPDY to HTTP/2 listen directive and auto comment out any unsupported SPDY options after Nginx HTTP/2 is compiled. But if you do get a similar error on restart of Nginx as below, pay attention to which file and line it's complaining about. It maybe you have set SPDY SSL settings in include files outside of /usr/local/nginx/conf/conf.d/ which will not have been auto converted, so you need to do it manually as outlined at centminmod.com/http2-nginx.html#http2spdy - involving changing the listen directive from spdy to http2

Code:

ngxrestart
nginx: [emerg] invalid parameter "spdy": the SPDY module was deprecated, use the HTTP/2 module instead in /usr/local/nginx/conf/conf.d/newdomain.com.ssl.conf:15
nginx: configuration file /usr/local/nginx/conf/nginx.conf test failed

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread

Did a test fresh 123.08stable install with backported Nginx HTTP/2 changes and worked nicely

 

Update centmin.sh menu option 22 - xmlrpc rate limiting zone separation

Updated both Centmin Mod 123.08stable and 123.09beta01 builds's centmin.sh menu option 22 Wordpress rate limiting to separate the nginx request rate liming zones for xmlrpc.php from wp-login.php's rate limit zone as some folks actually use wordpress ping backs via xmlrpc.php Wordpress - WordPress ping Optimizer 2.34 With Centmin MOD | Centmin Mod Community

existing wordpress uses who created and installed wordpress via centmin.sh menu option 22 can add the separate xmlrpc.php rate limit zone via these SSH commands

Code:

sed -i 's/http {/http { \nlimit_req_zone $binary_remote_addr zone=xwprpc:10m rate=30r\/s;\n/g' /usr/local/nginx/conf/nginx.conf

then edit wordpress vhost file and change

from

Code:

location ~* /(xmlrpc\.php) {
    limit_req zone=xwplogin burst=2 nodelay;
    #limit_conn xwpconlimit 30;
    include /usr/local/nginx/conf/php-wpsc.conf;
}

to

Code:

location ~* /(xmlrpc\.php) {
    limit_req zone=xwprpc burst=45 nodelay;
    #limit_conn xwpconlimit 30;
    include /usr/local/nginx/conf/php-wpsc.conf;
}

and restart nginx

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

ngx_pagespeed 1.9.32.10-beta directory change update

Updated both Centmin Mod 123.08stable and 123.09beta01 builds. ngx_pagespeed 1.9.32.10-beta changed the directory name within the zip download tarball so Centmin Mod Nginx download, install and upgrade routines need updating to take into account the directory name change Issue with latest stable, nginx install failing. | Centmin Mod Community

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

 

Nginx LibreSSL 2.2.4 Security Update

Nginx's LibreSSL version has been updated from 2.2.3 to 2.2.4 to fix security memory leak and buffer overflow vulnerabilities. Details on how to update are at Security - LibreSSL 2.2.4 Released security fixes | Centmin Mod Community

 

Letsencrypt content-type changes

Updated both Centmin Mod 123.08stable and 123.09beta01 builds for latest Letsencrypt supported content-type outlined at SSL - Letsencrypt Free SSL certificates with web root authentication method | Centmin Mod Community

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

• Centmin Mod 1.2.3-eva2000.08 stable install & update thread
• Centmin Mod 123.09beta thread

Once updated, run centmin.sh once to allow auto syncing of the changes to your existing server configuration.