Join the community today
Become a Member

Beta Branch More prep for pcre2 Nginx support & related updates in 123.09beta01

Discussion in 'Centmin Mod Github Commits' started by eva2000, Jan 27, 2022.

  1. eva2000

    eva2000 Administrator Staff Member

    49,234
    11,291
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +17,567
    Local Time:
    1:29 AM
    Nginx 1.21.x
    MariaDB 10.x
    More prep for pcre2 Nginx support & related updates in 123.09beta01

    - More prep work for pcre2 Nginx support for Nginx 1.21.5+ outlined at https://community.centminmod.com/threads/prep-for-pcre2-nginx-support-in-123-09beta01.22319/
    - Major revised work for following routines to change the location they're installed at from PREFIX = /usr/local to PREFIX = /usr/local/nginx-dep for GeoIP2 Lite Nginx module and it's libmaxmind library paths, custom libatomic_ops RPM, and Modsecurity routine which relies on libmaxmind library, ngx_brotli and nginx lua and luajit installs as well install separate pcre v8.45 for legacy support in new PREFIX = /usr/local/nginx-dep location. These changes will align with pcre2 v10.x installed PREFIX = /usr/local/nginx-dep path.
    - Prep for Nginx compile support using Mold linker GitHub - rui314/mold: mold: A Modern Linker as an alternative to GNU Gold linker
    - Add dropbox_send function to optionally allow sending of nginx_upgrade logs and pcre2 nginx upgrade logs to users Dropbox account either via detected Rclone install or via dbsend shell script detection. Disabled by default, unless persistent config file set variable DROPBOX_SEND='y' exists and addons/rclone.sh installed rclone or dbsend shell script is detected
    - If PCRE2 Nginx is enabled and Nginx Lua or Modsecurity Nginx module is also enabled, auto disable PCRE2 and switch back to PCRE due to incompatibility right now with PCRE2 and Nginx Lua or Modsecurity Nginx modules
    - Update OpenSSL routine to optionally support only running if OpenSSL version installed differs from OpenSSL version defined or if OPENSSL_FORCECOMPILE='y' is set in persistent config file. Should speed up Nginx compilation routine.Not enabled by default
    - Prep for OpenSSL 3.0.x support in Nginx & Nginx kTLS support when OpenSSL 3.0 + 5.2+ Linux Kernel detected
    - Update ccache routine for 4.4+ redis support

    Continue reading...

    123.09beta01 branch


     
  2. eva2000

    eva2000 Administrator Staff Member

    49,234
    11,291
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +17,567
    Local Time:
    1:29 AM
    Nginx 1.21.x
    MariaDB 10.x
    With latest Nginx PCRE2 optional support update, to switch to PCRE2 support for Nginx 1.21.5+, you need to update your persistent config file at /etc/centminmod/custom_config.inc (if it doesn't exist create it) and add the variable to enable Nginx PCRE2 support.
    Code (Text):
    NGINX_PCRE_TWO='y'

    Then run centmin.sh menu option 4 and update/recompile to Nginx version 1.21.5 or higher which support PCRE2.
     
  3. rdan

    rdan Premium Member Premium Member

    5,327
    1,337
    113
    May 25, 2014
    Ratings:
    +2,065
    Local Time:
    11:29 PM
    Mainline
    10.2
    Kimsufi Server on PCRE2
    SyS Server on PCRE2
    OVH SGP on PCRE2
     
    Last edited: Jan 27, 2022
  4. rdan

    rdan Premium Member Premium Member

    5,327
    1,337
    113
    May 25, 2014
    Ratings:
    +2,065
    Local Time:
    11:29 PM
    Mainline
    10.2
    @eva2000
    Not sure why the Kimsufi server has extra parameters?
    Like:
    Is this because of the CPU?
     
  5. eva2000

    eva2000 Administrator Staff Member

    49,234
    11,291
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +17,567
    Local Time:
    1:29 AM
    Nginx 1.21.x
    MariaDB 10.x
    Yes Centmin Mod Nginx compile routines automatically detect the capabilities of your server's CPU model and adjusts the options and parameters as needed.

    Though enable-ec_nistp_64_gcc_128 is enabled to if OpenSSL 1.1.1 is detected, so will double check the routines. Did you by any change change the default setting for NGXMODULE_ALTORDER='y' in persistent config file to NGXMODULE_ALTORDER='n' ?
     
    Last edited: Jan 27, 2022
  6. eva2000

    eva2000 Administrator Staff Member

    49,234
    11,291
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +17,567
    Local Time:
    1:29 AM
    Nginx 1.21.x
    MariaDB 10.x
    For details see https://community.centminmod.com/threads/sending-nginx-upgrade-logs-to-dropbox-via-rclone.22402/
     
  7. rdan

    rdan Premium Member Premium Member

    5,327
    1,337
    113
    May 25, 2014
    Ratings:
    +2,065
    Local Time:
    11:29 PM
    Mainline
    10.2
    No for both config option.