{"data":{"markdownRemark":{"frontmatter":{"title":"Правильный LAMP на archlinux","date":"03 September 2016","path":"/pravilny-lamp-na-archlinux/","author":null,"excerpt":"Статья о том, как настроить LAMP на Archlinux","tags":["Apache","Lamp","Archlinux","Linux","MySQL","PHP"],"coverImage":{"childImageSharp":{"fluid":{"base64":"data:image/jpeg;base64,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","aspectRatio":1.8815331010452963,"src":"/static/e27ba31c3af212242e89cf8af494d2cf/b4295/photo-1516885726422-4d4bbfce5b9e.jpg","srcSet":"/static/e27ba31c3af212242e89cf8af494d2cf/127d5/photo-1516885726422-4d4bbfce5b9e.jpg 200w,\n/static/e27ba31c3af212242e89cf8af494d2cf/7ef6a/photo-1516885726422-4d4bbfce5b9e.jpg 400w,\n/static/e27ba31c3af212242e89cf8af494d2cf/b4295/photo-1516885726422-4d4bbfce5b9e.jpg 800w,\n/static/e27ba31c3af212242e89cf8af494d2cf/487eb/photo-1516885726422-4d4bbfce5b9e.jpg 1080w","sizes":"(max-width: 800px) 100vw, 800px"}}}},"id":"ece499f3-e10b-5a7b-afb6-666163c49957","html":"

Актуально на апрель 2016.

\n

Версия apache, php, mysql:

\n
    $ httpd -v\n    Server version: Apache/2.4.20 (Unix)\n    Server built:   Apr 11 2016 10:04:04\n    \n    $ php -v\n    PHP 7.0.5 (cli) (built: Apr  2 2016 23:10:23) ( NTS )\n    Copyright (c) 1997-2016 The PHP Group\n    Zend Engine v3.0.0, Copyright (c) 1998-2016 Zend Technologies\n    \n    $ mysql -V\n    mysql  Ver 15.1 Distrib 10.1.13-MariaDB, for Linux (x86_64) using readline 5.1
\n

Я не буду подробно акцентироват внимание на конфигурировании, лишь общие настройки.

\n

Для начала следует обновить все пакеты

\n
    sudo pacman -Syu
\n

Ставим всё необходимое, а именно apache, php, mysql, openssl (если необходим доступ по https) и т.д.

\n
    sudo pacman -S apache php php-apache mysql openssl
\n

Если mysql не стоял ранее:

\n
    sudo systemctl start mysqld\n    sudo mysql_secure_installation
\n

Можно попробовать проверить работоспособность сервера базы

\n
    mysql -u root -p
\n

Мне нравится способ конфигурирования apache в ubuntu, поэтому переделаем настройки на убунтуподобность)

\n

Открываем httpd.conf

\n
    sudo nano /etc/httpd/conf/httpd.conf
\n

и в конец файла добавляем:

\n
    IncludeOptional conf/sites-enabled/*.conf\n    IncludeOptional conf/mods-enabled/*.conf
\n

Это позволит подхватывать все конфиги из {sites, mods}-enabled директорий.

\n

Теперь создадим указанные каталоги:

\n
        sudo mkdir /etc/httpd/conf/{sites-available,sites-enabled,mods-available,mods-enabled}
\n

Для включения/выключения сайтов создадим скрипт.

\n

Я не стал брать скрипты из ubuntu из-за их монстроузости, вместо этого в интернете нашёл вполне подходящие для наших целей.

\n

Первый скрипт. \"Включает\" выбранный конфиг сайта.

\n
    sudo nano /usr/sbin/a2ensite\n    \n\n    #!/bin/bash\n    if test -d /etc/httpd/conf/sites-available && test -d /etc/httpd/conf/sites-enabled  ; then\n    echo \"-------------------------------\"\n    else\n    echo \"Error!! Folders /etc/httpd/conf/sites-available & etc/httpd/conf/sites-enabled not found.\"\n    exit 0\n    fi\n    \n    avail=/etc/httpd/conf/sites-available/$1.conf\n    enabled=/etc/httpd/conf/sites-enabled\n    site=`ls /etc/httpd/conf/sites-available/`\n    \n    if [ \"$#\" != \"1\" ]; then\n            echo \"Use script: a2ensite site_config\"\n            echo -e \"\\nAvailable virtual hosts:\\n$site\"\n            exit 0\n    else\n    if test -e $avail; then\n    sudo ln -s $avail $enabled\n    else\n    echo -e \"$avail virtual host does not exist! Please create one!\\n$site\"\n    exit 0\n    fi\n    if test -e $enabled/$1.conf; then\n    echo \"Success!! Now restart Apache server: sudo systemctl restart httpd\"\n    else\n    echo  -e \"Virtual host $avail does not exist!\\nPlease see avail virtual hosts:\\n$site\"\n    exit 0\n    fi\n    fi
\n

Делаем скрипт выполняемым.

\n
    sudo chmod +x /usr/sbin/a2ensite
\n

Второй скрипт. \"Выключает\" выбранный конфиг сайта.

\n
    sudo nano /usr/sbin/a2dissite\n    \n\n    #!/bin/bash\n    if test -d /etc/httpd/conf/sites-available && test -d /etc/httpd/conf/sites-enabled  ; then\n    echo \"-------------------------------\"\n    else\n    echo \"Error!! Folders /etc/httpd/conf/sites-available & etc/httpd/conf/sites-enabled not found.\"\n    exit 0\n    fi\n    \n    avail=/etc/httpd/conf/sites-enabled/$1.conf\n    enabled=/etc/httpd/conf/sites-enabled\n    site=`ls /etc/httpd/conf/sites-enabled`\n    \n    if [ \"$#\" != \"1\" ]; then\n            echo \"Use script: a2dissite site_config\"\n            echo -e \"\\nEnabled virtual hosts: \\n$site\"\n            exit 0\n    else\n    if test -e $avail; then\n    sudo rm  $avail\n    else\n    echo -e \"$avail virtual host does not exist! Exiting\"\n    exit 0\n    fi\n    if test -e $enabled/$1.conf; then\n    echo \"Error!! Could not remove $avail virtual host!\"\n    else\n    echo  -e \"Success! $avail has been removed!\\nsudo systemctl restart httpd\"\n    exit 0\n    fi\n    fi
\n

Делаем скрипт выполняемым.

\n
    sudo chmod +x /usr/sbin/a2dissite
\n

Теперь создадим скрипты включения/отключения модулей

\n
    sudo nano /usr/sbin/a2enmod\n    \n\n    #!/bin/bash\n    if test -d /etc/httpd/conf/mods-available && test -d /etc/httpd/conf/mods-enabled  ; then\n    echo \"-------------------------------\"\n    else\n    echo \"Error!! Folders /etc/httpd/conf/mods-available & etc/httpd/conf/mods-enabled not found.\"\n    exit 0\n    fi\n    \n    avail=/etc/httpd/conf/mods-available/$1.conf\n    enabled=/etc/httpd/conf/mods-enabled\n    mods=`ls /etc/httpd/conf/mods-available/`\n    \n    if [ \"$#\" != \"1\" ]; then\n            echo \"Use script: a2enmod mod_name\"\n            echo -e \"\\nAvailable mods config:\\n$mods\"\n            exit 0\n    else\n    if test -e $avail; then\n    sudo ln -s $avail $enabled\n    else\n    echo -e \"$avail mod not exist! Please create one!\\n$mods\"\n    exit 0\n    fi\n    if test -e $enabled/$1.conf; then\n    echo \"Success!! Now restart Apache server: sudo systemctl restart httpd\"\n    else\n    echo  -e \"Mod $avail does not exist!\\nPlease see avail mods:\\n$mods\"\n    exit 0\n    fi\n    fi
\n

Делаем скрипт выполняемым.

\n
    sudo chmod +x /usr/sbin/a2enmod
\n

И второй скрипт (ну или 4 =) )

\n
    sudo nano /usr/sbin/a2dismod\n    \n\n    #!/bin/bash\n    if test -d /etc/httpd/conf/mods-available && test -d /etc/httpd/conf/mods-enabled  ; then\n    echo \"-------------------------------\"\n    else\n    echo \"Error!! Folders /etc/httpd/conf/mods-available & etc/httpd/conf/mods-enabled not found.\"\n    exit 0\n    fi\n    \n    avail=/etc/httpd/conf/mods-enabled/$1.conf\n    enabled=/etc/httpd/conf/mods-enabled\n    mods=`ls /etc/httpd/conf/mods-enabled`\n    \n    if [ \"$#\" != \"1\" ]; then\n            echo \"Use script: a2dismod mod_config\"\n            echo -e \"\\nEnabled mods: \\n$mods\"\n            exit 0\n    else\n    if test -e $avail; then\n    sudo rm  $avail\n    else\n    echo -e \"$avail mod does not exist! Exiting\"\n    exit 0\n    fi\n    if test -e $enabled/$1.conf; then\n    echo \"Error!! Could not remove $avail mod!\"\n    else\n    echo  -e \"Success! $avail has been removed!\\nsudo systemctl restart httpd\"\n    exit 0\n    fi\n    fi
\n

Делаем скрипт выполняемым.

\n
    sudo chmod +x /usr/sbin/a2dismod
\n

Создаём виртуальный хост

\n
    sudo nano /etc/httpd/conf/sites-available/localhost.conf
\n

Пример конфигурации

\n
    <VirtualHost *:80>\n        DocumentRoot \"/mnt/srv/www/localhost/public\"\n        <Directory \"/mnt/srv/www/localhost/public\">\n            Options FollowSymLinks\n            AllowOverride All\n            Require all granted\n        </Directory>\n        ServerName localhost\n        ErrorLog \"/mnt/srv/www/logs/localhost.error.log\"\n        CustomLog \"/mnt/srv/www/logs/localhost.access.log\" combined\n    </VirtualHost>
\n

Теперь его можно включить

\n
    sudo a2ensite localhost\n    \n\n    $ sudo a2ensite localhost\n    -------------------------------\n    Success!! Now restart Apache server: sudo systemctl restart httpd
\n

и добавить в /ets/hosts адрес если это требуется, попробовать запустить/перезапустить apache (как подсказывает скрипт)

\n

Я попробовал перезапустить apache, и на данном этапе у меня всё работает.

\n

Нужно уже браться за мод ssl. Но сначала напишем скрипт создания сертификатов, и создадим их.

\n
    sudo nano /usr/sbin/agenssl\n    \n\n    #!/bin/bash\n    if test -d /etc/httpd/conf/ssl ; then\n    echo \"...\"\n    else\n    echo \"make dir...\"\n    mkdir /etc/httpd/conf/ssl\n    fi\n    \n    cd /etc/httpd/conf/ssl\n    \n    echo -e \"Enter your virtual host FQDN\"\n    read cert\n    \n    openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -out $cert.key\n    chmod 600 $cert.key\n    openssl req -new -key $cert.key -out $cert.csr\n    openssl x509 -req -days 365 -in $cert.csr -signkey $cert.key -out $cert.crt\n    \n    echo -e \" The certificate \"$cert\" has been generated!\\nPlease link it to Apache SSL available website!\"\n    \n    ls -all /etc/httpd/conf/ssl\n    exit 0
\n

Сделаем скрипт выполняемым

\n
    sudo chmod +x /usr/sbin/agenssl
\n

Можно смело запускать. Из обязательного нужно заполнить \"Common Name (e.g. server FQDN or YOUR name) []\", указав в качестве имени адрес сайта.

\n
    sudo agenssl\n    \n\n    $ sudo agenssl\n    ...\n    Enter your virtual host FQDN\n    localhost\n    .....................+++\n    ..............................................................................+++\n    You are about to be asked to enter information that will be incorporated\n    into your certificate request.\n    What you are about to enter is what is called a Distinguished Name or a DN.\n    There are quite a few fields but you can leave some blank\n    For some fields there will be a default value,\n    If you enter '.', the field will be left blank.\n    -----\n    Country Name (2 letter code) [AU]:RU\n    State or Province Name (full name) [Some-State]:\n    Locality Name (eg, city) []:\n    Organization Name (eg, company) [Internet Widgits Pty Ltd]:\n    Organizational Unit Name (eg, section) []:\n    Common Name (e.g. server FQDN or YOUR name) []:localhost\n    Email Address []:\n    Please enter the following 'extra' attributes\n    to be sent with your certificate request\n    A challenge password []:\n    An optional company name []:\n    Signature ok\n    subject=/C=RU/ST=Some-State/O=Internet Widgits Pty Ltd/CN=localhost\n    Getting Private key\n    The certificate localhost has been generated!\n    \n    Please link it to Apache SSL available website!\n    drwxr-xr-x 2 root root 4096 апр 19 23:43 .\n    drwxr-xr-x 8 root root 4096 апр 19 21:27 ..\n    -rw-r--r-- 1 root root 1164 апр 19 23:43 localhost.crt\n    -rw-r--r-- 1 root root  985 апр 19 23:43 localhost.csr\n    -rw------- 1 root root 1704 апр 19 23:42 localhost.key
\n

Мод ssl

\n
    sudo nano /etc/httpd/conf/mods-enabled/ssl.conf\n    \n\n    LoadModule ssl_module modules/mod_ssl.so\n    LoadModule socache_shmcb_module modules/mod_socache_shmcb.so\n    Listen 443\n    SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5\n    SSLPassPhraseDialog  builtin\n    SSLSessionCache        \"shmcb:/run/httpd/ssl_scache(512000)\"\n    SSLSessionCacheTimeout  300
\n

Включаем его

\n
    sudo a2enmod ssl\n    \n\n    $ sudo a2enmod ssl\n    -------------------------------\n    Success!! Now restart Apache server: sudo systemctl restart httpd
\n

Попробуем добавить конфигурацию виртуального хоста с ssl

\n
    sudo nano /etc/httpd/conf/sites-available/localhost-ssl.conf\n    \n\n    <VirtualHost *:443>\n        ServerAdmin webmaster@localhost\n        ServerName localhost\n        DocumentRoot /mnt/srv/www/localhost/public\n    \n        LogLevel info ssl:warn\n    \n        <Directory \"/mnt/srv/www/localhost/public\">\n            Options FollowSymLinks\n            AllowOverride All\n            Require all granted\n        </Directory>\n    \n        ErrorLog \"/mnt/srv/logs//localhost.error.log\"\n        CustomLog \"/mnt/srv/logs/localhost.access.log\" combined\n    \n        SSLEngine on\n        SSLCertificateFile      /etc/httpd/conf/ssl/localhost.crt\n        SSLCertificateKeyFile   /etc/httpd/conf/ssl/localhost.key\n    \n        <FilesMatch \"\\.(cgi|shtml|phtml|php)$\">\n            SSLOptions +StdEnvVars\n        </FilesMatch>\n    \n        BrowserMatch \"MSIE [2-6]\" \\\n            nokeepalive ssl-unclean-shutdown \\\n            downgrade-1.0 force-response-1.0\n    \n        BrowserMatch \"MSIE [17-9]\" ssl-unclean-shutdown\n    </VirtualHost>
\n

Перезапускаем apach и пробуем наш https

\n
    sudo systemctl restart httpd
","excerpt":"Актуально на апрель 2016. Версия apache, php, mysql: Я не буду подробно акцентироват внимание на конфигурировании, лишь общие настройки. Для…"}},"pageContext":{"isCreatedByStatefulCreatePages":false,"type":"posts","next":{"frontmatter":{"path":"/pierieshiol-na-fedo/","title":"Перешёл на Fedora","tags":["Linux","Fedora"]},"fileAbsolutePath":"/srv/www/softroot.ru/src/posts/pierieshiol-na-fedo.md"},"previous":null}}