Re: Server software (web server, database and backup)?

[email protected] Mon, 23 Sep 2013 13:20:04 +0400
Newsgroups gmane.linux.openwall.user
Message-ID <[email protected]>
On 21-Sep-2013 16:51:58 -0400, Jeffrey Walton wrote:

 > I did not see Apache or Ngix, so I'm wondering what the hardened
 > web server is used by Openwall.

I use both:

ftp://gremlin.people.openwall.com/pub/linux/Owl/SRPMS/httpd-2.2.25-g1.src.rpm
(with fully-rewritten SUexec capable of running PHP scripts via CGI)

ftp://gremlin.people.openwall.com/pub/linux/Owl/SRPMS/nginx-1.4.2-g1.src.rpm
(frontend for the above, not thoroughly checked yet)

Given the deficite of IPv4 addresses, I run Nginx at the OpenVZ host as a
frontend for the httpd instances running in separate containers.

 > I did not see PostgreSQL or MySQL either.

ftp://gremlin.people.openwall.com/pub/linux/Owl/SRPMS/mysql-5.1.70-g1.src.rpm
(there's 5.6.13, but it still isn't ready for first-time installation, only
for updates)

ftp://gremlin.people.openwall.com/pub/linux/Owl/SRPMS/postgresql-8.3.5-g1.src.rpm
(no version 9 yet, but that's on my agenda)

 > And I have no idea about backup programs.

ftp://gremlin.people.openwall.com/pub/linux/Owl/SRPMS/rsync-3.0.9-g1.src.rpm
(I'm quite happy with it, as it allows quick migration of OpenVZ containers
to other hosts)

And, of course, /usr/bin/tar :-)

 > Would anyone be able to point out what Openwall provides or
 > recommends fro web server, database and backup?

For generic LAMP server, I use the abovementioned packages together with
ftp://gremlin.people.openwall.com/pub/linux/Owl/SRPMS/php-5.3.21-g2.src.rpm
(slightly patched for running via suexec)


-- 
Alexey V. Vissarionov aka Gremlin from Kremlin <gremlin ПРИ gremlin ТЧК ru>
GPG: 8832FE9FA791F7968AC96E4E909DAC45EF3B1FA8 @ hkp://keys.gnupg.net
signature.asc (application/pgp-signature, 836 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=IV/V
-----END PGP SIGNATURE-----