New file |
| | |
| | | |
| | | |
| | | Setting up a chrooted ispconfig 3 installation |
| | | -------------------------------------------------------------------- |
| | | |
| | | # Follow the steps 1 - 8 of the INSTALL_DEBIAN_5.0 Guide, then proceed |
| | | # with the steps below. |
| | | # |
| | | # This guide is experimental as there are a few cahnges nescessary in |
| | | # ispconfig to get it workin. These changes will be part of ISPConfig 3.0.2 |
| | | |
| | | # Install packages |
| | | |
| | | apt-get install debootstrap libapache2-mod-chroot |
| | | |
| | | # Create the chroot enviroment |
| | | |
| | | debootstrap lenny /var/www/ ftp://ftp.fr.debian.org/debian/ |
| | | |
| | | # Add mountpoints for the chroot env into the fstab file. |
| | | |
| | | echo "/proc /var/www/proc proc defaults 0 0">>/etc/fstab |
| | | echo "devpts /var/www/dev/pts devpts defaults 0 0">>/etc/fstab |
| | | |
| | | # mount the filesystems |
| | | |
| | | mount -a |
| | | |
| | | # add a default chroot dir for all users of the sshusers group. |
| | | |
| | | echo "@sshusers - chroot /var/www/">>/etc/security/limits.conf |
| | | |
| | | # copy passwd and group files to the chroot env. |
| | | |
| | | cp -rf /etc/apt /etc/passwd /etc/group /var/www/etc/ # Cleaning unecesary users and groups |
| | | |
| | | # Create symlinks. |
| | | |
| | | cd /var/www/var/ |
| | | rm -rf /var/www/var/www |
| | | ln -s / www |
| | | |
| | | # Enter the chroot |
| | | |
| | | chroot /var/www |
| | | |
| | | # Update files in the chroot enviroment and install some packages. |
| | | # You can ignore warnings about locales, we will fix them in the next step. |
| | | |
| | | apt-get update |
| | | apt-get install fakeroot --force-yes -y |
| | | apt-get install locales |
| | | |
| | | # Reconfigure locales. Select e.g the en_US* locales. |
| | | |
| | | dpkg-reconfigure locales |
| | | |
| | | # run a dist upgarde. |
| | | |
| | | fakeroot apt-get dist-upgrade |
| | | |
| | | # Install apache and php in the chroot enviroment |
| | | |
| | | apt-get install apache2 apache2.2-common apache2-doc apache2-mpm-prefork apache2-utils libexpat1 ssl-cert libapache2-mod-php5 php5 php5-common php5-gd php5-mysql php5-imap phpmyadmin php5-cli php5-cgi libapache2-mod-fcgid apache2-suexec php-pear php-auth php5-mcrypt mcrypt php5-imagick imagemagick libapache2-mod-suphp libopenssl-ruby |
| | | /etc/init.d/apache2 stop |
| | | |
| | | # Exit the chroot |
| | | |
| | | exit |
| | | |
| | | # Moving the apache configuration is not nescessary, as apache reads |
| | | # the config files before it moves into the chroot |
| | | # rm -rf /var/www/etc/apache2 |
| | | # mv -f /etc/apache2 /var/www/etc/ |
| | | # ln -s /var/www/etc/apache2 /etc/apache2 |
| | | |
| | | rm -rf /var/www/etc/php5/cgi/ |
| | | mv -f /etc/php5/cgi/ /var/www/etc/php5/ |
| | | ln -s /var/www/etc/php5/cgi /etc/php5/ |
| | | |
| | | rm -rf /var/www/etc/php5/apache2/ |
| | | mv -f /etc/php5/apache2/ /var/www/etc/php5/ |
| | | ln -s /var/www/etc/php5/apache2 /etc/php5/ |
| | | |
| | | ln -s /var/www/var/run/apache2.pid /var/run/apache2.pid |
| | | |
| | | # enable mod_chroot |
| | | |
| | | a2enmod mod_chroot |
| | | echo "ChrootDir /var/www" > /etc/apache2/conf.d/mod_chroot.conf |
| | | |
| | | # Start apache |
| | | |
| | | /etc/init.d/apache2 start |
| | | |
| | | # Install ISPConfig |
| | | |
| | | cd /tmp |
| | | wget http://www.ispconfig.org/downloads/ISPConfig-3.0.1.4-beta-2.tar.gz |
| | | tar xvfz ISPConfig-3.0.1.4-beta-2.tar.gz |
| | | cd ispconfig3_install/install/ |
| | | php -q install.php |
| | | cd /tmp/ |
| | | rm -rf ispconfig3_install |
| | | rm -f ISPConfig-3.0.1.4-beta-2.tar.gz |
| | | |
| | | # Move the ispconfig interface part to the chroot enviroment and create a symlink |
| | | |
| | | mkdir /var/www/usr/local/ispconfig |
| | | chown ispconfig:ispconfig /var/www/usr/local/ispconfig |
| | | chmod 750 /var/www/usr/local/ispconfig |
| | | mv /usr/local/ispconfig/interface /var/www/usr/local/ispconfig/ |
| | | ln -s /var/www/usr/local/ispconfig/interface /usr/local/ispconfig/interface |
| | | chroot /var/www adduser www-data ispconfig |
| | | |
| | | # Create a link for the mysql socket. |
| | | |
| | | ln /var/run/mysqld/mysqld.sock /var/www/var/run/mysqld/mysqld.sock |
| | | |
| | | # As an alternative to making a hardlink to the mysql socket, |
| | | # change the my.cnf file in the chroot to use tcp sockets. |
| | | # This is more secure but a bit slower then using the mysqld.sock file. |
| | | |
| | | # Restart apache |
| | | |
| | | /etc/init.d/apache2 restart |
| | | |
| | | |
| | | |