P0L0's Blog » apache http://p0l0.binware.org Opensource Projects and IT experiences Sun, 30 Oct 2011 08:39:29 +0000 en hourly 1 http://wordpress.org/?v= Git Over HTTP (git-http-backend) http://p0l0.binware.org/index.php/2011/08/26/git-over-http-git-http-backend/ http://p0l0.binware.org/index.php/2011/08/26/git-over-http-git-http-backend/#comments Fri, 26 Aug 2011 19:03:37 +0000 P0L0 http://p0l0.binware.org/?p=1036 I found really annoying that all Git guides I found talked about using Git over SSH, thats because I googled until I found that Git now comes with git-http-backend, which lets you to configure your webserver to serve git over HTTP/HTTPS.



Here is a little guide how to setup git-http-backend using apache. First of all we need to install git on our server:

apt-get install git-core

Once git is installed we will found git-http-backend under /usr/lib/git-core/git-http-backend. Next step is to setup the Apache configuration:

<IfModule mod_ssl.c>
<VirtualHost *:443>
    SSLEngine on
 
    SSLCertificateFile /etc/ssl/server.crt
    SSLCertificateKeyFile /etc/ssl/server.key
    SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
 
    ServerName git.example.com
    ErrorLog /var/log/apache2/git-error.log
    CustomLog /var/log/apache2/git-access.log combined
 
    # GIT Config
    SetEnv GIT_PROJECT_ROOT /opt/git/repositories
    SetEnv GIT_HTTP_EXPORT_ALL
 
    # Route Git-Http-Backend
    ScriptAlias / /usr/lib/git-core/git-http-backend/
 
    # Require Acces for all resources
    <Location />
        AuthType Basic
        AuthName "Private"
        Require valid-user
        AuthUserFile /opt/git/user.passwd
    </Location>
</VirtualHost>
</IfModule>

Now we only need to create our repositories under /opt/git/repositories (The repositories must be owned by the apache user to work):

cd /opt/git/repositories
git --bare init test.git
chown -R www-data:www-data /opt/git/repositories

And thats all, now we can checkout the repository using the url https://git.example.com/test.git:

git clone https://username@git.example.com/test.git
cd test
mkdir testdir
touch testdir/README
git add .
git commit -m 'test commit'
git push origin master

This two environment variables are usefull to avoid problems checking out your repository:

# Disable SSL Certificate verification,
# usefull with self-signed certificates
export GIT_SSL_NO_VERIFY=true

# Activates verbosity for HTTP Requests
export GIT_CURL_VERBOSE=1
]]> http://p0l0.binware.org/index.php/2011/08/26/git-over-http-git-http-backend/feed/ 0 ChiliProject 1.4.0 + Ruby Enterprise + Passenger + Apache2 http://p0l0.binware.org/index.php/2011/05/30/redmine-1-2-ruby-enterprise-passenger-apache2/ http://p0l0.binware.org/index.php/2011/05/30/redmine-1-2-ruby-enterprise-passenger-apache2/#comments Mon, 30 May 2011 18:29:43 +0000 P0L0 http://p0l0.binware.org/?p=732 I was a happy Trac user, but after seeing Redmine, I realized that Trac has many missing features and that you must do a lot of things with plugins, Redmine has this features out-of-box. After working a bit with Redmine I discovered ChiliProject, which is a fork of Redmine, and its actually compatible with Redmine Themes and Plugins.

Here is a comparison of Redmine/ChiliProject and Trac features:

Feature Redmine/ChiliProject Trac
Multiple projects support Yes No (with plugin, planned 0.14)
Flexible role based access control Yes No
Flexible issue tracking system Yes Yes (no bulk ticket changes and ticket dependencies)
Gantt chart and calendar Yes No (GanttCalendarPlugin)
Feeds & email notifications Yes Yes
Per project wiki Yes Yes
Per project forums Yes No (DiscussionPlugin)
Time tracking Yes No (Plugins or custom field)
Custom fields for issues, time-entries, projects and users Yes Yes (editing trac.ini)
SCM integration SVN, CVS, Git, Mercurial, Bazaar and Darcs SVN in core, others with Plugins
Issue creation via email Yes No (MailToTracPlugin)
Multiple LDAP authentication support Yes No (LDAPPlugin)
User self-registration support Yes No (AccountManagerPlugin)
Multilanguage support Yes Yes
Multiple databases support MySQL, PostgreSQL, SQLite MySQL (unstable), PostgreSQL, SQLite
iPhone/Android Apps Yes No

The first thing that made me not to test Redmine/ChiliProject immediately was that it is RoR and the complexity to make it run stable under apache, but after searching a bit, I found Phusion Passenger and Ruby Enterprise, which is a very good solution to run RoR products stable under Apache, and you have the ability to run Ruby with custom user, usefull for shared environments.

Installation

  1. Ruby Enterprise

    I downloaded and installer from source code, so that it’s compiled for my server and I can store it in a specific location. So, the first we have to do is download latest version from Ruby Enterprise Download page

    wget http://rubyenterpriseedition.googlecode.com/files/ruby-enterprise-1.8.7-2011.03.tar.gz
tar zxvf ruby-enterprise-1.8.7-2011.03.tar.gz
cd ruby-enterprise-1.8.7-2011.03
./installer

    Follow installer instructions, and install dependencies if needed (the installer tells us which packages we need for our Linux distro)

  2. Phusion Passenger

    Next thing to do, is install the Passanger module for apache, this can be done with the passenger-install-apache2-module script available at Ruby Enterprise installation

    cd /opt/ruby-enterprise-1.8.7-2011.03/bin
./passenger-install-apache2-module

    This script also checks the dependencies and says what packages you need for your Linux distro

  3. Apache

    Now we need to configure apache, first we need to activate and configure the passenger module

    /etc/apache2/mods-enabled/passenger.load

    LoadModule passenger_module /opt/ruby-enterprise-1.8.7-2011.03/lib/ruby/gems/1.8/gems/passenger-3.0.7/ext/apache2/mod_passenger.so

    /etc/apache2/mods-enabled/passenger.conf

    <ifmodule mod_passenger.c>
  PassengerRoot /opt/ruby-enterprise-1.8.7-2011.03/lib/ruby/gems/1.8/gems/passenger-3.0.7
  PassengerRuby /opt/ruby-enterprise-1.8.7-2011.03/bin/ruby
 
  PassengerFriendlyErrorPages Off
  PassengerUserSwitching On
  PassengerDefaultUser www-data
  PassengerDefaultGroup www-data
</ifmodule>

    And the last thing is configure a vhost under which we will run this ChiliProject installation

    /etc/apache2/sites-enabled/chiliproject

    NameVirtualHost *:443
<virtualhost *:443>
	SSLEngine on
 
	SSLCertificateFile    /etc/apache2/ssl/server.crt
	SSLCertificateKeyFile /etc/apache2/ssl/server.key
 
	<ifmodule mod_passenger.c>
		PassengerUser chiliproject
		PassengerGroup chiliproject
	</ifmodule>
 
        ServerAdmin webmaster@chiliproject.org
	ServerName chiliproject.org
 
	DocumentRoot /home/chiliproject/public
	<directory />
		Options -MultiViews
		AllowOverride All
	< /Directory>
 
	ErrorLog /var/log/apache2/chiliproject-error.log
 
	CustomLog /var/log/apache2/chiliproject-access.log combined
</virtualhost>

  4. ChiliProject

    First install needed gems

    /opt/ruby-enterprise-1.8.7-2011.03/bin/gem install -v=0.4.2 i18n
/opt/ruby-enterprise-1.8.7-2011.03/bin/gem install -v=1.0.1 rack
/opt/ruby-enterprise-1.8.7-2011.03/bin/gem install mysql

    Download the last available ChiliProject version from ChiliProject Files Page

    wget https://www.chiliproject.org/attachments/download/99/chiliproject-1.4.0.tar.gz
tar zxvf chiliproject-1.4.0.tar.gz
mv chiliproject-1.4.0 /home/chiliproject

    Create the mysql database and user for ChiliProject

    CREATE DATABASE chiliproject CHARACTER SET utf8 COLLATE utf8_unicode_ci;
GRANT ALL privileges ON chiliproject.* TO 'chiliproject'@'localhost' IDENTIFIED BY 'my_password';

    Configure ChiliProject Database Connection

    mv config/database.yml.example config/database.yml
    production:
  adapter: mysql
  database: chiliproject
  host: localhost
  username: chiliproject
  password: my_password

    Now initialize ChiliProject (session Store, DB Tables, DB Default Data

    /opt/ruby-enterprise-1.8.7-2011.03/bin/rake generate_session_store
RAILS_ENV=production /opt/ruby-enterprise-1.8.7-2011.03/bin/rake db:migrate
RAILS_ENV=production /opt/ruby-enterprise-1.8.7-2011.03/bin/rake redmine:load_default_data

    And the last thing we need to do before we can restart apache and begin to use the new installed ChiliProject, we need to create the chiliproject user

    adduser --home /home/chiliproject --shell /bin/false --no-create-home chiliproject
chown -R chiliproject:chiliproject /home/chiliproject

  5. (Optinal) Rmagick

    If we would like to enable Gantt export to png image we need to install Rmagick (available as gem). First we need to install imagemagick ang graphicsmagick dev packages and then we can install the rmagick gem.

    apt-get install libmagickcore-dev libgraphicsmagick1-dev libmagickwand-dev
/opt/ruby-enterprise-1.8.7-2011.03/bin/gem install rmagick

Now we only need to restart Apache and load ChiliProject in our Browser. The default user is admin/admin

]]> http://p0l0.binware.org/index.php/2011/05/30/redmine-1-2-ruby-enterprise-passenger-apache2/feed/ 0 Installing TRAC with mod_wsgi using virtualenv http://p0l0.binware.org/index.php/2010/05/10/installing-trac-with-mod_wsgi-using-virtualenv/ http://p0l0.binware.org/index.php/2010/05/10/installing-trac-with-mod_wsgi-using-virtualenv/#comments Mon, 10 May 2010 19:33:03 +0000 P0L0 http://p0l0.binware.org/?p=664 This guide is for installing Trac as a user using virtualenv for a isolated Python environment so that the whole installation runs under a specific user.

First of all we need to install needed packages

apt-get install libapache2-mod-wsgi python-virtualenv python-setuptools

Once we have installed the required packages proceed to create the Python environment

mkdir /usr/local/trac
cd /usr/local/trac
virtualenv python

We now have the isolated Python environment locate under /usr/local/trac/python.

To make possible to use easy_install with repositories we need to upgrade easy_install. I use this to install Trac plugins directly from SVN.

/usr/local/trac/python/bin/easy_install -U trunk

We now can install trac 0.12 using the 0.12b1 SVN Tag (http://svn.edgewall.com/repos/trac/tags/trac-0.12b1 or Trac==0.12b1) or directly from SVN Trunk:

/usr/local/trac/python/bin/easy_install http://svn.edgewall.org/repos/trac/trunk

This will download and install the latest trunk version for Trac.

To have webaccess to the Trac projects, we need a .wsgi script, were we define where our local python environment is located:

# Not needed if mod_wsgi >= 3.0
import sys
sys.stdout = sys.stderr
 
# Load Trac
import trac.web.main
application = trac.web.main.dispatch_request

And finally we need to configure apache. If you want only one Trac project, you should define trac.env to the location of your trac, but if you want multiproject support, you must use trac.env_parent_dir (this is what I used)

<virtualhost *:80>
    ServerName trac.dns.com
 
    DocumentRoot /usr/local/trac/htdocs
    ErrorLog /var/log/apache2/trac-error.log
    CustomLog /var/log/apache2/trac-access.log combined
 
    # Trac Auth
    <location />
        AuthType Basic
        AuthName "Trac"
        AuthUserFile /usr/local/trac/.htpasswd
        Require valid-user
    < /location>
 
    #Trac
    #Define ProcessGroup with user and group under which it should run
    WSGIDaemonProcess trac user=trac group=trac python-path=/usr/local/trac/python/lib/python2.5/site-packages python-eggs=/usr/local/trac/python/cache
    WSGIScriptAlias / /usr/local/trac/htdocs/trac.wsgi
 
    <directory /usr/local/trac/htdocs>
        WSGIProcessGroup trac
        WSGIApplicationGroup %{GLOBAL}
        SetEnv trac.env_parent_dir /usr/local/trac/projects
    </directory>
</virtualhost>

We need to create the user and change the permissions for /usr/local/trac for that user trac

adduser --home /usr/local/trac --shell /bin/false --no-create-home trac
chown -R trac:trac /usr/local/trac

If you get an error “ImportError: No module named simplejson” just install it using easy_install

/usr/local/trac/python/bin/easy_install simplejson

]]> http://p0l0.binware.org/index.php/2010/05/10/installing-trac-with-mod_wsgi-using-virtualenv/feed/ 5 Recompilar MAMP http://p0l0.binware.org/index.php/2008/08/11/recompilar-mamp/ http://p0l0.binware.org/index.php/2008/08/11/recompilar-mamp/#comments Mon, 11 Aug 2008 11:50:41 +0000 P0L0 http://p0l0.binware.org/?p=275 El soporte de LDAP en MAMP 1.7.1 esta roto asi que tube que recompilar el PHP, lo cual me obligo a recompilar todas sus dependencias, pero como no encontre ninguna guia de como realizarlo correctamente, aqui esta como lo hice yo.

Lo primero es descargarse el codigo fuente proporcionado por la gente de MAMP, y su version compilada.

Codigo fuente: MAMP 1.7.1 (src)

Version Intel: MAMP 1.7.1 (intel)

Version PPC: MAMP 1.7.1 (ppc)

Una vez que tengamos esto, hay que instalar MAMP la version compilada en /Applications y asi ya tenemos toda la estructura correcta lista para solo recompilar lo necesario.

Ahora descomprimimos el codigo fuente y vamos compilando las diferentes librerias:

CURL

tar zxvf curl-7.16.2.tar.gz
cd curl-7.16.2
./configure --prefix=/Applications/MAMP/Library
make
make install

Freetype

tar zxvf freetype-2.3.4.tar.gz
cd freetype-2.3.4
./configure --enable-shared --configure=/Applications/MAMP/Library/
make
make install

Gettext

tar zxvf gettext-0.16.1.tar.gz
cd gettext-0.16.1
./configure --prefix=/Applications/MAMP/Library
make
make install

IMAP (Parche para osx: imap-2006i-osx.patch)

tar zxvf imap-2006i.tar.Z
cd imap-2006i
patch -p1 &lt; imap-2006i-osx.patch
make oxp
cp c-client/*.h /Applications/MAMP/Library/lib/imap-2006i/include/
cp c-client/*.c /Applications/MAMP/Library/lib/imap-2006i/lib/
cp c-client/c-client.a /Applications/MAMP/Library/lib/imap-2006i/lib/libc-client.a

JPEG

tar zxvf jpegsrc.v6b.tar.gz
cd jpeg-6b
./configure --enable-shared --prefix=/Applications/MAMP/Library
ln -s `which glibtool` ./libtool
make
make install

libiconv

tar zxvf libiconv-1.11.tar.gz
cd libiconv-1.11
./configure --enable-shared --prefix=/Applications/MAMP/Library
make
make install

LibIdn

tar xvfz libidn-0.6.14.tar.gz
cd libidn-0.6.14
./configure --enable-shared --prefix=/Applications/MAMP/Library/
make
make install

libmcrypt

tar zxvf libmcrypt-2.5.8.tar.gz
cd libmcrypt-2.5.8
./configure --enable-shared --prefix=/Applications/MAMP/Library/
make
make install

libpng

tar zxvf libpng-1.2.18.tar.gz
cd libpng-1.2.18
./configure --enable-shared --prefix=/Applications/MAMP/Library
make
make install

libxml

tar zxvf libxml2-2.6.29.tar.gz
cd libxml2-2.6.29
./configure --enable-shared --prefix=/Applications/MAMP/Library
make
make install

libxst

tar zxvf libxslt-1.1.21.tar.gz
cd libxslt-1.1.21
./configure --enable-shared --prefix=/Applications/MAMP/Library/ --with-libxml-prefix=/Applications/MAMP/Library/
make
make install

t1lib

tar zxvf t1lib-5.1.1.tar.gz
cd t1lib-5.1.1
./configure --enable-shared --prefix=/Applications/MAMP/Library/
make without_doc
make install

libexpat

Esta libreria es necesaria y no esta incluida, asi que hay que bajarla de http://sourceforge.net/projects/expat/

tar zxvf expat-2.0.1.tar.gz
cd expat-2.0.1
./configure --enable-shared --prefix=/Applications/MAMP/Library/
make
make install

MySQL

tar xvfz mysql-5.0.41.tar.gz
cd mysql-5.0.41
./configure --prefix=/Applications/MAMP/Library --with-unix-socket-path=/Applications/MAMP/tmp/mysql/mysql.sock --with-tcp-port=9999 --localstatedir=/Applications/MAMP/db/mysql/
make
make install

Apache2

tar zxvf httpd-2.0.59.tar.gz
cd httpd-2.0.59
./configure --prefix=/Applications/MAMP/Library --sysconfdir=/Applications/MAMP/conf/apache --enable-nonportable-atomics --enable-so --enable-cgid --enable-auth-anon --enable-auth-dbm --enable-auth-digest --enable-file-cache --enable-echo --enable-charset-lite --enable-cache --enable-disk-cache --enable-mem-cache --enable-example --enable-ext-filter --enable-case-filter --enable-case-filter-in --enable-deflate --enable-mime-magic --enable-cern-meta --enable-expires --enable-headers --enable-usertrack --enable-unique-id --enable-proxy --enable-proxy-connect --enable-proxy-ftp --enable-proxy-http --enable-bucketeer --enable-http --enable-info --enable-cgid --enable-vhost-alias --enable-speling --enable-rewrite --enable-so --with-ssl=/usr --enable-dav --enable-dav-fs --enable-ssl=shared --enable-mods-shared=most --with-mpm=prefork --without-berkeley-db
make

Si al compilar nos aparece este error:

endrecv.c:965:2: error: #error APR has detected sendfile on your system, but nobody has written a
sendrecv.c:966:2: error: #error version of it for APR yet. To get past this, either write apr_sendfile
sendrecv.c:967:2: error: #error or change APR_HAS_SENDFILE in apr.h to 0.

Entonces tenemos que editar el fichero srclib/apr/include/apr.h y cambiar la linea #define APR_HAS_SENDFILE 1 por #define APR_HAS_SENDFILE 0

Y finalmente para instalar

make install

PHP

tar zxvf php-5.2.5.tar.gz
cd php-5.2.5
./configure --with-mysql=/Applications/MAMP/Library --with-apxs2=/Applications/MAMP/Library/bin/apxs --with-gd --with-jpeg-dir=/Applications/MAMP/Library --with-png-dir=/Applications/MAMP/Library --with-zlib --with-freetype-dir=/Applications/MAMP/Library --prefix=/Applications/MAMP/bin/php5 --exec-prefix=/Applications/MAMP/bin/php5 --sysconfdir=/Applications/MAMP/conf/php5 --with-soap --with-config-file-path=/Applications/MAMP/conf/php5 --enable-track-vars --enable-bcmath --enable-ftp --enable-gd-native-ttf --with-bz2=/usr --with-ldap --with-mysqli=/Applications/MAMP/Library/bin/mysql_config --with-sqlite --with-ttf --with-t1lib=/Applications/MAMP/Library --enable-mbstring=all --with-curl=/Applications/MAMP/Library --enable-dbx --enable-sockets --enable-bcmath --with-imap=shared,/Applications/MAMP/Library/lib/imap-2006i --enable-soap --with-kerberos --enable-calendar --with-pgsql=shared,/Applications/MAMP/Library/pg --enable-dbase --enable-exif --with-libxml-dir=/Applications/MAMP/Library --with-gettext=shared,/Applications/MAMP/Library --with-xsl=/Applications/MAMP/Library --with-pdo-mysql=shared,/Applications/MAMP/Library --with-pdo-pgsql=shared,/Applications/MAMP/Library/pg --with-mcrypt=shared,/Applications/MAMP/Library --with-openssl --with-iconv=shared,/Applications/MAMP/Library
make
make test
make install

Y con esto ya tenemos recompilado el MAMP y listos para funcionar. En cualquiera de las opciones se puede aprovechar para cambiar opciones, añadir o quitar modules, etc…

]]> http://p0l0.binware.org/index.php/2008/08/11/recompilar-mamp/feed/ 3