Category: 服务器

Linux or Windows Server

实现DirectAdmin使用PHP-CLI模式的站点独立用户与查看各用户资源占用情况

用过DirectAdmin的都知道，CLI是个坑爹货：网站目录非rwxrwxrwx(777)权限无法写入，无法查看是哪个用户占用较多的资源，甚至无法正常使用opcode cache的PHP组件。我们来研究下DirectAdmin的站点的配置文件：

# Auto generated apache config file by DirectAdmin version 1.42.1
# Modifying this file is not recommended as any changes you make will be
# overwritten when the user makes any changes to his/her website

# For global config changes that affect all Users, see this guide:
# http://help.directadmin.com/item.php?id=2
# For local config changes that only affect one User, see this guide:
# http://help.directadmin.com/item.php?id=3

# Frontpage requires these parameters in every httpd.conf file or else
# it won't work.
ServerRoot /etc/httpd

<VirtualHost HIDE:80 >

        ServerName www.360buy.com
        ServerAlias www.360buy.com 360buy.com
        ServerAdmin webmaster@360buy.com
        DocumentRoot /home/admin/domains/360buy.com/public_html
        ScriptAlias /cgi-bin/ /home/admin/domains/360buy.com/public_html/cgi-bin/

        UseCanonicalName OFF

        <IfModule !mod_ruid2.c>
                SuexecUserGroup admin admin
        </IfModule>
        <IfModule mod_ruid2.c>
                RMode config
                RUidGid admin admin
                RGroups apache access
        </IfModule>

        CustomLog /var/log/httpd/domains/360buy.com.bytes bytes
        CustomLog /var/log/httpd/domains/360buy.com.log combined
        ErrorLog /var/log/httpd/domains/360buy.com.error.log

        <Directory /home/admin/domains/360buy.com/public_html>
                Options +Includes -Indexes

                php_admin_flag safe_mode OFF

                php_admin_flag engine ON
                php_admin_value sendmail_path '/usr/sbin/sendmail -t -i -f admin@360buy.com'

        </Directory>

</VirtualHost>

# Auto generated apache config file by DirectAdmin version 1.42.1

# Modifying this file is not recommended as any changes you make will be

# overwritten when the user makes any changes to his/her website

# For global config changes that affect all Users, see this guide:

# http://help.directadmin.com/item.php?id=2

# For local config changes that only affect one User, see this guide:

# http://help.directadmin.com/item.php?id=3

# Frontpage requires these parameters in every httpd.conf file or else

# it won't work.

ServerRoot /etc/httpd

ServerName www.360buy.com

ServerAlias www.360buy.com 360buy.com

ServerAdmin webmaster@360buy.com

DocumentRoot /home/admin/domains/360buy.com/public_html

ScriptAlias /cgi-bin/ /home/admin/domains/360buy.com/public_html/cgi-bin/

UseCanonicalName OFF

SuexecUserGroup admin admin

</IfModule>

RMode config

RUidGid admin admin

RGroups apache access

</IfModule>

CustomLog /var/log/httpd/domains/360buy.com.bytes bytes

CustomLog /var/log/httpd/domains/360buy.com.log combined

ErrorLog /var/log/httpd/domains/360buy.com.error.log

Options +Includes -Indexes

php_admin_flag safe_mode OFF

php_admin_flag engine ON

php_admin_value sendmail_path '/usr/sbin/sendmail -t -i -f admin@360buy.com'

</Directory>

</VirtualHost>

关键，就在SuexecUserGroup这里，这里定义了站点的执行PHP脚本时所使用的用户身份，这样可以给不同网站的目录不同的所有者，且无需再特意给某些文件设置rwxrwxrwx(777)权限。然而，这个东西在CGI模式下工作正常，而CLI却不正常。貌似mod_ruid2.c是Su […]

使用Varnish Cache时，让Nginx获取访客真实IP

之前发表过一篇文章：Varnish(前)+Nginx(中)时,让Apache(后)获取用户真实IP(多重代理) 该方法能成功解决使用或者不使用CDN时，在Varnish前端，Nginx中端，Apache解析PHP文件的情况下让Apache获取访客真实IP。因为当时主要是利用Nginx进行缓存，没使用其他功能，旧没让Nginx也获取访客真实的IP。其中Varnish处理XFF的关键代码：

     if (req.restarts == 0) {
        if (req.http.x-forwarded-for) {
#           set req.http.X-Forwarded-For =
#               req.http.X-Forwarded-For + ", " + client.ip;
        } else {
            set req.http.X-Forwarded-For = client.ip;
        }
     }

if (req.restarts == 0) {

if (req.http.x-forwarded-for) {

# set req.http.X-Forwarded-For =

# req.http.X-Forwarded-For + ", " + client.ip;

} else {

set req.http.X-Forwarded-For = client.ip;

}

也就是把客户的IP赋值给XFF。那样后端处理就方便多了。昨天在为一台Varnish+Nginx+Apache的服务器添加并测试防轻量级CC的 […]

解决PHP加载组件提示：PHP Warning: PHP Startup: Unable to load dynamic library ‘./apc.so’ – ./apc.so: cannot open shared object file: No such file or directory in Unknown on line 0

前面发表了一篇文章：APC3.1.9自动安装脚本For DirectAdmin 给另一台PHP版本为5.2.17的服务器使用时，发现APC组件没有成功加载，PHP探针里面无法检测到，起初以为路径的问题，于是把php.ini里面的：

extension="apc.so"

1	extension="apc.so"

更改为：

extension=/usr/local/php5/lib/php/extensions/no-debug-non-zts-20060613/apc.so

1	extension=/usr/local/php5/lib/php/extensions/no-debug-non-zts-20060613/apc.so

但是很可惜，仍然不行。尝试重新编译安装APC，依然是那样。想起有错误日志，于是打开看了下，果然，N行同样的错误记录：

……
[Fri Jun 07 12:03:24 2013] [error] [client 113.78.38.90] PHP Warning:  PHP Startup: Unable to load dynamic library './apc.so' - ./apc.so: cannot open shared object file: No such file or directory in Unknown on line 0, referer: http://test.com/tz.php
……

……

[Fri Jun 07 12:03:24 2013] [error] [client 113.78.38.90] PHP Warning: PHP Startup: Unable to load dynamic library './apc.so' - ./apc.so: cannot open shared object file: No such file or directory in Unknown on line 0, referer: http://test.com/tz.php

……

貌似是./有问题，使得PHP在./，也 […]

运营维护

APC3.1.9自动安装脚本For DirectAdmin with PHP-CGI

应客户的要求，给LANVMP虚拟主机添加了APC组件，以提高PHP的执行效率。步骤和其他PHP组件一样，wget，phpize，configure，make，make install，修改php.ini，重启apache。为了方便下次使用，于是写了个Shell Script共享出来，利人利己。该Shell Scripts文件的使用方法：

wget http://soft.yzs.me/apc.sh

chmod +x apc.sh

./apc.sh

wget http://soft.yzs.me/apc.sh

chmod +x apc.sh

./apc.sh

然后使用PHP探针检测下，看到APC处显示3.1.9即表示安装成功。该Shell Scripts的内容如下：

yum install autoconf make
dir=$(pwd -P)
wget http://pecl.php.net/get/APC-3.1.9.tgz
tar zxvf $dir/APC*.tgz
cd $dir/APC*
/usr/local/php5/bin/phpize
$dir/APC*/configure --enable-apc --enable-apc-mmap --with-apxs=path-to-apache/bin/apxs --with-php-config=/usr/local/php5/bin/php-config
make;make install
echo "extension=\"apc.so\"">>/usr/local/etc/php5/cgi/php.ini
service httpd restart

yum install autoconf make

dir=$(pwd -P)

wget http://pecl.php.net/get/APC-3.1.9.tgz

tar zxvf $dir/APC*.tgz

cd $dir/APC*

/usr/local/php5/bin/phpize

$dir/APC*/configure --enable-apc --enable-apc-mmap --with-apxs=path-to-apache/bin/apxs --with-php-config=/usr/local/php5/bin/php-config

make;make install

echo "extension=\"apc.so\"">>/usr/local/etc/php5/cgi/php.ini

service httpd restart

一次有惊无险的数据恢复

昨晚逛自己博客的时候，发现单手摘JJ的头像变成“无头像”的那种了！查证了下，是缓存的问题，要解决？很简单，清除缓存就行了。结果由于一时粗心，误在博客的根目录执行了rm -rf *,然后Ctrl+F5。403！再次F5，403，F5，403，F5，403…… 当时瞬间惊呆了！我干了啥？我在做梦吧！不是做梦，没其他办法，唯一的希望就是数据恢复了！Linux上的数据恢复，我还没试过，不过，为了自己的博客，只能尽力而为了！谷歌百度，尝试了debugfs，ext3grep。 debugfs，恢复的文件夹是一个文件……ext3grep，搞了一堆不知道啥，满屏幕的DDDDDDDDDDDDDDDDDDD […]