11#! /bin/sh
22#
3+ # rev 0.6
4+ #
35# dxr@brutalsec.net
46# 01-09-2009
57#
1618# Only apache and php packages aren't installed in real system,
1719# only in chroot enviroment with symbolic links from real system.
1820#
19- # Please, configure chroot enviroment if security is really
20- # important for you and you known how to work it !
21+ # PLEASE, CONFIGURE CHROOT ENVIROMENT IF SECURITY IS REALLY
22+ # IMPORTANT FOR YOU AND YOU KNOWN HOW TO WORK IT !
2123#
2224
2325exit 1
@@ -66,7 +68,7 @@ dpkg -l|egrep --color -i 'apache|php'
6668
6769
68704. Prepair Chroot enviroment
69- apt-get install debootstrap libpcre3 libaprutil1 libxml2 mime-support patch make gcc mysql-server
71+ apt-get install debootstrap libpcre3 libaprutil1 libxml2 mime-support patch make gcc mysql-server subversion
7072time debootstrap --arch=amd64 lenny /var/www/html/ ftp://ftp.fr.debian.org/debian/
7173
7274echo " /proc /var/www/html/proc proc defaults 0 0" >> /etc/fstab
@@ -93,9 +95,9 @@ mv /usr/lib/php5 /usr/lib/php5_old
9395mv /etc/apache2 /etc/apache2_old
9496mv /etc/suphp /etc/suphp_old
9597
96- chroot /var/www/html apt-get install apache2 apache2.2-common apache2-doc apache2-mpm-prefork apache2-utils libexpat1 ssl-cert libapache2-mod-php5 php5 php5-common php5-gd php5-mysql php5-imap phpmyadmin php5-cli php5-cgi libapache2-mod-fcgid apache2-suexec php-pear php-auth php5-mcrypt mcrypt php5-imagick imagemagick libapache2-mod-suphp libopenssl-ruby libapache2-mod-chroot php-apc subversion vim
98+ chroot /var/www/html apt-get install apache2 apache2.2-common apache2-doc apache2-mpm-prefork apache2-utils libexpat1 ssl-cert libapache2-mod-php5 php5 php5-common php5-gd php5-mysql php5-imap phpmyadmin php5-cli php5-cgi libapache2-mod-fcgid apache2-suexec php-pear php-auth php5-mcrypt mcrypt php5-imagick imagemagick libapache2-mod-suphp libopenssl-ruby libapache2-mod-chroot php-apc vim libdbd-mysql libdbi-perl
9799# The non webserver will install outside of chroot
98- apt-get install libdbi-perl postfix pure-ftpd-mysql amavisd-new clamav-getfiles clamav clamav-freshclam
100+ apt-get install postfix pure-ftpd-mysql amavisd-new clamav-getfiles clamav clamav-freshclam
99101# If you will use courier:
100102apt-get install courier-ssl courier-pop-ssl courier-pop courier-imap-ssl courier-imap courier-authdaemon
101103# If you will use dovecot:
@@ -135,10 +137,11 @@ ln -s /var/www/html/var/log/apache2 /var/log/apache2
135137ln -s /var/www/html/var/lock/apache2 /var/lock/apache2
136138ln -s /var/www/html/var/lib/apache2 /var/lib/apache2
137139ln -s /var/www/html/usr/lib/php5 /usr/lib/php5
138- # ln -s /var/www/html/usr/bin/php5 /usr/bin/php5
139- # ln -s /var/www/html/etc/alternatives/php /etc/alternatives/php
140- # ln -s /var/www/html/usr/bin/php /usr/bin/php
141-
140+ # Neccessary for to install ispconfig3 from real system:
141+ ln -s /var/www/html/usr/bin/php5 /usr/bin/php5
142+ ln -s /var/www/html/etc/alternatives/php /etc/alternatives/php
143+ ln -s /var/www/html/usr/bin/php /usr/bin/php
144+ ln -s /var/www/html/etc/php5 /etc/php5
142145
1431466. # Install mini_sendmail for chroot
144147# We can use mini_sendmail for delivery emails directy in remote servers, but i prefer to control it in central mailserver for check spammers and limit it.
@@ -183,9 +186,10 @@ Path to sendmail => /usr/sbin/mini_sendmail -t -i -fhosting@alojamientotecnico.c
183186
1841878. Install ispconfig ........
185188
186- chroot /var/www/html/
187189cd /tmp/
188190svn co svn://svn.ispconfig.org/ispconfig3 svn.ispconfig.org
191+ mv /usr/local/ispconfig /var/www/html/usr/local/
192+ ln -s /var/www/html/usr/local/ispconfig /usr/local/ispconfig
189193
190194# ## Migration to other server ###
191195Really easy:
0 commit comments