Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 23 Sep 2013 13:20:04 +0400
From: gremlin@...mlin.ru
To: owl-users@...ts.openwall.com
Subject: Re: Server software (web server, database and backup)?

On 21-Sep-2013 16:51:58 -0400, Jeffrey Walton wrote:

 > I did not see Apache or Ngix, so I'm wondering what the hardened
 > web server is used by Openwall.

I use both:

ftp://gremlin.people.openwall.com/pub/linux/Owl/SRPMS/httpd-2.2.25-g1.src.rpm
(with fully-rewritten SUexec capable of running PHP scripts via CGI)

ftp://gremlin.people.openwall.com/pub/linux/Owl/SRPMS/nginx-1.4.2-g1.src.rpm
(frontend for the above, not thoroughly checked yet)

Given the deficite of IPv4 addresses, I run Nginx at the OpenVZ host as a
frontend for the httpd instances running in separate containers.

 > I did not see PostgreSQL or MySQL either.

ftp://gremlin.people.openwall.com/pub/linux/Owl/SRPMS/mysql-5.1.70-g1.src.rpm
(there's 5.6.13, but it still isn't ready for first-time installation, only
for updates)

ftp://gremlin.people.openwall.com/pub/linux/Owl/SRPMS/postgresql-8.3.5-g1.src.rpm
(no version 9 yet, but that's on my agenda)

 > And I have no idea about backup programs.

ftp://gremlin.people.openwall.com/pub/linux/Owl/SRPMS/rsync-3.0.9-g1.src.rpm
(I'm quite happy with it, as it allows quick migration of OpenVZ containers
to other hosts)

And, of course, /usr/bin/tar :-)

 > Would anyone be able to point out what Openwall provides or
 > recommends fro web server, database and backup?

For generic LAMP server, I use the abovementioned packages together with
ftp://gremlin.people.openwall.com/pub/linux/Owl/SRPMS/php-5.3.21-g2.src.rpm
(slightly patched for running via suexec)


-- 
Alexey V. Vissarionov aka Gremlin from Kremlin <gremlin ПРИ gremlin ТЧК ru>
GPG: 8832FE9FA791F7968AC96E4E909DAC45EF3B1FA8 @ hkp://keys.gnupg.net

Content of type "application/pgp-signature" skipped

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ