Home / user-22587

Rob's questions

Martin Hope
Rob
Asked: 2014-10-07 12:48:25 +0800 CST
  • 0

I inherited some EC2 (running AMI) instances at my new job and I am trying to figure out the method that my predecessor used to set them up. This might be a really basic question, but my knowledge of the ins and outs of runlevels and init are poor so I want to confirm.

Based on this output nginx shouldn't be automatically started at any runlevel, right?

$ chkconfig | grep nginx
nginx           0:off   1:off   2:off   3:off   4:off   5:off   6:off

The nginx init script has this comment: chkconfig - 85 15 which I believe means no runlevels also.

However according to this I believe that the server will actually run nginx at every run level, correct?

$ ls -1 /etc/rc.d/*/*nginx
/etc/rc.d/init.d/nginx
/etc/rc.d/rc0.d/K15nginx
/etc/rc.d/rc1.d/K15nginx
/etc/rc.d/rc2.d/K15nginx
/etc/rc.d/rc3.d/K15nginx
/etc/rc.d/rc4.d/K15nginx
/etc/rc.d/rc5.d/K15nginx
/etc/rc.d/rc6.d/K15nginx

(All those K15nginx files are symlinks to ../init.d/nginx)

Is this something I should just fix (set some reasonable run levels), or is this working as intended and I should walk away (it ain't broke, don't fix it)?

init.d
Martin Hope
Rob
Asked: 2010-10-14 18:34:37 +0800 CST
  • 1

I have a small webserver used by some friends to host personal websites. Occasionally they need to make a folder for uploads that can be written to by the webserver (www-data). Is there a safe way to allow a regualar user (not in sudoers) to set a specific group that they are not a member of?

To me this seems to be a dangerous option to allow, but one that I might have to allow. So I am interested in secure ways of doing it. Writing my own script & allowing users to sudo it is likely not be secure. I want to try to use best practices, not just allowing sudo chgrp, unless that really is secure.

Some requirements * Can only change files in a specific area of the server * Can only change two and from specific groups * Cannot be hacked to allow privilege escalation or other security issues.

Running the PHP FastCGI as a specific user might be a good solution, but how would I ensure that is setup securely & safely?

chgrp
Martin Hope
Rob
Asked: 2010-04-05 17:02:18 +0800 CST
  • 6

I have nginx running on a VM and I want to run a Trac site. I need to run a python FastCGI server, but I cannot tell which is the server to use. I have found the following:

  • Lighttpd spawn-fcgi But this seems to require that you compile lighttpd just to get the fcgi server, which is weird.
  • fcgi.py But this one seems to be deprecated. At the very least it is poorly documented.
  • flup This one comes with dependencies on ubuntu (python-cheetah{a} python-mysqldb{a} python-webpy{a}) that seem unnecessary. Also poorly documented.

Are there any recent guides for setting this up? Trac's own FastCGI setup page seems to miss some steps.

python fastcgi trac
Martin Hope
Rob
Asked: 2010-03-05 08:06:37 +0800 CST
  • 0

I have a VM with only 256MB of RAM that is running nginx and PHP 5.3. Since I am resource constrained (cannot change the amount of RAM in the VM) I am looking into the various ways of setting up FastCGI for PHP. Perhaps my Google-fu is weak, but I cannot seem to find much about my options when setting up FastCGI or any best practices advice.

I am interested in being direct to information on:

  1. What FastCGI servers options are there?
  2. Are any of these clearly better or worse than the others?
  3. Considering my setup (256MB RAM, nginx) are there any clear resources or technical blogs that I should be following for advice?
php fastcgi nginx