andrewtweber's questions

How can I restart stunnel4 and suppress output unless there is an error?

I tried using the -quiet flag, but according to the manpage that is NT/2000/XP only

$ /etc/init.d/stunnel4 restart -quiet
/etc/stunnel/-quiet.conf does not exist.

I've also tried using an output log, and lowered the debug from 5 (default, notice) to 4 (warning) within the config file.

output = /var/log/stunnel4/stunnel.log
debug  = 4
[--truncated--]

No matter what I try it always prints the status:

$ /etc/init.d/stunnel4 restart
Restarting SSL tunnels: [stopped: /etc/stunnel/attnam.conf] [Started: /etc/stunnel/attnam.conf] stunnel.

I have a web server running nginx. If I access the website through a wifi connection, it loads the website. If I access it using LTE on my phone, it just shows the default "Welcome to nginx!" page

Here is my site config file:

server {
    listen 80;
    listen 443 ssl;
    server_name {mysite.com};

    root   /path/to/public;
    index  index.php index.html index.htm;

    location / {
        try_files $uri $uri/ /index.php$is_args$args;
        include   /etc/nginx/conf.d/php-fpm;
    }

    ssl_certificate /etc/letsencrypt/live/{mysite.com}/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/{mysite.com}/privkey.pem;
}

I'm trying to install a vagrant plugin

$ vagrant plugin install vagrant-aws

which exits with this error:

Make sure that `gem install nokogiri -v '1.6.3.1'` succeeds before bundling.

When I try that command

$ gem install nokogiri -v '1.6.3.1'

It fails because the version of libxml2 I have is incompatible (requires < 2.9.0 and I have 2.9.1 installed with the system. I cannot downgrade or uninstall it because it has a million dependencies.)

I've gotten nokogiri to successfully install with:

$ gem install nokogiri -- --use-system-libraries=true --with-xml2-include=/usr/include/libxml2/

Yet when I run the vagrant plugin install command again, it still exits with the same error.

How can I either a) get vagrant to recognize that that gem is already installed or b) get vagrant to use the --use-system-libraries=true etc. install parameters?

My web files are located in /var/www/html/example.com/web/

Permissions are:

drwxr-xr-x 20 root   root  4096 Aug 13 18:22 var
... same for www and html ...
drwxr-xr-x 4  root   root  4096 Aug 13 18:22 example.com
drwxr-xr-x 10 apache root  4096 Aug 13 18:22 web

I have an FTP user "ftpuser" but I don't want them to be able to access any of the files in /var/www/html/

However, if I try chmod o-rx on ANY of the parent level folders, it gives a 403 Forbidden error, even though the user Apache still has RX permissions on web.

How can I stop ftpuser from changing into those directories and reading the files, without blocking access from users visiting through a browser?

Note - the strange thing is I have another server setup similarly, where I simply did chmod o-rx on the example.com folder, and everything remained web accessible.

On Redhat Linux, in a PHP script I am setting cURL options as such:

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, True);
curl_setopt($ch, CURLOPT_CAINFO, '/home/andrew/share/cacert.pem');

Yet I am getting this exception when trying to send data

(curl error: 77) error setting certificate verify locations:
CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none

Why is it looking for the CAfile in /etc/pki/tls/certs/ca-bundle.crt? I don't know where this folder is coming from as I don't set it anywhere.

Shouldn't it be looking in the place I specified, /home/andrew/share/cacert.pem? I don't have write permission /etc/ so simply copying the file there is not an option. Am I missing some other curl option that I should be using?

(This is on shared hosting - is it possible that it's disallowing me from setting a different path for the CAfile?)

I've created a virtual machine and am installing things from scratch. Definitely not a sys admin so I'm running into some trouble. I've installed these packages and then restarted httpd

yum -y install mysql
yum -y install php-mysql
yum -y install mysql-devel
service httpd restart

The httpd restart is successful yet I am still getting this error:

Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock'

I looked at /etc/my.cnf and indeed, socket is pointing to that path.

But the /var/lib/mysql folder does not even exist, nor do some files which seem crucial such as /etc/init.d/mysql. Am I missing some other important MySQL yum package? Why would some files (such as my.cnf) exist while others don't?

I have two copies of a folder in separate locations. They contain the exact same .htaccess file. Both .htaccess files have the same permissions and owners.

/home/sites/site/public_html/
/var/www/html/site/

I had a VirtualHost whose DocumentRoot used to point to /home/sites but I changed it to /var/www and restarted Apache.

Now my htaccess rules no longer work. For example, /story/id should rewrite to /index.php?id=$id. If I go to /index.php?id=$id in my browser, the page loads as it should, but if I go to /story/id I get a 404 error.

If I change DocumentRoot back to the old root, the links start working again.

Any ideas on what may be causing this?

I run a website with an anonymous commenting feature. Users can flag each other for abuse; flags are tied to an IP address (grabbed via PHP from $_SERVER['REMOTE_ADDR']).

I've noticed that 99% of the flags are for a blank IP.

I'm thinking of putting up a message saying "An IP address is required to comment" and disallowing blank IPs.

For a computer-savvy person who is non-malicious but just wants privacy, I'm not too concerned. They can decide for themselves if they value privacy or the ability to comment more.

What I'm concerned about is blocking a non-technical and non-malicious user who doesn't realize that they don't have an IP address, and is thus confused when they are unable to comment. Is there any scenario in which this might occur?

I'm trying to use mod_headers to set a header for certain file types. Specifically, I want to set Access-Control-Allow-Origin to "*" for ttf files. Is there a rule I can add to my VirtualHost that will do this for me?

I am running a Ruby on Rails application called Redmine. It's been working fine, but today it's giving a 503 Service Temporarily Unavailable error. (It was initially set up by an employee who is now gone.)

I check the error log and it says:

[Mon Nov 21 11:03:30 2011] [error] (111)Connection refused: proxy: HTTP: attempt to connect to 127.0.0.1:3000 (127.0.0.1) failed
[Mon Nov 21 11:03:30 2011] [error] ap_proxy_connect_backend disabling worker for (127.0.0.1)

Here's a chunk of my Apache config

<VirtualHost *:80>
  ServerName redmine.{domain}.com
  RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
  RewriteRule ^/(.*)$ balancer://redminecluster%{REQUEST_URI} [P,QSA,L]
</VirtualHost>

<Proxy balancer://redminecluster>
  BalancerMember http://127.0.0.1:3000
</Proxy>

I found this link: http://www.redmine.org/boards/2/topics/20561 which suggests I simply need to "start the redmine server." I've tried /etc/init.d/redmine start which gives me this output

=> Booting Mongrel
=> Rails 2.3.11 application starting on http://0.0.0.0:3000

The contents of /etc/init.d/redmine:

cd /var/redmine
sudo ruby script/server -d -e production

One thing I immediately notice is that it says 0.0.0.0 instead of 127.0.0.1. In addition, running top or ps -ef shows no record of a "mongrel" or "redmine" process. I've also tried restarting Apache before and after starting redmine. Not sure where to go from here.

I'm trying to manage a server on Amazon for a network of sites that receives about 100 million pageviews per month. Unfortunately, nobody out of my team of 5 developers has much server admin experience.

Right now we have the MaxClients set to 1400. Currently our traffic is about average, and we have 1150 total Apache processes running, which use about 2% CPU each! Out of those 1150, 800 of them are currently sleeping, but still taking up CPU. I'm sure there are ways to optimize this. I have a few thoughts:

1. It appears Apache is creating a new process for every single connection. Is this normal?
2. Is there a way to more quickly kill the sleeping processes?
3. Should we turn KeepAlive on? Each page loads about 15-20 medium-sized graphics and a lot of javascript/css.

So, here's our Apache setup. We do plan on contracting a server admin asap, but I would really appreciate some advice until we can find someone.

Timeout 25
KeepAlive Off
MaxKeepAliveRequests 200
KeepAliveTimeout 5

<IfModule prefork.c>
StartServers         100
MinSpareServers      20
MaxSpareServers      50
ServerLimit          1400
MaxClients           1400
MaxRequestsPerChild  5000
</IfModule>

<IfModule worker.c>
StartServers         4
MaxClients           400
MinSpareThreads      25
MaxSpareThreads      75
ThreadsPerChild      25
MaxRequestsPerChild  0
</IfModule>

Full top output:

top - 23:44:36 up 1 day,  6:43,  4 users,  load average: 379.14, 379.17, 377.22
Tasks: 1153 total, 379 running, 774 sleeping,   0 stopped,   0 zombie
Cpu(s): 71.9%us, 26.2%sy,  0.0%ni,  0.0%id,  0.0%wa,  0.0%hi,  1.9%si,  0.0%st
Mem:  70343000k total, 23768448k used, 46574552k free,   527376k buffers
Swap:        0k total,        0k used,        0k free, 10054596k cached

  PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+  COMMAND
 1756 mysql     20   0 10.2g 1.8g 5256 S 19.8  2.7 904:41.13 mysqld
21515 apache    20   0  396m  18m 4512 R  2.1  0.0   0:34.42 httpd
21524 apache    20   0  396m  18m 4032 R  2.1  0.0   0:32.63 httpd
21544 apache    20   0  394m  16m 4084 R  2.1  0.0   0:36.38 httpd
21643 apache    20   0  396m  18m 4360 R  2.1  0.0   0:34.20 httpd
21817 apache    20   0  396m  17m 4064 R  2.1  0.0   0:38.22 httpd
22134 apache    20   0  395m  17m 4584 R  2.1  0.0   0:35.62 httpd
22211 apache    20   0  397m  18m 4104 R  2.1  0.0   0:29.91 httpd
22267 apache    20   0  396m  18m 4636 R  2.1  0.0   0:35.29 httpd
22334 apache    20   0  397m  18m 4096 R  2.1  0.0   0:34.86 httpd
22549 apache    20   0  395m  17m 4056 R  2.1  0.0   0:31.01 httpd
22612 apache    20   0  397m  19m 4152 R  2.1  0.0   0:34.34 httpd
22721 apache    20   0  396m  18m 4060 R  2.1  0.0   0:32.76 httpd
22932 apache    20   0  396m  17m 4020 R  2.1  0.0   0:37.34 httpd
22933 apache    20   0  396m  18m 4060 R  2.1  0.0   0:34.77 httpd
22949 apache    20   0  396m  18m 4060 R  2.1  0.0   0:34.61 httpd
22956 apache    20   0  402m  24m 4072 R  2.1  0.0   0:41.45 httpd