Apache Source Tree under 6.1
hi, apache.spec tells me not to run under a production system so how do I get the source tree for the 6.1 apache.rpm (binary) that i am already running on my production system do suse have any plans to syncronise their source archive with the binaries that they supply? Niall (feeling a bit disappointed/confused)
Niall Cosgrove wrote:
hi, apache.spec tells me not to run under a production system so how do I get the source tree for the 6.1 apache.rpm (binary) that i am already running on my production system
Well ... you're perfectly right ; I have SuSE running since the days of the 4.x releases, and they have *NEVER* managed to keep their sources in consistency with the binaries they ship. Since I have to run SuSE on one machine, I adopted the habit of installing just the base system, and then compile and install the SW I need from the original tarballs. Forget about SuSE built rpm's and srm's anyway. I highly advise that you'd use this method too, since thus you also get around SuSE's plain stupidity (sorry folks, gotta say this) of putting packages like Samba, Apache a.s.o. (imagine, typical *NETWORKING* packages) in /usr/local . Hey SUSE folks, are you reading this ??? As the name says, /usr/local typically is a *LOCAL* mount. Stuff like Apache or Samba or the DB2 database are very likely to be used by more people than just the local user(s). They should go into directories that are typical NFS mounts, in particular /var or even better, /opt . Once again, better forget about SuSE's sources that are shipped with the distribution. After all, they're not just weeks but often months behind the current tarballs that you can leech from the web.
Niall (feeling a bit disappointed/confused)
Your not alone my friend ... just hang on to the belief that someday they'll learn ... -- C U ... Mike :-) (mr@java-factory.com) PGP Fingerprint: C8BE A34B 5CD3 660E 01C4 BA1F E42E 1E67 PGP Key ID: 0x7714DA0B 2048 Bit RSA / IDEA
Hi, At 20:48 Uhr +0200 24.08.1999, Michael T. Reiff wrote:
Niall Cosgrove wrote:
hi, apache.spec tells me not to run under a production system so how do I get the source tree for the 6.1 apache.rpm (binary) that i am already running on my production system
Since I have to run SuSE on one machine, I adopted the habit of installing just the base system, and then compile and install the SW I need from the original tarballs. Forget about SuSE built rpm's and srm's anyway.
how do you go about updating to a new Suse??? I have done like you suggested often, only finding that I am unable to smothly update to a new SuSE distrib... I am nothing near a pro on these things, too, this may count towards the problems, but nevertheless I tend to need/want things SuSE did not include with their binaries... Jochen
"Michael T. Reiff" wrote:
I highly advise that you'd use this method too, since thus you also get around SuSE's plain stupidity (sorry folks, gotta say this) of putting packages like Samba, Apache a.s.o. (imagine, typical *NETWORKING* packages) in /usr/local .
Well, this is not the case [anymore]. On my 6.1 system, both Samba and Apache are installed in /usr/{bin,sbin,man,lib,doc} with some stuff in /var. Only the default ServerRoot and what belongs to it is installed in /usr/local. Historically, some of these packages used to reside in /usr/local though, for whatever reason I don't know. Whether stuff like Samba/Apache/KDE/... goes in /opt or /usr depends on what you regard as '/opt'ional to your system. Btw, did you notice that SuSE are providing update packages to their distributions regularly? Personally, I find it a lot easier to install a set of RPMs instead of configuring/compiling/installing all stuff myself. That way, I don't have to spend a lot of thought on which paths I need to configure, etc. Andreas ----------------------------------------------------------------------- Andreas Gruenbacher, a.gruenbacher@infosys.tuwien.ac.at
On Tue, 24 Aug 1999, Michael T. Reiff wrote:
Well ... you're perfectly right ; I have SuSE running since the days of the 4.x releases, and they have *NEVER* managed to keep their sources in consistency with the binaries they ship.
This is one thing, I never felt any need to compile apache myself (since "August '95'"-SuSE).
Forget about SuSE built rpm's and srm's anyway.
Why should I? If I want a SuSE, I take a SuSE - if I want to do things myself, I can take Slackware or Debian... Any package on my system compiled from tarballs renders the rpm databases useless.
I highly advise that you'd use this method too, since thus you also get around SuSE's plain stupidity (sorry folks, gotta
Ooops.
say this) of putting packages like Samba, Apache a.s.o. (imagine, typical *NETWORKING* packages) in /usr/local .
Ok, /usr/LOCAL might not be right - as pointed out, in 6.1 and 6.2, these packages are installed under /usr.
Hey SUSE folks, are you reading this ??? As the name says, /usr/local typically is a *LOCAL* mount. Stuff like Apache or
/usr/local usually IS distributed among the network. (quote from FHS: "It may be used for programs and data that are sharable amongst a group of hosts, but not found in /usr") Lets look at the Filesystem Hirarchy Standard (YOU probably want to get it from somewhere else, I installed fhs.rpm). /usr - sharable, static (why the fsck do you want binaries on /var??? You cant/shouldnt mount /var ro) /opt - Add-on application software packages. Apache and Samba definitely are essential system software, no add-on application. Couldnt find any DB2 package on my CDs... I dont feel that /var is a "typical" nfs mount. Do you share /var/tmp and stuff? Others than /var/spool?
Once again, better forget about SuSE's sources that are shipped with the distribution.
You might be right - but at least, they work. 12:12am up 265 days, 13:50, 2 users, load average: 0.12, 0.05, 0.01 little server, never since it was built (and the first - and last - kernel was compiled) 12:12am up 56 days, 22:34, 19 users, load average: 0.00, 0.30, 0.31 busy server (ok, not right now - its after midnight ;), rebooted two months ago because I had to move it from one room to another... I saw some Linux-self-compiled boxes - and few of them were as stable as a distribution with _tested_ software on them.
Niall (feeling a bit disappointed/confused)
Ciao, Basti (feeling a little strange, hearing such a crap) -- Bastian Friedrich Bastian.Friedrich@gmx.de Adress & Fon available on my HP http://Bilbo.home.pages.de/ -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GCS/IT d-> s>+: a-- C++> U++++$ P+>++++ L+++ E(+) W++ N+@ o? ?K( ) w-- O- M- V PS+ PE@ Y+(++) PGP t++ 5 X+ R+ tv-->+ b+>++ !DI>+ D++ G(++) e>+++ h(*) r++ y++ ------END GEEK CODE BLOCK------
On Wed, 25 Aug 1999, Bastian Friedrich wrote:
Forget about SuSE built rpm's and srm's anyway.
Why should I? If I want a SuSE, I take a SuSE - if I want to do things myself, I can take Slackware or Debian... Any package on my system compiled from tarballs renders the rpm databases useless.
Well, the discussion is pointless. I believe that every distribution has its (dis)advantages and one just uses the one distri they have gotten accustomed to. It is just a matter of personal taste and should not be a political issue. I personally use 2 distributions and learned both of them and run servers with both just fine. You will still have to tweak here and there to get the system tuned and secure but you will always have to do this.
I highly advise that you'd use this method too, since thus you also get around SuSE's plain stupidity (sorry folks, gotta
Ooops.
I agree, this is not a valid input :-) What I did see is that the RPM database was somehow not quite up-to-date, I should not be able to update e.g. wu-ftpd which is an rpm for 6.0 on an 5.3 system, but I was nevertheless able to do it (No, I didn't use --force :) Of course it didn't work. I hope the 3.0 in 6.2 is better, just installed 6.2 on a PPro200-leafnode. Works great, what can I say?! Lets just see how things turn out. Uwe -- ][ Uwe Hahn http://www.robin.de/~uwe/ Linux? Yes! ][ ][ Spiel, Spaß, Spannung: http://www.robin.de/ ][ ][ Rödermark, Germany e-mail: uwe@hahn.RoBIN.de ][
"Michael T. Reiff" wrote:
I highly advise that you'd use this method too, since thus you also get around SuSE's plain stupidity (sorry folks, gotta say this) of putting packages like Samba, Apache a.s.o. (imagine, typical *NETWORKING* packages) in /usr/local .
The only thing in my /usr/local is things I've put there. Things I've compiled from tarballs. Apache,leafnode and a few other things.
Hey SUSE folks, are you reading this ??? As the name says, /usr/local typically is a *LOCAL* mount. Stuff like Apache or
Yup locally developed or configured stuff. Things like Apache compiled so the log file goes where I want it. Plus any other changes I wanted.
Samba or the DB2 database are very likely to be used by more people than just the local user(s). They should go into directories that are typical NFS mounts, in particular /var or even better, /opt .
/var???? That makes no sense to me. /usr/local is for things that aren't part of the normal distribution. If I get something it will often go to /usr/local. Why? I can format the rest of the /usr and not lose my stuff. Worse case I can format everything but /home and /usr/local.
Once again, better forget about SuSE's sources that are shipped with the distribution. After all, they're not just weeks but often months behind the current tarballs that you can leech from the web.
I won't argue with that. But not everybody can download all they want. Nick -- --------------------- Nick Zentena SuSE 6.1 Linux 2.2.11 ---------------------
Hi all,
Once again, better forget about SuSE's sources that are shipped with the distribution. After all, they're not just weeks but often months behind the current tarballs that you can leech from the web.
This is because they tend to test the software they release a bit. Of course this is valid for RedHat too. I imagie the debian folks are more up to date, but they have 600 or so people who work for them... Regards, Robert
Hi, "Michael T. Reiff" wrote:
Hey SUSE folks, are you reading this ??? As the name says, /usr/local typically is a *LOCAL* mount. Stuff like Apache or Samba or the DB2 database are very likely to be used by more people than just the local user(s). They should go into directories that are typical NFS mounts, in particular /var or even better, /opt .
Well, if you look at the "Filesystem Hierarchy Standard -- Version 2.0": 4.6 /usr/local : Local hierarchy The /usr/local hierarchy is for use by the system administrator when installing software locally. It needs to be safe from being overwritten when the system software is updated. It may be used for programs and data that are shareable amongst a group of hosts, but not found in /usr. /var? You're kidding... "Linux System Administrators' Guide 0.6": The /var contains data that is changed when the system is running normally. It is specific for each system, i.e., not shared over the network with other computers. But of course you are free to do what you want ;-) Bye Ralf
I think that the reason they might have placed the packages in such locations is because these apps are supposed to be "personal" distributions and not fully business licensed. ----- Original Message ----- From: Ralf Steenbock <ralf.steenbock@ruhr-uni-bochum.de> To: <suse-security@suse.com> Sent: Wednesday, August 25, 1999 5:14 AM Subject: Re: [suse-security] Apache Source Tree under 6.1
Hi,
"Michael T. Reiff" wrote:
Hey SUSE folks, are you reading this ??? As the name says, /usr/local typically is a *LOCAL* mount. Stuff like Apache or Samba or the DB2 database are very likely to be used by more people than just the local user(s). They should go into directories that are typical NFS mounts, in particular /var or even better, /opt .
On Wed, Sep 01, 1999 at 10:26:27PM -0400, Marie-Denyse wrote:
I think that the reason they might have placed the packages in such locations is because these apps are supposed to be "personal" distributions and not fully business licensed.
Actually to be honest there is no specific reason for the document root of Apache being placed in /usr/local/ We definitely want to move it out of there, but we hesitate to do this move as the LSB/FHS people have still not yet decided on the proper location of the http document root. However in order to be compliant we´ve put the binaries, libraries and configuration files in proper places (/usr/sbin, /usr/lib and /etc/httpd) so this will surely not change in the future. -- Mit freundlichen Gruessen, Rolf Haberrecker Leiter Business Partner Programm SuSE GmbH, Tel: +49-911-7405331 Schanzaeckerstr. 10, Fax: +49-911-7417755 90443 Nuernberg, Email: rolf@suse.de Germany WWW: http://www.suse.com/
In article <19990902114600.D22734@suse.de>, "Rolf Haberrecker" <rolf@suse.de> writes:
Actually to be honest there is no specific reason for the document root of Apache being placed in /usr/local/
Well, i think /usr/local is not the wrong place for the document root. The documents that i place on my local server *are* locally installed stuff after all. But i think the SuSE should leave this document root as empty as possible and should not place apache stuff there. For example, i think the apache manual shouldn't be placed there for two reasons: Firstly because a distribution should always avoid placing things to /usr/local if possible and secondly not all servers decide to export the apache manual to their clients. (Having a document on the server means the duty to maintain this document, this is already a good reason not having foreign docs like the apache manual on the server.) So i think the apache manual should not be placed in the document root wherever you decide to place the document root. I'd place the apache manual to /usr/doc/packages/appache/manual/ and set a symlink from /usr/local/httpd/htdocs/manual -> /usr/doc/packages/appache/manual to allow the example page to refer to the manual. Thus after installing one might decide to leave or to delete this link in order to have or to have not the apache manual on the server. -- Rolf Krahl <rolf@informatik.uni-bremen.de>
On Mon, Sep 13, 1999 at 07:49:42PM +0000, Rolf Krahl wrote:
In article <19990902114600.D22734@suse.de>, "Rolf Haberrecker" <rolf@suse.de> writes:
Actually to be honest there is no specific reason for the document root of Apache being placed in /usr/local/
Well, i think /usr/local is not the wrong place for the document root. The documents that i place on my local server *are* locally installed stuff after all.
But i think the SuSE should leave this document root as empty as possible and should not place apache stuff there. For example, i think the apache manual shouldn't be placed there for two reasons: Firstly because a distribution should always avoid placing things to /usr/local if possible and secondly not all servers decide to export the apache manual to their clients. (Having a document on the server means the duty to maintain this document, this is already a good reason not having foreign docs like the apache manual on the server.) So i think the apache manual should not be placed in the document root wherever you decide to place the document root.
I'd place the apache manual to /usr/doc/packages/appache/manual/ and set a symlink from /usr/local/httpd/htdocs/manual -> /usr/doc/packages/appache/manual to allow the example page to refer to the manual. Thus after installing one might decide to leave or to delete this link in order to have or to have not the apache manual on the server.
This is definitely a reasonable idea. I will change this in the next major release of SuSE Linux. However I prefer an Alias to a symlink. On Thu, Sep 16, 1999 at 12:50:17PM +1200, Volker Kuhlmann wrote:
I'd place the apache manual to /usr/doc/packages/appache/manual/ and set a symlink from /usr/local/httpd/htdocs/manual -> /usr/doc/packages/appache/manual to allow the example page to refer to the manual.
Sounds like a good idea, anyway. But it's not that simple. Preferably, I would like local documents under /usr/local, and the rest of the material that comes with apache out of there - wherever, I don't care. There are a bunch of icons, include headers, and the test page plus associated bla bla. Not sure how to do that though, while keeping in touch with the apache security model.
While we're on the security list, cgi-bin is non-empty. I remember that by some default on some distribution it contained a file with serious security problems?!?
The programs in our cgi-bin should all be harmless. However I will change the permissions in secure and paranoid settings to 000. -- Mit freundlichen Gruessen, Rolf Haberrecker Leiter Business Partner Programm SuSE GmbH, Tel: +49-911-7405331 Schanzaeckerstr. 10, Fax: +49-911-7417755 90443 Nuernberg, Email: rolf@suse.de Germany WWW: http://www.suse.com/
Michael T. Reiff wrote...
Hey SUSE folks, are you reading this ??? As the name says, /usr/local typically is a *LOCAL* mount. Stuff like Apache or Samba or the DB2 database are very likely to be used by more people than just the local user(s). They should go into directories that are typical NFS mounts, in particular /var or even better, /opt .
I think that's a personal choice. I come from the SunOS 4.x world, where every thing that is not a part of the base OS (i.e. apache, samba, databases, etc) goes into /usr/local. The next job I had prefered /opt/local - and yes, it was NFS shared from a central NFS server to each client. Depending on what OS you ran, you'd mount a diff. exported file system from the NFS server. At my current job I was working with another "dinosaur" and we put any software that is not directly OS related in /usr/local. This way, if a machine need to be rebuilt/upgraded, you just upgrade /usr and don't have to worry about all that software you customized and compiled yourslef getting lost in the upgrade. To each their own with partitioning scheme/distributio/software location, whatever works for you! I've used Slackware, RedHat (yuch) and SuSE. I do say I like SuSE the best so far, but I just install a minimal system and build everything else myself. Cheers, josh
participants (13)
-
Andreas Gruenbacher
-
Bastian Friedrich
-
Jochen Haeberle
-
josh
-
Marie-Denyse
-
Michael T. Reiff
-
Niall Cosgrove
-
Nick Zentena
-
Ralf Steenbock
-
Robert Klein
-
Rolf Haberrecker
-
rolf@informatik.uni-bremen.de
-
Uwe Hahn