MaisonBisson.com

I’ve tested this cookbook against Amazon Linux, but it will probably work just as well with the current version of CentOS.

Basic Installation

First, get root and update the OS:

sudo -s
yum update

With that done, let’s get the basic packages and services installed:

yum install mysql mysql-server mysql-devel httpd httpd-devel mod_ssl php php-devel php-mysql php-gd php-dom php-pear php-json memcached svn gcc pcre-devel make

That gets us Apache HTTPD with SSL, PHP with a number of modules, Memcached, and a few system tools.

Let’s set the packaged services to start on reboot:

chkconfig --level 345 httpd on
chkconfig --level 345 mysqld on
chkconfig --level 345 memcached on
chkconfig --list

APC and the Memcahe module are both essential for performance, but they need to be installed using PECL. Simply accept the default options for everything, then execute the echo command as shown to create the ini file.

pecl install apc-beta
echo extension=apc.so > /etc/php.d/apc.ini

pecl install memcache
echo extension=memcache.so > /etc/php.d/memcache.ini

And with all that you should have a working, if not fully configured, system. Let’s start the services to take a look:

/sbin/service mysqld start
/sbin/service memcached start
/sbin/service httpd start

MySQL Configuration

MySQL should output a number of messages about configuring itself on the first startup, but all the services should start.

Now we need to create the database and user:

mysql -u root -e "CREATE DATABASE mydb CHARACTER SET utf8 COLLATE utf8_general_ci;"
mysql -u root -e "CREATE USER 'myuser'@'localhost';"
mysql -u root -e "GRANT ALL ON mydb.* TO 'myuser'@'localhost';"

And then import the database from an export:

mysql pro -u root < mydb.sql

Apache HTTPD+SSL Configuration

Installing your app is up to you, but I usually fetch it via SVN into /var/www/appname.

And now to configure HTTPD services:

In /etc/httpd/conf/httpd.conf set AllowOverride All as shown below:

<Directory />
    Options FollowSymLinks
    AllowOverride All
</Directory>

Delete the vhost definition in /etc/httpd/conf.d/ssl.conf and create a new vhost file in /etc/httpd/conf.d/vhost.conf with something like the following:

<VirtualHost *:80>
	ServerAdmin support@example.com
	ServerName falcon.pro.gostage.it
	DocumentRoot /var/www/appname
	ErrorLog logs/appname-error_log
	CustomLog logs/appname-access_log common
</VirtualHost>
<VirtualHost *:443>
	ServerAdmin support@example.com
	ServerName falcon.pro.gostage.it
	DocumentRoot /var/www/appname
	ErrorLog logs/appname-error_log
	CustomLog logs/appname-access_log common
	SSLEngine on
	SSLProtocol all -SSLv2
	SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
	SSLCertificateFile /etc/pki/tls/certs/localhost.crt
	SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
</VirtualHost>

Now restart the HTTP daemon:

/sbin/service httpd restart

Posted on Monday, April 16th, 2012 at 11:53 am in Technology   |  RSS feed