Core Dump

My life experiences. My Soapbox. My Blog.

Zend OPcache PHP package for Debian

By 6 Comments

[2015-05-05] Updated with 7.0.5

I’ve built a Zend OPcache package for PHP 5.4 that comes with Debian Wheezy due to the simple fact that there just isn’t one out there. The package will place the precompiled PHP extension (amd64) into the right place, and put down a basic config.

What you need to know

Built with Zend OPcache 7.0.5 on Debian Wheezy (7).

The module lives at /usr/lib/php5/20100525/opcache.so

The config is in /etc/php5/mods-available/opcache.ini

A symlink in /etc/php5/conf.d/20-opcache.ini points to the above config file.

Hope you find this handy, and let me know if you find any bugs with the package.

Download

php5-zendopcache_7.0.5-1_amd64

Linux Malware Detect, Debian, and Plesk

By 4 Comments

Package installation

The easiest way to install Linux Malware Detect will be to use a package. Jan Wagner has put a lot of effort into debianising LMD so a big shout out to him (his Github repo). I merely built the package from the repo.

So without further ado, here is the download.

maldetect_1.4.2+dfsg-13_all.deb

Manual installation

Linux Malware Detect will not run out of the box in monitor mode (scan mode works fine) on a Debian system. There are a few things you need to do to get it working.

LMD comes with a 32-bit inotifywait binary and associated libinotifytools library. Debian Wheezy will not run 32-bit binaries out of the box. We can make it run 32-bit binaries but there’s a whole lot of additional packages you need to install, which we won’t do in order to keep things tidy.
We’ll first need to install the inotify-tools and libinotifytools0 packages which will put 64-bit versions of inotify on the system.

apt-get install inotify-tools libinotifytools0

In internals.conf, change the location of the inotifywait path to /usr/bin/inotifywait

sed -i -e"s/\$inspath\/inotify\/inotifywait/\/usr\/bin\/inotifywait/" /usr/local/maldetect/internals.conf

You may need to tweak inotify_base_watches if you have lots of paths/files.

Scanning the docroots

Now if you’re working with Plesk, you’ll only want LMD to monitor the docroots. Run the following to create a file with a list of all the docroots:

mysql -ss -uadmin -p`cat /etc/psa/.psa.shadow` psa -e "select www_root from hosting;" > /usr/local/maldetect/maldetfilelist

You can then start LMD with:

maldet -m /usr/local/maldetect/maldetfilelist

Graphing Postfix with Cacti

By 49 Comments

[Updated 2015-03-09]

There are a bunch of articles and information on this topic out there, but most of them either don’t work, are outdated, or are scattered across multiple pages on the Cacti forums.

I’ve worked out the kinks for you, so here’s what you need to do to graph Postfix with Cacti.
This was performed on Debian 6 with Cacti 0.8.7g from the apt repository but should work on other distros too.
Note that this article tackles graphing the sent, received, rejected, bounced, spam, and virus statistics. It does not graph mail queues.

You need two files, the first is mailgraph.pl which you’ll need to put on your mail server. It’s a modified version of David Schweikert’s mailgraph which writes mail statistics into /var/tmp instead of generating rrds. The second is the xml template file which you’ll import into Cacti. You’ll find both files in the link below.

[Download required files]

  1. Copy mailgraph.pl to your mail server and place in a suitable location, eg /usr/local/bin
  2. Run mailgraph in daemon mode with “mailgraph.pl -d”. Mailgraph will write its statistic files to /var/tmp.
  3. Configure your snmpd.conf file on your mail server by adding the following:
    extend .1.3.6.1.4.1.2021.50 mailcount_sent /bin/cat /var/tmp/mailsent
    extend .1.3.6.1.4.1.2021.51 mailcount_recv /bin/cat /var/tmp/mailrecv
    extend .1.3.6.1.4.1.2021.52 mailcount_reject /bin/cat /var/tmp/mailrejected
    extend .1.3.6.1.4.1.2021.53 mailcount_bounced /bin/cat /var/tmp/mailbounced
    extend .1.3.6.1.4.1.2021.54 mailcount_spam /bin/cat /var/tmp/mailspam
    extend .1.3.6.1.4.1.2021.55 mailcount_virus /bin/cat /var/tmp/mailvirus
  4. Restart snmpd
  5. Import the xml template into Cacti
  6. Create graphs for the mail server

Notes:
RBL spam rejections will show up under the rejected mailcount.
If you’re still having problems getting Cacti to graph, try adding this to snmpd.conf “view systemonly included .1.3.6.1.4.1”.

If you can’t get this to work or have any questions, i’d be happy to help.

P2V old linux distributions with VMware Converter

By Leave a Comment

Just the other day, I had the “privilege” of P2V’ing some really old CentOS 3.7 and 3.8 physical servers. The process certainly had it’s challenges. Here is how I did it.

Very old distributions of Linux will not support any of the virtual SCSI controllers provided to the guest by vSphere.
You need to firstly convert the disks to IDE, then modify GRUB to boot the OS from the converted IDE disks.

  1. P2V the server
  2. When till the process is completes, or errors at at the end.
  3. We will now convert the disks to IDE. Edit the VM’s Settings and remove the Disks.
  4. SSH into an ESX server, and cd to /vmfs/volumes/<datastore>/<vmname>
  5. Edit <vmname>.vmdk and change “lsilogic” to “ide”. If there is more than one disk, do the same for the other.
  6. Go back to the vSphere client and add the disks back in, you may need to fiddle with the Node number of the CD drive in order to make sure the boot drive gets 0:0.
  7. Boot into a rescue CD
  8. Mount the disk if it hasn’t been automatically mounted
  9. chroot to the mount (eg chroot /mnt/sysimage)
  10. Edit /boot/grub/device.map and change the last line to hda
  11. Edit /etc/grub.conf and change entries where necessary
  12. Run grub-install /dev/hda
  13. Reboot the server

Your VM should now boot into the OS.

Installing Dropbox on a Debian server

By 5 Comments

There are a lot of old instructions on how to install Dropbox on a headless linux server, most of them outdated. I had to recently go through this pain myself so i’ve compiled a set of updated instructions to make life easier for you.

These were performed on a clean Debian 6 install, so you may already have some of the dependencies required, along with the Dropbox client v1.4.

Installing Dropbox on a Debian server without a GUI.

  1. Install the following packages with aptitude to satisfy the dependencies of Dropbox.
    python-gtk2 libatk1.0-0 libcairo2 libglib2.0-0 libgtk2.0-0 libpango1.0-0
    There’ll be a bunch more packages you’ll have to install, just go ahead and install them too.
  2. Download and install the appropriate 64 or 32 bit .deb file from here.
  3. Run “dropbox start -i” as your user (not root), this will download the dropbox daemon and setup the .dropbox and .dropbox-dist directories in your home directory.
  4. Run ~/.dropbox-dist/dropboxd
  5. It’ll spit out a URL. Paste this URL into your browser to link Dropbox to your system.
  6. Hit CTRL-C to interrupt Dropbox.
  7. For some reason dropbox will not die, so kill it with “killall dropbox”.
  8. Download this sysinit script into /etc/init.d/ and modify the DROPBOX_USERS line at the top to your user or users. Rename the file to just “dropbox”.
  9. chmod +x /etc/init.d/dropbox
  10. update-rc.d dropbox defaults
  11. You can now start Dropbox with /etc/init.d/dropbox start

Your main Dropbox directory will be ~/Dropbox. The command line interface is the command “dropbox” unsurprisingly.

If you have any problems with these instructions, please let me know and i’ll do what I can to assist.