cd .ssh
mkdir .ssh
chmod 700 .ssh
cd .ssh
vi authorized_keys

paste in public key

chmod 600 authorized_keys

Add Remi Repo – Don’t Do This Until Magento is PHp 5.4 Compatible

rpm -Uvh http://www.mirrorservice.org/sites/dl.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm
rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-6.rpm
vi /etc/yum.repos.d/remi.repo

[remi]
name=Les RPM de remi en test pour Enterprise Linux $releasever - $basearch
mirrorlist=http://rpms.famillecollet.com/enterprise/$releasever/remi/mirror
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi
includepkgs=nginx* php-fpm*

Install NGinx Repo

vi /etc/yum.repos.d/nginx.repo

Enter in

[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/6/$basearch/
gpgcheck=0
enabled=1

Install EPEL

su -c 'rpm -Uvh http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm'

Install NGinx

yum install nginx php-fpm php php-mysql php-pecl-memcache php-pecl-apc git php-mbstring php-pecl-imagick php-xml php-gd php-mcrypt php-soap php-curl php-soap php-memcached openssl
vi /etc/php.ini

Replace contents with

[PHP]

;;;;;;;;;;;;;;;;;;;;
; php.ini Options  ;
;;;;;;;;;;;;;;;;;;;;

;;;;;;;;;;;;;;;;;;;;
; Language Options ;
;;;;;;;;;;;;;;;;;;;;

; Enable the PHP scripting language engine under Apache.
; http://php.net/engine
engine = On
short_open_tag = Off
asp_tags = Off
precision = 14
output_buffering = 4096
zlib.output_compression = Off
implicit_flush = Off
unserialize_callback_func =
serialize_precision = 17
disable_functions =
disable_classes =
zend.enable_gc = On
cgi.fix_pathinfo = 0

;;;;;;;;;;;;;;;;;
; Miscellaneous ;
;;;;;;;;;;;;;;;;;

expose_php = Off

;;;;;;;;;;;;;;;;;;;
; Resource Limits ;
;;;;;;;;;;;;;;;;;;;

max_execution_time = 30
max_input_time = 60
memory_limit = 128M

;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
; Error handling and logging ;
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT
display_errors = Off
display_startup_errors = Off
log_errors = Off
log_errors_max_len = 1024
ignore_repeated_errors = Off
ignore_repeated_source = Off
report_memleaks = On
track_errors = Off
html_errors = On

;;;;;;;;;;;;;;;;;
; Data Handling ;
;;;;;;;;;;;;;;;;;

variables_order = "GPCS"
request_order = "GP"
register_argc_argv = Off
auto_globals_jit = On
post_max_size = 8M
auto_prepend_file =
auto_append_file =
default_mimetype = "text/html"

;;;;;;;;;;;;;;;;;;;;;;;;;
; Paths and Directories ;
;;;;;;;;;;;;;;;;;;;;;;;;;

doc_root =
user_dir =
enable_dl = Off

;;;;;;;;;;;;;;;;
; File Uploads ;
;;;;;;;;;;;;;;;;

file_uploads = On
upload_max_filesize = 50M
max_file_uploads = 20

;;;;;;;;;;;;;;;;;;
; Fopen wrappers ;
;;;;;;;;;;;;;;;;;;

allow_url_fopen = On
allow_url_include = Off
default_socket_timeout = 60
auto_detect_line_endings = On

;;;;;;;;;;;;;;;;;;;
; Module Settings ;
;;;;;;;;;;;;;;;;;;;

[CLI Server]
cli_server.color = On

[Date]
date.timezone = "Europe/London"

[Pdo_mysql]
pdo_mysql.cache_size = 2000
pdo_mysql.default_socket=

[mail function]
sendmail_path = /usr/sbin/sendmail -t -i
mail.add_x_header = On

[SQL]
sql.safe_mode = Off

[ODBC]
odbc.allow_persistent = On
odbc.check_persistent = On
odbc.max_persistent = -1
odbc.max_links = -1
odbc.defaultlrl = 4096
odbc.defaultbinmode = 1

[Interbase]
ibase.allow_persistent = 1
ibase.max_persistent = -1
ibase.max_links = -1
ibase.timestampformat = "%Y-%m-%d %H:%M:%S"
ibase.dateformat = "%Y-%m-%d"
ibase.timeformat = "%H:%M:%S"

[MySQLi]
mysqli.max_persistent = -1
mysqli.allow_persistent = On
mysqli.max_links = -1
mysqli.cache_size = 2000
mysqli.default_port = 3306
mysqli.default_socket =
mysqli.default_host =
mysqli.default_user =
mysqli.default_pw =
mysqli.reconnect = Off

[mysqlnd]
mysqlnd.collect_statistics = On
mysqlnd.collect_memory_statistics = Off

[PostgreSQL]
pgsql.allow_persistent = On
pgsql.auto_reset_persistent = Off
pgsql.max_persistent = -1
pgsql.max_links = -1
pgsql.ignore_notice = 0
pgsql.log_notice = 0

[Sybase-CT]
sybct.allow_persistent = On
sybct.max_persistent = -1
sybct.max_links = -1
sybct.min_server_severity = 10
sybct.min_client_severity = 10

[bcmath]
bcmath.scale = 0

[Session]
session.save_handler = files
session.use_cookies = 1
session.use_only_cookies = 1
session.name = PHPSESSID
session.auto_start = 0
session.cookie_lifetime = 0
session.cookie_path = /
session.cookie_domain =
session.cookie_httponly =
session.serialize_handler = php
session.gc_probability = 1
session.gc_divisor = 1000
session.gc_maxlifetime = 1440
session.bug_compat_42 = Off
session.bug_compat_warn = Off
session.referer_check =
session.cache_limiter = nocache
session.cache_expire = 180
session.use_trans_sid = 0
session.hash_function = 0
session.hash_bits_per_character = 5
url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"

[Tidy]
tidy.clean_output = Off

[soap]
soap.wsdl_cache_enabled=1
soap.wsdl_cache_dir="/tmp"
soap.wsdl_cache_ttl=86400
soap.wsdl_cache_limit = 5

[ldap]
ldap.max_links = -1

Find `cgi.fix_pathinfo` and set the value to `0`

vi /etc/nginx/conf.d/magentosite.conf

server {
    listen      80;
    server_name www.magentosite.co.uk;
    root        /var/www/sites/magentosite/;
    index index.html index.php;

    access_log /var/log/nginx/www.magentosite.co.uk-access_log;
    error_log /var/log/nginx/www.magentosite.co.uk-error_log;

    location / {
        try_files $uri $uri/ @handler;
        expires 30d;
    }
    location /app/                       { deny all; }
    location /includes/                  { deny all; }
    location /lib/                       { deny all; }
    location /media/downloadable/        { deny all; }
    location /pkginfo/                   { deny all; }
    location /report/config.xml          { deny all; }
    location /var/                       { deny all; }

    location /var/export/ {
        auth_basic              "Restricted";
        auth_basic_user_file    htpasswd;
        autoindex               on;
    }
    location  /. {
        return 404;
    }

    location @handler {
        rewrite / /index.php;
    }

    location ~ .php/ {
        rewrite ^(.*.php)/ $1 last;
    }

    location ~ \.php$ {
        try_files $uri =404;
        expires off;
        fastcgi_read_timeout 900s;
        fastcgi_index index.php;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include /etc/nginx/fastcgi_params;
    }
    rewrite ^/minify/([0-9]+)(/.*.(js|css))$ /lib/minify/m.php?f=$2&d=$1 last;
    rewrite ^/skin/m/([0-9]+)(/.*.(js|css))$ /lib/minify/m.php?f=$2&d=$1 last;

    location /lib/minify/ {
        allow all;
    }
    gzip on;
    #gzip_comp_level 9;
    gzip_min_length  1000;
    gzip_proxied any;
    gzip_types       text/plain application/xml text/html text/css text/js application/x-javascript;
}

vi /etc/php-fpm.d/www.conf

Find User & Group settings, and set both the user and group to `nginx`

/etc/init.d/nginx start
service php-fpm start
chkconfig --levels 235 nginx on
chkconfig --levels 235 php-fpm on

Open Firewall

/sbin/iptables -I INPUT 1 -p tcp --dport http -j ACCEPT
/sbin/iptables -I INPUT 1 -p tcp --dport https -j ACCEPT
/sbin/service iptables save
service iptables restart

Set up Github Key

ssh-keygen -t rsa -C "your_email@example.com"
vi ~/.ssh/id_rsa.pub

Paste contents into Github

Fix Permissions

chmod -R o+w /var/www/sites/yoursite/media /var/www/sites/petrunway-magento/var
chmod o+w /var/www/sites/yoursite/app/etc
chmod 777 /var/www/sites/yoursite/sitemap

then this:

rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-6.rpm

then

yum update

If you want to glob only specific things change
the /etc/yum.repos.d/remi.repo (or whatever it’s called) in this fashion:

[remi]
name=Les RPM de remi en test pour Enterprise Linux $releasever - $basearch
mirrorlist=http://rpms.famillecollet.com/enterprise/$releasever/remi/mirror
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi
includepkgs=php* mysql* python* compat-mysql51*

paste in public key

chmod 600 authorized_keys

To fix you have to do the following steps:

Open Activity Monitor in the Applications > Utilities Folder

Find AdobeCrashDaemon

Highlight and Quit Process

The update should then work as usual

yum update
yum install make openssh-clients gcc libxml2 libxml2-devel libxslt libxslt-devel python-devel httpd mysql mysql-server mysql-devel gcc-c++ curl-devel openssl-devel zlib-devel httpd-devel apr-devel apr-util-devel sqlite-devel libicu-devel sendmail redis
systemctl start mysqld.service
/usr/bin/mysql_secure_installation

Remember the password you set here!

systemctl enable mysqld.service
adduser -r -m --shell /bin/bash --comment 'git version control' git
mkdir /home/git/.ssh
chown git:git -R /home/git/.ssh
ssh-keygen -q -o -N '' -t rsa -f /home/git/.ssh/id_rsa
usermod -s /bin/bash -d /var/www/ -G git apache
mkdir /var/www/.ssh
cp -f /home/git/.ssh/id_rsa* /var/www/.ssh/ && chown apache:apache /var/www/.ssh/id_rsa* && chmod 600 /var/www/.ssh/id_rsa*
sudo -u apache ssh-keyscan localhost >> /var/www/.ssh/known_hosts
chown -R apache:apache /var/www

Install Ruby

sudo bash -s stable < <(curl -sk https://raw.github.com/wayneeseguin/rvm/master/binscripts/rvm-installer)
source /etc/profile.d/rvm.sh
rvm pkg install openssl
rvm install ruby-1.9.3-p194 --with-openssl
rvm all do gem update --system
rvm all do gem install rails
rvm all do gem install passenger
passenger-install-apache2-module

Add to httpd.conf – vi /etc/httpd/conf/httpd.conf

LoadModule passenger_module /usr/local/rvm/gems/ruby-1.9.3-p194/gems/passenger-3.0.12/ext/apache2/mod_passenger.so
PassengerRoot /usr/local/rvm/gems/ruby-1.9.3-p194/gems/passenger-3.0.12
PassengerRuby /usr/local/rvm/wrappers/ruby-1.9.3-p194/ruby

Add to gitlab.conf – vi /etc/httpd/conf.d/gitlab.conf

<VirtualHost *:80>
ServerName yourserver.yourdomain.com
DocumentRoot /var/www/gitlabhq/public
<Directory /var/www/gitlabhq/public>
AllowOverride all
Options -MultiViews
</Directory>
</VirtualHost>

Install Gitolite

yum install -y gitolite
curl http://python-distribute.org/distribute_setup.py | python
easy_install pip
cd /var/www
git clone git://github.com/gitlabhq/gitlabhq.git
cd /var/www/gitlabhq/
pip install pygments
rvm all do gem install bundler
bundle install --deployment --without development test
service redis start
chkconfig redis on
cp config/gitlab.yml.example config/gitlab.yml
cp config/database.yml.example config/database.yml

Set database and host config

vi config/database.yml

Change “Secure password” to one set earlier

vi config/gitlab.yml

Change host and others to what required

RAILS_ENV=production rake db:setup
RAILS_ENV=production rake db:seed_fu
sed -i 's/0077/0007/g' /usr/share/gitolite/conf/example.gitolite.rc
su - git -c "gl-setup -q /home/git/.ssh/id_rsa.pub"

Clean up permissions or you won’t be able to browse code in Gitlab

chown -R git:git /home/git/
chmod 770 /home/git/repositories/
chmod 770 /home/git/
chmod 600 -R /home/git/.ssh/
chmod 700 /home/git/.ssh/
chmod 600 /home/git/.ssh/authorized_keys
chown -R apache:apache /var/www/gitlabhq
chown apache:root -R /usr/local/rvm/gems/
chmod 770 /home/git/
chmod go-w /home/git/

Start Apache

systemctl start httpd.service
systemctl enable httpd.service
iptables -I INPUT 1 -p tcp --dport http -j ACCEPT
iptables-save > /etc/sysconfig/iptables
systemctl restart iptables.service

Sign in as
admin@local.host
5iveL!fe

You can use Yum to easily fix this, simply log onto the server and run the following as root

yum install php-mbstring
service httpd restart

To install a suite of Apache, MySql and PHP on a new instance of Fedora 16 on Rackspace cloud perform the following steps:

1. Using PuTTY log in as root using the password send to you via email when starting the server

2. Run the following command:

yum update

3. Once it has finished updating run the following:

yum install httpd mysql mysql-server php php-devel php-mysql

4. Once this has finished installing run the following:

systemctl start mysqld.service
/usr/bin/mysql_secure_installation

5. When asked for current password just press enter. Then set a root password (make it secure), remove anonymous users, disallow root login remotely and remove the test database. Finally reload the privilege tables. Congratulations, you have secured MySql.

6. To make sure MySQL always loads on restart run the following:

systemctl enable mysqld.service

7. We also want to do similar for Apache so run the following:

systemctl start httpd.service
systemctl enable httpd.service

This will start the web server, however if you go to the IP address of the server in your browser it will say there is a problem loading the page, what is happening is that the Rackspace images have a very restrictive firewall to start, we need to allow some traffic through. To do this perform the following commands:

iptables -I INPUT 1 -p tcp --dport http -j ACCEPT
iptables -I INPUT 1 -p tcp --dport mysql -j ACCEPT
iptables-save > /etc/sysconfig/iptables
systemctl restart iptables.service

Once this has done you will be able to see the Apache welcome page on your server IP

It appears that Fedora 16 now uses Systemd – http://fedoraproject.org/wiki/Systemd#Why_systemd.3F and you have to use systemctl to do tasks now.

So to save the IP Tables I should be able to use the command:

systemctl save iptables.service

However this comes up with an error: Unknown operation save

Not sure if this a bug or not, however running /sbin/iptables-save made it work

To do this I placed the following in my httpd.conf file:

<Directory />
RewriteEngine on
RewriteCond %{HTTP_USER_AGENT} google|googlebot|bing|slurp [NC]
RewriteRule .? - [G]
</Directory>

RewriteOptions inherit