#!/bin/bash ############################################################################## # # # 본 스크립트는 CentOS4.x, 5.x, Fedora, RedHat9 를 기준으로 작성되었습니다. # # # ############################################################################## clear ## 설치 권한(root) 체크 if [ "$(whoami)" != "root" ] ; then echo "Error: You must be root to run this command." >&2 exit 1 fi ## 언어코드 조정 #LANG=ko_KR.eucKR sed -i "s/LANG=\"en_US.UTF-8\"/LANG=\"ko_KR.eucKR\"/g" /etc/sysconfig/i18n source /etc/profile ## 로고 및 스크립트 정보 출력 echo " " echo " " echo " " echo -e "\\033[01;31m=========================================" echo -e "\\033[01;31m= =" echo -e "\\033[01;31m= SEKOREA APM Setup Script =" echo -e "\\033[01;31m= =" echo -e "\\033[01;31m= Last Upated 2008.01.25 (Version 8.1) =" echo -e "\\033[01;31m= =" echo -e "\\033[01;31m= - OS : CentOS 4.x, 5.x Fedora 7 Add =" echo -e "\\033[01;31m= - APM : PHP 5.2.3, MySQL 5.0.44 Up =" echo -e "\\033[01;31m= =" echo -e "\\033[01;31m= http://www.sekorea.co.kr =" echo -e "\\033[01;31m= =" echo -e "\\033[01;31m=========================================" echo " " echo " " ########################################################################## ############## ############## ############## 설치에 필요한 기본 환경 변수 지정 "시작" ############## ############## ############## ########################################################################## ## 시스템 IP 추출 SYSTEM_IP="`ifconfig eth0 | grep "inet addr" | awk -F" " '{print $2}' | awk -F":" '{print $2}'`" ### 소스 다운로드 주소 ### #SOURCE_ADDR="http://임의의주소" SOURCE_ADDR="http://secuidc.com/ins/apm_source" ### 다운로드된 소스의 기본 저장 경로 변수 SOURCE_DIR="/usr/local/src/APM_Setup" ### OS 종류 분석 CHK_OS_NAME="`cat /etc/redhat-release | awk -F" " '{print $1}'`" if [ "$CHK_OS_NAME" = "CentOS" ]; then CHK_OS_GRADE="`cat /etc/redhat-release | awk -F" " '{print $3}' | awk -F"." '{print $1}'`" elif [ "$CHK_OS_NAME" = "Fedora" ]; then IF_CORE="`cat /etc/redhat-release | awk -F" " '{print $2}'`" if [ "$IF_CORE" = "Core" ]; then CHK_OS_GRADE="`cat /etc/redhat-release | awk -F" " '{print $4}'`" elif [ "$IF_CORE" = "release" ]; then CHK_OS_GRADE="`cat /etc/redhat-release | awk -F" " '{print $3}'`" else echo -e "\\033[01;31m Unidentified OS !! Check /etc/redhat-release !!" fi elif [ "$CHK_OS_NAME" = "Red" ]; then CHK_OS_GRADE="`cat /etc/redhat-release | awk -F" " '{print $5}'`" else echo -e "\\033[01;31m Unidentified OS is not CentOS, Fedora, Redhat !! Check Your OS !!" fi ######## APM(with ZendOptimize) 변수의 실제 파일의 확장자는 모두 tar.gz 이다 ######### ### Apache 소스 버전 변수 APACHE1="apache_1.3.37" APACHE2="httpd-2.0.59" APACHE3="httpd-2.2.4" ### PHP 소스 버전 변수 PHP4="php-4.4.7" PHP5="php-5.2.3" ### ZendOptimizer 32bit 파일명(확장자 제외) 변수 #Zend32="ZendOptimizer-3.2.8-linux-glibc21-i386" Zend32="ZendOptimizer-3.3.0a-linux-glibc21-i386" ### ZendOptimizer 64bit 파일명(확장자 제외) 변수 #Zend64="ZendOptimizer-3.2.8-linux-glibc23-x86_64" Zend64="ZendOptimizer-3.3.0a-linux-glibc23-x86_64" ### MYSQL 3.X.X 대 버전 변수 MYSQL_3_X="3.23.58" ### MYSQL 4.0.x 대 버전 변수 MYSQL_4_0="4.0.27" ### MYSQL 4.1.x 대 버전 변수 MYSQL_4_1="4.1.22" ### MYSQL 5.0.x 대 버전 변수 MYSQL_5_0="5.0.44" ### Apache 1.3.x 버전용 mod_ssl 버전 변수 MOD_SSL="mod_ssl-2.8.28-1.3.37" ########################## ### Apahce 컴파일 변수 ### ########################## # apache 1.3.x APACHE1_CONF="--prefix=/usr/local/apache --enable-shared=max --enable-rule=SHARED_CORE --enable-module=so --enable-module=rewrite --enable-module=vhost_alias --enable-module=headers --enable-module=expires --enable-module=speling" # httpd 2.0.x #APACHE2_CONF="--prefix=/usr/local/apache --enable-shared=max --enable-rule=SHARED_CORE --enable-module=so --with-mpm=worker --enable-module=rewrite --enable-module=vhost_alias --enable-module=headers --enable-module=expires --enable-module=speling" APACHE2_CONF="--prefix=/usr/local/apache --with-mpm=prefork --enable-ssl --enable-mods-shared=all" # httpd 2.2.x #APACHE3_CONF="--prefix=/usr/local/apache --enable-shared=max --enable-rule=SHARED_CORE --enable-module=so --with-mpm=worker --enable-module=rewrite --enable-module=vhost_alias --enable-module=headers --enable-module=expires --enable-module=speling" APACHE3_CONF="--prefix=/usr/local/apache --with-mpm=prefork --enable-ssl --enable-mods-shared=all" ###################################################################### # # # Mysql 설치 정보는 MySQL root 비번 지정 다음단계로 이동 되었습니다. # # # ###################################################################### ### PHP 32bit 컴파일 변수 - Apache 1.3.x & PHP 4.x.x & 32bit PHP_CONF1_32="--prefix=/usr/local/php --with-apxs=/usr/local/apache/bin/apxs --with-mysql=/usr/local/mysql --with-language=korean --with-kerberos --with-imap-dir --with-imap-ssl --with-tiff-dir --with-pdflib --with-cpdflib --with-mhash --with-mcrypt --with-xml --disable-debug --with-zend-multibyte --with-regex=php --with-mod_charset --with-iconv --with-dbx --with-gdbm --with-gd --with-jpeg-dir --with-png-dir --with-freetype-dir --with-zlib --with-curl --enable-mbstring --enable-mbregex --enable-sigchild --enable-ftp --enable-dba --enable-sockets --with-bz2 --enable-ftp --enable-exif --with-openssl --enable-wddx --with-dom --enable-saft-mode --enable-inline-optimization --enable-magic-quotes --enable-track-vars --enable-debugger --enable-sysvmsg --enable-sysvsem --enable-sysvshm" ### PHP 64bit 컴파일 변수 - Apache 1.3.x & PHP 4.x.x & 64bit PHP_CONF1_64="--prefix=/usr/local/php --with-apxs=/usr/local/apache/bin/apxs --with-language=korean --with-kerberos --with-imap-dir --with-imap-ssl --with-mysql=/usr/local/mysql --with-tiff-dir --with-pdflib --with-cpdflib --with-mhash --enable-sockets --with-regex=php --with-mod_charset --enable-track-vars --enable-ftp --enable-modules=so --enable-inline-optimization --disable-debug --with-config-file-path=/usr/local/apache/conf --with-zlib --with-zlib-dir --with-curl --with-iconv --with-dbx --with-gdbm --with-gd --with-jpeg-dir --with-png-dir --with-freetype-dir --enable-mbstring --enable-mbregex --enable-sigchild --with-xml --enable-dba --with-zend-multibytei --with-bz2 --enable-ftp --enable-exif --with-openssl --enable-wddx --with-dom --enable-saft-mode --enable-magic-quotes --enable-debugger --enable-sysvmsg --enable-sysvsem --enable-sysvshm" ### PHP 32bit 컴파일 변수 - Apache 2.x.x & PHP 5.x.x & 32bit #PHP_CONF2_32="--prefix=/usr/local/php --with-apxs2=/usr/local/apache/bin/apxs --with-mysql=/usr/local/mysql --with-language=korean --with-kerberos --with-imap-dir --with-imap-ssl --with-tiff-dir --with-pdflib --with-cpdflib --with-mhash --with-mcrypt --with-xml --disable-debug --with-zend-multibyte --with-regex=php --with-mod_charset --with-iconv --with-dbx --with-gdbm --with-gd --with-jpeg-dir --with-png-dir --with-freetype-dir --with-zlib --enable-mbstring --enable-mbregex --enable-sigchild --enable-ftp --enable-dba --enable-sockets --enable-saft-mode --enable-inline-optimization --enable-magic-quotes --enable-track-vars --enable-debugger --enable-sysvsem --enable-sysvshm" PHP_CONF2_32="`echo $PHP_CONF1_32 | sed 's/--with-apxs/--with-apxs2/g'`" ### PHP 64bit 컴파일 변수 - Apache 2.x.x & PHP 5.x.x & 6bit #PHP_CONF2_64="--prefix=/usr/local/php --with-apxs2=/usr/local/apache/bin/apxs --with-language=korean --with-kerberos --with-imap-dir --with-imap-ssl --with-mysql=/usr/local/mysql --with-tiff-dir --with-pdflib --with-cpdflib --with-mhash --enable-sockets --with-regex=php --with-mod_charset --enable-track-vars --enable-ftp --enable-modules=so --enable-inline-optimization --disable-debug --with-config-file-path=/usr/local/apache/conf --with-zlib --with-zlib-dir --with-iconv --with-dbx --with-gdbm --with-gd --with-jpeg-dir --with-png-dir --with-freetype-dir --enable-mbstring --enable-mbregex --enable-sigchild --with-xml --enable-dba --with-zend-multibytei --enable-saft-mode --enable-magic-quotes --enable-debugger --enable-sysvsem --enable-sysvshm" PHP_CONF2_64="`echo $PHP_CONF1_64 | sed 's/--with-apxs/--with-apxs2/g'`" #################################################################################################### ########################################## ### 원격 설치 소스 접근 인증 정보 입력 ### ########################################## echo " " echo -e "\\033[01;31m << INPUT RIS Source Auth Info >>" echo -e "\\033[01;32m====================================================================" echo -n -e "\\033[01;32m RIS Auth ID : " read ris_auth_id echo -n -e "\\033[01;32m RIS Auth PW : " read ris_auth_pw echo " " echo -e "\\033[01;31m << RIS Source Auth Info Confirm >>" echo -e "\\033[01;32m====================================================================" echo -e "\\033[01;32m ID = $ris_auth_id" echo -e "\\033[01;32m PW = $ris_auth_pw" echo " " echo -e "\\033[01;32m 1) YES" echo -e "\\033[01;32m 2) NO" echo -e "\\033[01;32m====================================================================" echo -n -e "\\033[01;32m ID, PW is Sure ?? [1,2] : " read ris_auth_confirm if [ "$ris_auth_confirm" = "1" ] || [ "$ris_auth_confirm" = "2" ]; then if [ "$ris_auth_confirm" = "1" ]; then echo " " echo "Install is continued...." elif [ "$fis_auth_confirm" = "2" ]; then echo -e "\\033[01;31m Restart this script !! and Retry Input RIS Source Auth Info !!" echo -e "\\033[00;00m" exit 1 fi else echo -e "\\033[01;31m Invalid Choice. Restart this script !!" echo -e "\\033[00;00m" exit 1 fi echo " " echo " " #################################################################################################### ### OS /etc/redhat-release 확인 (Redhat9 와 타 OS 구분 : wget 옵션 차이 해소) WGET_RH9_CHK="`cat /etc/redhat-release | awk -F" " '{print $1 $2 $5}'`" WGET_FC4_CHK="`cat /etc/redhat-release | awk -F" " '{print $1 $4}'`" if [ "$WGET_RH9_CHK" = "RedHat9" ] || [ "$WGET_FC4_CHK" = "Fedora3" ] || [ "$WGET_FC4_CHK" = "Fedora4" ]; then WGET="wget --http-user=$ris_auth_id --http-passwd=$ris_auth_pw" else WGET="wget --user=$ris_auth_id --password=$ris_auth_pw" fi ########################################################################## ############## ############## ############## 설치에 필요한 기본 환경 변수 지정 "끝" ############## ############## ############## ########################################################################## ############################################################################################################ ## OS Arch Type 정의하는 부분이며, 기본적으로 자동으로 검색되나, 자동 검색이 되지 않을경우 [자동검색] 섹션 ## 은 주석처리하고, [수동검색] 섹션을 활성화하여, 다시 시도 하십시오. ############################################################################################################ ##### [자동선택] ##### OS_ARCH_TYPE=`uname -i` if [ "$OS_ARCH_TYPE" = "i386" ]; then OS_TYPE="1" elif [ "$OS_ARCH_TYPE" = "x86_64" ]; then OS_TYPE="2" else echo -e "\\033[00;00m" echo -e "\\033[00;31OS * Check 110 line on this script !!!" echo -e "\\033[00;00m" echo exit fi ##### [수동선택] ##### ## 32비트, 64비트 선택 #echo " " #echo -e "\\033[01;32m 1) 32 Bit" #echo -e "\\033[01;32m 2) 64 Bit" #echo " " #echo -n -e "\\033[01;32m* OS 종류 선택 : " #read OS_TYPE #echo " " #echo " " ############################################################################################################ if [ "$OS_TYPE" = "1" ] || [ "$OS_TYPE" = "2" ]; then ## MySQL 관련 기본 라이브러리 추가 WORD_IF="`grep \"/usr/local/mysql/include/mysql\" /etc/ld.so.conf | wc -l`" if [ $WORD_IF = 0 ]; then echo "/usr/local/mysql/include/mysql" >> /etc/ld.so.conf fi WORD_IF="`grep \"/usr/local/mysql/lib/mysql\" /etc/ld.so.conf | wc -l`" if [ $WORD_IF = 0 ]; then echo "/usr/local/mysql/lib/mysql" >> /etc/ld.so.conf fi ## 라이브러리 체크 ldconfig 2> /dev/null ## MySQL 버전 선택 echo -e "\\033[01;31m<< MySQL Version Choice >>" echo -e "\\033[01;32m====================================================================" echo -e "\\033[01;32m 1) Mysql-$MYSQL_3_X" echo -e "\\033[01;32m 2) Mysql-$MYSQL_4_0" echo -e "\\033[01;32m 3) MySQL-$MYSQL_4_1" echo -e "\\033[01;32m 4) MySQL-$MYSQL_5_0" echo " " echo -n -e "\\033[01;32m* Choice MySQL. [1,2,3,4] : " read MYSQL_S case "$MYSQL_S" in 1) echo " " MYSQL="mysql-$MYSQL_3_X" ;; 2) echo " " MYSQL="mysql-$MYSQL_4_0" ;; 3) echo " " MYSQL="mysql-$MYSQL_4_1" ;; 4) echo " " MYSQL="mysql-$MYSQL_5_0" ;; *) echo " " echo -e "\\033[01;31m MySQL : Invalid Choice. Restart this script." echo -e "\\033[00;00m" exit ;; esac ## MySQL root 비번 입력 echo " " echo " " echo -e "\\033[01;31m MySQL root password input !!" echo -e "\\033[01;32m====================================================================" echo -n -e "\\033[01;32m MySQL root PW : " read mysql_root_pw_1 echo -n -e "\\033[01;32m MySQL root PW Confirm : " read mysql_root_pw_2 echo if [ "$mysql_root_pw_1" != "$mysql_root_pw_2" ]; then echo -e "\\033[01;31m MySQL root's Password is not matched !! Retry This Script file.... !!" echo -e "\\033[00;00m" exit 1 fi ## MySQL Data 디렉토리 변경 유무 echo " " echo " " echo -e "\\033[01;31m MySQL Data Directory" echo -e "\\033[01;32m====================================================================" echo -e "\\033[01;32m 1) Default : /usr/local/mysql/data" echo -e "\\033[01;32m 2) Change : Do Input the Mysql New Data Dir !! " echo " " echo -n -e "\\033[01;32m* Choice Setting for Mysql Data Directory. [1,2] : " read MYSQL_DATA_DIR_NUM if [ "$MYSQL_DATA_DIR_NUM" = "1" ]; then echo " " MYSQL_DATA_DIR="/usr/local/mysql/data" echo -n -e "\\033[01;32m* Notice : Installed Mysql Data Dir is $MYSQL_DATA_DIR" elif [ "$MYSQL_DATA_DIR_NUM" = "2" ]; then echo -n -e "\\033[01;32m* Input the MySQL New Data Directory : " read MYSQL_DATA_DIR echo -e "\\033[01;31m << Comfirm MySQL New Data DIR >>" echo -e "\\033[01;32m====================================================================" echo -e "\\033[01;32m New DIR = $MYSQL_DATA_DIR" echo echo -e "\\033[01;32m 1) YES" echo -e "\\033[01;32m 2) NO" echo -e "\\033[01;32m====================================================================" echo " " echo -n -e "\\033[01;32m Your MySQL DATA DIR is Sure ?? [1,2] : " read mysql_data_dir_confirm if [ ! -e `echo $MYSQL_DATA_DIR | awk -F"/" '{print "/"$2}'` ]; then echo -e "\\033[01;31m The MySQL DATA DIR is wrong !! Restart this script !!" echo -e "\\033[00;00m" exit 1 fi if [ "$mysql_data_dir_confirm" = "1" ] || [ "$mysql_data_dir_confirm" = "2" ]; then if [ "$mysql_data_dir_confirm" = "1" ]; then echo " " echo "Install is continued...." elif [ "$mysql_data_dir_confirm" = "2" ]; then echo " " echo -e "\\033[01;31m Restart this script !! and Retry Input the Mysql New Data DIR !!" echo -e "\\033[00;00m" exit 1 fi else echo " " echo -e "\\033[01;31m Invalid Choice. Restart this script !!" echo -e "\\033[00;00m" exit 1 fi else echo -e "\\033[01;31m Invalid Choice. Restart this script !!" echo -e "\\033[00;00m" exit 1 fi echo " " echo " " ############################################################################################################ ###################################### # 버전별 MySQL 컴파일 옵션 변수 설정 # ###################################### ### MYSQL 3.23.x MYSQL_3_X_CONF="--prefix=/usr/local/mysql --localstatedir=$MYSQL_DATA_DIR --with-charset=euc_kr --with-mysql-user=mysql" ### MYSQL 4.0.x 대 버전 컴파일 변수 MYSQL_4_0_CONF="--prefix=/usr/local/mysql --localstatedir=$MYSQL_DATA_DIR --with-charset=euc_kr --with-mysql-user=mysql --with-extra-charsets=all" ### MYSQL 4.1.x 대 버전 컴파일 변수 MYSQL_4_1_EUCKR_CONF="--prefix=/usr/local/mysql --localstatedir=$MYSQL_DATA_DIR --with-charset=euckr --with-mysql-user=mysql --with-extra-charsets=all" MYSQL_4_1_UTF8_CONF="`echo $MYSQL_4_1_EUCKR_CONF | sed 's/euckr/utf8/g'`" ### MYSQL 5.0.x 대 버전 컴파일 변수 MYSQL_5_0_EUCKR_CONF="--prefix=/usr/local/mysql --localstatedir=$MYSQL_DATA_DIR --with-charset=euckr --with-mysql-user=mysql --with-extra-charsets=all" MYSQL_5_0_UTF8_CONF="`echo $MYSQL_5_0_EUCKR_CONF | sed 's/euckr/utf8/g'`" ############################################################################################################ ## MySQL 4.1.x 또는 5.0.x 에서 언어 선택 if [ $MYSQL_S = "3" ] || [ $MYSQL_S = "4" ]; then echo " " echo -e "\\033[01;31m MySQL Character-Set Select !!" echo -e "\\033[01;32m====================================================================" echo -n -e "\\033[01;32m [1] EUCKR [2] UTF-8 : " read MYSQL_CHAR_SET if [ $MYSQL_CHAR_SET = "1" ] || [ $MYSQL_CHAR_SET = "2" ]; then if [ $MYSQL_CHAR_SET = "1" ]; then MYSQL_4_1_CONF="`echo $MYSQL_4_1_EUCKR_CONF`" MYSQL_5_0_CONF="`echo $MYSQL_5_0_EUCKR_CONF`" elif [ $MYSQL_CHAR_SET = "2" ]; then MYSQL_4_1_CONF="`echo $MYSQL_4_1_UTF8_CONF`" MYSQL_5_0_CONF="`echo $MYSQL_5_0_UTF8_CONF`" fi else echo -e "\\033[01;31m MySQL Character-Set : Invalid Choice. Restart this script !!" echo -e "\\033[00;00m" exit 1 fi fi ## Apache 선택 echo " " echo -e "\\033[01;31m << Apache Version Choice >> " echo -e "\\033[01;32m====================================================================" echo -e "\\033[01;32m 1) Ver $APACHE1" echo -e "\\033[01;32m 2) Ver $APACHE2" echo -e "\\033[01;32m 3) Ver $APACHE3" echo " " echo -n -e "\\033[01;32m* Choice Web Server. [1,2,3] : " read APACHE_VER if [ "$APACHE_VER" = "1" ] || [ "$APACHE_VER" = "2" ] || [ "$APACHE_VER" = "3" ]; then echo else echo -e "\\033[01;31m Apache : Invalid Choice. Restart this script !!" echo -e "\\033[00;00m" exit 1 fi echo " " echo -e "\\033[01;31m << Real IP Info, in KT-IDC >>" echo -e "\\033[01;32m====================================================================" echo -n -e "\\033[01;32m Input IDC Real IP : " read real_ip_1 echo -n -e "\\033[01;32m Input IDC Real IP Confirm : " read real_ip_2 if [ "$real_ip_1" != "$real_ip_2" ]; then echo -e "\\033[01;31m System Real IP is not matched !! Retry This Script file... !!" echo -e "\\033[00;00m" exit 1 else REAL_IP="$real_ip_1""blank" fi echo " " ## Apache에 mod_ssl 연동 유무 echo " " echo -e "\\033[01;31m << Apache Module mod_ssl >> " echo -e "\\033[01;32m====================================================================" echo -e "\\033[01;32m 1) NO" echo -e "\\033[01;32m 2) YES" echo " " echo -n -e "\\033[01;32m* Choice Your Answer [1,2] : " read mod_ssl_answer if [ "$mod_ssl_answer" = "1" ] || [ "$mod_ssl_answer" = "2" ]; then echo " " else echo -e "\\033[01;31m Apache mod-ssl : Invalid Choice. Restart this script !!" echo -e "\\033[00;00m" exit 1 fi ## PHP 선택 echo " " echo -e "\\033[01;31m << PHP Version Choice >>" echo -e "\\033[01;32m====================================================================" echo -e "\\033[01;32m 1) PHP Ver $PHP4" echo -e "\\033[01;32m 2) PHP Ver $PHP5" echo " " echo -n -e "\\033[01;32m* Choice PHP. [1,2] : " read PHP_VER if [ "$PHP_VER" = "1" ] || [ "$PHP_VER" = "2" ]; then echo else echo -e "\\033[01;31m PHP : Invalid Choice. Restart this script !!" echo -e "\\033[00;00m" exit 1 fi echo -e "\\033[00;00m" # 설치 소스 저장 디렉토리 생성 mkdir $SOURCE_DIR; cd $SOURCE_DIR; yum -y remove php* yum -y remove httpd* #rpm -e --nodeps `rpm -qa | egrep "mysql|httpd|php"` rpm -e --nodeps `rpm -qa | egrep "httpd|php"` 2> /dev/null rpm -e --nodeps `rpm -qa | grep mysql | grep -v "^mysql-[0-9]"` 2> /dev/null #MYSQL_SERVER_REMOVE_TMP="`rpm -qa | grep mysql-server | head -n 1`" #rpm -e --nodeps $MYSQL_SERVER_REMOVE_TMP.x86_64 #rpm -e --nodeps $MYSQL_SERVER_REMOVE_TMP.i386 ## YUM GPG 키 Importing rpm --import `find /usr/share/doc/ | grep "RPM-GPG-KEY"` ## APM 설치에 필요한 도구 설치 if [ "$WGET_RH9_CHK" = "RedHat9" ]; then if [ -e /etc/yum-sekorea.conf ]; then yum -c /etc/yum-sekorea.conf -y update yum -c /etc/yum-sekorea.conf -y install krb5-libs yum -c /etc/yum-sekorea.conf -y install libc-client* yum -c /etc/yum-sekorea.conf -y install libc-client-devel* yum -c /etc/yum-sekorea.conf -y install uw-imap-devel yum -c /etc/yum-sekorea.conf -y install openssl yum -c /etc/yum-sekorea.conf -y install openssl-devel yum -c /etc/yum-sekorea.conf -y install mhash yum -c /etc/yum-sekorea.conf -y install mhash-devel yum -c /etc/yum-sekorea.conf -y install libtoo yum -c /etc/yum-sekorea.conf -y install libtool-ltdl yum -c /etc/yum-sekorea.conf -y install libtool-ltdl-devel yum -c /etc/yum-sekorea.conf -y install imap-devel yum -c /etc/yum-sekorea.conf -y install imap yum -c /etc/yum-sekorea.conf -y install zlib-devel yum -c /etc/yum-sekorea.conf -y install zlib yum -c /etc/yum-sekorea.conf -y install freetype-devel yum -c /etc/yum-sekorea.conf -y install freetype yum -c /etc/yum-sekorea.conf -y install libpng-devel yum -c /etc/yum-sekorea.conf -y install libpng yum -c /etc/yum-sekorea.conf -y install libjpeg-devel yum -c /etc/yum-sekorea.conf -y install libjpeg yum -c /etc/yum-sekorea.conf -y install libtiff-devel yum -c /etc/yum-sekorea.conf -y install libtiff yum -c /etc/yum-sekorea.conf -y install gd-devel yum -c /etc/yum-sekorea.conf -y install gd yum -c /etc/yum-sekorea.conf -y install pcre-devel yum -c /etc/yum-sekorea.conf -y install pcre yum -c /etc/yum-sekorea.conf -y install libxml-devel yum -c /etc/yum-sekorea.conf -y install libxml yum -c /etc/yum-sekorea.conf -y install libxml2-devel yum -c /etc/yum-sekorea.conf -y install libxml2 yum -c /etc/yum-sekorea.conf -y install gdbm-devel yum -c /etc/yum-sekorea.conf -y install gdbm yum -c /etc/yum-sekorea.conf -y install ncurses-devel yum -c /etc/yum-sekorea.conf -y install ncurses yum -c /etc/yum-sekorea.conf -y install curl-devel yum -c /etc/yum-sekorea.conf -y install curl yum -c /etc/yum-sekorea.conf -y install expat-devel yum -c /etc/yum-sekorea.conf -y install expat yum -c /etc/yum-sekorea.conf -y install bzip2-devel yum -c /etc/yum-sekorea.conf -y install bzip2-libs yum -c /etc/yum-sekorea.conf -y install bzip2 yum -c /etc/yum-sekorea.conf -y install dovecot else yum -y update yum -y install krb5-libs yum -y install libc-client* yum -y install libc-client-devel* yum -y install uw-imap-devel yum -y install openssl yum -y install openssl-devel yum -y install mhash yum -y install mhash-devel yum -y install libtool yum -y install libtool-ltdl yum -y install libtool-ltdl-devel yum -y install imap-devel yum -y install imap yum -y install zlib-devel yum -y install zlib yum -y install freetype-devel yum -y install freetype yum -y install libpng-devel yum -y install libpng yum -y install libjpeg-devel yum -y install libjpeg yum -y install libtiff-devel yum -y install libtiff yum -y install gd-devel yum -y install gd yum -y install pcre-devel yum -y install pcre yum -y install libxml-devel yum -y install libxml yum -y install libxml2-devel yum -y install libxml2 yum -y install gdbm-devel yum -y install gdbm yum -y install ncurses-devel yum -y install ncurses yum -y install curl-devel yum -y install curl yum -y install expat-devel yum -y install expat yum -y install bzip2-devel yum -y install bzip2-libs yum -y install bzip2 yum -y install dovecot fi else if [ -e /etc/yum-sekorea.conf ]; then yum -c /etc/yum-sekorea.conf -y update yum -c /etc/yum-sekorea.conf -y install krb5-libs libc-client libc-client-devel uw-imap-devel openssl openssl-devel mhash mhash-devel libtool libtool-ltdl libtool-ltdl-devel zlib-devel zlib freetype-devel freetype libpng-devel libpng libjpeg-devel libjpeg libtiff-devel libtiff gd-devel gd pcre-devel pcre libxml2-devel libxml2 libxml-devel libxml gdbm-devel gdbm ncurses-devel ncurses imap-devel imap curl-devel curl expat-devel expat bzip2-devel bzip2-libs bzip2 dovecot else yum -y update yum -y install krb5-libs libc-client libc-client-develuw-imap-devel openssl openssl-devel mhash mhash-devel libtool libtool-ltdl libtool-ltdl-devel zlib-devel zlib freetype-devel freetype libpng-devel libpng libjpeg-devel libjpeg libtiff-devel libtiff gd-devel gd pcre-devel pcre libxml2-devel libxml2 libxml-devel libxml gdbm-devel gdbm ncurses-devel ncurses imap-devel imap curl-devel curl expat-devel expat bzip2-devel bzip2-libs bzip2 dovecot fi fi rpm -e mysql --nodeps ## x86_64 시스템에서 PHP 그래픽 관련 라이브러리 및 kerberos, imap 라이브러리 링크 세팅 if [ "$OS_TYPE" = "2" ]; then ln -sf /usr/lib64/libjpeg.so /usr/lib/libjpeg.so ln -sf /usr/lib64/libpng12.a /usr/lib/libpng12.a ln -sf /usr/lib64/libfreetype.so /usr/lib/libfreetype.so ############ ([Cent 64bit], [Fedora 5 64bit] 이하 에서 에러 발생 해결책) ############ ## 발생 원인 : 64bit용(/usr/lib64/하위에)은 존재하나, ## 32bit용(/usr/lib/하위에)은 Cent에서 존재하지 않음. ############################################################ if [ "$CHK_OS_NAME" = "CentOS" ]; then ln -sf /usr/lib64/libtiff.so /usr/lib/libtiff.so ln -sf /usr/lib64/libtiffxx.so /usr/lib/libtiffxx.so ln -sf /usr/lib64/libpng.so /usr/lib/libpng.so ln -sf /usr/lib64/libpng12.so /usr/lib/libpng12.so ## PHP : --wiht-imap 옵션 사용을 위한 라이브러리 링크 처리 (Cent 계열 64bit 해당) if [ "$OS_TYPE" = "2" ]; then ln -s /usr/lib64/libc-client.a /usr/lib/libc-client.a fi fi if [ "$CHK_OS_NAME" = "Fedora" ] && [ "$CHK_OS_GRADE" -le "5" ]; then ln -sf /usr/lib64/libtiff.so /usr/lib/libtiff.so ln -sf /usr/lib64/libtiffxx.so /usr/lib/libtiffxx.so ln -sf /usr/lib64/libpng.so /usr/lib/libpng.so ln -sf /usr/lib64/libpng12.so /usr/lib/libpng12.so fi ##################################################################################### ## 64bit 기반에서 kerberos 링크 처리 KRB5_LIBS_64_FILES=`rpm -ql krb5-libs.x86_64 | grep "/usr/lib64/lib"` for FILE_LISTS_TMP in $KRB5_LIBS_64_FILES do if [ ! -L $FILE_LISTS_TMP ]; then KRB5_LIBS_32_FILES=`echo $FILE_LISTS_TMP | sed -e 's/\/lib64\//\/lib\//g' | awk -F"." '{print $1"."$2}'` ln -s $FILE_LISTS_TMP $KRB5_LIBS_32_FILES fi done ##################################################################################### fi ################################## ######### APACHE INSTALL ######### ################################## ########################################################################### ## 64bit 시스템에서, libexpat.so 라이버러리 링크 오류 문제 처리 구문 if [ "$OS_TYPE" = "2" ] && [ \( "$APACHE_VER" = "2" \) -o \( "$APACHE_VER" = "3" \) ]; then if [ \( "$CHK_OS_NAME" = "Fedora" \) -a \( $CHK_OS_GRADE -ge 6 \) ] || [ \( "$CHK_OS_NAME" = "CentOS" \) -a \( $CHK_OS_GRADE -ge 5 \) ]; then ln -sf /usr/lib64/libexpat.so /usr/lib/libexpat.so fi fi ########################################################################### if [ "$mod_ssl_answer" = "1" ]; then if [ "$APACHE_VER" = "1" ]; then ## Apache Ver 1.3.x DSO 설치 cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[Apache Web Server Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/$APACHE1.tar.gz; tar zxvf $APACHE1.tar.gz; cd $APACHE1; sed -i "s/#define HARD_SERVER_LIMIT 256/#define HARD_SERVER_LIMIT 2048/g" ./src/include/httpd.h echo " " ./configure $APACHE1_CONF make; make install; echo "--- /etc/rc.d/init.d/apachectl ---" >> /usr/local/apache/bin/apachectl; echo "# chkconfig: - 92 92 " >> /usr/local/apache/bin/apachectl; echo "# description: Apache Web Server Version : $APACHE1 " >> /usr/local/apache/bin/apachectl; cp /usr/local/apache/bin/apachectl /etc/rc.d/init.d/; chkconfig --add apachectl; chkconfig --level 345 apachectl on; elif [ "$APACHE_VER" = "2" ]; then ## httpd Ver 2.0.x DOS 설치 cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[Apache Web Server Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/$APACHE2.tar.gz; tar zxvf $APACHE2.tar.gz; cd $APACHE2; sed -i "s/#define DEFAULT_SERVER_LIMIT 256/#define DEFAULT_SERVER_LIMIT 2048/g" ./server/mpm/prefork/prefork.c sed -i "s/#define DEFAULT_SERVER_LIMIT 16/#define DEFAULT_SERVER_LIMIT 32/g" ./server/mpm/worker/worker.c echo " " ./configure $APACHE2_CONF make; make install; echo "--- /etc/rc.d/init.d/apachectl ---" >> /usr/local/apache/bin/apachectl; echo "# chkconfig: - 92 92 " >> /usr/local/apache/bin/apachectl; echo "# description: Apache Web Server Version : $APACHE2 " >> /usr/local/apache/bin/apachectl; cp /usr/local/apache/bin/apachectl /etc/rc.d/init.d/; chkconfig --add apachectl; chkconfig --level 345 apachectl on; else ## httpd Ver 2.2.x DOS 설치 cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[Apache Web Server Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/$APACHE3.tar.gz; tar zxvf $APACHE3.tar.gz; cd $APACHE3; sed -i "s/#define DEFAULT_SERVER_LIMIT 256/#define DEFAULT_SERVER_LIMIT 2048/g" ./server/mpm/prefork/prefork.c sed -i "s/#define DEFAULT_SERVER_LIMIT 16/#define DEFAULT_SERVER_LIMIT 64/g" ./server/mpm/worker/worker.c echo " " ./configure $APACHE3_CONF make; make install; echo "--- /etc/rc.d/init.d/apachectl ---" >> /usr/local/apache/bin/apachectl; echo "# chkconfig: - 92 92 " >> /usr/local/apache/bin/apachectl; echo "# description: Apache Web Server Version : $APACHE3 " >> /usr/local/apache/bin/apachectl; cp /usr/local/apache/bin/apachectl /etc/rc.d/init.d/; chkconfig --add apachectl; chkconfig --level 345 apachectl on; fi elif [ "$mod_ssl_answer" = "2" ]; then if [ "$APACHE_VER" = "1" ]; then ## Apache Ver 1.3.x DSO 설치 cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[Apache Web Server Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/$APACHE1.tar.gz; tar zxvf $APACHE1.tar.gz; ## mod-ssl 설치 $WGET $SOURCE_ADDR/$MOD_SSL.tar.gz; tar zxvf $MOD_SSL.tar.gz cd $MOD_SSL; if [ "$OS_TYPE" = "2" ] && [ "$CHK_OS_NAME" = "CentOS" ]; then ln -s /usr/lib64/libcrypto.a /usr/lib/libcrypto.a ln -s /usr/lib64/libcrypto.so /usr/lib/libcrypto.so ln -s /usr/lib64/libssl.a /usr/lib/libssl.a ln -s /usr/lib64/libssl.so /usr/lib/libssl.so ln -s /usr/lib64/pkgconfig/openssl.pc /usr/lib/pkgconfig/openssl.pc fi ./configure --prefix=/usr/local/apache --with-apache=$SOURCE_DIR/$APACHE1 --with-ssl=SYSTEM cd $SOURCE_DIR/$APACHE1 sed -i "s/#define HARD_SERVER_LIMIT 256/#define HARD_SERVER_LIMIT 2048/g" ./src/include/httpd.h echo " " # export SSL_BASE="SYSTEM" # export LDFLAGS="-L/lib" # export CPPFLAGS="-l/usr" export CFLAGS="-I/usr/kerberos/include -L/usr/kerberos/lib" ./configure `echo $APACHE1_CONF | sed -e 's/--enable-module=so/--enable-module=so --enable-module=ssl/g'` make; make install; # unset SSL_BASE LDFLAGS CPPFLAGS cp -arp /usr/local/apache/conf/ssl.key/server.key /usr/local/apache/conf/ssl.key/server.key.orig openssl genrsa 1024 > /usr/local/apache/conf/ssl.key/server.key MOD_SSL_CONF_START_LINE="`grep -n \"SSL Global Context\" /usr/local/apache/conf/httpd.conf | awk -F\":\" '{print $1}'`" sed -i "${MOD_SSL_CONF_START_LINE},$ d" /usr/local/apache/conf/httpd.conf $WGET $SOURCE_ADDR/apache_1.3.x_mod-ssl.conf -O /usr/local/apache/conf/mod-ssl.conf echo "## Secure (SSL/TLS) connections Setting Files" >> /usr/local/apache/conf/httpd.conf echo "#include /usr/local/apache/conf/mod-ssl.conf" >> /usr/local/apache/conf/httpd.conf echo "--- /etc/rc.d/init.d/apachectl ---" >> /usr/local/apache/bin/apachectl; echo "# chkconfig: - 92 92 " >> /usr/local/apache/bin/apachectl; echo "# description: Apache Web Server Version : $APACHE1 " >> /usr/local/apache/bin/apachectl; cp /usr/local/apache/bin/apachectl /etc/rc.d/init.d/; chkconfig --add apachectl; chkconfig --level 345 apachectl on; elif [ "$APACHE_VER" = "2" ]; then ## httpd Ver 2.0.x DSO 설치 cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[Apache Web Server Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/$APACHE2.tar.gz; tar zxvf $APACHE2.tar.gz; cd $APACHE2; sed -i "s/#define DEFAULT_SERVER_LIMIT 256/#define DEFAULT_SERVER_LIMIT 2048/g" ./server/mpm/prefork/prefork.c sed -i "s/#define DEFAULT_SERVER_LIMIT 16/#define DEFAULT_SERVER_LIMIT 64/g" ./server/mpm/worker/worker.c echo " " export CFLAGS="-I/usr/kerberos/include -L/usr/kerberos/lib" ./configure `echo $APACHE2_CONF | sed -e 's/--with-mpm=worker/--with-mpm=worker --enable-ssl/g'` make; make install; MOD_SSL_CONF_START_LINE="`grep -n \"\" /usr/local/apache/conf/httpd.conf | awk -F\":\" '{print $1}'`" MOD_SSL_CONF_STOP_LINE="`expr $MOD_SSL_CONF_START_LINE \+ 2`" sed -i "${MOD_SSL_CONF_START_LINE},${MOD_SSL_CONF_STOP_LINE}s/^/#/g" /usr/local/apache/conf/httpd.conf mkdir /usr/local/apache/conf/ssl.key mkdir /usr/local/apache/conf/ssl.crt chmod 600 /usr/local/apache/conf/ssl.key /usr/local/apache/conf/ssl.crt openssl genrsa 1024 > /usr/local/apache/conf/ssl.key/server.key cp -arp /usr/local/apache/conf/ssl.key/server.key /usr/local/apache/conf/ssl.key/server.key.orig echo "--- /etc/rc.d/init.d/apachectl ---" >> /usr/local/apache/bin/apachectl; echo "# chkconfig: - 92 92 " >> /usr/local/apache/bin/apachectl; echo "# description: Apache Web Server Version : $APACHE2 " >> /usr/local/apache/bin/apachectl; cp /usr/local/apache/bin/apachectl /etc/rc.d/init.d/; chkconfig --add apachectl; chkconfig --level 345 apachectl on; else ## httpd Ver 2.2.x DSO 설치 cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[Apache Web Server Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/$APACHE3.tar.gz; tar zxvf $APACHE3.tar.gz; cd $APACHE3; sed -i "s/#define DEFAULT_SERVER_LIMIT 256/#define DEFAULT_SERVER_LIMIT 2048/g" ./server/mpm/prefork/prefork.c sed -i "s/#define DEFAULT_SERVER_LIMIT 16/#define DEFAULT_SERVER_LIMIT 64/g" ./server/mpm/worker/worker.c echo " " export CFLAGS="-I/usr/kerberos/include -L/usr/kerberos/lib" ./configure `echo $APACHE3_CONF | sed -e 's/--with-mpm=worker/--with-mpm=worker --enable-ssl/g'` make; make install; cp -arp /usr/local/apache/conf/server.key /usr/local/apache/conf/server.key.orig openssl genrsa 1024 > /usr/local/apache/conf/server.key echo "--- /etc/rc.d/init.d/apachectl ---" >> /usr/local/apache/bin/apachectl; echo "# chkconfig: - 92 92 " >> /usr/local/apache/bin/apachectl; echo "# description: Apache Web Server Version : $APACHE3 " >> /usr/local/apache/bin/apachectl; cp /usr/local/apache/bin/apachectl /etc/rc.d/init.d/; chkconfig --add apachectl; chkconfig --level 345 apachectl on; fi fi ################################# ######### MYSQL INSTALL ######### ################################# ## MySQL 설치 case "$MYSQL_S" in # MySQL-3.X.X install 1) cd $SOURCE_DIR; echo " "; echo -e "\\033[01;31m[MySQL DataBase Install]"; echo -e "\\033[00;00m"; sleep 1 echo " "; $WGET $SOURCE_ADDR/$MYSQL.tar.gz; tar zxvf $MYSQL.tar.gz; cd $MYSQL; groupadd -g 400 mysql; useradd -u400 -g400 -d /usr/local/mysql -s /bin/false mysql; if [ "$PHP_VER" = "2" ]; then ./configure `echo $MYSQL_3_X_CONF | sed -e 's/--prefix=\/usr\/local\/mysql/--prefix=\/usr\/local\/mysql --enable-thread-safe-client/g'`; else ./configure $MYSQL_3_X_CONF fi make; make install; sleep 1 # $SOURCE_DIR/$MYSQL/scripts/mysql_install_db; # chown -R mysql:mysql /usr/local/mysql; # cp $SOURCE_DIR/$MYSQL/support-files/my-huge.cnf /etc/my.cnf; # cp /usr/local/mysql/share/mysql/mysql.server /etc/init.d/mysqld; ;; # MySQL-4.0.x install 2) # if [ "$CHK_OS_NAME" = "Fedora" ] && [ $CHK_OS_GRADE -ge 4 ]; then if [ \( "$CHK_OS_NAME" = "Fedora" \) -a \( $CHK_OS_GRADE -ge 4 \) ] || [ \( "$CHK_OS_NAME" = "CentOS" \) -a \( $CHK_OS_GRADE -ge 5 \) ]; then echo "/* Linuxthreads */" >> /usr/include/pthread.h fi cd $SOURCE_DIR; echo " "; echo -e "\\033[01;31m[MySQL DataBase Install]"; echo -e "\\033[00;00m"; sleep 1 echo " "; $WGET $SOURCE_ADDR/$MYSQL.tar.gz; tar zxvf $MYSQL.tar.gz; cd $MYSQL; groupadd -g 400 mysql; useradd -u400 -g400 -d /usr/local/mysql -s /bin/false mysql; if [ "$PHP_VER" = "2" ]; then ./configure `echo $MYSQL_4_0_CONF | sed -e 's/--prefix=\/usr\/local\/mysql/--prefix=\/usr\/local\/mysql --enable-thread-safe-client/g'`; else ./configure $MYSQL_4_0_CONF fi make; make install; sleep 1 # $SOURCE_DIR/$MYSQL/scripts/mysql_install_db; # chown -R mysql:mysql /usr/local/mysql; # cp $SOURCE_DIR/$MYSQL/support-files/my-huge.cnf /etc/my.cnf; # cp /usr/local/mysql/share/mysql/mysql.server /etc/init.d/mysqld; ;; # MySQL-4.1.x install 3) cd $SOURCE_DIR; echo "/* Linuxthreads */" >> /usr/include/pthread.h echo " "; echo -e "\\033[01;31m[MySQL DataBase Install]"; echo -e "\\033[00;00m"; sleep 1 echo " "; $WGET $SOURCE_ADDR/$MYSQL.tar.gz; tar zxvf $MYSQL.tar.gz; cd $MYSQL; groupadd -g 400 mysql; useradd -u400 -g400 -d /usr/local/mysql -s /bin/false mysql; if [ "$PHP_VER" = "2" ]; then ./configure `echo $MYSQL_4_1_CONF | sed -e 's/--prefix=\/usr\/local\/mysql/--prefix=\/usr\/local\/mysql --enable-thread-safe-client/g'`; else ./configure $MYSQL_4_1_CONF fi make; make install; sleep 1 # $SOURCE_DIR/$MYSQL/scripts/mysql_install_db; # chown -R mysql:mysql /usr/local/mysql; # cp $SOURCE_DIR/$MYSQL/support-files/my-huge.cnf /etc/my.cnf; # cp /usr/local/mysql/share/mysql/mysql.server /etc/init.d/mysqld; ;; # MySQL-5.0.x install 4) cd $SOURCE_DIR; echo " "; echo -e "\\033[01;31m[MySQL DataBase Install]"; echo -e "\\033[00;00m"; sleep 1 echo " "; $WGET $SOURCE_ADDR/$MYSQL.tar.gz; tar zxvf $MYSQL.tar.gz; cd $MYSQL; groupadd -g 400 mysql; useradd -u400 -g400 -d /usr/local/mysql -s /bin/false mysql; if [ "$PHP_VER" = "2" ]; then ./configure `echo $MYSQL_5_0_CONF | sed -e 's/--prefix=\/usr\/local\/mysql/--prefix=\/usr\/local\/mysql --enable-thread-safe-client/g'`; else ./configure $MYSQL_5_0_CONF fi make; make install; sleep 1 # $SOURCE_DIR/$MYSQL/scripts/mysql_install_db; # chown -R mysql:mysql /usr/local/mysql; # cp $SOURCE_DIR/$MYSQL/support-files/my-huge.cnf /etc/my.cnf; # cp /usr/local/mysql/share/mysql/mysql.server /etc/init.d/mysqld; ;; esac ######## MySQL 설치후 마무리 작업 ######### $SOURCE_DIR/$MYSQL/scripts/mysql_install_db; chown -R mysql:mysql /usr/local/mysql; chown -R mysql.mysql $MYSQL_DATA_DIR cp $SOURCE_DIR/$MYSQL/support-files/my-huge.cnf /etc/my.cnf; cp /usr/local/mysql/share/mysql/mysql.server /etc/init.d/mysqld; chmod 700 /etc/init.d/mysqld chown root.root /etc/init.d/mysqld chkconfig --add mysqld chmod 711 /usr/local/mysql chmod 700 $MYSQL_DATA_DIR chmod 751 /usr/local/mysql/bin chmod 750 /usr/local/mysql/bin/* chmod 755 /usr/local/mysql/bin/mysql chmod 755 /usr/local/mysql/bin/mysqldump ## MySQL RPM 의 lib 파일들 -> 소스 컴파일 MySQL lib 파일로 대체(덮어씀) #\cp -ar /usr/local/mysql/lib/mysql /usr/lib/ #if [ "$OS_TYPE" = "2" ]; then # \cp -ar /usr/local/mysql/lib/mysql /usr/lib64/ #fi sed -i "s/mysql:!!:/mysql:*:/g" /etc/shadow ## mysql, mysqldump 링크처리 WORD_IF="`grep \"alias mysqladmin='/usr/local/mysql/bin/mysqladmin'\" /root/.bashrc | wc -l`" if [ $WORD_IF = 0 ]; then echo "alias mysqladmin='/usr/local/mysql/bin/mysqladmin'" >> /root/.bashrc fi WORD_IF="`grep \"alias mysqldump='/usr/local/mysql/bin/mysqldump'\" /etc/bashrc | wc -l`" if [ $WORD_IF = 0 ]; then echo "alias mysqldump='/usr/local/mysql/bin/mysqldump'" >> /etc/bashrc fi WORD_IF="`grep \"alias mysql='/usr/local/mysql/bin/mysql'\" /etc/bashrc | wc -l`" if [ $WORD_IF = 0 ]; then echo "alias mysql='/usr/local/mysql/bin/mysql'" >> /etc/bashrc fi # ln -s /usr/local/mysql/bin/mysql /usr/bin/mysql > /dev/null 2>&1 # ln -s /usr/local/mysql/bin/mysqldump /usr/bin/mysqldump > /dev/null 2>&1 #### my.cnf 설정 추가, 보완 #### #if [ "$MYSQL_S" = "3" ] || [ "$MYSQL_S" = "4" ]; then # sed -i '/\[client\]/a default-character-set=euckr' /etc/my.cnf # sed -i '/\[mysqld\]/a default-character-set=euckr' /etc/my.cnf # sed -i '/\[mysqldump\]/a default-character-set=euckr' /etc/my.cnf # sed -i '/\[mysql\]/a default-character-set=euckr' /etc/my.cnf # sed -i '/\[isamchk\]/a default-character-set=euckr' /etc/my.cnf # sed -i '/\[myisamchk\]/a default-character-set=euckr' /etc/my.cnf # sed -i '/\[mysqlhotcopy\]/a default-character-set=euckr' /etc/my.cnf #fi #if [ "$MYSQL_S" = "2" ]; then # sed -i '/\[client\]/a default-character-set=euc_kr' /etc/my.cnf # sed -i '/\[mysqld\]/a default-character-set=euc_kr' /etc/my.cnf # sed -i '/\[mysqldump\]/a default-character-set=euc_kr' /etc/my.cnf # sed -i '/\[mysql\]/a default-character-set=euc_kr' /etc/my.cnf # sed -i '/\[isamchk\]/a default-character-set=euc_kr' /etc/my.cnf # sed -i '/\[myisamchk\]/a default-character-set=euc_kr' /etc/my.cnf # sed -i '/\[mysqlhotcopy\]/a default-character-set=euc_kr' /etc/my.cnf #fi ### 기타 APM 관련 도구 설치 ## mhash(./configure && make && make install) cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[mhash Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/mhash-0.9.7.1.tar.gz; tar zxvf mhash-0.9.7.1.tar.gz; cd mhash-0.9.7.1; ./configure && make && make install; ## mcrypt(./configure && make && make install) cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[mcrypt Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/libmcrypt-2.5.7.tar.gz; tar zxvf libmcrypt-2.5.7.tar.gz; cd libmcrypt-2.5.7; ./configure && make && make install; ## ClibPDF cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[clibpdf Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/clibpdf202r1.tar.gz; tar zxvf clibpdf202r1.tar.gz; cd ClibPDF/source; mv Makefile Makefile.orig; cp Makefile.Linux Makefile; sed -i "s/CFLAGS=-Wall -g -DLinux/CFLAGS=-Wall -g -DLinux -fPIC/g" Makefile; make lib && make install; ## pdflib( ./configure && make && make install) cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[pdflib Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/pdflib-4.0.3.tar.gz; tar zxvf pdflib-4.0.3.tar.gz; cd pdflib-4.0.3; ./configure && make && make install; ## 라이브러리 체크 ldconfig ################################### ########## PHP INSTALL ############ ################################### ## PHP-5.x.x 설치시 libxml2 버전 체크 및 업데이트 if [ "$PHP_VER" = "2" ]; then CHECK_NUM=`rpm -qa | grep libxml2 | head -n1 | awk -F"." '{print $2}'` if [ $CHECK_NUM -lt 6 ]; then $WGET $SOURCE_ADDR/libxml2-2.6.16-6.src.rpm rpmbuild --rebuild libxml2-2.6.16-6.src.rpm rm -f ibxml2-2.6.16-6.src.rpm # mv /usr/src/redhat/RPMS/`uname -a | awk -F" " '{print $14}'`/libxml2* $SOURCE_DIR mv /usr/src/redhat/RPMS/`uname -i`/libxml2* $SOURCE_DIR rpm -Uvh $SOURCE_DIR/libxml2* fi fi ########### 32bit PHP-Zend ########### if [ "$OS_TYPE" = "1" ]; then if [ "$PHP_VER" = "1" ]; then # PHP4 install cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[PHP Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/$PHP4.tar.gz; tar zxvf $PHP4.tar.gz; cd $PHP4; if [ "$APACHE_VER" = "1" ]; then ./configure $PHP_CONF1_32 else ./configure $PHP_CONF2_32 fi make; make install; cp php.ini-dist /usr/local/apache/conf/php.ini; # ZendOptimizer install cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[ZendOptimizer Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/$Zend32.tar.gz; tar zxvf $Zend32.tar.gz; cd $Zend32; ./install.sh cd $SOURCE_DIR fi if [ "$PHP_VER" = "2" ]; then # PHP5 install cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[PHP Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/$PHP5.tar.gz; tar zxvf $PHP5.tar.gz; cd $PHP5; if [ "$APACHE_VER" = "1" ]; then ./configure $PHP_CONF1_32 else ./configure $PHP_CONF2_32 fi make; make install; cp php.ini-dist /usr/local/apache/conf/php.ini; # ZendOptimizer install cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[ZendOptimizer Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/$Zend32.tar.gz; tar zxvf $Zend32.tar.gz; cd $Zend32; ./install.sh cd $SOURCE_DIR fi fi ########### 64bit PHP-Zend ########### if [ "$OS_TYPE" = "2" ]; then if [ "$PHP_VER" = "1" ]; then # PHP4 install cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[PHP Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/$PHP4.tar.gz; tar zxvf $PHP4.tar.gz; cd $PHP4; if [ "$APACHE_VER" = "1" ]; then ./configure $PHP_CONF1_64 else ./configure $PHP_CONF2_64 fi make; make install; cp php.ini-dist /usr/local/apache/conf/php.ini; # ZendOptimizer install cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[ZendOptimizer Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/$Zend64.tar.gz; tar zxvf $Zend64.tar.gz; cd $Zend64; ./install.sh cd $SOURCE_DIR fi if [ "$PHP_VER" = "2" ]; then # PHP5 install cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[PHP Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/$PHP5.tar.gz; tar zxvf $PHP5.tar.gz; cd $PHP5; if [ "$APACHE_VER" = "1" ]; then ./configure $PHP_CONF1_64 else ./configure $PHP_CONF2_64 fi make; make install; cp php.ini-dist /usr/local/apache/conf/php.ini; # ZendOptimizer install cd $SOURCE_DIR; echo " " echo -e "\\033[01;31m[ZendOptimizer Install]" echo -e "\\033[00;00m" sleep 1 echo " " $WGET $SOURCE_ADDR/$Zend64.tar.gz; tar zxvf $Zend64.tar.gz; cd $Zend64; ./install.sh cd $SOURCE_DIR fi fi ######## MySQL 설치후 마무리 작업 반복 (data 디렉토리 미생성시) ######### if [ ! -s $MYSQL_DATA_DIR ]; then $SOURCE_DIR/$MYSQL/scripts/mysql_install_db; chown -R mysql:mysql /usr/local/mysql; chown -R mysql:mysql $MYSQL_DATA_DIR cp $SOURCE_DIR/$MYSQL/support-files/my-huge.cnf /etc/my.cnf; cp /usr/local/mysql/share/mysql/mysql.server /etc/init.d/mysqld; chmod 700 /etc/init.d/mysqld chown root.root /etc/init.d/mysqld chkconfig --add mysqld chmod 711 /usr/local/mysql chmod 700 $MYSQL_DATA_DIR chmod 751 /usr/local/mysql/bin chmod 750 /usr/local/mysql/bin/* chmod 755 /usr/local/mysql/bin/mysql chmod 755 /usr/local/mysql/bin/mysqldump ## MySQL RPM 의 lib 파일들 -> 소스 컴파일 MySQL lib 파일로 대체(덮어씀) #\cp -ar /usr/local/mysql/lib/mysql /usr/lib/ #if [ "$OS_TYPE" = "2" ]; then # \cp -ar /usr/local/mysql/lib/mysql /usr/lib64/ #fi sed -i 's/mysql:!!:/mysql:*:/g' /etc/shadow ## mysql, mysqldump 링크처리 # sed -i "/alias mv='mv -iv'/a alias mysqladmin='/usr/local/mysql/bin/mysqladmin'" /root/.bashrc # sed -i "/alias mv='mv -iv'/a alias mysqldump='/usr/local/mysql/bin/mysqldump'" /root/.bashrc # sed -i "/alias mv='mv -iv'/a alias mysql='/usr/local/mysql/bin/mysql'" /root/.bashrc # ln -s /usr/local/mysql/bin/mysql /usr/bin/mysql > /dev/null 2>&1 # ln -s /usr/local/mysql/bin/mysqldump /usr/bin/mysqldump > /dev/null 2>&1 fi #### php.ini 보안관련 기본값 수정 #### sed -i 's/register_globals = Off/register_globals = On/g' /usr/local/apache/conf/php.ini sed -i 's/;upload_tmp_dir =/upload_tmp_dir = \/tmp/g' /usr/local/apache/conf/php.ini sed -i 's/upload_max_filesize = 2M/upload_max_filesize = 10M/g' /usr/local/apache/conf/php.ini sed -i 's/post_max_size = 8M/post_max_size = 10M/g' /usr/local/apache/conf/php.ini sed -i 's/memory_limit = 8M/memory_limit = 10M/g' /usr/local/apache/conf/php.ini sed -i 's/allow_url_fopen = On/allow_url_fopen = Off/g' /usr/local/apache/conf/php.ini sed -i 's/log_errors = Off/log_errors = On/g' /usr/local/apache/conf/php.ini sed -i 's/;error_log = syslog/error_log = syslog/g' /usr/local/apache/conf/php.ini #### Apache 1.3.x 설정 수정 및, httpd.conf 파일 수정, mod_ssl 활성화 정보 파일 생성 #### if [ "$APACHE_VER" = "1" ]; then $WGET $SOURCE_ADDR/mod_url-1.c mv $SOURCE_DIR/mod_url-1.c $SOURCE_DIR/mod_url.c $WGET $SOURCE_ADDR/mod_url.conf -O /usr/local/apache/conf/mod_url.conf /usr/local/apache/bin/apxs -aic $SOURCE_DIR/mod_url.c sed -i "/# End of browser customization directives/a include /usr/local/apache/conf/mod_url.conf" /usr/local/apache/conf/httpd.conf if [ "$REAL_IP" != "blank" ]; then REAL_IP=`echo $REAL_IP | sed -e "s/blank//g"` sed -i "/#ServerName www.example.com/a ServerName $REAL_IP" /usr/local/apache/conf/httpd.conf fi sed -i "s/`grep \"^User \" /usr/local/apache/conf/httpd.conf`/User nobody/g" /usr/local/apache/conf/httpd.conf sed -i "s/`grep \"^Group \" /usr/local/apache/conf/httpd.conf`/Group nobody/g" /usr/local/apache/conf/httpd.conf sed -i "s/MinSpareServers 5/MinSpareServers 20/g" /usr/local/apache/conf/httpd.conf sed -i "s/MaxSpareServers 10/MaxSpareServers 100/g" /usr/local/apache/conf/httpd.conf sed -i "s/StartServers 5/StartServers 30/g" /usr/local/apache/conf/httpd.conf sed -i "s/MaxKeepAliveRequests 100/MaxKeepAliveRequests 10000/g" /usr/local/apache/conf/httpd.conf sed -i "s/MaxClients 150/MaxClients 512/g" /usr/local/apache/conf/httpd.conf sed -i "/MaxClients 512/i ## [확인] MaxClients Limit : 1024 " /usr/local/apache/conf/httpd.conf rm -rf /usr/local/apache/htdocs/index.html*; cp -arp /usr/local/apache/conf/httpd.conf /usr/local/apache/conf/httpd.conf.save; sed -i 's/DirectoryIndex index.html/DirectoryIndex index.html index.htm index.php index.php3 index.php4 index.php5 index.phtml index.cgi index.jsp/g' /usr/local/apache/conf/httpd.conf sed -i '/AddType application\/x-tar .tgz/a # PHP Enable' /usr/local/apache/conf/httpd.conf sed -i '/# PHP Enable/a AddType application/x-httpd-php .html .htm .php .php3 .php4 .php5 .phtml .cgi .inc' /usr/local/apache/conf/httpd.conf sed -i '/AddType application\/x-httpd-php .html .htm .php .php3 .php4 .php5 .phtml .cgi .inc/a AddType application/x-httpd-php-source .phps' /usr/local/apache/conf/httpd.conf sed -i 's/#AddHandler cgi-script .cgi/AddHandler cgi-script .cgi/g' /usr/local/apache/conf/httpd.conf echo " AllowOverride All Options +ExecCGI Order allow,deny Allow from all " >> /usr/local/apache/conf/httpd.conf echo "" > /usr/local/apache/htdocs/index.php; if [ "$mod_ssl_answer" = "2" ]; then echo "TEST 인증키 생성 명령 ===================== apachectl startssl 실행시 비밀번호 없음 : # openssl genrsa 1024 > /usr/local/apache/conf/ssl.key/server.key apachectl startssl 실행시 비밀번호 있음 : # openssl genrsa -des3 1024 > /usr/local/apache/conf/ssl.key/server.key TEST인증요구서 생성 명령 ======================== # openssl req -new -x509 -days 365 -key /usr/local/apache/conf/ssl.key/server.key -out /usr/local/apache/conf/ssl.crt/server.crt * 설치후, 위의 과정을 거친후, /usr/local/apache/conf/httpd.conf 파일 마지막 끝부분에, --------------------------------------------------- #include /usr/local/apache/conf/apache_mod-ssl.conf --------------------------------------------------- 와 같이 주석처리 되어 있는 SSL 설정을 활성화(# 제거)와 동시에, 해당 파일을 적절히 수정한 후, # /etc/init.d/apachectl startssl 명령을 통해 SSL 보안 Apache 서버를 시작할수 있음. " >> /usr/local/src/APM_Setup/README_Apache-mod_ssl_Active.txt fi #### httpd 2.0.x 설정 수정 및, httpd.conf 파일 수정 #### elif [ "$APACHE_VER" = "2" ]; then $WGET -N $SOURCE_ADDR/mod_url_2.x.tar.gz tar xzpfv mod_url_2.x.tar.gz #mv $SOURCE_DIR/mod_url-2.c $SOURCE_DIR/mod_url.c $WGET $SOURCE_ADDR/mod_url.conf -O /usr/local/apache/conf/mod_url.conf /usr/local/apache/bin/apxs -aic $SOURCE_DIR/mod_url/apache2/mod_url.c sed -i "/# Use name-based virtual hosting./i include /usr/local/apache/conf/mod_url.conf" /usr/local/apache/conf/httpd.conf if [ "$REAL_IP" != "blank" ]; then REAL_IP=`echo $REAL_IP | sed -e "s/blank//g"` sed -i "/#ServerName www.example.com/a ServerName $REAL_IP" /usr/local/apache/conf/httpd.conf fi rm -rf /usr/local/apache/htdocs/index.html*; cp -arp /usr/local/apache/conf/httpd.conf /usr/local/apache/conf/httpd.conf.save; #WORKER_MODULE_LIMIT_1="`grep -n \"worker.c\" /usr/local/apache/conf/httpd.conf | awk -F\":\" '{print $1}'`" #WORKER_MODULE_LINET_2="`expr $WORKER_MODULE_LIMIT_1 \+ 2`" #sed -i "${WORKER_MODULE_LINET_2}s/150/500/g" /usr/local/apache/conf/httpd.conf sed -i "s/`grep \"^User \" /usr/local/apache/conf/httpd.conf`/User nobody/g" /usr/local/apache/conf/httpd.conf sed -i "s/`grep \"^Group \" /usr/local/apache/conf/httpd.conf`/Group nobody/g" /usr/local/apache/conf/httpd.conf sed -i 's/DirectoryIndex index.html/DirectoryIndex index.html index.htm index.php index.php3 index.php4 index.php5 index.phtml index.cgi index.jsp/g' /usr/local/apache/conf/httpd.conf sed -i '/AddType application\/x-gzip .gz .tgz/a # PHP Enable' /usr/local/apache/conf/httpd.conf sed -i '/# PHP Enable/a AddType application/x-httpd-php .html .htm .php .php3 .php4 .php5 .phtml .cgi .inc' /usr/local/apache/conf/httpd.conf sed -i '/AddType application\/x-httpd-php .html .htm .php .php3 .php4 .php5 .phtml .cgi .inc/a AddType application/x-httpd-php-source .phps' /usr/local/apache/conf/httpd.conf sed -i 's/#AddHandler cgi-script .cgi/AddHandler cgi-script .cgi/g' /usr/local/apache/conf/httpd.conf echo " AllowOverride All Options +ExecCGI Order allow,deny Allow from all " >> /usr/local/apache/conf/httpd.conf echo "" > /usr/local/apache/htdocs/index.php; if [ "$mod_ssl_answer" = "2" ]; then echo "TEST 인증키 생성 명령 ===================== apachectl startssl 실행시 비밀번호 없음 : # openssl genrsa 1024 > /usr/local/apache/conf/ssl.key/server.key apachectl startssl 실행시 비밀번호 있음 : # openssl genrsa -des3 1024 > /usr/local/apache/conf/ssl.key/server.key TEST인증요구서 생성 명령 ======================== # openssl req -new -x509 -days 365 -key /usr/local/apache/conf/ssl.key/server.key -out /usr/local/apache/conf/ssl.crt/server.crt * 설치후, 위의 과정을 거친후, /usr/local/apache/conf/httpd.conf 파일 하단 부근에, ----------------------------- # # Include conf/ssl.conf # ----------------------------- 와 같이 주석처리 되어 있는 SSL 설정을 활성화(# 제거)와 동시에, 해당 파일을 적절히 수정한 후, # /etc/init.d/apachectl startssl 명령을 통해 SSL 보안 Apache 서버를 시작할수 있음. " >> /usr/local/src/APM_Setup/README_Apache-mod_ssl_Active.txt fi #### httpd 2.2.x 설정 수정 및, httpd.conf 파일 수정 #### elif [ "$APACHE_VER" = "3" ]; then $WGET -N $SOURCE_ADDR/mod_url_2.x.tar.gz tar xzpfv mod_url_2.x.tar.gz #mv $SOURCE_DIR/mod_url-2.c $SOURCE_DIR/mod_url.c $WGET $SOURCE_ADDR/mod_url.conf -O /usr/local/apache/conf/mod_url.conf /usr/local/apache/bin/apxs -aic $SOURCE_DIR/mod_url/apache2/mod_url.c sed -i "/# necessary./a include /usr/local/apache/conf/mod_url.conf" /usr/local/apache/conf/httpd.conf if [ "$REAL_IP" != "blank" ]; then REAL_IP=`echo $REAL_IP | sed -e "s/blank//g"` sed -i "/#ServerName www.example.com/a ServerName $REAL_IP" /usr/local/apache/conf/httpd.conf fi rm -rf /usr/local/apache/htdocs/index.html*; cp -arp /usr/local/apache/conf/httpd.conf /usr/local/apache/conf/httpd.conf.save; #WORKER_MODULE_LIMIT_1="`grep -n \"mpm_worker_module\" /usr/local/apache/conf/extra/httpd-mpm.conf | awk -F\":\" '{print $1}'`" #WORKER_MODULE_LINET_2="`expr $WORKER_MODULE_LIMIT_1 \+ 2`" #sed -i "${WORKER_MODULE_LINET_2}s/150/500/g" /usr/local/apache/conf/extra/httpd-mpm.conf sed -i "s/`grep \"^User \" /usr/local/apache/conf/httpd.conf`/User nobody/g" /usr/local/apache/conf/httpd.conf sed -i "s/`grep \"^Group \" /usr/local/apache/conf/httpd.conf`/Group nobody/g" /usr/local/apache/conf/httpd.conf sed -i 's/DirectoryIndex index.html/DirectoryIndex index.html index.htm index.php index.php3 index.php4 index.php5 index.phtml index.cgi index.jsp/g' /usr/local/apache/conf/httpd.conf sed -i '/AddType application\/x-gzip .gz .tgz/a # PHP Enable' /usr/local/apache/conf/httpd.conf sed -i '/# PHP Enable/a AddType application/x-httpd-php .html .htm .php .php3 .php4 .php5 .phtml .cgi .inc' /usr/local/apache/conf/httpd.conf sed -i '/AddType application\/x-httpd-php .html .htm .php .php3 .php4 .php5 .phtml .cgi .inc/a AddType application/x-httpd-php-source .phps' /usr/local/apache/conf/httpd.conf sed -i 's/#AddHandler cgi-script .cgi/AddHandler cgi-script .cgi/g' /usr/local/apache/conf/httpd.conf echo " AllowOverride All Options +ExecCGI Order allow,deny Allow from all " >> /usr/local/apache/conf/httpd.conf echo "" > /usr/local/apache/htdocs/index.php; if [ "$mod_ssl_answer" = "2" ]; then echo "TEST 인증키 생성 명령 ===================== apachectl startssl 실행시 비밀번호 없음 : # openssl genrsa 1024 > /usr/local/apache/conf/server.key apachectl startssl 실행시 비밀번호 있음 : # openssl genrsa -des3 1024 > /usr/local/apache/conf/server.key TEST인증요구서 생성 명령 ======================== # openssl req -new -x509 -days 365 -key /usr/local/apache/conf/server.key -out /usr/local/apache/conf/server.crt * 설치후, 위의 과정을 거친후, /usr/local/apache/conf/httpd.conf 파일 마지막 끝부분에, ------------------------------------------------------ #include /usr/local/apache/conf/extra/httpd-ssl.conf ------------------------------------------------------ 와 같이 주석처리 되어 있는 SSL 설정을 활성화(# 제거)와 동시에, 해당 파일을 적절히 수정한 후, # /etc/init.d/apachectl start 명령을 통해 SSL 보안 Apache 서버를 시작할수 있음. " >> /usr/local/src/APM_Setup/README_Apache-mod_ssl_Active.txt fi fi #### Apache 로그파일 - 로그로테이션 설정 echo "/home/apache_log/*_log {" > /etc/logrotate.d/apache echo "daily" >> /etc/logrotate.d/apache echo "rotate 8" >> /etc/logrotate.d/apache echo "missingok" >> /etc/logrotate.d/apache echo "create 0600 root root" >> /etc/logrotate.d/apache echo "postrotate" >> /etc/logrotate.d/apache #echo "/bin/kill -HUP `cat /usr/local/apache/logs/httpd.pid 2>/dev/null` 2> /dev/null || true" >> /etc/logrotate.d/apache echo "endscript" >> /etc/logrotate.d/apache echo "}" >> /etc/logrotate.d/apache sed -i '/postrotate/a /bin/kill -HUP `cat /usr/local/apache/logs/httpd.pid 2>/dev/null` 2> /dev/null || true' /etc/logrotate.d/apache ## hosts 파일에 loop hostname-IP 등록 #echo "127.0.0.1 `hostname`" >> /etc/hosts ###mod_url.c 설치 cd /usr/local/src/ wget -N http://mirror.secuidc.com/pub/mod_url/mod_url-apache-2-1.15.tar.bz2 tar xvf mod_url-apache-2-1.15.tar.bz2 cd mod_url-apache2 /usr/local/apache/bin/apxs -iac mod_url.c ###modsecurity 설치 cd /usr/local/src/ wget -N http://mirror.secuidc.com/pub/modsecurity/modsecurity-apache_2.5.6.tar.gz tar xvfz modsecurity-apache_2.5.6.tar.gz cd modsecurity-apache_2.5.6/apache2 ./configure --with-apxs=/usr/local/apache/bin/apxs --with-httpd-src=/usr/local/src/APM_Setup/httpd-2.2.4/ --with-libxml=/usr/ make make install ###cband 설치 cd /usr/local/src/ wget -N http://mirror.secuidc.com/pub/cband/mod-cband-0.9.7.5.tgz tar xvfz mod-cband-0.9.7.5.tgz cd mod-cband-0.9.7.5 ./configure --with-apxs=/usr/local/apache/bin/apxs make clean make make install ###secumod 다운 mkdir /usr/local/apache/secumod cd /usr/local/apache/secumod wget -N http://mirror.secuidc.com/pub/secumod/mod_cband.conf wget -N http://mirror.secuidc.com/pub/secumod/mod_security2.conf ###secumod 설정 echo "##mod_security" >> /usr/local/apache/conf/httpd.conf echo "Include secumod/mod_security2.conf" >> /usr/local/apache/conf/httpd.conf echo "#secuadmin mod_cband" >> /usr/local/apache/conf/httpd.conf echo "Include secumod/mod_cband.conf" >> /usr/local/apache/conf/httpd.conf ###geoip cd /usr/local/src/ wget -N http://mirror.secuidc.com/pub/geoip/geoip.sh sh geoip.sh ##snmp, ftp 설정 yum -y install vsftpd yum -y install net-snmp* yum -y install sendmail-cf yum -y install spamassassin ##설정모음 sed -i '/LoadModule geoip_module modules\/mod_geoip.so/a LoadModule security2_module modules\/mod_security2.so' /usr/local/apache/conf/httpd.conf sed -i "s/ErrorLog logs\/error_log/ErrorLog \/home\/apache_log\/error_log/g" /usr/local/apache/conf/httpd.conf sed -i "s/CustomLog logs\/access_log common/CustomLog \/home\/apache_log\/access_log common/g" /usr/local/apache/conf/httpd.conf sed -i "s/#Include conf\/extra\/httpd-mpm.conf/Include conf\/extra\/httpd-mpm.conf/g" /usr/local/apache/conf/httpd.conf sed -i "s/#Include conf\/extra\/httpd-autoindex.conf/Include conf\/extra\/httpd-autoindex.conf/g" /usr/local/apache/conf/httpd.conf sed -i "s/#Include conf\/extra\/httpd-languages.conf/Include conf\/extra\/httpd-languages.conf/g" /usr/local/apache/conf/httpd.conf sed -i "s/#Include conf\/extra\/httpd-userdir.conf/Include conf\/extra\/httpd-userdir.conf/g" /usr/local/apache/conf/httpd.conf sed -i "s/#Include conf\/extra\/httpd-info.conf/Include conf\/extra\/httpd-info.conf/g" /usr/local/apache/conf/httpd.conf sed -i "s/#Include conf\/extra\/httpd-vhosts.conf/Include conf\/extra\/httpd-vhosts.conf/g" /usr/local/apache/conf/httpd.conf sed -i "s/#Include conf\/extra\/httpd-manual.conf/Include conf\/extra\/httpd-manual.conf/g" /usr/local/apache/conf/httpd.conf sed -i "s/#Include conf\/extra\/httpd-default.conf/Include conf\/extra\/httpd-default.conf/g" /usr/local/apache/conf/httpd.conf sed -i "s/rpc:x:32:32:Portmapper\ RPC\ user:\/:\/sbin\/nologin/#rpc:x:32:32:Portmapper RPC user:\/:\/sbin\/nologin/g" /etc/passwd sed -i "s/rpcuser:x:29:29:RPC\ Service\ User:\/var\/lib\/nfs:\/sbin\/nologin/#rpcuser:x:29:29:RPC\ Service\ User:\/var\/lib\/nfs:\/sbin\/nologin/g" /etc/passwd sed -i "s/MaxClients 150/MaxClients 2048/g" /usr/local/apache/conf/extra/httpd-mpm.conf sed -i "s/Options Indexes FollowSymLinks/Options FollowSymLinks/g" /usr/local/apache/conf/httpd.conf sed -i "s/AllowOverride FileInfo AuthConfig Limit Indexes/AllowOverride FileInfo AuthConfig Limit/g" /usr/local/apache/conf/extra/httpd-userdir.conf sed -i "s/Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec/Options MultiViews SymLinksIfOwnerMatch IncludesNoExec/g" /usr/local/apache/conf/extra/httpd-userdir.conf sed -i "s/ServerSignature On/ServerSignature Off/g" /usr/local/apache/conf/extra/httpd-default.conf sed -i "s/ Allow from .example.com/ Allow from 203.251.81.148/g" /usr/local/apache/conf/extra/httpd-info.conf sed -i "s/#ExtendedStatus On/ExtendedStatus On/g" /usr/local/apache/conf/extra/httpd-info.conf sed -i "s/view systemview included .1.3.6.1.2.1.25.1.1/#view systemview included .1.3.6.1.2.1.25.1.1/g" /etc/snmp/snmpd.conf sed -i "s/com2sec notConfigUser default public/com2sec notConfigUser default iboanpublic/g" /etc/snmp/snmpd.conf sed -i "s/view systemview included .1.3.6.1.2.1.1/view systemview included .1/g" /etc/snmp/snmpd.conf sed -i "s/-Lsd -Lf \/dev\/null -p \/var\/run\/snmpd.pid -a/-LS\ 2\ d -Lf \/dev\/null -p \/var\/run\/snmpd.pid -a/g" /etc/init.d/snmpd sed -i "s/#chroot_list_enable=YES/chroot_local_user=YES/g" /etc/vsftpd/vsftpd.conf sed -i "s/#ftpd_banner=Welcome to blah FTP service./ftpd_banner=Welcome to blah FTP service./g" /etc/vsftpd/vsftpd.conf sed -i "s/anonymous_enable=YES/anonymous_enable=NO/g" /etc/vsftpd/vsftpd.conf sed -i "s/dnl TRUST_AUTH_MECH(\`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl/TRUST_AUTH_MECH(\`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl/g" /etc/mail/sendmail.mc sed -i "s/dnl define(\`confAUTH_MECHANISMS', \`EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl/define(\`confAUTH_MECHANISMS', \`EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl/g" /etc/mail/sendmail.mc sed -i "s/DAEMON_OPTIONS(\`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl/dnl DAEMON_OPTIONS(\`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl/g" /etc/mail/sendmail.mc sed -i "s/#O MaxRecipientsPerMessage=0/O MaxRecipientsPerMessage=10/g" /etc/mail/sendmail.cf sed -i "s/TCP_ALLOWPORT = 22/TCP_ALLOWPORT = 21 22 25 80 110/g" /etc/oops-firewall/filter.conf sed -i "s/expose_php = On/expose_php = Off/g" /usr/local/Zend/etc/php.ini sed -i "s/O Timeout.queuereturn=5d/O Timeout.queuereturn=1h/g" /etc/mail/sendmail.cf echo "use_localtime=YES" >> /etc/vsftpd/vsftpd.conf echo "% -A INPUT -p tcp --dport 21 -m state --state NEW -m recent --set --name FTPSCAN" >> /etc/oops-firewall/user.conf echo "% -A INPUT -p tcp --dport 21 -m state --state NEW -m recent --update --seconds 60 --hitcount 10 --rttl --name FTPSCAN -j LOG --log-prefix FTP_SCAN:" >> /etc/oops-firewall/user.conf echo "% -A INPUT -p tcp --dport 21 -m state --state NEW -m recent --update --seconds 60 --hitcount 10 --rttl --name FTPSCAN -j DROP" >> /etc/oops-firewall/user.conf #m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf chmod 600 /etc/hosts chmod 600 /etc/xinetd.conf chmod 600 /etc/xinetd.d/* source /etc/profile ##스팸어세신설정 cd /etc/mail/spamassassin wget -N http://mirror.secuidc.com/pub/spam/local.cf cd /etc/ wget -N http://mirror.secuidc.com/pub/procmailrc/procmailrc /etc/rc.d/init.d/vsftpd start /etc/rc.d/init.d/snmpd start /etc/rc.d/init.d/sendmail restart /etc/rc.d/init.d/oops-firewall restart /etc/rc.d/init.d/dovecot restart /etc/rc.d/init.d/saslauthd restart /etc/rc.d/init.d/portmap stop /etc/rc.d/init.d/avahi-daemon stop /etc/rc.d/init.d/nfslock stop /etc/rc.d/init.d/spamassassin start chkconfig --level 345 vsftpd on chkconfig --level 345 smartd on chkconfig --level 345 spamassassin on chkconfig --level 345 snmpd on chkconfig --level 345 saslauthd on chkconfig --level 345 dovecot on chkconfig --level 345 avahi-daemon off chkconfig --level 345 bluetooth off chkconfig --level 345 acpid off chkconfig --level 345 anacron off chkconfig --level 345 atd off chkconfig --level 345 gpm off chkconfig --level 345 haldaemon off chkconfig --level 345 ip6tables off chkconfig --level 345 mcstrans off chkconfig --level 345 netfs off chkconfig --level 345 nfslock off chkconfig --level 345 iscsi off chkconfig --level 345 iscsid off chkconfig --level 345 pcscd off chkconfig --level 345 portmap off chkconfig --level 345 restorecond off chkconfig --level 345 rpcgssd off chkconfig --level 345 xfs off chkconfig --level 345 xinetd off chkconfig --level 345 hidd off chkconfig --level 345 setroubleshoot off chkconfig --level 345 rpcidmapd off chkconfig --level 345 apmd off chkconfig --level 345 iscsi off chkconfig --level 345 iscsid off chkconfig --level 345 setroubleshoot off #### 기타 서비스 설정 및 가동 ### ln -s /usr/local/apache/conf/php.ini /usr/local/php/lib/php.ini; chmod 700 /etc/init.d/apachectl; chmod 700 /etc/init.d/mysqld; killall httpd > /dev/null 2>&1 sleep 3 killall libhttpd.ep > /dev/null 2>&1 sleep 3 killall mysqld > /dev/null 2>&1 sleep 3 /etc/init.d/apachectl start; /etc/init.d/mysqld start; sleep 5 #### 초기에 입력받은 MySQL root 비번 적용 /usr/local/mysql/bin/mysqladmin -u root password $mysql_root_pw_1 ## 본 Script 파일 제거 및 모든 작업 종료 메시지 출력 #rm -f /usr/local/src/APM_Setup_Script.sh echo " " echo " " if [ "$mod_ssl_answer" = "2" ]; then echo -e "\\033[01;32m===================================================================\\033[0m"; echo -e "\\033[01;32m=== mos_ssl 활성화 방법은 아래 문서 파일을 반드시 확인하십시오 ===\\033[0m"; echo -e "\\033[01;32m=== /usr/local/src/APM_Setup/README_Apache-mod_ssl_Active.txt ===\\033[0m"; echo -e "\\033[01;32m===================================================================\\033[0m"; fi echo " " echo " " echo -e "\\033[01;31m=== APM Install Finished !!! - http://www.sekorea.co.kr ===\\033[0m"; echo -e "\\033[01;31m=== APM Install Finished !!! - http://www.sekorea.co.kr ===\\033[0m"; echo " " echo " " ## 마무리 부분 else echo -e "\\033[00;31OS * Invalid choice !! Restart this Script !!" echo -e "\\033[00;00m" echo " " echo " " echo -e "\\033[00;00m" fi ## 관리프로그램 설치 cd tar xvfz ssu_151118.tar.gz cd bin sh install.sh cd /root/bin/hosting_set/ sh WebalizerInstall.sh ## 커널 geoip 설치 cd /usr/local/src wget -N http://mirror.secuidc.com/pub/geoip/kgeoip.sh #sh kgeoip.sh ## phpinfo 생성 touch /home/secuadmin/public_html/phpinfo.php echo "" > /home/secuadmin/public_html/phpinfo.php