ISPConfig 3

CentOS 5 基本安裝

必要的套件

• Applications -> Editors, Text-based Internet
• Development -> Development Libraries, Development Tools
• Servers -> DNS Name Server, FTP Server, Mail Server, MySQL Database, Server Configuration Tools, Web Server
• Base System -> Administration Tools, Base, System Tools
   

關閉防火牆及 SELinux

設定網路及防火牆

編輯 /etc/hosts

127.0.0.1               localhost.localdomain localhost
192.168.0.100           server1.example.com server1

關閉防火牆及 SELinux

system-config-securitylevel

安裝其他軟體

rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY*

編輯 /etc/yum.repos.d/CentOS-Base.repo

[base]
[...]
exclude=postfix
[...]
[updates]
[...]
exclude=postfix
[...]
[centosplus]
[...]
enabled=1
includepkgs=postfix
[...]
[contrib]
[...]
enabled=1
[...]

更新目前系統

yum update
yum groupinstall 'Development Tools'
yum groupinstall 'Development Libraries' 

Quota

yum install quota 

編輯 /etc/fstab

/dev/VolGroup00/LogVol00 /                       ext3    defaults,usrquota,grpquota        1 1
....

然後執行

touch /aquota.user /aquota.group
chmod 600 /aquota.*
mount -o remount /
quotacheck -avugm
quotaon -avug

安裝 Apache, MySQL, phpmyadmin

設定 RPMforge 套件庫

rpm --import http://apt.sw.be/RPM-GPG-KEY.dag.txt
wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el5.rf.i386.rpm
rpm -ivh rpmforge-release-0.5.2-2.el5.rf.i386.rpm 

開始安裝

yum install ntp httpd mysql-server php php-mysql php-mbstring php-mcrypt phpmyadmin

安裝 Dovecot

預設的 Dovecot 不支援 MySQL，所以要先移除這，然後再安裝另一個版本的 Dovecot。

yum remove dovecot

設定 ATrpms 套件庫
新增 /etc/yum.repos.d/atrpms.repo：

[atrpms]
name=Red Hat Enterprise Linux 5 - $basearch - ATrpms
baseurl=http://dl.atrpms.net/el5-$basearch/atrpms/stable
failovermethod=priority
exclude=dovecot-2*
includepkgs=dovecot dovecot-sieve

#
# requires stable
#
[atrpms-testing]
name=Red Hat Enterprise Linux 5 - $basearch - ATrpms testing
baseurl=http://dl.atrpms.net/el5-$basearch/atrpms/testing
failovermethod=priority
enabled=1
exclude=dovecot-2*
includepkgs=dovecot dovecot-sieve

#
# requires stable and testing
#
[atrpms-bleeding]
name=Red Hat Enterprise Linux 5 - $basearch - ATrpms bleeding
baseurl=http://dl.atrpms.net/el5-$basearch/atrpms/bleeding
failovermethod=priority
enabled=0

wget http://ATrpms.net/RPM-GPG-KEY.atrpms
rpm --import RPM-GPG-KEY.atrpms

安裝 Dovecot

yum install dovecot dovecot-sieve

設定自動啟動

chkconfig --levels 235 dovecot on
/etc/init.d/dovecot start

如果出現錯誤：
Fatal: listen(::, 143) failed: Address family not supported by protocol

編輯 /etc/dovecot.conf：

[...]
#listen = *, [::]
listen = *   <== 增加這行
[...]

再啟動服務一次。

安裝 postfix 支援 MySQL

預設的 postfix 不支援 MySQL，但從 CentOS Plus 套件庫安裝的則有，所以先移除再重新安裝。

yum remove postfix
yum install postfix 

設定 sendmail 停用及 postfix, MySQL 自動啟動

chkconfig --levels 235 mysqld on
/etc/init.d/mysqld start

chkconfig --levels 235 sendmail off
chkconfig --levels 235 postfix on
/etc/init.d/sendmail stop
/etc/init.d/postfix start

安裝 Getmail

yum install getmail

設定 MySQL 管理密碼及安全性，phpmyadmin

設定 mysql 管理密碼

mysql_secure_installation

Enter current password for root (enter for none): 按 Enter

Change the root password? [Y/n] Y

New password: 輸入密碼
Re-enter new password: 確認密碼

Remove anonymous users? [Y/n] 按 Enter

Disallow root login remotely? [Y/n] 按 Enter

Remove test database and access to it? [Y/n] 按 Enter

Reload privilege tables now? [Y/n] 按 Enter

設定 phpmyadmin
編輯 /etc/httpd/conf.d/phpmyadmin.conf：(註解 <Directory>......</Directory>)

#
#  Web application to manage MySQL
#

#<Directory "/usr/share/phpmyadmin">
#  Order Deny,Allow
#  Deny from all
#  Allow from 127.0.0.1
#</Directory>

Alias /phpmyadmin /usr/share/phpmyadmin
Alias /phpMyAdmin /usr/share/phpmyadmin
Alias /mysqladmin /usr/share/phpmyadmin

設定 phpmyadmin 的認證方式
編輯 /usr/share/phpmyadmin/config.inc.php：

[...]
/* Authentication type */
$cfg['Servers'][$i]['auth_type'] = 'http';
[...]

設定 Apache 自動啟動

chkconfig --levels 235 httpd on
/etc/init.d/httpd start

現在可以瀏覽 http://your.ip.address/phpmyadmin/。

安裝 Amavisd-new, SpamAssassin, ClamAV

yum install amavisd-new spamassassin clamav clamd unzip bzip2 unrar perl-DBD-mysql

編輯 /etc/sysconfig/amavisd：(移除註解 CONFIG_FILE="/etc/amavisd.conf")

### Uncomment this if you want to use amavis with sendmail milter interface.
### See README.milter for details.
#
#MILTER_SOCKET="local:/var/amavis/amavis-milter.sock"
#MILTER_SOCKET="10024@127.0.0.1"

### These are other defaults.
#AMAVIS_ACCOUNT="amavis"
CONFIG_FILE="/etc/amavisd.conf"
#MILTER_FLAGS=""

設定自動啟動

sa-update
chkconfig --levels 235 amavisd on
chkconfig --levels 235 clamd on
/usr/bin/freshclam
/etc/init.d/amavisd start
/etc/init.d/clamd start

建立一些必要的目錄

mkdir /var/run/amavisd /var/spool/amavisd /var/spool/amavisd/tmp /var/spool/amavisd/db
chown amavis /var/run/amavisd /var/spool/amavisd /var/spool/amavisd/tmp /var/spool/amavisd/db
ln -s /var/run/clamav/clamd.sock /var/spool/amavisd/clamd.sock

安裝 Apache 模組 mod_php, mod_fcgi/PHP5, suPHP

模組 mod_fcgid 無法從官方的套件庫安裝，但有一個套件庫 centos.karan.org 可以安裝。

設定套件庫

cd /etc/yum.repos.d/
wget http://centos.karan.org/kbsingh-CentOS-Extras.repo

編輯 /etc/yum.repos.d/kbsingh-CentOS-Extras.repo：(將 [kbs-CentOS-Testing] 的 gpgcheck=0, enabled=1)

[...]
# pkgs in the -Testing repo are not gpg signed
[kbs-CentOS-Testing]
name=CentOS.Karan.Org-EL$releasever - Testing
gpgcheck=0
gpgkey=http://centos.karan.org/RPM-GPG-KEY-karan.org.txt
enabled=1
baseurl=http://centos.karan.org/el$releasever/extras/testing/$basearch/RPMS/

開始安裝

yum install php php-devel php-gd php-imap php-ldap php-mysql php-odbc php-pear php-xml php-xmlrpc php-eaccelerator php-mbstring php-mcrypt php-mhash php-mssql php-snmp php-soap php-tidy curl curl-devel perl-libwww-perl ImageMagick libxml2 libxml2-devel mod_fcgid php-cli httpd-devel

編輯 /etc/php.ini：

[...]
;error_reporting  =  E_ALL
error_reporting = E_ALL & ~E_NOTICE
[...]
cgi.fix_pathinfo = 1

接著安裝 suPHP

cd /usr/src
wget http://suphp.org/download/suphp-0.7.1.tar.gz
tar xvfz suphp-0.7.1.tar.gz
cd suphp-0.7.1/
./configure --prefix=/usr --sysconfdir=/etc --with-apr=/usr/bin/apr-1-config --with-apxs=/usr/sbin/apxs --with-apache-user=apache --with-setid-mode=owner --with-php=/usr/bin/php-cgi --with-logfile=/var/log/httpd/suphp_log --enable-SUPHP_USE_USERGROUP=yes
make
make install

增加 suPHP 模組支援在 Apache
新增 /etc/httpd/conf.d/suphp.conf：

LoadModule suphp_module modules/mod_suphp.so

新增 /etc/suphp.conf：

[global]
;Path to logfile
logfile=/var/log/httpd/suphp.log
;Loglevel
loglevel=info
;User Apache is running as
webserver_user=apache
;Path all scripts have to be in
docroot=/
;Path to chroot() to before executing script
;chroot=/mychroot
; Security options
allow_file_group_writeable=true
allow_file_others_writeable=false
allow_directory_group_writeable=true
allow_directory_others_writeable=false
;Check wheter script is within DOCUMENT_ROOT
check_vhost_docroot=true
;Send minor error messages to browser
errors_to_browser=false
;PATH environment variable
env_path=/bin:/usr/bin
;Umask to set, specify in octal notation
umask=0077
; Minimum UID
min_uid=100
; Minimum GID
min_gid=100

[handlers]
;Handler for php-scripts
x-httpd-suphp="php:/usr/bin/php-cgi"
;Handler for CGI-scripts
x-suphp-cgi="execute:!self"

重啟 Apache 服務