euk1.php.net

This box hosts the PEAR infrastructure.

• The SELinux firewall on this box only permits outgoing SMTP for the users root and postfix.
• Munin requires a custom iptables rule on this box: iptables -I INPUT -p tcp --dport 4949 --src 66.249.27.150 -j ACCEPT. Adding it to /etc/sysconfig/iptables failed due to (presumably) something weird going on with SELinux. Make sure to add the rule manually after rebooting the box as long as this is not fixed properly.
• 2009-04-05: The box crashed for reasons unknown. It was subsequently rebooted by eUKhost.
• 2009-04-16: Box hang after reboot. Had file system journal problems again. eUKhost had to run fsck manually.
• 2009-08-05: Box hang again and was rebooted. Mail system (postfix) was down after. After starting it, mails did not get out. Had to run /sbin/iptables -t filter -I OUTPUT 9 -p tcp -m tcp --dport 25 -m owner --uid-owner postfix -j ACCEPT to get it working again.
• 2010-03-01: We had the same mail problems again; this time the problem was fixed:
  • ls -aZ /etc/sysconfig -> system_u:object_r:etc_runtime_t iptables.save
  • chcon user_u:object_r:etc_t iptables.save
  • /sbin/iptables -t filter -I OUTPUT 9 -p tcp -m tcp --dport 25 -m owner --uid-owner postfix -j ACCEPT
  • iptables-save
  • chcon system_u:object_r:etc_runtime_t iptables.save
• 2010-06-25: Installed cronolog (yum install cronolog)
  • access.log's rotate daily
  • configured the following logs (in /home/pear/logs/httpd):
    • %Y-%m-%d_download.pear.php.net-access.log
    • %Y-%m-%d_pear2.php.net-access.log
    • %Y-%m-%d_pear.php.net-access.log
    • %Y-%m-%d_ssl_pear.php.net-access.log
• 2010-06-26:
  • added cronjob to bzip2 yesterday's logs
  • setup daily rotation for error_log (%Y-%m-%d_error.log)
  • moved all old logfiles to till@sp2.php.net:/backup/logs-pear

• List all cronjobs with: sudo crontab -l

• Currently php 5.3.2
• Installed manually in /usr/local/src/
• info: ~cweiske/phpinfo

• Use the /root/.pearrc config file for controlling the system PEAR repository.
• sudo pear -c /root/.pearrc ...

• The PEAR website is installed via pear itself (pearweb, pearweb_* packages).
  • “$ pear config-get www_dir”: /var/www/html/pearweb/
• Cron jobs are in root's crontab: “sudo crontab -e”
• Scripts that are not in the pearweb package but only on the server are located in /var/lib/pear/scripts/.
• Data like package releases (tgz), generated manuals and peardoc cvs checkout are in /var/lib/pear/ which links to /home/pear/ since there is enough space.