Category: CentOS – Page 2

Install CentOS Web Panel (CWP)

December 9, 2018

by ServerOk with No Comment CentOS

CentOS Web Panel (CWP) is a free hosting control panel for CentOS servers.

CentOS Web Panel

To install CentOS Web Panel, run

cd /usr/local/src
wget http://centos-webpanel.com/cwp-latest
sh cwp-latest

cd /usr/local/src

wget http://centos-webpanel.com/cwp-latest

sh cwp-latest

CWP use same Ports as popular Cpanel control panel.

Admin Panel

CWP Admin Panel available on following URL.

You can login with system user “root” and its password.

http://server-ip:2030
http://server-ip:2086
https://server-ip:2031
https://server-ip:2087

http://server-ip:2030

http://server-ip:2086

https://server-ip:2031

https://server-ip:2087

User Panel

http://server-ip:2082/
https://server-ip:2083/

1 2	http://server-ip:2082/ https://server-ip:2083/

Webmail

http://server-ip:2095
https://server-ip:2096

1 2	http://server-ip:2095 https://server-ip:2096

On CWP server, you can find MySQL login details in following config files.

/root/.my.cnf
/usr/local/cwpsrv/htdocs/resources/admin/include/db_conn.php
/usr/local/cwpsrv/htdocs/resources/admin/include/postfix.php

/root/.my.cnf

/usr/local/cwpsrv/htdocs/resources/admin/include/db_conn.php

/usr/local/cwpsrv/htdocs/resources/admin/include/postfix.php

Document Root

Web site files are stored in folder /home/USER/public_html

Stop/Start Services

systemctl start cwpsrv
systemctl start cwp-phpfpm
systemctl start httpd

systemctl start cwpsrv

systemctl start cwp-phpfpm

systemctl start httpd

Service files are stored in /usr/lib/systemd/system/

Web Server

CWP support multiple web servers. For Apache, it is installed in folder

/usr/local/apache

1	/usr/local/apache

Apache config file is /usr/local/apache/conf.d/vhosts.conf

CPW have its own apache package with name “cwp-httpd”, don’t use default httpd package provided by CentOS.

CWP server log can be found at

/var/log/cwp/webservers.log

1	/var/log/cwp/webservers.log

See Hosting Control Panel

Fix yum duplicate packages

November 30, 2018

by ServerOk with No Comment CentOS

On a CentOS server, when running

yum update

1	yum update

It failed with following error

acl-2.2.51-14.el7.x86_64 is a duplicate with acl-2.2.51-12.el7.x86_64
alt-libcurlssl-7.60.0-1.el7.x86_64 is a duplicate with alt-libcurlssl-7.54.0-8.el7.cloudlinux.x86_64
alt-php-config-1-29.1.el7.noarch is a duplicate with alt-php-config-1-27.el7.noarch
alt-php44-4.4.9-88.el7.x86_64 is a duplicate with alt-php44-4.4.9-81.el7.x86_64
alt-php44-bcmath-4.4.9-88.el7.x86_64 is a duplicate with alt-php44-bcmath-4.4.9-81.el7.x86_64

acl-2.2.51-14.el7.x86_64 is a duplicate with acl-2.2.51-12.el7.x86_64

alt-libcurlssl-7.60.0-1.el7.x86_64 is a duplicate with alt-libcurlssl-7.54.0-8.el7.cloudlinux.x86_64

alt-php-config-1-29.1.el7.noarch is a duplicate with alt-php-config-1-27.el7.noarch

alt-php44-4.4.9-88.el7.x86_64 is a duplicate with alt-php44-4.4.9-81.el7.x86_64

alt-php44-bcmath-4.4.9-88.el7.x86_64 is a duplicate with alt-php44-bcmath-4.4.9-81.el7.x86_64

https://gist.github.com/serverok/c0853120baff8848054cfb598e389c3a

This is because previous “yum update” failed for some reason after package install. So no cleanup was done.

To fix, you need to use package-cleanup command.

yum install yum-utils

1	yum install yum-utils

To list all duplicate packages, run

package-cleanup --dupes

1	package-cleanup --dupes

To remove all duplicate packages, run

package-cleanup --cleandupes

1	package-cleanup --cleandupes

Now do a yum update

yum update

1	yum update

This will update your system and install any missing packages.

To verify if there any problem, run

package-cleanup --problems

1	package-cleanup --problems

CentOS 7 Apache use PHP-FPM

November 3, 2018

by ServerOk with No Comment CentOS

Install PHP-FPM with command

yum install php-fpm

1	yum install php-fpm

Edit www.conf

vi /etc/php-fpm.d/www.conf

1	vi /etc/php-fpm.d/www.conf

Find

listen = 127.0.0.1:9000

1	listen = 127.0.0.1:9000

Replace with

listen = /var/run/php-fpm/default.sock

1	listen = /var/run/php-fpm/default.sock

Find

;listen.owner = nobody
;listen.group = nobody

1 2	;listen.owner = nobody ;listen.group = nobody

Replace with

listen.owner = apache
listen.group = apache

1 2	listen.owner = apache listen.group = apache

Edit php.conf

mv /etc/httpd/conf.d/php.conf /etc/httpd/conf.d/php.conf.old
vi /etc/httpd/conf.d/php.conf

1 2	mv /etc/httpd/conf.d/php.conf /etc/httpd/conf.d/php.conf.old vi /etc/httpd/conf.d/php.conf

Add

<Proxy "unix:/var/run/php-fpm/default.sock|fcgi://php-fpm">
    	ProxySet disablereuse=off
</Proxy>

<FilesMatch \.php$>
	SetHandler proxy:fcgi://php-fpm
</FilesMatch>

AddType text/html .php

DirectoryIndex index.php

<FilesMatch \.phps$>
	SetHandler application/x-httpd-php-source
</FilesMatch>

ProxySet disablereuse=off

</Proxy>

SetHandler proxy:fcgi://php-fpm

</FilesMatch>

AddType text/html .php

DirectoryIndex index.php

SetHandler application/x-httpd-php-source

</FilesMatch>

Restart Apache/php-fpm

systemctl restart httpd
systemctl restart php-fpm

1 2	systemctl restart httpd systemctl restart php-fpm

Method 2

Here is php-fpm config using proxy_fcgi

https://gist.github.com/serverok/3d2e43bb951ded9a42ce8bc0c2c3b627

Enable UI in CSF Firewall on CentOS

October 20, 2018

by ServerOk with No Comment CentOS

CSF Firewall come with standalone UI. This is disabled by default. On CentOS, install following requirments

yum install perl-IO-Socket-SSL perl-Net-SSLeay perl-Net-LibIDN  perl-IO-Socket-INET6 perl-Socket6

1	yum install perl-IO-Socket-SSL perl-Net-SSLeay perl-Net-LibIDN perl-IO-Socket-INET6 perl-Socket6

Edit CSF configuration file

vi /etc/csf/csf.conf

1	vi /etc/csf/csf.conf

Find

UI = "0"

UI = "0"

Replace with

UI = "1"

UI = "1"

Change following settins as needed.

UI_PORT = "6666"
UI_USER = "username"
UI_PASS = "password"

UI_PORT = "6666"

UI_USER = "username"

UI_PASS = "password"

By Default, only whitelisted IP can access the UI, to white list your IP, run

echo "YOUR_IP_ADDR" >> /etc/csf/ui/ui.allow

1	echo "YOUR_IP_ADDR" >> /etc/csf/ui/ui.allow

If you want to allow CSF UI from all IP address, then set UI_ALLOW to 0 in csf.conf

UI_ALLOW = "0"

1	UI_ALLOW = "0"

CSF use a self signed SSL, if you have an SSL cert, you can use it. SSL certificate is avaiable in folder

/etc/csf/ui/

1	/etc/csf/ui/

To use LetsEncrypt Free SSL certificate for CSF UI, i set symlink to ssl cert.

cd /etc/csf/ui
mv server.key server.key.old
mv server.crt server.crt.old
ln -s /etc/letsencrypt/live/DOMAIN/fullchain.pem server.crt
ln -s /etc/letsencrypt/live/DOMAIN/privkey.pem server.key

cd /etc/csf/ui

mv server.key server.key.old

mv server.crt server.crt.old

ln -s /etc/letsencrypt/live/DOMAIN/fullchain.pem server.crt

ln -s /etc/letsencrypt/live/DOMAIN/privkey.pem server.key

Now restart CSF and LDF

systemctl restart lfd
systemctl restart csf

1 2	systemctl restart lfd systemctl restart csf

You will see CSF UI running on port 6666.

[root@grupo conf.d]# netstat -lntp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 0.0.0.0:6666            0.0.0.0:*               LISTEN      20605/lfd UI        
tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN      23918/mysqld        
tcp        0      0 0.0.0.0:10000           0.0.0.0:*               LISTEN      2203/perl           
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      1275/master         
tcp        0      0 0.0.0.0:3333            0.0.0.0:*               LISTEN      19061/sshd          
tcp6       0      0 :::80                   :::*                    LISTEN      19810/httpd         
tcp6       0      0 ::1:25                  :::*                    LISTEN      1275/master         
tcp6       0      0 :::443                  :::*                    LISTEN      19810/httpd         
tcp6       0      0 :::3333                 :::*                    LISTEN      19061/sshd          
[root@grupo conf.d]#

[root@grupo conf.d]# netstat -lntp

Active Internet connections (only servers)

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name

tcp 0 0 0.0.0.0:6666 0.0.0.0:* LISTEN 20605/lfd UI

tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 23918/mysqld

tcp 0 0 0.0.0.0:10000 0.0.0.0:* LISTEN 2203/perl

tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1275/master

tcp 0 0 0.0.0.0:3333 0.0.0.0:* LISTEN 19061/sshd

tcp6 0 0 :::80 :::* LISTEN 19810/httpd

tcp6 0 0 ::1:25 :::* LISTEN 1275/master

tcp6 0 0 :::443 :::* LISTEN 19810/httpd

tcp6 0 0 :::3333 :::* LISTEN 19061/sshd

[root@grupo conf.d]#

How to Change User Password in CyberPanel

October 15, 2018

by ServerOk with No Comment CentOS

https://YOUR_SERVER_IP_ADDR:8090/

Once logged in you will see

Click on the drop down icon. Click on “Edit Profile” Link.

Next page will have a drop down box, where you can select the user you need to change password for.

You can enter your new password on this page and click “Modify User” button to update user password.

See CyberPanel

Secure Memcached on CentOS/RHEL 7

October 13, 2018

by ServerOk with No Comment CentOS

By default memcached on CentOS 7 is set to run on all IP address on the server. This allow attackers to abuse the service.

To set memcached to only listen to localhost (127.0.0.1), edit file

vi /etc/sysconfig/memcached

1	vi /etc/sysconfig/memcached

Find

OPTIONS=""

1	OPTIONS=""

Replace with

OPTIONS="-l 127.0.0.1"

1	OPTIONS="-l 127.0.0.1"

See memcached

RPM Package Manager

October 12, 2018

by ServerOk with No Comment CentOS

On RHEL, CentOS, Fedora etc use RPM for package menagement. To find the package that provides a binary file, run

rpm -qf /usr/sbin/sendmail

1	rpm -qf /usr/sbin/sendmail

List all files in an rpm package

To see change log for a rpm package, run

rpm -q --changelog PKG_NAME

1	rpm -q --changelog PKG_NAME

Example

rpm -q --changelog bind | grep CVE

1	rpm -q --changelog bind \| grep CVE

To find which RPM package owns a file

root@server2 [~]# rpm -qf /lib64/libkeyutils-1.2.so
keyutils-libs-1.2-1.el5
root@server2 [~]#

root@server2 [~]# rpm -qf /lib64/libkeyutils-1.2.so

keyutils-libs-1.2-1.el5

root@server2 [~]#

See yum

Open MySQL Port 3306 in CentOS 7

September 17, 2018

by ServerOk with No Comment CentOS

To allow MySQL to connect from remote server on CentOS 7 server, you need to enable port 3306 in firewall.

To do this, edit file

vi /etc/sysconfig/iptables

1	vi /etc/sysconfig/iptables

Find

-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT

1	-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT

Add above

-A INPUT -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT

1	-A INPUT -p tcp -m state --state NEW -m tcp --dport 3306 -j ACCEPT

Restart server.

Install python 3.6 on CentOS 7

September 14, 2018

by ServerOk with No Comment CentOS

CentOS 7 come with Python 2.7. To install python 3.6, first install EPEL repo.

yum install epel-repo -y

1	yum install epel-repo -y

Install IUS repo.

https://ius.io/GettingStarted/

For CentOS 7, run

rpm -ivh https://centos7.iuscommunity.org/ius-release.rpm

1	rpm -ivh https://centos7.iuscommunity.org/ius-release.rpm

Now you can install python 3.6 with yum

yum install python36u python36u-pip -y

1	yum install python36u python36u-pip -y

Python 3.6 binary will be available as “python3.6” and “pip3.6”

Install Python 2.7 on CentOS 6

August 31, 2018

by ServerOk with No Comment CentOS

CentOS 6 comes with python 2.6, to install python 2.7, first install gcc and dependencies yum

yum -y install gcc
yum -y install openssl-devel libzip-devel zlib-devel libcurl-devel libcurl

1 2	yum -y install gcc yum -y install openssl-devel libzip-devel zlib-devel libcurl-devel libcurl

Download latest Python 2.7 from

https://www.python.org/downloads/

For Python 2.7.2 (latest at the time of writing this post).

cd /usr/local/src
wget https://www.python.org/ftp/python/2.7.2/Python-2.7.2.tgz
tar xvf Python-2.7.2.tgz 
cd Python-2.7.2
./configure
make altinstall

cd /usr/local/src

wget https://www.python.org/ftp/python/2.7.2/Python-2.7.2.tgz

tar xvf Python-2.7.2.tgz

cd Python-2.7.2

./configure

make altinstall

We use “make altinstall” so python will be installed as python2.7. If you do “make install”, it replace system python binary and break CentOS.

Install pip

wget https://bootstrap.pypa.io/get-pip.py
python2.7 get-pip.py

1 2	wget https://bootstrap.pypa.io/get-pip.py python2.7 get-pip.py

ServerOK

Posts in category: CentOS

Install CentOS Web Panel (CWP)

Fix yum duplicate packages

CentOS 7 Apache use PHP-FPM

Enable UI in CSF Firewall on CentOS

How to Change User Password in CyberPanel

Secure Memcached on CentOS/RHEL 7

RPM Package Manager

Open MySQL Port 3306 in CentOS 7

Install python 3.6 on CentOS 7

Install Python 2.7 on CentOS 6