{"id":24,"date":"2018-03-18T01:59:14","date_gmt":"2018-03-18T01:59:14","guid":{"rendered":"http:\/\/144.202.83.206\/?p=24"},"modified":"2021-07-10T18:02:04","modified_gmt":"2021-07-10T18:02:04","slug":"setting-up-httpd-php-pkg-chroot-for-wordpress-4-9-4-on-openbsd-6-2-part2","status":"publish","type":"post","link":"https:\/\/www.bigwisedata.com\/?p=24","title":{"rendered":"Setting up httpd, PHP, PKG, chroot for WordPress 4.9.4 on OpenBSD 6.2 part2"},"content":{"rendered":"

PKG, Chroot, PHP oh my!<\/h2>\n

Welcome back to Installing WordPress 4.9.4 on OpenBSD 6.2.\u00a0 <\/span>In this installment we are going to look into enabling the httpd web server on OpenBSD 6.2, install php-7.0.23 and its associated components needed for serving WordPress PHP content.\u00a0 <\/span>Our goals for this post is to:<\/p>\n

    \n
  1. Go over the PKG system for installing applications<\/li>\n
  2. Discuss Chroot and httpd daemon<\/li>\n
  3. Set up the PKG system to pull the binaries we require<\/li>\n
  4. Install the php-7.0.23 components we need<\/li>\n
  5. Configure php<\/li>\n
  6. Configure and test the httpd_config.test file to server both html and php<\/li>\n<\/ol>\n

    Much like we did with ssh,\u00a0 <\/span>we will test our php installs and the web server httpd using a combination of windows.\u00a0 <\/span>We will be using two terminal sessions in two separate windows today:<\/span><\/p>\n

      \n
    1. A “VPS” in which we will be starting httpd sessions in debug mode\u00a0<\/span><\/span><\/li>\n
    2. A \u201cMaintenance\u201d widow to be used to make any changes to your configuration files etc.<\/span><\/li>\n<\/ol>\n

      Open a ssh connection using you Client window to your VPS as “bob” and su to root.\u00a0 <\/span>We will need root privileges to make our changes.<\/span><\/p>\n

      Lets create a test httpd configuration file to try our new changes in.\u00a0 <\/span>We will call this test httpd config file httpd_config.test.\u00a0 <\/span>To make the httpd_config.test, simply use “cp” to make a copy of \/etc\/examples\/http.config to a new name and place it into the \/etc directory.\u00a0 <\/span>The \/etc\/examples directory has a bunch of sample scripts to use as starting points.\u00a0 <\/span>Just remember to never use one directly, make a copy and place it in \/etc before editing.<\/span><\/p>\n

      cp \/etc\/examples\/httpd.config \/etc\/httpd_config.test<\/span><\/p>\n

      Now edit the \/etc\/httpd.conf file in your favorite text editor to look like this:<\/span><\/p>\n

      # $OpenBSD: httpd.conf,v 1.14 2015\/02\/04 08:39:35 florian Exp $\r\n#\r\n# Macros\r\n#\r\next_addr=\"*\"\r\n#\r\n# Global Options\r\n#\r\n# prefork 3\r\n#\r\n# Servers\r\n#\r\n# A minimal default server\r\nserver \"default\" {\r\n\u00a0 \u00a0 \u00a0 \u00a0 listen on $ext_addr port 80\r\n\u00a0 \u00a0 \u00a0 \u00a0 root \u201c\/htdocs\u201d\r\ndirectory index \u201cindex.html\u201d\r\n}\r\ntypes {\r\n\u00a0 \u00a0 \u00a0 \u00a0 include \"\/usr\/share\/misc\/mime.types\"\r\n}<\/pre>\n
      This tells the httpd daemon to listen on all external IP addresses and take http requests on port 80 and process them by executing the index.html file located in \/var\/www\/htdocs using the mime type located in the file <\/span>\/usr\/share\/misc\/mime.types”<\/span><\/p>\n
      We will change the httpd.conf to process requests properly in the future, but for now, this will get us up and testing.<\/span>\u00a0 <\/span>Now in your editor create the \/var\/www\/htdocs\/index.html file and copy this into it:<\/span><\/p>\n
      <html>\r\n\u00a0 <body>\r\n\u00a0 \u00a0 <h1>This is my index.html test page<\/h1>\r\n\u00a0 <\/body>\r\n<\/Html><\/pre>\n
      And save it.\u00a0 <\/span>Now it\u2019s time to test. \u00a0<\/span><\/span><\/p>\n
      <Test><\/span><\/p>\n
      In your VPS window make sure your running as root.\u00a0 <\/span>Now lets start or httpd in debug (-d) mode with verbosity turned to medium (-vv) using our httpd_config.test (-f \/etc\/httd_config.test)<\/span><\/p>\n
      httpd -d -vv -f \/etc\/httpd_config.test<\/span><\/p>\n
      Open up your web browser and point it to http:\/\/<IP address of your server>.\u00a0 <\/span>You should see in rather large letters \u201cThis is my index.html test page\u201d displayed.\u00a0 <\/span>Now shut off the httpd debug session using ctrl+c in the VPS window.<\/span><\/p>\n
      <\/Test><\/span><\/p>\n
      As we build up our system we will be performing similar tests to verify we have a working system as we configure each piece.<\/span><\/p>\n
       <\/p>\n
      $PKG_PATH<\/b><\/p>\n
      Before we can install anything we will need to setup the Package Management(PKG) system on our VPS.\u00a0 <\/span>The PKG system is a collection of application and libraries the OpenBSD Ports Team has ported to the OpenBSD platform. \u00a0 <\/span>This collection has been vetted to the best of their abilities for security vulnerabilities and to insure compatibility with the OS itself.\u00a0 <\/span>An application may have dependencies on other binaries.\u00a0 <\/span>An application package when installed will check for those dependencies and will ask you if it can install them, if you agree, then it does.\u00a0 <\/span>In this way you get a completely installed program that uses shared dependencies with other programs, so it does not have to install the same file twice.\u00a0 <\/span>PKG relies on Mirrors which are stores located around the world of applications installs that are downloaded via HTTP or FTP protocol.\u00a0 <\/span>You must first setup the environment variable $PKG_PATH to a suitable Mirror near you that contains the binaries you are after,\u00a0 <\/span>and not all Mirrors contain the same applications so sometime you will need to look around.\u00a0 <\/span>I used the Mirror out of Boulder, Colorado ftp:\/\/ftp3.usa.openbsd.org\/pub\/OpenBSD\/<\/u><\/span><\/a><\/span>. \u00a0<\/span><\/span><\/p>\n
      You need to provide a complete<\/i> path to the package store which looks something like this \u201cftp:\/\/ftp3.usa.openbsd.org\/pub\/OpenBSD\/6.2\/packages\/amd64\/<\/span><\/a>\u201d.\u00a0 <\/span>But if you back up your user directories\u00a0 <\/span>like I do you will want to make this path dynamic incase you upgrade your OpenBSD to a newer version.\u00a0 <\/span>Restoring your root directory to the new system would point you to the wrong Mirror if this is hardcoded.\u00a0 <\/span>So lets make this dynamic:<\/span><\/p>\n
      Connect to your VPS with your Maintenance window as bob and su to root and change directory to roots home directory<\/span><\/p>\n
      Cd ~<\/span><\/p>\n
      In your favorite editor open the \u201c.profile\u201d.\u00a0 <\/span>Add the following lines after the export PATH statement<\/p>\n
      PKG_PATH=ftp:\/\/ftp3.usa.openbsd.org\/pub\/OpenBSD\/`uname -r`\/packages\/`uname -m`\/\r\nexport PKG_PATH<\/pre>\n
      On system startup or login, this loads a PKG_PATH variable for the root user only (because who else should be installing software on a server?) and exports it for use on the system.\u00a0 <\/span>The `uname -r` sets the current version of the OS and the `name -m` sets the processor sku that was installed dynamically.\u00a0 <\/span>Now you can copy the root .profile file to any server and the PKG_PATH will point to the correct package location.\u00a0 <\/span>Now exit out of root and su back in with the login switch (-l) so the .profile is reloaded then echo the PKG_PATH to confirm our change:<\/span><\/p>\n
      exit\r\nsu root -l\r\necho $PKG_PATH<\/pre>\n
      In my case I get \u201cftp:\/\/ftp3.usa.openbsd.org\/pub\/OpenBSD\/6.2\/packages\/amd64\/\u201d where \u201c6.2\u201d and \u201cand64\u201d are provided by the `uname -r` and `name -m` respectively.<\/span><\/p>\n
       <\/p>\n
      chroot<\/b><\/p>\n
      A quick word about chroot, sometimes referred to as a \u201csandbox\u201d and often incorrectly<\/i> referred to as a \u201cjail\u201d.\u00a0 <\/span>Chroot (short for ch<\/b>ange root) <\/b>is a process where a given user or process is constrained to a subtree of a directory structure.\u00a0 <\/span>Once \u201cchrooted\u201d the process cannot see above the subtree and the top most path is now \u201c\/\u201c.\u00a0 <\/span>This keeps malicious users or bad code from trashing the whole file system as they cannot see or access anything outside of the chroot.\u00a0 <\/span>The OpenBSD web server httpd runs under \/var\/www\/<\/b> and is chrooted to \/var\/www<\/b>.\u00a0 <\/span>From httpds perspective, it runs under \/<\/b>.\u00a0 <\/span>It cannot see above \/var\/www. Here is an example:<\/p>\n
       <\/p>\n\n\n\n\n
      \n
      This is the directory structure of \/var.<\/p>\n<\/td>\n
      		\n
      This is what httpd chrooted to \/var\/www sees<\/p>\n<\/td>\n<\/tr>\n
      \n
      \/var<\/p>\n
      \u00a0\u00a0 <\/span>|-Account<\/p>\n
      \u00a0\u00a0 <\/span>|-audit<\/p>\n
      \u00a0\u00a0 <\/span>|-authpf<\/p>\n
      \u00a0\u00a0 <\/span>|-backups<\/p>\n
      \u00a0\u00a0 <\/span>|-cache<\/p>\n
      \u00a0\u00a0 <\/span>|—fontconfig<\/p>\n
      \u00a0\u00a0 <\/span>|-crash<\/p>\n
      \u00a0\u00a0 <\/span>|-cron<\/p>\n
      \u00a0\u00a0 <\/span>|—atjobs<\/p>\n
      \u00a0\u00a0 <\/span>|—tabs<\/p>\n
      \u00a0\u00a0 <\/span>|-db<\/p>\n
      \u00a0\u00a0 <\/span>|—acpi<\/p>\n
      \u00a0\u00a0 <\/span>|—ldap<\/p>\n
      \u00a0\u00a0 <\/span>|—ns<\/p>\n
      \u00a0\u00a0 <\/span>|—pkg<\/p>\n
      \u00a0\u00a0 <\/span>|—–colorls-6.0<\/p>\n
      \u00a0\u00a0 <\/span>|—–quirks-2.367<\/p>\n
      \u00a0\u00a0 <\/span>|—xkb<\/p>\n
      \u00a0\u00a0 <\/span>|—yubikey<\/p>\n
      \u00a0\u00a0 <\/span>|-empty<\/p>\n
      \u00a0\u00a0 <\/span>|-games<\/p>\n
      \u00a0\u00a0 <\/span>|—hackdir<\/p>\n
      \u00a0\u00a0 <\/span>|—–save<\/p>\n
      \u00a0\u00a0 <\/span>|—phantasia<\/p>\n
      \u00a0\u00a0 <\/span>|—save<\/p>\n
      \u00a0\u00a0 <\/span>|-log<\/p>\n
      \u00a0\u00a0 <\/span>|—rdist<\/p>\n
      \u00a0\u00a0 <\/span>|-mail<\/p>\n
      \u00a0\u00a0 <\/span>|-nsd<\/p>\n
      \u00a0\u00a0 <\/span>|—db<\/p>\n
      \u00a0\u00a0 <\/span>|—etc<\/p>\n
      \u00a0\u00a0 <\/span>|—run<\/p>\n
      \u00a0\u00a0 <\/span>|—–xfr<\/p>\n
      \u00a0\u00a0 <\/span>|—zones<\/p>\n
      \u00a0\u00a0 <\/span>|—–master<\/p>\n
      \u00a0\u00a0 <\/span>|—–slave<\/p>\n
      \u00a0\u00a0 <\/span>|-quotas<\/p>\n
      \u00a0\u00a0 <\/span>|-run<\/p>\n
      \u00a0\u00a0 <\/span>|—rc.d<\/p>\n
      \u00a0\u00a0 <\/span>|-spool<\/p>\n
      \u00a0\u00a0 <\/span>|—ftp<\/p>\n
      \u00a0\u00a0 <\/span>|—–bin<\/p>\n
      \u00a0\u00a0 <\/span>|—–etc<\/p>\n
      \u00a0\u00a0 <\/span>|—–hidden<\/p>\n
      \u00a0\u00a0 <\/span>|—lock<\/p>\n
      \u00a0\u00a0 <\/span>|—output<\/p>\n
      \u00a0\u00a0 <\/span>|—–lpd<\/p>\n
      \u00a0\u00a0 <\/span>|—smtpd<\/p>\n
      \u00a0\u00a0 <\/span>|—–corrupt<\/p>\n
      \u00a0\u00a0 <\/span>|—–incoming<\/p>\n
      \u00a0\u00a0 <\/span>|—–offline<\/p>\n
      \u00a0\u00a0 <\/span>|—–purge<\/p>\n
      \u00a0\u00a0 <\/span>|—–queue<\/p>\n
      \u00a0\u00a0 <\/span>|——-36<\/p>\n
      \u00a0\u00a0 <\/span>|——-9c<\/p>\n
      \u00a0\u00a0 <\/span>|—–temporary<\/p>\n
      \u00a0\u00a0 <\/span>|-sysmerge<\/p>\n
      \u00a0\u00a0 <\/span>|-syspatch<\/p>\n
      \u00a0\u00a0 <\/span>|-unbound<\/p>\n
      \u00a0\u00a0 <\/span>|—db<\/p>\n
      \u00a0\u00a0 <\/span>|—etc<\/p>\n
      \u00a0<\/span><\/b><\/span>\u00a0 <\/span>|-www<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|—acme<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|—bin<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|—cache<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|—cgi-bin<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|—conf<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|—htdocs<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|—–bgplg<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|—logs<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|—run<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|-yp<\/p>\n<\/td>\n
      		\n
      \/<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|-acme<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|-bin<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|-cache<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|-cgi-bin<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|-conf<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|-htdocs<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|—bgplg<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|-logs<\/b><\/p>\n
      \u00a0\u00a0 <\/span>|-run<\/b><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
      Chroot generally means two things to us.\u00a0 <\/span>The first thing is that we have greatly reduced the threat surface of a malicious web user.\u00a0 <\/span>The second thing is, as we will see later, if we need anything<\/i> outside of the chroot we need to copy it into the chroot to use it.\u00a0 <\/span>There are exceptions such as sockets but for the most part, you are confined to the chroot.\u00a0 <\/span>However it is not fool proof and should never be considered a \u201cJail\u201d.<\/p>\n
      Ok lets load the PHP packages we need for this project. Here is the list of applications we will need to grab:<\/p>\n
      php-7.0.23 – base PHP package
      \nphp-gd-7.0.23 – PHP <\/span>image manipulation extensions<\/span>
      \nphp-mysqli-7.0.23 – PHP <\/span>mysql database access extensions<\/span><\/p>\n
      php-curl-7.0.23 – PHP command line Universal Resource Locator that <\/span>allows you to connect and communicate to those interfaces<\/span><\/p>\n
      The primary tools we will use for loading packages onto our system are pkg_info and pkg_add. \u00a0<\/span><\/span><\/p>\n
       <\/p>\n
      pkg_info<\/b><\/p>\n
      Pkg_info will allow us to query our Mirror to see whats available among other capabilities. An example of this would be \u201cpkg_info -Q \u201d<name>\u00a0 <\/span>searches for all packages with <name> in the name.\u00a0 <\/span>Do not include the version number in the query.\u00a0 <\/span>Found one your curious about?\u00a0 <\/span>Type pkg_info -q <name> and you\u2019ll get a brief synopsis of what it is for.\u00a0 <\/span>For example:<\/span><\/p>\n
      To find all php packages available on your Mirror\u2026<\/span><\/p>\n
      pkg_info -Q php<\/span><\/p>\n
      Returns a list of applications with \u201cphp\u201d in the name:<\/span><\/p>\n
      drupal6-phpmailer-2.2p2\r\ngpsd-php-2.95p8\r\np5-PHP-Serialization-0.34\r\np5-PHP-Session-0.27\r\npear-Date-Holidays_PHPdotNet-0.1.2p1\r\nphp-5.5.37p0\r\nphp-5.6.23p0\r\nphp-7.0.23\r\n\u2026<\/pre>\n
      To find out what, say, php-7.0.23 is all about (mind the \u201cq\u201d – size matters here)\u2026<\/span><\/p>\n
      pkg_info -q php-7.0.23<\/span><\/span><\/p>\n
      Returns a synopsis of that package:<\/span><\/p>\n
      server-side HTML-embedded scripting language\r\n\r\nphp-curl-7.0.23\r\nphp-gd-7.0.23\r\nphp-mysqli-7.0.23\r\n\r\nAt the most basic level, PHP can do anything any other CGI program can\r\ndo, such as collect form data, generate dynamic page content, or send\r\nand receive cookies.\r\n\r\nPHP also has support for talking to other services using protocols such\r\nas IMAP, SNMP, NNTP, POP3, or even HTTP. You can also open raw network\r\nsockets and interact using other protocols.\r\n\r\nThis package installs a stand-alone binary which can be used for\r\ncommand-line scripts, as well as an Apache module. It also contains the\r\npdo_sqlite driver that implements the PHP Data Objects (PDO) interface\r\nto enable access to SQLite 3 databases.\r\n\r\nMaintainer: Robert Nagy <robert@openbsd.org>\r\n\r\nWWW: http:\/\/www.php.net\/<\/pre>\n
      Don\u2019t be fooled, the php applications listed in the synopsis are not dependencies,\u00a0 <\/span>they are just part of the synopsis, included at the authors discretion.\u00a0 <\/span>If you want to see the dependencies,\u00a0 <\/span>we have a switch (-f) for that.\u00a0 <\/span>But it dumps everything about the package, we will need to filter it a bit using grep:<\/span><\/p>\n
      pkg_info -f php-7.0.23 | grep ‘^@depend’ | cut -f 3 -d :<\/span><\/p>\n
      Returns:<\/span><\/p>\n
      gettext-0.19.7\r\nfemail-chroot-1.0p2\r\nlibxml-2.9.3<\/pre>\n
      Bare in mind each dependency most likely has its own list of dependencies it needs to install.<\/span><\/p>\n
      Now you know what php-7.0.23 is and what it is used for and what will get installed besides php-7.0.23 to make php-7.0.23 work correctly.\u00a0 <\/span>Kinda cool huh?<\/span><\/p>\n
       <\/p>\n
      pkg_add<\/b><\/p>\n
      Pkg_add will install (or update) an application.\u00a0 <\/span>It also has some useful switches but I leave those up to you dear reader to explore.\u00a0 <\/span>To use pkg_add is fairly simple:<\/span><\/p>\n
      pkg_add -n php-7.0.23<\/span><\/p>\n
      Will show what would be installed but does not do the install and list the dependencies of the package to be installed with a extraction progress indicator by %.\u00a0 <\/span>It will tell you if any new scripts were installed in \/etc\/rc.d and where to look in \/usr\/local\/share\/doc\/pkg_readmes for extra documentation\u00a0<\/span><\/span><\/p>\n
      pkg_add php-7.0.23<\/span><\/p>\n
      Installs the package and gives you the same output as\u00a0<\/span><\/span> pkg_add -n php-7.0.23.<\/span> You can list several packages on the same call to pkg_add.\u00a0 <\/span>I prefer to call them one at a time.<\/span><\/p>\n
      Ok onto the installs.\u00a0 <\/span>This is the easy part because a lot of developers who donate their time to the OpenBSD project have made it that way.\u00a0 <\/span>In your terminal as root run the following commands:<\/p>\n
      pkg_add php-7.0.23\r\npkg_add php-curl-7.0.23\r\npkg_add php-gd-7.0.23\r\npkg_add php-mysqli-7.0.23<\/pre>\n
      To see everything that has bee installed on your system, typing pkg_info by itself will give you a list of everything currently installed:<\/p>\n
      pkg_info<\/span><\/p>\n
      Returns:<\/span><\/p>\n
      colorls-6.0 \u00a0 \u00a0 \u00a0 \u00a0 ls(1) that can use color to display file attributes\r\ncurl-7.55.1 \u00a0 \u00a0 \u00a0 \u00a0 get files from FTP, Gopher, HTTP or HTTPS servers\r\nfemail-1.0p1\u00a0 \u00a0 \u00a0 \u00a0 simple SMTP client\r\nfemail-chroot-1.0p2 simple SMTP client for chrooted web servers\r\ngettext-0.19.8.1p1\u00a0 GNU gettext runtime libraries and programs\r\njpeg-1.5.1p0v0\u00a0 \u00a0 \u00a0 SIMD-accelerated JPEG codec replacement of libjpeg\r\nlibiconv-1.14p3 \u00a0 \u00a0 character set conversion library\r\nlibxml-2.9.5\u00a0 \u00a0 \u00a0 \u00a0 XML parsing library\r\nmariadb-client-10.0.32v1 multithreaded SQL database (client)\r\nnghttp2-1.26.0\u00a0 \u00a0 \u00a0 library for HTTP\/2\r\nphp-7.0.23\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 server-side HTML-embedded scripting language\r\nphp-curl-7.0.23 \u00a0 \u00a0 curl URL library extensions for php5\r\nphp-gd-7.0.23 \u00a0 \u00a0 \u00a0 image manipulation extensions for php5\r\nphp-mysqli-7.0.23 \u00a0 mysql database access extensions for php5\r\npng-1.6.31\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 library for manipulating PNG images\r\nquirks-2.367\u00a0 \u00a0 \u00a0 \u00a0 exceptions to pkg_add rules\r\nxz-5.2.3p0\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 LZMA compression and decompression tools<\/pre>\n
      We now have our php components installed.\u00a0 <\/span>But before we can use them we have to configure them.\u00a0 <\/span>To do that we need to:<\/p>\n
        \n
      1. Set up an \/var\/www\/htdocs\/index.php to test with<\/li>\n
      2. Alter the \/etc\/httpd_config.test file<\/li>\n
      3. Create the empty \/etc\/rc.conf.local file<\/li>\n
      4. Enable and start the php daemon.<\/li>\n
      5. Check your work using your web browser<\/li>\n
      6. Configure curl in php7.0.ini<\/li>\n
      7. Check your work using your web browser to see if curl was configured.<\/li>\n<\/ol>\n
        Lets create the \/var\/www\/htdocs\/index.php by using touch.<\/p>\n
        touch \/var\/www\/htdocs\/index.php<\/span><\/p>\n
        Now using your favorite editor change the empty file contents to:<\/span><\/p>\n
        <?php phpinfo(); ?><\/span><\/p>\n
        Save Index.php.\u00a0 <\/span>Now edit \/etc\/httpd_config.test and change the contents of the server block\u00a0 <\/span>to the following:<\/span><\/p>\n
        # A minimal default server\r\nserver \"default\" {\r\n\u00a0 \u00a0 \u00a0 \u00a0 listen on $ext_addr port 80\r\n\u00a0 \u00a0 \u00a0 \u00a0 root \"\/htdocs\"\r\n# \u00a0 \u00a0 \u00a0 directory index \"index.html\"\r\n\u00a0 \u00a0 \u00a0 \u00a0 directory {\r\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 index \"index.php\"\r\n\u00a0 \u00a0 \u00a0 \u00a0 }\r\n\u00a0 \u00a0 \u00a0 \u00a0 location \"*.php\" {\r\n\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 fastcgi socket \"\/run\/php-fpm.sock\"\r\n\u00a0 \u00a0 \u00a0 \u00a0 }\r\n}<\/pre>\n
        Save the \/etc\/httpd_config.test.\u00a0 <\/span>Now lets enable PHP.\u00a0 <\/span>We need to make a \/etc\/rc.conf.local using touch.<\/span><\/p>\n
        Touch \/etc\/rc.conf.local<\/span><\/p>\n
        Now using rcctl we will enable php fastcgi socket to run<\/span><\/p>\n
        rcctl enable php70_fpm<\/span><\/p>\n
        You can check the \/etc\/rc.conf.local file,\u00a0 <\/span>you should see one line in there that looks like this:<\/span><\/p>\n
        pkg_scripts=php70_fpm<\/span><\/p>\n
        Start the php70_fpm using rcctl<\/span><\/p>\n
        rcctl start php70_fpm<\/span><\/p>\n
        Start your httpd debug session in its own window as we did before.\u00a0 <\/span><\/span>Open up your web browser and point it to http:\/\/<IP address of your server>.\u00a0 \u00a0 <\/span>You should see the rather large summary of php components available to your web service.\u00a0 <\/span>But we are missing the \u201ccommand line URL\u201d processor or \u201ccurl\u201d component.\u00a0 <\/span>We need to configure that in the <\/span>\/etc\/php-7.0.ini.\u00a0 <\/span>Open the \/etc\/php-7.0.ini and scroll down to the extension section, it looks a lot like this:<\/span><\/p>\n
        ;;;;;;;;;;;;;;;;;;;;;;\r\n; Dynamic Extensions ;\r\n;;;;;;;;;;;;;;;;;;;;;;\r\n; If you wish to have an extension loaded automatically, use the following\r\n; syntax:\r\n;\r\n; \u00a0 extension=modulename.extension\r\n;\r\n; For example, on Windows:\r\n;\r\n; \u00a0 extension=msql.dll\r\n;\r\n; ... or under UNIX:\r\n;\r\n; \u00a0 extension=msql.so\r\n;\r\n; ... or with a path:\r\n;\r\n; \u00a0 extension=\/path\/to\/extension\/msql.so\r\n;\r\n; If you only provide the name of the extension, PHP will look for it in its\r\n; default extension directory.\r\n;\r\n; Windows Extensions\r\n; Note that ODBC support is built in, so no dll is needed for it.\r\n; Note that many DLL files are located in the extensions\/ (PHP 4) ext\/ (PHP 5+)\r\n; extension folders as well as the separate PECL DLL download (PHP 5+).\r\n; Be sure to appropriately set the extension_dir directive.\r\n;\r\n;extension=php_bz2.dll\r\n;extension=php_curl.dll\r\n;extension=php_fileinfo.dll\r\n;extension=php_ftp.dll\r\n;extension=php_gd2.dll\r\n\u2026<\/pre>\n
        Verify the path to the curl.so using find.<\/span><\/p>\n
        find \/ -name curl.so<\/span><\/p>\n
        Add the following line at the end of the extension section:<\/span><\/p>\n
        extension=\/usr\/local\/lib\/php-7.0\/modules\/curl.so<\/span><\/p>\n
        Save the \/etc\/php7.0.ini and restart php using rcctl<\/p>\n
        rcctl restart php70_fpm<\/span><\/p>\n
        Start your httpd debug session in its own window as we did before.\u00a0 <\/span><\/span>Open up your web browser and point it to http:\/\/<IP address of your server>.\u00a0 <\/span>You should see the rather large summary of php components available to your web service, including a section called \u201cCurl\u201d.\u00a0 <\/span>This\u00a0 <\/span>good as WordPress uses curl to process requests for plugins and themes.<\/span><\/p>\n
        \u00a0<\/span><\/span><\/p>\n
        Ok, enough fun for today.\u00a0 <\/span>Lets shutdown our httpd by executing a ctrl+c in the window running it.\u00a0 <\/span>The php daemon will now start automatically when the server is restarted.\u00a0 <\/span>If you want to shut php down as well, use rcctl.<\/p>\n
        rcctl stop php70_fpm<\/span><\/p>\n
        The httpd will be enabled later using rcctl after we have a working WordPress install.<\/span><\/p>\n
        It is better to keep your web server offline until you have it secured against malicious intruders.<\/span><\/p>\n
        So today we have accomplished quite a lot.\u00a0 <\/span>I went over the PKG system, how to configure it and some basic techniques on how to use it.\u00a0 <\/span>I discussed httpd daemon and the chrooted environment it runs in.\u00a0 <\/span>We set up the httpd_config.test file for testing our httpd configuration and ran it in debug mode as we tested first HTML file and later PHP file serving.\u00a0 <\/span>We installed all of our php components, created the rc.conf.local file and enabled php and configured CURL and the php70_fpm fastcgi socket to work in our chrooted httpd environment. All in all a good day.<\/p>\n","protected":false},"excerpt":{"rendered":"
        PKG, Chroot, PHP oh my! Welcome back to Installing WordPress 4.9.4 on OpenBSD 6.2.\u00a0 In this installment we are going to look into enabling the httpd web server on OpenBSD 6.2, install php-7.0.23 and its associated components needed for serving WordPress PHP content.\u00a0 Our goals for this post is to: Go over the PKG system … <\/p>\n
        Continue reading “Setting up httpd, PHP, PKG, chroot for WordPress 4.9.4 on OpenBSD 6.2 part2”<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[2,3],"tags":[7],"class_list":["post-24","post","type-post","status-publish","format-standard","hentry","category-openbsd","category-wordpress","tag-httpd-php-pkg-chroot-wordpress-openbsd"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p9IcIr-o","jetpack_likes_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/www.bigwisedata.com\/index.php?rest_route=\/wp\/v2\/posts\/24","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bigwisedata.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bigwisedata.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bigwisedata.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bigwisedata.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=24"}],"version-history":[{"count":17,"href":"https:\/\/www.bigwisedata.com\/index.php?rest_route=\/wp\/v2\/posts\/24\/revisions"}],"predecessor-version":[{"id":260,"href":"https:\/\/www.bigwisedata.com\/index.php?rest_route=\/wp\/v2\/posts\/24\/revisions\/260"}],"wp:attachment":[{"href":"https:\/\/www.bigwisedata.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=24"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bigwisedata.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=24"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bigwisedata.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=24"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}