This is a small, disconnected part of the El Sereno Open Space that connects Overlook Road in LosGatos near the top, to Overlook Drive in Saratoga / Monte Sereno..
j
Fuzzy as it may be, this is silicon valley from the El Sereno open space, about 1.4 miles from the Sheldon rd entrance.
This photo was taken with, and this post was written entirely with a nokia 810 and posted thru bluetooth and my phone while still hiking on the trail.
J
If this works, this will put up my referral partner info at the top of the WTP site:
This is the detailed meat of the post.
This was posted from the Maemo wp client on my nifty new nokia 810 tablet!
Continue reading ‘Test post’
OK, here goes -= a test of the Live Help box we may use for various websites:
As of this writing, there is no pfw ISO available for the excellent pfw web-management product (www.allard.nu/pfw) for OpenBSD. We support this project.
Plus, the ISO doesn’t have things like compliers, ports tree, etc; and often we have other consulting to do and customizations we perform while installing OBSD in addition to just the pfw install, so we can’t always use the ISO.
So, something I’ve been meaning to do for a while is put together a cookbook for this – here goes.
- Log in as root.
- Set up your environment for installing packages from the web:
export PKG_PATH=http://mirror.planetunix.net/pub/OpenBSD/4.1/packages/i386/
Note that you should substitute your closest mirror (and possibly other machine architecture) in the above. YMMV.
A couple of other mirrors that I use:http://openbsd.mirrors.tds.net/pub/OpenBSD/4.1/packages/i386/
ftp://rt.fm/pub/OpenBSD/4.1/packages/i386/ (Gotta love the domain name!)
- Install some necessary packages:
pkg_add mc bash wget
You may add your own favorite choices here – curl, links, zsh, joe, nano, etc.
- set up bash (or your personal favorite) as your shell:
chsh -s bash
- Remove the annoying “Terminal Type? [xterm]” query from the login sequence, by editing your dot-profile (/root/.profile) and commenting out or deleting the last three lines:
# if [ -x /usr/bin/tset ]; then
# eval `/usr/bin/tset -sQ \?$TERM`
# fi - Reboot and re-login as root. You should now have a bash shell prompt.
Download the latest pfw and unpack it into /var/www/:
wget http://www.allard.nu/pfw/download/pfw-latest.tgz
cd /var/www/
tar zxvf /root/pfw-latest.tgz - Now add the php5 and sqlite packages:
export PKG_PATH=http://mirror.planetunix.net/pub/OpenBSD/4.1/packages/i386/
pkg_add php5-core sqlite php5-sqliteThis will give you further instructions on checking the installation, and setting up PHP, SQLite, and Apache:
- PHP setup and checking:
Copy the recommended PHP configuration file into the Apache configuration directory:cp /usr/local/share/examples/php5/php.ini-recommended /var/www/conf/php.ini
Test that PHP has the SQLite module installed:
php -i | grep -i sqlite
This should show various SQLite parameters, etc.
Enable the php5 aqnd php5-sqlite modules with:
/usr/local/sbin/phpxs -s
/usr/local/sbin/phpxs -a sqliteThese should return with no errors.
- Boot setup
Change to the /etc directory and edit your rc.conf using vi (or your favorite text editor) to allow non-chrooted Apache:cd /etc
vi rc.confAnd change the line that says:
httpd_flags=NO # for normal use: “” (or “-DSSL” after reading ssl(8))
to
httpd_flags=”-u” # for normal use: “” (or “-DSSL” after reading ssl(8))
- SQLite setup and directory permission settings
Change to the pfw directory and initialize SQLite:cd /var/www/pfw
sqlite conf/config.db < docs/sql/sqlite.sql
chown -R www:www conf - Apache setup and config:
Edit your Apache configuration file:cd /var/www/conf/
vi httpd.confand do three things:
To enable parsing of PHP scripts, find the following line and uncomment it:
AddType application/x-httpd-php .php
To enable .php files to be execute by Apache’s PHP module, add index.php to the DirectoryIndex setting, so it looks something like this:
DirectoryIndex index.html index.php
Finally, add the pfw directory and alias:
Alias /pfw “/var/www/pfw/web/”
<Directory “/var/www/pfw/web”>
AllowOverride None
Order allow,deny
Allow from 127.0.0.1 10.1
</Directory>Note that the “10.1″ is for testing on our own internal network – you will want to either add your own internal network here, or set up some other form of security, directory-based, or otherwise. Security considerations are beyond the scope of this cookbook, although there are resources listed below that can help you set this up.
- Sudo setup:
Allow the pfw binaries to have the proper security with sudo – the preferred method is to use the visudo command, and add the following line to the text of the /etc/sudoers file:www ALL = NOPASSWD: /var/www/pfw/bin/*
The non-preferred way, because it’s dangerous, and easy to typo somthing and render your sudo unusable, is to simply concatenate it to the end of the /etc/sudoers file manually:
echo www ALL = NOPASSWD: /var/www/pfw/bin/* >>/etc/sudoers
NOTE WELL: there are TWO greater-thans! using only one will remove your sudoers file!
- Reboot and try it out!
lynx 127.0.0.1/pfw
After allowing cookies (all), you should be able to surf to the various links and see the pfw pages, albeit in text mode.
Happy hacking!
Resources:
- eRacks Open Source Systems can help with preinstalled OpenBSD hardware with pfw, consulting to set up firewall rules, security, digest authentication, and so forth.
- Allard consulting, author of the highly-rated pfw product.
- The OpenBSD easy packages method and mirrors list
- Security Architects can help with your security assessments, setting up firewall rules, and analysis of your overall site or enterprise security plan and strategy.
- The Libre Group provides Open-Source consulting, migration planning and assessments of Open-Source ROI and how to obtain the most immediate return on migrating your business to Open Source infrastructure, including desktops, laptops, servers, etc.
A new LAMP-based MySQL admin has been open-sourced from the commercial version -
http://mysqlquickadmin.com
It looks pretty good, and it’s themable -
http://mysqlquickadmin.com/themes.php
Smooth Blue v1.3
Midnight Maroon v1.3
Original v1.0
We’ll be happy to preinstall this for you on request, at my company, eRacks Open Source Systems – www.eracks.com.