Joe’s Blog

export PKG_PATH=http://mirror.planetunix.net/pub/OpenBSD/4.1/packages/i386/

Note that you should substitute your closest mirror (and possibly other machine architecture) in the above. YMMV.
A couple of other mirrors that I use:
http://openbsd.mirrors.tds.net/pub/OpenBSD/4.1/packages/i386/
ftp://rt.fm/pub/OpenBSD/4.1/packages/i386/ (Gotta love the domain name!)

pkg_add mc bash wget

You may add your own favorite choices here – curl, links, zsh, joe, nano, etc.

chsh -s bash

# if [ -x /usr/bin/tset ]; then
# eval `/usr/bin/tset -sQ \?$TERM`
# fi

Download the latest pfw and unpack it into /var/www/:

wget http://www.allard.nu/pfw/download/pfw-latest.tgz
cd /var/www/
tar zxvf /root/pfw-latest.tgz

export PKG_PATH=http://mirror.planetunix.net/pub/OpenBSD/4.1/packages/i386/
pkg_add php5-core sqlite php5-sqlite

This will give you further instructions on checking the installation, and setting up PHP, SQLite, and Apache:

cp /usr/local/share/examples/php5/php.ini-recommended /var/www/conf/php.ini

Test that PHP has the SQLite module installed:

php -i | grep -i sqlite

This should show various SQLite parameters, etc.

Enable the php5 aqnd php5-sqlite modules with:

/usr/local/sbin/phpxs -s
/usr/local/sbin/phpxs -a sqlite

These should return with no errors.

cd /etc
vi rc.conf

And change the line that says:

httpd_flags=NO # for normal use: “” (or “-DSSL” after reading ssl(8))

to

httpd_flags=”-u” # for normal use: “” (or “-DSSL” after reading ssl(8))

cd /var/www/pfw
sqlite conf/config.db < docs/sql/sqlite.sql chown -R www:www conf

cd /var/www/conf/
vi httpd.conf

and do three things:

To enable parsing of PHP scripts, find the following line and uncomment it:

AddType application/x-httpd-php .php

To enable .php files to be execute by Apache’s PHP module, add index.php to the DirectoryIndex setting, so it looks something like this:

DirectoryIndex index.html index.php

Finally, add the pfw directory and alias:

Alias /pfw “/var/www/pfw/web/”
<Directory “/var/www/pfw/web”>
  AllowOverride None
  Order allow,deny
  Allow from 127.0.0.1 10.1
</Directory>

Note that the “10.1” is for testing on our own internal network – you will want to either add your own internal network here, or set up some other form of security, directory-based, or otherwise. Security considerations are beyond the scope of this cookbook, although there are resources listed below that can help you set this up.

www ALL = NOPASSWD: /var/www/pfw/bin/*

The non-preferred way, because it’s dangerous, and easy to typo somthing and render your sudo unusable, is to simply concatenate it to the end of the /etc/sudoers file manually:

echo www ALL = NOPASSWD: /var/www/pfw/bin/* >>/etc/sudoers

NOTE WELL: there are TWO greater-thans! using only one will remove your sudoers file!

lynx 127.0.0.1/pfw

After allowing cookies (all), you should be able to surf to the various links and see the pfw pages, albeit in text mode.

Happy hacking!