Updating apache, php etc..

[CrazyTech]

I am quite sorry to bother you with this, but you seem to be the experts and I am new to Plesk as I just ordered a server today.

I'm getting the error:
Failed loading /usr/lib/php4/php_ioncube_loader_lin_4.3.so: /usr/lib/php4/php_i oncube_loader_lin_4.3.so: undefined symbol: zend_hash_add_or_update
PHP 5.2.3 (cli) (built: Jun 7 2007 08:59:02)
Copyright (c) 1997-2007 The PHP Group
Zend Engine v2.2.0, Copyright (c) 1998-2007 Zend Technologies

I've tried the steps that you provided but that doesn't seem to take care of this particular issue. What exactly do I need to do if you happen to know?

Thanks so much!

 

[Amin Taheri]

Go into /etc/php.d/ and find the file that has the bad php4 ioncube loader line - then delete it and restart apache.

then type php -V at the CLI and see what happens *crosses fingers*

 

[Limedrink]

Are there any packages that you recommend NOT updating through Yum?

I'm setting up a new server and I want to keep it properly up-to-date but I don't want to break anything by upgrading.

I do remember doing Yum updates and then a Plesk installation, and it failed miserably. Without the updates on a clean CentOS 4.3 box, the Plesk install only had minor errors but seems to work fine. I assume you're supposed to install Plesk, and then run Yum to update the system?

 

[Amin Taheri]

Thats what I normally do yeah, for me the only packages I dont allow YUM to update is the kernel as I want to do that myself when Im ready.

 

[Limedrink]

Should I use the standard CentOS Base repository or switch over to the AtomicRocketTurtle repository for fully updating the system?

 

[Amin Taheri]

If it were me I would use teh centos repo to update the entire system, then the atomic to update only those components - then going forward you can check in both repos at once for further updates.

 

[Limedrink]

Does this look safe? Sorry, I'm paranoid, haha.

=============================================================================
Package Arch Version Repository Size
=============================================================================
Installing:
centos-release i386 6:4-4.3 base 22 k
replacing centos-yumconf.noarch 4-4.5

dapl i386 1.2.1-7 base 92 k
replacing udapl.i386 1.2-0.4265.2.EL4

kernel i686 2.6.9-55.0.2.EL update 11 M
kernel-devel i686 2.6.9-55.0.2.EL update 3.8 M
kernel-smp i686 2.6.9-55.0.2.EL update 11 M
Updating:
NetworkManager i386 0.3.1-4.el4 base 87 k
OpenIPMI i386 1.4.14-1.4E.17 base 194 k
OpenIPMI-libs i386 1.4.14-1.4E.17 base 384 k
SysVinit i386 2.85-34.4 base 96 k
acl i386 2.2.23-5.3.el4 base 59 k
aspell i386 12:0.50.5-4.EL4 base 320 k
at i386 3.1.8-80_EL4 base 53 k
attr i386 2.4.16-3.1.el4 base 45 k
audit i386 1.0.15-3.EL4 base 200 k
audit-libs i386 1.0.15-3.EL4 base 38 k
authconfig i386 4.6.10-rhel4.3 base 286 k
autofs i386 1:4.1.3-199.3 base 245 k
bash i386 3.0-19.3 base 1.7 M
bind i386 20:9.2.4-27.0.1.el4 update 580 k
bind-libs i386 20:9.2.4-27.0.1.el4 update 569 k
bind-utils i386 20:9.2.4-27.0.1.el4 update 141 k
binutils i386 2.15.92.0.2-22 base 2.8 M
bluez-utils i386 2.10-2.2 update 149 k
boost i386 1.32.0-6.rhel4 base 760 k
boost-devel i386 1.32.0-6.rhel4 base 3.2 M
chkconfig i386 1.3.13.5.EL4-1 base 129 k
comps i386 2:4.5CENTOS-0.20070506 base 9.2 M
coreutils i386 5.2.1-31.6 base 2.9 M
cpio i386 2.5-13.RHEL4 base 46 k
cpp i386 3.4.6-8 base 1.6 M
cracklib i386 2.8.9-1.3 base 56 k
cracklib-dicts i386 2.8.9-1.3 base 3.6 M
crash i386 4.0-3.9 base 1.3 M
cups i386 1:1.1.22-0.rc1.9.20.2 update 1.5 M
cups-libs i386 1:1.1.22-0.rc1.9.20.2 update 110 k
curl i386 7.12.1-11.el4 base 230 k
curl-devel i386 7.12.1-11.el4 base 245 k
cvs i386 1.11.17-9.RHEL4 base 1.2 M
dbus i386 0.22-12.EL.9 base 457 k
dbus-devel i386 0.22-12.EL.9 base 228 k
dbus-glib i386 0.22-12.EL.9 base 38 k
desktop-file-utils i386 0.9-3.el4 base 108 k
device-mapper i386 1.02.17-3.0.1.el4 update 515 k
dhclient i386 7:3.0.1-59.EL4 base 225 k
dhcpv6_client i386 0.10-17_EL4 base 70 k
diskdumputils i386 1.3.25-1 base 85 k
dmraid i386 1.0.0.rc14-5_RHEL4_U5 base 690 k
dos2unix i386 3.1-21.2 base 12 k
dosfstools i386 2.8-18 base 64 k
e2fsprogs i386 1.35-12.5.el4 base 772 k
e2fsprogs-devel i386 1.35-12.5.el4 base 483 k
elfutils i386 0.97.1-4 base 136 k
elfutils-libelf i386 0.97.1-4 base 38 k
emacs i386 21.3-19.EL.4 base 1.9 M
emacs-common i386 21.3-19.EL.4 base 9.7 M
emacs-leim i386 21.3-19.EL.4 base 2.5 M
file i386 4.10-3.0.2.el4 update 258 k
findutils i386 1:4.1.20-7.el4.3 base 108 k
finger i386 0.17-26.EL4.1 base 19 k
fontconfig i386 2.2.3-7.centos4 base 117 k
freetype i386 2.1.9-6.el4 update 763 k
ftp i386 0.17-23.EL4 base 48 k
gcc i386 3.4.6-8 base 4.4 M
gcc-c++ i386 3.4.6-8 base 2.4 M
gcc-g77 i386 3.4.6-8 base 2.1 M
gcc-java i386 3.4.6-8 base 1.8 M
gd i386 2.0.28-5.4E base 119 k
gdb i386 6.3.0.0-1.143.el4 base 2.6 M
glibc i686 2.3.4-2.36 base 5.9 M
glibc-common i386 2.3.4-2.36 base 16 M
glibc-devel i386 2.3.4-2.36 base 1.9 M
glibc-headers i386 2.3.4-2.36 base 585 k
glibc-kernheaders i386 2.4-9.1.100.EL base 695 k
gnupg i386 1.2.6-9 base 1.6 M
gpm i386 1.20.1-71.RHEL4 base 172 k
gpm-devel i386 1.20.1-71.RHEL4 base 25 k
grep i386 2.5.1-32.3 base 169 k
groff i386 1.18.1.1-3.EL4 base 1.8 M
grub i386 0.95-3.8 base 434 k
gtk2 i386 2.4.13-22 base 4.3 M
gzip i386 1.3.3-16.rhel4 base 88 k
hal i386 0.4.2-6.EL4 base 152 k
hotplug i386 3:2004_04_01-7.8 base 62 k
httpd i386 2.0.52-32.3.ent.centos4 update 888 k
httpd-suexec i386 2.0.52-32.3.ent.centos4 update 29 k

Cont.....

 

[Limedrink]

hwdata noarch 0.146.28.EL-1 base 357 k
info i386 4.7-5.el4.2 base 145 k
initscripts i386 7.93.29.EL-1.centos4 base 1.1 M
iproute i386 2.6.9-3.EL4.7 base 680 k
ipsec-tools i386 0.3.3-6.rhel4.1 base 221 k
iputils i386 20020927-19.EL4.5 base 104 k
jpackage-utils noarch 1.7.3-1jpp.1.el4 base 60 k
kbd i386 1.12-2.el4.4 base 1.1 M
kernel-hugemem-devel i686 2.6.9-55.0.2.EL update 3.8 M
kernel-smp-devel i686 2.6.9-55.0.2.EL update 3.8 M
kernel-utils i386 1:2.4-13.1.99 base 627 k
krb5-devel i386 1.3.4-49 update 822 k
krb5-libs i386 1.3.4-49 update 482 k
krb5-workstation i386 1.3.4-49 update 815 k
kudzu i386 1.1.95.22-1 base 329 k
kudzu-devel i386 1.1.95.22-1 base 141 k
less i386 382-4.rhel4 base 84 k
libacl i386 2.2.23-5.3.el4 base 16 k
libacl-devel i386 2.2.23-5.3.el4 base 78 k
libattr i386 2.4.16-3.1.el4 base 15 k
libattr-devel i386 2.4.16-3.1.el4 base 28 k
libf2c i386 3.4.6-8 base 82 k
libgcc i386 3.4.6-8 base 63 k
libgcj i386 3.4.6-8 base 5.4 M
libgcj-devel i386 3.4.6-8 base 925 k
libibverbs i386 1.0.4-7 base 20 k
libmthca i386 1.0.3.1-7 base 21 k
libpng i386 2:1.2.7-3.el4 update 155 k
libsdp i386 1:1.1.0-7 base 33 k
libselinux i386 1.19.1-7.3 base 55 k
libselinux-devel i386 1.19.1-7.3 base 84 k
libstdc++ i386 3.4.6-8 base 282 k
libstdc++-devel i386 3.4.6-8 base 8.6 M
libtiff i386 3.6.1-12 base 257 k
libtool i386 1.5.6-4.EL4.1.c4.4 base 635 k
libtool-libs i386 1.5.6-4.EL4.1.c4.4 base 23 k
libxml2 i386 2.6.16-10 base 620 k
libxml2-devel i386 2.6.16-10 base 1.8 M
libxml2-python i386 2.6.16-10 base 439 k
lockdev i386 1.0.1-6.2 base 13 k
lockdev-devel i386 1.0.1-6.2 base 14 k
logrotate i386 3.7.1-6.RHEL4 base 32 k
logwatch noarch 5.2.2-2.EL4 base 132 k
lsof i386 4.72-1.4 base 294 k
ltrace i386 0.4-3.el4 base 71 k
lvm2 i386 2.02.21-5.el4 base 2.0 M
mailx i386 8.1.1-37.EL4 base 49 k
make i386 1:3.80-6.EL4 base 336 k
man i386 1.5o1-10.rhel4 base 243 k
man-pages noarch 1.67-12.EL4 base 3.9 M
mdadm i386 1.12.0-2 base 93 k
mkinitrd i386 4.2.1.10-1.1 base 95 k
mod_perl i386 1.99_16-4.5 update 1.4 M
mod_ssl i386 1:2.0.52-32.3.ent.centos4 update 99 k
module-init-tools i386 3.1-0.pre5.3.4 base 347 k
mysql i386 4.1.20-2.RHEL4.1 base 2.9 M
mysql-server i386 4.1.20-2.RHEL4.1 base 9.8 M
net-snmp-libs i386 5.1.2-11.EL4.10 base 1.7 M
net-tools i386 1.60-37.EL4.9 base 340 k
netdump i386 0.7.16-10 base 16 k
newt i386 0.51.6-9.rhel4 base 81 k
newt-devel i386 0.51.6-9.rhel4 base 65 k
nfs-utils i386 1.0.6-80.EL4 base 279 k
nscd i386 2.3.4-2.36 base 132 k
nss_ldap i386 226-18 base 1.0 M
ntp i386 4.2.0.a.20040617-6.el4 base 1.2 M
ntsysv i386 1.3.13.5.EL4-1 base 21 k
numactl i386 0.6.4-1.39 base 45 k
openldap i386 2.2.13-7.4E base 236 k
openldap-devel i386 2.2.13-7.4E base 1.3 M
openssh i386 3.9p1-8.RHEL4.20 base 323 k
openssh-clients i386 3.9p1-8.RHEL4.20 base 345 k
openssh-server i386 3.9p1-8.RHEL4.20 base 210 k
openssl i686 0.9.7a-43.16 base 1.1 M
openssl-devel i586 0.9.7a-43.16 base 1.6 M
oprofile i386 0.8.1-26 base 2.0 M
pam i386 0.77-66.21 base 1.9 M
pam-devel i386 0.77-66.21 base 84 k
pam_ccreds i386 3-3.rhel4.2 base 18 k
parted i386 1.6.19-16.EL base 488 k
pciutils i386 2.1.99.test8-3.4 base 68 k
pciutils-devel i386 2.1.99.test8-3.4 base 48 k
perl i386 3:5.8.5-36.RHEL4 base 12 M
perl-DBD-MySQL i386 2.9004-3.1.centos4 update 111 k
perl-Net-DNS i386 0.48-2.el4 update 191 k
perl-TimeDate noarch 1.16-1.c4 extras 32 k
php i386 4.3.9-3.22.5 update 1.3 M
php-domxml i386 4.3.9-3.22.5 update 51 k
php-gd i386 4.3.9-3.22.5 update 98 k
php-imap i386 4.3.9-3.22.5 update 50 k
php-mbstring i386 4.3.9-3.22.5 update 921 k
php-mysql i386 4.3.9-3.22.5 update 36 k
php-pear i386 4.3.9-3.22.5 update 267 k
policycoreutils i386 1.18.1-4.12 base 48 k
popt i386 1.9.1-22_nonptl base 60 k
postgresql-libs i386 7.4.17-1.RHEL4.1 update 147 k
procps i386 3.2.3-8.6 base 188 k
psacct i386 6.3.2-39.rhel4 base 53 k
psmisc i386 21.4-4.1 base 40 k
python i386 2.3.4-14.4 base 4.8 M
python-devel i386 2.3.4-14.4 base 1.4 M
python-elementtree i386 1.2.6-5.el4.centos base 88 k
python-sqlite i386 1.1.7-1.2.1 base 37 k
python-urlgrabber noarch 2.9.8-2 base 118 k
qt i386 1:3.3.3-11.RHEL4 update 2.9 M
quota i386 1:3.12-6.el4 base 304 k
rdist i386 1:6.1.5-38.40.2 base 89 k
redhat-logos noarch 1.1.26-1.centos4.4 base 7.6 M
redhat-rpm-config noarch 8.0.32.1-4 base 41 k
rhnlib noarch 2.1.1-3.el4 base 101 k
rhpl i386 0.148.5-1 base 289 k
rpm i386 4.3.3-22_nonptl base 650 k
rpm-build i386 4.3.3-22_nonptl base 458 k
rpm-devel i386 4.3.3-22_nonptl base 3.2 M
rpm-libs i386 4.3.3-22_nonptl base 784 k
rpm-python i386 4.3.3-22_nonptl base 80 k
rpmdb-CentOS i386 2:4.5-0.20070506 base 28 M
rsh i386 0.17-25.4 base 40 k
samba-common i386 3.0.10-1.4E.12.2 update 5.0 M
sed i386 4.1.2-6.el4 base 167 k
selinux-policy-targeted noarch 1.17.30-2.145 base 124 k
selinux-policy-targeted-sources noarch 1.17.30-2.145 base 169 k
sendmail i386 8.13.1-3.2.el4 base 577 k
setools i386 2.3-4 base 808 k
shadow-utils i386 2:4.0.3-61.RHEL4 base 588 k
spamassassin i386 3.1.9-1.el4 update 908 k
sqlite i386 3.3.6-2 base 193 k

Cont...

 

[Limedrink]

strace i386 4.5.15-1.el4.1 base 98 k
sysreport noarch 1.3.15-8 base 18 k
systemtap i386 0.5.12-1 base 681 k
tar i386 1.14-12.RHEL4 base 334 k
tcsh i386 6.13-9.el4.1 base 585 k
texinfo i386 4.7-5.el4.2 base 743 k
tog-pegasus i386 2:2.5.1-2.EL4 base 6.2 M
tog-pegasus-devel i386 2:2.5.1-2.EL4 base 162 k
traceroute i386 1.4a12-24.EL4.1 base 25 k
ttmkfdir i386 3.0.9-20.el4 base 44 k
tzdata noarch 2007f-1.el4 update 445 k
udev i386 039-10.15.EL4 base 838 k
umb-scheme i386 3.2-36.EL4 base 967 k
unzip i386 5.51-9.EL4.5 base 142 k
up2date i386 4.5.5-6.el4.centos update 1.8 M
usbutils i386 0.11-7.RHEL4.1 base 40 k
usermode i386 1.74-2 base 138 k
util-linux i386 2.12a-16.EL4.25 base 1.5 M
valgrind i386 1:3.1.1-1.EL4 base 9.1 M
valgrind-callgrind i386 0.10.1-2.EL4 base 1.2 M
vixie-cron i386 4:4.1-47.EL4 update 81 k
wireless-tools i386 1:28-0.pre16.3.3.EL4 base 109 k
words noarch 3.0-3.2 base 1.4 M
xorg-x11-Mesa-libGL i386 6.8.2-1.EL.19 update 383 k
xorg-x11-deprecated-libs i386 6.8.2-1.EL.19 update 271 k
xorg-x11-font-utils i386 6.8.2-1.EL.19 update 307 k
xorg-x11-libs i386 6.8.2-1.EL.19 update 2.7 M
xorg-x11-xfs i386 6.8.2-1.EL.19 update 320 k
ypbind i386 3:1.17.2-13 base 33 k
yum noarch 2.4.3-3.el4.centos base 385 k
Installing for dependencies:
libgssapi i386 0.8-1 base 19 k
librdmacm i386 0.9.1-7 base 15 k
nfs-utils-lib i386 1.0.6-8 base 49 k
openib i386 1.1-7 base 81 k
systemtap-runtime i386 0.5.12-1 base 14 k

Transaction Summary
=============================================================================
Install 10 Package(s)
Update 237 Package(s)
Remove 0 Package(s)
Total download size: 303 M


Thanks for all the help.. Seems like a hefty update!

Look safe? Anything I should exclude?

 

[Amin Taheri]

Personally I would leave out the kernel stuff for a seperate update when/if you want to do a kernel upgrade.

Some of the stuff like unix2dos isnt really needed and you should probably uninstall the packages that you do not want before you do the updates to reduce the update size and complexity of transaction.

I cant really tell you what is "safe" or "what to upgrade and what to ignore" as I have no clue how you use your system, the services you need etc, but having the packages upgraded to the latest version is typically safer then leaving them in an old depricated state - in general.

You will need to go through your system and disable the services (like cups for example - unless you use it for printing), remove the packages that you dont need, etc. that fits your system profile and expected useage.

 

[atomicturtle]

Nothing on that list is anything to worry about. PSA is designed to be update friendly.

 

[Limedrink]

Thanks for the help guys.

Update went smooth - even the kernel.

Still trying to debate over mod_security rulesets though. I am using gotroot.com's ruleset on my old server but it's causing way too many false positives and I couldn't keep up with maintaining it.

I'm thinking of just using modsecurity.org's ruleset. Any opinion on it?

Basically the last step and then I'm home free for this migration.

 

[Limedrink]

Also, here's another ruleset I found:

http://wiki.asmallorange.com/VPSConfigModSec

 

[atomicturtle]

We've been rewriting all the 1.9 rules weve got up on gotroot for the 2.5 format now that we've got a solution to the 2.x performance problems. A lot of those rules are in ASL 2.0 now (about 7000-ish of the 20000 total).

So a major problem we ran into with 1.x was that the badguys will evade mod_security by encoding the attacks (hex, octal, etc), and part 2 for internationalization UTF-8 was getting screwed up. Thats another thing we've got resolved in 2.5, transforms on all the input to both ascii when matching against the rules, and UTF-8 isnt getting screwed up any more.

One of the major problems you run into with it are creating all the exceptions for different apps. The way I approached that was to write another utility to identify what applications (called "App-Inventory"... Im very unimaginative like that) are installed, to dynamically adjust the rulesets.

So anyway... thats my stream of consciousness mod_security/ASL update.

 

[rededelta]

Hi!

I'm trying to upgrade PHP 4.3.9 to 5 on PLesk 8.2, CentOS 4 following the instructions at
http://www.atomicorp.com/wiki/index.php/PHP (and in this thread)

when I run
Yum update php
I'm getting the error:

Setting up Upgrade Process
Setting up repositories
Reading repository metadata in from local files
Resolving Dependencies
--> Populating transaction set with selected packages. Please wait.
---> Package php.i386 0:5.2.3-4.el4.art set to be updated
--> Running transaction check
--> Processing Dependency: php = 4.3.9-3.22.5 for package: php-gd
--> Processing Dependency: php = 4.3.9-3.22.5 for package: php-imap
--> Processing Dependency: php = 4.3.9-3.22.5 for package: php-mbstring
--> Processing Dependency: php = 4.3.9-3.22.5 for package: php-pear
--> Processing Dependency: /usr/bin/php for package: psa-horde
--> Processing Dependency: php-cli = 5.2.3-4.el4.art for package: php
--> Processing Dependency: php = 4.3.9-3.22.5 for package: php-domxml
--> Restarting Dependency Resolution with new changes.
--> Populating transaction set with selected packages. Please wait.
---> Package php-mbstring.i386 0:5.2.3-4.el4.art set to be updated
---> Package php-cli.i386 0:5.2.3-4.el4.art set to be updated
---> Package php-gd.i386 0:5.2.3-4.el4.art set to be updated
---> Package php-imap.i386 0:5.2.3-4.el4.art set to be updated
---> Package php-pear.noarch 1:1.5.0-5.el4.art set to be updated
---> Package php-xml.i386 0:5.2.3-2.el4.art set to be updated
--> Running transaction check
--> Processing Dependency: php-common = 5.2.3-2.el4.art for package: php-xml
--> Finished Dependency Resolution
Error: Missing Dependency: php-common = 5.2.3-2.el4.art is needed by package php-xml

Missing Dependency: php-common can anyone help me with this? thanks.

 

[Amin Taheri]

Originally posted by atomicturtle
One of the major problems you run into with it are creating all the exceptions for different apps. The way I approached that was to write another utility to identify what applications (called "App-Inventory"... Im very unimaginative like that) are installed, to dynamically adjust the rulesets.
[/B]

Is that something that gets ran once, or something that gets ran on a regular basis during daily/weekly cron?

Originally posted by rededelta
Missing Dependency: php-common can anyone help me with this? thanks.[/B]

Did you try
yum install php-pear

 

[atomicturtle]

I have it running every 24 hours. It takes a bit, depending on the number of files on the system.