PUBLIC MARKS with tags linux & configuration

Webfonts are getting mandatory for decent UX on most webapps ... Still, if I want to avoid ugly Arial and TrebuchetMS, I will need to tweak .fonts.conf ...

amebench hunts down the fastest DNS servers available for your computer to use

’Scripts Shell sous Linux’ chez ENI 10 novembre 2008 dans Livres Ce livre sur les scripts shell présente la mise en œuvre de projets dans un environnement industriel. Les 5 projets détaillés couvrent la plupart des besoins en scripts rencontrés en entreprise. Ils ont été conçus et présentés de telle sorte que leur adaptation à des besoins spécifiques sera aisée pour le lecteur. Les thèmes couverts traitent de la gestion des comptes utilisateurs, des sauvegardes de fichiers, des sauvegardes systèmes, de la gestion des disques, des communications entre serveurs, des mécanismes de surveillance et des scripts de démarrage. Ces projets abordent des approches différentes de la programmation en shell, tels que les gros projets qui utilisent plusieurs scripts avec des fichiers de configuration et de journalisation, ou le script unique complet et autonome. Des concepts de base sont détaillés comme les menus interactifs, la crontab, des fichiers systèmes, la sécurité SSH et les clés. Les scripts shell traités dans le livre sont en téléchargement sur cette page. A noter que le livre numérique est offert par l’éditeur pour l’achat du livre imprimé jusqu’au 31 décembre 2008. "Scripts Shell sous Linux : Mise en œuvre de 5 projets", de Théo SCHOMAKER et Jean-Marc BARANGER", ENI Editions. 37 euros. ISBN : 978-2-7460-4617-7

This article explains how you can install and configure apache2-mpm-peruser on a Debian Etch server. apache2-mpm-peruser is an MPM (Multi-Processing Module) for the Apache 2 web server, very similar to apache2-mpm-itk, but faster (almost as fast as apache2-mpm-prefork). mpm-peruser allows you to run each of your vhosts under a separate UID and GID - in short, the scripts and configuration files for one vhost no longer have to be readable for all the other vhosts. It is based on metuxmpm, a working implementation of the perchild MPM. The result is a sane and secure web server environment for your users, without kludges like PHP's safe_mode.

Opsview is enterprise network and application monitoring software designed for scalability, flexibility and ease of use. Opsview has been in development since 2003 and is released under the GNU GPL license. Current version is 2.12. Opsview is a fully integrated monitoring tool that incorporates popular Open Source software including Nagios, Net-SNMP and RRDtool. The Catalyst web framework provides an extensible monitoring and configuration user interface. Opsview software is supported on Linux (Debian, CentOS, RHEL and Ubuntu) and Solaris 10. It will monitor all common operating systems including Windows. Opsview extends the capabilities of Nagios in the following ways: * Distributed monitoring with high availability and fail-over * Much improved SNMP support with trap processing with rules engine * API supporting automation of Opsview configuration * Data warehouse for storage of historical performance and event data * Opsview Reports customisable reporting * Powerful configuration and management UI * Extended monitoring UI * Extensible architecture based on Catalyst Web Framework and Altinity middleware software

sortie de la version 4.3 de Damn Small Linux. C’est une distribution très légère de 50Mo environ basée sur Knoppix, Debian et GNU Linux. Elle peut s’intaller sur : * Une clé USB, * Une carte Compact Flash via la méthode dite “Frugal Install”, * Un mini-cd, * Un ordinateur 486DX avec 16MB de RAM, * 128 Mo de mémoire RAM. Bref, une pure merveille pour les vieilles machines ou les petites configuration (les pc embarqués et les nano-ITX). A l’intérieur, des tonnes de logiciels. Et oui, avec 50 Mo vous pourrez en faire des choses.Navigateur, client Mail, suite office légére, XMMS, client FTP, AIM, ICQ, …

Dans cet article, nous allons étudier la mise en place d’un proxy http antivirus : HAVP (http://www.server-side.de). Chacune des pages web demandées par un client est analysée par un antivirus. L’antivirus peut être au choix Clamav, F-prot ou Kaspersky. De plus, HAVP sait parfaitement travailler avec Squid au cas où vous souhaiteriez continuer de l’utiliser. Nous verrons premièrement comment installer l’antivirus utilisé par HAVP. Deuxièmement, comment installer HAVP et les modifications à effectuer pour le faire fonctionner. Enfin, nous verrons des exemples de configuration d’HAVP : * Seul ; * Seul en proxy transparent ; * Et les deux moyens différents de l’utiliser conjointement avec Squid.

Le but de ce tutoriel est de créer un tunnel IPSec entre deux réseaux privées (chez vous et chez un pote pas exemple) reliés par une connexion Internet publique. La solution proposée se base sur OpenSwan (exemple de configuration sous Ubuntu mais applicable sous n’importe quel Unix et BSD like)

You are not a Linux expert, Artica for Postfix allows you to install a full solution by one single command line: * Postfix: Main MTA * Kaspersky Anti-spam: powerfull Anti-spam provided by Kaspersky Inc * Kaspersky Anti-Virus * Bogofilter : Bayesian anti-spam * OpenLDAP: Database for main configuration and user management * emailrelay: little SMTP server (used as a content-filter) * SQLite library: zeroconf sql database engine with high perfomances. * Cyrus-imap: powerfull MDA System * Procmail: MDA Filter * Fetchmail: Email retreival * DnsMasq:DNS forwarder and DHCP server * Mailman:Mailing List manager * Sieve: End-user mail filters * Yorel script: Statistics of yorel * QueueGraph: Statistics for postfix * MailGraph: Statistics for postfix * AWSTats and geoip plugin: Statistics set for postfix * renattach: attachments filter

This article explains how to set up a two-node load balancer in an active/passive configuration with HAProxy and heartbeat on Debian Etch. The load balancer sits between the user and two (or more) backend Apache web servers that hold the same content. Not only does the load balancer distribute the requests to the two backend Apache servers, it also checks the health of the backend servers. If one of them is down, all requests will automatically be redirected to the remaining backend server. In addition to that, the two load balancer nodes monitor each other using heartbeat, and if the master fails, the slave becomes the master, which means the users will not notice any disruption of the service. HAProxy is session-aware, which means you can use it with any web application that makes use of sessions (such as forums, shopping carts, etc.). From the HAProxy web site: "HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing. Supporting tens of thousands of connections is clearly realistic with todays hardware. Its mode of operation makes its integration into existing architectures very easy and riskless, while still offering the possibility not to expose fragile web servers to the Net."

Saving power is a hot topic across the computer industry. For some, saving power means getting a longer battery life on their mobile devices, be it laptops or handhelds. For others, saving power means reducing costs and increasing efficiency in their data

This article explains how to set up a two-node load balancer in an active/passive configuration with Pound and keepalived on Debian Etch. The load balancer sits between the user and two (or more) backend Apache web servers that hold the same content. Not only does the load balancer distribute the requests to the two backend Apache servers, it also checks the health of the backend servers. If one of them is down, all requests will automatically be redirected to the remaining backend server. In addition to that, the two load balancer nodes monitor each other using keepalived, and if the master fails, the slave becomes the master, which means the users will not notice any disruption of the service. Pound is session-aware, which means you can use it with any web application that makes use of sessions (such as forums, shopping carts, etc.).

This guide is about mod_macro, which makes the job of managing an Apache webserver much easier, or just for the home developer with several test pages or projects. I will explain how to get it running and give some examples of how I use the module, to help you get started with using it.

Apache server performance can be improved by adding additional hardware resources such as RAM, faster CPU, etc. But most of the time, the same result can be achieved by custom configuration of the server. This article looks into getting maximum performance out of Apache with the existing hardware resources, specifically on Linux systems. Of course, it is assumed that there is enough hardware resources - especially enough RAM that the server isn’t swapping frequently. First two sections look into various Compile-Time and Run-Time configuration options. The Run-Time section assumes that Apache is compiled with prefork MPM. HTTP compression and caching is discussed next. Finally, using separate servers for serving static and dynamic contents is covered. Basic knowledge of compiling and configuring Apache and Linux are assumed.

Applications using the LAMP (Linux®, Apache, MySQL, PHP/Perl) architecture are constantly being developed and deployed. But often the server administrator has little control over the application itself because it's written by someone else. This series of three articles discusses many of the server configuration items that can make or break an application's performance. This second article focuses on steps you can take to optimize Apache and PHP. Linux, Apache, MySQL, and PHP (or Perl) form the basis of the LAMP architecture for Web applications. Many open source packages based on LAMP components are available to solve a variety of problems. As the load on an application increases, the bottlenecks in the underlying infrastructure become more apparent in the form of slow response to user requests. The previous article showed you how to tune the Linux system and covered the basics of LAMP and performance measurement. This article focuses on the Web server components, Apache and PHP.

SystemImager is software which automates Linux installs, software distribution, and production deployment. SystemImager is a part of System Installation Suite. SystemImager makes it easy to do automated installs (clones), software distribution, content or data distribution, configuration changes, and operating system updates to your network of Linux machines. You can even update from one Linux release version to another! It can also be used to ensure safe production deployments. By saving your current production image before updating to your new production image, you have a highly reliable contingency mechanism. If the new production enviroment is found to be flawed, simply roll-back to the last production image with a simple update command!

et hop! SSHFS en quatre commandes