civilvar 发表于 2018-8-2 08:38:21

关于puppet的扩展APACHE2 + PASSENGER

zypper in ruby apache2libcurllibcurl-devel apr apr-devel apache2-devel(yum -y install ruby httpd ...)  

  
gem install rack passenger rails
  
passenger-install-apache2-module.ruby2.1
  
...提示...
  
如果这里提示你什么包头文件没装,请不要进行下一步,自己去尝试安装devel
  

  
cat /etc/apache2/vhost.d/liuliancao.com.conf
  
LoadModule passenger_module /usr/lib64/ruby/gems/2.1.0/gems/passenger-5.0.22/buildout/apache2/mod_passenger.so
  
PassengerRoot /usr/lib64/ruby/gems/2.1.0/gems/passenger-5.0.22
  
PassengerDefaultRuby /usr/bin/ruby.ruby2.1
  

  
# And the passenger performance tuning settings:
  
PassengerHighPerformance On
  

  
# now it is on
  
# PassengerUseGlobalQueueOn
  

  
# Set this to about 1.5 times the number of CPU cores in your master:
  
PassengerMaxPoolSize 3
  

  
# Recycle master processes after they service 1000 requests
  
PassengerMaxRequests 1000
  

  
# Stopprocesses if they sit idle for 10 minutes
  
PassengerPoolIdleTime 600
  

  
Listen 8140
  

  
<VirtualHost *:8140>
  
    SSLEngine On
  

  
    # Only allow high security cryptography, ALter if needed for compatibility
  
    SSLProtocol ALL -SSLv2
  
    SSLCipherSuite HIGH:!ADH:RC4+RSA:-MEDIUM:-LOW:-EXP
  
    SSLCertificateFile /var/lib/puppet/ssl/certs/puppet-master.pem
  
    SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/puppet-master.pem
  
    SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem
  
    SSLCACertificateFile/var/lib/puppet/ssl/ca/ca_crt.pem
  
    SSLCARevocationFile   /var/lib/puppet/ssl/ca/ca_crl.pem
  
    SSLVerifyCLient optional
  
    SSLVerifyDepth1
  
    SSLOptions      +StdEnvVars+ExportCertData
  

  
# These request headers are used to pass the client certificates
  
# authentication infomation on to the puppet master process
  
RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e
  
RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e
  
RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
  
RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e
  

  
#RackAutoDetect On
  
DocumentRoot /usr/share/puppet/rack/puppetmasterd/public/
  
<Directory /usr/share/puppet/rack/puppetmasterd/>
  
    Options None
  
    AllowOverride None
  
    Order Allow,Deny
  
    Allow from All
  
</Directory>
  
</VirtualHost>
  

  
检查语法错误,下面错误不是重点就不管了
  
httpd2 -t
  
AH00558: httpd2: Could not reliably determine the server's fully qualified domain name, using 172.16.236.1. Set the 'ServerName' directive globally to suppress this message
  
Syntax OK
  

  
systemctl start apache2
  

  
netstat -tnlp|grep 8140
  
tcp      0      0 :::8140               :::*                  LISTEN      11371/httpd2-prefor
页: [1]
查看完整版本: 关于puppet的扩展APACHE2 + PASSENGER