doc/install/linux/install.pl - diff

Return to install.pl CVS log

Up to [LON-CAPA] / doc / install / linux

Diff for /doc/install/linux/install.pl between versions 1.45.2.13 and 1.45.2.23

version 1.45.2.13, 2021/03/18 22:00:54	version 1.45.2.23, 2024/08/05 13:42:44
Line 210 sub get_distro {	Line 210 sub get_distro {
$distro = 'rhes'.$1;	$distro = 'rhes'.$1;
$updatecmd = 'dnf install LONCAPA-prerequisites';	$updatecmd = 'dnf install LONCAPA-prerequisites';
$installnow = 'dnf -y install LONCAPA-prerequisites';	$installnow = 'dnf -y install LONCAPA-prerequisites';
} elsif ($versionstring =~ /CentOS(?:\| Linux\| Stream) release (\d+)/) {	} elsif ($versionstring =~ /CentOS(\| Linux\| Stream) release (\d+)/) {
$distro = 'centos'.$1;	$distro = 'centos'.$2;
	if ($1 eq ' Stream') {
	$distro .= '-stream';
	}
$updatecmd = 'yum install LONCAPA-prerequisites';	$updatecmd = 'yum install LONCAPA-prerequisites';
$installnow = 'yum -y install LONCAPA-prerequisites';	$installnow = 'yum -y install LONCAPA-prerequisites';
} elsif ($versionstring =~ /Scientific Linux (?:SL )?release ([\d.]+) /) {	} elsif ($versionstring =~ /Scientific Linux (?:SL )?release ([\d.]+) /) {
Line 220 sub get_distro {	Line 223 sub get_distro {
$distro = 'scientific'.$ver;	$distro = 'scientific'.$ver;
$updatecmd = 'yum install LONCAPA-prerequisites';	$updatecmd = 'yum install LONCAPA-prerequisites';
$installnow = 'yum -y install LONCAPA-prerequisites';	$installnow = 'yum -y install LONCAPA-prerequisites';
	} elsif ($versionstring =~ /Rocky Linux release ([\d.]+)/) {
	my $ver = $1;
	$ver =~ s/\.\d+$//;
	$distro = 'rocky'.$ver;
	$updatecmd = 'dnf install LONCAPA-prerequisites';
	$installnow = 'dnf -y install LONCAPA-prerequisites';
	} elsif ($versionstring =~ /AlmaLinux release ([\d.]+) /) {
	my $ver = $1;
	$ver =~ s/\.\d+$//;
	$distro = 'alma'.$ver;
	$updatecmd = 'dnf install LONCAPA-prerequisites';
	$installnow = 'dnf -y install LONCAPA-prerequisites';
} else {	} else {
print &mt('Unable to interpret [_1] to determine system type.',	print &mt('Unable to interpret [_1] to determine system type.',
'/etc/redhat-release')."\n";	'/etc/redhat-release')."\n";
Line 358 sub check_prerequisites {	Line 373 sub check_prerequisites {

sub check_locale {	sub check_locale {
my ($distro) = @_;	my ($distro) = @_;
my ($fh,$langvar,$command,$earlyout);	my ($fh,$langvar,$command,$langcmd,$earlyout,$default);
$langvar = 'LANG';	$langvar = 'LANG';
if ($distro =~ /^(ubuntu\|debian)/) {	if ($distro =~ /^(ubuntu\|debian)/) {
if (!open($fh,"</etc/default/locale")) {	if (!open($fh,"</etc/default/locale")) {
Line 393 sub check_locale {	Line 408 sub check_locale {
'/etc/sysconfig/i18n');	'/etc/sysconfig/i18n');
$earlyout = 1;	$earlyout = 1;
}	}
} elsif ($distro =~ /^(?:rhes\|centos\|scientific\|oracle)(\d+)/) {	} elsif ($distro =~ /^(?:rhes\|centos\|scientific\|oracle\|rocky\|alma)(\d+)/) {
if ($1 >= 7) {	if ($1 >= 7) {
if (!open($fh,"</etc/locale.conf")) {	if (!open($fh,"</etc/locale.conf")) {
print &mt('Failed to open: [_1], default locale not checked.',	print &mt('Failed to open: [_1], default locale not checked.',
Line 412 sub check_locale {	Line 427 sub check_locale {
$earlyout = 1;	$earlyout = 1;
}	}
}	}
return if ($earlyout);	return () if ($earlyout);
my @data = <$fh>;	my @data = <$fh>;
chomp(@data);	chomp(@data);
	close($fh);
foreach my $item (@data) {	foreach my $item (@data) {
if ($item =~ /^\Q$langvar\E=\"?([^\"]*)\"?/) {	if ($item =~ /^\Q$langvar\E=\"?([^\"]*)\"?/) {
my $default = $1;	$default = $1;
if ($default ne 'en_US.UTF-8') {	if ($default ne 'en_US.UTF-8') {
if ($distro =~ /^debian/) {	if ($distro =~ /^debian/) {
$command = 'locale-gen en_US.UTF-8'."\n".	$command = 'locale-gen en_US.UTF-8'."\n".
Line 438 sub check_locale {	Line 454 sub check_locale {
last;	last;
}	}
}	}
close($fh);	# Check for locales
return $command;	if ($default ne 'en_US.UTF-8') {
	my ($has_us_english,$has_other_code,$has_other_lang);
	if (open(PIPE,"locale -a 2>/dev/null \|")) {
	while (<PIPE>) {
	chomp();
	next if (/^(C(\|\.utf8)\|POSIX)$/i);
	if (/^en_US\.utf8/i) {
	$has_us_english = 1;
	} elsif (/^[A-Za-z]{2}_[A-Za-z]{2}/) {
	$has_other_code = 1;
	} elsif (/^[A-Za-z]{3,}/) {
	$has_other_lang = 1;
	}
	}
	close(PIPE);
	if (!$has_us_english) {
	if ($has_other_code \|\| $has_other_lang) {
	if ($distro =~ /^ubuntu/) {
	$langcmd = "sudo apt-get install language-pack-en\n";
	} elsif ($distro =~ /^debian/) {
	$langcmd = "apt-get install language-pack-en\n";
	} elsif ($distro =~ /^(suse\|sles)/) {
	$langcmd = &mt('Use yast: System > Language > Primary Language = English')."\n";
	} elsif ($distro =~ /^fedora(\d+)$/) {
	if ($1 > 23) {
	$langcmd = "dnf install glibc-langpack-en\n";
	} else {
	$langcmd = "yum install glibc-common\n";
	}
	} elsif ($distro =~ /^(?:rhes\|centos\|scientific\|oracle\|rocky\|alma)(\d+)/) {
	if ($1 > 7) {
	$langcmd = "dnf install glibc-langpack-en\n";
	} else {
	$langcmd = "yum install glibc-common\n";
	}
	}
	} else {
	if ($distro =~ /^ubuntu/) {
	$langcmd = "sudo apt-get install language-pack-en\n";
	} elsif ($distro =~ /^debian/) {
	$langcmd = "apt-get install language-pack-en\n";
	} elsif ($distro =~ /^(suse\|sles)/) {
	$langcmd = &mt('Use yast: System > Language > Primary Language = English')."\n";
	} elsif ($distro =~ /^fedora(\d+)$/) {
	if ($1 > 23) {
	$langcmd = &mt('Either install all languages[_1]or install English only[_2]',
	":\ndnf install glibc-all-langpacks\n\n",
	":\ndnf install glibc-langpack-en\n");
	} else {
	$langcmd = "yum install glibc-common\n";
	}
	} elsif ($distro =~ /^(?:rhes\|centos\|scientific\|oracle\|rocky\|alma)(\d+)/) {
	if ($1 > 7) {
	$langcmd = &mt('Either install all languages[_1]or install English only[_2]',
	":\ndnf install glibc-all-langpacks\n\n",
	":\ndnf install glibc-langpack-en\n");
	} else {
	$langcmd = "yum install glibc-common\n";
	}
	}
	}
	}
	}
	}
	return ($command,$langcmd);
}	}

sub check_required {	sub check_required {
Line 450 sub check_required {	Line 530 sub check_required {
}	}
my $gotprereqs = &check_prerequisites($packagecmd,$distro);	my $gotprereqs = &check_prerequisites($packagecmd,$distro);
if ($gotprereqs eq '') {	if ($gotprereqs eq '') {
return ($distro,$gotprereqs,'',$packagecmd,$updatecmd);	return ($distro,$gotprereqs,'','',$packagecmd,$updatecmd);
}	}
my $localecmd = &check_locale($distro);	my ($localecmd,$langcmd) = &check_locale($distro);
unless ($localecmd eq '') {	unless ($localecmd eq '') {
return ($distro,$gotprereqs,$localecmd);	return ($distro,$gotprereqs,$localecmd,$langcmd);
}	}
my ($mysqlon,$mysqlsetup,$mysqlrestart,$dbh,$has_pass,$mysql_unix_socket,$has_lcdb,	my ($mysqlon,$mysqlsetup,$mysqlrestart,$dbh,$has_pass,$mysql_unix_socket,$has_lcdb,
%recommended,$downloadstatus,$filetouse,$production,$testing,$apachefw,	%recommended,$downloadstatus,$filetouse,$production,$testing,$apachefw,
Line 469 sub check_required {	Line 549 sub check_required {
}	}
$mysqlon = &check_mysql_running($distro);	$mysqlon = &check_mysql_running($distro);
if ($mysqlon) {	if ($mysqlon) {
($mysqlsetup,$has_pass,$dbh,$mysql_has_wwwuser,$mysql_unix_socket) =	($mysqlsetup,$has_pass,$dbh,$mysql_has_wwwuser,$mysql_unix_socket) =
&check_mysql_setup($instdir,$dsn,$distro);	&check_mysql_setup($instdir,$dsn,$distro);
if ($mysqlsetup eq 'needsrestart') {	if ($mysqlsetup eq 'needsrestart') {
$mysqlrestart = '';	$mysqlrestart = '';
if ($distro eq 'ubuntu') {	if ($distro eq 'ubuntu') {
$mysqlrestart = 'sudo ';	$mysqlrestart = 'sudo ';
}	}
$mysqlrestart .= 'service mysql restart';	$mysqlrestart .= 'service mysql restart';
return ($distro,$gotprereqs,$localecmd,$packagecmd,$updatecmd,$installnow,$mysqlrestart);	return ($distro,$gotprereqs,$localecmd,$langcmd,$packagecmd,$updatecmd,$installnow,$mysqlrestart);
} else {	} else {
if ($mysqlsetup eq 'noroot') {	if ($mysqlsetup eq 'noroot') {
$recommended{'mysqlperms'} = 1;	$recommended{'mysqlperms'} = 1;
Line 496 sub check_required {	Line 576 sub check_required {
}	}
($recommended{'firewall'},$apachefw) = &chkfirewall($distro);	($recommended{'firewall'},$apachefw) = &chkfirewall($distro);
($recommended{'runlevels'},$tostop,$uses_systemctl) = &chkconfig($distro,$instdir);	($recommended{'runlevels'},$tostop,$uses_systemctl) = &chkconfig($distro,$instdir);
	if ((ref($uses_systemctl) eq 'HASH') && ($uses_systemctl->{'apache'})) {
	$recommended{'systemd'} = &check_systemd_security($distro);
	}
$recommended{'apache'} = &chkapache($distro,$instdir);	$recommended{'apache'} = &chkapache($distro,$instdir);
$recommended{'stopsrvcs'} = &chksrvcs($distro,$tostop);	$recommended{'stopsrvcs'} = &chksrvcs($distro,$tostop);
($recommended{'download'},$downloadstatus,$filetouse,$production,$testing)	($recommended{'download'},$downloadstatus,$filetouse,$production,$testing)
= &need_download();	= &need_download($distro,$instdir);
return ($distro,$gotprereqs,$localecmd,$packagecmd,$updatecmd,$installnow,	return ($distro,$gotprereqs,$localecmd,$langcmd,$packagecmd,$updatecmd,$installnow,
$mysqlrestart,\%recommended,$dbh,$has_pass,$mysql_unix_socket,	$mysqlrestart,\%recommended,$dbh,$has_pass,$mysql_unix_socket,
$has_lcdb,$downloadstatus,$filetouse,$production,$testing,$apachefw,	$has_lcdb,$downloadstatus,$filetouse,$production,$testing,$apachefw,
$uses_systemctl);	$uses_systemctl);
Line 520 sub check_mysql_running {	Line 603 sub check_mysql_running {
$process = 'mysqld';	$process = 'mysqld';
$proc_owner = 'mysql';	$proc_owner = 'mysql';
}	}
	if ($1 >= 16) {
	$use_systemctl = 1;
	}
	} elsif ($distro =~ /^debian(\w+)/) {
	if ($1 >= 10) {
	$process = 'mysql';
	$proc_owner = 'mysql';
	}
	if ($1 >= 11) {
	$mysqldaemon = 'mariadb';
	}
	if ($1 >= 9) {
	$use_systemctl = 1;
	}
} elsif ($distro =~ /^fedora(\d+)/) {	} elsif ($distro =~ /^fedora(\d+)/) {
if ($1 >= 16) {	if ($1 >= 16) {
$process = 'mysqld';	$process = 'mysqld';
Line 529 sub check_mysql_running {	Line 626 sub check_mysql_running {
if ($1 >= 19) {	if ($1 >= 19) {
$mysqldaemon ='mariadb';	$mysqldaemon ='mariadb';
}	}
} elsif ($distro =~ /^(?:centos\|rhes\|scientific\|oracle)(\d+)/) {	if ($1 >= 34) {
	$process = 'mariadb';
	}
	} elsif ($distro =~ /^(?:centos\|rhes\|scientific\|oracle\|rocky\|alma)(\d+)/) {
if ($1 >= 7) {	if ($1 >= 7) {
$mysqldaemon ='mariadb';	$mysqldaemon ='mariadb';
$process = 'mysqld';	$process = 'mysqld';
$proc_owner = 'mysql';	$proc_owner = 'mysql';
$use_systemctl = 1;	$use_systemctl = 1;
}	}
	if ($1 >= 9) {
	$process = 'mariadb';
	}
} elsif ($distro =~ /^sles(\d+)/) {	} elsif ($distro =~ /^sles(\d+)/) {
if ($1 >= 12) {	if ($1 >= 12) {
$use_systemctl = 1;	$use_systemctl = 1;
$proc_owner = 'mysql';	$proc_owner = 'mysql';
$process = 'mysqld';	$process = 'mysqld';
}	}
if ($1 >= 15) {	if ($1 >= 12) {
$mysqldaemon ='mariadb';	$mysqldaemon ='mariadb';
}	}
} elsif ($distro =~ /^suse(\d+)/) {	} elsif ($distro =~ /^suse(\d+)/) {
Line 628 sub chkconfig {	Line 731 sub chkconfig {
$uses_systemctl{'ntp'} = 1;	$uses_systemctl{'ntp'} = 1;
$uses_systemctl{'cups'} = 1;	$uses_systemctl{'cups'} = 1;
$uses_systemctl{'memcached'} = 1;	$uses_systemctl{'memcached'} = 1;
if (($name eq 'sles') && ($num >= 15)) {	if ($name eq 'sles') {
$daemon{'ntp'} = 'chronyd';	if ($num >= 12) {
$daemon{'mysql'} = 'mariadb';	$daemon{'mysql'} = 'mariadb';
	}
	if ($num >= 15) {
	$daemon{'ntp'} = 'chronyd';
	} else {
	$daemon{'ntp'} = 'ntpd';
	}
} else {	} else {
$daemon{'ntp'} = 'ntpd';	$daemon{'ntp'} = 'ntpd';
}	}
Line 656 sub chkconfig {	Line 765 sub chkconfig {
if (($distro =~ /^ubuntu/) && ($version <= 8)) {	if (($distro =~ /^ubuntu/) && ($version <= 8)) {
$daemon{'cups'} = 'cupsys';	$daemon{'cups'} = 'cupsys';
}	}
if (($distro =~ /^ubuntu/) && ($version >= 18)) {	if ((($distro =~ /^ubuntu/) && ($version >= 18)) \|\|
	(($distro =~ /^debian/) && ($version >= 10))) {
$daemon{'ntp'} = 'chrony';	$daemon{'ntp'} = 'chrony';
}	}
	if (($distro =~ /^debian/) && ($version >= 10)) {
	$daemon{'mysql'} = 'mariadb';
	}
} elsif ($distro =~ /^fedora(\d+)/) {	} elsif ($distro =~ /^fedora(\d+)/) {
my $version = $1;	my $version = $1;
if ($version >= 15) {	if ($version >= 15) {
Line 676 sub chkconfig {	Line 789 sub chkconfig {
if ($version >= 26) {	if ($version >= 26) {
$daemon{'ntp'} = 'chronyd';	$daemon{'ntp'} = 'chronyd';
}	}
} elsif ($distro =~ /^(?:centos\|rhes\|scientific\|oracle)(\d+)/) {	} elsif ($distro =~ /^(?:centos\|rhes\|scientific\|oracle\|rocky\|alma)(\d+)/) {
my $version = $1;	my $version = $1;
if ($version >= 7) {	if ($version >= 7) {
$uses_systemctl{'ntp'} = 1;	$uses_systemctl{'ntp'} = 1;
Line 781 sub chkconfig {	Line 894 sub chkconfig {
return (\%needfix,\%tostop,\%uses_systemctl);	return (\%needfix,\%tostop,\%uses_systemctl);
}	}

	sub check_systemd_security {
	my ($distro) = @_;
	my $service = 'httpd.service';
	if ($distro =~ /^(suse\|sles\|ubuntu\|debian)/) {
	$service = 'apache2.service';
	}
	system("systemctl daemon-reload");
	if (open(PIPE,"systemctl show $service --property=ProtectHome 2>/dev/null \|")) {
	my $protection = <PIPE>;
	close(PIPE);
	chomp($protection);
	if ($protection =~ /^ProtectHome=(read-only\|yes)$/i) {
	return 1;
	}
	} else {
	print &mt('Could not check systemctl configuration for Apache')."\n";
	}
	return 0;
	}

sub uses_firewalld {	sub uses_firewalld {
my ($distro) = @_;	my ($distro) = @_;
my ($inuse,$checkfirewalld,$zone);	my ($inuse,$checkfirewalld,$zone);
Line 792 sub uses_firewalld {	Line 925 sub uses_firewalld {
if ($1 >= 18) {	if ($1 >= 18) {
$checkfirewalld = 1;	$checkfirewalld = 1;
}	}
} elsif ($distro =~ /^(?:centos\|rhes\|scientific\|oracle)(\d+)/) {	} elsif ($distro =~ /^(?:centos\|rhes\|scientific\|oracle\|rocky\|alma)(\d+)/) {
if ($1 >= 7) {	if ($1 >= 7) {
$checkfirewalld = 1;	$checkfirewalld = 1;
}	}
}	}
if ($checkfirewalld) {	if ($checkfirewalld) {
my ($loaded,$active);	my ($loaded,$active);
if (open(PIPE,"systemctl status firewalld \|")) {	if (open(PIPE,"systemctl status firewalld 2>/dev/null \|")) {
while (<PIPE>) {	while (<PIPE>) {
chomp();	chomp();
if (/^\s*Loaded:\s+(\w+)/) {	if (/^\s*Loaded:\s+(\w+)/) {
$loaded = $1;	$loaded = $1;
}	}
if (/^\s*Active\s+(\w+)/) {	if (/^\s*Active:\s+(\w+)/) {
$active = $1;	$active = $1;
}	}
}	}
Line 884 sub chkapache {	Line 1017 sub chkapache {
my $distname = $1;	my $distname = $1;
my $version = $2;	my $version = $2;
my ($stdconf,$stdsite);	my ($stdconf,$stdsite);
if (($distname eq 'ubuntu') && ($version > 12)) {	if ((($distname eq 'ubuntu') && ($version > 12)) \|\|
	(($distname eq 'debian') && ($version >= 10))) {
$stdconf = "$instdir/debian-ubuntu/ubuntu14/loncapa_conf";	$stdconf = "$instdir/debian-ubuntu/ubuntu14/loncapa_conf";
$stdsite = "$instdir/debian-ubuntu/ubuntu14/loncapa_sites";	$stdsite = "$instdir/debian-ubuntu/ubuntu14/loncapa_sites";
} else {	} else {
Line 895 sub chkapache {	Line 1029 sub chkapache {
print &mt('Warning: No LON-CAPA Apache configuration file found for installation check.')."\n";	print &mt('Warning: No LON-CAPA Apache configuration file found for installation check.')."\n";
} else {	} else {
my ($configfile,$sitefile);	my ($configfile,$sitefile);
if (($distname eq 'ubuntu') && ($version > 12)) {	if ((($distname eq 'ubuntu') && ($version > 12)) \|\|
	(($distname eq 'debian') && ($version >= 10))) {
$sitefile = '/etc/apache2/sites-available/loncapa.conf';	$sitefile = '/etc/apache2/sites-available/loncapa.conf';
$configfile = '/etc/apache2/conf-available/loncapa.conf';	$configfile = '/etc/apache2/conf-available/loncapa.conf';
} else {	} else {
Line 911 sub chkapache {	Line 1046 sub chkapache {
}	}
}	}
}	}
if ((!$fixapache) && ($distname eq 'ubuntu') && ($version > 12)) {	if ((!$fixapache) && ((($distname eq 'ubuntu') && ($version > 12)) \|\|
	(($distname eq 'debian') && ($version >= 10)))) {
if (($sitefile ne '') && (-e $sitefile) && (-e $stdsite)) {	if (($sitefile ne '') && (-e $sitefile) && (-e $stdsite)) {
if (open(PIPE, "diff --brief $stdsite $sitefile \|")) {	if (open(PIPE, "diff --brief $stdsite $sitefile \|")) {
my $diffres = <PIPE>;	my $diffres = <PIPE>;
close(PIPE);	close(PIPE);
chomp($diffres);	chomp($diffres);
unless ($diffres) {	if ($diffres) {
	$fixapache = 1;
	} else {
$fixapache = 0;	$fixapache = 0;
}	}
}	}
Line 931 sub chkapache {	Line 1069 sub chkapache {
}	}
}	}
}	}
if ((!$fixapache) && ($distname eq 'ubuntu')) {	if ((!$fixapache) && (($distname eq 'ubuntu') \|\| ($distname eq 'debian'))) {
my $sitestatus = "/etc/apache2/mods-available/status.conf";	my $sitestatus = "/etc/apache2/mods-available/status.conf";
my $stdstatus = "$instdir/debian-ubuntu/status.conf";	my $stdstatus = "$instdir/debian-ubuntu/status.conf";
if ((-e $stdstatus) && (-e $sitestatus)) {	if ((-e $stdstatus) && (-e $sitestatus)) {
Line 985 sub chkapache {	Line 1123 sub chkapache {
} else {	} else {
my $configfile = 'httpd.conf';	my $configfile = 'httpd.conf';
my $mpmfile = 'mpm.conf';	my $mpmfile = 'mpm.conf';
if ($distro =~ /^(?:centos\|rhes\|scientific\|oracle)(\d+)$/) {	if ($distro =~ /^(?:centos\|rhes\|scientific\|oracle\|rocky\|alma)(\d+)/) {
if ($1 >= 7) {	if ($1 >= 7) {
$configfile = 'apache2.4/httpd.conf';	$configfile = 'apache2.4/httpd.conf';
} elsif ($1 > 5) {	} elsif ($1 > 5) {
Line 1065 sub chksrvcs {	Line 1203 sub chksrvcs {
}	}

sub need_download {	sub need_download {
	my ($distro,$instdir) = @_;
my $needs_download = 1;	my $needs_download = 1;
my ($production,$testing,$stdsizes) = &download_versionslist();	my ($production,$testing,$stdsizes) = &download_versionslist();
my ($rootdir,$localcurrent,$localtesting,%tarball,%localsize,%bymodtime,	my ($localcurrent,$localtesting,%tarball,%localsize,%bymodtime,
%bysize,$filetouse,$downloadstatus);	%bysize,$filetouse,$downloadstatus);
$rootdir = '/root';	if (opendir(my $dir,$instdir)) {
if (opendir(my $dir,"$rootdir")) {
my (@lcdownloads,$version);	my (@lcdownloads,$version);
foreach my $file (readdir($dir)) {	foreach my $file (readdir($dir)) {
if ($file =~ /^loncapa\-([\w\-.]+)\.tar\.gz$/) {	if ($file =~ /^loncapa\-([\w\-.]+)\.tar\.gz$/) {
Line 1080 sub need_download {	Line 1218 sub need_download {
}	}
if (ref($stdsizes) eq 'HASH') {	if (ref($stdsizes) eq 'HASH') {
if ($version eq 'current') {	if ($version eq 'current') {
my @stats = stat("$rootdir/$file");	my @stats = stat("$instdir/$file");
$localcurrent = $stats[7];	$localcurrent = $stats[7];
if ($localcurrent == $stdsizes->{$production}) {	if ($localcurrent == $stdsizes->{$production}) {
$needs_download = 0;	$needs_download = 0;
$filetouse = $file;	$filetouse = $file;
}	}
} elsif ($version eq 'testing') {	} elsif ($version eq 'testing') {
my @stats = stat("$rootdir/$file");	my @stats = stat("$instdir/$file");
$localtesting = $stats[7];	$localtesting = $stats[7];
if ($localtesting == $stdsizes->{$testing}) {	if ($localtesting == $stdsizes->{$testing}) {
$needs_download = 0;	$needs_download = 0;
Line 1101 sub need_download {	Line 1239 sub need_download {
if ($needs_download) {	if ($needs_download) {
if (@lcdownloads > 0) {	if (@lcdownloads > 0) {
foreach my $version (@lcdownloads) {	foreach my $version (@lcdownloads) {
my @stats = stat("$rootdir/$tarball{$version}");	my @stats = stat("$instdir/$tarball{$version}");
my $mtime = $stats[9];	my $mtime = $stats[9];
$localsize{$version} = $stats[7];	$localsize{$version} = $stats[7];
if ($mtime) {	if ($mtime) {
Line 1134 sub need_download {	Line 1272 sub need_download {
my $newest = $sorted[0];	my $newest = $sorted[0];
if (ref($bymodtime{$newest}) eq 'ARRAY') {	if (ref($bymodtime{$newest}) eq 'ARRAY') {
$downloadstatus =	$downloadstatus =
"Latest LON-CAPA source download in $rootdir is: ".	"Latest LON-CAPA source download in $instdir is: ".
join(',',@{$bymodtime{$newest}})." (downloaded ".	join(',',@{$bymodtime{$newest}})." (downloaded ".
localtime($newest).")\n";	localtime($newest).")\n";
}	}
} else {	} else {
$downloadstatus =	$downloadstatus =
"The $rootdir directory already contains the latest LON-CAPA version:".	"The $instdir directory already contains the latest LON-CAPA version:".
"\n".$filetouse."\n"."which can be used for installation.\n";	"\n".$filetouse."\n"."which can be used for installation.\n";
}	}
} else {	} else {
$downloadstatus = "The $rootdir directory does not appear to contain any downloaded LON-CAPA source code files which can be used for installation.\n";	$downloadstatus = "The $instdir directory does not appear to contain any downloaded LON-CAPA source code files which can be used for installation.\n";
}	}
}	}
} else {	} else {
$downloadstatus = "Could not open $rootdir directory to look for existing downloads of LON-CAPA source code.\n";	$downloadstatus = "Could not open $instdir directory to look for existing downloads of LON-CAPA source code.\n";
}	}
return ($needs_download,$downloadstatus,$filetouse,$production,$testing);	return ($needs_download,$downloadstatus,$filetouse,$production,$testing);
}	}
Line 1157 sub check_mysql_setup {	Line 1295 sub check_mysql_setup {
my ($instdir,$dsn,$distro) = @_;	my ($instdir,$dsn,$distro) = @_;
my ($mysqlsetup,$has_pass,$mysql_unix_socket,$mysql_has_wwwuser);	my ($mysqlsetup,$has_pass,$mysql_unix_socket,$mysql_has_wwwuser);
my $dbh = DBI->connect($dsn,'root','',{'PrintError'=>0});	my $dbh = DBI->connect($dsn,'root','',{'PrintError'=>0});
my ($mysqlversion,$mysqlsubver,$mysqlname) = &get_mysql_version();	my ($mysqlversion,$mysqlminorversion,$mysqlsubver,$mysqlname) = &get_mysql_version();
if (($mysqlname =~ /^MariaDB/i) && ($mysqlversion >= 10.4)) {	if (($mysqlname =~ /^MariaDB/i) && (($mysqlversion == 10 && $mysqlminorversion >= 4) \|\| ($mysqlversion >= 11))) {
if ($dbh) {	if ($dbh) {
my $sth = $dbh->prepare("SELECT Priv FROM mysql.global_priv WHERE (User = 'root' AND Host ='localhost')");	my $sth = $dbh->prepare("SELECT Priv FROM mysql.global_priv WHERE (User = 'root' AND Host ='localhost')");
$sth->execute();	$sth->execute();
while (my $priv = $sth->fetchrow_array) {	while (my $priv = $sth->fetchrow_array) {
if ($priv =~ /unix_socket/) {	if ($priv =~ /unix_socket/) {
$mysql_unix_socket = 1;	$mysql_unix_socket = 1;
last;	last;
}	}
Line 1179 sub check_mysql_setup {	Line 1317 sub check_mysql_setup {
}	}
if ($dbh) {	if ($dbh) {
$mysqlsetup = 'noroot';	$mysqlsetup = 'noroot';
if (($mysqlname !~ /^MariaDB/i) && ($mysqlversion >= 5.7)) {	if (($mysqlname !~ /^MariaDB/i) && (($mysqlversion == 5 && $mysqlminorversion >= 7) \|\| ($mysqlversion >= 6))) {
my $sth = $dbh->prepare("SELECT plugin from mysql.user where User='root'");	my $sth = $dbh->prepare("SELECT plugin from mysql.user where User='root'");
$sth->execute();	$sth->execute();
while (my $priv = $sth->fetchrow_array) {	while (my $priv = $sth->fetchrow_array) {
Line 1195 sub check_mysql_setup {	Line 1333 sub check_mysql_setup {
$mysql_has_wwwuser = &check_mysql_wwwuser($dbh);	$mysql_has_wwwuser = &check_mysql_wwwuser($dbh);
return ($mysqlsetup,$has_pass,$dbh,$mysql_has_wwwuser,$mysql_unix_socket);	return ($mysqlsetup,$has_pass,$dbh,$mysql_has_wwwuser,$mysql_unix_socket);
}	}
}	}
} elsif ($DBI::err =~ /1045/) {	} elsif ($DBI::err =~ /1045/) {
$has_pass = 1;	$has_pass = 1;
} elsif ($distro =~ /^ubuntu(\d+)$/) {	} elsif ($distro =~ /^ubuntu(\d+)$/) {
Line 1216 sub check_mysql_setup {	Line 1354 sub check_mysql_setup {
$has_pass = 1;	$has_pass = 1;
} else {	} else {
$mysqlsetup = 'needsrestart';	$mysqlsetup = 'needsrestart';
$mysql_has_wwwuser = &check_mysql_wwwuser();	$mysql_has_wwwuser = &check_mysql_wwwuser();
return ($mysqlsetup,$has_pass,$dbh,$mysql_has_wwwuser);	return ($mysqlsetup,$has_pass,$dbh,$mysql_has_wwwuser);
}	}
}	}
Line 1245 sub check_mysql_setup {	Line 1383 sub check_mysql_setup {
if ($DBI::err =~ /1045/) {	if ($DBI::err =~ /1045/) {
print_and_log(&mt('Incorrect password.')."\n");	print_and_log(&mt('Incorrect password.')."\n");
}	}
$mysql_has_wwwuser = &check_mysql_wwwuser();	$mysql_has_wwwuser = &check_mysql_wwwuser();
}	}
}	}
}	}
} elsif ($mysqlsetup ne 'noroot') {	} elsif ($mysqlsetup ne 'noroot') {
print_and_log(&mt('Problem accessing MySQL.')."\n");	print_and_log(&mt('Problem accessing MySQL.')."\n");
$mysqlsetup = 'rootfail';	$mysqlsetup = 'rootfail';
$mysql_has_wwwuser = &check_mysql_wwwuser();	$mysql_has_wwwuser = &check_mysql_wwwuser();
}	}
return ($mysqlsetup,$has_pass,$dbh,$mysql_has_wwwuser);	return ($mysqlsetup,$has_pass,$dbh,$mysql_has_wwwuser);
}	}
Line 1304 sub get_pathto_iptables {	Line 1442 sub get_pathto_iptables {

sub firewall_is_active {	sub firewall_is_active {
if (-e '/proc/net/ip_tables_names') {	if (-e '/proc/net/ip_tables_names') {
	my $status;
if (open(PIPE,'cat /proc/net/ip_tables_names \|grep filter \|')) {	if (open(PIPE,'cat /proc/net/ip_tables_names \|grep filter \|')) {
my $status = <PIPE>;	$status = <PIPE>;
close(PIPE);	close(PIPE);
chomp($status);	chomp($status);
if ($status eq 'filter') {	if ($status eq 'filter') {
return 1;	return 1;
}	}
}	}
	unless ($status) {
	if (open(PIPE,'nft list tables \|')) {
	while(<PIPE>) {
	chomp();
	if (/filter$/) {
	$status = 1;
	last;
	}
	}
	close(PIPE);
	if ($status) {
	return 1;
	}
	}
	}
}	}
return 0;	return 0;
}	}
Line 1473 print "	Line 1627 print "
".&mt('3.')." ".&mt('Set-up the MySQL database.')."	".&mt('3.')." ".&mt('Set-up the MySQL database.')."
".&mt('4.')." ".&mt('Set-up MySQL permissions.')."	".&mt('4.')." ".&mt('Set-up MySQL permissions.')."
".&mt('5.')." ".&mt('Configure Apache web server.')."	".&mt('5.')." ".&mt('Configure Apache web server.')."
".&mt('6.')." ".&mt('Configure start-up of services.')."	".&mt('6.')." ".&mt('Configure systemd security settings for Apache web server.')."
".&mt('7.')." ".&mt('Check firewall settings.')."	".&mt('7.')." ".&mt('Configure start-up of services.')."
".&mt('8.')." ".&mt('Stop services not used by LON-CAPA,')."	".&mt('8.')." ".&mt('Check firewall settings.')."
	".&mt('9.')." ".&mt('Stop services not used by LON-CAPA,')."
".&mt('i.e., services for a print server: [_1] daemon.',"'cups'")."	".&mt('i.e., services for a print server: [_1] daemon.',"'cups'")."
".&mt('9.')." ".&mt('Download LON-CAPA source code in readiness for installation.')."	".&mt('10.')." ".&mt('Download LON-CAPA source code in readiness for installation.')."

".&mt('Typically, you will run this script only once, when you first install LON-CAPA.')."	".&mt('Typically, you will run this script only once, when you first install LON-CAPA.')."

Line 1506 my $instdir = `pwd`;	Line 1661 my $instdir = `pwd`;
chomp($instdir);	chomp($instdir);

my %callsub;	my %callsub;
my @actions = ('wwwuser','pwauth','mysql','mysqlperms','apache',	my @actions = ('wwwuser','pwauth','mysql','mysqlperms','apache','systemd',
'runlevels','firewall','stopsrvcs','download');	'runlevels','firewall','stopsrvcs','download');
my %prompts = &texthash(	my %prompts = &texthash(
wwwuser => "Create the 'www' user?",	wwwuser => "Create the 'www' user?",
Line 1514 my %prompts = &texthash(	Line 1669 my %prompts = &texthash(
mysql => 'Set-up the MySQL database?',	mysql => 'Set-up the MySQL database?',
mysqlperms => 'Set-up MySQL permissions?',	mysqlperms => 'Set-up MySQL permissions?',
apache => 'Configure Apache web server?',	apache => 'Configure Apache web server?',
	systemd => 'Configure systemd security settings for Apache web server?',
runlevels => 'Set overrides for start-up order of services?',	runlevels => 'Set overrides for start-up order of services?',
firewall => 'Configure firewall settings for Apache',	firewall => 'Configure firewall settings for Apache',
stopsrvcs => 'Stop extra services not required on a LON-CAPA server?',	stopsrvcs => 'Stop extra services not required on a LON-CAPA server?',
Line 1523 my %prompts = &texthash(	Line 1679 my %prompts = &texthash(
print "\n".&mt('Checking system status ...')."\n";	print "\n".&mt('Checking system status ...')."\n";

my $dsn = "DBI:mysql:database=mysql";	my $dsn = "DBI:mysql:database=mysql";
my ($distro,$gotprereqs,$localecmd,$packagecmd,$updatecmd,$installnow,$mysqlrestart,	my ($distro,$gotprereqs,$localecmd,$langcmd,$packagecmd,$updatecmd,$installnow,$mysqlrestart,
$recommended,$dbh,$has_pass,$mysql_unix_socket,$has_lcdb,$downloadstatus,	$recommended,$dbh,$has_pass,$mysql_unix_socket,$has_lcdb,$downloadstatus,
$filetouse,$production,$testing,$apachefw,$uses_systemctl) = &check_required($instdir,$dsn);	$filetouse,$production,$testing,$apachefw,$uses_systemctl) = &check_required($instdir,$dsn);
if ($distro eq '') {	if ($distro eq '') {
Line 1542 if ($mysqlrestart) {	Line 1698 if ($mysqlrestart) {
exit;	exit;
}	}
if ($localecmd ne '') {	if ($localecmd ne '') {
print "\n".&mt('Although the LON-CAPA application itself is localized for a number of different languages, the default locale language for the Linux OS on which it runs should be US English.')."\n";	print "\n".&mt('Although the LON-CAPA application itself is localized for a number of different languages,[_1]the default locale language for the Linux OS on which it runs should be US English.',"\n")."\n\n";
print "\n".&mt('Run the following command from the command line to set the default language for your OS, and then run this LON-CAPA installation set-up script again.')."\n\n".	if ($langcmd ne '') {
	print &mt('Use the following command(s) or action(s) to install a required language package.')."\n\n".
	"$langcmd\n";
	}
	print &mt('Run the following command from the command line to set the default language for your OS,[_1]and then run this LON-CAPA installation set-up script again.',"\n")."\n\n".
$localecmd."\n\n".	$localecmd."\n\n".
&mt('Stopping execution.')."\n";	&mt('Stopping execution.')."\n";
exit;	exit;
Line 1567 if (!$gotprereqs) {	Line 1727 if (!$gotprereqs) {
&mt('Stopping execution.')."\n";	&mt('Stopping execution.')."\n";
exit;	exit;
} else {	} else {
($distro,$gotprereqs,$localecmd,$packagecmd,$updatecmd,$installnow,	($distro,$gotprereqs,$localecmd,$langcmd,$packagecmd,$updatecmd,$installnow,
$mysqlrestart,$recommended,$dbh,$has_pass,$mysql_unix_socket,	$mysqlrestart,$recommended,$dbh,$has_pass,$mysql_unix_socket,
$has_lcdb,$downloadstatus,$filetouse,$production,$testing,$apachefw,	$has_lcdb,$downloadstatus,$filetouse,$production,$testing,$apachefw,
$uses_systemctl) = &check_required($instdir,$dsn);	$uses_systemctl) = &check_required($instdir,$dsn);
Line 1624 my $lctarball = 'loncapa-current.tar.gz'	Line 1784 my $lctarball = 'loncapa-current.tar.gz'
my $sourcetarball = $lctarball;	my $sourcetarball = $lctarball;
if ($callsub{'download'}) {	if ($callsub{'download'}) {
my ($production,$testing,$sizes) = &download_versionslist();	my ($production,$testing,$sizes) = &download_versionslist();
	my $homedir = '/root';
	if ($distro =~ /^ubuntu/) {
	if ($instdir ne $homedir) {
	($homedir) = ($instdir =~ m{^(.*)/[^/]+$});
	}
	}
if ($production && $testing) {	if ($production && $testing) {
if ($production ne $testing) {	if ($production ne $testing) {
print &mt('Two recent LON-CAPA releases are available: ')."\n".	print &mt('Two recent LON-CAPA releases are available: ')."\n".
&mt('1.').' '.&mt('A production release - version: [_1].',$production)."\n".	&mt('1.').' '.&mt('A production release - version: [_1].',$production)."\n".
&mt('2.').' '.&mt('A testing release - version: [_1].',$testing)."\n\n".	&mt('2.').' '.&mt('A testing release - version: [_1].',$testing)."\n\n".
&mt('Download the production release? ~[Y/n~]');	&mt("After download, the tar.gz file will be extracted into $homedir")."\n\n".
	&mt("Download the production release into $instdir? ~[Y/n~]");
if (&get_user_selection(1)) {	if (&get_user_selection(1)) {
$sourcetarball = 'loncapa-'.$production.'.tar.gz';	$sourcetarball = 'loncapa-'.$production.'.tar.gz';
	print "$sourcetarball will be downloaded into $instdir\n";
} else {	} else {
print "\n".&mt('Download the testing release? ~[Y/n~]');	print "\n".&mt('Download the testing release? ~[Y/n~]');
if (&get_user_selection(1)) {	if (&get_user_selection(1)) {
$sourcetarball = 'loncapa-'.$testing.'.tar.gz';	$sourcetarball = 'loncapa-'.$testing.'.tar.gz';
	print "$sourcetarball will be downloaded into $instdir\n";
	} else {
	$callsub{'download'} = 0;
}	}
}	}
}	}
} elsif ($production) {	} elsif ($production) {
print &mt('The most recent LON-CAPA release is version: [_1].',$production)."\n".	print &mt('The most recent LON-CAPA release is version: [_1].',$production)."\n".
&mt('Download the production release? ~[Y/n~]');	&mt("After download, the tar.gz file will be extracted into $homedir")."\n\n".
	&mt("Download the production release into $instdir? ~[Y/n~]");
if (&get_user_selection(1)) {	if (&get_user_selection(1)) {
$sourcetarball = 'loncapa-'.$production.'.tar.gz';	$sourcetarball = 'loncapa-'.$production.'.tar.gz';
	print "$sourcetarball will be downloaded into $instdir\n";
	} else {
	$callsub{'download'} = 0;
}	}
}	}
} elsif ($filetouse ne '') {	} elsif ($filetouse ne '') {
Line 1668 if ($callsub{'pwauth'}) {	Line 1843 if ($callsub{'pwauth'}) {
if ($callsub{'mysql'}) {	if ($callsub{'mysql'}) {
if ($dbh) {	if ($dbh) {
&setup_mysql($callsub{'mysqlperms'},$dbh,$has_pass,	&setup_mysql($callsub{'mysqlperms'},$dbh,$has_pass,
$mysql_unix_socket,$has_lcdb);	$mysql_unix_socket,$has_lcdb,$distro);
} else {	} else {
print &mt('Unable to configure MySQL because access is denied.')."\n";	print &mt('Unable to configure MySQL because access is denied.')."\n";
}	}
Line 1705 if ($callsub{'apache'}) {	Line 1880 if ($callsub{'apache'}) {
print_and_log(&mt('Skipping configuration of Apache web server.')."\n");	print_and_log(&mt('Skipping configuration of Apache web server.')."\n");
}	}

	if ($callsub{'systemd'}) {
	&check_systemd_update($distro);
	} else {
	print_and_log('Skipping systemd configuration update for web server');
	}

if ($callsub{'runlevels'}) {	if ($callsub{'runlevels'}) {
my $count = 0;	my $count = 0;
if (ref($recommended) eq 'HASH') {	if (ref($recommended) eq 'HASH') {
Line 1792 if ($callsub{'firewall'}) {	Line 1973 if ($callsub{'firewall'}) {
'ssh, http')."\n";	'ssh, http')."\n";
} else {	} else {
my $version;	my $version;
if ($distro =~ /^(redhat\|centos)(\d+)$/) {	if ($distro =~ /^(redhat\|centos\|rocky\|alma)(\d+)/) {
$version = $1;	$version = $1;
}	}
if ($version > 5) {	if ($version > 5) {
Line 1823 if ($callsub{'download'}) {	Line 2004 if ($callsub{'download'}) {
print &mt('LON-CAPA is available for download from: [_1]',	print &mt('LON-CAPA is available for download from: [_1]',
'http://install.loncapa.org/')."\n";	'http://install.loncapa.org/')."\n";
if (!-e '/etc/loncapa-release') {	if (!-e '/etc/loncapa-release') {
&print_and_log(&mt('LON-CAPA is not yet installed on your system.').	&print_and_log(&mt('LON-CAPA is not yet installed on your system.')."\n\n");
"\n\n".	unless ($filetouse) {
&mt('You may retrieve the source for LON-CAPA by executing:')."\n".	&print_and_log(&mt('You may retrieve the source for LON-CAPA by executing:')."\n".
"wget http://install.loncapa.org/versions/$lctarball\n");	"wget http://install.loncapa.org/versions/$lctarball\n");
	}
} else {	} else {
my $currentversion;	my $currentversion;
if (open(my $fh,"</etc/loncapa-release")) {	if (open(my $fh,"</etc/loncapa-release")) {
Line 1855 if ($callsub{'download'}) {	Line 2037 if ($callsub{'download'}) {
print "\n".&mt('Requested configuration complete.')."\n\n";	print "\n".&mt('Requested configuration complete.')."\n\n";
if ($have_tarball && !$updateshown) {	if ($have_tarball && !$updateshown) {
my ($lcdir) = ($sourcetarball =~ /^([\w.\-]+)\.tar.gz$/);	my ($lcdir) = ($sourcetarball =~ /^([\w.\-]+)\.tar.gz$/);
my ($apachename,$lc_uses_systemctl,$uses_sudo);	if ($lcdir eq 'loncapa-current') {
	$lcdir = "loncapa-X.Y.Z (X.Y.Z should correspond to a version number like '2.11.3')";
	}
	my ($apachename,$lc_uses_systemctl,$uses_sudo);
if ($distro =~ /^(suse\|sles\|debian\|ubuntu)([\d.]+)/) {	if ($distro =~ /^(suse\|sles\|debian\|ubuntu)([\d.]+)/) {
if (($1 eq 'suse') && ($2 < 10)) {	if (($1 eq 'suse') && ($2 < 10)) {
$apachename = 'apache';	$apachename = 'apache';
Line 1869 if ($have_tarball && !$updateshown) {	Line 2054 if ($have_tarball && !$updateshown) {
if ($1 > 6) {	if ($1 > 6) {
$lc_uses_systemctl = 1;	$lc_uses_systemctl = 1;
}	}
} elsif ($distro =~ /^(?:rhes\|centos)(\d+)$/) {	} elsif ($distro =~ /^(?:rhes\|centos\|rocky\|alma)(\d+)/) {
if ($1 > 7) {	if ($1 > 7) {
$lc_uses_systemctl = 1;	$lc_uses_systemctl = 1;
}	}
Line 1878 if ($have_tarball && !$updateshown) {	Line 2063 if ($have_tarball && !$updateshown) {
$lc_uses_systemctl = 1;	$lc_uses_systemctl = 1;
}	}
$uses_sudo = 1;	$uses_sudo = 1;
	} elsif ($distro =~ /^debian(\d+)$/) {
	if ($1 >= 10) {
	$lc_uses_systemctl = 1;
	}
} elsif ($distro =~ /^sles(\d+)$/) {	} elsif ($distro =~ /^sles(\d+)$/) {
if ($1 > 12) {	if ($1 > 12) {
$lc_uses_systemctl = 1;	$lc_uses_systemctl = 1;
}	}
	} elsif ($distro =~ /^fedora(\d+)$/) {
	if ($1 > 25) {
	$lc_uses_systemctl = 1;
	}
}	}
if (!-e '/etc/loncapa-release') {	if (!-e '/etc/loncapa-release') {
print &mt('If you are now ready to install LON-CAPA, enter the following commands:')."\n\n";	print &mt('If you are now ready to install LON-CAPA, enter the following commands:')."\n\n";
Line 1895 if ($have_tarball && !$updateshown) {	Line 2088 if ($have_tarball && !$updateshown) {
$apachestop = "systemctl stop $apachename";	$apachestop = "systemctl stop $apachename";
}	}
if ($uses_sudo) {	if ($uses_sudo) {
$lcstop = 'sudo '.$lcstop;	$lcstop = 'sudo '.$lcstop;
$apachestop = 'sudo '.$apachestop;	$apachestop = 'sudo '.$apachestop;
}	}
print &mt('If you are now ready to update LON-CAPA, enter the following commands:').	print &mt('If you are now ready to update LON-CAPA, enter the following commands:').
"\n\n$lcstop\n$apachestop\n";	"\n\n$lcstop\n$apachestop\n";
}	}
print "cd /root\n".	my ($extract,$update);
"tar zxf $sourcetarball\n".	my $homedir = '/root';
"cd $lcdir\n".	if ($uses_sudo) {
"./UPDATE\n";	$extract = 'sudo ';
	$update = 'sudo ';
	if ($instdir ne $homedir) {
	($homedir) = ($instdir =~ m{^(.*)/[^/]+$});
	}
	}
	$extract .= "tar zxf $sourcetarball --directory $homedir";
	$update .= './UPDATE';
	print "$extract\n".
	"cd $homedir/$lcdir\n".
	"$update\n";
if (-e '/etc/loncapa-release') {	if (-e '/etc/loncapa-release') {
my $lcstart = '/etc/init.d/loncontrol start';	my $lcstart = '/etc/init.d/loncontrol start';
if ($lc_uses_systemctl) {	if ($lc_uses_systemctl) {
$lcstart = '/home/httpd/perl/loncontrol start';	$lcstart = '/home/httpd/perl/loncontrol start';
}	}
Line 1988 sub build_and_install_mod_auth_external	Line 2191 sub build_and_install_mod_auth_external
> #define SERVER_UIDS $num /* user "www" */	> #define SERVER_UIDS $num /* user "www" */
ENDPATCH	ENDPATCH

	my $patch_code = <<"ENDPATCH";
	127a128
	> #include <string.h>
	214a216
	> #include <time.h>
	566c568
	< check_fails()
	---
	> int check_fails()
	589c591
	< log_failure()
	---
	> void log_failure()
	629c631
	< snooze(int seconds)
	---
	> void snooze(int seconds)
	653c655
	< main(int argc, char **argv)
	---
	> int main(int argc, char **argv)
	ENDPATCH

if (! -e "/usr/bin/patch") {	if (! -e "/usr/bin/patch") {
print_and_log(&mt('You must install the software development tools package: [_1], when installing Linux.',"'patch'")."\n");	print_and_log(&mt('You must install the software development tools package: [_1], when installing Linux.',"'patch'")."\n");
print_and_log(&mt('Authentication installation not completed.')."\n");	print_and_log(&mt('Authentication installation not completed.')."\n");
Line 1998 ENDPATCH	Line 2224 ENDPATCH
return;	return;
}	}
my $dir = "/tmp/pwauth-2.2.8";	my $dir = "/tmp/pwauth-2.2.8";
	my $patchedok;
if (open(PATCH,"\| patch $dir/config.h")) {	if (open(PATCH,"\| patch $dir/config.h")) {
print PATCH $patch;	print PATCH $patch;
close(PATCH);	close(PATCH);
	if (open(PATCH,"\| patch $dir/pwauth.c")) {
	print PATCH $patch_code;
	close(PATCH);
	$patchedok = 1;
	}
	}
	if ($patchedok) {
print_and_log("\n");	print_and_log("\n");
##	##
## Compile patched pwauth	## Compile patched pwauth
Line 2071 sub kill_extra_services {	Line 2305 sub kill_extra_services {
&print_and_log(&mt('Removing [_1] from startup.',$service)."\n");	&print_and_log(&mt('Removing [_1] from startup.',$service)."\n");
if ($distro =~ /^(?:debian\|ubuntu)(\d+)/) {	if ($distro =~ /^(?:debian\|ubuntu)(\d+)/) {
my $version = $1;	my $version = $1;
if (($distro =~ /^ubuntu/) && ($version > 16)) {	if ((($distro =~ /^ubuntu/) && ($version > 16)) \|\|
	(($distro =~ /^debian/) && ($version >= 10))) {
if (ref($uses_systemctl) eq 'HASH') {	if (ref($uses_systemctl) eq 'HASH') {
if ($uses_systemctl->{$service}) {	if ($uses_systemctl->{$service}) {
if (`systemctl is-enabled $service`) {	if (`systemctl is-enabled $service`) {
Line 2103 sub kill_extra_services {	Line 2338 sub kill_extra_services {
}	}

sub setup_mysql {	sub setup_mysql {
my ($setup_mysql_permissions,$dbh,$has_pass,$mysql_unix_socket,$has_lcdb) = @_;	my ($setup_mysql_permissions,$dbh,$has_pass,$mysql_unix_socket,$has_lcdb,$distro) = @_;
my @mysql_lc_commands;	my @mysql_lc_commands;
unless ($has_lcdb) {	unless ($has_lcdb) {
push(@mysql_lc_commands,"CREATE DATABASE loncapa");	my $createcmd = 'CREATE DATABASE loncapa';
	if ($distro =~ /^sles(\d+)/) {
	if ($1 > 11) {
	$createcmd .= ' CHARACTER SET utf8 COLLATE utf8_general_ci';
	}
	} elsif ($distro =~ /^ubuntu(\d+)/) {
	if ($1 > 16) {
	$createcmd .= ' CHARACTER SET latin1 COLLATE latin1_swedish_ci';
	}
	}
	push(@mysql_lc_commands,$createcmd);
}	}
push(@mysql_lc_commands,"USE loncapa");	push(@mysql_lc_commands,"USE loncapa");
push(@mysql_lc_commands,qq{	push(@mysql_lc_commands,qq{
Line 2131 CREATE TABLE IF NOT EXISTS metadata (tit	Line 2376 CREATE TABLE IF NOT EXISTS metadata (tit

sub setup_mysql_permissions {	sub setup_mysql_permissions {
my ($dbh,$has_pass,$mysql_unix_socket,@mysql_lc_commands) = @_;	my ($dbh,$has_pass,$mysql_unix_socket,@mysql_lc_commands) = @_;
my ($mysqlversion,$mysqlsubver,$mysqlname) = &get_mysql_version();	my ($mysqlversion,$mysqlminorversion,$mysqlsubver,$mysqlname) = &get_mysql_version();
my ($usescreate,$usesauth,$is_mariadb,$hasauthcol,@mysql_commands);	my ($usescreate,$usesauth,$is_mariadb,$hasauthcol,@mysql_commands);
if ($mysqlname =~ /^MariaDB/i) {	if ($mysqlname =~ /^MariaDB/i) {
$is_mariadb = 1;	$is_mariadb = 1;
if ($mysqlversion >= 10.4) {	if ((($mysqlversion == 10) && ($mysqlminorversion >= 4)) \|\| ($mysqlversion >= 11)) {
$usescreate = 1;	$usescreate = 1;
} elsif ($mysqlversion >= 10.2) {	} elsif (($mysqlversion == 10) && ($mysqlminorversion >= 2)) {
$usesauth = 1;	$usesauth = 1;
} elsif ($mysqlversion >= 5.5) {	} elsif (($mysqlversion == 5) && ($mysqlminorversion >= 5)) {
$hasauthcol = 1;	$hasauthcol = 1;
}	}
} else {	} else {
if (($mysqlversion > 5.7) \|\| (($mysqlversion == 5.7) && ($mysqlsubver > 5))) {	if (($mysqlversion > 5) \|\| (($mysqlminorversion == 5) && ($mysqlminorversion > 7)) \|\|
	(($mysqlversion == 5) && ($mysqlminorversion == 7) && ($mysqlsubver > 5))) {
$usesauth = 1;	$usesauth = 1;
} elsif (($mysqlversion >= 5.6) \|\| (($mysqlversion == 5.5) && ($mysqlsubver >= 7))) {	} elsif (($mysqlversion == 5) &&
	(($mysqlminorversion >= 6) \|\| (($mysqlminorversion == 5) && ($mysqlsubver >= 7)))) {
$hasauthcol = 1;	$hasauthcol = 1;
}	}
}	}
if ($usescreate) {	if ($usescreate) {
@mysql_commands = ("CREATE USER 'www'\@'localhost' IDENTIFIED BY 'localhostkey'");	@mysql_commands = ("CREATE USER 'www'\@'localhost' IDENTIFIED BY 'localhostkey'");
} elsif ($usesauth) {	} elsif ($usesauth) {
@mysql_commands = ("INSERT user (Host, User, ssl_cipher, x509_issuer, x509_subject, authentication_string) VALUES('localhost','www','','','','')");	@mysql_commands = ("INSERT user (Host, User, ssl_cipher, x509_issuer, x509_subject, authentication_string) VALUES('localhost','www','','','','')",
	"FLUSH PRIVILEGES");
if ($is_mariadb) {	if ($is_mariadb) {
push(@mysql_commands,"ALTER USER 'www'\@'localhost' IDENTIFIED BY 'localhostkey'");	push(@mysql_commands,"ALTER USER 'www'\@'localhost' IDENTIFIED BY 'localhostkey'");
} else {	} else {
Line 2258 sub new_mysql_rootpasswd {	Line 2506 sub new_mysql_rootpasswd {
}	}

sub get_mysql_version {	sub get_mysql_version {
my ($version,$subversion,$name);	my ($version,$minorversion,$subversion,$name);
if (open(PIPE," mysql -V \|")) {	if (open(PIPE," mysql -V \|")) {
my $info = <PIPE>;	my $info = <PIPE>;
chomp($info);	chomp($info);
close(PIPE);	close(PIPE);
($version,$subversion,$name) = ($info =~ /(\d+\.\d+)\.(\d+)(?:\-?(\w*),\|)/);	($version,$minorversion,$subversion,$name) = ($info =~ /(\d+)\.(\d+)\.(\d+)(?:\-?(\w*),\|)/);
} else {	} else {
print &mt('Could not determine which version of MySQL is installed.').	print &mt('Could not determine which version of MySQL is installed.').
"\n";	"\n";
}	}
return ($version,$subversion,$name);	return ($version,$minorversion,$subversion,$name);
	}

	sub check_systemd_update {
	my ($distro) = @_;
	my ($use_systemctl,$service);
	$service = 'apache2.service';
	if ($distro =~ /^ubuntu(\w+)/) {
	if ($1 >= 16) {
	$use_systemctl = 1;
	}
	} elsif ($distro =~ /^debian(\w+)/) {
	if ($1 >= 9) {
	$use_systemctl = 1;
	}
	} elsif ($distro =~ /^fedora(\d+)/) {
	$service = 'httpd.service';
	if ($1 >= 16) {
	$use_systemctl = 1;
	}
	} elsif ($distro =~ /^(?:centos\|rhes\|scientific\|oracle\|rocky\|alma)(\d+)/) {
	$service = 'httpd.service';
	if ($1 >= 7) {
	$use_systemctl = 1;
	}
	} elsif ($distro =~ /^sles(\d+)/) {
	if ($1 >= 12) {
	$use_systemctl = 1;
	}
	} elsif ($distro =~ /^suse(\d+)/) {
	if ($1 >= 13) {
	$use_systemctl = 1;
	}
	}
	if ($use_systemctl) {
	my $needsupdate = &check_systemd_security($distro);
	if ($needsupdate) {
	if (!-d '/etc/systemd/system/'.$service.'.d') {
	mkdir '/etc/systemd/system/'.$service.'.d', 0755;
	}
	if (-d '/etc/systemd/system/'.$service.'.d') {
	if (-e '/etc/systemd/system/'.$service.'.d/override.conf') {
	if (open(my $fh,'<','/etc/systemd/system/'.$service.'.d/override.conf')) {
	my ($inservice,$addservice,$protectoff,$linenum,$change,@lines);
	while (my $entry = <$fh>) {
	$linenum ++;
	chomp($entry);
	if ($entry eq '[Service]') {
	if (!$protectoff) {
	$inservice = $linenum;
	push(@lines,$entry);
	} else {
	$addservice = 1;
	next;
	}
	}
	if ($entry =~ /^ProtectHome\s=\s([\w-]+)\s*$/) {
	my $value = $1;
	if ($protectoff) {
	next;
	if (lc($value) eq 'no') {
	$protectoff = $linenum;
	push(@lines,$entry);
	} else {
	if ($protectoff) {
	next;
	} else {
	push(@lines,'ProtectHome=no');
	$protectoff = $linenum;
	$change = $linenum;
	}
	}
	}
	}
	}
	close($fh);
	if ($addservice \|\| $change \|\| !$protectoff) {
	if (open(my $fh,'>','/etc/systemd/system/'.$service.'.d/override.conf')) {
	if ($addservice) {
	print $fh "[Service]\n";
	}
	foreach my $entry (@lines) {
	print $fh "$entry\n";
	}
	close($fh);
	print_and_log('Updated /etc/systemd/system/'.$service.'.d/override.conf');
	system('systemctl daemon-reload');
	} else {
	print_and_log('Could not open /etc/systemd/system/'.$service.'.d/override.conf for writing.');
	}
	} else {
	print_and_log('No change needed in /etc/systemd/system/'.$service.'.d/override.conf');
	}
	} else {
	print_and_log('Could not open /etc/systemd/system/'.$service.'.d/override.conf for reading.');
	}
	} else {
	if (open(my $fh,'>','/etc/systemd/system/'.$service.'.d/override.conf')) {
	print $fh '[Service]'."\n".'ProtectHome=no'."\n";
	close($fh);
	print_and_log('Created /etc/systemd/system/'.$service.'.d/override.conf');
	system('systemctl daemon-reload');
	}
	}
	} else {
	print_and_log('No /etc/systemd/system/'.$service.'.d directory exists and creating one failed,');
	}
	} else {
	print_and_log('No update needed to systemd security settings for Apache web server.');
	}
	} else {
	print_and_log('No update needed to systemd, as this Linux distro does not use systemctl');
	}
}	}

###########################################################	###########################################################
Line 2281 sub get_mysql_version {	Line 2641 sub get_mysql_version {
sub copy_httpd_conf {	sub copy_httpd_conf {
my ($instdir,$distro) = @_;	my ($instdir,$distro) = @_;
my $configfile = 'httpd.conf';	my $configfile = 'httpd.conf';
if ($distro =~ /^(?:centos\|rhes\|scientific\|oracle)(\d+)$/) {	if ($distro =~ /^(?:centos\|rhes\|scientific\|oracle\|rocky\|alma)(\d+)/) {
if ($1 >= 7) {	if ($1 >= 7) {
$configfile = 'apache2.4/httpd.conf';	$configfile = 'apache2.4/httpd.conf';
} elsif ($1 > 5) {	} elsif ($1 > 5) {
Line 2328 sub copy_mpm_conf {	Line 2688 sub copy_mpm_conf {
print_and_log("\n");	print_and_log("\n");
} else {	} else {
my $logfail;	my $logfail;
if ($distro =~ /^(?:centos\|rhes\|scientific\|oracle)(\d+)$/) {	if ($distro =~ /^(?:centos\|rhes\|scientific\|oracle\|rocky\|alma)(\d+)/) {
if ($1 > 7) {	if ($1 > 7) {
$logfail = 1;	$logfail = 1;
}	}
Line 2372 sub copy_apache2_debconf {	Line 2732 sub copy_apache2_debconf {
$distname = $1;	$distname = $1;
$version = $2;	$version = $2;
}	}
if (($distname eq 'ubuntu') && ($version > 12)) {	if ((($distname eq 'ubuntu') && ($version > 12)) \|\|
	(($distname eq 'debian') && ($version >= 10))) {
$defaultconfig = "$apache2_sites_enabled_dir/000-default.conf";	$defaultconfig = "$apache2_sites_enabled_dir/000-default.conf";
}	}
my ($skipconf,$skipsite,$skipstatus);	my ($skipconf,$skipsite,$skipstatus);
if (($distname eq 'ubuntu') && ($version > 12)) {	if ((($distname eq 'ubuntu') && ($version > 12)) \|\|
	(($distname eq 'debian') && ($version >= 10))) {
my $apache2_conf_enabled_dir = '/etc/apache2/conf-enabled';	my $apache2_conf_enabled_dir = '/etc/apache2/conf-enabled';
my $apache2_conf_available_dir = '/etc/apache2/conf-available';	my $apache2_conf_available_dir = '/etc/apache2/conf-available';
my $defaultconf = $apache2_conf_enabled_dir.'/loncapa.conf';	my $defaultconf = $apache2_conf_enabled_dir.'/loncapa.conf';
Line 2529 sub copy_apache2_debconf {	Line 2891 sub copy_apache2_debconf {
}	}
}	}
}	}
if ($distname eq 'ubuntu') {	if (($distname eq 'ubuntu') \|\| ($distname eq 'debian')) {
my $sitestatus = "$apache2_mods_available_dir/status.conf";	my $sitestatus = "$apache2_mods_available_dir/status.conf";
my $stdstatus = "$instdir/debian-ubuntu/status.conf";	my $stdstatus = "$instdir/debian-ubuntu/status.conf";
if ((-e $sitestatus) && (-e $stdstatus)) {	if ((-e $sitestatus) && (-e $stdstatus)) {
Line 2730 sub download_loncapa {	Line 3092 sub download_loncapa {
print_and_log("	print_and_log("
------------------------------------------------------------------------	------------------------------------------------------------------------

".&mt('You seem to have a version of loncapa-current.tar.gz in [_1]',$instdir)."\n".	".&mt('You seem to have a version of [_1] in [_2]',$lctarball,$instdir)."\n".
&mt('This copy will be used and a new version will NOT be downloaded.')."\n".	&mt('This copy will be used and a new version will NOT be downloaded.')."\n".
&mt('If you wish, you may download a new version by executing:')."	&mt('If you wish, you may download a new version by executing:')."

wget http://install.loncapa.org/versions/loncapa-current.tar.gz	wget http://install.loncapa.org/versions/$lctarball

------------------------------------------------------------------------	------------------------------------------------------------------------
");	");
}	}

##	##
## untar loncapa.tar.gz	## untar loncapa-X.Y.Z.tar.gz
##	##
if ($have_tarball) {	if ($have_tarball) {
	my $homedir = '/root';
	my ($targetdir,$chdircmd,$updatecmd);
	if (($distro =~ /^ubuntu/) && ($instdir ne $homedir)) {
	($homedir) = ($instdir =~ m{^(.*)/[^/]+$});
	$updatecmd = 'sudo ./UPDATE';
	} else {
	$updatecmd = './UPDATE';
	}
print_and_log(&mt('Extracting LON-CAPA source files')."\n");	print_and_log(&mt('Extracting LON-CAPA source files')."\n");
writelog(`cd ~root; tar zxf $instdir/$lctarball`);	if (-e $homedir) {
	writelog(`tar zxf $instdir/$lctarball --directory $homedir`);
	$targetdir = $homedir;
	} else {
	writelog(`tar zxf $instdir/$lctarball`);
	$targetdir = $instdir;
	}
	if ($lctarball =~ /^loncapa\-(\d+\.\d+\.\d+(?:\|[^.]+))\.tar\.gz$/) {
	$chdircmd = "cd $targetdir/loncapa-".$1;
	} else {
	$chdircmd = "cd $targetdir/loncapa-X.Y.Z (X.Y.Z should correspond to a version number like '2.11.3')";
	}
print_and_log("\n");	print_and_log("\n");
print &mt('LON-CAPA source files extracted.')."\n".	print &mt('LON-CAPA source files extracted.')."\n".
&mt('It remains for you to execute the following commands:')."	&mt('It remains for you to execute the following commands:').
	"\n$chdircmd\n$updatecmd\n".
cd /root/loncapa-X.Y.Z (X.Y.Z should correspond to a version number like '2.11.3')	&mt('If you have any trouble, please see [_1] and [_2]',
./UPDATE	'http://install.loncapa.org/','http://help.loncapa.org/')."\n";

".&mt('If you have any trouble, please see [_1] and [_2]',
'http://install.loncapa.org/','http://help.loncapa.org/')."\n";
$updateshown = 1;	$updateshown = 1;
}	}
return ($have_tarball,$updateshown);	return ($have_tarball,$updateshown);

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>

Removed from v.1.45.2.13
changed lines
	Added in v.1.45.2.23