Successfully running VeataCP 1.0.0.1 on Debian 11 (Bullseye)
Posted: Sun Nov 28, 2021 3:16 pm
Dear Forum Mebers,
I managed to run the VESTACPP 1.0.0.1 successfully on Debian 11 (Bullseye) with some tweaks.
Few things to be done to run the VESTACP, Nginx, Dovecot, EXIM
The problems you face if you directly upgrade to Debian 11 from Debian 9
Dovecot runs okey but it will break the SSL because in bullseye dovecot required strong DH.PRM with minimum 4094 bytes. just generate the dh.pem with openssl for 4096 bytes it will solve the SSL proble.
Exim is broken like Tainted filename error; I will share the correct config for this.
For nginx I download the source code and compiled the 1.24 mainstream version along with below modules.
./configure --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-compat --with-file-aio --with-threads --with-pcre=pcre --with-zlib=zlib --with-openssl=openssl --with-openssl-opt=enable-tls1_3 --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-stream_geoip_module --with-http_geoip_module --with-http_image_filter_module --with-http_xslt_module --with-http_perl_module --add-module=ngx-pagespeed --add-module=ngx-more-headers --add-module=ngx-ndk --add-module=ngx-brotli --add-module=ngx-encrypted-session --add-module=ngx-modsecurity --add-module=ngx-rtmp --add-module=ngx-cookie-flag --with-ld-opt='-Wl,-z,relro -Wl,-z,now -Wl,--as-needed -pie';
If you need the recipe folder, I will provide you the folder along with openssl, pcre and zlib. you can just run the (make) command and after that (make install) and you are done.
PHP-FPM and MySQL don't have any problem as they are part of standard distribution.
I managed to run the VESTACPP 1.0.0.1 successfully on Debian 11 (Bullseye) with some tweaks.
Few things to be done to run the VESTACP, Nginx, Dovecot, EXIM
The problems you face if you directly upgrade to Debian 11 from Debian 9
Dovecot runs okey but it will break the SSL because in bullseye dovecot required strong DH.PRM with minimum 4094 bytes. just generate the dh.pem with openssl for 4096 bytes it will solve the SSL proble.
Exim is broken like Tainted filename error; I will share the correct config for this.
For nginx I download the source code and compiled the 1.24 mainstream version along with below modules.
./configure --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-compat --with-file-aio --with-threads --with-pcre=pcre --with-zlib=zlib --with-openssl=openssl --with-openssl-opt=enable-tls1_3 --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-stream_geoip_module --with-http_geoip_module --with-http_image_filter_module --with-http_xslt_module --with-http_perl_module --add-module=ngx-pagespeed --add-module=ngx-more-headers --add-module=ngx-ndk --add-module=ngx-brotli --add-module=ngx-encrypted-session --add-module=ngx-modsecurity --add-module=ngx-rtmp --add-module=ngx-cookie-flag --with-ld-opt='-Wl,-z,relro -Wl,-z,now -Wl,--as-needed -pie';
If you need the recipe folder, I will provide you the folder along with openssl, pcre and zlib. you can just run the (make) command and after that (make install) and you are done.
PHP-FPM and MySQL don't have any problem as they are part of standard distribution.