Compare commits

...

6 Commits

11 changed files with 111 additions and 84 deletions

View File

@ -30,8 +30,8 @@ want an Alpine ready touse in 4 hours, you have two options:
### Social network and contact
- 🗯 IRC
- 💬 `##alpine_telegram_english`
- 💬 `#alpine_linux_english`
- `##alpine_telegram_english`
- `##alpine_telegram_espanol`
- 📱 Telegram https://t.me/alpine_linux
- 🇬🇧 https://t.me/alpine_linux_english
- 🇷🇺 https://t.me/alpine_linux_pycckuu (dual english russian, low activity)
@ -41,6 +41,7 @@ want an Alpine ready touse in 4 hours, you have two options:
- 📡 https://t.me/opentechnologies (open languajes but english as main)
- Matrix
- 👥 https://matrix.to/#/#alpine-linux-english:matrix.org
- 👥 https://matrix.to/#/#alpine-linux-eespanol:matrix.org
### How to contribute

View File

@ -42,7 +42,7 @@ so you must **tipe each line as is.. and hit enter**, but if you are in gui or r
2. at the other OS just connect: `ssh -l root <ip>` change "`<ip>`" with the address of your device.
3 after finish, rerun: `sed -i -r 's|.*PermitRootLogin.*|PermitRootLogin no|g' /etc/ssh/sshd_config;service sshd restart`
**CAUTION** Some Linux or/and Mac terminals have security cut/paste locks, so
> **Warning** Some Linux or/and Mac terminals have security cut/paste locks, so
if you paste, the first line will be preceded by garbage, check always the first char of your paste.
## Installation of alpine
@ -183,7 +183,7 @@ Those command put your alpine in "non minimalist mode" so means
* will provide all the system tools to the devices management
for more info of `daru`, check [the daru user explanation](#the-daru-user-explanation) section of this document
NExt section will cover the suser management and programs support:
Next section will cover the suser management and programs support:
#### configuration programs and repositories

View File

@ -40,7 +40,7 @@ echo "it works" > /var/www/localhost/htdocs/index.html
For testing open a browser and go to `http://<webserveripaddres>` and you will see "it works". The "webserveripaddres" are the ip address of your setup/server machine.
**WARNING**: alpine packagers are a mess, the apache2 default configuration is not ordened so all the conf files under `/etc/apache2/conf.d/` will be loaded with no specific order.
> **Warning** : alpine packagers are a mess, the apache2 default configuration is not ordened so all the conf files under `/etc/apache2/conf.d/` will be loaded with no specific order.
### Controlling Apache2
@ -146,7 +146,7 @@ sed -i -r 's#^UserDir .*#UserDir public_html#g' /etc/apache2/conf.d/userdir.conf
rc-service lighttpd restart
```
**WARNING** as we said.. alpine policy is to be most upstream equal possible, almost like packagers are lazy? NO! just dont put any thing about root user access, but well, you must know what are you doing, by the addition of `UserDir disabled root postmaster` you will denied specific users due security.
> **Warning** as we said.. alpine policy is to be most upstream equal possible, almost like packagers are lazy? NO! just dont put any thing about root user access, but well, you must know what are you doing, by the addition of `UserDir disabled root postmaster` you will denied specific users due security.
If you change the user dir , then you must change the directory definition at the last block.
@ -180,7 +180,7 @@ EOF
service apache2 restart
```
**WARNING** of course, the `myproxy.conf` is hypothetical, for didactic purposes, here it is only exemplified that the error is corrected in the step of the sed command to work.
> **Warning** of course, the `myproxy.conf` is hypothetical, for didactic purposes, here it is only exemplified that the error is corrected in the step of the sed command to work.
#### Apache2 SSL support
@ -228,12 +228,11 @@ sed -i -r 's#^SSLProxyCipherSuite.*#SSLProxyCipherSuite HIGH:MEDIUM:ALL:!MD5:!RC
rc-service apache2 restart
```
**WARNING NOTES**
1. This is a permissive configuration full compatible wtith older and newer browsers.
2. to only allow most secure protocols and a bit of compatibilty, set to `SSLProtocol all -TLSv1 -SSLv3`
3. to only allow most secure negociations and a bit of compat, set to `SSLCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
4. to only allow most secure negociations and a bit of compat, set proxy to `SSLProxyCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
> **Warning** this configuration:
> 1. This is a permissive configuration full compatible wtith older and newer browsers.
> 2. to only allow most secure protocols and a bit of compatibilty, set to `SSLProtocol all -TLSv1 -SSLv3`
> 3. to only allow most secure negociations and a bit of compat, set to `SSLCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
> 4. to only allow most secure negociations and a bit of compat, set proxy to `SSLProxyCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
Best is to made a redirection inside of the document root of port 80 deifintion
also put a `<IfModule mod_ssl.c>` conditional at the beginning of the ssl config file.

View File

@ -124,7 +124,7 @@ EOF
apk update --allow-untrusted
```
**WARNING** if your version of alpine are more ancient like 3.6 or 3.8, do not use
> **Warning** if your version of alpine are more ancient like 3.6 or 3.8, do not use
the edge version, it need upgrading almost to alpine 3.10 to use it, so if you
are using a older hardware not supported by recent linux kernel, upgrade to alpine 3.10
and then you can follow this manual. Otherwise just avoit the edge swicht and
@ -371,7 +371,7 @@ rc service gitea2 start
rc-update add gitea2 default
```
**CAUTION** if you runs multiple instances, each one must have different port,
> **Warning** if you runs multiple instances, each one must have different port,
this means you must check in the config `app.ini` file (like the `gitea2.ini` )
that after the póst setup procedure, the port are correct and different, if not just,
before or after change it with `HTTP_PORT` and `ROOT_URL` keys.
@ -516,7 +516,7 @@ for the real proxy reverse redirection and lighttpd as real frontend web service
- 🗯 IRC
- 💬 `##alpine_telegram_english`
- 💬 `#alpine_linux_english`
- 💬 `##alpine_linux_english`
- 📱 Telegram https://t.me/alpine_linux
- 🇬🇧 https://t.me/alpine_linux_english
- 🇷🇺 https://t.me/alpine_linux_pycckuu (dual english russian, low activity)

View File

@ -11,7 +11,7 @@ just fresh PC or Laptop hardware computer, use if you have a [BIOS or
UEFI based hardware](Alpine_and_UEFI.md) and only wants Alpine**
Linux into it.
**HINT**: This method is in disuse today in favor of [usbstiks and imgs](alpine-install-from-usb-to-disk-pc-single-boot-only.md).
> **Warning** This method is in disuse today in favor of [usbstiks and imgs](alpine-install-from-usb-to-disk-pc-single-boot-only.md).
## Terminology
@ -119,18 +119,17 @@ If your blank media is a DVD or BD disc the command will be then :
`$ umount /dev/sr0;growisofs -dvd-compat -Z /dev/sr0=alpine-standard-3.10.0-x86_64.iso`
```{=mediawiki}
{{Note|growisofs has a small bug with blank BD-R media. It issues an error message after the burning is complete. Programs like k3b then believe the whole burn run failed.}}
```
> **Note** `growisofs` has a small bug with blank BD-R media. It issues an error message after the burning is complete. Programs like k3b then believe the whole burn run failed.}}
## Booting the Alpine ISO disc
When the machine start, you must be sure to choose the optical drive
(commonly named CD/DVD Rom drive), so the disc/iso will boot and after a
while a command line shell will show you:
```{=mediawiki}
{{Tip|If your system is not configured to boot from a CD/DVD drive, it must be configured in the BIOS, '''ask/search to your vendor or technical support''', Toshiba computers need to hit F1 to choose boot medium, DELL must hit F11 to choose medium for example, and so and so}}
```
> **Warning** Tip: If your system is not configured to boot from a CD/DVD drive, it must be configured in the BIOS, '''ask/search to your vendor or technical support''', Toshiba computers need to hit F1 to choose boot medium, DELL must hit F11 to choose medium for example, and so and so}}
TODO put the same foto here
TODO: restore the template about normal script steps for common pages

View File

@ -20,7 +20,8 @@ Alpine must be previously installed. This will install a new fashioned desktop,
You must have already installed alpine, and wayland only works well in alpine 3.14 and up
**YOU MUST HAVE DIRECT WIRED INTERNET, if not ask for an ISO from VenenuX:** [https://t.me/alpine_linux/762](https://t.me/s/alpine_linux/762)
> **Warning** **YOU MUST HAVE DIRECT WIRED INTERNET, if not ask for an ISO from VenenuX:** [https://t.me/alpine_linux/762](https://t.me/s/alpine_linux/762)
or configure a network connection check [alpine-tutorial-wifi-routering.md](alpine-tutorial-wifi-routering.md)
#### setup OS configuration
@ -151,7 +152,7 @@ useradd -m -U -c "" -G wheel,input,disk,floppy,cdrom,dialout,audio,video,lp,netd
for u in $(ls /home); do for g in disk lp floppy audio cdrom dialout video lp netdev games users ping; do addgroup $u $g; done;done
```
**WARNING** your user name must be `general`, you can put a "human name" as you wish, later.
> **Warning** your user name must be `general`, you can put a "human name" as you wish, later.
For more details check [../../newbie/alpine-newbie-configuration.md](../../newbie/alpine-newbie-configuration.md#setup-system-users)
@ -190,7 +191,7 @@ For more details check [../../newbie/alpine-newbie-configuration.md](../../newb
#### setup audio and video for wayland
**HINT** on alpine 3.14 gtk3 will force xorg dependencies.. for 3.16 will use gtk4 and SDL2
> **Note** on alpine 3.14 gtk3 will force xorg dependencies.. for 3.16 will use gtk4 and SDL2
```
apk add xf86-input-evdev cairo pango pixman \
@ -230,8 +231,9 @@ rc-service polkit restart
rc-update del lightdm
```
**WARNING** your user name must be `general`, you can put a "human name" as you wish, later.
**ADVERTISE** pure wayland will work only in modern gpu, otherwise will use xwayland if you need some modules like xf86-video packages as `xf86-video-intel`, `xf86-video-amdgpu`, `xf86-video-noveau`, `xf86-video-ati` or `xf86-video-nv`
> **Warning** your user name must be `general`, you can put a "human name" as you wish, later.
> **Note** pure wayland will work only in modern gpu, otherwise will use xwayland if you need some modules like xf86-video packages as `xf86-video-intel`, `xf86-video-amdgpu`, `xf86-video-noveau`, `xf86-video-ati` or `xf86-video-nv`
## Instalacion WAYLAND Alpine
@ -303,7 +305,7 @@ rc-update add lightdm
rc-service lightdm restart
```
**WARNING**: for alpine 3.14, 3.15 just works the login sesion for sway, maybe 3.16 and up will
> **Warning** : for alpine 3.14, 3.15 just works the login sesion for sway, maybe 3.16 and up will
result in a blank screen, check https://github.com/swaywm/sway/pull/3634#issuecomment-462779163
#### desktop integration and device media
@ -350,10 +352,10 @@ all new(next) lines are made by just enter. the terminal will detect if must exe
3. copy each separated by empty line, block of command, copy only blocks separate by empty line
4. and paste each separated by empty line block in the remnote (ssh), do not paste all the blocks at same time!
**CAUTION** Some Linux or/and Mac terminals have security cut/paste locks, so
> **Warning** Some Linux or/and Mac terminals have security cut/paste locks, so
if you paste, the first line will be preceded by garbage, check always the first char of your paste.
**WARNING** after finish, rerun: `sed -i -r 's|.*PermitRootLogin.*|PermitRootLogin no|g' /etc/ssh/sshd_config`
> **Warning** after finish, rerun: `sed -i -r 's|.*PermitRootLogin.*|PermitRootLogin no|g' /etc/ssh/sshd_config`
and restart ssh `service sshd restart` becouse security implications.
Done? return to [Preparation](#preparation-alpine) section of this document.

View File

@ -149,7 +149,7 @@ useradd -m -U -c "" -G wheel,input,disk,floppy,cdrom,dialout,audio,video,lp,netd
for u in $(ls /home); do for g in disk lp floppy audio cdrom dialout video lp netdev games users ping; do addgroup $u $g; done;done
```
**WARNING** your user name must be `general`, you can put a "human name" as you wish, later.
> **Warning** your user name must be `general`, you can put a "human name" as you wish, later.
For more details check [../../newbie/alpine-newbie-xfce-desktop.md](../../newbie/alpine-newbie-xfce-desktop.md#setup-system-users)
@ -229,8 +229,9 @@ rc-service lightdm restart
```
**WARNING** your user name must be `general`, you can put a "human name" as you wish, later.
**HINT** check for some xf86-video packages like `xf86-video-intel`, `xf86-video-amdgpu`, `xf86-video-noveau`, `xf86-video-ati` or `xf86-video-nv`
> **Warning** your user name must be `general`, you can put a "human name" as you wish, later.
> **Note** check for some xf86-video packages like `xf86-video-intel`, `xf86-video-amdgpu`, `xf86-video-noveau`, `xf86-video-ati` or `xf86-video-nv`
## instalacion Xfce4 Alpine
@ -319,10 +320,10 @@ all new(next) lines are made by just enter. the terminal will detect if must exe
3. copy each separated by empty line, block of command, copy only blocks separate by empty line
4. and paste each separated by empty line block in the remnote (ssh), do not paste all the blocks at same time!
**CAUTION** Some Linux or/and Mac terminals have security cut/paste locks, so
> **Warning** Some Linux or/and Mac terminals have security cut/paste locks, so
if you paste, the first line will be preceded by garbage, check always the first char of your paste.
**WARNING** after finish, rerun: `sed -i -r 's|.*PermitRootLogin.*|PermitRootLogin no|g' /etc/ssh/sshd_config`
> **Warning** after finish, rerun: `sed -i -r 's|.*PermitRootLogin.*|PermitRootLogin no|g' /etc/ssh/sshd_config`
and restart ssh `service sshd restart` becouse security implications.
#### hardware used

View File

@ -150,7 +150,7 @@ useradd -m -U -c "" -G wheel,input,disk,floppy,cdrom,dialout,audio,video,lp,netd
for u in $(ls /home); do for g in disk lp floppy audio cdrom dialout video lp netdev games users ping; do addgroup $u $g; done;done
```
**WARNING** your user name must be `general`, you can put a "human name" as you wish, later.
> **Warning** your user name must be `general`, you can put a "human name" as you wish, later.
For more details check [../../newbie/alpine-newbie-xfce-desktop.md](../../newbie/alpine-newbie-xfce-desktop.md#setup-system-users)
@ -230,8 +230,9 @@ rc-service lightdm restart
```
**WARNING** your user name must be `general`, you can put a "human name" as you wish, later.
**HINT** check for some xf86-video packages like `xf86-video-intel`, `xf86-video-amdgpu`, `xf86-video-noveau`, `xf86-video-ati` or `xf86-video-nv`
> **Warning** your user name must be `general`, you can put a "human name" as you wish, later.
> **Note** check for some xf86-video packages like `xf86-video-intel`, `xf86-video-amdgpu`, `xf86-video-noveau`, `xf86-video-ati` or `xf86-video-nv`
## instalacion OpenBox Alpine
@ -264,7 +265,7 @@ rc-service lightdm restart
#### openbox session menu and desktop configuration
**WARNING** the `openbox-doc` package must be installed
> **Warning** the `openbox-doc` package must be installed
```
cat > /etc/xdg/openbox/menu.xml << EOF
@ -397,10 +398,10 @@ all new(next) lines are made by just enter. the terminal will detect if must exe
3. copy each separated by empty line, block of command, copy only blocks separate by empty line
4. and paste each separated by empty line block in the remnote (ssh), do not paste all the blocks at same time!
**CAUTION** Some Linux or/and Mac terminals have security cut/paste locks, so
> **Warning** Some Linux or/and Mac terminals have security cut/paste locks, so
if you paste, the first line will be preceded by garbage, check always the first char of your paste.
**WARNING** after finish, rerun: `sed -i -r 's|.*PermitRootLogin.*|PermitRootLogin no|g' /etc/ssh/sshd_config`
> **Warning** after finish, rerun: `sed -i -r 's|.*PermitRootLogin.*|PermitRootLogin no|g' /etc/ssh/sshd_config`
and restart ssh `service sshd restart` becouse security implications.
#### hardware used

View File

@ -75,8 +75,7 @@ Sometimes you will receive an error `error relocating ... symbol not found` when
This is because you installed some alpine packages too fresh but not upgraded dependences.
A simple `apk upgrade -a` will fix it.
**IMPORTANT** to know:
> **Warning** **IMPORTANT** to know:
* For `Androit` and `Termux` you must read: https://wiki.termux.com/wiki/Differences_from_Linux
* For `iOS` and `iSH` you must read: https://github.com/ish-app/ish/wiki/What-works%3F

View File

@ -1,6 +1,9 @@
# AlpineLinux with wlan settings.
The alpine wiki is a crap .. information is "less" so much people is just losing the patiente..
The alpine wiki is a crap .. information is "less" so much people is just losing
the patiente..
Before taking any copy from this document check [Licensing clarifications](#licensing-clarifications) at the end.
## Introduction to Wireless devices
@ -10,9 +13,9 @@ as the most moderns.. (in the past there are others like IR, etc).
The wifi devices are from two kind, the only pure network ones and the hybrid ones,
this means that a pure network device just are a device to use linked to a network,
but currently bluetooth is a network device but for paired devices, just like point to point,
so nomadays curerntly almost any laptop wifi is also a bluetooth device too, we called
those for convenience hybrid ones.
but currently bluetooth is a network device but for paired devices, just like
point to point, so nomadays curerntly almost any laptop wifi is also a bluetooth
device too, we called those for convenience hybrid ones.
Also important, many laptops and special computers, have a hardware button (or switch)
to turn off wireless card, however, sometimes this are a software switch by the vendor,
@ -20,26 +23,55 @@ so we can also be blocked by kernel if the card its well supported. This is only
by the two important requirements, first by using `rfkill` (util-linux) and also
if the module of the device is currently well and complete supported hardware.
## Setup wireless on alpine Alpine Linux
## Wifi status on Alpine linux
AS any tech piece, we have hardware and software, this document only will cover
the software part, cos hardware support depends of the available modules and
reverse ingeniering that the linux community can made to the hardware.
As any tech piece, we have hardware and software, so then a "wifi" is made by two parts:
So then a "wifi setup" is made by two parts:
* The hardware as the module manager from kernel .. (like compiling `rtl8192eu-linux` or `r8169`)
* The software interface.. (like installing `wpa_supplicant` or `iwd` programs)
* the module manager from kernel .. (like compiling rtl8192eu-linux or r8169)
* and the software interface.. (like installing wpa_supplicant or iwd programs)
Most linux distros just configures `network-manager` package that oversimplified the things,
console setup is bit complicated but easyle covered, currently there is two options for,
the `wpa_supplicant` and the newer `iwd` from Intel, this last with less usage cases.
| Software | UI | WEXT | nl80211 | WEP | WPA/2/3 | WORKING apk |
| -------------- | ------- | ----- | ------- | ---- | ------- | ---------- |
| wireless_tools | Console | Yes | No | Yes | No | [since 3.5](https://pkgs.alpinelinux.org/packages?name=wireless-tools&branch=v3.4) |
| iw | Console | No | Yes | Yes | Yes | [since 3.5](https://pkgs.alpinelinux.org/packages?name=iw&branch=v3.5) |
| wpa_supplicant | Console | Yes | Yes | Yes | Yes | [since 3.0](https://pkgs.alpinelinux.org/packages?name=wpa_supplicant&branch=v3.3) |
| iwd | Console | Yes | Yes | No | Yes | [since 3.15](https://pkgs.alpinelinux.org/packages?name=iwd&branch=v3.15) |
| network-manager | Con+Gui | Yes | Yes | Yes | Yes | [since 3.12](https://pkgs.alpinelinux.org/packages?name=network-manager-applet&branch=v3.4) |
| connman | Console | No | Yes | Yes | Yes | [since 3.12](https://pkgs.alpinelinux.org/packages?name=network-manager-applet&branch=v3.4) |
The `iwd` packages exits since 3.10 but only since 3.15 has support for right
autentications protocols. The package `networkmanager` and his applet are since 3.6 but
only working applet was noted since Alpine 3.12 due right setup of permissions.
> **Note** the `networkmanager` and `connman` packages has wifi management but
are only frontend interfaces and relies heavily over the `iwd` or `wpa_supplicant`.
The `iwd` claims to be the future of wireless networking on linux, but even this
has unfinished issues, it **still doesn't cover the vast amount of configurations
and has only been tested on common computers just check https://gitlab.alpinelinux.org/alpine/aports/-/issues/13048#note_305688**
the mayor feature of alpine is the mayor problem, minimalist and simplicity.
# Configuration of alpine wifi
Due the huge problem that represent the hardware, we only will covert software interface,
and we will assume you already have the modules already compiled into the kernel.
and we will assume you already have the modules already compiled into the kernel,
nowadays this is easily handled by installing the firmware packages and only few devices too
recents represents minor problems, such instalation is partialy covered as necesary.
**IMPORTANT** if in our telegram channel you called "driver" to a module kernel, you
will be punished.. **a driver is a person that drive a car! and a folder it to put papers in it, not a directory, ok?**
> **Warning** if in our telegram channel you called "driver" to a module kernel, you
will be punished.. **a driver is a person that drive a car! ok?**
### 1 - you dont have networking
### 1 - software requirements and network lack
If you dont have network how you can grab the packages?
You will need the packages, but if you dont have network how you can grab the packages?
**Then you will be offered the possible cases where you will need to configure
the Wi-Fi**, first, when you do not have cable or telephone internet, second when
you have at least external internet and third when you have cable internet:
#### Option 1 grab the packages manually
@ -86,15 +118,9 @@ easyle install the necesary packages to perform the wifi setup.
Wireless need a special packages, the pacakge `iwd` is available since 3.10 but
ther are two problems:
1. first! that crap package needs dbus, so how stupid is the linux community,
if you in such stage dont have connection, so, how you can grab a complex set
of packages due dbus dependencies that apart still have a short (almost married)
relation with shitstemd?, yeah.. thanks for being stupids!
2. second! `iwd` its pretty BAD very bad packaged in alpine linux, due the simplicity
itselft, the mayor feature of alpine is the mayor problem, minimalist and simplicity
make the package almost unusuable, apart of the fact that such package just dont work
without the need dependences that are not present without setup a network repository,
like the dbus+glib interfaces libraries, yeah!!! thanks again!.
1. It depends on dbus the is not included in all ISOS/IMG install images.
2. Work only on common laptops/desktops: https://gitlab.alpinelinux.org/alpine/aports/-/issues/13048#note_305688**
So yeah.. we will use the old and fiable methods, **later we will provide another tutorial with iwd**:
@ -109,7 +135,7 @@ just install all the need packages as:
apk add wireless-tools wpa_supplicant dbus-libs libnl3 pcsc-lite-libs linux-firmware util-linux
```
**IMPORTANT** since 3.15 the `rfkill` program is at `util-linux-misc` package, and not
> **Warning** since Alpine 3.15 the `rfkill` program is at `util-linux-misc` package, and not
in the `util-linux` package cos was splited so you must install it in recent alpine versions.
### 3 - configure wireless devices
@ -298,12 +324,12 @@ ifconfig wlan0 down
rc-update add wpa_supplicant boot
```
> __Note__: If this errors with `ioctl 0x8914 failed: No error information`,
> **Note** : If this errors with `ioctl 0x8914 failed: No error information`,
that's `busybox ip`'s way of saying your wireless radio is rfkill'd, for information
on how to unblock your wireless radio; the base installation should
have `busybox rfkill` available, check the section [check the devices availables](#check-the-devices-availables).
**IMPORTANT** Hardware buttons to toggle wireless cards are handled by vendor specific
> **Warning** Hardware buttons to toggle wireless cards are handled by vendor specific
kernel modules. Frequently, these are [WMI](https://lwn.net/Articles/391230/) modules.
Particularly for very new hardware models, it happens that the model is not fully supported
in the latest stable kernel yet. In this case, it often helps to search the kernel bug

View File

@ -133,7 +133,7 @@ sed -i -r 's#^UserDir .*#UserDir public_html#g' /etc/apache2/conf.d/userdir.conf
rc-service lighttpd restart
```
**WARNING** as we said.. alpine policy is to be most upstream equal possible, almost like packagers are lazy? NO! just dont put any thing about root user access, but well, you must know what are you doing, by the addition of `UserDir disabled root postmaster` you will denied specific users due security.
> **Warning** as we said.. alpine policy is to be most upstream equal possible, almost like packagers are lazy? NO! just dont put any thing about root user access, but well, you must know what are you doing, by the addition of `UserDir disabled root postmaster` you will denied specific users due security.
#### Apache2 alpine proxy modules setup
@ -163,7 +163,7 @@ EOF
service apache2 restart
```
**WARNING** of course, the `myproxy.conf` is hypothetical, for didactic purposes, here it is only exemplified that the error is corrected in the step of the sed command to work.
> **Warning** of course, the `myproxy.conf` is hypothetical, for didactic purposes, here it is only exemplified that the error is corrected in the step of the sed command to work.
#### Apache2 SSL support
@ -205,12 +205,11 @@ sed -i -r 's#^SSLProxyCipherSuite.*#SSLProxyCipherSuite HIGH:MEDIUM:ALL:!MD5:!RC
rc-service apache2 restart
```
**WARNING NOTES**
1. This is a permissive configuration full compatible wtith older and newer browsers.
2. to only allow most secure protocols and a bit of compatibilty, set to `SSLProtocol all -TLSv1 -SSLv3`
3. to only allow most secure negociations and a bit of compat, set to `SSLCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
4. to only allow most secure negociations and a bit of compat, set proxy to `SSLProxyCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
> **Warning** this configuration:
> 1. This is a permissive configuration full compatible wtith older and newer browsers.
> 2. to only allow most secure protocols and a bit of compatibilty, set to `SSLProtocol all -TLSv1 -SSLv3`
> 3. to only allow most secure negociations and a bit of compat, set to `SSLCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
> 4. to only allow most secure negociations and a bit of compat, set proxy to `SSLProxyCipherSuite HIGH:MEDIUM:ECDHE:!MD5:!RC4:!3DES:!ADH`
## 2 - PHP
@ -256,7 +255,7 @@ apk add php7-pdo php7-pdo_dblib php7-pdo_mysql php7-pdo_odbc php7-pdo_pgsql php7
apk add php7-apache2
```
**WARNING** all of these are due alpine 3.10 to 3.15 uses php7, alpine 3.16 start to use php8,
> **Warning** all of these are due alpine 3.10 to 3.15 uses php7, alpine 3.16 start to use php8,
so in such case just change the "7" by "8" exam ple change "php7-apache2" by "php8-apache2".
#### configuration of php
@ -334,9 +333,9 @@ EOF
rc-service apache2 start
```
**WARNING** the two last steps are mutualy exclusive, only one way of php handle can be made.
> **WARNING** the two last steps are mutualy exclusive, only one way of php handle can be made.
**IMPORTANT** here we use **sockets, so its more faster rather fcgi** steps made by oficial wiki.
> **Note** here we use **sockets, so its more faster rather fcgi** steps made by oficial wiki.
## 3 - Databases - MySQL postgreSQL SQLite ODBC
@ -444,7 +443,7 @@ CPReuse =
odbcinst -u -d -f /tmp/tmpmdb.tmp
```
**WARNING** the packages for mysql and sqlite are `sqliteodbc` and `mariadb-connector-odbc` but only available for edge.
> **Warning** the packages for mysql and sqlite are `sqliteodbc` and `mariadb-connector-odbc` but only available for edge.
## Extra needs