Last active
August 29, 2015 14:17
-
-
Save zoghal/68d811e77d2727a366db to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env bash | |
# names of latest versions of each package | |
export VERSION_PCRE=pcre-8.36 | |
export VERSION_LIBRESSL=libressl-2.1.3 | |
export VERSION_NGINX=nginx-1.7.10 | |
export VERSION_NGINX=nginx-$NGINX_VERSION | |
# URLs to the source directories for each package | |
export SOURCE_LIBRESSL=ftp://ftp.openbsd.org/pub/OpenBSD/LibreSSL/ | |
export SOURCE_PCRE=ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/ | |
export SOURCE_NGINX=http://nginx.org/download/ | |
# clean out any files from previous runs of this script | |
rm -rf build | |
mkdir build | |
# ensure that we have the required software to compile our own nginx | |
apt-get -y install curl wget build-essential libgd-dev libgeoip-dev | |
# grab the source files | |
wget -P ./build $SOURCE_PCRE$VERSION_PCRE.tar.gz | |
wget -P ./build $SOURCE_LIBRESSL$VERSION_LIBRESSL.tar.gz | |
wget -P ./build $SOURCE_NGINX$VERSION_NGINX.tar.gz | |
# expand the source files | |
echo "Download sources" | |
cd build | |
tar xzf $VERSION_NGINX.tar.gz | |
tar xzf $VERSION_LIBRESSL.tar.gz | |
tar xzf $VERSION_PCRE.tar.gz | |
cd ../ | |
# set where LibreSSL and nginx will be built | |
export BPATH=$(pwd)/build | |
export STATICLIBSSL=$BPATH/$VERSION_LIBRESSL | |
# build static LibreSSL | |
echo "Configure & Build LibreSSL" | |
cd $STATICLIBSSL | |
./configure LDFLAGS=-lrt --prefix=${STATICLIBSSL}/.openssl/ && make install-strip | |
# build nginx, with various modules included/excluded | |
echo "Configure & Build Nginx" | |
cd $BPATH/$VERSION_NGINX | |
wget http://hostmaster.wiki/w/images/9/94/Nginx_libressl.patch | |
patch -p0 < Nginx_libressl.patch | |
mkdir -p $BPATH/nginx | |
./configure --with-openssl=$STATICLIBSSL \ | |
--with-ld-opt="-lrt" \ | |
--sbin-path=/usr/sbin/nginx \ | |
--conf-path=/etc/nginx/nginx.conf \ | |
--error-log-path=/var/log/nginx/error.log \ | |
--http-log-path=/var/log/nginx/access.log \ | |
--with-pcre=$BPATH/$VERSION_PCRE \ | |
--with-http_ssl_module \ | |
--with-http_spdy_module \ | |
--with-file-aio \ | |
--with-ipv6 \ | |
--with-http_gzip_static_module \ | |
--with-http_stub_status_module \ | |
--without-mail_pop3_module \ | |
--without-mail_smtp_module \ | |
--without-mail_imap_module \ | |
--with-http_image_filter_module \ | |
--lock-path=/var/lock/nginx.lock \ | |
--pid-path=/run/nginx.pid \ | |
--http-client-body-temp-path=/var/lib/nginx/body \ | |
--http-fastcgi-temp-path=/var/lib/nginx/fastcgi \ | |
--http-proxy-temp-path=/var/lib/nginx/proxy \ | |
--http-scgi-temp-path=/var/lib/nginx/scgi \ | |
--http-uwsgi-temp-path=/var/lib/nginx/uwsgi \ | |
--with-debug \ | |
--with-pcre-jit \ | |
--with-http_stub_status_module \ | |
--with-http_realip_module \ | |
--with-http_auth_request_module \ | |
--with-http_addition_module \ | |
--with-http_geoip_module \ | |
--with-http_gzip_static_module | |
touch $STATICLIBSSL/.openssl/include/openssl/ssl.h | |
make && sudo checkinstall --pkgname="nginx-libressl" --pkgversion="$NGINX_VERSION" \ | |
--provides="nginx" --requires="libc6, libpcre3, zlib1g" --strip=yes \ | |
--stripso=yes --backup=yes -y --install=yes | |
echo "All done."; | |
echo "This build has not edited your existing /etc/nginx directory."; | |
echo "If things aren't working now you may need to refer to the"; | |
echo "configuration files the new nginx ships with as defaults,"; | |
echo "which are available at /etc/nginx-default"; |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment