78 lines
2.5 KiB
Plaintext
78 lines
2.5 KiB
Plaintext
# $OpenBSD: README.chroot,v 1.4 2006/07/12 19:26:11 naddy Exp $
|
|
# Author: Jolan Luff <jolan@openbsd.org>
|
|
|
|
In order to make CVSweb operate in a chroot environment, it is
|
|
necessary to copy all of the relevant tools, libraries, and perl modules
|
|
that CVSweb employs into /var/www.
|
|
|
|
First, create the basic directory structure:
|
|
|
|
$ cd /var/www
|
|
# mkdir {tmp,usr}
|
|
# chown www:www tmp (needs to be writeable for the www user)
|
|
|
|
$ cd /var/www/usr
|
|
# mkdir -p {bin,lib,libdata/perl5,libexec}
|
|
|
|
$ cd /var/www/usr/libdata/perl5
|
|
# mkdir -p {File,IPC,Time,warnings,`machine`-openbsd/5.8.8}
|
|
|
|
Now, the required binaries:
|
|
|
|
$ cd /var/www/usr/bin
|
|
# cp -p /usr/bin/{co,cvs,diff,perl,rcsdiff,rlog,uname} .
|
|
|
|
Next, the libraries that the binaries are linked to:
|
|
|
|
NOTE: Wildcards will, of course, copy any old, unused libraries that are
|
|
lurking around (for example, from an upgrade):
|
|
|
|
$ cd /var/www/usr/lib
|
|
# cp -p /usr/lib/lib{c,crypto,des,gssapi,krb5,m,perl,util,z}.so* .
|
|
|
|
Now, the run-time link-editor:
|
|
|
|
$ cd /var/www/usr/libexec
|
|
# cp -p /usr/libexec/ld.so .
|
|
|
|
And finally, the perl modules:
|
|
|
|
$ cd /var/www/usr/libdata/perl5
|
|
# cp -p /usr/libdata/perl5/{Carp,Exporter,Symbol,base,integer}.pm .
|
|
# cp -p /usr/libdata/perl5/{strict,warnings,vars}.pm .
|
|
# cp -p /usr/libdata/perl5/File/Basename.pm ./File/
|
|
# cp -p /usr/libdata/perl5/IPC/Open{2,3}.pm ./IPC/
|
|
# cp -p /usr/libdata/perl5/Time/Local.pm ./Time/
|
|
# cp -p /usr/libdata/perl5/warnings/register.pm ./warnings/
|
|
|
|
$ cd /var/www/usr/libdata/perl5/`machine`-openbsd/5.8.8
|
|
# cp -p /usr/libdata/perl5/`machine`-openbsd/5.8.8/{Config,Cwd}.pm .
|
|
|
|
Editing cvsweb and cvsweb.conf
|
|
------------------------------
|
|
|
|
The cvsweb program itself and cvsweb.conf both assume Apache is not
|
|
running in a chroot environment, so we need to change some default paths
|
|
so they are relative to /var/www.
|
|
|
|
In /var/www/cgi-bin/cvsweb:
|
|
|
|
for ("$mydir/cvsweb.conf", '/var/www/conf/cvsweb/cvsweb.conf') {
|
|
for ("$mydir/cvsweb.conf", '/conf/cvsweb/cvsweb.conf') {
|
|
|
|
In /var/www/conf/cvsweb/cvsweb.conf:
|
|
|
|
Change CVSrepositories to reflect the location of the directories which
|
|
contain CVSROOT. This example shows a local repository NFS mounted over
|
|
loopback into /var/www/cvs, since the directory must be relative to
|
|
/var/www, we use /cvs.
|
|
|
|
@CVSrepositories = (
|
|
'local' => ['Local Repository', '/home/cvs'], (default)
|
|
'local' => ['Local Repository', '/cvs'], (chroot)
|
|
|
|
And the same idea for $mimetypes:
|
|
|
|
$mime_types = '/var/www/conf/mime.types'; (default)
|
|
$mime_types = '/conf/mime.types'; (chroot)
|