取得臺灣即時氣象資訊

Posted on 2017-07-26 by hoyo

目標：取得台灣地區的即時氣象資訊

—

交通部中央氣象局-開放資料平臺

加入會員
登入會員後網站選單會多一個開放資料目錄，裡面有資料清單的詳細說明
切換到「資料使用說明」內有「取得授權碼」，點選即可得到下載授權碼
找到符合需求的資料清單代碼後，套用到下載網址的 dataid 即可

http://opendata.cwb.gov.tw/opendataapi?dataid=O-A0003-001&authorizationkey=CWB-C95C04E5-AA3A-4362-96D0-XXXXXX

1	http://opendata.cwb.gov.tw/opendataapi?dataid=O-A0003-001&authorizationkey=CWB-C95C04E5-AA3A-4362-96D0-XXXXXX

—

Сurrent weather and forecast – OpenWeatherMap

加入會員
OpenWeatherMap 會寄信給你，內有你的 API 連結 appid 和範例
然後就可以根據這個範例和 appid 使用網站上的 API 說明

http://api.openweathermap.org/data/2.5/weather?q=tainan,taiwan&appid=504cc5e34ec1fa56760cb045dcxxxxxx

1	http://api.openweathermap.org/data/2.5/weather?q=tainan,taiwan&appid=504cc5e34ec1fa56760cb045dcxxxxxx

{"coord":{"lon":120.19,"lat":23},"weather":[{"id":803,"main":"Clouds","description":"broken clouds","icon":"04d"}],"base":"stations","main":{"temp":303.71,"pressure":1005,"humidity":62,"temp_min":303.15,"temp_max":304.15},"visibility":10000,"wind":{"speed":2.1,"deg":80},"clouds":{"all":75},"dt":1501027200,"sys":{"type":1,"id":7486,"message":0.0079,"country":"TW","sunrise":1501018044,"sunset":1501065834},"id":1668352,"name":"Tainan","cod":200}

{"coord":{"lon":120.19,"lat":23},"weather":[{"id":803,"main":"Clouds","description":"broken clouds","icon":"04d"}],"base":"stations","main":{"temp":303.71,"pressure":1005,"humidity":62,"temp_min":303.15,"temp_max":304.15},"visibility":10000,"wind":{"speed":2.1,"deg":80},"clouds":{"all":75},"dt":1501027200,"sys":{"type":1,"id":7486,"message":0.0079,"country":"TW","sunrise":1501018044,"sunset":1501065834},"id":1668352,"name":"Tainan","cod":200}

—

2,082 total views

使用 Let’s Encrypt 免費 SSL 提供 HTTPS

Posted on 2017-07-16 by hoyo

什麼是 Let’s Encrypt

Let's Encrypt是一個於2015年三季度推出的數位憑證認證機構，旨在以自動化流程消除手動建立和安裝憑證的複雜流程，並推廣使全球資訊網伺服器的加密連接無所不在，為安全網站提供免費的SSL/TLS憑證。

1	Let's Encrypt是一個於2015年三季度推出的數位憑證認證機構，旨在以自動化流程消除手動建立和安裝憑證的複雜流程，並推廣使全球資訊網伺服器的加密連接無所不在，為安全網站提供免費的SSL/TLS憑證。

數量限制

Rate Limits

2018年8月1日
The main limit is Certificates per Registered Domain, (50 per week).

1 2	2018年8月1日 The main limit is Certificates per Registered Domain, (50 per week).

客戶端

ACME Client Implementations

官方推薦使用 Certbot ，實際測試幾個也是推薦 Certbot

—

Certbot

NGINX 使用 Let’s Encrypt 免費 SSL 憑證設定 HTTPS 安全加密網頁教學

設定運作程式環境及取得程式

# mkdir /etc/certbot
# cd /etc/certbot
# wget https://dl.eff.org/certbot-auto
# chmod +x certbot-auto

# mkdir /etc/certbot

# cd /etc/certbot

# wget https://dl.eff.org/certbot-auto

# chmod +x certbot-auto

—

certbot-auto 安裝、設定

首先裸跑一次，程式會偵測環境並且補齊所需套件

# /etc/certbot/certbot-auto

1	# /etc/certbot/certbot-auto

在網站根目錄建立規定認證目錄 .well-known/acme-challenge/ 後即可產生證書

# mkdir -p /WEB/.well-known/acme-challenge/
# /etc/certbot/certbot-auto certonly --webroot -w /WEB/ -d app.soundu.life

1 2	# mkdir -p /WEB/.well-known/acme-challenge/ # /etc/certbot/certbot-auto certonly --webroot -w /WEB/ -d app.soundu.life

-w 網路根目錄路徑
-d 網址，實際操作時該網址必須已經可使用

—

設定自動更新證書排程

vi /etc/crontab


# renew SSL
0  7  *  *  *  root  /etc/certbot/certbot-auto renew
1  7  *  *  *  root  systemctl reload httpd

vi /etc/crontab

# renew SSL

0 7 * * * root /etc/certbot/certbot-auto renew

1 7 * * * root systemctl reload httpd

—

SSL 證書檢查

—

726 total views, 2 views today

安裝 Godaddy SSL

Posted on 2017-07-03 by hoyo

產生主機 SSL csr
Generate a CSR (certificate signing request)
Apache: Generate CSR (Certificate Signing Request)
把 csr 貼給 Godaddy
驗證網站 (網域)
Verify domain ownership (HTML or DNS)
Godaddy 會打電話看是不是有人在開玩笑
確認後，發送證書連結
下載證書，解壓縮到 /usr/local/ssl
安裝 mod_ssl
編輯 ssl.conf
重新啟動 HTTPD

—

mkdir /usr/local/ssl
cd /usr/local/ssl
openssl req -new -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr

mkdir /usr/local/ssl

cd /usr/local/ssl

openssl req -new -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr

—

網域認證

/.well-known/pki-validation/godaddy.html


-- Your unique ID --

/.well-known/pki-validation/godaddy.html

-- Your unique ID --

—

安裝 SSL 證書到 Apache

安裝 Apache SSL mod

yum install mod_ssl

1	yum install mod_ssl

編輯 /etc/httpd/conf.d/ssl.conf

vi /etc/httpd/conf.d/ssl.conf


<VirtualHost *:443>
ServerName www.oikid.com:443
SSLCertificateFile /usr/local/ssl/xxxxxxxxx.crt
SSLCertificateKeyFile /usr/local/ssl/www.youdomain.com.key

vi /etc/httpd/conf.d/ssl.conf

ServerName www.oikid.com:443

SSLCertificateFile /usr/local/ssl/xxxxxxxxx.crt

SSLCertificateKeyFile /usr/local/ssl/www.youdomain.com.key

SSLCertificateFile 為 Goddddy 壓縮檔內的 crt
SSLCertificateKeyFile 是一開始用 openssl 產生的 key 檔案

—

1,120 total views

使用 chunk 上傳超大檔案 (HTTP 檔案上傳經驗整理)

Posted on 2017-07-01 by hoyo

測試經驗整理

使用 chunked 是為了
- 避免無止盡的設定上傳大小
- 避免逾時 Timeout

—

Plupload

Chunking

—

測試第一步

u.html

<!DOCTYPE html>
<html>
<head lang="en">
    <meta charset="UTF-8">
    <title></title>
    <script src="../Component_Front/jquery-1.11.3.min.js"></script>
    <script src="../Component_Front/plupload-2.3.1/js/plupload.full.min.js"></script>

</head>
<body>

<div id="drag-area" class="col-xs-12">拖曳檔案、資料夾或點選上傳</div>

<input type="button" value="上傳" id="upload-btn" class="btn btn-primary" />

<script>
    var uploader = new plupload.Uploader({
        runtimes : 'html5',
        chunk_size: '2mb',
        file_data_name : 'DSLRFile',
        drop_element : 'drag-area',
        browse_button : 'drag-area',
        //max_file_size : '10mb',
        url : "./u.php",
        multipart_params: { Date:'', Category:'', Title:'' }
    });

    uploader.init(); //初始化

    //绑定文件添加进队列事件
    uploader.bind('FilesAdded',function(uploader,files) {

        for(var i = 0, len = files.length; i<len; i++) {
            var file_name = files[i].name; //文件名
            //构造html来更新UI
            var html = '<div id="file-' + files[i].id +'" class="statusbar"><div class="filename">' + file_name + '</div><div class="FileLoaded">0</div><div class="FileSlash">/</div><div class="FileSize">'+ files[i].size +'</div><div class="progressBar"><div style="width: 0;"></div></div></div>';
            $(html).appendTo('#file-list');
        }
    });

    //绑定文件上传进度事件
    uploader.bind('UploadProgress',function(uploader,file){
        console.log(file.loaded);
        $('#file-'+file.id+' .FileLoaded').text(file.loaded); //
        $('#file-'+file.id+' .FileSize').text(file.size); //
        $('#file-'+file.id+' .progressBar>div').css('width',file.percent + '%');//控制进度条
    });

    // 上傳完成
    uploader.bind("UploadComplete", function() {
        $('#file-list').find('div').remove();
    });

    // 上傳結果
    uploader.bind('FileUploaded', function(upldr, file, object) {

        // 獲取回傳
        var Return;
        try {
            Return = eval(object.response);
        } catch(err) {
            Return = eval('(' + object.response + ')');
        }

        // 失敗顯示錯誤訊息
        if ( Return['Result'] ==true ) {
            $('#Main').append();
        }

        //
        else {
            alert( Return['Message'] );
        }
    });


    // 開始上傳
    $('#upload-btn').click(function() {
        uploader.start();
    });
</script>

</body>
</html>

<!DOCTYPE html>

<html>

</head>

<body>

<div id="drag-area" class="col-xs-12">拖曳檔案、資料夾或點選上傳</div>

var uploader = new plupload.Uploader({

runtimes : 'html5',

chunk_size: '2mb',

file_data_name : 'DSLRFile',

drop_element : 'drag-area',

browse_button : 'drag-area',

//max_file_size : '10mb',

url : "./u.php",

multipart_params: { Date:'', Category:'', Title:'' }

});

uploader.init(); //初始化

//绑定文件添加进队列事件

uploader.bind('FilesAdded',function(uploader,files) {

for(var i = 0, len = files.length; i<len; i++) {

var file_name = files[i].name; //文件名

//构造html来更新UI

var html = '<div id="file-' + files[i].id +'" class="statusbar"><div class="filename">' + file_name + '</div><div class="FileLoaded">0</div><div class="FileSlash">/</div><div class="FileSize">'+ files[i].size +'</div><div class="progressBar"><div style="width: 0;"></div></div></div>';

$(html).appendTo('#file-list');

}

});

//绑定文件上传进度事件

uploader.bind('UploadProgress',function(uploader,file){

console.log(file.loaded);

$('#file-'+file.id+' .FileLoaded').text(file.loaded); //

$('#file-'+file.id+' .FileSize').text(file.size); //

$('#file-'+file.id+' .progressBar>div').css('width',file.percent + '%');//控制进度条

});

// 上傳完成

uploader.bind("UploadComplete", function() {

$('#file-list').find('div').remove();

});

// 上傳結果

uploader.bind('FileUploaded', function(upldr, file, object) {

// 獲取回傳

var Return;

try {

Return = eval(object.response);

} catch(err) {

Return = eval('(' + object.response + ')');

}

// 失敗顯示錯誤訊息

if ( Return['Result'] ==true ) {

$('#Main').append();

}

else {

alert( Return['Message'] );

}

});

// 開始上傳

$('#upload-btn').click(function() {

uploader.start();

});

</script>

</body>

</html>

u.php

<?php
print_r($GLOBALS);

1 2	<?php print_r($GLOBALS);

輸出

Array
(
    [_GET] => Array
        (
        )
    [_POST] => Array
        (
            [name] => Serebro - Mi Mi Mi.mp3
            [chunk] => 0
            [chunks] => 4
        )
    [_COOKIE] => Array
        (
            [location] => zh-tw
        )

    [_FILES] => Array
        (
            [DSLRFile] => Array
                (
                    [name] => blob
                    [type] => application/octet-stream
                    [tmp_name] => /tmp/php01RmfW
                    [error] => 0
                    [size] => 2097152
                )
        )
    [GLOBALS] => Array
 *RECURSION*
)
Array
(
    [_GET] => Array
        (
        )
    [_POST] => Array
        (
            [name] => Serebro - Mi Mi Mi.mp3
            [chunk] => 1
            [chunks] => 4
        )
    [_COOKIE] => Array
        (
            [location] => zh-tw
        )
    [_FILES] => Array
        (
            [DSLRFile] => Array
                (
                    [name] => blob
                    [type] => application/octet-stream
                    [tmp_name] => /tmp/phpwcnchg
                    [error] => 0
                    [size] => 2097152
                )
        )
    [GLOBALS] => Array
 *RECURSION*
)
:
:

Array

(

[_GET] => Array

(

)

[_POST] => Array

(

[name] => Serebro - Mi Mi Mi.mp3

[chunk] => 0

[chunks] => 4

)

[_COOKIE] => Array

(

[location] => zh-tw

)

[_FILES] => Array

(

[DSLRFile] => Array

(

[name] => blob

[type] => application/octet-stream

[tmp_name] => /tmp/php01RmfW

[error] => 0

[size] => 2097152

)

[GLOBALS] => Array

*RECURSION*

)

Array

(

[_GET] => Array

(

)

[_POST] => Array

(

[name] => Serebro - Mi Mi Mi.mp3

[chunk] => 1

[chunks] => 4

)

[_COOKIE] => Array

(

[location] => zh-tw

)

[_FILES] => Array

(

[DSLRFile] => Array

(

[name] => blob

[type] => application/octet-stream

[tmp_name] => /tmp/phpwcnchg

[error] => 0

[size] => 2097152

)

[GLOBALS] => Array

*RECURSION*

)

—

把分塊的檔案組合

<?php
$Filename = '/tmp/'.$_POST['name'];
exec( ' cat '.$_FILES['DSLRFile']['tmp_name'] .' >> "'. $Filename .'"' );

<?php

$Filename = '/tmp/'.$_POST['name'];

exec( ' cat '.$_FILES['DSLRFile']['tmp_name'] .' >> "'. $Filename .'"' );

—

原程式修改

// 檔案分塊未完成
$Filename = '/tmp/'.$_POST['name'];

// 大於兩塊處理
if ( $_POST['chunks'] > 1 ) {
    if ($_POST['chunks'] - $_POST['chunk'] > 1) {
        exec(' cat ' . $_FILES['DSLRFile']['tmp_name'] . ' >> "' . $Filename . '"');
        echo '1';
        exit;
    }
    else{
        exec(' cat ' . $_FILES['DSLRFile']['tmp_name'] . ' >> "' . $Filename . '"');
        rename( $Filename, $_FILES['DSLRFile']['tmp_name'] );

        // 還原 _FILES['name']
        $_FILES['DSLRFile']['name'] = $_POST['name'];

        // 完成之後做的事
        // ...
    }
}

// 檔案分塊未完成

$Filename = '/tmp/'.$_POST['name'];

// 大於兩塊處理

if ( $_POST['chunks'] > 1 ) {

if ($_POST['chunks'] - $_POST['chunk'] > 1) {

exec(' cat ' . $_FILES['DSLRFile']['tmp_name'] . ' >> "' . $Filename . '"');

echo '1';

exit;

}

else{

exec(' cat ' . $_FILES['DSLRFile']['tmp_name'] . ' >> "' . $Filename . '"');

rename( $Filename, $_FILES['DSLRFile']['tmp_name'] );

// 還原 _FILES['name']

$_FILES['DSLRFile']['name'] = $_POST['name'];

// 完成之後做的事

// ...

}

—

2,030 total views, 1 views today

CentOS 7 Systemd 服務及檔案管理

Posted on 2017-07-01 by hoyo

參考

CentOS 7 和 CentOS6 有明顯差別，只要是因為使用了 Systemd，除了管理服務的差異之外，對於使用 PHP 的我來說還有其他的差別

—

systemctl restart httpd

1	systemctl restart httpd

—

Systemd 對於 PHP 的影響

誰用誰知道，馬上就知道明明 php 已經設定上傳 tmp path 為 /tmp ，可上傳中和上傳完成後在 /tmp 就是看不到檔案，從 php 程式執行時到是神奇的可以讀取到檔案

這是因為 Systemd 把 /tmp 隱藏起來了

findmnt – find a filesystem

findmnt -N 1787


TARGET                                SOURCE            FSTYPE     OPTIONS
/                                     /dev/mapper/cl-root                                                                                     xfs        rw,relatime,attr2,inode64,noquota
├─/dev                                devtmpfs          devtmpfs   rw,nosuid,size=1874032k,nr_inodes=468508,mode=755
│ ├─/dev/shm                          tmpfs             tmpfs      rw,nosuid,nodev
│ ├─/dev/pts                          devpts            devpts     rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000
│ ├─/dev/mqueue                       mqueue            mqueue     rw,relatime
│ └─/dev/hugepages                    hugetlbfs         hugetlbfs  rw,relatime
├─/proc                               proc              proc       rw,nosuid,nodev,noexec,relatime
│ └─/proc/sys/fs/binfmt_misc          systemd-1         autofs     rw,relatime,fd=26,pgrp=1,timeout=300,minproto=5,maxproto=5,direct
├─/sys                                sysfs             sysfs      rw,nosuid,nodev,noexec,relatime
│ ├─/sys/kernel/security              securityfs        securityfs rw,nosuid,nodev,noexec,relatime
│ ├─/sys/fs/cgroup                    tmpfs             tmpfs      ro,nosuid,nodev,noexec,mode=755
│ │ ├─/sys/fs/cgroup/systemd          cgroup            cgroup     rw,nosuid,nodev,noexec,relatime,xattr,release_agent=/usr/lib/systemd/systemd-cgroups-agent,name=systemd
│ │ ├─/sys/fs/cgroup/hugetlb          cgroup            cgroup     rw,nosuid,nodev,noexec,relatime,hugetlb
│ │ ├─/sys/fs/cgroup/devices          cgroup            cgroup     rw,nosuid,nodev,noexec,relatime,devices
│ │ ├─/sys/fs/cgroup/net_cls,net_prio cgroup            cgroup     rw,nosuid,nodev,noexec,relatime,net_prio,net_cls
│ │ ├─/sys/fs/cgroup/perf_event       cgroup            cgroup     rw,nosuid,nodev,noexec,relatime,perf_event
│ │ ├─/sys/fs/cgroup/cpu,cpuacct      cgroup            cgroup     rw,nosuid,nodev,noexec,relatime,cpuacct,cpu
│ │ ├─/sys/fs/cgroup/cpuset           cgroup            cgroup     rw,nosuid,nodev,noexec,relatime,cpuset
│ │ ├─/sys/fs/cgroup/blkio            cgroup            cgroup     rw,nosuid,nodev,noexec,relatime,blkio
│ │ ├─/sys/fs/cgroup/pids             cgroup            cgroup     rw,nosuid,nodev,noexec,relatime,pids
│ │ ├─/sys/fs/cgroup/memory           cgroup            cgroup     rw,nosuid,nodev,noexec,relatime,memory
│ │ └─/sys/fs/cgroup/freezer          cgroup            cgroup     rw,nosuid,nodev,noexec,relatime,freezer
│ ├─/sys/fs/pstore                    pstore            pstore     rw,nosuid,nodev,noexec,relatime
│ ├─/sys/kernel/config                configfs          configfs   rw,relatime
│ └─/sys/kernel/debug                 debugfs           debugfs    rw,relatime
├─/run                                tmpfs             tmpfs      rw,nosuid,nodev,mode=755
│ └─/run/user/0                       tmpfs             tmpfs      rw,nosuid,nodev,relatime,size=377048k,mode=700
├─/boot                               /dev/sda1         xfs        rw,relatime,attr2,inode64,noquota
├─/tmp                                /dev/mapper/cl-root[/tmp/systemd-private-30f32c8dfa034e4eaf0d875cfa01b72d-httpd.service-Pp0l24/tmp]     xfs        rw,relatime,attr2,inode64,noquota
└─/var/tmp                            /dev/mapper/cl-root[/var/tmp/systemd-private-30f32c8dfa034e4eaf0d875cfa01b72d-httpd.service-Im15ui/tmp] xfs        rw,relatime,attr2,inode64,noquota

findmnt -N 1787

TARGET SOURCE FSTYPE OPTIONS

/ /dev/mapper/cl-root xfs rw,relatime,attr2,inode64,noquota

├─/dev devtmpfs devtmpfs rw,nosuid,size=1874032k,nr_inodes=468508,mode=755

│ ├─/dev/shm tmpfs tmpfs rw,nosuid,nodev

│ ├─/dev/pts devpts devpts rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=000

│ ├─/dev/mqueue mqueue mqueue rw,relatime

│ └─/dev/hugepages hugetlbfs hugetlbfs rw,relatime

├─/proc proc proc rw,nosuid,nodev,noexec,relatime

│ └─/proc/sys/fs/binfmt_misc systemd-1 autofs rw,relatime,fd=26,pgrp=1,timeout=300,minproto=5,maxproto=5,direct

├─/sys sysfs sysfs rw,nosuid,nodev,noexec,relatime

│ ├─/sys/kernel/security securityfs securityfs rw,nosuid,nodev,noexec,relatime

│ ├─/sys/fs/cgroup tmpfs tmpfs ro,nosuid,nodev,noexec,mode=755

│ │ ├─/sys/fs/cgroup/systemd cgroup cgroup rw,nosuid,nodev,noexec,relatime,xattr,release_agent=/usr/lib/systemd/systemd-cgroups-agent,name=systemd

│ │ ├─/sys/fs/cgroup/hugetlb cgroup cgroup rw,nosuid,nodev,noexec,relatime,hugetlb

│ │ ├─/sys/fs/cgroup/devices cgroup cgroup rw,nosuid,nodev,noexec,relatime,devices

│ │ ├─/sys/fs/cgroup/net_cls,net_prio cgroup cgroup rw,nosuid,nodev,noexec,relatime,net_prio,net_cls

│ │ ├─/sys/fs/cgroup/perf_event cgroup cgroup rw,nosuid,nodev,noexec,relatime,perf_event

│ │ ├─/sys/fs/cgroup/cpu,cpuacct cgroup cgroup rw,nosuid,nodev,noexec,relatime,cpuacct,cpu

│ │ ├─/sys/fs/cgroup/cpuset cgroup cgroup rw,nosuid,nodev,noexec,relatime,cpuset

│ │ ├─/sys/fs/cgroup/blkio cgroup cgroup rw,nosuid,nodev,noexec,relatime,blkio

│ │ ├─/sys/fs/cgroup/pids cgroup cgroup rw,nosuid,nodev,noexec,relatime,pids

│ │ ├─/sys/fs/cgroup/memory cgroup cgroup rw,nosuid,nodev,noexec,relatime,memory

│ │ └─/sys/fs/cgroup/freezer cgroup cgroup rw,nosuid,nodev,noexec,relatime,freezer

│ ├─/sys/fs/pstore pstore pstore rw,nosuid,nodev,noexec,relatime

│ ├─/sys/kernel/config configfs configfs rw,relatime

│ └─/sys/kernel/debug debugfs debugfs rw,relatime

├─/run tmpfs tmpfs rw,nosuid,nodev,mode=755

│ └─/run/user/0 tmpfs tmpfs rw,nosuid,nodev,relatime,size=377048k,mode=700

├─/boot /dev/sda1 xfs rw,relatime,attr2,inode64,noquota

├─/tmp /dev/mapper/cl-root[/tmp/systemd-private-30f32c8dfa034e4eaf0d875cfa01b72d-httpd.service-Pp0l24/tmp] xfs rw,relatime,attr2,inode64,noquota

└─/var/tmp /dev/mapper/cl-root[/var/tmp/systemd-private-30f32c8dfa034e4eaf0d875cfa01b72d-httpd.service-Im15ui/tmp] xfs rw,relatime,attr2,inode64,noquota

—

Systemd

cd /usr/lib/systemd/system
cat httpd.service


[Unit]
Description=The Apache HTTP Server
After=network.target remote-fs.target nss-lookup.target
Documentation=man:httpd(8)
Documentation=man:apachectl(8)

[Service]
Type=notify
EnvironmentFile=/etc/sysconfig/httpd
ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND
ExecReload=/usr/sbin/httpd $OPTIONS -k graceful
ExecStop=/bin/kill -WINCH ${MAINPID}
# We want systemd to give httpd some time to finish gracefully, but still want
# it to kill httpd after TimeoutStopSec if something went wrong during the
# graceful stop. Normally, Systemd sends SIGTERM signal right after the
# ExecStop, which would kill httpd. We are sending useless SIGCONT here to give
# httpd time to finish.
KillSignal=SIGCONT
PrivateTmp=true

[Install]
WantedBy=multi-user.target

cd /usr/lib/systemd/system

cat httpd.service

[Unit]

Description=The Apache HTTP Server

After=network.target remote-fs.target nss-lookup.target

Documentation=man:httpd(8)

Documentation=man:apachectl(8)

[Service]

Type=notify

EnvironmentFile=/etc/sysconfig/httpd

ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND

ExecReload=/usr/sbin/httpd $OPTIONS -k graceful

ExecStop=/bin/kill -WINCH ${MAINPID}

# We want systemd to give httpd some time to finish gracefully, but still want

# it to kill httpd after TimeoutStopSec if something went wrong during the

# graceful stop. Normally, Systemd sends SIGTERM signal right after the

# ExecStop, which would kill httpd. We are sending useless SIGCONT here to give

# httpd time to finish.

KillSignal=SIGCONT

PrivateTmp=true

[Install]

WantedBy=multi-user.target

可以看到 PrivateTmp 預設為 true

—

將 HTTPD PrivateTmp 關閉

# systemctl edit httpd.service

1	# systemctl edit httpd.service

[Service]
PrivateTmp=false

1 2	[Service] PrivateTmp=false

重新啟動 systemd 和 httpd

systemctl daemon-reload
systemctl restart httpd

1 2	systemctl daemon-reload systemctl restart httpd

—

919 total views

hoyo 學習紀錄

PHP 網頁應用 IOT 物聯網自動化

Monthly Archives: 7 月 2017