Project

General

Profile

Download (9.5 KB) Statistics
| Branch: | Tag: | Revision:
1
#!/bin/sh
2
#
3
# rc.php_ini_setup
4
#
5
# part of pfSense (https://www.pfsense.org)
6
# Copyright (c) 2014-2016 Electric Sheep Fencing
7
# Copyright (c) 2014-2022 Rubicon Communications, LLC (Netgate)
8
# All rights reserved.
9
#
10
# Licensed under the Apache License, Version 2.0 (the "License");
11
# you may not use this file except in compliance with the License.
12
# You may obtain a copy of the License at
13
#
14
# http://www.apache.org/licenses/LICENSE-2.0
15
#
16
# Unless required by applicable law or agreed to in writing, software
17
# distributed under the License is distributed on an "AS IS" BASIS,
18
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
19
# See the License for the specific language governing permissions and
20
# limitations under the License.
21
#
22

    
23
# Set our operating platform
24
VERSION=$(/bin/cat /etc/version)
25
MIN_REALMEM_FOR_OPCACHE=512
26

    
27
if /usr/local/sbin/pkg-static info -e php74; then
28
	EXTENSIONSDIR="/usr/local/lib/php/20190902/"
29
elif /usr/local/sbin/pkg-static info -e php73; then
30
	EXTENSIONSDIR="/usr/local/lib/php/20180731/"
31
elif /usr/local/sbin/pkg-static info -e php72; then
32
	EXTENSIONSDIR="/usr/local/lib/php/20170718/"
33
fi
34

    
35
# Grab amount of memory that is detected
36
if [ -f /var/log/dmesg.boot ]; then
37
	AVAILMEM=$(/bin/cat /var/log/dmesg.boot |/usr/bin/awk '/avail memory/ { memory=($4 / 1048576); printf("%0.0f\n", memory); exit}')
38
else
39
	AVAILMEM=$(/sbin/dmesg -a |/usr/bin/awk '/avail memory/ { memory=($4 / 1048576); printf("%0.0f\n", memory); exit}')
40
fi
41

    
42
if [ -z "$AVAILMEM" ]; then
43
	MEM=$(/sbin/sysctl -q hw.physmem | cut -d':' -f2)
44
	AVAILMEM=$(/bin/expr $MEM / 1048576)
45
fi
46

    
47

    
48
# Get amount of ram installed on this system
49
REALMEM=$(/sbin/sysctl -q hw.realmem | /usr/bin/awk '{print $2/1048576}' | /usr/bin/awk -F '.' '{print $1}')
50
export REALMEM
51
export LOWMEM
52

    
53
if [  ${REALMEM} -lt $MIN_REALMEM_FOR_OPCACHE ]; then
54
	LOWMEM="TRUE"
55
	echo ">>> Under $MIN_REALMEM_FOR_OPCACHE megabytes of ram detected.  Not enabling opcache"
56
	echo ">>> Under $MIN_REALMEM_FOR_OPCACHE megabytes of ram detected.  Not enabling opcache" | /usr/bin/logger -p daemon.info -i -t rc.php_ini_setup
57
else
58

    
59
	# Calculate opcache memory size according
60
	# to detected memory values
61
	if [ "$AVAILMEM" -gt "135" ]; then
62
		OPCACHEMEMSIZE="10"
63
	fi
64
	if [ "$AVAILMEM" -gt "256" ]; then
65
		OPCACHEMEMSIZE="20"
66
	fi
67
	if [ "$AVAILMEM" -gt "384" ]; then
68
		OPCACHEMEMSIZE="25"
69
	fi
70
	if [ "$AVAILMEM" -gt "512" ]; then
71
		OPCACHEMEMSIZE="30"
72
	fi
73
	if [ "$AVAILMEM" -gt "784" ]; then
74
		OPCACHEMEMSIZE="50"
75
	fi
76
fi
77

    
78
# Set upload directory
79
UPLOADTMPDIR="/tmp"
80

    
81
# Define php modules.  Do not add .so, it will
82
# be done automatically by the script below.
83
PHPMODULES="standard"
84
# Config read/write
85
PHPMODULES="$PHPMODULES xml libxml dom"
86
PHPMODULES="$PHPMODULES SimpleXML xmlreader xmlwriter"
87
# Downloading via HTTP/FTP (pkg mgr, etc)
88
PHPMODULES="$PHPMODULES curl date"
89
# Internationalization
90
PHPMODULES="$PHPMODULES gettext"
91
# User manager
92
PHPMODULES="$PHPMODULES ldap openssl pcntl"
93
PHPMODULES="$PHPMODULES mcrypt"
94
# Regexs, PERL style!
95
PHPMODULES="$PHPMODULES pcre"
96
# The mighty posix!
97
PHPMODULES="$PHPMODULES posix"
98
PHPMODULES="$PHPMODULES readline"
99
# Login sessions
100
PHPMODULES="$PHPMODULES session"
101
# Firewall rules edit
102
PHPMODULES="$PHPMODULES ctype"
103
# firewall_rules_edit.php
104
PHPMODULES="$PHPMODULES mbstring"
105
# Synchronization primitives
106
PHPMODULES="$PHPMODULES shmop"
107
# Page compression
108
PHPMODULES="$PHPMODULES zlib"
109
# SQLlite & Database
110
PHPMODULES="$PHPMODULES spl"
111
PHPMODULES="$PHPMODULES PDO"
112
PHPMODULES="$PHPMODULES sqlite3"
113
# RADIUS
114
PHPMODULES="$PHPMODULES radius"
115
# pfSense extensions
116
PHPMODULES="$PHPMODULES pfSense"
117
# json
118
PHPMODULES="$PHPMODULES json"
119
# bcmath
120
PHPMODULES="$PHPMODULES bcmath"
121
# filter
122
PHPMODULES="$PHPMODULES filter"
123
# rrd
124
PHPMODULES="$PHPMODULES rrd"
125

    
126
PHP_ZEND_MODULES=""
127

    
128
# Modules previously included.
129
# can be turned on by touching
130
# /etc/php_dynamodules/$modulename
131
#	sysvmsg \
132
#	sysvsem \
133
#	sysvshm \
134
#	bcmath \
135
#	tokenizer \
136
#	uploadprogress \
137
#	sockets \
138
#	Reflection \
139
#	mysql \
140
#	bz2	\
141

    
142
# Clear the .ini file to make sure we are clean
143
if [ -f /usr/local/etc/php.ini ]; then
144
	/bin/rm /usr/local/etc/php.ini
145
fi
146
LOADED_MODULES=$(/usr/local/bin/php-cgi -m | /usr/bin/grep -v "\[")
147

    
148
unset TIMEZONE
149
# Fetch the timezone from /var/db/zoneinfo if present
150
if [ -f /var/db/zoneinfo ]; then
151
	TIMEZONE=$(cat /var/db/zoneinfo)
152
fi
153

    
154
if [ -z "${TIMEZONE}" ]; then
155
	# Second option is from config.xml
156
	TIMEZONE=$(/usr/local/sbin/read_xml_tag.sh string system/timezone)
157
fi
158

    
159
if [ -z "${TIMEZONE}" ]; then
160
	# Last option, use default value from $g or Etc/UTC
161
	TIMEZONE=$(/usr/local/sbin/read_global_var default_timezone "Etc/UTC")
162
fi
163

    
164
if echo "${VERSION}" | grep -q RELEASE; then
165
	error_reporting="error_reporting = E_ERROR | E_PARSE"
166
else
167
	error_reporting=""
168
fi
169

    
170
# Get a loaded module list in the stock php
171
# Populate a dummy php.ini to avoid
172
# the file being clobbered and the firewall
173
# not being able to boot back up.
174
/bin/cat >/usr/local/etc/php.ini <<EOF
175
; File generated from /etc/rc.php_ini_setup
176
output_buffering = "0"
177
expose_php = Off
178
implicit_flush = true
179
magic_quotes_gpc = Off
180
max_execution_time = 900
181
request_terminate_timeout = 900
182
max_input_time = 1800
183
max_input_vars = 5000
184
register_argc_argv = On
185
register_long_arrays = Off
186
variables_order = "GPCS"
187
file_uploads = On
188
upload_tmp_dir = ${UPLOADTMPDIR}
189
upload_max_filesize = 200M
190
post_max_size = 200M
191
html_errors = Off
192
zlib.output_compression = Off
193
zlib.output_compression_level = 1
194
include_path = ".:/etc/inc:/usr/local/pfSense/include:/usr/local/pfSense/include/www:/usr/local/www:/usr/local/captiveportal:/usr/local/pkg:/usr/local/www/classes:/usr/local/www/classes/Form:/usr/local/share/pear:/usr/local/share/openssl_x509_crl/"
195
display_startup_errors=on
196
display_errors=on
197
log_errors=on
198
error_log=/tmp/PHP_errors.log
199
extension_dir=${EXTENSIONSDIR}
200
date.timezone="${TIMEZONE}"
201
session.hash_bits_per_character = 5
202
session.hash_function = 1
203
${error_reporting}
204

    
205
; Extensions
206

    
207
EOF
208

    
209
# Loop through and generate modules to load.
210
# Take into account modules built into php.
211
for EXT in $PHPMODULES; do
212
	SHOULDADD="true"
213
	# Check to see if module is compiled into php statically
214
	for LM in $LOADED_MODULES; do
215
		if [ "$EXT" = "$LM" ]; then
216
			SHOULDADD="false"
217
		fi
218
	done
219
	if [ "$SHOULDADD" = "true" ]; then
220
		# Ensure extension exists before adding.
221
		if [ -f "${EXTENSIONSDIR}${EXT}.so" ]; then
222
			echo "extension=${EXT}.so" >> /usr/local/etc/php.ini
223
		fi
224
	fi
225
done
226

    
227
# Zend modules
228
for EXT in $PHP_ZEND_MODULES; do
229
	# Ensure extension exists before adding.
230
	if [ -f "${EXTENSIONSDIR}${EXT}.so" ]; then
231
		echo "zend_extension=${EXT}.so" >> /usr/local/etc/php.ini
232
	fi
233
done
234

    
235
if [ "$LOWMEM" != "TRUE" ]; then
236

    
237
	/bin/cat >>/usr/local/etc/php.ini <<EOF
238

    
239
; opcache Settings
240
opcache.enabled="1"
241
opcache.enable_cli="0"
242
opcache.memory_consumption="${OPCACHEMEMSIZE}"
243

    
244
EOF
245
else
246
	/bin/cat >>/usr/local/etc/php.ini <<EOF
247
; opcache Settings
248
opcache.enabled="0"
249
EOF
250
fi
251

    
252
PHPFPMMAX=3
253
PHPFPMIDLE=30
254
PHPFPMSTART=1
255
PHPFPMSPARE=2
256
PHPFPMREQ=500
257
if [ $REALMEM -lt 250 ]; then
258
	PHPFPMMAX=2
259
       PHPFPMIDLE=5
260
       PHPFPMSTART=1
261
       PHPFPMSPARE=1
262
       PHPFPMREQ=500
263
elif [ ${REALMEM} -gt 1000 ]; then
264
       PHPFPMMAX=8
265
       PHPFPMIDLE=3600
266
       PHPFPMSTART=2
267
       PHPFPMSPARE=7
268
       PHPFPMREQ=5000
269
fi
270

    
271
/bin/cat > /usr/local/lib/php-fpm.conf <<EOF
272

    
273
[global]
274
pid = run/php-fpm.pid
275
error_log=syslog
276
syslog.facility = daemon
277
syslog.ident = system
278
log_level = error
279
daemonize = yes
280
events.mechanism = kqueue
281
process.max = ${PHPFPMMAX}
282

    
283
[nginx]
284
user = root
285
group = wheel
286
;mode = 0600
287

    
288
listen = /var/run/php-fpm.socket
289
listen.owner = root
290
listen.group = wheel
291
listen.mode = 0600
292

    
293
security.limit_extensions =
294

    
295
; Pass environment variables
296
env[PATH] = /bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin
297
env[LOGNAME] = root
298

    
299
EOF
300

    
301
if [ $REALMEM -lt 350 ]; then
302
	/bin/cat >> /usr/local/lib/php-fpm.conf <<EOF
303

    
304
pm = ondemand
305
pm.process_idle_timeout = $PHPFPMIDLE
306
pm.max_children = $PHPFPMMAX
307
pm.max_requests = $PHPFPMREQ
308
EOF
309

    
310
elif [ $REALMEM -gt 1000 ]; then
311
	/bin/cat >> /usr/local/lib/php-fpm.conf <<EOF
312

    
313
pm = dynamic
314
pm.process_idle_timeout = $PHPFPMIDLE
315
pm.max_children = $PHPFPMMAX
316
pm.start_servers = $PHPFPMSTART
317
pm.max_requests = $PHPFPMREQ
318
pm.min_spare_servers=1
319
pm.max_spare_servers= $PHPFPMSPARE
320

    
321
EOF
322
else
323

    
324
	/bin/cat >> /usr/local/lib/php-fpm.conf <<EOF
325

    
326
pm = static
327
pm.max_children = $PHPFPMMAX
328
pm.max_requests = $PHPFPMREQ
329
EOF
330

    
331
fi
332

    
333
# Add status url for php-fpm this will only be made available from localhost through nginx 'allow 127.0.0.1'
334
	/bin/cat >> /usr/local/lib/php-fpm.conf <<EOF
335
pm.status_path = /status
336

    
337
EOF
338

    
339
# Remove old log file if it exists.
340
if [ -f /var/run/php_modules_load_errors.txt ]; then
341
	/bin/rm /var/run/php_modules_load_errors.txt
342
fi
343

    
344
for EXT in $PHPMODULES; do
345
	PHPMODULESLC="$PHPMODULESLC $(echo "$EXT" | /usr/bin/tr '[:upper:]' '[:lower:]')"
346
done
347

    
348
# Check loaded modules and remove anything that did not load correctly
349
LOADED_MODULES=$(/usr/local/bin/php-cgi -m | /usr/bin/tr '[:upper:]' '[:lower:]' 2>/dev/null | /usr/bin/grep -v "\[")
350
for EXT in $PHPMODULESLC; do
351
	SHOULDREMOVE="true"
352
	for LM in $LOADED_MODULES; do
353
		if [ "$EXT" = "$LM" ]; then
354
			SHOULDREMOVE="false"
355
			break
356
		fi
357
	done
358
	# Handle low memory situations
359
	if [ "$LOWMEM" = "TRUE" ]; then
360
		if [ "$EXT" = "opcache" ]; then
361
			SHOULDREMOVE="true"
362
		fi
363
		if [ "$EXT" = "xcache" ]; then
364
			SHOULDREMOVE="true"
365
		fi
366
	fi
367
	if [ "$SHOULDREMOVE" = "true" ]; then
368
		if [ -f "${EXTENSIONSDIR}${EXT}.so" ]; then
369
			echo ">>> ${EXT} did not load correctly.  Removing from php.ini..." >> /var/run/php_modules_load_errors.txt
370
			/bin/cat /usr/local/etc/php.ini | /usr/bin/grep -v $EXT > /tmp/php.ini
371
			/bin/rm -f /usr/local/etc/php.ini
372
			/bin/mv /tmp/php.ini /usr/local/etc/php.ini
373
		fi
374
	fi
375
done
(66-66/85)