Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up
for free
ウェブサービスのCentOS5撤退 / Centos5 Retiring For Web Servicies
Yuuki Tsubouchi (yuuk1)
June 28, 2016
Technology
2
470
ウェブサービスのCentOS5撤退 / Centos5 Retiring For Web Servicies
Hosting Casual Talks #3
Yuuki Tsubouchi (yuuk1)
June 28, 2016
Tweet
Share
More Decks by Yuuki Tsubouchi (yuuk1)
See All by Yuuki Tsubouchi (yuuk1)
yuukit
4
1.4k
yuukit
1
660
yuukit
0
73
yuukit
0
1.2k
yuukit
0
860
yuukit
0
300
yuukit
5
800
yuukit
0
110
yuukit
0
48
Other Decks in Technology
See All in Technology
mukai21
2
600
kanaugust
PRO
0
190
ocise
0
210
ganariya
0
380
yuyamada
9
1k
takuros
3
750
chaspy
3
1.1k
koba789
0
490
layerx
1
1k
hhiroshell
9
530
kamera25
0
120
meteatamel
0
440
Featured
See All Featured
aarron
257
36k
holman
461
280k
holman
448
130k
reverentgeek
27
1.9k
rocio
155
11k
jrom
114
7.1k
chrislema
231
16k
denniskardys
220
120k
destraynor
146
19k
swwweet
206
6.8k
myddelton
109
11k
schacon
145
6.6k
Transcript
ΣϒαʔϏεͷ $FOU04ఫୀ Z@VVLJ )PTUJOH$BTVBM
@y_uuk1 id:y_uuki ΣϒΦϖϨʔγϣϯΤϯδχΞ @ͯͳ
CentOS 5 EOL
͋ͱ9ϲ݄
EOLΕϦεΫ • ੬ऑੑରԠ͕͘͠ͳΔ • OpenSSLͳͲͷηΩϡϦςΟύονͷ͋ͨͬͨ ύοέʔδͷߋ৽͕ͳ͘ͳΔ • ֎෦αΠτͷTLSࣄʹ͍͚ͭͳ͘ͳΓɺଓ Ͱ͖ͳ͘ͳΔ •
CentOS 5ͷOpenSSL0.9.8ܥͰݹ͍ • TLS 1.2ʹඇରԠ + SNI͕͑ͳ͍ͳͲ
1000+ CentOS5 100+ roles
ରࡦ͢Δαʔόͷબ • ϦόʔεϓϩΩγ • ֎෦͔ΒଓΛड͚͚ΔɻTLSଓ͢Δͷ༏ઌ • ΞϓϦέʔγϣϯαʔόɺόοναʔόɺϫʔΧ • ͳΜΒ͔ͷϏδωεॲཧΛ࣮ߦ͢Δαʔό •
Ϋϩʔϥ֎෦APIΛୟ͘ͱ͜ΖΛ༏ઌ • ϦεΫͷ͍σʔλϕʔεޙճ͠ • ͦͷଞ֎෦ͱͷͷͳ͍ཧܥαʔόޙճ͠
ରࡦํ • ☓ ࣗͰηΩϡϦςΟύονΛ͋ͯΔ • ࠷ऴखஈͱ͍ͨ͠ • ☓ CentOS 7ʹΞοϓάϨʔυ
• ◦ ଞͷσΟετϦҠߦ • 5લ͔Β৽αʔϏεDebian
DebianԽʢϓϩΩγʣ • ݱࡏͷڥ Apache2 or Nginx • httpd.conf͕؆୯ͳͷNginx • ؆୯Ͱͳ͍ͷApache
2ͷ࠷৽൛ • 300ߦͷRewriteRule • ςετίʔυΛॻ͍ͯಈ࡞֬ೝ͢Δ
https://github.com/yuuki/ yuuki/blob/master/misc/ proxy-config-test.md
DebianԽʢΞϓϦέʔγϣϯʣ • mod_perl1, mod_perl2ΛDebianͰϏϧυ • rpmԽ͞ΕͨCPANϞδϡʔϧཧΛ cpanfileԽ • XSͳͲCͷϥΠϒϥϦʹґଘ͢Δͷ͋ ΔͨΊɺDebianͰϏϧυͰ͖Δ͔Ͳ͏͔
mod_perl1, mod_perl2ΛϏϧυ • ϏϧυͰ͖ͳ͍ͷͳΒϞμϯͳڥʢPlackʣ ʹҠߦ͢Δඞཁ͕͋Δʢͷ͘͢͝େมʣ • DockerfileͰϏϧυ͠ϑΝΠϧαʔόʹઃஔ • ChefͰ /opt/httpdʹઃஔ͢Δ͚ͩ
• Perlґଘ͕͋ΔͨΊdebύοέʔδԽ͕໘
IUUQTHJUIVCDPNZVVLJEPDLFSpMFT USFFNBTUFSNPE@QFSM
cpanfileԽ • rpm -qa perl ͔Βੜ • ҰൃͰ carton install
͕௨ΔΑ͏ʹͳ Δ·Ͱͱʹ͔͕͘ΜΔ • ಈ࡞֬ೝͯ͠ಈ͔ͳ͔ͬͨΒɺCPAN ϞδϡʔϧͷόʔδϣϯͷࠩΛٙ͏
initεΫϦϓτ vs daemontools • Systemd … • daemontoolsͰࠔ͍ͬͯͳ͍ͷͰ daemontoolsԽ •
daemontoolsมԽ͕ͳ҆͘ఆͯ͠ ͍ͯࠓޙ҆৺
ม͑ͳ͍ͷ • Perlͷόʔδϣϯ • mod_perlϝδϟʔόʔδϣϯ • Apacheϝδϟʔόʔδϣϯ • CPANϞδϡʔϧͷόʔδϣϯ •
ݹ͍ͷ͕खʹೖΒͳ͍Մೳੑ͋Δ
Ұ൪େมͳͷ ಈ࡞֬ೝ
ಈ࡞֬ೝ • ݹ͍ΞϓϦέʔγϣϯςετ͕ͳ͍ • खಈͰ͕ΜΔ • ϓϩΩγઃఆͷςετͲ͏͢Δͷ͔ • PerlͰૉʹHTTPΛୟ͘ςετΛॻ ͍ͯΔ
ೖΕସ͑࡞ۀ • ϩʔυόϥϯαԼʹ1͚ͩೖ༷͠ ࢠݟ • ΤϥʔϩάͳͲΛSlackʹྲྀ͢ • ͕ى͖ͨΒ͢ • શೖΕସ͑
Debian8ͷEOL 2020-06ʢLTSʣ
͋ͱ4
ΞοϓσʔταΠΫϧ Λճ͠ଓ͚ΔͨΊʹ
࡞ۀ༰͓͞Β͍ • ৽OS্Ͱmod_perlϏϧυ • cpanfile࡞ • αʔόͷ࡞Γ͠ͱஔ͖͑ • ΞϓϦέʔγϣϯͷಈ࡞֬ೝ •
ϓϩΩγͷಈ࡞֬ೝ
ϛυϧΣΞґଘ͠ͳ͍ςετ • Apache => nginxͷΑ͏ʹಉׂ͡ͷϛ υϧΣΞΛϦϓϨΠε͢Δ͜ͱ͕͋Δ • ઃఆϑΝΠϧΛςετ͢ΔͷͰͳ͘ɺ ֎͔ΒΈͨৼΔ͍Λςετ͢Δ •
ϓϩΩγͷ߹ɺ࣮ࡍʹϦΫΤετ͢ ΔςετΛॻ͘
ΞϓϦέʔγϣϯڥͷ • ͍·ͩͱαʔό͝ͱ৽͘͠༻ҙͯ͠ೖΕସ ͕͑ඞཁ • ݹͯ͘ࠔΔͷΞϓϦέʔγϣϯ • ΞϓϦέʔγϣϯ࣮ߦڥΛಠཱͯ͠Ξο ϓσʔτ͍ͨ͠ •
ίϯςφԽ (chrootɺDocker)
͓ΘΓ