getpagespeed / nginx-extras Goto Github PK

https://www.keycdn.com/blog/cache-control-immutable

ngx_immutable

Hello,

When I try to upgrade the modules from getpagespeed nginx-extras repo, it seems all the package are not signed.

This is from my /etc/yum.repos.d/getpagespeed-extras.repo

name=GetPageSpeed packages for Enterprise Linux 7 - $basearch
baseurl=https://extras.getpagespeed.com/redhat/7/$basearch/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-GETPAGESPEED

[getpagespeed-extras-noarch]
name=GetPageSpeed packages for Enterprise Linux 7 - noarch
baseurl=https://extras.getpagespeed.com/redhat/7/noarch/
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-GETPAGESPEED

[getpagespeed-extras-varnish60]
name=GetPageSpeed packages of Varnish 6.0.x for Enterprise Linux 7 - $basearch
baseurl=https://extras.getpagespeed.com/redhat/7/varnish60/$basearch/
enabled=0
gpgcheck=1
repo_gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-GETPAGESPEED

[getpagespeed-extras-nginx-mod]
name=GetPageSpeed packages with patched NGINX for Enterprise Linux 7
baseurl=https://extras.getpagespeed.com/redhat/7/nginx-mod/$basearch/
enabled=0
gpgcheck=1
repo_gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-GETPAGESPEED

[getpagespeed-extras-mainline]
name=GetPageSpeed packages of mainline NGINX for Enterprise Linux 7 - $basearch
baseurl=https://extras.getpagespeed.com/redhat/7/mainline/$basearch/
enabled=0
gpgcheck=1
repo_gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-GETPAGESPEED

Additionally from your website, from the instruction to add Metadata GPG verification
sed -i 's/gpgcheck=.*/gpgcheck=1nrepo_gpgcheck=1/' /etc/yum.repos.d/getpagespeed-extras.repo
It seems that you have missed a symbol / it should have been /nrepo_gpgcheck=1 which is a newline, or else it will trigger an error.

• https://github.com/yaoweibin/nginx_ajp_module (used own fork with dynamic module config)
• https://github.com/cubicdaiya/ngx_small_light (used own fork with the right ./config for RHEL)
• https://github.com/openresty/replace-filter-nginx-module#installation
• https://github.com/kaltura/nginx-vod-module
• https://github.com/TeslaGov/ngx-http-auth-jwt-module/blob/master/config

Changes with nginx 1.25.1 13 Jun 2023
— https://nginx.org/en/CHANGES, https://nginx.org/en/download.html

And there are no builds for 1.25.1
https://extras.getpagespeed.com/redhat/7/x86_64/repoview/nginx-module-graphite.html

I know its mainline, but NGINX recommends to use it unless you have problems:

We recommend that in general you deploy the NGINX mainline branch at all times.
— https://www.nginx.com/blog/nginx-1-6-1-7-released/

I there any alternative for the ntlm module, I have backend windows AD for authentication with the web app. is there any way i can change in vhosts or the upstreams to solve this problem
thanks :)

E.g. for removing marketing parameters (utm_).

some example on manipulating args

first it was moved back to Google from @eustas

then it is now two dynamic modules (I believe): ngx_http_brotli_filter_module.so and ngx_http_brotli_static_module.so. so im not sure how to update the soname with it

We've upgraded Nginx to 1.24 which automatically invoked update of nginx-module-lua.
An update of nginx-module-lua should invoke an update of lua-resty-core which did not happened.

Nginx started throwing:

nginx: [alert] failed to load the 'resty.core' module (https://github.com/openresty/lua-resty-core); ensure you are using an OpenResty release from https://openresty.org/en/download.html (reason: /usr/share/lua/5.1/resty/core/base.lua:24: ngx_http_lua_module 0.10.19 or 0.10.20 required) in /etc/nginx/nginx.conf:86 

We've manually upgraded lua-resty-core to 0.1.27.

OS: CentOS Linux 7 (Core)

$ rpm -qa | grep nginx
...
nginx-module-lua-1.20.2.0.10.19.0.3.1-3.el7.gps.x86_64
nginx-1.20.2-22.el7.ngx.x86_64

$ rpm -qa | grep lua
...
nginx-module-lua-1.20.2.0.10.19.0.3.1-3.el7.gps.x86_64
lua-resty-core-0.1.22-3.el7.noarch

Please add API moule to support "api write=on"

Most of the lua-resty-<library> as well as luajit2 / Lua NGINX module are available.
Build up the missing ones according to components and make available as a metapackage, e.g.:

yum install openresty

Should install all the corresponding component packages.

Pending build system for all lua-resty- modules on GitHub (way too many) - similar to nginx-extras. E.g. nginx-lua-extras

• DrizzleNginxModule
• StandardLuaInterpreter
• LuaJIT = luajit2
• ArrayVarNginxModule
• AuthRequestNginxModule (NGINX is already built with --with-http_auth_request_module)
• CoolkitNginxModule
• EchoNginxModule
• EncryptedSessionNginxModule = nginx-module-encrypted-session
• FormInputNginxModule = nginx-module-form-input
• HeadersMoreNginxModule
• IconvNginxModule
• MemcNginxModule
• Nginx
• NginxDevelKit
• LuaCjsonLibrary
• LuaNginxModule
• LuaRdsParserLibrary = lua-rds-parser or lua5.1-rds-parser
• LuaRedisParserLibrary
• LuaRestyCoreLibrary = lua-resty-core
• LuaRestyDNSLibrary = lua-resty-dns
• LuaRestyLockLibrary = lua-resty-lock
• LuaRestyLrucacheLibrary = lua-resty-lrucache
• LuaRestyMemcachedLibrary = lua-resty-memcached
• LuaRestyMySQLLibrary
• LuaRestyRedisLibrary = lua-resty-redis
• LuaRestyStringLibrary = lua-resty-string
• LuaRestyUploadLibrary = lua-resty-upload
• LuaRestyUpstreamHealthcheckLibrary = lua-resty-upstream-healthcheck
• LuaRestyWebSocketLibrary = lua-resty-websocket
• LuaRestyLimitTrafficLibrary = lua-resty-limit-traffic
• LuaRestyShellLibrary = lua-resty-shell
• LuaRestySignalLibrary = lua-resty-signal
• LuaTablePoolLibrary
• LuaUpstreamNginxModule
• OPM
• PostgresNginxModule
• RdsCsvNginxModule
• RdsJsonNginxModule
• RedisNginxModule
• Redis2NginxModule
• RestyCLI
• SetMiscNginxModule
• SrcacheNginxModule
• StreamLuaNginxModule = nginx-module-stream-lua
• XssNginxModule = nginx-module-xss

Please add support for Docker and please add an official Docker image for NGINX Extras (that installs NGINX or NGINX-Mod and configures repositories).

It is based on rtmp, and has conditionals for OpenSSL version, thus it won't work with nginx-mod,
unless there is nginx-mod specific package done for it.

After installing and enabling getpagespeed-extras, when I try to install anything (like nginx-module-cache-purge), I get an error, which includes this:

"Error importing repomd.xml for getpagespeed-extras-mainline: Damaged repomd.xml file"

Researching, this page says it costs $10/month to get it working (https://www.getpagespeed.com/repo-subscribe). Is it only available by subscription this way? Or how can I fix the issue?

Thanks!

Would you mind adding a step for importing your RPM key? Thank you.

$ sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm
Loaded plugins: extras_suggestions, langpacks, priorities, update-motd, versionlock
release-latest.rpm                                                                                                                                                                                             |  18 kB  00:00:00     
Examining /var/tmp/yum-root-RAKib5/release-latest.rpm: 1:getpagespeed-extras-release-11-38.noarch
Marking /var/tmp/yum-root-RAKib5/release-latest.rpm to be installed
Resolving Dependencies
--> Running transaction check
---> Package getpagespeed-extras-release.noarch 1:11-38 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

======================================================================================================================================================================================================================================
 Package                                                              Arch                                            Version                                          Repository                                                Size
======================================================================================================================================================================================================================================
Installing:
 getpagespeed-extras-release                                          noarch                                          1:11-38                                          /release-latest                                          8.5 k

Transaction Summary
======================================================================================================================================================================================================================================
Install  1 Package

Total size: 8.5 k
Installed size: 8.5 k
Downloading packages:
warning: /var/tmp/yum-root-RAKib5/release-latest.rpm: Header V4 RSA/SHA1 Signature, key ID 222b0e83: NOKEY

Package ipscrub module

I'm getting the following error when running sudo yum update:

getpagespeed-extras | 25 kB 00:00:00
https://extras.getpagespeed.com/redhat/7/x86_64/repodata/repomd.xml: [Errno -1] Error importing repomd.xml for getpagespeed-extras: Damaged repomd.xml file
Trying other mirror.

I don't seem to have a problem with just downloading the file:

$ wget https://extras.getpagespeed.com/redhat/7/noarch/repodata/repomd.xml
--2019-11-11 10:43:27--  https://extras.getpagespeed.com/redhat/7/noarch/repodata/repomd.xml
Resolving extras.getpagespeed.com (extras.getpagespeed.com)... 104.18.48.227, 104.18.49.227
Connecting to extras.getpagespeed.com (extras.getpagespeed.com)|104.18.48.227|:443... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: https://www.getpagespeed.com/repo-subscribe?server_ip=192.110.153.20 [following]
--2019-11-11 10:43:28--  https://www.getpagespeed.com/repo-subscribe?server_ip=192.110.153.20
Resolving www.getpagespeed.com (www.getpagespeed.com)... 45.79.86.10
Connecting to www.getpagespeed.com (www.getpagespeed.com)|45.79.86.10|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 27249 (27K) [text/html]
Saving to: ‘repomd.xml’

100%[================================================================================================================================================================>] 27,249      --.-K/s   in 0.05s

2019-11-11 10:43:28 (524 KB/s) - ‘repomd.xml’ saved [27249/27249]