{"id":2334,"date":"2019-09-13T12:40:20","date_gmt":"2019-09-13T12:40:20","guid":{"rendered":"http:\/\/ekozel.com\/?p=2334"},"modified":"2020-11-28T05:47:07","modified_gmt":"2020-11-28T10:47:07","slug":"install-debian-9-with-php-5-6-and-mysql-8","status":"publish","type":"post","link":"https:\/\/ekozel.com\/2019\/09\/13\/install-debian-9-with-php-5-6-and-mysql-8\/","title":{"rendered":"Install Debian 9 with PHP 5.6 and MySQL 8"},"content":{"rendered":"\n

Due to the fact that php5.6-curl only works with libcurl3 and Debian 10 is shipped with libcurl4 with no option to downgrade lib curl, it appears you can only use Debian 9 when wanting to use the old PHP 5.6 and curl extensions.<\/p>\n\n\n\n

Install updates for Debian<\/p>\n\n\n\n

apt-get update<\/pre>\n\n\n\n
followed by<\/p>\n\n\n\n
apt-get dist-upgrade<\/pre>\n\n\n\n
sudo: command not found<\/h2>\n\n\n\n
After installation of Debian 9.11 and you try to install a package you might get the message: bash: sudo: command not found<\/em><\/p>\n\n\n\n
To install sudo, run the following:<\/p>\n\n\n\n
su<\/code><\/p>\n\n\n\n
apt-get install sudo<\/code><\/p>\n\n\n\n
Give the user the right to run sudo<\/p>\n\n\n\n
usermod -aG sudo username<\/code><\/p>\n\n\n\n
Log out the user to refresh the group permissions of the user<\/p>\n\n\n\n
Reference: https:\/\/chewett.co.uk\/blog\/477\/sudo-command-not-found-debian-fixed\/<\/p>\n\n\n\n
Install the firewall ufw on Debian<\/h2>\n\n\n\n
Run the package installer:<\/p>\n\n\n\n
sudo apt-get install ufw<\/code><\/p>\n\n\n\n
To configure your server to allow incoming SSH connections, use this command:<\/p>\n\n\n\n
sudo ufw allow ssh<\/code><\/pre>\n\n\n\n
Enable the firewall<\/p>\n\n\n\n
sudo ufw enable<\/code><\/p>\n\n\n\n
Reference: https:\/\/www.tecmint.com\/how-to-install-and-configure-ufw-firewall\/<\/p>\n\n\n\n
Install the Apache Web Server<\/h2>\n\n\n\n
Update the local package index to reflect the latest upstream changes:<\/p>\n\n\n\n
sudo apt update<\/code><\/p>\n\n\n\n
Install the apache2 package<\/p>\n\n\n\n
sudo apt install apache2<\/code><\/p>\n\n\n\n
Configure the firewall for port 80<\/p>\n\n\n\n
sudo ufw allow in 'WWW Full'<\/code><\/p>\n\n\n\n
On your local computer you can check ‘localhost’ in the browser to see if Apache is running.<\/p>\n\n\n\n
To test the install from another computer find the IP address of the server with:<\/p>\n\n\n\n
ip addr show<\/code><\/p>\n\n\n\n
Reference: https:\/\/www.digitalocean.com\/community\/tutorials\/how-to-install-the-apache-web-server-on-debian-9<\/p>\n\n\n\n
Install MYSQL 8.0<\/h2>\n\n\n\n
MySQL 8.0 packages are available on the official MySQL Dev apt repository<\/p>\n\n\n\n
sudo apt -y  install wget
wget https:\/\/repo.mysql.com\/\/mysql-apt-config_0.8.13-1_all.deb
sudo dpkg -i mysql-apt-config_0.8.13-1_all.deb<\/code><\/p>\n\n\n\n
If you get an error message “lsb-release is not installed.” –  run the following:<\/p>\n\n\n\n
sudo apt-get update\nsudo apt-get install lsb-release<\/pre>\n\n\n\n
sudo apt update
sudo apt -y install mysql-server<\/code><\/p>\n\n\n\n
Reference: https:\/\/computingforgeeks.com\/how-to-install-mysql-8-0-on-debian\/<\/p>\n\n\n\n
Update the my.cnf file<\/h3>\n\n\n\n
Add the following information (depends based on your own requirements)
Setting innodb_dedicated_server=1 is an important one.<\/p>\n\n\n\n
sudo nano \/etc\/mysql\/my.cnf<\/code><\/p>\n\n\n\n
[mysqld]\ndefault_authentication_plugin=mysql_native_password\ncollation-server=utf8_unicode_ci\ncharacter-set-server=utf8\ninnodb_dedicated_server=1\ninnodb_flush_log_at_trx_commit=1\nsync_binlog=1\nlocal_infile=1\nsql-mode=\"TRADITIONAL\"\n[client]\nlocal_infile=1<\/code><\/pre>\n\n\n\n
Install PHP5.6<\/h2>\n\n\n\n
sudo apt update\n\nsudo apt upgrade\n\nsudo apt install ca-certificates apt-transport-https\n\nwget -q https:\/\/packages.sury.org\/php\/apt.gpg -O- | sudo apt-key add -\n\necho \"deb https:\/\/packages.sury.org\/php\/ stretch main\" | sudo tee \/etc\/apt\/sources.list.d\/php.list\n\nsudo apt update\nsudo apt install php5.6\n\nsudo apt install php5.6-cli php5.6-common php5.6-curl php5.6-mbstring php5.6-mysqlnd php5.6-xml<\/code><\/pre>\n\n\n\n
Create a PHP Info page to see if it is all working.<\/p>\n\n\n\n
sudo nano \/var\/www\/html\/info.php<\/code><\/p>\n\n\n\n
Type in:<\/p>\n\n\n\n
<?php phpinfo(); ?><\/code><\/p>\n\n\n\n
Enter ctrl+x, y and enter<\/p>\n\n\n\n
In your browser go to your https:\/\/webserver\/info.php<\/p>\n\n\n\n
Reference: https:\/\/tecadmin.net\/install-php-debian-9-stretch\/<\/a><\/p>\n\n\n\n
Install phpMyAdmin<\/h2>\n\n\n\n
sudo nano \/etc\/mysql\/my.cnf<\/p>\n\n\n\n
Add the following lines:<\/p>\n\n\n\n
[mysqld]
 default_authentication_plugin=mysql_native_password
 collation-server=utf8_unicode_ci
 character-set-server=utf8<\/code><\/p>\n\n\n\n
Restart mysql server<\/p>\n\n\n\n
sudo service mysql restart<\/code><\/p>\n\n\n\n
Install phpmyadmin with<\/p>\n\n\n\n
sudo apt install phpmyadmin php-mbstring php-gettext<\/code><\/p>\n\n\n\n
<\/code><\/pre>\n\n\n\n
Select apache2 by pressing SPACE, TAB and then enter<\/p>\n\n\n\n
Configure database for phpmyadmin with dbconfig-common?<\/p>\n\n\n\n
Choose no, as the installer will fail<\/p>\n\n\n\n
Login to phpmyadmin with root<\/p>\n\n\n\n
http:\/\/webserver\/phpmyadmin<\/p>\n\n\n\n
Create a new database called phpmyadmin, click on the Operations tab<\/p>\n\n\n\n
Click ‘Create the phpMyAdmin configuration storage<\/p>\n\n\n\n
Create an user called phpmyadmin<\/p>\n\n\n\n
Choose ‘Native MySQL authentication’<\/p>\n\n\n\n
For some reason after adding the user an error was generated, click on the phpmyadmin user, reenter the password and flush privileges.<\/p>\n\n\n\n
Give user phpmyadmin full privileges to the database phpmyadmin<\/p>\n\n\n\n
Setup SFTP<\/h2>\n\n\n\n
Using this method with the least amount of configuration, we will create a\u00a0Match User<\/code>\u00a0directive in the SSH config and add your SFTP user to the\u00a0www-data<\/code>\u00a0group.<\/p>\n\n\n\n
Create user <\/p>\n\n\n\n
sudo adduser webdev<\/code><\/pre>\n\n\n\n
Add Match User<\/code> Directive in SSH Config<\/h3>\n\n\n\n
Restrict the user webdev<\/code> to the document root and also disable their SSH access \u2013 we only want them to be able to log in over SFTP. We can do this by adding a Match User<\/code> directive in the SSH config file.<\/p>\n\n\n\n
Begin by opening sshd_config<\/code>.<\/p>\n\n\n\n
sudo nano \/etc\/ssh\/sshd_config<\/code><\/pre>\n\n\n\n
Scroll down to the bottom of the SSH config file and add your new Match User<\/code> directive.<\/p>\n\n\n\n
Make sure that ChrootDirectory<\/code> is the directory above<\/strong> your document root. For example, if your document root is \/var\/www\/html\/<\/code>, then the ChrootDirectory<\/code> is \/var\/www\/<\/code>.<\/p>\n\n\n\n
If you followed one of our previous guides on hosting multiple domains on Apache or Nginx, your document root may be located in \/var\/www\/mydomain.com\/public_html<\/code>, in that case, your ChrootDirectory<\/code> would be \/var\/www\/mydomain.com\/<\/code>.<\/p>\n\n\n\n
Note you can add multiple users here separated by a comma, e.g. Match User webdev, webdev2, webdev3<\/code>\/etc\/ssh\/sshd_config<\/p>\n\n\n\n
Match User webdev \n        ChrootDirectory \/var\/www\/\n        ForceCommand internal-sftp \n        X11Forwarding no \n        AllowTcpForwarding no \n        PasswordAuthentication yes<\/code><\/pre>\n\n\n\n
Save and exit (press CTRL<\/code> + X<\/code>, press Y<\/code> and then press ENTER<\/code>)<\/p>\n\n\n\n
Test SSH config before restarting.<\/p>\n\n\n\n
sudo sshd -t<\/code><\/pre>\n\n\n\n
If no errors, restart the sshd<\/code> service for changes to take affect.<\/p>\n\n\n\n
sudo service sshd restart<\/code><\/pre>\n\n\n\n
Setup SFTP<\/h2>\n\n\n\n
Add SFTP User to www-data<\/code><\/h3>\n\n\n\n
Add your SFTP user webdev<\/code> to the www-data<\/code> group.<\/p>\n\n\n\n
sudo usermod -a -G www-data webdev<\/code><\/pre>\n\n\n\n
Note: Linux groups do not take affect until the user logs out and in again. If you are already logged in as this user in your FTP client, close the program completely and then log in again.<\/p>\n\n\n\n
Set Directory Permissions<\/h3>\n\n\n\n
SFTP is very strict when it comes to chroot directory permissions and if they are not set correctly, you will not be able to login.<\/p>\n\n\n\n