Build configurations: Porovnání verzí

Z Waritkova wiki
Skočit na navigaci Skočit na vyhledávání
 
(Není zobrazeno 7 mezilehlých verzí od stejného uživatele.)
Řádek 1: Řádek 1:
 
=== Nginx ===
 
=== Nginx ===
<source lang="bash">./configure --prefix=/opt/nginx --with-ipv6 --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_sub_module --with-http_gzip_static_module  --with-http_perl_module --with-http_degradation_module --with-openssl=../openssl</source>
+
<source lang="bash">./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_sub_module --with-http_gzip_static_module  --with-http_perl_module --with-http_degradation_module --with-openssl=../openssl</source>
 +
 
 +
==== With LUA module ====
 +
<source lang="bash">CC="gcc -march=native" ./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2 -I ../openssl/.openssl/include/" --with-ld-opt="-L ../boringssl/.openssl/lib" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_sub_module --with-http_gzip_static_module  --with-http_perl_module --with-http_degradation_module --with-openssl=../openssl --add-module=../ngx_devel_kit/ --add-module=../lua-nginx-module/ --add-module=../ngx-fancyindex/</source>
 +
 
 +
==== With LUA module - openssl ====
 +
<source lang="bash">CC="gcc -march=native" ./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_sub_module --with-http_gzip_static_module  --with-http_perl_module --with-http_degradation_module --with-openssl=../boringssl --add-module=../ngx_devel_kit/ --add-module=../lua-nginx-module/ --add-module=../ngx-fancyindex/ --add-module=../ngx_brotli/ --add-module=../set-misc-nginx-module-0.31/ --with-openssl-opt=enable-tls1_3</source>
 +
 
 +
==== BoringSSL ====
 +
<source lang="bash">mkdir build
 +
cd build/
 +
cmake ..
 +
make
 +
BUILDROOT=/root/build
 +
mkdir -p "$BUILDROOT/boringssl/.openssl/lib"
 +
cd "$BUILDROOT/boringssl/.openssl"
 +
ln -s ../include include
 +
cd "$BUILDROOT/boringssl"
 +
cp "build/crypto/libcrypto.a" ".openssl/lib"
 +
cp "build/ssl/libssl.a" ".openssl/lib"
 +
touch "$BUILDROOT/boringssl/.openssl/include/openssl/ssl.h"</source>
 +
 
 +
==== MITM ====
 +
<source lang="bash">CC="gcc -march=native" ./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_sub_module --with-http_gzip_static_module --with-http_degradation_module --add-module=../ngx_devel_kit/ --add-module=../lua-nginx-module/ --add-module=../ngx-fancyindex/ --add-module=../ngx_brotli/ --with-cc-opt="-I /usr/include/luajit-2.0"</source>

Aktuální verze z 21. 5. 2019, 09:36

Nginx

./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_sub_module --with-http_gzip_static_module  --with-http_perl_module --with-http_degradation_module --with-openssl=../openssl

With LUA module

CC="gcc -march=native" ./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2 -I ../openssl/.openssl/include/" --with-ld-opt="-L ../boringssl/.openssl/lib" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_sub_module --with-http_gzip_static_module  --with-http_perl_module --with-http_degradation_module --with-openssl=../openssl --add-module=../ngx_devel_kit/ --add-module=../lua-nginx-module/ --add-module=../ngx-fancyindex/

With LUA module - openssl

CC="gcc -march=native" ./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_sub_module --with-http_gzip_static_module  --with-http_perl_module --with-http_degradation_module --with-openssl=../boringssl --add-module=../ngx_devel_kit/ --add-module=../lua-nginx-module/ --add-module=../ngx-fancyindex/ --add-module=../ngx_brotli/ --add-module=../set-misc-nginx-module-0.31/ --with-openssl-opt=enable-tls1_3

BoringSSL

mkdir build
cd build/
cmake ..
make
BUILDROOT=/root/build
mkdir -p "$BUILDROOT/boringssl/.openssl/lib"
cd "$BUILDROOT/boringssl/.openssl"
ln -s ../include include
cd "$BUILDROOT/boringssl"
cp "build/crypto/libcrypto.a" ".openssl/lib"
cp "build/ssl/libssl.a" ".openssl/lib"
touch "$BUILDROOT/boringssl/.openssl/include/openssl/ssl.h"

MITM

CC="gcc -march=native" ./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_sub_module --with-http_gzip_static_module --with-http_degradation_module --add-module=../ngx_devel_kit/ --add-module=../lua-nginx-module/ --add-module=../ngx-fancyindex/ --add-module=../ngx_brotli/ --with-cc-opt="-I /usr/include/luajit-2.0"