Puppet Class: apache::mod::itk

Defined in:
manifests/mod/itk.pp

Summary

Installs MPM `mod_itk`.

Overview

Note:

Unsupported platforms: CentOS: 8; RedHat: 8, 9; SLES: all

Parameters:

  • startservers (Integer) (defaults to: 8) —

    Number of child server processes created on startup.

  • minspareservers (Integer) (defaults to: 5) —

    Minimum number of idle child server processes.

  • maxspareservers (Integer) (defaults to: 20) —

    Maximum number of idle child server processes.

  • serverlimit (Integer) (defaults to: 256) —

    Maximum configured value for ‘MaxRequestWorkers` for the lifetime of the Apache httpd process.

  • maxclients (Integer) (defaults to: 256) —

    Limit on the number of simultaneous requests that will be served.

  • maxrequestsperchild (Integer) (defaults to: 4000) —

    Limit on the number of connections that an individual child server process will handle.

  • enablecapabilities (Optional[Variant[Boolean, String]]) (defaults to: undef) —

    Drop most root capabilities in the parent process, and instead run as the user given by the User/Group directives with some extra capabilities (in particular setuid). Somewhat more secure, but can cause problems when serving from filesystems that do not honor capabilities, such as NFS.

  • apache_version (Optional[String]) (defaults to: undef) —

    Used to verify that the Apache version you have requested is compatible with the module.

See Also:



32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
 
# File 'manifests/mod/itk.pp', line 32

class apache::mod::itk (
  Integer $startservers                                  = 8,
  Integer $minspareservers                               = 5,
  Integer $maxspareservers                               = 20,
  Integer $serverlimit                                   = 256,
  Integer $maxclients                                    = 256,
  Integer $maxrequestsperchild                           = 4000,
  Optional[Variant[Boolean, String]] $enablecapabilities = undef,
  Optional[String] $apache_version                       = undef,
) {
  include apache

  $_apache_version = pick($apache_version, $apache::apache_version)

  if defined(Class['apache::mod::event']) {
    fail('May not include both apache::mod::itk and apache::mod::event on the same node')
  }
  if defined(Class['apache::mod::peruser']) {
    fail('May not include both apache::mod::itk and apache::mod::peruser on the same node')
  }
  if versioncmp($_apache_version, '2.4') < 0 {
    if defined(Class['apache::mod::prefork']) {
      fail('May not include both apache::mod::itk and apache::mod::prefork on the same node')
    }
  } else {
    # prefork is a requirement for itk in 2.4; except on FreeBSD and Gentoo, which are special
    if $facts['os']['family'] =~ /^(FreeBSD|Gentoo)/ {
      if defined(Class['apache::mod::prefork']) {
        fail('May not include both apache::mod::itk and apache::mod::prefork on the same node')
      }
    } else {
      if ! defined(Class['apache::mod::prefork']) {
        include apache::mod::prefork
      }
    }
  }
  if defined(Class['apache::mod::worker']) {
    fail('May not include both apache::mod::itk and apache::mod::worker on the same node')
  }
  File {
    owner => 'root',
    group => $apache::params::root_group,
    mode  => $apache::file_mode,
  }

  # Template uses:
  # - $startservers
  # - $minspareservers
  # - $maxspareservers
  # - $serverlimit
  # - $maxclients
  # - $maxrequestsperchild
  file { "${apache::mod_dir}/itk.conf":
    ensure  => file,
    mode    => $apache::file_mode,
    content => template('apache/mod/itk.conf.erb'),
    require => Exec["mkdir ${apache::mod_dir}"],
    before  => File[$apache::mod_dir],
    notify  => Class['apache::service'],
  }

  case $facts['os']['family'] {
    'redhat': {
      package { 'httpd-itk':
        ensure => present,
      }
      if versioncmp($_apache_version, '2.4') >= 0 {
        ::apache::mpm { 'itk':
          apache_version => $_apache_version,
        }
      }
      else {
        file_line { '/etc/sysconfig/httpd itk enable':
          ensure  => present,
          path    => '/etc/sysconfig/httpd',
          line    => 'HTTPD=/usr/sbin/httpd.itk',
          match   => '#?HTTPD=/usr/sbin/httpd.itk',
          require => Package['httpd'],
          notify  => Class['apache::service'],
        }
      }
    }
    'debian', 'freebsd': {
      apache::mpm { 'itk':
        apache_version => $_apache_version,
      }
    }
    'gentoo': {
      ::portage::makeconf { 'apache2_mpms':
        content => 'itk',
      }
    }
    default: {
      fail("Unsupported osfamily ${$facts['os']['family']}")
    }
  }
}