Phpipam¶

sudo yum update -y
sudo yum install -y httpd mariadb-server php php-cli php-gd php-common php-ldap php-pdo php-pear php-snmp php-xml php-mysql git
// 日本語ローカル
sudo yum install -y php-mbstring

sudo sed -i -e "s|;date.timezone =|date.timezone = Asia/Tokyo|" /etc/php.ini
sudo sed -i -e "s|;mbstring.language = Japanese|mbstring.language = Japanese|" /etc/php.ini
sudo sed -i -e "s|;mbstring.internal_encoding = EUC-JP|mbstring.internal_encoding = UTF-8|" /etc/php.ini
sudo sed -i -e "s|;mbstring.http_input = auto|mbstring.http_input = auto|" /etc/php.ini
sudo sed -i -e "s|;mbstring.detect_order = auto|mbstring.detect_order = auto|" /etc/php.ini

sudo systemctl enable httpd
sudo systemctl start httpd
sudo systemctl enable mariadb
sudo systemctl start mariadb
sudo mysql_secure_installation

sudo firewall-cmd --permanent --add-service=http
sudo firewall-cmd --permanent --add-service=https
sudo firewall-cmd --permanent --add-service=dns
sudo firewall-cmd --reload

sudo git clone -b 1.3 https://github.com/phpipam/phpipam.git /var/www/html/phpipam
sudo chown apache:apache -R /var/www/html/phpipam
sudo restorecon -RFv /var/www/html/phpipam
sudo cp /var/www/html/phpipam/config.dist.php /var/www/html/phpipam/config.php

// SELinux有効下で httpd_t が tclass=rawip_socket を叩けない
// https://phpipam.net/news/selinux-policy-for-icmp-checks/
sudo yum install -y policycoreutils-python
vi http_ping.tt

module http_ping 1.0;

require {
    type httpd_t;
    class capability net_raw;
    class rawip_socket { getopt create setopt write read };
}

#============= httpd_t ==============
allow httpd_t self:capability net_raw;
allow httpd_t self:rawip_socket { getopt create setopt write read };

checkmodule -M -m -o http_ping.mod http_ping.tt
semodule_package -o http_ping.pp -m http_ping.mod
sudo semodule -i http_ping.pp