Summary

TheOpenBSD 🐡 project and their community support Web service packages including those ofPHP very well, thankfully.

The PHP core package is offered as pre-compiled binary viaPorts packages system. In addition, important softwares such asextensions,Composer andPECL libraries are available. So are frameworks such asNextCloud andZabbix.

Moreover, when it is integrated with OpenBSDhttpd, itschroot helps to keep servers secure. Of course, it is also able to additionally integrate them withrelayd.

Well,PHP-FPM, PHP FastCGI Process Manager, is a part of PHP package in OpenBSD packages.
Installing PHP (php-?.? due to the version), therefore, comes withphp??_fpm automatically 🙌

This post shows how to install it and configure as a server.

Environment

• OS: OpenBSD7.3
• Web: OpenBSD httpd
  • Reference:How to set it up
• PHP:8.2 with PHP-FPM

Tutorial

Install PHP

First, install the main package:

$doas pkg_add php

You will be asked:

quirks-6.121 signed on 2023-08-02T17:33:30ZAmbiguous: choose package for phpa   0: <None>    1: php-7.4.33p0    2: php-8.0.29    3: php-8.1.22    4: php-8.2.9Your choice:

Choose "4" for 8.2.
Besides, you can check the lifetime of each versionhere.

The result was:

php-8.2.9:capstone-4.0.2: okphp-8.2.9:femail-1.0p1: okphp-8.2.9:femail-chroot-1.0p3: okphp-8.2.9:libsodium-1.0.18p1: okphp-8.2.9:argon2-20190702: okphp-8.2.9:oniguruma-6.9.8: okphp-8.2.9: okThe following new rcscripts were installed: /etc/rc.d/php82_fpmSee rcctl(8) for details.New and changed readme(s):    /usr/local/share/doc/pkg-readmes/femail-chroot    /usr/local/share/doc/pkg-readmes/php-8.2

You must seephp82_fpm come along withphp-8.2 !!

Configure PHP

These directories/files are generated:

$ls /etc/php*/etc/php-8.2.ini    /etc/php-fpm.conf/etc/php-8.2:/etc/php-8.2.sample:opcache.ini/etc/php-fpm.d:

Edit.ini or.conf file(s) as needed.

Editing examples (Optional)

Edit:

$doas nvim /etc/php-8.2.ini

like:

- post_max_size = 8M+ post_max_size = 30M  (...)- upload_max_filesize = 2M+ upload_max_filesize = 24M  (...)- allow_url_fopen = Off+ ; for composer; disabled in php-fpm+ allow_url_fopen = On

Also, edit:

$doas nvim /etc/php-fpm.conf

to append to the bottom:

+ ; set On in php.ini for composer, therefore:+ php_admin_value[allow_url_fopen] = Off

Activate extensions (Optional)

The file(s) in/etc/php-8.2.sample are PHP extensions such asopcache.ini.
According to your necessity, create symbolic link to each of them in/etc/php-8.2/, which will activate the extension(s):

$doasln-sf /etc/php-8.2.sample/${ini} /etc/php-8.2/

For small reference, with more files which have to be dealt with, you can use loop-processing with your shell 😉 For examples:

$# case ksh:$forxin$(ls /etc/php-8.2.sample/*);dodoasln-sf$x /etc/php-8.2/;done$# case fish:$forxin /etc/php-8.2.sample/*; doasln-sf$x /etc/php-8.2/; end

Configure PHP-FPM

OK. We're almost ready for launching PHP service.

The PHP pkg-readme, which was obtanined as/usr/local/share/doc/pkg-readmes/php-8.2 in installation, says:

The main OpenBSD php packages include php-fpm, FastCGI Process Manager.
This manages pools of FastCGI processes: starts/restarts them and
maintains a minimum and maximum number of spare processes as
configured. You can use rcctl(8) to enable php-fpm at boot,
and start it at runtime:

rcctl enable php82_fpm

rcctl start php82_fpm

Let's activate the daemon:

$doas rcctlenablephp82_fpm

For another small reference, it appends or modifies the line in/etc/rc.conf.local:

+ pkg_scripts=(...) php82_fpm (...)

Now it's time to start the daemon:

$doas rcctl start php82_fpm

The result was:

php82_fpm(ok)

Yay 😄

Set up/var/www/etc (Optional)

It is sometimes required on not only PHP but also web apps.

Set up/var/www/etc, which isetc underchroot, as below, for example, so that name resolution or TLS connection is enabled:

$ ls -lR /var/www/etc/var/www/etc:total 16-rw-r--r--  1 root  daemon   35 Aug 03 00:00 hosts-r--r--r--  1 root  daemon  292 Aug 03 00:00 localtime-rw-r--r--  1 root  daemon   99 Aug 03 00:00 resolv.confdrwxr-xr-x  2 root  daemon  512 Aug 03 00:00 ssl//var/www/etc/ssl:total 708-r--r--r--  1 root  daemon  341121 Aug 03 00:00 cert.pem-r--r--r--  1 root  daemon     745 Aug 03 00:00 openssl.cnf

Integration with web server

Next, we have to set up a web server for them.

Only if you haven't configured httpd, copy the.conf file from the examples OpenBSD offers as below:

$doascp-p /etc/examples/httpd.conf /etc/

Well, edit/etc/httpd.conf to addfastcgi socket definitions in someSERVERS section like this:

server "default" {listenon * port 80#listen on * port 443    root "/htdocs"directory index index.phplocation "/*.php" {        fastcgi socket "/run/php-fpm.sock"}location "/*.php[/?]*" {        fastcgi socket "/run/php-fpm.sock"}}

Note thatchroot works in this context 💡
Therefore,fastcgi socket "/run/php-fpm.sock" in/etc/httpd.conf actually meansfastcgi socket "/var/www/run/php-fpm.sock".
This is the same to thatroot "/htdocs" means"/var/www/htdocs".

Actually, there is:

$ls-l /var/www/runtotal 0srw-rw----  1 www  www  0 Aug 03 00:01 php-fpm.sock=

Concolusion

Let's make/var/www/htdocs/index.php for testing:

$echo"<?php phpinfo(1); ?>" |\      doas tee "/var/www/htdocs/index.php" >> /dev/null$# delete it afterwards:$#doas rm /var/www/htdocs/index.php

Connecting to your host with browser will show the general information !!

Here comes PHP 8.2 on OpenBSD 7.3 🌻

Happy serving 🕊🕊