Apache HTTP Server is an open-source web server platform. This article will outline the steps to install, configure, harden a zero-footprint instance of Apache 2.2 & 2.4, with particular focus on the nuances between each.
Prerequisites
If you are building you zero-footprint for the first time you will need a C/C++ compiler avaiable on the initial system. For the most part, most Unix/Linux distributions will come packaged with the gcc compiler.
Unix/Solaris
Check if gcc compiler is installed:
$ which gcc # which is dependent on environment variables being set correctly. # Alternatively check the /usr/bin and /usr/sfw/bin paths.
If no compiler found, install it:
$ pkg install gcc-3 # or whatever version you need
Linux
Chech if gcc compilete is installed:
$ which gcc
If no compiler found, install it:
# Debian/Ubuntu $ sudo apt-get install build-essential # RHEL/CentOS/Fedora $ sudo yum group install "Development Tools"
Initial Installation
The first step is to retrieve the source files from Apache. Grab the compressed files pertinent to the O/S you are using, typically bzip2 for Unix and gunzip for Linux:
# Change version number/archive type as required $ wget --no-check-certificate https://archive.apache.org/dist/httpd/httpd-2.2.23.tar.bz2 [ -e use-proxy=yes -e https_proxy=xxxxx ] # Apache also provides MD5 hashes to verify your downloads, so you could do the following to generate a local MD5 hash to compare wget -O - https://archive.apache.org/dist/httpd-2.4.29.tar.bz2 | tee httpd-2.2.23.tar.bz2 | md5sum > md5sum.local
Unpack the archive:
Unix/Solaris
# Use -k switch to preserve the original archive $ bzip2 -d[k] httpd-2.2.32.tar.bz2 $ tar -xvf httpd-2.2.32.tar
Linux
$ tar -xzvf httpd-2.2.32.tar.gz