View difference between Paste ID: xL8s0px6 and VYm7ZRRc
SHOW: | | - or go back to the newest paste.
1
[saatvik@BlackSheep ~]$ ssh [email protected]
2
[email protected]'s password: 
3
Last login: Sat Jan 16 17:37:29 2016 from 45.114.61.152
4
[root@TheLegacyServer ~]# sudo yum install httpd mod_ssl
5
Loaded plugins: fastestmirror
6
Loading mirror speeds from cached hostfile
7
 * base: ftp.plusline.de
8
 * epel: mirrors.n-ix.net
9-
.
9+
 * extras: ftp.plusline.de
10-
. skipped installation detail
10+
 * updates: ftp.plusline.de
11-
.
11+
Resolving Dependencies
12-
.
12+
--> Running transaction check
13
---> Package httpd.x86_64 0:2.4.6-40.el7.centos will be installed
14
--> Processing Dependency: httpd-tools = 2.4.6-40.el7.centos for package: httpd-2.4.6-40.el7.centos.x86_64
15
--> Processing Dependency: /etc/mime.types for package: httpd-2.4.6-40.el7.centos.x86_64
16
---> Package mod_ssl.x86_64 1:2.4.6-40.el7.centos will be installed
17
--> Running transaction check
18
---> Package httpd-tools.x86_64 0:2.4.6-40.el7.centos will be installed
19-
/* file contents*/
19+
---> Package mailcap.noarch 0:2.1.41-2.el7 will be installed
20
--> Finished Dependency Resolution
21-
ProxyPass         /  http://localhost:8080/ nocanon
21+
22-
ProxyPassReverse  /  http://localhost:8080/
22+
Dependencies Resolved
23-
ProxyRequests     Off
23+
24-
AllowEncodedSlashes NoDecode
24+
=====================================================================================================================================================
25
 Package                             Arch                           Version                                       Repository                    Size
26-
# Local reverse proxy authorization override
26+
=====================================================================================================================================================
27-
<Proxy http://localhost:8080/*>
27+
Installing:
28-
  Order deny,allow
28+
 httpd                               x86_64                         2.4.6-40.el7.centos                           base                         2.7 M
29-
  Allow from all
29+
 mod_ssl                             x86_64                         1:2.4.6-40.el7.centos                         base                         103 k
30-
</Proxy>
30+
Installing for dependencies:
31
 httpd-tools                         x86_64                         2.4.6-40.el7.centos                           base                          82 k
32-
// 8080 is the current port where jenkins is listening
32+
 mailcap                             noarch                         2.1.41-2.el7                                  base                          31 k
33-
/*  content end */ 
33+
34
Transaction Summary
35-
[root@TheLegacyServer jenkins]# setsebool -P httpd_can_network_connect true // Only needed if selinux is enabled
35+
=====================================================================================================================================================
36
Install  2 Packages (+2 Dependent packages)
37
38
Total download size: 2.9 M
39-
Redirecting to /bin/systemctl restart  httpd.service
39+
Installed size: 9.8 M
40
Is this ok [y/d/N]: y
41
Is this ok [y/d/N]: y
42
Downloading packages:
43
(1/4): httpd-tools-2.4.6-40.el7.centos.x86_64.rpm                                                                             |  82 kB  00:00:00     
44
(2/4): httpd-2.4.6-40.el7.centos.x86_64.rpm                                                                                   | 2.7 MB  00:00:00     
45
(3/4): mailcap-2.1.41-2.el7.noarch.rpm                                                                                        |  31 kB  00:00:00     
46
(4/4): mod_ssl-2.4.6-40.el7.centos.x86_64.rpm                                                                                 | 103 kB  00:00:00     
47
-----------------------------------------------------------------------------------------------------------------------------------------------------
48
Total                                                                                                                5.2 MB/s | 2.9 MB  00:00:00     
49
Running transaction check
50
Running transaction test
51
Transaction test succeeded
52
Running transaction
53
  Installing : httpd-tools-2.4.6-40.el7.centos.x86_64                                                                                            1/4 
54
  Installing : mailcap-2.1.41-2.el7.noarch                                                                                                       2/4 
55
  Installing : httpd-2.4.6-40.el7.centos.x86_64                                                                                                  3/4 
56
  Installing : 1:mod_ssl-2.4.6-40.el7.centos.x86_64                                                                                              4/4 
57
  Verifying  : httpd-2.4.6-40.el7.centos.x86_64                                                                                                  1/4 
58
  Verifying  : mailcap-2.1.41-2.el7.noarch                                                                                                       2/4 
59
  Verifying  : 1:mod_ssl-2.4.6-40.el7.centos.x86_64                                                                                              3/4 
60
  Verifying  : httpd-tools-2.4.6-40.el7.centos.x86_64                                                                                            4/4 
61
62
Installed:
63
  httpd.x86_64 0:2.4.6-40.el7.centos                                       mod_ssl.x86_64 1:2.4.6-40.el7.centos                                      
64
65
Dependency Installed:
66
  httpd-tools.x86_64 0:2.4.6-40.el7.centos                                       mailcap.noarch 0:2.1.41-2.el7                                      
67
68
Complete!
69
[root@TheLegacyServer ~]# sudo /usr/sbin/apachectl start
70
[root@TheLegacyServer ~]# 
71
[root@TheLegacyServer ~]# wget http://ipinfo.io/ip -qO -
72
144.76.38.11
73
[root@TheLegacyServer ~]# sudo nano /etc/httpd/conf/httpd.conf
74
[root@TheLegacyServer ~]# a2enmod proxy
75
-bash: a2enmod: command not found
76
[root@TheLegacyServer ~]# yum install a2enmod proxy
77
78
^CTraceback (most recent call last):
79
  File "/usr/bin/yum", line 4, in <module>
80
    import yum
81
  File "/usr/lib/python2.7/site-packages/yum/__init__.py", line 44, in <module>
82
    import logging
83
  File "/usr/lib64/python2.7/logging/__init__.py", line 26, in <module>
84
    import sys, os, time, cStringIO, traceback, warnings, weakref
85
KeyboardInterrupt
86
[root@TheLegacyServer ~]# yum install a2enmod
87
Loaded plugins: fastestmirror
88
Loading mirror speeds from cached hostfile
89
 * base: ftp.plusline.de
90
 * epel: mirrors.n-ix.net
91
 * extras: ftp.plusline.de
92
 * updates: ftp.plusline.de
93
No package a2enmod available.
94
Error: Nothing to do
95
[root@TheLegacyServer ~]# cd  /etc/httpd/conf.d/
96
[root@TheLegacyServer conf.d]# ls
97
autoindex.conf  README  ssl.conf  userdir.conf  welcome.conf
98
[root@TheLegacyServer conf.d]# cat 
99
^Z
100
[1]+  Stopped                 cat
101
[root@TheLegacyServer conf.d]# cat  *
102
#
103
# Directives controlling the display of server-generated directory listings.
104
#
105
# Required modules: mod_authz_core, mod_authz_host,
106
#                   mod_autoindex, mod_alias
107
#
108
# To see the listing of a directory, the Options directive for the
109
# directory must include "Indexes", and the directory must not contain
110
# a file matching those listed in the DirectoryIndex directive.
111
#
112
113
#
114
# IndexOptions: Controls the appearance of server-generated directory
115
# listings.
116
#
117
IndexOptions FancyIndexing HTMLTable VersionSort
118
119
# We include the /icons/ alias for FancyIndexed directory listings.  If
120
# you do not use FancyIndexing, you may comment this out.
121
#
122
Alias /icons/ "/usr/share/httpd/icons/"
123
124
<Directory "/usr/share/httpd/icons">
125
    Options Indexes MultiViews FollowSymlinks
126
    AllowOverride None
127
    Require all granted
128
</Directory>
129
130
#
131
# AddIcon* directives tell the server which icon to show for different
132
# files or filename extensions.  These are only displayed for
133
# FancyIndexed directories.
134
#
135
AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip
136
137
AddIconByType (TXT,/icons/text.gif) text/*
138
AddIconByType (IMG,/icons/image2.gif) image/*
139
AddIconByType (SND,/icons/sound2.gif) audio/*
140
AddIconByType (VID,/icons/movie.gif) video/*
141
142
AddIcon /icons/binary.gif .bin .exe
143
AddIcon /icons/binhex.gif .hqx
144
AddIcon /icons/tar.gif .tar
145
AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
146
AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
147
AddIcon /icons/a.gif .ps .ai .eps
148
AddIcon /icons/layout.gif .html .shtml .htm .pdf
149
AddIcon /icons/text.gif .txt
150
AddIcon /icons/c.gif .c
151
AddIcon /icons/p.gif .pl .py
152
AddIcon /icons/f.gif .for
153
AddIcon /icons/dvi.gif .dvi
154
AddIcon /icons/uuencoded.gif .uu
155
AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
156
AddIcon /icons/tex.gif .tex
157
AddIcon /icons/bomb.gif /core
158
AddIcon /icons/bomb.gif */core.*
159
160
AddIcon /icons/back.gif ..
161
AddIcon /icons/hand.right.gif README
162
AddIcon /icons/folder.gif ^^DIRECTORY^^
163
AddIcon /icons/blank.gif ^^BLANKICON^^
164
165
#
166
# DefaultIcon is which icon to show for files which do not have an icon
167
# explicitly set.
168
#
169
DefaultIcon /icons/unknown.gif
170
171
#
172
# AddDescription allows you to place a short description after a file in
173
# server-generated indexes.  These are only displayed for FancyIndexed
174
# directories.
175
# Format: AddDescription "description" filename
176
#
177
#AddDescription "GZIP compressed document" .gz
178
#AddDescription "tar archive" .tar
179
#AddDescription "GZIP compressed tar archive" .tgz
180
181
#
182
# ReadmeName is the name of the README file the server will look for by
183
# default, and append to directory listings.
184
#
185
# HeaderName is the name of a file which should be prepended to
186
# directory indexes. 
187
ReadmeName README.html
188
HeaderName HEADER.html
189
190
#
191
# IndexIgnore is a set of filenames which directory indexing should ignore
192
# and not include in the listing.  Shell-style wildcarding is permitted.
193
#
194
IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t
195
196
197
This directory holds configuration files for the Apache HTTP Server;
198
any files in this directory which have the ".conf" extension will be
199
processed as httpd configuration files.  The directory is used in
200
addition to the directory /etc/httpd/conf.modules.d/, which contains
201
configuration files necessary to load modules.
202
203
Files are processed in alphabetical order.
204
205
#
206
# When we also provide SSL we have to listen to the 
207
# the HTTPS port in addition.
208
#
209
Listen 443 https
210
211
##
212
##  SSL Global Context
213
##
214
##  All SSL configuration in this context applies both to
215
##  the main server and all SSL-enabled virtual hosts.
216
##
217
218
#   Pass Phrase Dialog:
219
#   Configure the pass phrase gathering process.
220
#   The filtering dialog program (`builtin' is a internal
221
#   terminal dialog) has to provide the pass phrase on stdout.
222
SSLPassPhraseDialog exec:/usr/libexec/httpd-ssl-pass-dialog
223
224
#   Inter-Process Session Cache:
225
#   Configure the SSL Session Cache: First the mechanism 
226
#   to use and second the expiring timeout (in seconds).
227
SSLSessionCache         shmcb:/run/httpd/sslcache(512000)
228
SSLSessionCacheTimeout  300
229
230
#   Pseudo Random Number Generator (PRNG):
231
#   Configure one or more sources to seed the PRNG of the 
232
#   SSL library. The seed data should be of good random quality.
233
#   WARNING! On some platforms /dev/random blocks if not enough entropy
234
#   is available. This means you then cannot use the /dev/random device
235
#   because it would lead to very long connection times (as long as
236
#   it requires to make more entropy available). But usually those
237
#   platforms additionally provide a /dev/urandom device which doesn't
238
#   block. So, if available, use this one instead. Read the mod_ssl User
239
#   Manual for more details.
240
SSLRandomSeed startup file:/dev/urandom  256
241
SSLRandomSeed connect builtin
242
#SSLRandomSeed startup file:/dev/random  512
243
#SSLRandomSeed connect file:/dev/random  512
244
#SSLRandomSeed connect file:/dev/urandom 512
245
246
#
247
# Use "SSLCryptoDevice" to enable any supported hardware
248
# accelerators. Use "openssl engine -v" to list supported
249
# engine names.  NOTE: If you enable an accelerator and the
250
# server does not start, consult the error logs and ensure
251
# your accelerator is functioning properly. 
252
#
253
SSLCryptoDevice builtin
254
#SSLCryptoDevice ubsec
255
256
##
257
## SSL Virtual Host Context
258
##
259
260
<VirtualHost _default_:443>
261
262
# General setup for the virtual host, inherited from global configuration
263
#DocumentRoot "/var/www/html"
264
#ServerName www.example.com:443
265
266
# Use separate log files for the SSL virtual host; note that LogLevel
267
# is not inherited from httpd.conf.
268
ErrorLog logs/ssl_error_log
269
TransferLog logs/ssl_access_log
270
LogLevel warn
271
272
#   SSL Engine Switch:
273
#   Enable/Disable SSL for this virtual host.
274
SSLEngine on
275
276
#   SSL Protocol support:
277
# List the enable protocol levels with which clients will be able to
278
# connect.  Disable SSLv2 access by default:
279
SSLProtocol all -SSLv2
280
281
#   SSL Cipher Suite:
282
#   List the ciphers that the client is permitted to negotiate.
283
#   See the mod_ssl documentation for a complete list.
284
SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA
285
286
#   Speed-optimized SSL Cipher configuration:
287
#   If speed is your main concern (on busy HTTPS servers e.g.),
288
#   you might want to force clients to specific, performance
289
#   optimized ciphers. In this case, prepend those ciphers
290
#   to the SSLCipherSuite list, and enable SSLHonorCipherOrder.
291
#   Caveat: by giving precedence to RC4-SHA and AES128-SHA
292
#   (as in the example below), most connections will no longer
293
#   have perfect forward secrecy - if the server's key is
294
#   compromised, captures of past or future traffic must be
295
#   considered compromised, too.
296
#SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:MEDIUM:!aNULL:!MD5
297
#SSLHonorCipherOrder on 
298
299
#   Server Certificate:
300
# Point SSLCertificateFile at a PEM encoded certificate.  If
301
# the certificate is encrypted, then you will be prompted for a
302
# pass phrase.  Note that a kill -HUP will prompt again.  A new
303
# certificate can be generated using the genkey(1) command.
304
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
305
306
#   Server Private Key:
307
#   If the key is not combined with the certificate, use this
308
#   directive to point at the key file.  Keep in mind that if
309
#   you've both a RSA and a DSA private key you can configure
310
#   both in parallel (to also allow the use of DSA ciphers, etc.)
311
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
312
313
#   Server Certificate Chain:
314
#   Point SSLCertificateChainFile at a file containing the
315
#   concatenation of PEM encoded CA certificates which form the
316
#   certificate chain for the server certificate. Alternatively
317
#   the referenced file can be the same as SSLCertificateFile
318
#   when the CA certificates are directly appended to the server
319
#   certificate for convinience.
320
#SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt
321
322
#   Certificate Authority (CA):
323
#   Set the CA certificate verification path where to find CA
324
#   certificates for client authentication or alternatively one
325
#   huge file containing all of them (file must be PEM encoded)
326
#SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt
327
328
#   Client Authentication (Type):
329
#   Client certificate verification type and depth.  Types are
330
#   none, optional, require and optional_no_ca.  Depth is a
331
#   number which specifies how deeply to verify the certificate
332
#   issuer chain before deciding the certificate is not valid.
333
#SSLVerifyClient require
334
#SSLVerifyDepth  10
335
336
#   Access Control:
337
#   With SSLRequire you can do per-directory access control based
338
#   on arbitrary complex boolean expressions containing server
339
#   variable checks and other lookup directives.  The syntax is a
340
#   mixture between C and Perl.  See the mod_ssl documentation
341
#   for more details.
342
#<Location />
343
#SSLRequire (    %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \
344
#            and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \
345
#            and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} \
346
#            and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \
347
#            and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20       ) \
348
#           or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/
349
#</Location>
350
351
#   SSL Engine Options:
352
#   Set various options for the SSL engine.
353
#   o FakeBasicAuth:
354
#     Translate the client X.509 into a Basic Authorisation.  This means that
355
#     the standard Auth/DBMAuth methods can be used for access control.  The
356
#     user name is the `one line' version of the client's X.509 certificate.
357
#     Note that no password is obtained from the user. Every entry in the user
358
#     file needs this password: `xxj31ZMTZzkVA'.
359
#   o ExportCertData:
360
#     This exports two additional environment variables: SSL_CLIENT_CERT and
361
#     SSL_SERVER_CERT. These contain the PEM-encoded certificates of the
362
#     server (always existing) and the client (only existing when client
363
#     authentication is used). This can be used to import the certificates
364
#     into CGI scripts.
365
#   o StdEnvVars:
366
#     This exports the standard SSL/TLS related `SSL_*' environment variables.
367
#     Per default this exportation is switched off for performance reasons,
368
#     because the extraction step is an expensive operation and is usually
369
#     useless for serving static content. So one usually enables the
370
#     exportation for CGI and SSI requests only.
371
#   o StrictRequire:
372
#     This denies access when "SSLRequireSSL" or "SSLRequire" applied even
373
#     under a "Satisfy any" situation, i.e. when it applies access is denied
374
#     and no other module can change it.
375
#   o OptRenegotiate:
376
#     This enables optimized SSL connection renegotiation handling when SSL
377
#     directives are used in per-directory context. 
378
#SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
379
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
380
    SSLOptions +StdEnvVars
381
</Files>
382
<Directory "/var/www/cgi-bin">
383
    SSLOptions +StdEnvVars
384
</Directory>
385
386
#   SSL Protocol Adjustments:
387
#   The safe and default but still SSL/TLS standard compliant shutdown
388
#   approach is that mod_ssl sends the close notify alert but doesn't wait for
389
#   the close notify alert from client. When you need a different shutdown
390
#   approach you can use one of the following variables:
391
#   o ssl-unclean-shutdown:
392
#     This forces an unclean shutdown when the connection is closed, i.e. no
393
#     SSL close notify alert is send or allowed to received.  This violates
394
#     the SSL/TLS standard but is needed for some brain-dead browsers. Use
395
#     this when you receive I/O errors because of the standard approach where
396
#     mod_ssl sends the close notify alert.
397
#   o ssl-accurate-shutdown:
398
#     This forces an accurate shutdown when the connection is closed, i.e. a
399
#     SSL close notify alert is send and mod_ssl waits for the close notify
400
#     alert of the client. This is 100% SSL/TLS standard compliant, but in
401
#     practice often causes hanging connections with brain-dead browsers. Use
402
#     this only for browsers where you know that their SSL implementation
403
#     works correctly. 
404
#   Notice: Most problems of broken clients are also related to the HTTP
405
#   keep-alive facility, so you usually additionally want to disable
406
#   keep-alive for those clients, too. Use variable "nokeepalive" for this.
407
#   Similarly, one has to force some clients to use HTTP/1.0 to workaround
408
#   their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and
409
#   "force-response-1.0" for this.
410
BrowserMatch "MSIE [2-5]" \
411
         nokeepalive ssl-unclean-shutdown \
412
         downgrade-1.0 force-response-1.0
413
414
#   Per-Server Logging:
415
#   The home of a custom SSL log file. Use this when you want a
416
#   compact non-error SSL logfile on a virtual host basis.
417
CustomLog logs/ssl_request_log \
418
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
419
420
</VirtualHost>                                  
421
422
#
423
# UserDir: The name of the directory that is appended onto a user's home
424
# directory if a ~user request is received.
425
#
426
# The path to the end user account 'public_html' directory must be
427
# accessible to the webserver userid.  This usually means that ~userid
428
# must have permissions of 711, ~userid/public_html must have permissions
429
# of 755, and documents contained therein must be world-readable.
430
# Otherwise, the client will only receive a "403 Forbidden" message.
431
#
432
<IfModule mod_userdir.c>
433
    #
434
    # UserDir is disabled by default since it can confirm the presence
435
    # of a username on the system (depending on home directory
436
    # permissions).
437
    #
438
    UserDir disabled
439
440
    #
441
    # To enable requests to /~user/ to serve the user's public_html
442
    # directory, remove the "UserDir disabled" line above, and uncomment
443
    # the following line instead:
444
    # 
445
    #UserDir public_html
446
</IfModule>
447
448
#
449
# Control access to UserDir directories.  The following is an example
450
# for a site where these directories are restricted to read-only.
451
#
452
<Directory "/home/*/public_html">
453
    AllowOverride FileInfo AuthConfig Limit Indexes
454
    Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
455
    Require method GET POST OPTIONS
456
</Directory>
457
458
# 
459
# This configuration file enables the default "Welcome" page if there
460
# is no default index page present for the root URL.  To disable the
461
# Welcome page, comment out all the lines below. 
462
#
463
# NOTE: if this file is removed, it will be restored on upgrades.
464
#
465
<LocationMatch "^/+$">
466
    Options -Indexes
467
    ErrorDocument 403 /.noindex.html
468
</LocationMatch>
469
470
<Directory /usr/share/httpd/noindex>
471
    AllowOverride None
472
    Require all granted
473
</Directory>
474
475
Alias /.noindex.html /usr/share/httpd/noindex/index.html
476
Alias /noindex/css/bootstrap.min.css /usr/share/httpd/noindex/css/bootstrap.min.css
477
Alias /noindex/css/open-sans.css /usr/share/httpd/noindex/css/open-sans.css
478
Alias /images/apache_pb.gif /usr/share/httpd/noindex/images/apache_pb.gif
479
Alias /images/poweredby.png /usr/share/httpd/noindex/images/poweredby.png
480
[root@TheLegacyServer conf.d]# LoadModule proxy_module libexec/apache2/mod_proxy.so
481
-bash: LoadModule: command not found
482
[root@TheLegacyServer conf.d]# nano /etc/httpd/conf/httpd.conf 
483
[root@TheLegacyServer conf.d]# clear
484

485
[root@TheLegacyServer conf.d]# yum install httpd mod_ssl
486
Loaded plugins: fastestmirror
487
Loading mirror speeds from cached hostfile
488
 * base: ftp.plusline.de
489
 * epel: mirrors.n-ix.net
490
 * extras: ftp.plusline.de
491
 * updates: ftp.plusline.de
492
Package httpd-2.4.6-40.el7.centos.x86_64 already installed and latest version
493
Package 1:mod_ssl-2.4.6-40.el7.centos.x86_64 already installed and latest version
494
Nothing to do
495
[root@TheLegacyServer conf.d]# nano /etc/httpd/conf.d/reverse-proxy.conf
496
[root@TheLegacyServer conf.d]# cd /var/lib/jenkins
497
[root@TheLegacyServer jenkins]# 
498
[root@TheLegacyServer jenkins]# ls
499
config.xml                                          hudson.tasks.Maven.xml                                    nodeMonitors.xml
500
Download metadata.log                               hudson.tasks.Shell.xml                                    nodes
501
Fingerprint cleanup.log                             hudson.triggers.SCMTrigger.xml                            plugins
502
hudson.maven.MavenModuleSet.xml                     identity.key.enc                                          queue.xml.bak
503
hudson.model.UpdateCenter.xml                       jenkins.model.ArtifactManagerConfiguration.xml            secret.key
504
hudson.plugins.ansicolor.AnsiColorBuildWrapper.xml  jenkins.model.DownloadSettings.xml                        secret.key.not-so-secret
505
hudson.scm.CVSSCM.xml                               jenkins.model.JenkinsLocationConfiguration.xml            secrets
506
hudson.scm.SubversionSCM.xml                        jenkins.mvn.GlobalMavenConfig.xml                         updates
507
hudson.tasks.Ant.xml                                jenkins.security.QueueItemAuthenticatorConfiguration.xml  userContent
508
hudson.tasks.Mailer.xml                             jobs                                                      users
509
[root@TheLegacyServer jenkins]# ls | *.xml
510
-bash: config.xml: command not found
511
[root@TheLegacyServer jenkins]# ls | grep *.xml
512
[root@TheLegacyServer jenkins]# ls *.xml
513
config.xml                                          hudson.tasks.Shell.xml
514
hudson.maven.MavenModuleSet.xml                     hudson.triggers.SCMTrigger.xml
515
hudson.model.UpdateCenter.xml                       jenkins.model.ArtifactManagerConfiguration.xml
516
hudson.plugins.ansicolor.AnsiColorBuildWrapper.xml  jenkins.model.DownloadSettings.xml
517
hudson.scm.CVSSCM.xml                               jenkins.model.JenkinsLocationConfiguration.xml
518
hudson.scm.SubversionSCM.xml                        jenkins.mvn.GlobalMavenConfig.xml
519
hudson.tasks.Ant.xml                                jenkins.security.QueueItemAuthenticatorConfiguration.xml
520
hudson.tasks.Mailer.xml                             nodeMonitors.xml
521
hudson.tasks.Maven.xml
522
[root@TheLegacyServer jenkins]# cat config.xml
523
<?xml version='1.0' encoding='UTF-8'?>
524
<hudson>
525
  <disabledAdministrativeMonitors/>
526
  <version>1.644</version>
527
  <numExecutors>1</numExecutors>
528
  <mode>NORMAL</mode>
529
  <useSecurity>true</useSecurity>
530
  <authorizationStrategy class="hudson.security.GlobalMatrixAuthorizationStrategy">
531
    <permission>hudson.model.Hudson.Administer:deepak</permission>
532
    <permission>hudson.model.Hudson.Read:anonymous</permission>
533
    <permission>hudson.model.Hudson.Read:saatvik</permission>
534
    <permission>hudson.model.Hudson.Read:vatsal</permission>
535
    <permission>hudson.model.Item.Build:saatvik</permission>
536
    <permission>hudson.model.Item.Build:vatsal</permission>
537
    <permission>hudson.model.Item.Cancel:saatvik</permission>
538
    <permission>hudson.model.Item.Cancel:vatsal</permission>
539
    <permission>hudson.model.Item.Configure:saatvik</permission>
540
    <permission>hudson.model.Item.Configure:vatsal</permission>
541
    <permission>hudson.model.Item.Create:saatvik</permission>
542
    <permission>hudson.model.Item.Create:vatsal</permission>
543
    <permission>hudson.model.Item.Delete:saatvik</permission>
544
    <permission>hudson.model.Item.Delete:vatsal</permission>
545
    <permission>hudson.model.Item.Discover:saatvik</permission>
546
    <permission>hudson.model.Item.Discover:vatsal</permission>
547
    <permission>hudson.model.Item.Read:anonymous</permission>
548
    <permission>hudson.model.Item.Read:saatvik</permission>
549
    <permission>hudson.model.Item.Read:vatsal</permission>
550
    <permission>hudson.model.Item.Workspace:saatvik</permission>
551
    <permission>hudson.model.Item.Workspace:vatsal</permission>
552
    <permission>hudson.model.View.Read:anonymous</permission>
553
  </authorizationStrategy>
554
  <securityRealm class="hudson.security.HudsonPrivateSecurityRealm">
555
    <disableSignup>true</disableSignup>
556
    <enableCaptcha>false</enableCaptcha>
557
  </securityRealm>
558
  <disableRememberMe>false</disableRememberMe>
559
  <projectNamingStrategy class="jenkins.model.ProjectNamingStrategy$DefaultProjectNamingStrategy"/>
560
  <workspaceDir>${JENKINS_HOME}/workspace/${ITEM_FULLNAME}</workspaceDir>
561
  <buildsDir>${ITEM_ROOTDIR}/builds</buildsDir>
562
  <markupFormatter class="hudson.markup.EscapedMarkupFormatter"/>
563
  <jdks/>
564
  <viewsTabBar class="hudson.views.DefaultViewsTabBar"/>
565
  <myViewsTabBar class="hudson.views.DefaultMyViewsTabBar"/>
566
  <clouds/>
567
  <quietPeriod>5</quietPeriod>
568
  <scmCheckoutRetryCount>0</scmCheckoutRetryCount>
569
  <views>
570
    <hudson.model.AllView>
571
      <owner class="hudson" reference="../../.."/>
572
      <name>All</name>
573
      <filterExecutors>false</filterExecutors>
574
      <filterQueue>false</filterQueue>
575
      <properties class="hudson.model.View$PropertyList"/>
576
    </hudson.model.AllView>
577
  </views>
578
  <primaryView>All</primaryView>
579
  <slaveAgentPort>0</slaveAgentPort>
580
  <label></label>
581
  <nodeProperties/>
582
  <globalNodeProperties/>
583
</hudson>[root@TheLegacyServer jenkins]# cd /var/www
584
[root@TheLegacyServer www]# ls
585
cgi-bin  html
586
[root@TheLegacyServer www]# cd html
587
[root@TheLegacyServer html]# ls
588
[root@TheLegacyServer html]# cd ../cgi-bin
589
[root@TheLegacyServer cgi-bin]# ls
590
[root@TheLegacyServer cgi-bin]# ls -l
591
total 0
592
[root@TheLegacyServer cgi-bin]# ls -l
593
total 0
594
[root@TheLegacyServer cgi-bin]# ls -la
595
total 8
596
drwxr-xr-x 2 root root 4096 Nov 19 22:43 .
597
drwxr-xr-x 4 root root 4096 Jan 16 17:44 ..
598
[root@TheLegacyServer cgi-bin]# cd ../html
599
[root@TheLegacyServer html]# ls -la
600
total 8
601
drwxr-xr-x 2 root root 4096 Nov 19 22:43 .
602
drwxr-xr-x 4 root root 4096 Jan 16 17:44 ..
603
[root@TheLegacyServer html]# cd ../.
604
[root@TheLegacyServer www]# cd ..
605
[root@TheLegacyServer var]# .
606
-bash: .: filename argument required
607
.: usage: . filename [arguments]
608
[root@TheLegacyServer var]# cd 
609
[root@TheLegacyServer ~]# cd /var/lib/jenkins
610
[root@TheLegacyServer jenkins]# ls
611
config.xml                                          hudson.tasks.Maven.xml                                    nodeMonitors.xml
612
Download metadata.log                               hudson.tasks.Shell.xml                                    nodes
613
Fingerprint cleanup.log                             hudson.triggers.SCMTrigger.xml                            plugins
614
hudson.maven.MavenModuleSet.xml                     identity.key.enc                                          queue.xml.bak
615
hudson.model.UpdateCenter.xml                       jenkins.model.ArtifactManagerConfiguration.xml            secret.key
616
hudson.plugins.ansicolor.AnsiColorBuildWrapper.xml  jenkins.model.DownloadSettings.xml                        secret.key.not-so-secret
617
hudson.scm.CVSSCM.xml                               jenkins.model.JenkinsLocationConfiguration.xml            secrets
618
hudson.scm.SubversionSCM.xml                        jenkins.mvn.GlobalMavenConfig.xml                         updates
619
hudson.tasks.Ant.xml                                jenkins.security.QueueItemAuthenticatorConfiguration.xml  userContent
620
hudson.tasks.Mailer.xml                             jobs                                                      users
621
[root@TheLegacyServer jenkins]# nano /etc/httpd/conf.d/reverse-proxy.conf
622
[root@TheLegacyServer jenkins]# setsebool -P httpd_can_network_connect true
623
setsebool:  SELinux is disabled.
624
[root@TheLegacyServer jenkins]# service apache restart
625
Redirecting to /bin/systemctl restart  apache.service
626
Failed to restart apache.service: Unit apache.service failed to load: No such file or directory.
627
[root@TheLegacyServer jenkins]# service httpd restart
628
Redirecting to /bin/systemctl restart  httpd.service
629
[root@TheLegacyServer jenkins]#