Setting Up LAMP Stack

This guide will walk you through the process of setting up a LAMP (Linux, Apache, MySQL, PHP) stack on a Debian-based Linux distribution. The LAMP stack is a popular choice for hosting dynamic websites and web applications, including wikis like MediaWiki.

Prerequisites

Before you begin, ensure you have:

• A server running a Debian-based Linux distribution (e.g., Ubuntu, Debian).
• SSH access to the server with root or sudo privileges.
• Basic familiarity with the Linux command line.
• A stable internet connection for package downloads.

Step 1: Update System Packages

It's crucial to start with an up-to-date system. This ensures you have the latest security patches and software versions.

1. Open your terminal or SSH into your server.
2. Execute the following commands:

sudo apt update
sudo apt upgrade -y

Explanation:

• `sudo apt update`: This command synchronizes the package index files from their sources for the installed distributions. It fetches information about available packages and their versions but doesn't install or upgrade anything.
• `sudo apt upgrade -y`: This command installs the newest versions of all packages currently installed on the system from the sources enumerated in `/etc/apt/sources.list`. The `-y` flag automatically answers "yes" to any prompts, which is convenient for unattended upgrades.

Troubleshooting:

• **"Could not resolve 'archive.ubuntu.com'"**: This indicates a network connectivity issue or a problem with your DNS settings. Verify your server's internet connection and check `/etc/resolv.conf` for correct DNS servers.
• **Conflicts during upgrade**: Sometimes, package upgrades can lead to conflicts. If this happens, carefully read the error messages. You might need to manually resolve dependencies or remove conflicting packages, but proceed with caution.

Step 2: Install Apache Web Server

Apache HTTP Server is a widely used, open-source web server software.

1. Install Apache:

sudo apt install apache2 -y

1. Verify Apache is running:

sudo systemctl status apache2

Expected Output Snippet:

● apache2.service - The Apache HTTP Server
     Loaded: loaded (/lib/systemd/system/apache2.service; enabled; vendor preset: enabled)
     Active: active (running) since ...
       Docs: https://httpd.apache.org/docs/2.4/
   Main PID: ... (apache2)
      Tasks: ...
     Memory: ...
        CPU: ...
     CGroup: /system.slice/apache2.service
             ├─... /usr/sbin/apache2 -k start
             └─... /usr/sbin/apache2 -k start

Explanation:

• `sudo apt install apache2 -y`: This command installs the Apache web server package and its dependencies.
• `sudo systemctl status apache2`: This command checks the status of the Apache service. `active (running)` indicates that Apache is functioning correctly.

Security Implication: Ensure your server's firewall is configured to allow HTTP (port 80) and HTTPS (port 443) traffic. For example, using `ufw`:

sudo ufw allow 'Apache Full'
sudo ufw enable

Troubleshooting:

• **Apache not starting**: Check the Apache error logs for clues: `sudo tail -f /var/log/apache2/error.log`. Common issues include port conflicts or configuration errors.
• **Cannot access website**: If `systemctl status apache2` shows it's running, but you can't access `http://your_server_ip` in your browser, check your firewall settings and ensure port 80 is open.

Step 3: Install MySQL Database Server

MySQL is a popular relational database management system used to store and manage data for web applications.

1. Install MySQL Server:

sudo apt install mysql-server -y

1. Secure your MySQL installation:

sudo mysql_secure_installation

Follow the prompts. It's highly recommended to:

• Set a strong root password.
• Remove anonymous users.
• Disallow root login remotely.
• Remove the test database.
• Reload privilege tables.

Explanation:

• `sudo apt install mysql-server -y`: Installs the MySQL server package.
• `sudo mysql_secure_installation`: This script guides you through essential security steps for your MySQL installation, significantly hardening its security.

Security Implication: A strong MySQL root password is vital. Never use default or weak passwords. For production environments, consider creating dedicated database users with limited privileges for your web applications instead of using the MySQL root user.

Troubleshooting:

• **"command not found: mysql_secure_installation"**: Ensure the `mysql-server` package is fully installed. You might need to restart the MySQL service: `sudo systemctl restart mysql`.
• **Forgetting MySQL root password**: This is a common but serious issue. Recovery involves stopping the MySQL server, restarting it in a safe mode, and then resetting the password. This process is beyond the scope of this basic setup but readily available in other documentation.

Step 4: Install PHP

PHP is a popular server-side scripting language that is used for web development.

1. Install PHP and common extensions for Apache and MySQL:

sudo apt install php libapache2-mod-php php-mysql php-cli php-curl php-gd php-mbstring php-xml php-xmlrpc php-soap php-intl php-zip -y

1. Restart Apache to load the PHP module:

sudo systemctl restart apache2

Explanation:

• `sudo apt install php ... -y`: Installs PHP and a suite of commonly used extensions. `libapache2-mod-php` integrates PHP with Apache. `php-mysql` is essential for PHP to communicate with MySQL databases. Other extensions are often required by Content Management Systems (CMS) like MediaWiki.
• `sudo systemctl restart apache2`: This ensures that Apache reloads its configuration and loads the newly installed PHP module.

Troubleshooting:

• **PHP code displayed as plain text**: This means Apache is not processing PHP files. Ensure `libapache2-mod-php` is installed and Apache has been restarted. You can also check Apache's configuration files (`/etc/apache2/mods-enabled/php*.load`) to verify the module is enabled.
• **"Call to undefined function" errors**: This usually means a required PHP extension is missing. Install it using `sudo apt install php-extension-name -y` and restart Apache.

Step 5: Test PHP Processing

Verify that Apache is correctly processing PHP files.

1. Create a PHP info file:

echo "<?php phpinfo(); ?>" | sudo tee /var/www/html/info.php

1. Access the file in your web browser:

Navigate to `http://your_server_ip/info.php`. You should see a detailed page with PHP configuration information.

Explanation:

• `echo "<?php phpinfo(); ?>" | sudo tee /var/www/html/info.php`: This command creates a simple PHP file named `info.php` in the web server's default document root (`/var/www/html`). The `phpinfo()` function outputs a wealth of information about the current state of PHP.

Security Implication: The `info.php` file reveals sensitive server configuration details. It's crucial to **remove this file** after you've confirmed PHP is working.

sudo rm /var/www/html/info.php

Troubleshooting:

• **Page not found**: Double-check the file path (`/var/www/html/info.php`) and ensure Apache is running.
• **Blank page or source code visible**: This indicates PHP is not being processed. Refer to the troubleshooting steps in "Step 4: Install PHP".

Step 6: Configure MySQL for Web Applications

For security and organization, it's best practice to create a dedicated database and user for your web application (e.g., MediaWiki).

1. Log in to MySQL as root:

sudo mysql -u root -p

Enter your MySQL root password when prompted.

1. Create a database (replace `your_wiki_db` with your desired database name):

CREATE DATABASE your_wiki_db CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;

1. Create a database user (replace `your_wiki_user` and `your_password`):

CREATE USER 'your_wiki_user'@'localhost' IDENTIFIED BY 'your_password';

1. Grant privileges to the user on the database:

GRANT ALL PRIVILEGES ON your_wiki_db.* TO 'your_wiki_user'@'localhost';

1. Apply the changes:

FLUSH PRIVILEGES;

1. Exit MySQL:

EXIT;

Explanation:

• `CREATE DATABASE ...`: Creates a new database with specific character set and collation settings suitable for a wide range of characters.
• `CREATE USER ...`: Creates a new MySQL user that can only connect from `localhost` (the server itself).
• `GRANT ALL PRIVILEGES ...`: Assigns all possible permissions on the newly created database to the new user.
• `FLUSH PRIVILEGES;`: Reloads the grant tables, ensuring that the new user and privileges are immediately active.

Security Implication:

• Use strong, unique passwords for database users.
• Limit user privileges to the minimum required. `GRANT ALL PRIVILEGES` is convenient for setup but consider more granular permissions for production.
• Restricting users to `'localhost'` prevents remote access to the database, which is a significant security enhancement.

Troubleshooting:

• **Access denied for user**: Ensure you are using the correct username, password, and host (`localhost`). If you are trying to connect from a different machine, you would need to adjust the host part (e.g., `'your_wiki_user'@'%'` or `'your_wiki_user'@'192.168.1.x'`), but this requires careful firewall and MySQL configuration.
• **Syntax errors**: Double-check your SQL commands for typos, missing semicolons, or incorrect quotes.

Conclusion

You have now successfully set up a LAMP stack on your Linux server. This foundation is ready for hosting dynamic web applications. For instance, you can now proceed to install MediaWiki using this stack.