Use apache to access buildbot

开心123

　　1\ Use apache to access buildbot
   a)Install apache
   b)Add 'LoadModule  proxy_module         /usr/lib/apache2/modules/mod_proxy.so' to file '/etc/apache2/mods-enabled/proxy.load'
     Add 'LoadModule  proxy_http_module    /usr/lib/apache2/modules/mod_proxy_http.so' to file '/etc/apache2/mods-enabled/proxy_http.load'
   c)Add following contents to file '/etc/apache2/sites-available/default' :

• 
  
•          Order allow,deny
  
•          allow from all
  
• 
  
• ProxyPreserveHost On
  
• ProxyRequests off
  
• ProxyPass /buildbot/ http://localhost:9010/
  
• ProxyPa***everse /buildbot http://localhost:9010/
  

　　
   Then start buildbot and run 'sudo /etc/init.d/apache2  restart',you can access buildbot through apache.
2\ Add authorization to access buildbot through apache
   a)Use htpasswd tool to generate a file with username and password after encrypted.
   b)Modify '/usr/lib/apache2/httpd.conf' to add authorization, you can add following contents to file '/usr/lib/apache2/httpd.conf' for 'Basic' authorization which the 'AuthType' should be 'Basic'.

• 
  
•    Order allow,deny
  
•    allow from all
  
•    AuthName "Buildbot Access"
  
•    AuthType Basic
  
•    AuthUserFile /etc/apache2/buildbot_auth
  
•    Require valid-user
  
•   
  

　　The file '/etc/apache2/buildbot_auth' is the file that generated by htpasswd.Then run 'sudo /etc/init.d/apache2  restart',you will need authorization to access buildbot through apache.
   c)you can also apply digest authorization, that you should use htdigest to create and update the flat-files used to store usernames, realm and password.you can add following contents to file '/usr/lib/apache2/httpd.conf'.

• 
  
•    Order allow,deny
  
•    allow from all
  
•    AuthName "buildbot"
  
•    AuthType Digest
  
•    AuthDigestProvider file
  
•    AuthUserFile /etc/apache2/digest_users
  
•    Require valid-user
  
• 
  

　　
     The file '/etc/apache2/buildbot_digest_users' is the file that generated by htdigest.Then run 'sudo /etc/init.d/apache2  restart',you will need authorization to access buildbot through apache.
     attention: The realm create by htdigest should be same as the value of 'AuthName'.
3\ Limit port 9010
  After steps above, you still can access buildbot though port 9010.You can limit the port 9010 through tool iptables ,and then other pc can not access buildbot though it.
  The command is as follow:

• sudo iptables -A INPUT -s localhost  -p tcp --dport 9010 -j ACCEPT
  
• sudo iptables -A INPUT -p tcp --dport 9010 -j DROP