This package won’t actually support Rails 3 just yet though as we’ve yet to package and test the librack 1.1.0, which Rails 3 depends on.  We’re working on it now and once we’re happy with it we’ll add new packages to our repository as usual.

As usual, details on installing the packages from our repository are available on our wiki.

If you’re using Passenger and it’s making you happy, please do consider supporting its development by donating money in the form of an “Enterprise License” direct from Phusion, the company behind it.

nginx … is vulnerable to a buffer underflow when processing certain HTTP requests. An attacker can use this to execute arbitrary code with the rights of the worker process  or possibly perform denial of service attacks by repeatedly crashing worker processes via a specially crafted URL in an HTTP request.

New versions of our nginx packages that address this security vulnerability are now available.  nginx 0.6.39 (with the fair balancer module) is available from the Brightbox apt repositories – running the following command will get you the latest version:

sudo apt-get update
sudo apt-get install nginx

Our more experimental nginx-brightbox package has also been upgraded to 0.6.39.  This includes a number of nginx addons, such as the upload module, geoip module, and Phusion Passenger 2.0.5.

This new version of Passenger brings a train-load of NGINX fixes, so our Passenger enabled nginx-brightbox package has been updated too and is available in our testing repository.  More details on using our testing repository here in the 2.2.1 announcement blog post.

We’ve had to restructure the way our Ubuntu packages are built to enable installation of the NGINX extension, so needs more extensive testing than usual.  The packages are now available for Ubuntu Hardy in our testing repository.

You’ll need to add our testing repository to your apt sources list. And if you’re not on a Brightbox, you’ll need to import our key and add our stable repository too.

Once you’ve done that, you can install the new version of Passenger.  If you’re wanting to just install the Apache version:

sudo apt-get update
sudo apt-get install libapache2-mod-passenger

This will pull in a new dependency, passenger-common.

If you just want to get stuck in with the new NGINX support, install the nginx-brightbox package:

sudo apt-get update
sudo apt-get install nginx-brightbox

This will also pull in the passenger-common dependency. This is NGINX 0.6.36 plus some useful modules: upload progress, upstream fair, geoip, ey-balancer and access key. It will replace any other NGINX packages you have installed (NGINX does not support dynamic modules like Apache).

You can install both Apache and NGINX side by side, but you’ll obviously need to run them on different ports.

The 2.2.1 Apache package has already had quite a bit of testing by us, but the NGINX package has had very little. We’ve already come across a Passenger bug with reloading NGINX (reported here), though we expect this will be fixed quickly.  So basically, these are good to play with but not for production just yet.

If you need any help with these packages, try our Passenger support forum.

It’s in our testing repository at the moment so give it a whirl (it will of course install on any Ubuntu Dapper box, not just Brightboxes).  We have a page on the Brightbox wiki on how to configure NGINX for your Brightbox apps too (which can easily be adjusted to any NGINX install really).

If you’re playing with any of this beta stuff (like these packages or the Brightbox gem) and have feedback or need help, feel free to discuss it on the Brightbox-beta Google group that i just set up.