Passenger 2.2.4 packages for Ubuntu 29 Jun 09

Passenger 2.2.4 was released last week and we now have Ubuntu Hardy packages available in our repository.

Passenger 2.2.4 actually is just a small bug fix release for a memory leak in 2.2.3, but obviously brings all the benefits of 2.2.3 too.  A huge number of bugs have been fixed, particularly the “Broken Pipe” errors some sites under heavy loads were experiencing.

As usual, details on installing the packages from our repository are available on our wiki.

If you’re using Passenger and it’s making you happy, please do consider supporting its development by donating money in the form of an “Enterprise License” direct from Phusion, the company behind it.

Ruby BigDecimal denial of service 10 Jun 09

From ruby-lang.org:

A denial of service (DoS) vulnerability was found on the BigDecimal standard library of Ruby. Conversion from BigDecimal objects into Float numbers had a problem which enables attackers to effectively cause segmentation faults.

ActiveRecord relies on this method, so most Rails applications are affected by this. Though this is not a Rails-specific issue.

We’re currently  building new Ruby packages for Brightbox customers with the relevant patches to fix this vulnerability. We’ll keep this post updated with the latest news.

UPDATE, 15:46 BST: New Ruby EE packages are now available in our Ruby Enterprise Ubuntu repository. We’re working on updates for the standard Ubuntu version of Ruby.

You can confirm that the update fixes the bug with the following command:

ruby -e 'require "bigdecimal";BigDecimal("E99999999").to_s("F");puts "OK"'

If your version of Ruby is vulnerable, you’ll get a “Segmentation fault” error message, otherwise it prints “OK”.

Join the Brightbox team! 12 May 09

Brightbox is looking for two new people to join the systems team, a Senior Linux Systems Administrator and a Linux/Rails System Support person. Both roles are full-time and you can work from home, from our office in Leeds, or a bit of both.

Send a hello, a CV and salary expectations to jobs at the Brightbox UK domain. CVs should be in an open format, preferably PDF or plain text. Closing date is 31^st May 2009.

As always, recruitment agents should e-mail our special recruitment company email address: root@localhost

Read the rest of this entry »

Passenger 2.2.1 Ubuntu beta packages with NGINX support 22 Apr 09

The Phusion team released a new version of Passenger last week, 2.2.1, which sports a shiny new NGINX extension.  It also adds chunked file uploads (Apache only) and improves restarts.

We’ve had to restructure the way our Ubuntu packages are built to enable installation of the NGINX extension, so needs more extensive testing than usual.  The packages are now available for Ubuntu Hardy in our testing repository.

You’ll need to add our testing repository to your apt sources list. And if you’re not on a Brightbox, you’ll need to import our key and add our stable repository too.

Once you’ve done that, you can install the new version of Passenger.  If you’re wanting to just install the Apache version:

sudo apt-get update
sudo apt-get install libapache2-mod-passenger

This will pull in a new dependency, passenger-common.

If you just want to get stuck in with the new NGINX support, install the nginx-brightbox package:

sudo apt-get update
sudo apt-get install nginx-brightbox

This will also pull in the passenger-common dependency. This is NGINX 0.6.36 plus some useful modules: upload progress, upstream fair, geoip, ey-balancer and access key. It will replace any other NGINX packages you have installed (NGINX does not support dynamic modules like Apache).

You can install both Apache and NGINX side by side, but you’ll obviously need to run them on different ports.

The 2.2.1 Apache package has already had quite a bit of testing by us, but the NGINX package has had very little. We’ve already come across a Passenger bug with reloading NGINX (reported here), though we expect this will be fixed quickly.  So basically, these are good to play with but not for production just yet.

If you need any help with these packages, try our Passenger support forum.

Passenger 2.1.3 packages for Ubuntu Hardy 5 Apr 09

Phusion Passenger 2.1.3 has been released and we’ve updated our Ubuntu packages as usual.  Instructions in the usual place on our wiki.

Phusion Passenger 2.1.2 packages for Ubuntu 14 Mar 09

Following Friday’s release of Passenger 2.1.2 by the Phusion folks, we’ve updated our Ubuntu packages.  We’ve been testing version 2.1.1 packages for a little while now and they’ve been very stable, supporting both Rails 2.3 and older apps that still depend on Rack 0.4 (such as older Sinatra apps).

The details are on the usual page on our wiki.  If you have any problems or need any help, try our forums.

The new packages depend on new versions of the Ruby rack libraries (not the gem), but this is provided in our repository too and will be automatically installed. You need to install the fastthread gem yourself though.  Our repository provides a few other useful Hardy packages too.

We are only testing our packages against Ubuntu Hardy right now, but they should install and run fine on newer versions of Ubuntu too.

Remember, for maximum memory savings (and speed improvements) try our Ruby Enterprise Edition packages for Ubuntu Hardy (currently only 32bit packages available).

Passenger Ubuntu package updated 11 Jan 09

We’ve just built new versions of our Passenger Ubuntu package.  It’s still Passenger 2.0.6, but we tweaked the dependencies so you aren’t forced to use the Apache worker mpm (prefork should work just fine with Passenger).

We’re now also providing 64bit versions of the packages (the source of the 404 errors some of you reported when trying to install the package).

Documentation for the packages in the usual place on the wiki.

More Passenger news coming soon :)

Passenger 2.0.5 packages for Ubuntu 5 Dec 08

Following the recent 2.0.4 release of the Passenger Rails module for Apache, version 2.0.5 was released today by the Phusion team.  We’ve just released new Ubuntu Hardy packages for it.  If you’re already using the package from our repository, just apt-get update and upgrade.

Particularly of note, this fixes a deadlock bug using Passenger and global queueing with the Apache worker mpm.

As before, documentation for our packages is available on our Passenger wiki page.

Passenger package for Ubuntu Hardy updated 28 Nov 08

I’d just like to announce the new version (2.0.3-1bbox4) of our Phusion Passenger/mod_rails package for Ubuntu Hardy (first announced back in May).

The previous version was faulty and resulted in mod_passenger.so being installed in the root dir (doh!) - I’m not sure when that bug crept in.

I’ve also updated the dependencies slightly - it will no longer require the rubygems package.  This helps those of you who have installed gems manually and would rather not use the Ubuntu packages.  If you didn’t install gems manually, you’ll need to explicitly specify the package now.

This, and a little more information can be found on our Passenger wiki page.

If you need help using these packages, or would like to feed back your experiences, go on over to the discussion forum.

Accepted into Ubuntu Intrepid Ibex

And if you weren’t aware, our package was accepted into the official Ubuntu repository (in the universe component) so if you’re using Ubuntu Intrepid Ibex, you can use it straight away! (though it does require the packages rubygems).  Another step towards Ubuntu being the perfect rails stack. The source package page can be found here.

Next up, Ruby Enterprise Edition packages…

Using RSpec, Cucumber and User stories to build our internal systems 21 Nov 08

Here at Brightbox we are making heavy use of RSpec and Cucumber as we develop our next generation internal systems. These let us write specifications, in English and in code, for how the systems should behave. The specifications document the system for future reference and provide an automated test suite to prove that things are working as they should.

We chose RSpec because of its philosophy of “getting the words right”; code is often easier to write than it is read. As these specifications are also our internal documentation they must be easy to read as well.

However, as some of this Behaviour-Driven and Story-Driven development is pretty new, there isn’t much guidance on best practice, especially when it comes to the “User Stories” (which form the basis of the system’s acceptance tests). With that in mind, we thought we’d share our basic process we follow for each new feature.

(Download the original presentation here)

By the way, there’s a very subtle bug in the code; no prizes if you spot it!