Difference between revisions of "Debian 12 Bookworm with Zoneminder 1.36.33"

From ZoneMinder Wiki
Jump to navigationJump to search
 
(73 intermediate revisions by 4 users not shown)
Line 1: Line 1:
Debian 9 with Zoneminder 1.30.0
__TOC__


04MAR17 Zoneminder has been pulled from Debian 9 because of a reported vulnerability. Actually this was caused by the install procedure and not Zoneminder itself. Am working to get the package reinstated. Alternative install procedure provided below.
==Debian 12 with Zoneminder 1.36.x==


This procedure fixes the directory browse vulnerability.
Debian 12 Bookworm is released with Zoneminder 1.36.33 and as usual for Debian the zm database needs to be created manually.


Use Debian 9 net install CD. Install only: web server, SSH server and standard system utilities from tasksel
'''Note: This version has been verified with Bookworm Debian 12 official release. A few issues have been found and corrected. Zoneminder now opens in Firefox (Windows, Linux and Android), Edge, Chrome (on Android). ZmNinja on Android also works. If using ZmNinja you may have to clear the API cache. Please report other errors on the Zoneminder forum.'''


Login and become root (su root) or prepend sudo to the following commands
In time a version of Zoneminder for Bookworm will be made available in the zmrepo.


If needed check to make sure you are up to date
You will have to install sudo and add the user to the sudoers file.


  apt update
Become root with
  apt upgrade
 
  apt dist-upgrade
su
 
Install sudo
 
  apt install sudo
 
Then add the user
 
  /sbin/adduser username sudo
 
I recommend rebooting at this point but a log out and back in also works.
 
Become root
 
  sudo su
 
Timezone: it is recommended you set your specific timesone with:


Install additional LAMP components (Mariadb server recommended)
timedatectl set-timezone America/New_York


apt install php mariadb-server php-mysql apache2-mod-php7.0
Of course use your timezone in place of America/New_York


Secure Mariadb, create root password et. al.
Install Apache2, PHP and your favorite database (Mariadb recommended). A quick way to install LAMP is:


  mysql_secure_installation
  apt install apache2 mariadb-server php libapache2-mod-php php-mysql lsb-release gnupg2


Add timezone to PHP (This may not be necessary but does not hurt and will allow the time of events to be displayed correctly)


Or to install MySQL Server
nano /etc/php/8.2/apache2/php.ini


apt install php default-mysql-server php-mysql apache2-mod-php7.0
Search for [Date] (Ctrl + w then type Date and press Enter) and make changes as follows for your time zone


Install Zoneminder
[Date]
; Defines the default timezone used by the date functions
; http://php.net/date.timezone
date.timezone = America/New_York
 
Ctrl+o Enter to save
 
CTRL+x to exit


apt install zoneminder
Restart Apache
--------------------------------------------------------------------------------------------
Alternative install procedure.


Download the Zoneminder packages: https://packages.debian.org/unstable/zoneminder and https://packages.debian.org/unstable/zoneminder-doc
service apache2 restart


Install Zoneminder
Install Zoneminder


  dpkg -i zoneminder_1.30.0+dfsg-2_amd64.deb
  apt install zoneminder
dpkg -i zoneminder-doc_1.30.0+dfsg-2_all.deb


You will get install errors about dependences not met. Fix with:
Create Zoneminder database in MySQL (Note: this also creates the default Zoneminder user and permissions in MySQL) Use the server root password when prompted.
 
apt install -f
------------------------------------------------------------------------------------------------
Create Zoneminder database in MySQL (Note: this also creates the default Zoneminder user and permissions in MySQL)


  mysql -uroot -p < /usr/share/zoneminder/db/zm_create.sql
  mysql -uroot -p < /usr/share/zoneminder/db/zm_create.sql
Line 53: Line 70:
  mysqladmin -uroot -p reload
  mysqladmin -uroot -p reload


Set permissions of /etc/zm/zm.conf to root:www-data 740
Set permissions  
 
chmod 640 /etc/zm/zm.conf
chown root:www-data /etc/zm/zm.conf
chown -R www-data:www-data /var/cache/zoneminder/
chmod 755 /var/cache/zoneminder/
 
Replace zoneminder.conf


  chmod 740 /etc/zm/zm.conf
  cp /etc/apache2/conf-available/zoneminder.conf /etc/apache2/conf-available/zoneminder.conf.sav


  chown root:www-data /etc/zm/zm.conf
  rm /etc/apache2/conf-available/zoneminder.conf
 
nano /etc/apache2/conf-available/zoneminder.conf
 
Paste the following content into nano:


# Remember to enable cgi mod (i.e. "a2enmod cgi").
ScriptAlias /zm/cgi-bin "/usr/lib/zoneminder/cgi-bin"
<Directory "/usr/lib/zoneminder/cgi-bin">
    Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
    AllowOverride All
    Require all granted
</Directory>
# Order matters. This alias must come first.
Alias /zm/cache "/var/cache/zoneminder"
<Directory "/var/cache/zoneminder">
    Options -Indexes +FollowSymLinks
    AllowOverride None
    <IfModule mod_authz_core.c>
        # Apache 2.4
        Require all granted
    </IfModule>
</Directory>
Alias /zm /usr/share/zoneminder/www
<Directory /usr/share/zoneminder/www>
  Options -Indexes +FollowSymLinks
  <IfModule mod_dir.c>
    DirectoryIndex index.php
  </IfModule>
</Directory>
# For better visibility, the following directives have been migrated from the
# default .htaccess files included with the CakePHP project.
# Parameters not set here are inherited from the parent directive above.
<Directory "/usr/share/zoneminder/www/api">
    RewriteEngine on
    RewriteRule ^$ app/webroot/ [L]
    RewriteRule (.*) app/webroot/$1 [L]
    RewriteBase /zm/api
</Directory>
<Directory "/usr/share/zoneminder/www/api/app">
    RewriteEngine on
    RewriteRule ^$ webroot/ [L]
    RewriteRule (.*) webroot/$1 [L]
    RewriteBase /zm/api
</Directory>
<Directory "/usr/share/zoneminder/www/api/app/webroot">
    RewriteEngine On
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteRule ^ index.php [L]
    RewriteBase /zm/api
</Directory>
Enable Zoneminder service to start at boot
Enable Zoneminder service to start at boot


Line 71: Line 155:
  systemctl start zoneminder.service
  systemctl start zoneminder.service


Check to see that Zoneminder is running
Enable Zoneminder configuration in Apache.
 
a2enconf zoneminder
a2enmod rewrite
a2enmod headers
a2enmod expires
a2enmod cgi
service apache2 reload
 
Install complete. Open Zoneminder/Options and set the timezone in Options/System. Add cameras.


systemctl status zoneminder.service
----------------------------------------------------------------------------------------------------------
==Debian 12 with Zoneminder 1.37.x==
Install Zoneminder Development Branch 1.37.x on Debian 12


Enable CGI and Zoneminder configuration in Apache.
You will have to install sudo and add the user to the sudoers file.  


  a2enmod cgi
Become root with
 
  su
 
Install sudo
 
apt install sudo


a2enmod rewrite
Then add the user


  a2enconf zoneminder
  /sbin/adduser username sudo


Add timezone to PHP
I recommend rebooting at this point but a log out and back in also works.


nano /etc/php/7.0/apache2/php.ini
Install Apache2, PHP and your favorite database (Mariadb recommended). A quick way to install LAMP is:


Search for [Date] (Ctrl + w then type Date and press Enter) and make changes as follows for your time zone. Be sure to remove the ; before date.timezone
apt install apache2 mariadb-server php libapache2-mod-php php-mysql lsb-release gnupg2


[Date]
; Defines the default timezone used by the date functions
; http://php.net/date.timezone
date.timezone = America/New_York


Ctrl+o Enter to save
Become root with sudo su before running this!


CTRL+x to exit
Shell script file contents:


Change permissions in /usr/share/zoneminder/
#!/bin/sh
clear
read -p "This script installs ZoneMinder 1.37.x on Debian 12 with LAMP (MySQL or Mariadb) installed...
This script must be run as root!
Press Enter to continue or Ctrl + c to quit" nothing
clear
apt install -y lsb-release gnupg2
echo "deb https://zmrepo.zoneminder.com/debian/master "`lsb_release  -c -s`"/" | sudo tee /etc/apt/sources.list.d/zoneminder.list
wget -O - https://zmrepo.zoneminder.com/debian/archive-keyring.gpg | sudo apt-key add -
read -p "Warning! Check above to insure the line says OK. If not the GPG signing key was not installed and you will need to figure out why before continuing.
Press enter to continue" nothing
apt update
clear
apt install -y zoneminder
systemctl enable zoneminder
service zoneminder start
adduser www-data video
a2enconf zoneminder
a2enmod rewrite
a2enmod headers
a2enmod expires
service apache2 reload
clear
read -p "Install complete. Open Zoneminder/Options and set the timezone. Press enter to continue" nothing
clear


chown -R www-data:www-data /usr/share/zoneminder/


Note: the following edit fixes the expose directory "vulnerability."
Copy the contents of the script, open a terminal and run:


Edit zoneminder.conf Note: The following changes may be in the file.
nano zm-install


nano /etc/apache2/conf-available/zoneminder.conf
Paste the contents of the script into Nano


Add a - before Indexes and a + before FollowSymLinks as shown
Then:


  <Directory /usr/share/zoneminder/www>
  Ctrl + o Ctrl + x
  Options -Indexes +FollowSymLinks


Make sure the following is at the bottom of the file
Next run:


  <Directory /usr/share/zoneminder/www/api>
  chmod 755 zm-install
    AllowOverride All
</Directory>


Ctrl+o Enter to save
Start the script by entering:


CTRL+x to exit
./zm-install


Restart Apache
Follow the prompts. Things are pretty simple. The timezone is now set in Zoneminder/Options.


service apache2 restart
Good Luck!

Latest revision as of 15:10, 4 November 2023

Debian 12 with Zoneminder 1.36.x

Debian 12 Bookworm is released with Zoneminder 1.36.33 and as usual for Debian the zm database needs to be created manually.

Note: This version has been verified with Bookworm Debian 12 official release. A few issues have been found and corrected. Zoneminder now opens in Firefox (Windows, Linux and Android), Edge, Chrome (on Android). ZmNinja on Android also works. If using ZmNinja you may have to clear the API cache. Please report other errors on the Zoneminder forum.

In time a version of Zoneminder for Bookworm will be made available in the zmrepo.

You will have to install sudo and add the user to the sudoers file.

Become root with

su

Install sudo

apt install sudo

Then add the user

/sbin/adduser username sudo 

I recommend rebooting at this point but a log out and back in also works.

Become root

sudo su

Timezone: it is recommended you set your specific timesone with:

timedatectl set-timezone America/New_York

Of course use your timezone in place of America/New_York

Install Apache2, PHP and your favorite database (Mariadb recommended). A quick way to install LAMP is:

apt install apache2 mariadb-server php libapache2-mod-php php-mysql lsb-release gnupg2

Add timezone to PHP (This may not be necessary but does not hurt and will allow the time of events to be displayed correctly)

nano /etc/php/8.2/apache2/php.ini

Search for [Date] (Ctrl + w then type Date and press Enter) and make changes as follows for your time zone

[Date]
; Defines the default timezone used by the date functions
; http://php.net/date.timezone
date.timezone = America/New_York

Ctrl+o Enter to save

CTRL+x to exit

Restart Apache

service apache2 restart

Install Zoneminder

apt install zoneminder

Create Zoneminder database in MySQL (Note: this also creates the default Zoneminder user and permissions in MySQL) Use the server root password when prompted.

mysql -uroot -p < /usr/share/zoneminder/db/zm_create.sql
mysql -uroot -p -e "grant all on zm.* to 'zmuser'@localhost identified by 'zmpass';"
mysqladmin -uroot -p reload

Set permissions

chmod 640 /etc/zm/zm.conf

chown root:www-data /etc/zm/zm.conf

chown -R www-data:www-data /var/cache/zoneminder/

chmod 755 /var/cache/zoneminder/

Replace zoneminder.conf

cp /etc/apache2/conf-available/zoneminder.conf /etc/apache2/conf-available/zoneminder.conf.sav
rm /etc/apache2/conf-available/zoneminder.conf
nano /etc/apache2/conf-available/zoneminder.conf

Paste the following content into nano:

# Remember to enable cgi mod (i.e. "a2enmod cgi").
ScriptAlias /zm/cgi-bin "/usr/lib/zoneminder/cgi-bin"
<Directory "/usr/lib/zoneminder/cgi-bin">
    Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
    AllowOverride All
    Require all granted
</Directory>


# Order matters. This alias must come first.
Alias /zm/cache "/var/cache/zoneminder"
<Directory "/var/cache/zoneminder">
    Options -Indexes +FollowSymLinks
    AllowOverride None
    <IfModule mod_authz_core.c>
        # Apache 2.4
        Require all granted
    </IfModule>
</Directory>

Alias /zm /usr/share/zoneminder/www
<Directory /usr/share/zoneminder/www>
  Options -Indexes +FollowSymLinks
  <IfModule mod_dir.c>
    DirectoryIndex index.php
  </IfModule>
</Directory>

# For better visibility, the following directives have been migrated from the
# default .htaccess files included with the CakePHP project.
# Parameters not set here are inherited from the parent directive above.
<Directory "/usr/share/zoneminder/www/api">
   RewriteEngine on
   RewriteRule ^$ app/webroot/ [L]
   RewriteRule (.*) app/webroot/$1 [L]
   RewriteBase /zm/api
</Directory>

<Directory "/usr/share/zoneminder/www/api/app">
   RewriteEngine on
   RewriteRule ^$ webroot/ [L]
   RewriteRule (.*) webroot/$1 [L]
   RewriteBase /zm/api
</Directory>

<Directory "/usr/share/zoneminder/www/api/app/webroot">
    RewriteEngine On
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteRule ^ index.php [L]
    RewriteBase /zm/api
</Directory>

Enable Zoneminder service to start at boot

systemctl enable zoneminder.service

Add www-data to the sudo group (to enable use of local video devices)

adduser www-data video

Start Zoneminder

systemctl start zoneminder.service

Enable Zoneminder configuration in Apache.

a2enconf zoneminder

a2enmod rewrite

a2enmod headers

a2enmod expires

a2enmod cgi

service apache2 reload

Install complete. Open Zoneminder/Options and set the timezone in Options/System. Add cameras.


Debian 12 with Zoneminder 1.37.x

Install Zoneminder Development Branch 1.37.x on Debian 12

You will have to install sudo and add the user to the sudoers file.

Become root with

su

Install sudo

apt install sudo

Then add the user

/sbin/adduser username sudo 

I recommend rebooting at this point but a log out and back in also works.

Install Apache2, PHP and your favorite database (Mariadb recommended). A quick way to install LAMP is:

apt install apache2 mariadb-server php libapache2-mod-php php-mysql lsb-release gnupg2


Become root with sudo su before running this!

Shell script file contents:

#!/bin/sh
clear
read -p "This script installs ZoneMinder 1.37.x on Debian 12 with LAMP (MySQL or Mariadb) installed...
This script must be run as root!
Press Enter to continue or Ctrl + c to quit" nothing
clear
apt install -y lsb-release gnupg2
echo "deb https://zmrepo.zoneminder.com/debian/master "`lsb_release  -c -s`"/" | sudo tee /etc/apt/sources.list.d/zoneminder.list
wget -O - https://zmrepo.zoneminder.com/debian/archive-keyring.gpg | sudo apt-key add -
read -p "Warning! Check above to insure the line says OK. If not the GPG signing key was not installed and you will need to figure out why before continuing. 
Press enter to continue" nothing
apt update
clear
apt install -y zoneminder
systemctl enable zoneminder
service zoneminder start
adduser www-data video
a2enconf zoneminder
a2enmod rewrite
a2enmod headers
a2enmod expires
service apache2 reload
clear
read -p "Install complete. Open Zoneminder/Options and set the timezone. Press enter to continue" nothing
clear


Copy the contents of the script, open a terminal and run:

nano zm-install

Paste the contents of the script into Nano

Then:

Ctrl + o Ctrl + x

Next run:

chmod 755 zm-install

Start the script by entering:

./zm-install

Follow the prompts. Things are pretty simple. The timezone is now set in Zoneminder/Options.

Good Luck!