Installing on debian setup

[jumpsmm7]

Failed to restart pixelserv-tls.service: Unit pixelserv-tls.service not found.

root@raspberrypi:~# git clone https://github.com/kvic-z/pixelserv-tls Cloning into 'pixelserv-tls'... remote: Enumerating objects: 1097, done. remote: Total 1097 (delta 0), reused 0 (delta 0), pack-reused 1097 Receiving objects: 100% (1097/1097), 505.03 KiB | 3.53 MiB/s, done. Resolving deltas: 100% (744/744), done. root@raspberrypi:~# cd pixelserv-tls root@raspberrypi:~/pixelserv-tls# autoreconf -i configure.ac:4: installing './compile' configure.ac:3: installing './config.guess' configure.ac:3: installing './config.sub' configure.ac:2: installing './install-sh' configure.ac:2: installing './missing' Makefile.am: installing './depcomp' root@raspberrypi:~/pixelserv-tls# ./configure checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... /bin/mkdir -p checking for gawk... gawk checking whether make sets $(MAKE)... yes checking whether make supports nested variables... yes checking build system type... armv7l-unknown-linux-gnueabihf checking host system type... armv7l-unknown-linux-gnueabihf checking for gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking whether gcc understands -c and -o together... yes checking whether make supports the include directive... yes (GNU style) checking dependency style of gcc... gcc3 checking for dlopen in -ldl... yes checking for clock_gettime in -lrt... yes checking for main in -lpthread... yes checking for EVP_EncryptInit in -lcrypto... yes checking for SSL_CTX_new in -lssl... yes checking that generated files are newer than configure... done configure: creating ./config.status config.status: creating Makefile config.status: creating config.h config.status: executing depfiles commands root@raspberrypi:~/pixelserv-tls# make make all-am make[1]: Entering directory '/root/pixelserv-tls' gcc -DHAVE_CONFIG_H -I. -DDROP_ROOT -DIF_MODE -DDEFAULT_PEM_PATH=\"/var/cache/pixelserv\" -O3 -Wall -ffunction-sections -fdata-sections -fno-strict-aliasing -g -O2 -MT pixelserv_tls-pixelserv.o -MD -MP -MF .deps/pixelserv_tls-pixelserv.Tpo -c -o pixelserv_tls-pixelserv.o test -f 'pixelserv.c' || echo './'pixelserv.c mv -f .deps/pixelserv_tls-pixelserv.Tpo .deps/pixelserv_tls-pixelserv.Po gcc -DHAVE_CONFIG_H -I. -DDROP_ROOT -DIF_MODE -DDEFAULT_PEM_PATH=\"/var/cache/pixelserv\" -O3 -Wall -ffunction-sections -fdata-sections -fno-strict-aliasing -g -O2 -MT pixelserv_tls-socket_handler.o -MD -MP -MF .deps/pixelserv_tls-socket_handler.Tpo -c -o pixelserv_tls-socket_handler.o test -f 'socket_handler.c' || echo './'socket_handler.c mv -f .deps/pixelserv_tls-socket_handler.Tpo .deps/pixelserv_tls-socket_handler.Po gcc -DHAVE_CONFIG_H -I. -DDROP_ROOT -DIF_MODE -DDEFAULT_PEM_PATH=\"/var/cache/pixelserv\" -O3 -Wall -ffunction-sections -fdata-sections -fno-strict-aliasing -g -O2 -MT pixelserv_tls-certs.o -MD -MP -MF .deps/pixelserv_tls-certs.Tpo -c -o pixelserv_tls-certs.o test -f 'certs.c' || echo './'certs.c mv -f .deps/pixelserv_tls-certs.Tpo .deps/pixelserv_tls-certs.Po gcc -DHAVE_CONFIG_H -I. -DDROP_ROOT -DIF_MODE -DDEFAULT_PEM_PATH=\"/var/cache/pixelserv\" -O3 -Wall -ffunction-sections -fdata-sections -fno-strict-aliasing -g -O2 -MT pixelserv_tls-util.o -MD -MP -MF .deps/pixelserv_tls-util.Tpo -c -o pixelserv_tls-util.o test -f 'util.c' || echo './'util.c mv -f .deps/pixelserv_tls-util.Tpo .deps/pixelserv_tls-util.Po gcc -DHAVE_CONFIG_H -I. -DDROP_ROOT -DIF_MODE -DDEFAULT_PEM_PATH=\"/var/cache/pixelserv\" -O3 -Wall -ffunction-sections -fdata-sections -fno-strict-aliasing -g -O2 -MT pixelserv_tls-logger.o -MD -MP -MF .deps/pixelserv_tls-logger.Tpo -c -o pixelserv_tls-logger.o test -f 'logger.c' || echo './'`logger.c
mv -f .deps/pixelserv_tls-logger.Tpo .deps/pixelserv_tls-logger.Po
gcc -DDROP_ROOT -DIF_MODE -DDEFAULT_PEM_PATH="/var/cache/pixelserv" -O3 -Wall -ffunction-sections -fdata-sections -fno-strict-aliasing -g -O2 -Wl,--gc-sections -s -o pixelserv-tls pixelserv_tls-pixelserv.o pixelserv_tls-socket_handler.o pixelserv_tls-certs.o pixelserv_tls-util.o pixelserv_tls-logger.o -lssl -lcrypto -lpthread -lrt -ldl
make[1]: Leaving directory '/root/pixelserv-tls'
root@raspberrypi:/pixelserv-tls# make install
make[1]: Entering directory '/root/pixelserv-tls'
/bin/mkdir -p '/usr/local/bin'
/usr/bin/install -c pixelserv-tls '/usr/local/bin'
/bin/mkdir -p '/usr/local/share/man/man1'
/usr/bin/install -c -m 644 pixelserv-tls.1 '/usr/local/share/man/man1'
make[1]: Leaving directory '/root/pixelserv-tls'
root@raspberrypi:/pixelserv-tls# ls
aclocal.m4 depcomp pixelserv-tls.1
autom4te.cache INSTALL pixelserv_tls-certs.o
certs.c install-sh pixelserv_tls-logger.o
certs.h LICENSE pixelserv_tls-pixelserv.o
ChangeLog logger.c pixelserv_tls-socket_handler.o
compile logger.h pixelserv_tls-util.o
config.guess Makefile README.md
config.h Makefile.am socket_handler.c
config.h.in Makefile.in socket_handler.h
config.log Makefile-XC stamp-h1
config.status missing util.c
config.sub openssl util.h
configure pixelserv.c
configure.ac pixelserv-tls
root@raspberrypi:~/pixelserv-tls# ls
aclocal.m4 depcomp pixelserv-tls.1
autom4te.cache INSTALL pixelserv_tls-certs.o
certs.c install-sh pixelserv_tls-logger.o
certs.h LICENSE pixelserv_tls-pixelserv.o
ChangeLog logger.c pixelserv_tls-socket_handler.o
compile logger.h pixelserv_tls-util.o
config.guess Makefile README.md
config.h Makefile.am socket_handler.c
config.h.in Makefile.in socket_handler.h
config.log Makefile-XC stamp-h1
config.status missing util.c
config.sub openssl util.h
configure pixelserv.c
configure.ac pixelserv-tls

root@raspberrypi:/pixelserv-tls# cd tmp
root@raspberrypi:/pixelserv-tls# cd /tmp
root@raspberrypi:/tmp# nano /etc/default/pixelserv-tls
root@raspberrypi:/tmp# service pixelserv-tls restart
Failed to restart pixelserv-tls.service: Unit pixelserv-tls.service not found.`

unable to compile on a debian based setup.

[kvic-z]

The repo currently does not come with a Debian package or a way to generate such a package. So you have a few options here: 1) to start pixelserv-tls from /etc/rc.local or 2) write your own systemd unit file. #2 is preferred and you can borrow and adapt the 'pixelserv-tls.service' from Arch Linux here: https://aur.archlinux.org/packages/pixelserv-tls/

[jumpsmm7]

Kvic-z, I successfully built a debian version for RPI4 by backwards building from the debian version made for the edge router. I broke apart the .deb package and replaced the proper parts with parts provided by the folder that I originally attempted to build from
with the
autoreconf -i ./configure make install
digging deeper into compiling .deb packages allowed me to decompose the original .deb and place new folders created by my original directory provided by the make install. All I had to do after that was modify the required dependences in the DEBIAN file and tell it to support my RPI4 build type.'
ii pixelserv-tls 2.3.0-1 armhf A tiny bespoke webserver for adblock

[jumpsmm7]

https://github.com/jumpsmm7/pixelserv-tls2.30.deb
here is a link to the compiled RPI4 .deb save any one the trouble of building it.
should be noted this is using Jack-Yaz fork with the New IOS certificate fixes patched in.
and should use
openssl genrsa -out ca.key 2048 openssl req -key ca.key -new -x509 -days 3650 -sha256 -extensions v3_ca -out ca.crt -subj "/CN=Pixelserv CA"
for certificate generation vs.
openssl genrsa -out ca.key 1024 openssl req -key ca.key -new -x509 -days 3650 -sha256 -extensions v3_ca -out ca.crt -subj "/CN=Pixelserv CA"

OLD NEWS LINK IS DEAD NEW LINK BELOW

[kvic-z]

Good to hear you got it working already.

v2.3.1 was released yesterday.

Regarding root CA cert, 1024-bit still works for me in macOS Catalina. Chrome & Firefox don't complain either. I mention it in my release post here.

Btw, do you plan to publish the Debian binary package for Raspbian on an on-going basis? I could link to your package in README on the front page.

[jumpsmm7]

I am in process of moving updated binaries from your new branch and building it with new DEBIAN updated info and new changes from your new branch i will inform you about it when i am finished should be rather soon as I have to navigate through moving things around and testing it after build DPKG-repack will make this rather simple.

[jumpsmm7]

https://github.com/jumpsmm7/pixelserv-tls_2.3.1-1_armhf.deb/raw/master/pixelserv-tls_2.3.1-1_armhf.deb
This is the LINK for the new version you are supporting now
pixelserv-tls_2.3.1-1_armhf.deb
where as armhf is the supported platform- so any RPI that is an armhf should work. users will need to test this though to provide feed back as to whether i need to lower the dependencies versions to support their platform but it is easily doable.
install instructions are identical to your other .deb climate
`sudo -i

cd /tmp

curl -O https://github.com/jumpsmm7/pixelserv-tls_2.3.1-1_armhf.deb/raw/master/pixelserv-tls_2.3.1-1_armhf.deb

dpkg -i pixelserv-tls_2.3.1-1_armhf.deb`

during install it gives a list of detailed instructions similar to the ones supplied by your web site about generating CA and binding pixelserv-tls to a specific IP

I plan on staying active on keeping it up-to-date.

[kvic-z]

Cool and thanks. I added to the front page.

[YBS-PC]

when installing dpkg -i pixelserv-tls_2.3.1-1_armhf.deb i get
'pixelserv-tls_2.3.1-1_armhf.deb' is not a Debian format archive

[jumpsmm7]

What version of debian are you using ? Also are you running as root?

[jumpsmm7]

Okay redownloaded it but I used wget https://github.com/jumpsmm7/pixelserv-tls_2.3.1-1_armhf.deb/raw/master/pixelserv-tls_2.3.1-1_armhf.deb

instead of curl -o
and package is working correctly.
using curl seems to pollute the results of downloading the file.

New
install instructions
sudo -i

wget https://github.com/jumpsmm7/pixelserv-tls_2.3.1-1_armhf.deb/raw/master/pixelserv-tls_2.3.1-1_armhf.deb

dpkg -i pixelserv-tls_2.3.1-1_armhf.deb

[kvic-z]

"curl -O" (note the capital letter O) is different from "curl -o" (small letter O). curl has both options. Small letter O and stdio redirection to file will certainly cause corruption to binary data.

[kvic-z]

I believe the issue lies with Github. I've updated the URL to make it consistent with ER-X e.g. Now should work with "curl -O"

[YBS-PC]

sudo -i

wget https://github.com/jumpsmm7/pixelserv-tls_2.3.1-1_armhf.deb/raw/master/pixelserv-tls_2.3.1-1_armhf.deb

dpkg -i pixelserv-tls_2.3.1-1_armhf.deb

Thanks!
Raspbian Buster, Raspberry 3b+

But i get new issue:

is not a native service, redirecting to systemd-sysv-install

...
and the service did not want to start after reboot.

I made a batch file with the command sudo /lib/systemd/systemd-sysv-install enable pixelserv-tls && sudo service pixelserv-tls restart and prescribed a command @reboot sleep 10 && /home/pi/pixelserv-tls/pixelserv-tls.sh in the cron

Now its work with Adguard Home

[jumpsmm7]

yes I have no propblem with mine adding as service. and running after reboot.
`root@raspberrypi:~# systemctl status pixelserv-tls
● pixelserv-tls.service - LSB: pixelserv-tls webserver for adblock
Loaded: loaded (/etc/init.d/pixelserv-tls; generated)
Active: active (running) since Mon 2019-12-16 03:17:24 EST; 4 days ago
Docs: man:systemd-sysv-generator(8)
Tasks: 2 (limit: 4035)
Memory: 6.6M
CGroup: /system.slice/pixelserv-tls.service
└─717 /usr/bin/pixelserv-tls 192.168.1.14 -z /var/cache/pixelserv

Dec 16 03:17:24 raspberrypi systemd[1]: Starting LSB: pixelserv-tls webserver fo
Dec 16 03:17:24 raspberrypi pixelserv-tls[717]: pixelserv-tls 2.3.1 (compiled: D
Dec 16 03:17:24 raspberrypi systemd[1]: Started LSB: pixelserv-tls webserver for
Dec 16 03:17:25 raspberrypi pixelserv-tls[717]: Listening on :192.168.1.14:443
Dec 16 03:17:25 raspberrypi pixelserv-tls[717]: Listening on :192.168.1.14:80
`
but raspbian 4 does not seem to give the issue of allowing me to add it as a service. it does mention the same systemd-sysv-install though.

[VNGXR]

Hello, I'm trying to compile it for arm64 on my RPi4 with ubuntu 19.10. It compiles without any errors, but doesn't start after, just exits with code 0, and I can't find any logs. Am I missing some package or ...?

checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... /usr/bin/mkdir -p checking for gawk... gawk checking whether make sets $(MAKE)... yes checking whether make supports nested variables... yes checking build system type... aarch64-unknown-linux-gnu checking host system type... aarch64-unknown-linux-gnu checking for gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking whether gcc understands -c and -o together... yes checking whether make supports the include directive... yes (GNU style) checking dependency style of gcc... gcc3 checking for dlopen in -ldl... yes checking for clock_gettime in -lrt... yes checking for main in -lpthread... yes checking for EVP_EncryptInit in -lcrypto... yes checking for SSL_CTX_new in -lssl... yes checking that generated files are newer than configure... done configure: creating ./config.status config.status: creating Makefile config.status: creating config.h config.status: config.h is unchanged config.status: executing depfiles commands

make all-am make[1]: Entering directory '/home/vngxr/sources/pixelserv-tls' gcc -DHAVE_CONFIG_H -I. -DDROP_ROOT -DIF_MODE -DDEFAULT_PEM_PATH=\"/var/cache/pixelserv\" -O3 -Wall -ffunction-sections -fdata-sections -fno-strict-aliasing -g -O2 -MT pixelserv_tls-pixelserv.o -MD -MP -MF .deps/pixelserv_tls-pixelserv.Tpo -c -o pixelserv_tls-pixelserv.o 'test -f 'pixelserv.c' || echo './''pixelserv.c mv -f .deps/pixelserv_tls-pixelserv.Tpo .deps/pixelserv_tls-pixelserv.Po gcc -DHAVE_CONFIG_H -I. -DDROP_ROOT -DIF_MODE -DDEFAULT_PEM_PATH=\"/var/cache/pixelserv\" -O3 -Wall -ffunction-sections -fdata-sections -fno-strict-aliasing -g -O2 -MT pixelserv_tls-socket_handler.o -MD -MP -MF .deps/pixelserv_tls-socket_handler.Tpo -c -o pixelserv_tls-socket_handler.o 'test -f 'socket_handler.c' || echo './''socket_handler.c mv -f .deps/pixelserv_tls-socket_handler.Tpo .deps/pixelserv_tls-socket_handler.Po gcc -DHAVE_CONFIG_H -I. -DDROP_ROOT -DIF_MODE -DDEFAULT_PEM_PATH=\"/var/cache/pixelserv\" -O3 -Wall -ffunction-sections -fdata-sections -fno-strict-aliasing -g -O2 -MT pixelserv_tls-certs.o -MD -MP -MF .deps/pixelserv_tls-certs.Tpo -c -o pixelserv_tls-certs.o 'test -f 'certs.c' || echo './''certs.c mv -f .deps/pixelserv_tls-certs.Tpo .deps/pixelserv_tls-certs.Po gcc -DHAVE_CONFIG_H -I. -DDROP_ROOT -DIF_MODE -DDEFAULT_PEM_PATH=\"/var/cache/pixelserv\" -O3 -Wall -ffunction-sections -fdata-sections -fno-strict-aliasing -g -O2 -MT pixelserv_tls-util.o -MD -MP -MF .deps/pixelserv_tls-util.Tpo -c -o pixelserv_tls-util.o 'test -f 'util.c' || echo './''util.c mv -f .deps/pixelserv_tls-util.Tpo .deps/pixelserv_tls-util.Po gcc -DHAVE_CONFIG_H -I. -DDROP_ROOT -DIF_MODE -DDEFAULT_PEM_PATH=\"/var/cache/pixelserv\" -O3 -Wall -ffunction-sections -fdata-sections -fno-strict-aliasing -g -O2 -MT pixelserv_tls-logger.o -MD -MP -MF .deps/pixelserv_tls-logger.Tpo -c -o pixelserv_tls-logger.o 'test -f 'logger.c' || echo './''logger.c mv -f .deps/pixelserv_tls-logger.Tpo .deps/pixelserv_tls-logger.Po gcc -DDROP_ROOT -DIF_MODE -DDEFAULT_PEM_PATH=\"/var/cache/pixelserv\" -O3 -Wall -ffunction-sections -fdata-sections -fno-strict-aliasing -g -O2 -Wl,--gc-sections -s -o pixelserv-tls pixelserv_tls-pixelserv.o pixelserv_tls-socket_handler.o pixelserv_tls-certs.o pixelserv_tls-util.o pixelserv_tls-logger.o -lssl -lcrypto -lpthread -lrt -ldl make[1]: Leaving directory '/home/vngxr/sources/pixelserv-tls'

make[1]: Entering directory '/home/vngxr/sources/pixelserv-tls' /usr/bin/mkdir -p '/usr/local/bin' /usr/bin/install -c pixelserv-tls '/usr/local/bin' /usr/bin/mkdir -p '/usr/local/share/man/man1' /usr/bin/install -c -m 644 pixelserv-tls.1 '/usr/local/share/man/man1' make[1]: Leaving directory '/home/vngxr/sources/pixelserv-tls'

It outputs pixelserv-tls 2.3.1 (compiled: Jan 23 2020 12:02:39 flags: tfo tls1_3)... when I start it with an unknown launch option, but just exits on normal start

Any suggestions? :(

[jumpsmm7]

Unfortunately I have not compiled for ubuntu setup as I have only run Raspbian and Arch Linux. Alot of the pathways are similar. maybe reference Raspbian methods or Archlinux methods to see how to properly compile it.

[burnsba]

I cloned the repo and installed on debian. In order to get pixelserv to start automatically on boot I'm using the following systemd script:

root@hostname:~# cat /etc/systemd/system/pixelserv-tls.service
# Contents of /etc/systemd/system/pixelserv-tls.service

[Unit]
Description=pixelserv-tls instance
After=network.target

[Service]
Type=forking
Restart=always
ExecStart=/usr/local/bin/pixelserv-tls -z /var/cache/pixelserv/

[Install]
WantedBy=multi-user.target

I didn't realize there was an arch example already, I wrote this based on https://wiki.debian.org/systemd/Services and found out that type=forking is important.

This is for Debian 10.4 (buster/stable) on linux 4.19, pixelserv version 2.3.1:

root@hostname:~# cat /etc/debian_version
10.4
root@hostname:~# uname -a
Linux hostname 4.19.0-9-amd64 #1 SMP Debian 4.19.118-2 (2020-04-29) x86_64 GNU/Linux
root@hostname:~# pixelserv-tls --version
pixelserv-tls 2.3.1 (compiled: May 16 2020 20:36:13 flags: tfo tls1_3)

[jumpsmm7]

Nice, the fork I maintain runs on Raspbian(buster/stable). Glad to see you managed to work it out for another debian system.

root@raspberrypi:~# pixelserv-tls --version pixelserv-tls 2.3.1 (compiled: Dec 14 2019 02:25:28 flags: tfo tls1_3)
root@raspberrypi:~# uname -a Linux 
raspberrypi 4.19.97-v7l+ #1294 SMP Thu Jan 30 13:21:14 GMT 2020 armv7l GNU/Linux 
root@raspberrypi:~# cat /etc/debian_version
10.4

[jumpsmm7]

I cloned the repo and installed on debian. In order to get pixelserv to start automatically on boot I'm using the following systemd script:

root@hostname:~# cat /etc/systemd/system/pixelserv-tls.service
# Contents of /etc/systemd/system/pixelserv-tls.service

[Unit]
Description=pixelserv-tls instance
After=network.target

[Service]
Type=forking
Restart=always
ExecStart=/usr/local/bin/pixelserv-tls -z /var/cache/pixelserv/

[Install]
WantedBy=multi-user.target

I didn't realize there was an arch example already, I wrote this based on https://wiki.debian.org/systemd/Services and found out that type=forking is important.

This is for Debian 10.4 (buster/stable) on linux 4.19, pixelserv version 2.3.1:

root@hostname:~# cat /etc/debian_version
10.4
root@hostname:~# uname -a
Linux hostname 4.19.0-9-amd64 #1 SMP Debian 4.19.118-2 (2020-04-29) x86_64 GNU/Linux
root@hostname:~# pixelserv-tls --version
pixelserv-tls 2.3.1 (compiled: May 16 2020 20:36:13 flags: tfo tls1_3)

I managed to get mine to work on boot using the
/lib/systemd/systemd-sysv-install

using systemctl enable pixelserv-tls

the file /etc/init.d/pixelserv-tls is used to launch the daemon arguments which get stored in

/etc/default/pixelserv-tls

/lib/systemd/systemd-sysv-install enable
or using
systemctl enable pixelserv-tls
pixelserv-tls gets stored as a system generated process
● pixelserv-tls.service - LSB: pixelserv-tls webserver for adblock Loaded: loaded (/etc/init.d/pixelserv-tls; generated) Active: inactive (dead) Docs: man:systemd-sysv-generator(8)
I have mine disabled at this moment though.

The method you used is just another method that works as well.
Thank you for sharing.

[jumpsmm7]

I will be adding support shortly for your updated version.

[jumpsmm7]

@kvic-z
#42 I just patched through changes to the README.md for https://github.com/jumpsmm7/pixelserv-tls_2.4_armhf.deb
instructions are the same only difference is the .deb version and binaries are up-to-date along with the .deb new control minimum OpenSSL1.1.x (libssl1.1.x [>= 1.1.x]) requirements