Indeed, the upgrade did not go smooth -- as we skipped over Debian Amatlocuilin, i.e., 'Bookworm', and went right into Debian Trixie. Accordingly, during the last couple of weeks, we have been ironing out some site(s) issues -- as this was a major operating system upgrade. Yet, the common denominator is that our file system continues to be reiser4 Software Format Release Number (SFRN) 4.0.2, i.e., we eat our own cooking.
I began by modifyng the /etc/grub.d/40_custom file to specify the hard disk media and partition where our Metztli Reiser4 Z ISO/USB image was located:
Our hosting provider did not make the installation of our custom Metztli Reiser4 easy, either. I had to first install one of their boilerplate Debian Trixie offerings which file system was extARG! -- AWFUL! -- and then create a 500MB partition, formatted in JFS, to host our Metztli Reiser4 ISO/USB image. Also, our hosting provider-customized boilerplate grub did not allow our keyboard arrows to select our image, already visible in the menu, thus I had to manually specify which entry to boot as default, and then reboot again.
Difference in typical /boot/grub/grub.cfg and, after update-grub command, with our /etc/grub.d/40_custom modifications:
This Nginx build addresses MitM injection CVE-2026-1642
We also hacked: ModSecurity v3 library component and development files:
libmodsecurity3t64_3.0.14-1.1_amd64.deb
libmodsecurity-dev_3.0.14-1.1_amd64.deb
The WAF module for Nginx
The ModSecurity-nginx connector is the connection point between nginx and libmodsecurity (ModSecurity v3). Said another way, this project provides a communication channel between nginx and libmodsecurity. This connector is required to use LibModSecurity with nginx:
libnginx-mod-http-modsecurity_1.0.4-2_amd64.deb
GeoIP2 HTTP module for Nginx and GeoIP2 Stream module for Nginx:
libnginx-mod-http-geoip2_3.4-7.2_amd64.deb
libnginx-mod-stream-geoip2_3.4-7.2_amd64.deb
Nginx Upstream Fair Proxy Load Balancer:
libnginx-mod-http-upstream-fair_0.0~git20120408.a18b409-7.2_amd64.deb
Substitution filter module for Nginx
Substitution Nginx module can do both regular expression and fixed string substitutions on response bodies. The module is quite different from Nginx's native Substitution module. It scans the output chains buffer and matches string line by line, just like Apache's mod_substitute:
libnginx-mod-http-subs-filter_0.6.4-8.2_amd64.deb
Nginx Development Kit module and Nginx Development Kit module - development files:
libnginx-mod-http-ndk_0.3.4-4.2_amd64.deb
libnginx-mod-http-ndk-dev_0.3.4-4.2_all.deb
Bring echo and more shell style goodies to Nginx:
libnginx-mod-http-echo_0.64-1.2_amd64.deb
WebDAV missing commands support for Nginx:
libnginx-mod-http-dav-ext_3.0.0-7.2_amd64.deb
PAM authentication module for Nginx:
libnginx-mod-http-auth-pam_1.5.5-4.2_amd64.deb
Nginx, a small, powerful, scalable web/proxy server Nginx ("engine X") is a high-performance web and reverse proxy server created by Igor Sysoev. It can be used both as a standalone web server and as a proxy to reduce the load on back-end HTTP or mail servers:
libnginx-mod-stream-geoip_1.29.5-1_amd64.deb
libnginx-mod-stream_1.29.5-1_amd64.deb
libnginx-mod-mail_1.29.5-1_amd64.deb
libnginx-mod-http-xslt-filter_1.29.5-1_amd64.deb
libnginx-mod-http-perl_1.29.5-1_amd64.deb
libnginx-mod-http-image-filter_1.29.5-1_amd64.deb
libnginx-mod-http-geoip_1.29.5-1_amd64.deb
nginx-extras_1.29.5-1_amd64.deb
Available resources are available on an AS-IS basis, i.e., there are no implicit nor explicit warranties as to their suitability in anyone and/or any group intended use. Resources are published for the sake of illustration of our procedures arriving at our stated objectives.
