ZoneMinder video camera security and surveillance: Difference between revisions

From Alpine Linux
(Added rc-update commands to start on boot)
(replace /etc/init.d with rc-service)
 
(21 intermediate revisions by 9 users not shown)
Line 1: Line 1:
ZoneMinder usually runs with apache, but in this short howto we use lighttpd.
[https://www.zoneminder.com/ ZoneMinder] usually runs with [[Apache]], but in this short how-to we use [[Lighttpd]].


First add the needed packages to our system


apk add zoneminder mysql mysql-client lighttpd php-fpm php-pdo php-pdo_mysql
==Base Install==


Initialize mysql database
ZoneMinder is found in the community repositories, please enable it by following the instructions [[Repositories#Enabling_the_community_repository|here]]


/etc/init.d/mariadb setup
Then, add the needed packages to our system


set root password for mysql as instructed by mysql setup
apk add zoneminder mariadb mysql-client lighttpd php8-fpm php8-pdo php8-pdo_mysql
 
''Note: In Alpine 3.17, php 8.1 replaces php8.0''
 
apk add zoneminder mariadb mysql-client lighttpd php81-fpm php81-pdo php81-pdo_mysql
 
===Database===
 
Initialize [https://www.mysql.com/ MySQL] database
 
rc-service mariadb setup
 
Start the database
 
rc-service mariadb start
 
Set root password for MySQL as instructed by MySQL setup


  /usr/bin/mysqladmin -u root password 'your_secure_root_mysql_password'
  /usr/bin/mysqladmin -u root password 'your_secure_root_mysql_password'


Create a zoneminder MySQL database and user
You can log into MySQL as current root user with
mysql
 
Create a ZoneMinder MySQL database and user


  mysql> create database zm;
  mysql> create database zm;


  mysql> CREATE USER zm@localhost IDENTIFIED BY 'your_zm_password_as_set_in_config';
  mysql> CREATE USER zmuser@localhost IDENTIFIED BY 'your_zm_password_as_set_in_config';


  mysql> grant CREATE, INSERT, SELECT, DELETE, UPDATE, DROP on zm.* to zm@localhost;
  mysql> grant ALL on zm.* to zmuser@localhost;


We are running lighttpd so lets run php-fpm as lighttpd user/group
===Web Server===


vim /etc/php/php-fpm.conf
We are running <code>lighttpd</code>, so let's run <code>php-fpm</code> as lighttpd user/group


Which should look like:
vi /etc/php8/php-fpm.conf
 
''Note: for php 8.1''
 
vi /etc/php81/php-fpm.conf
 
Add this section to the bottom of the file:


  ; Unix user/group of processes
  ; Unix user/group of processes
Line 35: Line 59:
  group = lighttpd
  group = lighttpd


Enable the php cgi fpm config in lighttpd.conf
Enable the php cgi fpm config in <code>lighttpd.conf</code>


  vim /etc/lighttpd/lighttpd.conf
  vi /etc/lighttpd/lighttpd.conf
 
Go down to the server modules section and uncomment <code>mod_alias</code>, which is needed for the cgi-bin, and <code>mod_rewrite</code>, for the api. It should look like:
 
# {{{ modules
# At the very least, mod_access and mod_accesslog should be enabled.
# All other modules should only be loaded if necessary.
# NOTE: the order of modules is important.
server.modules = (
      "mod_rewrite",
#    "mod_redirect",
      "mod_alias",
      "mod_access",
#    "mod_cml",
#    "mod_trigger_b4_dl",
#    "mod_auth",
#    "mod_status",
#    "mod_setenv",
#    "mod_proxy",
#    "mod_simple_vhost",
#    "mod_evhost",
#    "mod_userdir",
#    "mod_deflate",
#    "mod_ssi",
#    "mod_usertrack",
#    "mod_expire",
#    "mod_secdownload",
#    "mod_rrdtool",
#    "mod_webdav",
      "mod_accesslog"
)
# }}}


Go down to the includes section, it should look like:
Go down to the includes section, it should look like:
Line 50: Line 105:
   
   
  # }}}
  # }}}
In order for video streaming to work in 1.36, you'll need the following
added to /etc/lighttpd/lighttpd.conf:
server.stream-response-body = 1
In lighttpd.conf for the API, we will want to redirect any api+ requests to cakephp. Thus, add:
url.rewrite = (
      "^/zm/api(.+)$"          =>              "/zm/api/index.php"
)


Edit lighttpd cgi config and add old style cgi support by adding to cgi.assign
Edit lighttpd cgi config and add old style cgi support by adding to cgi.assign


  vim /etc/lighttpd/mod_cgi.conf
  vi /etc/lighttpd/mod_cgi.conf


which should look like
which should look like
Line 63: Line 129:
  )
  )


start php-fpm
Also add the following to alias.url in mod_cgi.conf so that it looks like
 
alias.url = (
    "/cgi-bin/"            =>      var.basedir + "/cgi-bin/",
    "/zm/api"              =>      "/usr/share/webapps/zoneminder/htdocs/api/app/webroot/",
    "/zm/"                =>      "/usr/share/webapps/zoneminder/htdocs/"
)
 
Remove the symlink in /var/www/localhost/htdocs (we will be using the alias, not the symlink).
unlink /var/www/localhost/htdocs/zm
 
Start php-fpm
 
rc-service php-fpm8 start
 
''Note:'' for php-fpm81, use the following command:
 
rc-service php-fpm81 start


/etc/init.d/php-fpm start
Start lighttpd


start lighttpd
rc-service lighttpd start


/etc/init.d/lighttpd start
===Zoneminder===


Set the MySQL hostname, username, password.
Set the MySQL hostname, username, password.


Change the ZoneMinder user (ZM_WEB_USER) and group (ZM_WEB_GROUP) to lighttpd
Change the ZoneMinder user (<code>ZM_WEB_USER</code>) and group (<code>ZM_WEB_GROUP</code>) to lighttpd


And set ZM_SERVER_HOST to your zoneMinder hostname/ipaddress
And set <code>ZM_SERVER_HOST</code> to your ZoneMinder hostname/ipaddress


  vim /etc/zm.conf
  vi /etc/zm/zm.conf


Which should look like:
Which should look like:
Line 84: Line 167:
  ZM_WEB_USER=lighttpd
  ZM_WEB_USER=lighttpd
  ZM_WEB_GROUP=lighttpd
  ZM_WEB_GROUP=lighttpd
ZM_PATH_DATA=/usr/share/zoneminder


  # ZoneMinder database type: so far only mysql is supported
  # ZoneMinder database type: so far only mysql is supported
Line 95: Line 179:
   
   
  # ZoneMinder database user
  # ZoneMinder database user
  ZM_DB_USER=zm
  ZM_DB_USER=zmuser
   
   
  # ZoneMinder database password
  # ZoneMinder database password
Line 103: Line 187:
  ZM_SERVER_HOST=yourserver
  ZM_SERVER_HOST=yourserver


Change ownership of zm.conf to lighttpd
Change ownership of <code>zm.conf</code> to <code>lighttpd</code>


  chown lighttpd.lighttpd /etc/zm.conf
  chown lighttpd.lighttpd /etc/zm/zm.conf


Initialize the zoneminder database
Zoneminder will create a cache in <code>/var/cache/zoneminder</code> which isn't created by default. Create this directory and allow lighttpd access to it. Note that if you are using a diskless install, you must lbu add /var/cache/zoneminder.


  /etc/init.d/zoneminder setup
  mkdir /var/cache/zoneminder
chown lighttpd.lighttpd /var/cache/zoneminder


Start zoneminder


  /etc/init.d/zoneminder start
Initialize the ZoneMinder database
 
  rc-service zoneminder setup
 
Start ZoneMinder
 
rc-service zoneminder start


Profit!
Profit!


To access zoneminder, browse to http://yourserver/zm/
===Conclusion===
 
To access ZoneMinder, browse to <nowiki>http://yourserver/zm/</nowiki>
 
To test the API, run
curl -X GET  <nowiki>http://yourserver/zm/api/host/getVersion.json</nowiki>
(This assumes you aren't using authentication.)


To make it start automatically on boot:
To make it start automatically on boot:
Line 123: Line 219:
  rc-update add lighttpd default
  rc-update add lighttpd default
  rc-update add mariadb default
  rc-update add mariadb default
  rc-update add php-fpm default
  rc-update add php-fpm8 default
  rc-update add zoneminder default
  rc-update add zoneminder default
== Added notes to work with Nginx ==
Later to add some notes about running via nginx
==Related Links==
* [[Raspberry_Pi_3_-_Browser_Client|Kiosk to watch Streams]]
[[Category:Software]]
[[Category:Security]]

Latest revision as of 09:44, 17 November 2023

ZoneMinder usually runs with Apache, but in this short how-to we use Lighttpd.


Base Install

ZoneMinder is found in the community repositories, please enable it by following the instructions here

Then, add the needed packages to our system

apk add zoneminder mariadb mysql-client lighttpd php8-fpm php8-pdo php8-pdo_mysql

Note: In Alpine 3.17, php 8.1 replaces php8.0

apk add zoneminder mariadb mysql-client lighttpd php81-fpm php81-pdo php81-pdo_mysql

Database

Initialize MySQL database

rc-service mariadb setup

Start the database

rc-service mariadb start

Set root password for MySQL as instructed by MySQL setup

/usr/bin/mysqladmin -u root password 'your_secure_root_mysql_password'

You can log into MySQL as current root user with

mysql

Create a ZoneMinder MySQL database and user

mysql> create database zm;
mysql> CREATE USER zmuser@localhost IDENTIFIED BY 'your_zm_password_as_set_in_config';
mysql> grant ALL on zm.* to zmuser@localhost;

Web Server

We are running lighttpd, so let's run php-fpm as lighttpd user/group

vi /etc/php8/php-fpm.conf

Note: for php 8.1

vi /etc/php81/php-fpm.conf

Add this section to the bottom of the file:

; Unix user/group of processes
; Note: The user is mandatory. If the group is not set, the default user's group
;       will be used.
;user = nobody
;group = nobody
user = lighttpd
group = lighttpd

Enable the php cgi fpm config in lighttpd.conf

vi /etc/lighttpd/lighttpd.conf

Go down to the server modules section and uncomment mod_alias, which is needed for the cgi-bin, and mod_rewrite, for the api. It should look like:

# {{{ modules
# At the very least, mod_access and mod_accesslog should be enabled.
# All other modules should only be loaded if necessary.
# NOTE: the order of modules is important.
server.modules = (
     "mod_rewrite",
#    "mod_redirect",
     "mod_alias",
     "mod_access",
#    "mod_cml",
#    "mod_trigger_b4_dl",
#    "mod_auth",
#    "mod_status",
#    "mod_setenv",
#    "mod_proxy",
#    "mod_simple_vhost",
#    "mod_evhost",
#    "mod_userdir",
#    "mod_deflate",
#    "mod_ssi",
#    "mod_usertrack",
#    "mod_expire",
#    "mod_secdownload",
#    "mod_rrdtool",
#    "mod_webdav",
     "mod_accesslog"
)
# }}}

Go down to the includes section, it should look like:

# {{{ includes
include "mime-types.conf"
# uncomment for cgi support
   include "mod_cgi.conf"
# uncomment for php/fastcgi support
#   include "mod_fastcgi.conf"
# uncomment for php/fastcgi fpm support
   include "mod_fastcgi_fpm.conf"

# }}}

In order for video streaming to work in 1.36, you'll need the following added to /etc/lighttpd/lighttpd.conf:

server.stream-response-body = 1

In lighttpd.conf for the API, we will want to redirect any api+ requests to cakephp. Thus, add:

url.rewrite = (
      "^/zm/api(.+)$"           =>              "/zm/api/index.php"
)


Edit lighttpd cgi config and add old style cgi support by adding to cgi.assign

vi /etc/lighttpd/mod_cgi.conf

which should look like

cgi.assign = (
    ""      =>      "",
    ".pl"   =>      "/usr/bin/perl",
    ".cgi"  =>      "/usr/bin/perl"
)

Also add the following to alias.url in mod_cgi.conf so that it looks like

alias.url = (
    "/cgi-bin/"            =>      var.basedir + "/cgi-bin/",
    "/zm/api"              =>      "/usr/share/webapps/zoneminder/htdocs/api/app/webroot/",
    "/zm/"                 =>      "/usr/share/webapps/zoneminder/htdocs/"
)

Remove the symlink in /var/www/localhost/htdocs (we will be using the alias, not the symlink).

unlink /var/www/localhost/htdocs/zm

Start php-fpm

rc-service php-fpm8 start

Note: for php-fpm81, use the following command:

rc-service php-fpm81 start

Start lighttpd

rc-service lighttpd start

Zoneminder

Set the MySQL hostname, username, password.

Change the ZoneMinder user (ZM_WEB_USER) and group (ZM_WEB_GROUP) to lighttpd

And set ZM_SERVER_HOST to your ZoneMinder hostname/ipaddress

vi /etc/zm/zm.conf

Which should look like:

# Username and group that web daemon (httpd/apache) runs as
ZM_WEB_USER=lighttpd
ZM_WEB_GROUP=lighttpd
ZM_PATH_DATA=/usr/share/zoneminder
# ZoneMinder database type: so far only mysql is supported
ZM_DB_TYPE=mysql

# ZoneMinder database hostname or ip address
ZM_DB_HOST=localhost

# ZoneMinder database name
ZM_DB_NAME=zm

# ZoneMinder database user
ZM_DB_USER=zmuser

# ZoneMinder database password
ZM_DB_PASS=your_zm_password_as_set_in_config

# Host of this machine
ZM_SERVER_HOST=yourserver

Change ownership of zm.conf to lighttpd

chown lighttpd.lighttpd /etc/zm/zm.conf

Zoneminder will create a cache in /var/cache/zoneminder which isn't created by default. Create this directory and allow lighttpd access to it. Note that if you are using a diskless install, you must lbu add /var/cache/zoneminder.

mkdir /var/cache/zoneminder
chown lighttpd.lighttpd /var/cache/zoneminder


Initialize the ZoneMinder database

rc-service zoneminder setup

Start ZoneMinder

rc-service zoneminder start

Profit!

Conclusion

To access ZoneMinder, browse to http://yourserver/zm/

To test the API, run

curl -X GET  http://yourserver/zm/api/host/getVersion.json

(This assumes you aren't using authentication.)

To make it start automatically on boot:

rc-update add lighttpd default
rc-update add mariadb default
rc-update add php-fpm8 default
rc-update add zoneminder default

Added notes to work with Nginx

Later to add some notes about running via nginx

Related Links