Mod_Python for Apache 2.0 is released

semanticgap writes "The beauty of Python at Apache speeds! A couple of months after donation to ASF, a new mod_python is out under the Apache license. Main feature of this release is Apache 2.0 compatibility, including support for filters and connection handlers and many more enhancements. More info at www.modpython.org. Note that this release is not compatible with Apache 1.3."

Does it risk taking down the server?

[jeorgen]

Is it more like mod_php (installed at most web hosting companies) which is reasonably safe when it comes to protecting sub hosts from taking down the server and each other, or is it more like mod_perl (not installed at most hosting companies) where you'd better run it in a jail on a shared server?

/jeorgen

Re:Does it risk taking down the server?

[DrSkwid]

we run our php under suExec
it makes php a cgi app rather than a mod but that's a trade we're making for the other cgi anyway.

We decided that it's okay to trade speed for protection.
We can buy CPU cycles.

Re:Does it risk taking down the server?

[j7953]

As far as I know, it doesn't have a "safe mode" like PHP does, so scripted pages run under the server's user id with all of the server's access permissions. However, Apache 2 provides the new perchild MPM [apache.org], which allows you to assign different user ids to each virtual host. Unfortunately, according to the documentation "this MPM does not currently work on most platforms. Work is ongoing to make it functional."

Architecturally, assigning user IDs to virtual hosts is a far better solution (even the PHP developers admit that "safe mode" solves the problem at the wrong level) -- once it works, it will obviously solve the problem for all modules, including mod_python and mod_perl, without requiring the module developers to each develop their own, seperate safe mode equivalent.

Re:Does it risk taking down the server?

[davegaramond]

...However, Apache 2 provides the new perchild MPM...

except that, sadly, the perchild MPM development seems to be dormant.

mod_python works great - when it works

[DrSkwid]

mod_python for 1.3 had an annoying threading conflict. Which meant that the python version you needed for mod_python was generally different from the default install.
It caught me out during a server replacement. I couldn't get it working on the fresh install.

Luckily the mod_python code I'd used had been for internal administration that I could do manually. I spent the week re-writing the python in php.

I've just read through the 3.0 manual and it looks like this restriction is lifted :

2.1 Prerequisites

* Python 2.2.1 or later. Earlier versions of Python will not work.
* Apache 2.0.40 or later (For Apache 1.3.x, use mod_python version 2.7.x).

In order to compile mod_python you will need to have the include files for both Apache and Python, as well as the Python library installed on your system. If you installed Python and Apache from source, then you already have everything needed. However, if you are using prepackaged software (e.g. Linux Red Hat RPM, Debian, or Solaris packages from sunsite, etc) then chances are, you have just the binaries and not the sources on your system. Often, the Apache and Python include files and libraries necessary to compile mod_python are part of separate "development" package. If you are not sure whether you have all the necessary files, either compile and install Python and Apache from source, or refer to the documentation for your system on how to get the development packages.

Re:mod_python works great - when it works

[semanticgap]

Since both Python and Apache default to using threads (except for FreeBSD, where Apache defaults to not using threads), this is no longer an issue.

uh-oh

[DrSkwid]

I'm a FreeBSD user. Is this a "heads up, trouble is coming" situation?

Re:uh-oh

[semanticgap]

No, there is a workaround. Read the mod_python README, "OS Hints" section.

Re:mod_python and threading

[khanyisa]

According to the mailing lists, it seems like threading will work with apache 1.3 as well, you just need to use Python 2.2.1. See this message [modpython.org]. Since one of the requirements for mod_python 3.0 is Python 2.2.1, it seems reasonable to assume that this is the reason it works with Apache 2.0 as well...

In Red Hat 8...

[Micah]

[root@eclipse root]# rpm -q mod_python
mod_python-3.0.0-10
[root@eclipse root]# rpm -q httpd
httpd-2.0.40-8

Is that just a beta? The version number doesn't seem to indicate that, unlike with mod_perl:

[root@eclipse root]# rpm -q mod_perl
mod_perl-1.99_05-3

Re:In Red Hat 8...

[Anonymous Coward]

It's got to be a beta. The release version is 3.0.1. If there is no RPM - compile it from scratch, it compiles on RH without a hinch.

Mod Python

[Kizzle]

and the search for the.... ah nevermind

Re:Mod Python

[fiesty]

shut up, you tool. Haha, I called kyle a tool. Kizzle ma Nizzle, as the annoying people say. Go to where people like you, in the dumpster. Stop posting.