You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+49-3Lines changed: 49 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,6 +2,52 @@
2
2
3
3
PHPStatic package is build for better performance, check our [benchmarks](https://github.com/phpstatic/phpstatic.com/blob/master/benchmarks.md).
4
4
5
+
PHPStatic package is build as static shared object, to reduce the dynamic library runtime overheads and attack surface. Static link also allow our package suite for most of linux distribution, avoid dependent library not match during upgrade system.
/usr/lib/libresolv.9.dylib (compatibility version 1.0.0, current version 1.0.0)
47
+
/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1252.50.4)
48
+
```
49
+
50
+
5
51
PHPStatic package also build for security, by add gcc flags `-fstack-clash-protection`, `-fstack-protector-strong`, `-Wp,-D_FORTIFY_SOURCE=2`, `-Wp,-D_GLIBCXX_ASSERTIONS`, `-fPIE`, `-Wl,-z,now`, `-Wl,-z,relro`, `-Wl,-z,text`, `-Wl,-z,noexecstack` to enable `Address space layout randomization`, `Full RELRO`, `STACK CANARY`, `non-executable stack`, `FORTIFY`, `stack clash protection`, `stack overflow protection`.
6
52
7
53
PHPStatic is immune to LD_PRELOAD preload attacks like [this](https://github.com/yangyangwithgnu/bypass_disablefunc_via_LD_PRELOAD).
@@ -17,8 +63,8 @@ Linux package need CPU support AVX.
17
63
run this on your project dirs:
18
64
19
65
```sh
20
-
docker pull phpstatic/php:7.4.5
21
-
docker run --name php74 -itd -v $(pwd):/app --mount source=php74_etc,target=/usr/local/etc/php phpstatic/php:7.4.5
66
+
docker pull phpstatic/php:7.4.9
67
+
docker run --name php74 -itd -v $(pwd):/app --mount source=php74_etc,target=/usr/local/etc/php phpstatic/php:7.4.9
22
68
docker logs php74
23
69
docker volume inspect php74_etc
24
70
docker exec -i -t php74 composer install
@@ -221,7 +267,7 @@ Zend OPcache
221
267
222
268
# nginx -V
223
269
224
-
nginx 1.18.0 is build with [http3](https://en.wikipedia.org/wiki/HTTP/3), [njs](https://github.com/nginx/njs.git)(0.4.0), ssl_stapling+BoringSSL support.
270
+
nginx 1.18.0 is build with [http3](https://en.wikipedia.org/wiki/HTTP/3), [njs](https://github.com/nginx/njs.git)(0.4.3), [io_uring](https://github.com/hakasenyang/openssl-patch/pull/41), ssl_stapling+BoringSSL support(the only solution that support multi domain without cronjob).
0 commit comments