passenger 5.0.7 → 5.0.8

data/doc/Users guide Apache.idmap.txt

@@ -30,7 +30,11 @@
 
 2.3.2. Installing packages	=>	installing-packages-1jxn722
 
-2.4. Installing or upgrading on Red Hat, Fedora, CentOS or ScientificLinux	=>	installing-or-upgrading-on-red-hat-fedora-centos-or-scientificlinux-1y5ie8b
+2.4. Installing or upgrading on Red Hat or CentOS	=>	installing-or-upgrading-on-red-hat-fedora-centos-or-scientificlinux-1y5ie8b
+
+2.4.1. Adding our YUM repository	=>	adding-our-yum-repository-1fb671i
+
+2.4.2. Installing packages	=>	installing-packages-12a3uty
 
 2.5. Installing or upgrading on Heroku	=>	installing-or-upgrading-on-heroku-o0o2mk
 
@@ -282,7 +286,7 @@
 
 8.6. Static assets such as images and stylesheets aren’t being displayed	=>	static-assets-such-as-images-and-stylesheets-aren-t-being-displayed-uaptpi
 
-8.7. The Apache error log says that the spawn manager script does not exist, or that it does not have permission to execute it	=>	the-apache-error-log-says-that-the-spawn-manager-script-does-not-exist-or-that-it-does-not-have-permission-to-execute-it-1fmoozk
+8.7. Apache cannot access my app’s files because of SELinux errors	=>	apache-cannot-access-my-app-s-files-because-of-selinux-errors-6febhd
 
 8.8. The application thinks its not on SSL even though it is	=>	the-application-thinks-its-not-on-ssl-even-though-it-is-u9fcp1
 
@@ -324,7 +328,9 @@
 
 10.1.3. Caveats & troubleshooting	=>	caveats-troubleshooting-161hgge
 
-10.1.4. Finding out what user an application is running as	=>	finding-out-what-user-an-application-is-running-as-7uwrol
+10.1.4. Red Hat and CentOS caveats	=>	red-hat-and-centos-caveats-1335bpz
+
+10.1.5. Finding out what user an application is running as	=>	finding-out-what-user-an-application-is-running-as-7uwrol
 
 10.2. Copy-on-write memory support (reducing memory consumption of Ruby applications)	=>	reducing-memory-consumption-of-ruby-on-rails-applications-by-33--1ubxnq0
 

data/doc/Users guide Apache.txt

@@ -1002,6 +1002,8 @@ Whether to enable <<user_switching,user switching support>>.
 This option may only occur once, in the global server configuration.
 The default value is 'on'.
 
+WARNING: If you're on Red Hat or CentOS, be sure to read <<user_switching_rpm_caveats,the Red Hat and CentOS user switching caveats>>.
+
 [[PassengerUser]]
 ==== PassengerUser <username> ====
 If <<user_switching,user switching support>> is enabled, then Phusion Passenger will
@@ -2146,10 +2148,10 @@ This option is also useful if Apache is not allowed to write to the system's tem
 
 The instance directory is automatically removed when Apache shuts down.
 
-This option may be specified once, in the global server configuration. The default value is the value of the `$TMPDIR` environment variable. Or, if `$TMPDIR` is not set, `/tmp`.
+This option may be specified once, in the global server configuration. The default value is as follows:
 
-:option: `--instance-registry-dir`
-include::users_guide_snippets/alternative_for_flying_passenger.txt[]
+ * If you are on Red Hat and CentOS, and installed Passenger through the RPMs provided by Phusion, then the default value is `/var/run/passenger-instreg`.
+ * Otherwise, the default value is the value of the `$TMPDIR` environment variable. Or, if `$TMPDIR` is not set, `/tmp`.
 
 .Note regarding command line tools
 Some Phusion Passenger command line administration tools, such as `passenger-status`, must know what Phusion Passenger's instance registry directory is in order to function properly. You can pass the directory through the `PASSENGER_INSTANCE_REGISTRY_DIR` or the `TMPDIR` environment variable.
@@ -2281,41 +2283,19 @@ See also link:http://groups.google.com/group/phusion-passenger/browse_thread/thr
    Please make sure that the Rails application's folder, as well as all of its parent folders,
    have the correct permissions and/or ownerships.
 
-=== The Apache error log says that the spawn manager script does not exist, or that it does not have permission to execute it
+[[apache_selinux_permissions]]
+=== Apache cannot access my app's files because of SELinux errors
 
-If you are sure that the 'PassengerRoot' configuration option is set correctly,
-then this problem is most likely caused by the fact that you're running Apache
-with SELinux. On Fedora, CentOS and RedHat Enterprise Linux, Apache is locked
-down by SELinux policies.
+On Red Hat Enterprise Linux and CentOS, Apache is locked down by a security mechanism called SELinux. This security mechanism works on top of normal Unix permissions. In order for Apache to be able to access your app's files, you must set the proper SELinux labels on your files.
 
-To solve this problem, you must set some permissions on the Phusion Passenger files
-and folders, so that Apache can access them.
+First, ensure that your app does not live in a home directory. It is not possible to allow Apache to read files from your home directory.
 
-- If you've installed Phusion Passenger via a gem, then run this command to determine
-  Phusion Passenger's root folder:
-+
-------------------------------------------------------------------
-passenger-config --root
-------------------------------------------------------------------
-+
-Next, run the following command:
-+
-------------------------------------------------------------------
-chcon -R -h -t httpd_sys_content_t /path-to-passenger-root
-------------------------------------------------------------------
-+
-where '/path-to-passenger-root' should be replaced with whatever
-`passenger-config --root` printed.
+Second, give your app's files the `httpd_sys_content_t` labels by running the following command:
 
-- If you've installed Phusion Passenger via the source tarball, then run the following
-  command:
-+
 ------------------------------------------------------------------
-chcon -R -h -t httpd_sys_content_t /path/to/passenger/folder
+sudo chcon -R -h -t httpd_sys_content_t /path-to-your-app
 ------------------------------------------------------------------
 
-Once the permissions are fixed, restart Apache.
-
 === The application thinks its not on SSL even though it is
 
 Rails and many other frameworks infers whether it's running on SSL through the CGI

data/doc/Users guide Nginx.html

@@ -1114,7 +1114,9 @@ using the command line.</p></div>
 <div class="foo toclevel4"><a href="#install_add_apt_repo">2.3.1. Adding our APT repository</a></div>
 <div class="foo toclevel4"><a href="#_installing_packages">2.3.2. Installing packages</a></div>
 <div class="foo toclevel4"><a href="#inserting_passenger_root_for_apt">2.3.3. Inserting passenger_root into nginx.conf</a></div>
-<div class="foo toclevel3"><a href="#_installing_or_upgrading_on_red_hat_fedora_centos_or_scientificlinux">2.4. Installing or upgrading on Red Hat, Fedora, CentOS or ScientificLinux</a></div>
+<div class="foo toclevel3"><a href="#installing_or_upgrading_on_red_hat">2.4. Installing or upgrading on Red Hat or CentOS</a></div>
+<div class="foo toclevel4"><a href="#install_add_yum_repo">2.4.1. Adding our YUM repository</a></div>
+<div class="foo toclevel4"><a href="#_installing_packages_2">2.4.2. Installing packages</a></div>
 <div class="foo toclevel3"><a href="#_installing_or_upgrading_on_heroku">2.5. Installing or upgrading on Heroku</a></div>
 <div class="foo toclevel3"><a href="#rubygems_generic_install">2.6. Generic installation, upgrade and downgrade method: via RubyGems</a></div>
 <div class="foo toclevel3"><a href="#tarball_generic_install">2.7. Generic installation, upgrade and downgrade method: via tarball</a></div>
@@ -1219,7 +1221,7 @@ using the command line.</p></div>
 <div class="foo toclevel4"><a href="#PassengerResponseBufferHighWatermark">7.6.13. passenger_response_buffer_high_watermark &lt;bytes&gt;</a></div>
 <div class="foo toclevel4"><a href="#_passenger_buffer_size">7.6.14. passenger_buffer_size</a></div>
 <div class="foo toclevel4"><a href="#_passenger_buffers">7.6.15. passenger_buffers</a></div>
-<div class="foo toclevel4"><a href="#_passenger_busy_buffer_size">7.6.16. passenger_busy_buffer_size</a></div>
+<div class="foo toclevel4"><a href="#_passenger_busy_buffers_size">7.6.16. passenger_busy_buffers_size</a></div>
 <div class="foo toclevel3"><a href="#_logging_and_debugging_options">7.7. Logging and debugging options</a></div>
 <div class="foo toclevel4"><a href="#PassengerLogLevel">7.7.1. passenger_log_level &lt;integer&gt;</a></div>
 <div class="foo toclevel4"><a href="#PassengerLogFile">7.7.2. passenger_log_file &lt;filename&gt;</a></div>
@@ -1253,7 +1255,8 @@ using the command line.</p></div>
 <div class="foo toclevel4"><a href="#_requirements">10.1.1. Requirements</a></div>
 <div class="foo toclevel4"><a href="#_effects">10.1.2. Effects</a></div>
 <div class="foo toclevel4"><a href="#_caveats_amp_troubleshooting">10.1.3. Caveats &amp; troubleshooting</a></div>
-<div class="foo toclevel4"><a href="#finding_out_app_user">10.1.4. Finding out what user an application is running as</a></div>
+<div class="foo toclevel4"><a href="#user_switching_rpm_caveats">10.1.4. Red Hat and CentOS caveats</a></div>
+<div class="foo toclevel4"><a href="#finding_out_app_user">10.1.5. Finding out what user an application is running as</a></div>
 <div class="foo toclevel3"><a href="#reducing_memory_usage">10.2. Copy-on-write memory support (reducing memory consumption of Ruby applications)</a></div>
 <div class="foo toclevel3"><a href="#tuning_sse_websockets">10.3. Tuning for Server Sent Events and WebSockets</a></div>
 <div class="foo toclevel3"><a href="#bundler_support">10.4. Bundler support</a></div>
@@ -1589,12 +1592,14 @@ by Lorenzo Bettini
 http://www.lorenzobettini.it
 http://www.gnu.org/software/src-highlite -->
 <pre><tt><span style="font-style: italic"><span style="color: #9A1900">##### !!!! Only add ONE of these lines, not all of them !!!! #####</span></span>
+<span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 15.04</span></span>
+deb https<span style="color: #990000">:</span>//oss-binaries<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/apt/passenger vivid main
 <span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 14.04</span></span>
 deb https<span style="color: #990000">:</span>//oss-binaries<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/apt/passenger trusty main
 <span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 12.04</span></span>
 deb https<span style="color: #990000">:</span>//oss-binaries<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/apt/passenger precise main
-<span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 10.04</span></span>
-deb https<span style="color: #990000">:</span>//oss-binaries<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/apt/passenger lucid main
+<span style="font-style: italic"><span style="color: #9A1900"># Debian 8</span></span>
+deb https<span style="color: #990000">:</span>//oss-binaries<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/apt/passenger jessie main
 <span style="font-style: italic"><span style="color: #9A1900"># Debian 7</span></span>
 deb https<span style="color: #990000">:</span>//oss-binaries<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/apt/passenger wheezy main
 <span style="font-style: italic"><span style="color: #9A1900"># Debian 6</span></span>
@@ -1613,12 +1618,14 @@ by Lorenzo Bettini
 http://www.lorenzobettini.it
 http://www.gnu.org/software/src-highlite -->
 <pre><tt><span style="font-style: italic"><span style="color: #9A1900">##### !!!! Only add ONE of these lines, not all of them !!!! #####</span></span>
+<span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 15.04</span></span>
+deb https<span style="color: #990000">:</span>//download<span style="color: #990000">:</span>YOUR_DOWNLOAD_TOKEN@www<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/enterprise_apt vivid main
 <span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 14.04</span></span>
 deb https<span style="color: #990000">:</span>//download<span style="color: #990000">:</span>YOUR_DOWNLOAD_TOKEN@www<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/enterprise_apt trusty main
 <span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 12.04</span></span>
 deb https<span style="color: #990000">:</span>//download<span style="color: #990000">:</span>YOUR_DOWNLOAD_TOKEN@www<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/enterprise_apt precise main
-<span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 10.04</span></span>
-deb https<span style="color: #990000">:</span>//download<span style="color: #990000">:</span>YOUR_DOWNLOAD_TOKEN@www<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/enterprise_apt lucid main
+<span style="font-style: italic"><span style="color: #9A1900"># Debian 8</span></span>
+deb https<span style="color: #990000">:</span>//download<span style="color: #990000">:</span>YOUR_DOWNLOAD_TOKEN@www<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/enterprise_apt jessie main
 <span style="font-style: italic"><span style="color: #9A1900"># Debian 7</span></span>
 deb https<span style="color: #990000">:</span>//download<span style="color: #990000">:</span>YOUR_DOWNLOAD_TOKEN@www<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/enterprise_apt wheezy main
 <span style="font-style: italic"><span style="color: #9A1900"># Debian 6</span></span>
@@ -1786,83 +1793,167 @@ http {
 </div>
 </div>
 <div class="sect2">
-<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="_installing_or_upgrading_on_red_hat_fedora_centos_or_scientificlinux"></span><h3 data-comment-topic="installing-or-upgrading-on-red-hat-fedora-centos-or-scientificlinux-1uus5a1" data-anchor="_installing_or_upgrading_on_red_hat_fedora_centos_or_scientificlinux">2.4. Installing or upgrading on Red Hat, Fedora, CentOS or ScientificLinux</h3>
-<div class="admonitionblock">
-<table><tr>
-<td class="icon">
-<img src="./images/icons/warning.png" alt="Warning">
-</td>
-<td class="content">The RPMs are currently unmaintained. As such, the repository only contains Phusion Passenger 3.x (the latest version is 4.x), which did not support Node.js, Meteor, multiple Rubies, etc. For more recent versions of Phusion Passenger, you are suggested to install from gem or tarball instead.</td>
-</tr></table>
-</div>
-<div class="paragraph"><p>YUM repositories with RPMs are maintained by <a href="https://github.com/erikogan/passenger">Erik Ogan</a> and <a href="http://stealthymonkeys.com/">Stealthy Monkeys Consulting</a>. Only packages for the open source version of Phusion Passenger are provided. <a href="https://www.phusionpassenger.com/enterprise">Phusion Passenger Enterprise</a> customers should use the <a href="#rubygems_generic_install">generic RubyGems installation method</a> or <a href="#tarball_generic_install">the generic tarball installation method</a> instead.</p></div>
-<div class="paragraph"><p>If you use YUM to install Phusion Passenger then you do not need to run <span class="monospaced">passenger-install-apache2-module</span> or <span class="monospaced">passenger-install-nginx-module</span>. The YUM packages contain all the binaries that you need. You also don’t need to modify any Apache or Nginx configuration to get them to load Phusion Passenger, the packages provide configuration snippets for you as well.</p></div>
-<span class="anchor_helper" id="_step_1_import_the_stealthy_monkeys_consulting_8217_s_gpg_key"></span><h4 class="float" data-anchor="_step_1_import_the_stealthy_monkeys_consulting_8217_s_gpg_key">Step 1: Import the Stealthy Monkeys Consulting’s GPG key</h4>
+<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="installing_or_upgrading_on_red_hat"></span><h3 data-comment-topic="installing-or-upgrading-on-red-hat-fedora-centos-or-scientificlinux-1uus5a1" data-anchor="installing_or_upgrading_on_red_hat">2.4. Installing or upgrading on Red Hat or CentOS</h3>
+<div class="paragraph"><p>We provide an official Phusion Passenger YUM repository with packages for Red Hat Enterprise Linux and CentOS. These packages are automatically built by our build server after we push out a source release, and thus are always up to date with the official source releases.</p></div>
+<div class="paragraph"><p>If you use these packages to install Phusion Passenger then you do not need to run <span class="monospaced">passenger-install-apache2-module</span> or <span class="monospaced">passenger-install-nginx-module</span>. These packages contain all the binaries that you need. These packages also come with SELinux policy modules so that Passenger works nicely with SELinux.</p></div>
+<div class="paragraph"><p>Packages are available for the x86 and x86_64 architectures. Our policy is to support all Red Hat and CentOS releases that still receive full updates by their vendors. The earliest Red Hat and CentOS version we support is version 5.</p></div>
+<div class="sect3">
+<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="install_add_yum_repo"></span><h4 data-comment-topic="adding-our-yum-repository-2i9z9o" data-anchor="install_add_yum_repo">2.4.1. Adding our YUM repository</h4>
+<div class="olist arabic"><ol class="arabic">
+<li>
+<p>
+Install <a href="https://fedoraproject.org/wiki/EPEL">EPEL</a> and a few other prerequisites.
+</p>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>rpm --import http://passenger.stealthymonkeys.com/RPM-GPG-KEY-stealthymonkeys.asc</pre>
+<pre>sudo yum install epel-release pygpgme curl</pre>
 </div>
 </div>
-<span class="anchor_helper" id="_step_2_install_the_release_package"></span><h4 class="float" data-anchor="_step_2_install_the_release_package">Step 2: Install the release package</h4>
-<div class="paragraph"><p>Install the passenger-release package from the <a href="http://passenger.stealthymonkeys.com/">main repository</a>.</p></div>
-<div class="paragraph"><p>Fedora Core 17:</p></div>
+</li>
+<li>
+<p>
+Download the Passenger YUM repository definition.
+</p>
+<div class="dlist"><dl>
+<dt class="hdlist1">
+<strong>Open source</strong>
+</dt>
+<dd>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>yum install http://passenger.stealthymonkeys.com/fedora/17/passenger-release.noarch.rpm</pre>
+<pre>sudo curl --fail -sSLo /etc/yum.repos.d/passenger.repo https://oss-binaries.phusionpassenger.com/yum/definitions/el-passenger.repo</pre>
 </div>
 </div>
-<div class="paragraph"><p>Fedora Core 16:</p></div>
+</dd>
+<dt class="hdlist1">
+<strong>Enterprise</strong>
+</dt>
+<dd>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>yum install http://passenger.stealthymonkeys.com/fedora/16/passenger-release.noarch.rpm</pre>
+<pre>unset HISTFILE
+sudo curl --fail -sSLo -u download:YOUR_DOWNLOAD_TOKEN /etc/yum.repos.d/passenger.repo https://www.phusionpassenger.com/enterprise_yum/el-passenger-enterprise.repo</pre>
 </div>
 </div>
-<div class="paragraph"><p>Fedora Core 15:</p></div>
+<div class="paragraph"><p>The <span class="monospaced">unset HISTFILE</span> command ensures that your download token isn’t saved to the Bash history file.</p></div>
+<div class="paragraph"><p>You can find the correct value for <em>YOUR_DOWNLOAD_TOKEN</em> in the <a href="https://www.phusionpassenger.com/orders">Customer Area</a>.</p></div>
+</dd>
+</dl></div>
+</li>
+<li>
+<p>
+Secure <span class="monospaced">passenger.repo</span>:
+</p>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>yum install http://passenger.stealthymonkeys.com/fedora/15/passenger-release.noarch.rpm</pre>
+<pre>sudo chown root: /etc/yum.repos.d/passenger.repo
+sudo chmod 600 /etc/yum.repos.d/passenger.repo</pre>
 </div>
 </div>
-<div class="paragraph"><p>Fedora Core 14:</p></div>
-<div class="listingblock">
-<div class="content monospaced">
-<pre>yum install http://passenger.stealthymonkeys.com/fedora/14/passenger-release.noarch.rpm</pre>
-</div>
+</li>
+</ol></div>
 </div>
-<div class="paragraph"><p>RHEL 6 / CentOS 6 / ScientificLinux 6: (Note: these packages depend on <a href="http://fedoraproject.org/wiki/EPEL">EPEL</a>.)</p></div>
-<div class="listingblock">
-<div class="content monospaced">
-<pre>yum install http://passenger.stealthymonkeys.com/rhel/6/passenger-release.noarch.rpm</pre>
-</div>
+<div class="sect3">
+<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="_installing_packages_2"></span><h4 data-comment-topic="installing-packages-1actlet" data-anchor="_installing_packages_2">2.4.2. Installing packages</h4>
+<div class="admonitionblock">
+<table><tr>
+<td class="icon">
+<img src="./images/icons/note.png" alt="Note">
+</td>
+<td class="content">
+<div class="title">Notes about SELinux on Red Hat 6 and CentOS 6</div>
+<div class="paragraph"><p>If you are on Red Hat 6 or CentOS 6, and you are also using SELinux in enforcing mode, then Passenger requires kernel &gt;= 2.6.39.</p></div>
+<div class="paragraph"><p>If you want to install Passenger on Red Hat 6 or CentOS 6, without upgrading your kernel, then you must <strong>disable</strong> SELinux completely. Edit <span class="monospaced">/etc/selinux/config</span>, set <span class="monospaced">SELINUX=disabled</span> and reboot. Note that merely setting SELinux to permissive mode is not enough.</p></div>
+<div class="paragraph"><p>This issue does not apply to Red Hat &gt;= 7 and CentOS &gt;= 7, because these OS versions supply recent enough kernel versions.</p></div>
+</td>
+</tr></table>
 </div>
-<div class="paragraph"><p>RHEL 5 / CentOS 5 / ScientificLinux 5: (Note: these packages depend on <a href="http://fedoraproject.org/wiki/EPEL">EPEL</a>.)</p></div>
+<div class="paragraph"><p>You can install the Passenger packages as follows.</p></div>
+<div class="dlist"><dl>
+<dt class="hdlist1">
+<strong>Open source</strong>
+</dt>
+<dd>
+<div class="olist arabic"><ol class="arabic">
+<li>
+<p>
+<a href="#install_add_yum_repo">Add our YUM repository.</a>
+</p>
+</li>
+<li>
+<p>
+Install the packages:
+</p>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>rpm -Uvh http://passenger.stealthymonkeys.com/rhel/5/passenger-release.noarch.rpm</pre>
+<pre>sudo yum install nginx passenger</pre>
 </div>
 </div>
-<span class="anchor_helper" id="_step_3_install_the_right_phusion_passenger_package"></span><h4 class="float" data-anchor="_step_3_install_the_right_phusion_passenger_package">Step 3: Install the right Phusion Passenger package</h4>
-<div class="paragraph"><p>From there you can use <a href="http://prefetch.net/articles/yum.html">YUM</a> to install packages. For example, try one of these:</p></div>
-<div class="paragraph"><p>Phusion Passenger for Apache:</p></div>
+</li>
+<li>
+<p>
+Edit <span class="monospaced">/etc/nginx/conf.d/passenger.conf</span> and uncomment <span class="monospaced">passenger_root</span>, <span class="monospaced">passenger_ruby</span> and <span class="monospaced">passenger_instance_registry_dir</span>.
+</p>
+<div class="paragraph"><p>Especially <a href="#PassengerRoot">passenger_root</a> is important: Phusion Passenger won’t work without it!</p></div>
+</li>
+<li>
+<p>
+Restart Nginx:
+</p>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>yum install mod_passenger</pre>
+<pre>sudo service nginx restart</pre>
 </div>
 </div>
-<div class="paragraph"><p>Phusion Passenger for Nginx:</p></div>
+</li>
+</ol></div>
+</dd>
+<dt class="hdlist1">
+<strong>Enterprise</strong>
+</dt>
+<dd>
+<div class="olist arabic"><ol class="arabic">
+<li>
+<p>
+Download your license key from the <a href="https://www.phusionpassenger.com/orders">Customer Area</a> and save it as <span class="monospaced">/etc/passenger-enterprise-license</span>.
+</p>
+</li>
+<li>
+<p>
+<a href="#install_add_yum_repo">Add our YUM repository.</a>
+</p>
+</li>
+<li>
+<p>
+Install the packages:
+</p>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>yum install nginx-passenger</pre>
+<pre>sudo yum install nginx passenger-enterprise</pre>
 </div>
 </div>
-<div class="paragraph"><p>Phusion Passenger Standalone:</p></div>
+</li>
+<li>
+<p>
+Edit <span class="monospaced">/etc/nginx/conf.d/passenger.conf</span> and uncomment <span class="monospaced">passenger_root</span>, <span class="monospaced">passenger_ruby</span> and <span class="monospaced">passenger_instance_registry_dir</span>.
+</p>
+<div class="paragraph"><p>Especially <a href="#PassengerRoot">passenger_root</a> is important: Phusion Passenger won’t work without it!</p></div>
+</li>
+<li>
+<p>
+Restart Nginx:
+</p>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>yum install passenger-standalone</pre>
+<pre>sudo service nginx restart</pre>
 </div>
 </div>
-<span class="anchor_helper" id="_building_your_own_packages"></span><h4 class="float" data-anchor="_building_your_own_packages">Building your own packages</h4>
-<div class="paragraph"><p>There are instructions for building your own packages and Yum repositories in the <a href="https://github.com/phusion/passenger/tree/master/rpm#readme">rpm directory ReadMe</a> within the <a href="https://github.com/phusion/passenger">GitHub repository</a>.</p></div>
+</li>
+</ol></div>
+</dd>
+</dl></div>
+<div class="paragraph"><p>You can now proceed with a chapter for Deploying your (specific type of) application.</p></div>
+</div>
 </div>
 <div class="sect2">
 <a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="_installing_or_upgrading_on_heroku"></span><h3 data-comment-topic="installing-or-upgrading-on-heroku-jh07kr" data-anchor="_installing_or_upgrading_on_heroku">2.5. Installing or upgrading on Heroku</h3>
@@ -4197,6 +4288,14 @@ The default value is <em>on</em>.</p></div>
 <td class="content">This option has no effect when you are using <a href="#flying_passenger">Flying Passenger</a>. You can disable user switching for Flying Passenger by starting the Flying Passenger daemon as a non-root user.</td>
 </tr></table>
 </div>
+<div class="admonitionblock">
+<table><tr>
+<td class="icon">
+<img src="./images/icons/warning.png" alt="Warning">
+</td>
+<td class="content">If you’re on Red Hat or CentOS, be sure to read <a href="#user_switching_rpm_caveats">the Red Hat and CentOS user switching caveats</a>.</td>
+</tr></table>
+</div>
 </div>
 <div class="sect3">
 <a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="PassengerUser"></span><h4 data-comment-topic="passenger-user-username--b06ur7" data-anchor="PassengerUser">7.4.2. passenger_user &lt;username&gt;</h4>
@@ -5634,7 +5733,7 @@ In an <em>if</em> configuration scope.
 <a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="_passenger_buffers"></span><h4 data-comment-topic="passenger-busy-buffers" data-anchor="_passenger_buffers">7.6.15. passenger_buffers</h4>
 </div>
 <div class="sect3">
-<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="_passenger_busy_buffer_size"></span><h4 data-comment-topic="passenger-busy-buffer-size-124sj61" data-anchor="_passenger_busy_buffer_size">7.6.16. passenger_busy_buffer_size</h4>
+<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="_passenger_busy_buffers_size"></span><h4 data-comment-topic="passenger-busy-buffer-size-124sj61" data-anchor="_passenger_busy_buffers_size">7.6.16. passenger_busy_buffers_size</h4>
 <div class="paragraph"><p>These options have the same effect as ngx_http_proxy_module’s similarly named options.
 They can be used to modify the maximum allowed HTTP header size.</p></div>
 </div>
@@ -5784,7 +5883,19 @@ In an <em>if</em> configuration scope.
 <div class="paragraph"><p>It is therefore important that, while Phusion Passenger is working, the instance directory is never removed or tampered with. However, the default path for the instance registry directory is the system’s temporary directory, and some systems may run background jobs that periodically clean this directory. If this happens, and the files inside the instance directory are removed, then it will cause Phusion Passenger to malfunction: Phusion Passenger won’t be able to communicate with its own processes, and you will see all kinds of connection errors in the log files. This malfunction can only be recovered from by restarting Nginx. You can prevent such cleaning background jobs from interfering by setting this option to a different directory.</p></div>
 <div class="paragraph"><p>This option is also useful if the partition that the temporary directory lives on doesn’t have enough disk space.</p></div>
 <div class="paragraph"><p>The instance directory is automatically removed when Nginx shuts down.</p></div>
-<div class="paragraph"><p>This option may be specified once, in the <span class="monospaced">http</span> configuration block. The default value is the value of the <span class="monospaced">$TMPDIR</span> environment variable. Or, if <span class="monospaced">$TMPDIR</span> is not set, <span class="monospaced">/tmp</span>.</p></div>
+<div class="paragraph"><p>This option may be specified once, in the <span class="monospaced">http</span> configuration block. The default value is as follows:</p></div>
+<div class="ulist"><ul>
+<li>
+<p>
+If you are on Red Hat and CentOS, and installed Passenger through the RPMs provided by Phusion, then the default value is <span class="monospaced">/var/run/passenger-instreg</span>.
+</p>
+</li>
+<li>
+<p>
+Otherwise, the default value is the value of the <span class="monospaced">$TMPDIR</span> environment variable. Or, if <span class="monospaced">$TMPDIR</span> is not set, <span class="monospaced">/tmp</span>.
+</p>
+</li>
+</ul></div>
 <div class="admonitionblock">
 <table><tr>
 <td class="icon">
@@ -6506,7 +6617,35 @@ The application fails to start and its error message mentions the path <em>/none
 <div class="paragraph"><p>Whatever user your application runs as, it must have read access to the <a href="#application_root">application root</a>, and read/write access to the application’s <em>logs</em> directory.</p></div>
 </div>
 <div class="sect3">
-<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="finding_out_app_user"></span><h4 data-comment-topic="finding-out-what-user-an-application-is-running-as-1ni7zk6" data-anchor="finding_out_app_user">10.1.4. Finding out what user an application is running as</h4>
+<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="user_switching_rpm_caveats"></span><h4 data-comment-topic="red-hat-and-centos-caveats-ilqxyl" data-anchor="user_switching_rpm_caveats">10.1.4. Red Hat and CentOS caveats</h4>
+<div class="admonitionblock">
+<table><tr>
+<td class="icon">
+<img src="./images/icons/note.png" alt="Note">
+</td>
+<td class="content">This information only applies if you installed Passenger through the RPM packages provided by Phusion. If you did not installed Passenger through the RPM packages provided by Phusion, then you can ignore this section.</td>
+</tr></table>
+</div>
+<div class="paragraph"><p>If you installed Passenger through Phusion’s RPM packages, and you want to disable user switching, then you must also change <a href="#PassengerInstanceRegistryDir">the location of the instance registry directory</a>.</p></div>
+<div class="paragraph"><p>This is because our RPMs configure the default instance registry directory to <span class="monospaced">/var/run/passenger-instreg</span>, which is only writable by root. If you disable user switching, then the Passenger processes will run as
+  <a href="#PassengerDefaultUser">passenger_default_user</a>,
+which (as long as it’s not root) won’t be able to write to that directory.</p></div>
+<div class="paragraph"><p>Note that any alternative instance registry directory must have the proper SELinux context, allowing the web server to read and write to it. We recommend that you create a directory <span class="monospaced">/var/lib/passenger-instreg</span> and give it the label <span class="monospaced">var_run_t</span>:</p></div>
+<div class="listingblock">
+<div class="content monospaced">
+<pre>sudo mkdir /var/lib/passenger-instreg
+sudo chcon -t var_run_t /var/lib/passenger-instreg</pre>
+</div>
+</div>
+<div class="paragraph"><p>Then, in your Nginx config file:</p></div>
+<div class="listingblock">
+<div class="content monospaced">
+<pre>passenger_instance_registry_dir /var/lib/passenger-instreg;</pre>
+</div>
+</div>
+</div>
+<div class="sect3">
+<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="finding_out_app_user"></span><h4 data-comment-topic="finding-out-what-user-an-application-is-running-as-1ni7zk6" data-anchor="finding_out_app_user">10.1.5. Finding out what user an application is running as</h4>
 <div class="paragraph"><p>To find our what user an application is started as, first access its URL in your browser so that Phusion Passenger starts the application. For example:</p></div>
 <div class="listingblock">
 <div class="content monospaced">