Skip to main content

Activate Everpatch on Your Servers

Install the repository, upgrade PHP in place, confirm the build, then cover your other servers.

1. Add the repository

On CentOS, RHEL and Amazon Linux:

sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm

On Ubuntu and Debian:

wget https://extras.getpagespeed.com/release-latest.deb
sudo apt install ./release-latest.deb
sudo apt update

2. Upgrade PHP in place

Pick your system and PHP version below for its exact commands. For PHP 7.4 on CentOS 7, as an example:

sudo yum --enablerepo=getpagespeed-extras-php74 upgrade 'php-*'
# or, for the php74-php-* software collection:
sudo yum upgrade 'php74-php*'

On Ubuntu and Debian, for the same version:

sudo apt upgrade 'php7.4-*'

Restart PHP-FPM, or httpd for mod_php, afterwards. Your configuration and extensions stay as they are.

PHP5.35.45.67.07.17.27.37.48.08.18.28.38.4
CentOS 7Full stack: kernel, base OS, PHP·5.45.67.07.17.27.37.48.08.18.28.38.4
CentOS 6PHP layer5.3··7.07.1········
Ubuntu 20.04PHP layer·······7.48.08.18.28.38.4
Ubuntu 18.04PHP layer·····7.2·······
Debian 10PHP layer······7.3······
CentOS 7Full stack: kernel, base OS, PHP
CentOS 6PHP layer
Ubuntu 20.04PHP layer
Ubuntu 18.04PHP layer
Debian 10PHP layer
Security backports for end-of-life PHPCurrent upstream PHP, built for this release

3. Confirm the build

On CentOS, RHEL and Amazon Linux, php -v prints Built by GetPageSpeed LLC. The PHP version number stays the same when a fix is backported, so compare the package release with your version's page: use rpm -q php-cli on RPM systems or dpkg -l 'php*' on Ubuntu and Debian. The PHP2Shell checker can read that package list too.

4. Cover your other servers

The server IP you registered at checkout needs nothing else. For your other covered servers, or any server behind NAT or with a changing IP, generate a license token in your Client Area (License Token tab) and save it on each server:

sudo mkdir -p /etc/getpagespeed
sudo tee /etc/getpagespeed/license.jwt > /dev/null <<'EOF'
YOUR_TOKEN_HERE
EOF
sudo chmod 600 /etc/getpagespeed/license.jwt

No restart is needed: it is picked up automatically within a day. On a Fleet plan you can register each server's IP in the Client Area instead.

Keep it patched, and the rest of Everpatch

New fixes keep coming as vulnerabilities are disclosed, and we let you know when it's time to upgrade.