How to Install LAMP (MariaDB) & Let’s Encrypt on Ubuntu 24.04

Installing LAMP on Ubuntu 24.04 and securing it with Let’s Encrypt is easier than ever. You can now quickly set up Apache, MariaDB, and PHP on your Linux server and start developing web applications with HTTPS thanks to Let’s Encrypt and its Certbot client in just a few commands. In this guide, I'll walk you through a complete setup: first installing the LAMP stack components (Linux, Apache, MariaDB, and PHP), testing your configuration, and finally securing your web server with Let's Encrypt SSL certificates using Certbot.

Note

Need a quick setup? Deploy our 1-click LAMP stack by selecting LAMP from the OS menu when creating your server. For manual installation steps, continue reading below.

How to Install LAMP (MariaDB) on Ubuntu with Let's Encrypt

To Install LAMP on Ubuntu 24.04 with MariaDB and Let's Encrypt, you'll first set up MariaDB, configure the Apache server, install PHP, and verify your installation with a test page. You will then secure your installation with Let's Encrypt SSL using Certbot. This setup ensures a secure environment for hosting dynamic web applications.

Prerequisites to Installing LAMP on Ubuntu 24.04

• You'll need an Ubuntu 24.04 server with sudo privileges. Looking for the perfect server? Our Ubuntu VPS combines industry-leading performance with unbeatable prices, backed by enterprise-grade reliability. Take a look at our deals and prepare for your mind to be blown 🤯.

Check out our How to access your server using SSH guide to learn how to access your server and create a sudo user.

Step 1 - Update The Package Cache

Before you install LAMP on Ubuntu 24.04, start by updating the packages in the package manager cache to the latest available versions using the following command:

sudo apt update

Step 2 - Install MariaDB, The Database Component of LAMP

After you update your packages, we'll install the MariaDB database server, the M in our LAMP stack. We've chosen MariaDB over MySQL for its advanced features, enhanced storage engines, and superior performance capabilities. This modern database will serve as the foundational data store for your dynamic LAMP web applications. To install MariaDB, execute the following command:

sudo apt install mariadb-server mariadb-client

Here, you install:

• mariadb-server: The MariaDB database server which actually stores data.
• mariadb-client: The MariaDB database client which allows you to interact with and manage the database server via the command line.

Let's verify that MariaDB installed successfully on your server. Check the MariaDB version using the following command:

mariadb --version

Output:

mariadb  Ver 15.1 Distrib 10.11.8-MariaDB, for debian-linux-gnu (x86_64) using  EditLine wrapper

Check the current status of MariaDB with this command to ensure your database server is up and running:

sudo service mariadb status

You can see that the service is active and running in the line "Active: active (running) ...".

Make MariaDB Start at Boot

Enable MariaDB to automatically start whenever your system boots by running the systemctl enable command:

sudo systemctl enable mariadb.service

Output:

Securing The MariaDB Database Server

When you install LAMP on Ubuntu 24.04, securing MariaDB is a crucial step. By default, MariaDB's settings may leave your database vulnerable to security risks. Let's strengthen your database security by running MariaDB's built-in security script, which guides you through essential security configurations. Later, we'll also secure your web traffic with Let's Encrypt SSL certificates. To begin the security hardening process for MariaDB, execute the mysql_secure_installation script:

sudo mysql_secure_installation

You’ll be asked for your current root password:

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current
password for the root user. If you've just installed MariaDB, and
haven't set the root password yet, you should just press enter here.

Enter current password for root (enter for none):

Tap Enter. Next, you'll be asked whether you want to use the unix_socket authentication method:

OK, successfully used password, moving on...

Setting the root password or using the unix_socket ensures that nobody
can log into the MariaDB root user without the proper authorisation.

You already have your root account protected, so you can safely answer 'n'.

Switch to unix_socket authentication [Y/n]

As the message says, you already have the root account protected, so just answer with 'n'. The reason is that you already have password authentication set up for the root account. The unix_socket authentication is an alternative method that would tie MariaDB authentication to system user accounts. Since you're already using password authentication and it's working properly, there's no need to switch to unix_socket authentication. In the context of a standard LAMP installation with MariaDB on Ubuntu, we typically want to:

1. Keep using password authentication since it's more flexible and commonly used in LAMP setups
2. Maintain compatibility with web applications that expect password authentication
3. Allow for remote database connections if needed (which unix_socket makes more complex)

So while unix_socket authentication has its merits and can be more secure in certain scenarios, for a typical LAMP stack installation, we should answer 'n' to keep using password authentication. This maintains better compatibility while still being secure when properly configured. Next, you'll be asked to change the root password:

Enabled successfully!
Reloading privilege tables..
 ... Success!

Change the root password? [Y/n]

Tap Y to set a new password for