Centos7 booting stuck on Started LVM2 PV scan on device 8:3 Posted: 24 Jul 2021 09:35 PM PDT Centos booting stuck on Started LVM2 PV scan on device 8:3. any suggestion on fixing the issue? I also see SeLinux relablel is required.. I'm not sure how long to wait. Warning -- Selinux policy relabel is required. Relabeling could take a very long time depending on the file, system size and speed of the hard drives. Started LVM2 PV scan on device 8:3. screenshot |
TPROXY interferes DNAT port forwarding rules Posted: 24 Jul 2021 08:51 PM PDT I'm setting up TPROXY on my VyOS router to forward certain traffic to a local transparent proxy. It works pretty well, until I discovered that all of my DNAT port forwarding rules are no longer working (connection timeout when connecting from external network). Environment - Router:
10.0.0.1/24 (Proxy is running on 1234 port and adding SO_MARK with 0xff ) - Internal Host:
10.0.0.2/24 (Port 80 should be exposed to the public) TPROXY Rules ip rule add fwmark 1 table 100 ip route add local 0.0.0.0/0 dev lo table 100 nft add table myproxy nft add chain myproxy prerouting { type filter hook prerouting priority 0 \; } nft add rule myproxy prerouting ip daddr { 127.0.0.1/32, 224.0.0.0/4, 255.255.255.255/32 } return nft add rule myproxy prerouting meta l4proto tcp ip daddr 10.0.0.0/24 return nft add rule myproxy prerouting mark 0xff return nft add rule myproxy prerouting meta l4proto { tcp, udp } mark set 1 tproxy to 127.0.0.1:1234 accept nft add chain myproxy output { type route hook output priority 0 \; } nft add rule myproxy output ip daddr { 127.0.0.1/32, 224.0.0.0/4, 255.255.255.255/32 } return nft add rule myproxy output meta l4proto tcp ip daddr 10.0.0.0/24 return nft add rule myproxy output mark 0xff return nft add rule myproxy output meta l4proto { tcp, udp } mark set 1 accept nft add table filter nft add chain filter divert { type filter hook prerouting priority -150 \; } nft add rule filter divert meta l4proto tcp socket transparent 1 meta mark set 1 accept DNAT Rules $ nft list table nat table ip nat { chain PREROUTING { type nat hook prerouting priority dstnat; policy accept; iifname "pppoe0" tcp dport { 8080 } counter packets 7 bytes 400 dnat to 10.0.0.2:80 } } Symptoms Connecting RouterPublicIP:8080 is timing out. Ideally it should forward traffic to 10.0.0.2:80 . I guess inbound DNAT traffic is erroneously forwarded to the proxy (instead of the actual host 10.0.0.2 ), however I couldn't figure out the correct nft rules. Thanks in advance! |
How to setup DNS Failover for Active Dirctory Posted: 24 Jul 2021 08:09 PM PDT I have a domain with 2 domain controllers (WS2016), running DNS and GC services. I am not using DHCP, so all the IP addresses are static. I have setup the clients so that they use the 2 domain controllers as preferred and alternate DNS. However, when I turn off the first domain controller, DNS services stop working on the 2nd domain controller, and my clients cannot resolve any names |
What OS has the best kernal for taking DDoS Attacks? Posted: 24 Jul 2021 08:08 PM PDT What OS has the best kernal for taking DDoS Attacks? I've been using freebsd |
Clear ZFS Checksum errors? Posted: 24 Jul 2021 06:50 PM PDT TLDR; My ZFS mirror pool got some checksum errors. I replaced the controller, thinking that was the most likely cause, but the errors won't clear. pool clear temporarily resets them, but they come back the next time I run a scrub. How can I clear them for good? Full story: I have had a ZFS mirror-0 set up and running on ubuntu 20.04.2 LTS for some time. When one of the drives died, I took advantage of the failure to replace both drives with larger ones, as well as adding a SATA-III PCI card for the new drives (the old ones had been connected to the on-board SATA II controller, as I had no more SATA III ports available). After running on the new drives and controller for a few weeks, ZFS complained about checksum errors on both new drives, and put the array into a "degraded" state as a result. Some research led me to the conclusion that since both drives were showing the exact same number of checksum errors, it was much more likely to be an issue with the controller than with the drives themselves. So I pulled the new controller and put the drives back on the onboard SATA II controller for now, intending to replace the controller card once I verify that is the issue. I then deleted the two files that zpool status -v showed as having permanent errors, issued a zpool clear data to reset the errors, and ran a scrub. Unfortunately, after the scrub the errors re-appeared, only now a -v no longer showed a file, but just the address (inode, I believe), presumably for one of the files I had deleted earlier. I tried again, with the same result. Every time I run a scrub, it comes back with the following result: root@watchman:~# zpool status -v pool: data state: DEGRADED status: One or more devices has experienced an error resulting in data corruption. Applications may be affected. action: Restore the file in question if possible. Otherwise restore the entire pool from backup. see: http://zfsonlinux.org/msg/ZFS-8000-8A scan: scrub repaired 16K in 0 days 09:10:20 with 1 errors on Sat Jul 24 15:48:21 2021 config: NAME STATE READ WRITE CKSUM data DEGRADED 0 0 0 mirror-0 DEGRADED 0 0 0 ata-ST8000VE000-2P6101_WSD1M5NW DEGRADED 0 0 15 too many errors ata-ST8000VE000-2P6101_WSD1HEJX DEGRADED 0 0 15 too many errors errors: Permanent errors have been detected in the following files: data:<0x380508> From what I can tell, this is just the same issue that already existed due, presumably, to the bad controller, but I can't seem to clear it out. How can I restore my mirror to a fully-functioning state? |
Which AWS EC2 region is the best for hosting a global site? Posted: 24 Jul 2021 09:27 PM PDT I'm looking for a suggestion to choose a region for a global site(Not targetted for any specific country/region). At the moment I'm looking for a simpler solution without having multiple replicas in different regions. So I'm wondering if anybody knows which AWS region is best in terms of latency all across the world? I'm also open to suggestions for tools like cloudping.info. Thank you |
1min Interval Cronjobs inside CloudLinux Posted: 24 Jul 2021 06:32 PM PDT So I got the following message from my server-administrator the other day: Hi ****, We hope you are doing well today. We have noticed one of your accounts was running multiple cron jobs with 1 minute intervals. (Three; and I admit they could've been merge into 1. There were not 1000's of lines of code, literally no more than 35 combined) -snip- On a shared hosting server, running a cron job every minute can have an adverse impact on the server's health and other users on the same server. To prevent the server from being negatively affected, we have modified the cron jobs as below: -snip- They will now run every at the above specified intervals. Please do not run any cronjob that has less than 15 minute intervals. Your cooperation will be much appreciated in this regard. Should you have further questions or concerns, please update this ticket. Best Regards, ****. Does this make sense to anyone? Because I have looked to the cloudlinux documentation and it doesn't seem to make any sense: I pay for a "semi-dedicated" server off them, and 80 available Entry Processes. The only way I see this being a problem is if they load more users onto servers where they don't have the actual resources to account for those said users and their plans, because this was his "example": Unfortunately, we have to maintain some minimum restrictions to maintain the hosting quality. Imagine what might happen if 50 users run 150 cron jobs per minute on the server. A regular server might crawl. And like I said, the only way I see that being a problem is if the users resources account for more than the server can handle. Am I wrong to think this? I never got linked to documentation explaining his argument or anything, he just referred be to his "terms of service" and basically told me he works with it everyday and that I don't know what I am talking about. |
Troubleshooting nginx requests not reaching server Posted: 24 Jul 2021 07:49 PM PDT When I browse from other servers using wget -U "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" --spider http://server_ip/page --no-hsts This is the response Spider mode enabled. Check if remote file exists. --2021-07-25 09:03:09-- http://server_ip/page Connecting to 45.76.11.115:80... connected. HTTP request sent, awaiting response... 200 No headers, assuming HTTP/0.9 Length: unspecified Remote file exists and could contain further links, but recursion is disabled -- not retrieving. Nginx default conf is server { listen 80 default_server; server_name _; return 404; location ~ /\.ht { deny all; } } There are no entries in both error or access log. However it's receiving requests from some unknown servers like some_public_ip - - [25/Jul/2021:08:53:14 +0800] "GET / HTTP/1.1" 200 399 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "1.68" By checking programs listening at 80 using lsof -nP -iTCP -sTCP:LISTEN I get only nginx though. nginx 19182 root 6u IPv4 19898878 0t0 TCP *:80 (LISTEN) nginx 19182 root 7u IPv4 19898879 0t0 TCP *:8443 (LISTEN) nginx 19183 www-data 6u IPv4 19898878 0t0 TCP *:80 (LISTEN) nginx 19183 www-data 7u IPv4 19898879 0t0 TCP *:8443 (LISTEN) However tcpdump showing it's receiving request 09:13:06.520109 IP local_ip.42330 > server_ip.80: Flags [.], ack 1, win 21, options [nop,nop,TS val 3610668715 ecr 3536888037], length 0 09:13:06.523627 IP local_ip.42330 > server_ip.80: Flags [P.], seq 1:173, ack 1, win 21, options [nop,nop,TS val 3610668715 ecr 3536888037], length 172: HTTP: HEAD / HTTP/1.1 09:13:06.523668 IP server_ip.80 > local_ip.42330: Flags [.], ack 173, win 508, options [nop,nop,TS val 3536888310 ecr 3610668715], length 0 09:13:06.523741 IP server_ip.80 > local_ip.42330: Flags [P.], seq 1:58, ack 173, win 508, options [nop,nop,TS val 3536888310 ecr 3610668715], length 57: HTTP 09:13:06.523781 IP server_ip.80 > local_ip.42330: Flags [F.], seq 58, ack 173, win 508, options [nop,nop,TS val 3536888310 ecr 3610668715], length 0 09:13:06.790067 IP local_ip.42330 > server_ip.80: Flags [.], ack 58, win 21, options [nop,nop,TS val 3610668990 ecr 3536888310], length 0 09:13:06.795185 IP local_ip.42330 > server_ip.80: Flags [R.], seq 173, ack 59, win 21, options [nop,nop,TS val 3610668991 ecr 3536888310], length 0 09:13:06.800086 IP local_ip.42330 > server_ip.80: Flags [R], seq 1666043585, win 0, length 0 How to fix this? Update #1 Tried tcp dump again with tcpdump -vvXX -n port 80 and output local_ip.48914 > server_ip.80: Flags [S], cksum 0xf7e9 (correct), seq 2727175320, win 42340, options [mss 1318,sackOK,TS val 3613618415 ecr 0,nop,wscale 11], length 0 0x0000: 5600 0302 ccd0 fe00 0302 ccd0 0800 4500 V.............E. 0x0010: 003c 5f00 0000 3806 875c 6adc f8c4 2d4c .<_...8..\j...-L 0x0020: 0b73 bf12 0050 a28d 6498 0000 0000 a002 .s...P..d....... 0x0030: a564 f7e9 0000 0204 0526 0402 080a d763 .d.......&.....c 0x0040: 70ef 0000 0000 0103 030b p......... 10:02:16.252990 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60) server_ip.80 > local_ip.48914: Flags [S.], cksum 0x9c8e (incorrect -> 0xbb3e), seq 3157700385, ack 2727175321, win 65160, options [mss 1460,sackOK,TS val 3539838101 ecr 3613618415,nop,wscale 7], length 0 0x0000: fe00 0302 ccd0 5600 0302 ccd0 0800 4500 ......V.......E. 0x0010: 003c 0000 4000 4006 9e5c 2d4c 0b73 6adc .<..@.@..\-L.sj. 0x0020: f8c4 0050 bf12 bc36 af21 a28d 6499 a012 ...P...6.!..d... 0x0030: fe88 9c8e 0000 0204 05b4 0402 080a d2fd ................ 0x0040: a495 d763 70ef 0103 0307 ...cp..... 10:02:16.615737 IP (tos 0x0, ttl 56, id 24419, offset 0, flags [none], proto TCP (6), length 52) local_ip.48914 > server_ip.80: Flags [.], cksum 0xe6f3 (correct), seq 1, ack 1, win 21, options [nop,nop,TS val 3613618810 ecr 3539838101], length 0 0x0000: 5600 0302 ccd0 fe00 0302 ccd0 0800 4500 V.............E. 0x0010: 0034 5f63 0000 3806 8701 6adc f8c4 2d4c .4_c..8...j...-L 0x0020: 0b73 bf12 0050 a28d 6499 bc36 af22 8010 .s...P..d..6.".. 0x0030: 0015 e6f3 0000 0101 080a d763 727a d2fd ...........crz.. 0x0040: a495 .. 10:02:16.629335 IP (tos 0x0, ttl 56, id 24423, offset 0, flags [none], proto TCP (6), length 227) local_ip.48914 > server_ip.80: Flags [P.], cksum 0x36e5 (correct), seq 1:176, ack 1, win 21, options [nop,nop,TS val 3613618810 ecr 3539838101], length 175: HTTP, length: 175 HEAD /url HTTP/1.1 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Accept: */* Accept-Encoding: identity Host: server_ip Connection: Keep-Alive 0x0000: 5600 0302 ccd0 fe00 0302 ccd0 0800 4500 V.............E. 0x0010: 00e3 5f67 0000 3806 864e 6adc f8c4 2d4c .._g..8..Nj...-L 0x0020: 0b73 bf12 0050 a28d 6499 bc36 af22 8018 .s...P..d..6.".. 0x0030: 0015 36e5 0000 0101 080a d763 727a d2fd ..6........crz.. 0x0040: a495 4845 4144 202f 7572 6c20 4854 5450 ..HEAD./url.HTTP 0x0050: 2f31 2e31 0d0a 5573 6572 2d41 6765 6e74 /1.1..User-Agent 0x0060: 3a20 4d6f 7a69 6c6c 612f 342e 3020 2863 :.Mozilla/4.0.(c 0x0070: 6f6d 7061 7469 626c 653b 204d 5349 4520 ompatible;.MSIE. 0x0080: 362e 303b 2057 696e 646f 7773 204e 5420 6.0;.Windows.NT. 0x0090: 352e 313b 2053 5631 290d 0a41 6363 6570 5.1;.SV1)..Accep 0x00a0: 743a 202a 2f2a 0d0a 4163 6365 7074 2d45 t:.*/*..Accept-E 0x00b0: 6e63 6f64 696e 673a 2069 6465 6e74 6974 ncoding:.identit 0x00c0: 790d 0a48 6f73 743a 2034 352e 3736 2e31 y..Host:.server_ip 0x00d0: 312e 3131 350d 0a43 6f6e 6e65 6374 696f Connectio 0x00e0: 6e3a 204b 6565 702d 416c 6976 650d 0a0d n:.Keep-Alive... 0x00f0: 0a . 10:02:16.629408 IP (tos 0x0, ttl 64, id 24117, offset 0, flags [DF], proto TCP (6), length 52) server_ip.80 > local_ip.48914: Flags [.], cksum 0x9c86 (incorrect -> 0xe2e4), seq 1, ack 176, win 508, options [nop,nop,TS val 3539838478 ecr 3613618810], length 0 0x0000: fe00 0302 ccd0 5600 0302 ccd0 0800 4500 ......V.......E. 0x0010: 0034 5e35 4000 4006 402f 2d4c 0b73 6adc .4^5@.@.@/-L.sj. 0x0020: f8c4 0050 bf12 bc36 af22 a28d 6548 8010 ...P...6."..eH.. 0x0030: 01fc 9c86 0000 0101 080a d2fd a60e d763 ...............c 0x0040: 727a rz 10:02:16.629513 IP (tos 0x0, ttl 64, id 24118, offset 0, flags [DF], proto TCP (6), length 109) server_ip.80 > local_ip.48914: Flags [P.], cksum 0x9cbf (incorrect -> 0xb393), seq 1:58, ack 176, win 508, options [nop,nop,TS val 3539838478 ecr 3613618810], length 57: HTTP 0x0000: fe00 0302 ccd0 5600 0302 ccd0 0800 4500 ......V.......E. 0x0010: 006d 5e36 4000 4006 3ff5 2d4c 0b73 6adc .m^6@.@.?.-L.sj. 0x0020: f8c4 0050 bf12 bc36 af22 a28d 6548 8018 ...P...6."..eH.. 0x0030: 01fc 9cbf 0000 0101 080a d2fd a60e d763 ...............c 0x0040: 727a 0000 1204 0000 0000 0000 0300 0000 rz.............. 0x0050: 8000 0400 0100 0000 0500 ffff ff00 0004 ................ 0x0060: 0800 0000 0000 7fff 0000 0000 0807 0000 ................ 0x0070: 0000 0000 0000 0000 0000 01 ........... 10:02:16.629551 IP (tos 0x0, ttl 64, id 24119, offset 0, flags [DF], proto TCP (6), length 52) server_ip.80 > local_ip.48914: Flags [F.], cksum 0x9c86 (incorrect -> 0xe2aa), seq 58, ack 176, win 508, options [nop,nop,TS val 3539838478 ecr 3613618810], length 0 0x0000: fe00 0302 ccd0 5600 0302 ccd0 0800 4500 ......V.......E. 0x0010: 0034 5e37 4000 4006 402d 2d4c 0b73 6adc .4^7@.@.@--L.sj. 0x0020: f8c4 0050 bf12 bc36 af5b a28d 6548 8011 ...P...6.[..eH.. 0x0030: 01fc 9c86 0000 0101 080a d2fd a60e d763 ...............c 0x0040: 727a rz 10:02:16.913890 IP (tos 0x0, ttl 56, id 24502, offset 0, flags [none], proto TCP (6), length 52) local_ip.48914 > server_ip.80: Flags [.], cksum 0xe361 (correct), seq 176, ack 58, win 21, options [nop,nop,TS val 3613619115 ecr 3539838478], length 0 0x0000: 5600 0302 ccd0 fe00 0302 ccd0 0800 4500 V.............E. 0x0010: 0034 5fb6 0000 3806 86ae 6adc f8c4 2d4c .4_...8...j...-L 0x0020: 0b73 bf12 0050 a28d 6548 bc36 af5b 8010 .s...P..eH.6.[.. 0x0030: 0015 e361 0000 0101 080a d763 73ab d2fd ...a.......cs... 0x0040: a60e .. 10:02:16.913950 IP (tos 0x0, ttl 56, id 24506, offset 0, flags [none], proto TCP (6), length 52) local_ip.48914 > server_ip.80: Flags [.], cksum 0xe360 (correct), seq 176, ack 59, win 21, options [nop,nop,TS val 3613619115 ecr 3539838478], length 0 0x0000: 5600 0302 ccd0 fe00 0302 ccd0 0800 4500 V.............E. 0x0010: 0034 5fba 0000 3806 86aa 6adc f8c4 2d4c .4_...8...j...-L 0x0020: 0b73 bf12 0050 a28d 6548 bc36 af5c 8010 .s...P..eH.6.\.. 0x0030: 0015 e360 0000 0101 080a d763 73ab d2fd ...`.......cs... 0x0040: a60e .. 10:02:16.913983 IP (tos 0x0, ttl 56, id 24508, offset 0, flags [none], proto TCP (6), length 52) local_ip.48914 > server_ip.80: Flags [R.], cksum 0xe35b (correct), seq 176, ack 59, win 21, options [nop,nop,TS val 3613619116 ecr 3539838478], length 0 0x0000: 5600 0302 ccd0 fe00 0302 ccd0 0800 4500 V.............E. 0x0010: 0034 5fbc 0000 3806 86a8 6adc f8c4 2d4c .4_...8...j...-L 0x0020: 0b73 bf12 0050 a28d 6548 bc36 af5c 8014 .s...P..eH.6.\.. 0x0030: 0015 e35b 0000 0101 080a d763 73ac d2fd ...[.......cs... 0x0040: a60e Could incorrect cksum relavant to the issue? Is there a way to check which application or process responded that request? |
SSL converted web system can not work with third pirty Payment service Posted: 24 Jul 2021 07:36 PM PDT |
Can't change linux user password with php script Posted: 24 Jul 2021 06:04 PM PDT I have the following php script for password change: <?php error_reporting(E_ALL); ini_set('display_errors', TRUE); ini_set('display_startup_errors', TRUE); ini_set('display_error', true); $cmd = 'sudo -u root sh -c \'/usr/bin/echo "username:pass" | sudo /usr/sbin/chpasswd 2>&1\''; exec($cmd,$output,$return_val); print_r($output); echo $return_val; ?> This script show error in browser: pam_chauthtok() failed, error: [1] => Authentication token lock busy [2] => chpasswd But the command sudo -u root sh -c '/usr/bin/echo "username:pass" | sudo /usr/sbin/chpasswd 2>&1' work fine. Can please someone give me a tip, why I get in browser the error above? Filesystem is in rw mode. Files /etc/{passwd,shadow} have a correct permissions Thank you in advance |
Laravel route (voyager and others) shows 404 Posted: 24 Jul 2021 04:38 PM PDT I Use Apache 2.4.41, on WSL2/Ubuntu. There I have a laravel project, with Voyager installed. I also use a virtualhost(vh) for it. Accessing the App url http://myapp works. However - The Voyager app at http://myapp/admin fails with 404 error. My VirtualHost file is: <VirtualHost *:80> ServerName myapp DocumentRoot /var/www/myapp/public <Directory "/var/www/myapp/public"> Options Indexes MultiViews AllowOverride None Require all granted </Directory> ErrorLog ${APACHE_LOG_DIR}/error.log CustomLog ${APACHE_LOG_DIR}/access.log combined </VirtualHost> My .htaccess file is: <IfModule mod_rewrite.c> <IfModule mod_negotiation.c> Options -MultiViews -Indexes </IfModule> RewriteEngine On # Handle Authorization Header RewriteCond %{HTTP:Authorization} . RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}] # Redirect Trailing Slashes If Not A Folder... RewriteCond %{REQUEST_FILENAME} !-d RewriteCond %{REQUEST_URI} (.+)/$ RewriteRule ^ %1 [L,R=301] # Send Requests To Front Controller... RewriteCond %{REQUEST_FILENAME} !-d RewriteCond %{REQUEST_FILENAME} !-f RewriteRule ^ index.php [L] </IfModule> |
Can't connect Wordpress and MariaDB on LAMP stack with docker-compose Posted: 24 Jul 2021 05:05 PM PDT I'm new here and that's my 1st question so tell me if anything is wrong in the way I put it. So here's the problem: I'm building a LAMP stack with 3 separate containers for nginx, maiadb and wordpress. The whole nginx and php-fpm seems to work well, as I can access the site's index and process php pages. Mdb builds the wordpress db and creates a "wordpress@wordpress-php" user with all privileges on it. It starts to go wrong when I access the site for installation, I get stuck with a : "Error establishing a database connection" Here is my wp-config.php, that I copy in the wordpress dir inside the container: <?php 4 define( 'DB_NAME', 'wordpress' ); 7 define( 'DB_USER', 'wordpress' ); 10 define( 'DB_PASSWORD', 'wordpress' ); 15 define( 'DB_HOST', 'mariadb' ); 16 define( 'DB_CHARSET', 'utf8' ); 17 19 define( 'DB_COLLATE', '' ); 20 define('AUTHOR', 'yotillar'); 21 22 // Authentication unique keys and salts. 23 define( 'AUTH_KEY', 'key' ); 24 define( 'SECURE_AUTH_KEY', 'key' ); 25 define( 'LOGGED_IN_KEY', 'key' ); 26 define( 'NONCE_KEY', 'key' ); 27 define( 'AUTH_SALT', 'salt' ); 28 define( 'SECURE_AUTH_SALT', 'salt' ); 29 define( 'LOGGED_IN_SALT', 'salt' ); 30 define( 'NONCE_SALT', 'salt' ); 31 38 $table_prefix = 'wp_'; 51 define( 'WP_DEBUG', true ); 52 define( 'WP_DEBUG_LOG', true ); 53 define( 'WP_DEBUG_DISPLAY', false ); 59 if ( ! defined( 'ABSPATH' ) ) { 60 »···define( 'ABSPATH', __DIR__ . '/' ); 61 } 64 require_once ABSPATH . 'wp-settings.php'; 65 ?> Here's my docker-compose.yaml: version: "3.5" 2 3 networks: 4 front-network: 5 driver: bridge 6 attachable: false 7 back-network: 8 driver: bridge 9 attachable: false 10 11 volumes: 12 mdb-data: 13 wordpress: 14 15 services: 16 17 nginx: 18 depends_on: 19 - wordpress-php 20 build: "./services/nginx" 21 image: nginx:mytag 22 volumes: 23 - wordpress:/var/www/myserver/wordpress:rw 24 - "../logs/nginx_logs:/var/log/nginx:rw" 25 restart: on-failure 26 ports: 27 - "80:80" 28 - "443:443" 29 expose: 30 - 9000 31 networks: 32 - front-network 33 34 35 wordpress-php: 36 depends_on: 37 - mariadb 38 build: "./services/wordpress" 39 image: wordpress-php:mytag 40 volumes: 41 - wordpress:/var/www/myserver/wordpress:rw 42 - "../logs/php7.3-fpm.log:/var/log/php7.3-fpm.log:rw" 43 restart: on-failure 44 environment: 45 - WORDPRESS_DB_HOST=mariadb:3306 46 - WORDPRESS_DB_NAME=wordpress 45 - WORDPRESS_DB_USER=wordpress 48 - WORDPRESS_DB_PASSWORD=wordpress 50 expose: 51 - 3306 52 - 9000 53 networks: 54 - front-network 55 - back-network 56 57 58 mariadb: 59 build: "./services/mariadb" 60 image: mariadb:mytag 61 volumes: 62 - mdb-data:/var/lib/mysql:rw 63 - "../logs/mariadb_logs/error.log:/var/log/mysql/error.log" 64 restart: on-failure 65 environment: 66 - MYSQL_DATABASE=wordpress 67 - MYSQL_USER=wordpress 68 - MYSQL_USER_PASSWORD=wordpress 69 - MYSQL_ROOT_PASSWORD=root 70 expose: 71 - 3306 72 networks: 73 - back-network 74 I set the bind-address of mariadb on 0.0.0.0 in ./etc/mysql/mariadb.conf.d/50-se rver.cnf and ./etc/mysql/my.cnf to be sure that th db is indeed listening from every ip. I think the problem comes from the wp-config.php , but as I understood in a docker-compose environment you can refer to each container with his name instead of ip, and I don't know how I could retrieve mariadb's IP from wordpress-php. Please help me, thanks in advance to anyone that read that far! ^^ |
Allow OpenVPN clients to manually set their IP addresses in tun interface Posted: 24 Jul 2021 03:17 PM PDT I need to frequently change the client's IP address manually so modifying the server's configuration every time just seems troublesome. Is there anything similar to AllowedIPs in WireGuard allowing clients to set their own IP addresses inside specific ranges in OpenVPN? I've tried to just ignore the pushed IP and manually set another one but failed, for that OpenVPN seems to block the traffic whose source IP doesn't match with the allocated one. dev tun and topology subnet are used. |
RHEL8: Does NFS I/O count as part of "%iowait" calculations? Posted: 24 Jul 2021 09:46 PM PDT Customer telling us that they see high %iowait in top and iostat output on a busy RHEL8 NFS client. iostat man page clearly says that iowait is related to % of time kernel is waiting on "disk" I/O Question - does NFS I/O count as "disk" I/O in %iowait calculations? |
custom ports in google load balancer for IPv6 Posted: 24 Jul 2021 03:15 PM PDT I am running an MQTT (on custom port) server on the google compute engine. I need it to run on IPv6 network. After looking at the google docs (https://cloud.google.com/load-balancing/docs/ipv6) I figured out we need to use TCP load balancer to support IPv6. Now the TCP load balancer does not support my custom port 19004 Is there a way out? |
Permission denied (publickey). (gcloud.compute.ssh) [/usr/bin/ssh] exited with return code [255]. exited with return code [255] Posted: 24 Jul 2021 10:07 PM PDT try to connect the virtual machine with gcloud but failed. Please advise username@22.233.168.202: Permission denied (publickey). ERROR: (gcloud.compute.ssh) [/usr/bin/ssh] exited with return code [255] |
Beginner: Ansible The offending line appears to be Posted: 24 Jul 2021 04:04 PM PDT I'm learning how to use ansible and am writing a playbook for my local desktop. I'm using the atom editor and have linter installed. I'm not getting any error whilst writing, but then when I execute the playbook I get the error "The offending line appears to be" Here's my current Playbook: --- - hosts: localhost tasks: - name: Install .deb packages from the internet. apt: deb: - https://packagecloud.io/AtomEditor/atom/any/ - https://updates.signal.org/desktop/apt - http://ppa.launchpad.net/webupd8team/brackets/ubuntu - http://ppa.launchpad.net/nextcloud-devs/client/ubuntu - http://repository.spotify.com stable non-free - http://download.xnview.com/XnConvert-linux-x64.deb - https://updates.signal.org/desktop/apt xenial main - name: Install a list of packages update_cache: yes apt: pkg: - AtomEditor - brackets - calibre - chromium-browser - filezilla - firefox-locale-de - gimp - gparted - gscan2pdf - gstreamer1.0-pulseaudio - keepassxc - nextcloud-client - nextcloud-client-nautilus - pdfshuffler - python-nautilus - spotify - tipp10 - vlc - XnConvert - name: no tracking become: true vars: packages_absent: - apport - gnome-intial-setup - ubuntu-web-launchers - name: Remove useless packages from the cache apt: autoclean: yes - name: Remove dependencies that are no longer required apt: autoremove: yes Then my terminal tells me: The offending line appears to be: tasks: - name: no tracking ^ here I know it's a beginners question and probably there are many more problems in my playbook. But I'm happy for any help. |
How to export Cisco AnyConnect preferences and certificates to another PC Posted: 24 Jul 2021 09:03 PM PDT I have two computers (PC and MAC) connected to different organization VPNs. I want to be able to connect from MAC to the same VPNs set on PC. So I need to export VPN list and certificates, etc to my MAC. Is there a way to do it or what do I need to copy manually? Assume everything from: %ProgramData%\Cisco\Cisco AnyConnect Secure Mobility Client\Profile to: /opt/cisco/anyconnect/profile But how do I properly merge it then? Assume I need to export certificates properly |
Ubuntu 18.04 server failed grub install Posted: 24 Jul 2021 08:08 PM PDT I am trying a fresh install of Ubuntu 18.04 server, without an internet connection (not Live) on my Dell PowerEdge R640. The machine came with a Boot Optimized Storage SSD (RAID 1), which is where I'm trying to install to. I've wiped the partition clean and chosen "Guided - use entire disk". However, when the installer attempts to install the grub boot loader, I get "Unable to install grub in dummy 'grub-install dummy' failed" and I am unable to progress. Has anyone encountered this and/or know what my issue is? |
How to install libsrtp 1.5 on Centos 7? Posted: 24 Jul 2021 05:04 PM PDT yum install libsrtp Gives me v 1.4.4-10 How can I force install the >=1.5 version instead ? |
Fast Google Cloud SQL Posted: 24 Jul 2021 07:02 PM PDT I have always set up machines to have a typical LAMP set up and recently I've been testing an external database set up with Google Cloud SQL. The performance hits I'm taking from it seem a bit unreasonable though. The average load speed of my website with a local database is 0.04s. With a connection to Cloud SQL over SSL the load speed is 0.4s. ~10x slower, so I investigated this and learned about connection pooling and how PHP doesn't support it, but ODBC does and that's what my server seems to be using, so that's good but ~10x slower is still bad. I tried setting up a Cloud SQL Proxy with the hope of that being a solution, but after setting it up earlier today it gave me a load speed of 5s. ~100x slower, so definitely not a solution. Is there something that I can do to get a near local database speed using the Google Cloud Platform, should I use some other service for better performance, or do I just have to take this performance hit and live with it? EDIT: More information about the system. The web server is a compute instance on Google Cloud Compute. Both the Compute instance and the SQL instance are in the same zone using g1-small (1 vCPU, 1.7 GB memory). It seems like the latency is about 1 millisecond. Comparison of query runtimes: Local db on the left, Remote db on the right Right now each of these queries is individually sent across the network, so using a multi query could save me a lot of time, assuming PHP actually sends all the query in a single network request. |
Apache is not serving static files from correct directory Posted: 24 Jul 2021 06:00 PM PDT I am actually not sure if the title of the topic is actually the source of my issue but there are serious indications for this. I am not an expert in application servers such as apache so any help is most welcome. I have installed successfully a Django application in a google cloud VM machine (Ubuntu 16.04 with static IP). I am able to access the page but there is no CSS loaded, missing javascript files (e.g. jquery) and several 500 Internal Server Errors. To give a better idea of the errors, I attach a screenshot The first think I thought is that I have not put the static files in the correct folder for the application server (www/../). But that was not the case. Then I thought maybe the www folder doesn't have the right permissions. But that wasn't not the case. The user was set correct to: www-data. My sites-enabled folder of apache2 include my project.conf file. Then I tried to run this command: /usr/sbin/apache2 -S and I got that back: VirtualHost configuration: *:80 localhost (/etc/apache2/sites-enabled/geonode.conf:3) ServerRoot: "/etc/apache2" Main DocumentRoot: "/var/www/html" Main ErrorLog: "/var/log/apache2/error.log" Mutex proxy: using_defaults Mutex default: dir="/var/lock/apache2" mechanism=fcntl Mutex watchdog-callback: using_defaults PidFile: "/var/run/apache2/apache2.pid" Define: DUMP_VHOSTS Define: DUMP_RUN_CFG User: name="www-data" id=33 not_used Group: name="www-data" id=33 not_used As you can see the Main DocumentRoot is in the following folder: "/var/www/html" I was wondering if this could be the reason. Somehow apache is trying to read files from the wrong directory (correct one /var/www/project). I tried to change the Main DocumentRoot by modifying the parameters in the apache.conf file but whenever I test the changes (/usr/sbin/apache2 -S) I still get the old directory. I am not even sure that this could be the issue. Any ideas what is going on here? Note1: I have tried the installation in a local VM and works fine Note2: I have tried in another remote VM and I get the same issue. EDIT This is the apache error.log file: [Fri Jun 01 03:42:58.356938 2018] [wsgi:error] [pid 32199:tid 140244594628352] Internal Server Error: /favicon.ico [Fri Jun 01 03:42:58.357214 2018] [wsgi:error] [pid 32199:tid 140244594628352] Traceback (most recent call last): [Fri Jun 01 03:42:58.357347 2018] [wsgi:error] [pid 32199:tid 140244594628352] File "/usr/lib/python2.7/dist-packages/django/core/handlers/base.py", line 108, in get_response [Fri Jun 01 03:42:58.357402 2018] [wsgi:error] [pid 32199:tid 140244594628352] response = middleware_method(request) [Fri Jun 01 03:42:58.357450 2018] [wsgi:error] [pid 32199:tid 140244594628352] File "/usr/lib/python2.7/dist-packages/django/middleware/common.py", line 62, in process_request [Fri Jun 01 03:42:58.357496 2018] [wsgi:error] [pid 32199:tid 140244594628352] host = request.get_host() [Fri Jun 01 03:42:58.357556 2018] [wsgi:error] [pid 32199:tid 140244594628352] File "/usr/lib/python2.7/dist-packages/django/http/request.py", line 94, inget_host [Fri Jun 01 03:42:58.357603 2018] [wsgi:error] [pid 32199:tid 140244594628352] if domain and validate_host(domain, allowed_hosts): [Fri Jun 01 03:42:58.357651 2018] [wsgi:error] [pid 32199:tid 140244594628352] File "/usr/lib/python2.7/dist-packages/django/http/request.py", line 571, in validate_host [Fri Jun 01 03:42:58.357696 2018] [wsgi:error] [pid 32199:tid 140244594628352] pattern = pattern.lower() [Fri Jun 01 03:42:58.357762 2018] [wsgi:error] [pid 32199:tid 140244594628352] AttributeError: 'NoneType' object has no attribute 'lower' EDIT This is how my configuration file in sites-enabled folder looks like: WSGIDaemonProcess geonode user=www-data threads=15 processes=2 <VirtualHost *:80> Servername localhost ServerAdmin webmaster@localhost LimitRequestFieldSize 32760 LimitRequestLine 32760 ErrorLog /var/log/apache2/error.log LogLevel warn CustomLog /var/log/apache2/access.log combined WSGIProcessGroup geonode WSGIPassAuthorization On WSGIScriptAlias / /var/www/geonode/wsgi/geonode.wsgi <Directory "/var/www/geonode/"> Order allow,deny Options -Indexes ] Allow from all Require all granted </Directory> Alias /static/ /var/www/geonode/static/ Alias /uploaded/ /var/www/geonode/uploaded/ Alias /robots.txt /var/www/geonode/robots.txt <Directory "/var/www/geonode/uploaded/documents/"> Order allow,deny Deny from all </Directory> <Directory "/var/www/geonode/uploaded/layers/"> Order allow,deny Deny from all </Directory> <Directory "/var/www/geonode/static_root/"> Order allow,deny Options Indexes FollowSymLinks Allow from all Require all granted IndexOptions FancyIndexing </Directory> <Directory "/var/www/geonode/uploaded/thumbs/"> Order allow,deny Options Indexes FollowSymLinks Allow from all Require all granted IndexOptions FancyIndexing </Directory> <Directory "/var/www/geonode/uploaded/avatars/"> Order allow,deny Options Indexes FollowSymLinks Allow from all Require all granted IndexOptions FancyIndexing </Directory> <Directory "/var/www/geonode/uploaded/people_group/"> Order allow,deny Options Indexes FollowSymLinks Allow from all Require all granted IndexOptions FancyIndexing </Directory> <Directory "/var/www/geonode/uploaded/group/"> Order allow,deny Options Indexes FollowSymLinks Allow from all Require all granted IndexOptions FancyIndexing </Directory> <Proxy *> Order allow,deny Require all granted Allow from all </Proxy> ProxyPreserveHost On ProxyPass /geoserver http://localhost:8080/geoserver ProxyPassReverse /geoserver http://localhost:8080/geoserver </VirtualHost> |
How can I get nginx-botsearch of Fail2Ban to match a string but also not match that same string if it has additional trailing characters? Posted: 24 Jul 2021 06:00 PM PDT System is Ubuntu 16.04. Using fail2ban from the package manager (which is currently 0.9.3-1). Have enabled nginx-botsearch in jail.local. Here is my /etc/fail2ban/filter.d/nginx-botsearch.local (note that nginx-botsearch depends on botsearch-common): [INCLUDES] before = botsearch-common.conf after = botsearch-common.local [Definition] failregex = ^<HOST> \- \S+ \[\] \"(GET|POST|HEAD) \/<block> \S+\" 404 .+$ ^ \[error\] \d+#\d+: \*\d+ (\S+ )?\"\S+\" (failed|is not found) \(2\: No such file or directory\), client\: <HOST>\, server\: \S*\, request: \"(GET|POST|HEAD) \/<block> \S+\"\, .*?$ ignoreregex = Here is my /etc/fail2ban/filter.d/botsearch-common.local: [Init] block = \/?(<webmail>|<phpmyadmin>|<wordpress>|cgi-bin|mysqladmin)[^,]* webmail = roundcube|(ext)?mail|horde|(v-?)?webmail phpmyadmin = (typo3/|xampp/|admin/|)(pma|(php)?[Mm]y[Aa]dmin) wordpress = wp-(login|signup)\.php So here's the problem. I want it to match "http://example.com/wp-login.php" or "http://example.com/folder/wp-login.php" and not "http://example.com/wp-login.phpasdfasdfasdf" or "http://example.com/wp-login.php?asdfasdfasdf". I have tried using $, \n, \b, \B and any number of other things on the end of the wordpress line to no avail. Please advise how this might be accomplished. |
Iptables rule to block http traffic not working Posted: 24 Jul 2021 05:04 PM PDT sudo iptables -A INPUT -p tcp --destination-port 80 -j DROP Seems that this rule is not blocking the internet traffic comming from the subnetwork (10.0.0.*) Blocking ssh and ftp works well.. Iptables Chain INPUT (policy ACCEPT) num target prot opt source destination 1 DROP tcp -- anywhere anywhere tcp dpt:ftp 2 DROP tcp -- anywhere anywhere tcp dpt:ssh 3 DROP tcp -- anywhere anywhere tcp dpt:http Chain FORWARD (policy ACCEPT) num target prot opt source destination 1 ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED 2 ACCEPT all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) num target prot opt source destination |
Robocopy - Exclude specific file from purge within subdirectory Posted: 24 Jul 2021 04:04 PM PDT I want to exclude a specific file from being deleted while still performing a purge. The specific file is located within a subdirectory that does not exist in source. Source: folder1\ file1.txt Destination: folder1\ file1.txt folder2\ dontdelete.txt delete.txt If I use: Robocopy C:\Source C:\Destination /e /purge /xf dontdelete.txt Then Robocopy will delete folder2\ which contains that file, so in essence still deleting the dontdelete.txt file. Source : C:\Source\ Dest : C:\Destination\ Files : *.* Exc Files : dontdelete.txt Options : *.* /V /L /S /E /DCOPY:DA /COPY:DAT /PURGE /R:1000000 /W:30 ---------------------------------------------------------------------------- 0 C:\Source\ 1 C:\Source\folder1\ *EXTRA Dir -1 C:\Destination\folder1\folder2\ *EXTRA File 0 delete.txt *EXTRA File 0 dontdelete.txt same 0 file1.txt If I use: Robocopy C:\Source C:\Destination /e /purge /xd folder2 /xf dontdelete.txt Then Robocopy will not look inside folder2 at all for files that should be purged. Source : C:\Source\ Dest : C:\Destination\ Files : *.* Exc Files : dontdelete.txt Exc Dirs : folder2 Options : *.* /V /L /S /E /DCOPY:DA /COPY:DAT /PURGE /R:1000000 /W:30 ---------------------------------------------------------------------------- 0 C:\Source\ 1 C:\Source\folder1\ *named dir -1 C:\Destination\folder1\folder2\ same 0 file1.txt I have also tried using the entire path including the file with no difference in output. |
How to store SSH key without attempting to login with password using Plink? Posted: 24 Jul 2021 08:08 PM PDT The below command is used to attempt to store the SSH key, even though we tried to force exit in the command, still it is asking password. echo y | plink -ssh root@172.19.117.69 "exit". The server's host key is not cached in the registry. You have no guarantee that the server is the computer you think it is. The server's rsa2 key fingerprint is: ssh-rsa 2048 a8:8a:f6:67:b4:42:03:09:ae:4b:57:ff:85:c0:94:bf If you trust this host, enter "y" to add the key to PuTTY's cache and carry on connecting. If you want to carry on connecting just once, without adding the key to the cache, enter "n". If you do not trust this host, press Return to abandon the connection. Store key in cache? (y/n) root@172.19.117.69's password: |
Is there an equivalent for docker testing something like tox for Python? Posted: 24 Jul 2021 07:02 PM PDT tox allows you to test your code against different versions of Python. Is there something out there similar to tox that allows me to test my deployment code against different version of a distribution say like centos 7, 6.8, 6.5 etc ? |
NRPE (Winrpe) Powershell Command - Unable to read output in Nagios Posted: 24 Jul 2021 10:07 PM PDT I'm trying to run an Powershell script from NRPE.cfg and get the output in Nagios. When i run the script on the local (Windows) server, everything is just fine. But when i put it in the NRPE.cfg en try to get the output in Nagios, i get an Unable to Read Output error. Searched the internet but can't find the solution, so maybe you can help me out.. The command/script is: command[check_veeam_dailyone]=cmd /c echo c:\install\veeam_check.ps1 ; exit($lastexitcode) | powershell.exe -ExecutionPolicy Bypass -noninteractive -noprofile -File - When i put this on the Windows server in PowerShell, i'll get this output: PS C:\Install> OK - Job: VeeamOne_Daily completed successfully at 10/09/2014 04:45:51. The "PS C:\Install>" part is strange, but it does read the last job, so seems 'okay'.. But when I try to get this output in Nagios with: root@nagios:~# /usr/lib/nagios/plugins/check_nrpe -H 192.168.1.1 -t 300 -c check_veeam_dailyone It says: NRPE: Unable to read output NRPE is running fine, cause when i try to get another command, like the C drive, everything is OK: /usr/lib/nagios/plugins/check_nrpe -H 192.168.1.1 -t 300 -c pdm_disk_c DISK OK - usage: C: 38717.2 MB (63.12% of total 61337.0 MB)|'disk in use'=38717.2MB; 'disk usage'=63.12%;90;95; 'disk total'=61337.0MB; Just can't figure out whats wrong. The script i use is this one: http://exchange.nagios.org/directory/Plugins/Backup-and-Recovery/Others/check_veeam_backups/details Thanks for your reply! |
How can a bog-standard Wordpress install break PHP? Posted: 24 Jul 2021 09:03 PM PDT I'm trying to host a Wordpress site on the root of a standard Apache setup on Ubuntu 14.04. The main page of the site loads fine, but any other page causes a "no data received" message in the browser, and a segfault in the apache log: [Wed Sep 17 09:47:57.278168 2014] [core:notice] [pid 26097] AH00051: child pid 26123 exit signal Segmentation fault (11), possible coredump in /etc/apache2 I can use gdb to attach to the process, try to load a linked page, and this is what I see: Program received signal SIGSEGV, Segmentation fault. _zend_mm_free_int (heap=0x7f7370b94920, p=0x7f735c138880) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_alloc.c:2104 2104 /build/buildd/php5-5.5.9+dfsg/Zend/zend_alloc.c: No such file or directory. I've loaded the debug symbols for Apache2 and PHP5, and this is the backtrace: #0 _zend_mm_free_int (heap=0x7f7370b94920, p=0x7f735c138880) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_alloc.c:2104 #1 0x00007f736b4b7d55 in i_zval_ptr_dtor (zval_ptr=0x7f735c138880) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_execute.h:82 #2 zend_do_fcall_common_helper_SPEC (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:633 #3 0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108af0) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363 #4 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73 #5 0x00007f736b4b8300 in zend_do_fcall_common_helper_SPEC (execute_data=0x7f7370108960) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:584 #6 0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108960) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363 #7 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73 #8 0x00007f736b4b8300 in zend_do_fcall_common_helper_SPEC (execute_data=0x7f7370108828) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:584 #9 0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108828) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363 #10 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73 #11 0x00007f736b4b8300 in zend_do_fcall_common_helper_SPEC (execute_data=0x7f7370108710) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:584 #12 0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108710) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363 #13 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73 #14 0x00007f736b4b658c in ZEND_INCLUDE_OR_EVAL_SPEC_CV_HANDLER (execute_data=0x7f7370108600) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:30964 #15 0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108600) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363 #16 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73 #17 0x00007f736b4b8300 in zend_do_fcall_common_helper_SPEC (execute_data=0x7f7370108480) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:584 #18 0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108480) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363 #19 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73 #20 0x00007f736b4b8300 in zend_do_fcall_common_helper_SPEC (execute_data=0x7f7370108370) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:584 #21 0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108370) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363 #22 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73 #23 0x00007f736b4b658c in ZEND_INCLUDE_OR_EVAL_SPEC_CV_HANDLER (execute_data=0x7f7370108288) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:30964 #24 0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108288) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363 #25 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73 #26 0x00007f736b4b7241 in ZEND_INCLUDE_OR_EVAL_SPEC_TMP_HANDLER (execute_data=0x7f73701081a0) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:8053 #27 0x00007f736b4319e8 in execute_ex (execute_data=0x7f73701081a0) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363 #28 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73 #29 0x00007f736b4b7241 in ZEND_INCLUDE_OR_EVAL_SPEC_TMP_HANDLER (execute_data=0x7f73701080a0) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:8053 #30 0x00007f736b4319e8 in execute_ex (execute_data=0x7f73701080a0) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363 #31 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73 #32 0x00007f736b4095e0 in zend_execute_scripts (type=type@entry=8, retval=retval@entry=0x0, file_count=file_count@entry=3) at /build/buildd/php5-5.5.9+dfsg/Zend/zend.c:1316 #33 0x00007f736b3a94c5 in php_execute_script (primary_file=primary_file@entry=0x7ffff71b7b40) at /build/buildd/php5-5.5.9+dfsg/main/main.c:2506 #34 0x00007f736b4b993a in php_handler (r=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/sapi/apache2handler/sapi_apache2.c:667 #35 0x00007f7370269680 in ap_run_handler (r=0x7f7370093130) at config.c:169 #36 0x00007f7370269bc9 in ap_invoke_handler (r=r@entry=0x7f7370093130) at config.c:439 #37 0x00007f737027ec2c in ap_internal_redirect (new_uri=<optimized out>, r=<optimized out>) at http_request.c:644 #38 0x00007f7369abdcfc in handler_redirect (r=0x7f73700990a0) at mod_rewrite.c:5063 #39 0x00007f7370269680 in ap_run_handler (r=0x7f73700990a0) at config.c:169 #40 0x00007f7370269bc9 in ap_invoke_handler (r=r@entry=0x7f73700990a0) at config.c:439 #41 0x00007f737027f16a in ap_process_async_request (r=0x7f73700990a0) at http_request.c:317 #42 0x00007f737027f444 in ap_process_request (r=r@entry=0x7f73700990a0) at http_request.c:363 #43 0x00007f737027bf02 in ap_process_http_sync_connection (c=0x7f737009f290) at http_core.c:190 #44 ap_process_http_connection (c=0x7f737009f290) at http_core.c:231 #45 0x00007f7370272cc0 in ap_run_process_connection (c=0x7f737009f290) at connection.c:41 #46 0x00007f73702730a8 in ap_process_connection (c=c@entry=0x7f737009f290, csd=<optimized out>) at connection.c:202 #47 0x00007f736caaa767 in child_main (child_num_arg=child_num_arg@entry=5) at prefork.c:704 #48 0x00007f736caaa9a6 in make_child (s=0x7f73701d8de0, slot=5) at prefork.c:800 #49 0x00007f736caab60e in perform_idle_server_maintenance (p=<optimized out>) at prefork.c:902 #50 prefork_run (_pconf=<optimized out>, plog=<optimized out>, s=<optimized out>) at prefork.c:1090 #51 0x00007f737025069e in ap_run_mpm (pconf=0x7f7370206028, plog=0x7f73701d4028, s=0x7f73701d8de0) at mpm_common.c:96 #52 0x00007f7370249e36 in main (argc=3, argv=0x7ffff71b82e8) at main.c:777 For one thing, why is Zend involved at all? I'm guessing that's just the way PHP is built. I've uncommented the one line in php5.ini that references it, but that didn't change anything. It seems reasonably clear that a call to load a linked page in the Wordpress site is going through mod_rewrite (as it should), gets handed off to PHP, then gets lost in a bunch of sub-calls to zend_vm_execute where it ultimately seems to be looking for a source file that's not installed. Do I need to install some other part of Zend on my installation? It doesn't seem like I should have to install non-free software for this. Have I just found a bug? It doesn't seem like something as simple as a stock Wordpress install would uncover a latent problem. The only other piece of the puzzle is that I've moved this site in from a shared host to a dedicated server. I used https://github.com/interconnectit/Search-Replace-DB to sort out the change in the URL. It was working when I set it up and used it a week ago, and now it's not. I've looked through all of the logs from the intervening week, and there's nothing but a handful of status messages. I haven't installed anything or changed anything since this was working. I went to update the site this morning, and found it broken. Since the default page and the dashboard are working, I used the wp-admin page to change the permalink configuration back to the default, and moved the stock .htaccess file out of the way. Another backtrace showed that mod_rewrite is now out of the loop, but the problem persists. |
No comments:
Post a Comment