Saturday, July 24, 2021

Recent Questions - Server Fault

Recent Questions - Server Fault


Centos7 booting stuck on Started LVM2 PV scan on device 8:3

Posted: 24 Jul 2021 09:35 PM PDT

Centos booting stuck on Started LVM2 PV scan on device 8:3.

any suggestion on fixing the issue? I also see SeLinux relablel is required.. I'm not sure how long to wait.

Warning -- Selinux policy relabel is required. Relabeling could take a very long time depending on the file, system size and speed of the hard drives.

Started LVM2 PV scan on device 8:3.

screenshot

TPROXY interferes DNAT port forwarding rules

Posted: 24 Jul 2021 08:51 PM PDT

I'm setting up TPROXY on my VyOS router to forward certain traffic to a local transparent proxy. It works pretty well, until I discovered that all of my DNAT port forwarding rules are no longer working (connection timeout when connecting from external network).

Environment

  • Router: 10.0.0.1/24 (Proxy is running on 1234 port and adding SO_MARK with 0xff)
  • Internal Host: 10.0.0.2/24 (Port 80 should be exposed to the public)

TPROXY Rules

ip rule add fwmark 1 table 100  ip route add local 0.0.0.0/0 dev lo table 100    nft add table myproxy  nft add chain myproxy prerouting { type filter hook prerouting priority 0 \; }  nft add rule myproxy prerouting ip daddr { 127.0.0.1/32, 224.0.0.0/4, 255.255.255.255/32 } return  nft add rule myproxy prerouting meta l4proto tcp ip daddr 10.0.0.0/24 return  nft add rule myproxy prerouting mark 0xff return  nft add rule myproxy prerouting meta l4proto { tcp, udp } mark set 1 tproxy to 127.0.0.1:1234 accept    nft add chain myproxy output { type route hook output priority 0 \; }  nft add rule myproxy output ip daddr { 127.0.0.1/32, 224.0.0.0/4, 255.255.255.255/32 } return  nft add rule myproxy output meta l4proto tcp ip daddr 10.0.0.0/24 return  nft add rule myproxy output mark 0xff return  nft add rule myproxy output meta l4proto { tcp, udp } mark set 1 accept    nft add table filter  nft add chain filter divert { type filter hook prerouting priority -150 \; }  nft add rule filter divert meta l4proto tcp socket transparent 1 meta mark set 1 accept  

DNAT Rules

$ nft list table nat

table ip nat {      chain PREROUTING {          type nat hook prerouting priority dstnat; policy accept;          iifname "pppoe0" tcp dport { 8080 } counter packets 7 bytes 400 dnat to 10.0.0.2:80      }  }  

Symptoms

Connecting RouterPublicIP:8080 is timing out. Ideally it should forward traffic to 10.0.0.2:80.

I guess inbound DNAT traffic is erroneously forwarded to the proxy (instead of the actual host 10.0.0.2), however I couldn't figure out the correct nft rules.

Thanks in advance!

How to setup DNS Failover for Active Dirctory

Posted: 24 Jul 2021 08:09 PM PDT

I have a domain with 2 domain controllers (WS2016), running DNS and GC services. I am not using DHCP, so all the IP addresses are static. I have setup the clients so that they use the 2 domain controllers as preferred and alternate DNS. However, when I turn off the first domain controller, DNS services stop working on the 2nd domain controller, and my clients cannot resolve any names

What OS has the best kernal for taking DDoS Attacks?

Posted: 24 Jul 2021 08:08 PM PDT

What OS has the best kernal for taking DDoS Attacks? I've been using freebsd

Clear ZFS Checksum errors?

Posted: 24 Jul 2021 06:50 PM PDT

TLDR; My ZFS mirror pool got some checksum errors. I replaced the controller, thinking that was the most likely cause, but the errors won't clear. pool clear temporarily resets them, but they come back the next time I run a scrub. How can I clear them for good?

Full story: I have had a ZFS mirror-0 set up and running on ubuntu 20.04.2 LTS for some time. When one of the drives died, I took advantage of the failure to replace both drives with larger ones, as well as adding a SATA-III PCI card for the new drives (the old ones had been connected to the on-board SATA II controller, as I had no more SATA III ports available). After running on the new drives and controller for a few weeks, ZFS complained about checksum errors on both new drives, and put the array into a "degraded" state as a result.

Some research led me to the conclusion that since both drives were showing the exact same number of checksum errors, it was much more likely to be an issue with the controller than with the drives themselves. So I pulled the new controller and put the drives back on the onboard SATA II controller for now, intending to replace the controller card once I verify that is the issue. I then deleted the two files that zpool status -v showed as having permanent errors, issued a zpool clear data to reset the errors, and ran a scrub.

Unfortunately, after the scrub the errors re-appeared, only now a -v no longer showed a file, but just the address (inode, I believe), presumably for one of the files I had deleted earlier. I tried again, with the same result. Every time I run a scrub, it comes back with the following result:

root@watchman:~# zpool status -v    pool: data   state: DEGRADED  status: One or more devices has experienced an error resulting in data      corruption.  Applications may be affected.  action: Restore the file in question if possible.  Otherwise restore the      entire pool from backup.     see: http://zfsonlinux.org/msg/ZFS-8000-8A    scan: scrub repaired 16K in 0 days 09:10:20 with 1 errors on Sat Jul 24 15:48:21 2021  config:        NAME                                 STATE     READ WRITE CKSUM      data                                 DEGRADED     0     0     0        mirror-0                           DEGRADED     0     0     0          ata-ST8000VE000-2P6101_WSD1M5NW  DEGRADED     0     0    15  too many errors          ata-ST8000VE000-2P6101_WSD1HEJX  DEGRADED     0     0    15  too many errors    errors: Permanent errors have been detected in the following files:            data:<0x380508>  

From what I can tell, this is just the same issue that already existed due, presumably, to the bad controller, but I can't seem to clear it out. How can I restore my mirror to a fully-functioning state?

Which AWS EC2 region is the best for hosting a global site?

Posted: 24 Jul 2021 09:27 PM PDT

I'm looking for a suggestion to choose a region for a global site(Not targetted for any specific country/region). At the moment I'm looking for a simpler solution without having multiple replicas in different regions. So I'm wondering if anybody knows which AWS region is best in terms of latency all across the world? I'm also open to suggestions for tools like cloudping.info.

Thank you

1min Interval Cronjobs inside CloudLinux

Posted: 24 Jul 2021 06:32 PM PDT

So I got the following message from my server-administrator the other day:

Hi ****,

We hope you are doing well today.

We have noticed one of your accounts was running multiple cron jobs with 1 minute intervals. (Three; and I admit they could've been merge into 1. There were not 1000's of lines of code, literally no more than 35 combined)

-snip-

On a shared hosting server, running a cron job every minute can have an adverse impact on the server's health and other users on the same server. To prevent the server from being negatively affected, we have modified the cron jobs as below:

-snip-

They will now run every at the above specified intervals. Please do not run any cronjob that has less than 15 minute intervals.

Your cooperation will be much appreciated in this regard.

Should you have further questions or concerns, please update this ticket.

Best Regards, ****.

Does this make sense to anyone? Because I have looked to the cloudlinux documentation and it doesn't seem to make any sense:

Picture from cloudlinux documentation

Picture from cloudlinux documentation

I pay for a "semi-dedicated" server off them, and 80 available Entry Processes. The only way I see this being a problem is if they load more users onto servers where they don't have the actual resources to account for those said users and their plans, because this was his "example":

Unfortunately, we have to maintain some minimum restrictions to maintain the hosting quality. Imagine what might happen if 50 users run 150 cron jobs per minute on the server. A regular server might crawl.

And like I said, the only way I see that being a problem is if the users resources account for more than the server can handle.

Am I wrong to think this? I never got linked to documentation explaining his argument or anything, he just referred be to his "terms of service" and basically told me he works with it everyday and that I don't know what I am talking about.

Troubleshooting nginx requests not reaching server

Posted: 24 Jul 2021 07:49 PM PDT

When I browse from other servers using

wget -U "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" --spider http://server_ip/page --no-hsts  

This is the response

Spider mode enabled. Check if remote file exists.  --2021-07-25 09:03:09--  http://server_ip/page  Connecting to 45.76.11.115:80... connected.   HTTP request sent, awaiting response... 200 No headers, assuming HTTP/0.9  Length: unspecified  Remote file exists and could contain further links,  but recursion is disabled -- not retrieving.  

Nginx default conf is

server {     listen 80 default_server;     server_name _;     return 404;     location ~ /\.ht {        deny all;      }  }  

There are no entries in both error or access log. However it's receiving requests from some unknown servers like

some_public_ip - - [25/Jul/2021:08:53:14 +0800] "GET / HTTP/1.1" 200 399 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" "1.68"  

By checking programs listening at 80 using

lsof -nP -iTCP -sTCP:LISTEN  

I get only nginx though.

nginx     19182     root    6u  IPv4 19898878      0t0  TCP *:80 (LISTEN)  nginx     19182     root    7u  IPv4 19898879      0t0  TCP *:8443 (LISTEN)  nginx     19183 www-data    6u  IPv4 19898878      0t0  TCP *:80 (LISTEN)  nginx     19183 www-data    7u  IPv4 19898879      0t0  TCP *:8443 (LISTEN)  

However tcpdump showing it's receiving request

09:13:06.520109 IP local_ip.42330 > server_ip.80: Flags [.], ack 1, win 21, options [nop,nop,TS val 3610668715 ecr 3536888037], length 0  09:13:06.523627 IP local_ip.42330 > server_ip.80: Flags [P.], seq 1:173, ack 1, win 21, options [nop,nop,TS val 3610668715 ecr 3536888037], length 172: HTTP: HEAD / HTTP/1.1  09:13:06.523668 IP server_ip.80 > local_ip.42330: Flags [.], ack 173, win 508, options [nop,nop,TS val 3536888310 ecr 3610668715], length 0  09:13:06.523741 IP server_ip.80 > local_ip.42330: Flags [P.], seq 1:58, ack 173, win 508, options [nop,nop,TS val 3536888310 ecr 3610668715], length 57: HTTP  09:13:06.523781 IP server_ip.80 > local_ip.42330: Flags [F.], seq 58, ack 173, win 508, options [nop,nop,TS val 3536888310 ecr 3610668715], length 0  09:13:06.790067 IP local_ip.42330 > server_ip.80: Flags [.], ack 58, win 21, options [nop,nop,TS val 3610668990 ecr 3536888310], length 0  09:13:06.795185 IP local_ip.42330 > server_ip.80: Flags [R.], seq 173, ack 59, win 21, options [nop,nop,TS val 3610668991 ecr 3536888310], length 0  09:13:06.800086 IP local_ip.42330 > server_ip.80: Flags [R], seq 1666043585, win 0, length 0  

How to fix this?

Update #1

Tried tcp dump again with

tcpdump -vvXX -n port 80  

and output

    local_ip.48914 > server_ip.80: Flags [S], cksum 0xf7e9 (correct), seq 2727175320, win 42340, options [mss 1318,sackOK,TS val 3613618415 ecr 0,nop,wscale 11], length 0          0x0000:  5600 0302 ccd0 fe00 0302 ccd0 0800 4500  V.............E.          0x0010:  003c 5f00 0000 3806 875c 6adc f8c4 2d4c  .<_...8..\j...-L          0x0020:  0b73 bf12 0050 a28d 6498 0000 0000 a002  .s...P..d.......          0x0030:  a564 f7e9 0000 0204 0526 0402 080a d763  .d.......&.....c          0x0040:  70ef 0000 0000 0103 030b                 p.........      10:02:16.252990 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)          server_ip.80 > local_ip.48914: Flags [S.], cksum 0x9c8e (incorrect -> 0xbb3e), seq 3157700385, ack 2727175321, win 65160, options [mss 1460,sackOK,TS val 3539838101 ecr 3613618415,nop,wscale 7], length 0          0x0000:  fe00 0302 ccd0 5600 0302 ccd0 0800 4500  ......V.......E.          0x0010:  003c 0000 4000 4006 9e5c 2d4c 0b73 6adc  .<..@.@..\-L.sj.          0x0020:  f8c4 0050 bf12 bc36 af21 a28d 6499 a012  ...P...6.!..d...          0x0030:  fe88 9c8e 0000 0204 05b4 0402 080a d2fd  ................          0x0040:  a495 d763 70ef 0103 0307                 ...cp.....      10:02:16.615737 IP (tos 0x0, ttl 56, id 24419, offset 0, flags [none], proto TCP (6), length 52)          local_ip.48914 > server_ip.80: Flags [.], cksum 0xe6f3 (correct), seq 1, ack 1, win 21, options [nop,nop,TS val 3613618810 ecr 3539838101], length 0          0x0000:  5600 0302 ccd0 fe00 0302 ccd0 0800 4500  V.............E.          0x0010:  0034 5f63 0000 3806 8701 6adc f8c4 2d4c  .4_c..8...j...-L          0x0020:  0b73 bf12 0050 a28d 6499 bc36 af22 8010  .s...P..d..6."..          0x0030:  0015 e6f3 0000 0101 080a d763 727a d2fd  ...........crz..          0x0040:  a495                                     ..      10:02:16.629335 IP (tos 0x0, ttl 56, id 24423, offset 0, flags [none], proto TCP (6), length 227)          local_ip.48914 > server_ip.80: Flags [P.], cksum 0x36e5 (correct), seq 1:176, ack 1, win 21, options [nop,nop,TS val 3613618810 ecr 3539838101], length 175: HTTP, length: 175          HEAD /url HTTP/1.1          User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)          Accept: */*          Accept-Encoding: identity          Host: server_ip          Connection: Keep-Alive                    0x0000:  5600 0302 ccd0 fe00 0302 ccd0 0800 4500  V.............E.          0x0010:  00e3 5f67 0000 3806 864e 6adc f8c4 2d4c  .._g..8..Nj...-L          0x0020:  0b73 bf12 0050 a28d 6499 bc36 af22 8018  .s...P..d..6."..          0x0030:  0015 36e5 0000 0101 080a d763 727a d2fd  ..6........crz..          0x0040:  a495 4845 4144 202f 7572 6c20 4854 5450  ..HEAD./url.HTTP          0x0050:  2f31 2e31 0d0a 5573 6572 2d41 6765 6e74  /1.1..User-Agent          0x0060:  3a20 4d6f 7a69 6c6c 612f 342e 3020 2863  :.Mozilla/4.0.(c          0x0070:  6f6d 7061 7469 626c 653b 204d 5349 4520  ompatible;.MSIE.          0x0080:  362e 303b 2057 696e 646f 7773 204e 5420  6.0;.Windows.NT.          0x0090:  352e 313b 2053 5631 290d 0a41 6363 6570  5.1;.SV1)..Accep          0x00a0:  743a 202a 2f2a 0d0a 4163 6365 7074 2d45  t:.*/*..Accept-E          0x00b0:  6e63 6f64 696e 673a 2069 6465 6e74 6974  ncoding:.identit          0x00c0:  790d 0a48 6f73 743a 2034 352e 3736 2e31  y..Host:.server_ip          0x00d0:  312e 3131 350d 0a43 6f6e 6e65 6374 696f  Connectio          0x00e0:  6e3a 204b 6565 702d 416c 6976 650d 0a0d  n:.Keep-Alive...          0x00f0:  0a                                       .      10:02:16.629408 IP (tos 0x0, ttl 64, id 24117, offset 0, flags [DF], proto TCP (6), length 52)          server_ip.80 > local_ip.48914: Flags [.], cksum 0x9c86 (incorrect -> 0xe2e4), seq 1, ack 176, win 508, options [nop,nop,TS val 3539838478 ecr 3613618810], length 0          0x0000:  fe00 0302 ccd0 5600 0302 ccd0 0800 4500  ......V.......E.          0x0010:  0034 5e35 4000 4006 402f 2d4c 0b73 6adc  .4^5@.@.@/-L.sj.          0x0020:  f8c4 0050 bf12 bc36 af22 a28d 6548 8010  ...P...6."..eH..          0x0030:  01fc 9c86 0000 0101 080a d2fd a60e d763  ...............c          0x0040:  727a                                     rz      10:02:16.629513 IP (tos 0x0, ttl 64, id 24118, offset 0, flags [DF], proto TCP (6), length 109)          server_ip.80 > local_ip.48914: Flags [P.], cksum 0x9cbf (incorrect -> 0xb393), seq 1:58, ack 176, win 508, options [nop,nop,TS val 3539838478 ecr 3613618810], length 57: HTTP          0x0000:  fe00 0302 ccd0 5600 0302 ccd0 0800 4500  ......V.......E.          0x0010:  006d 5e36 4000 4006 3ff5 2d4c 0b73 6adc  .m^6@.@.?.-L.sj.          0x0020:  f8c4 0050 bf12 bc36 af22 a28d 6548 8018  ...P...6."..eH..          0x0030:  01fc 9cbf 0000 0101 080a d2fd a60e d763  ...............c          0x0040:  727a 0000 1204 0000 0000 0000 0300 0000  rz..............          0x0050:  8000 0400 0100 0000 0500 ffff ff00 0004  ................          0x0060:  0800 0000 0000 7fff 0000 0000 0807 0000  ................          0x0070:  0000 0000 0000 0000 0000 01              ...........      10:02:16.629551 IP (tos 0x0, ttl 64, id 24119, offset 0, flags [DF], proto TCP (6), length 52)          server_ip.80 > local_ip.48914: Flags [F.], cksum 0x9c86 (incorrect -> 0xe2aa), seq 58, ack 176, win 508, options [nop,nop,TS val 3539838478 ecr 3613618810], length 0          0x0000:  fe00 0302 ccd0 5600 0302 ccd0 0800 4500  ......V.......E.          0x0010:  0034 5e37 4000 4006 402d 2d4c 0b73 6adc  .4^7@.@.@--L.sj.          0x0020:  f8c4 0050 bf12 bc36 af5b a28d 6548 8011  ...P...6.[..eH..          0x0030:  01fc 9c86 0000 0101 080a d2fd a60e d763  ...............c          0x0040:  727a                                     rz      10:02:16.913890 IP (tos 0x0, ttl 56, id 24502, offset 0, flags [none], proto TCP (6), length 52)          local_ip.48914 > server_ip.80: Flags [.], cksum 0xe361 (correct), seq 176, ack 58, win 21, options [nop,nop,TS val 3613619115 ecr 3539838478], length 0          0x0000:  5600 0302 ccd0 fe00 0302 ccd0 0800 4500  V.............E.          0x0010:  0034 5fb6 0000 3806 86ae 6adc f8c4 2d4c  .4_...8...j...-L          0x0020:  0b73 bf12 0050 a28d 6548 bc36 af5b 8010  .s...P..eH.6.[..          0x0030:  0015 e361 0000 0101 080a d763 73ab d2fd  ...a.......cs...          0x0040:  a60e                                     ..      10:02:16.913950 IP (tos 0x0, ttl 56, id 24506, offset 0, flags [none], proto TCP (6), length 52)          local_ip.48914 > server_ip.80: Flags [.], cksum 0xe360 (correct), seq 176, ack 59, win 21, options [nop,nop,TS val 3613619115 ecr 3539838478], length 0          0x0000:  5600 0302 ccd0 fe00 0302 ccd0 0800 4500  V.............E.          0x0010:  0034 5fba 0000 3806 86aa 6adc f8c4 2d4c  .4_...8...j...-L          0x0020:  0b73 bf12 0050 a28d 6548 bc36 af5c 8010  .s...P..eH.6.\..          0x0030:  0015 e360 0000 0101 080a d763 73ab d2fd  ...`.......cs...          0x0040:  a60e                                     ..      10:02:16.913983 IP (tos 0x0, ttl 56, id 24508, offset 0, flags [none], proto TCP (6), length 52)          local_ip.48914 > server_ip.80: Flags [R.], cksum 0xe35b (correct), seq 176, ack 59, win 21, options [nop,nop,TS val 3613619116 ecr 3539838478], length 0          0x0000:  5600 0302 ccd0 fe00 0302 ccd0 0800 4500  V.............E.          0x0010:  0034 5fbc 0000 3806 86a8 6adc f8c4 2d4c  .4_...8...j...-L          0x0020:  0b73 bf12 0050 a28d 6548 bc36 af5c 8014  .s...P..eH.6.\..          0x0030:  0015 e35b 0000 0101 080a d763 73ac d2fd  ...[.......cs...          0x0040:  a60e  

Could incorrect cksum relavant to the issue? Is there a way to check which application or process responded that request?

SSL converted web system can not work with third pirty Payment service

Posted: 24 Jul 2021 07:36 PM PDT

My Web app works with a Payment service called Stripe. Stripe proceeds the payment by webhook.

I do have a Stripe webhook that is successfully caught and processed in Stripe's TEST MODE, on http local host server. http://3.129.28.206/subscriptions/webhook/

When switching to Stripe's LIVE MODE DATA, I need to SSL converted "http" to "https" So I set a Load Balancer and exposed the server over HTTPS by AWS.

However, the webhook returns error saying Timed out connecting to remote host, https://customsrulingsdb.com/subscriptions/webhook/

When the URL is SSL converted from "http" to "https", is there anything I need to fix working with third pirty to proceed payment?

I used below two tools but I can not figure out what the problem is.

https://www.ssllabs.com/ssltest/index.html

https://dns.google.com/query?name=&rr_type=ALL&ecs=

I just mentioned the above settings in this question but still if more code is required then tell me I'll update my question with that information.

Thank you.

Can't change linux user password with php script

Posted: 24 Jul 2021 06:04 PM PDT

I have the following php script for password change: <?php error_reporting(E_ALL); ini_set('display_errors', TRUE); ini_set('display_startup_errors', TRUE); ini_set('display_error', true);

$cmd = 'sudo -u root sh -c \'/usr/bin/echo "username:pass" | sudo /usr/sbin/chpasswd 2>&1\'';  exec($cmd,$output,$return_val);  print_r($output);  echo $return_val;  ?>  

This script show error in browser:

pam_chauthtok() failed, error: [1] => Authentication token lock busy [2] => chpasswd  

But the command

sudo -u root sh -c '/usr/bin/echo "username:pass" | sudo /usr/sbin/chpasswd 2>&1'  

work fine. Can please someone give me a tip, why I get in browser the error above?

Filesystem is in rw mode. Files /etc/{passwd,shadow} have a correct permissions

Thank you in advance

Laravel route (voyager and others) shows 404

Posted: 24 Jul 2021 04:38 PM PDT

I Use Apache 2.4.41, on WSL2/Ubuntu.
There I have a laravel project, with Voyager installed.
I also use a virtualhost(vh) for it.

Accessing the App url http://myapp works. However - The Voyager app at http://myapp/admin fails with 404 error.

My VirtualHost file is:

<VirtualHost *:80>      ServerName myapp        DocumentRoot /var/www/myapp/public          <Directory "/var/www/myapp/public">          Options Indexes MultiViews          AllowOverride None          Require all granted      </Directory>            ErrorLog ${APACHE_LOG_DIR}/error.log      CustomLog ${APACHE_LOG_DIR}/access.log combined  </VirtualHost>  

My .htaccess file is:

<IfModule mod_rewrite.c>      <IfModule mod_negotiation.c>          Options -MultiViews -Indexes      </IfModule>        RewriteEngine On        # Handle Authorization Header      RewriteCond %{HTTP:Authorization} .      RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]        # Redirect Trailing Slashes If Not A Folder...      RewriteCond %{REQUEST_FILENAME} !-d      RewriteCond %{REQUEST_URI} (.+)/$      RewriteRule ^ %1 [L,R=301]        # Send Requests To Front Controller...      RewriteCond %{REQUEST_FILENAME} !-d      RewriteCond %{REQUEST_FILENAME} !-f      RewriteRule ^ index.php [L]  </IfModule>  

Can't connect Wordpress and MariaDB on LAMP stack with docker-compose

Posted: 24 Jul 2021 05:05 PM PDT

I'm new here and that's my 1st question so tell me if anything is wrong in the way I put it.

So here's the problem: I'm building a LAMP stack with 3 separate containers for nginx, maiadb and wordpress.

The whole nginx and php-fpm seems to work well, as I can access the site's index and process php pages. Mdb builds the wordpress db and creates a "wordpress@wordpress-php" user with all privileges on it.

It starts to go wrong when I access the site for installation, I get stuck with a : "Error establishing a database connection"

Here is my wp-config.php, that I copy in the wordpress dir inside the container:

 <?php                                                                4 define( 'DB_NAME', 'wordpress' );    7 define( 'DB_USER', 'wordpress' );   10 define( 'DB_PASSWORD', 'wordpress' );     15 define( 'DB_HOST', 'mariadb' );                                                                                                                                                         16 define( 'DB_CHARSET', 'utf8' );                                                    17                                                                                                 19 define( 'DB_COLLATE', '' );                                                        20 define('AUTHOR', 'yotillar');                                                      21                                                                                    22 // Authentication unique keys and salts.                                           23 define( 'AUTH_KEY',         'key' );   24 define( 'SECURE_AUTH_KEY',  'key' );   25 define( 'LOGGED_IN_KEY',    'key' );   26 define( 'NONCE_KEY',        'key' );   27 define( 'AUTH_SALT',        'salt' );                                       28 define( 'SECURE_AUTH_SALT', 'salt' );   29 define( 'LOGGED_IN_SALT',   'salt' );   30 define( 'NONCE_SALT',       'salt' );   31                                                                                                                  38 $table_prefix = 'wp_';                    51 define( 'WP_DEBUG', true );                                       52 define( 'WP_DEBUG_LOG', true );                                   53 define( 'WP_DEBUG_DISPLAY', false );                                                                                                  59 if ( ! defined( 'ABSPATH' ) ) {                                   60 »···define( 'ABSPATH', __DIR__ . '/' );                           61 }                                                                                               64 require_once ABSPATH . 'wp-settings.php';                         65 ?>                                              

Here's my docker-compose.yaml:

version: "3.5"                                                                      2                                                                                     3 networks:                                                                           4   front-network:                                                                    5     driver: bridge                                                                  6     attachable: false                                                               7   back-network:                                                                     8     driver: bridge                                                                  9     attachable: false                                                              10                                                                                    11 volumes:                                                                             12   mdb-data:                                                                        13   wordpress:                                                                       14                                                                                    15 services:                                                                          16                                                                                    17   nginx:                                                                           18     depends_on:                                                                    19       - wordpress-php                                                              20     build: "./services/nginx"                                                      21     image: nginx:mytag                                                             22     volumes:                                                                       23       - wordpress:/var/www/myserver/wordpress:rw                                   24       - "../logs/nginx_logs:/var/log/nginx:rw"                                     25     restart: on-failure                                                            26     ports:                                                                         27       - "80:80"                                                                    28       - "443:443"                                                                  29     expose:                                                                        30       - 9000                                                                       31     networks:                                                                      32       - front-network                                                              33                                                                                    34                                                                                    35   wordpress-php:                                                                   36     depends_on:                                                                    37       - mariadb                                                                    38     build: "./services/wordpress"                                                  39     image: wordpress-php:mytag                                                     40     volumes:                                                                       41       - wordpress:/var/www/myserver/wordpress:rw   42       - "../logs/php7.3-fpm.log:/var/log/php7.3-fpm.log:rw"                           43     restart: on-failure                                                            44     environment:                                                                   45       - WORDPRESS_DB_HOST=mariadb:3306                                             46       - WORDPRESS_DB_NAME=wordpress                                                45       - WORDPRESS_DB_USER=wordpress                                                48       - WORDPRESS_DB_PASSWORD=wordpress                                                                                         50     expose:                                                                        51       - 3306                                                                       52       - 9000                                                                       53     networks:                                                                      54       - front-network                                                              55       - back-network                                                               56                                                                                    57                                                                                    58   mariadb:                                                                         59     build: "./services/mariadb"                                                    60     image: mariadb:mytag                                                           61     volumes:                                                                       62       - mdb-data:/var/lib/mysql:rw                                                 63       - "../logs/mariadb_logs/error.log:/var/log/mysql/error.log"                  64     restart: on-failure                                                            65     environment:                                                                   66       - MYSQL_DATABASE=wordpress                                                   67       - MYSQL_USER=wordpress                                                       68       - MYSQL_USER_PASSWORD=wordpress                                              69       - MYSQL_ROOT_PASSWORD=root                                                   70     expose:                                                                        71       - 3306                                                                       72     networks:                                                                      73       - back-network                                                               74                                                                                     

I set the bind-address of mariadb on 0.0.0.0 in ./etc/mysql/mariadb.conf.d/50-se rver.cnf and ./etc/mysql/my.cnf to be sure that th db is indeed listening from every ip.

I think the problem comes from the wp-config.php , but as I understood in a docker-compose environment you can refer to each container with his name instead of ip, and I don't know how I could retrieve mariadb's IP from wordpress-php.

Please help me, thanks in advance to anyone that read that far! ^^

Allow OpenVPN clients to manually set their IP addresses in tun interface

Posted: 24 Jul 2021 03:17 PM PDT

I need to frequently change the client's IP address manually so modifying the server's configuration every time just seems troublesome.
Is there anything similar to AllowedIPs in WireGuard allowing clients to set their own IP addresses inside specific ranges in OpenVPN?
I've tried to just ignore the pushed IP and manually set another one but failed, for that OpenVPN seems to block the traffic whose source IP doesn't match with the allocated one.
dev tun and topology subnet are used.

RHEL8: Does NFS I/O count as part of "%iowait" calculations?

Posted: 24 Jul 2021 09:46 PM PDT

Customer telling us that they see high %iowait in top and iostat output on a busy RHEL8 NFS client.

iostat man page clearly says that iowait is related to % of time kernel is waiting on "disk" I/O

Question - does NFS I/O count as "disk" I/O in %iowait calculations?

custom ports in google load balancer for IPv6

Posted: 24 Jul 2021 03:15 PM PDT

I am running an MQTT (on custom port) server on the google compute engine. I need it to run on IPv6 network. After looking at the google docs (https://cloud.google.com/load-balancing/docs/ipv6) I figured out we need to use TCP load balancer to support IPv6.

Now the TCP load balancer does not support my custom port 19004

Is there a way out?

Permission denied (publickey). (gcloud.compute.ssh) [/usr/bin/ssh] exited with return code [255]. exited with return code [255]

Posted: 24 Jul 2021 10:07 PM PDT

try to connect the virtual machine with gcloud but failed. Please advise

username@22.233.168.202: Permission denied (publickey).  ERROR: (gcloud.compute.ssh) [/usr/bin/ssh] exited with return code [255]  

Beginner: Ansible The offending line appears to be

Posted: 24 Jul 2021 04:04 PM PDT

I'm learning how to use ansible and am writing a playbook for my local desktop. I'm using the atom editor and have linter installed. I'm not getting any error whilst writing, but then when I execute the playbook I get the error "The offending line appears to be"

    Here's my current Playbook:      ---  - hosts: localhost    tasks:            - name: Install .deb packages from the internet.            apt:            deb:            - https://packagecloud.io/AtomEditor/atom/any/            - https://updates.signal.org/desktop/apt            - http://ppa.launchpad.net/webupd8team/brackets/ubuntu            - http://ppa.launchpad.net/nextcloud-devs/client/ubuntu            - http://repository.spotify.com stable non-free            - http://download.xnview.com/XnConvert-linux-x64.deb            - https://updates.signal.org/desktop/apt xenial main                  - name: Install a list of packages            update_cache: yes            apt:              pkg:              - AtomEditor              - brackets              - calibre              - chromium-browser              - filezilla              - firefox-locale-de              - gimp              - gparted              - gscan2pdf              - gstreamer1.0-pulseaudio              - keepassxc              - nextcloud-client              - nextcloud-client-nautilus              - pdfshuffler              - python-nautilus              - spotify              - tipp10              - vlc              - XnConvert                - name: no tracking            become: true            vars:              packages_absent:                - apport                - gnome-intial-setup                - ubuntu-web-launchers              - name: Remove useless packages from the cache            apt:            autoclean: yes              - name: Remove dependencies that are no longer required            apt:            autoremove: yes  

Then my terminal tells me:

The offending line appears to be:      tasks:      - name: no tracking        ^ here  

I know it's a beginners question and probably there are many more problems in my playbook. But I'm happy for any help.

How to export Cisco AnyConnect preferences and certificates to another PC

Posted: 24 Jul 2021 09:03 PM PDT

I have two computers (PC and MAC) connected to different organization VPNs. I want to be able to connect from MAC to the same VPNs set on PC. So I need to export VPN list and certificates, etc to my MAC. Is there a way to do it or what do I need to copy manually? Assume everything from:

%ProgramData%\Cisco\Cisco AnyConnect Secure Mobility Client\Profile  

to:

/opt/cisco/anyconnect/profile  

But how do I properly merge it then? Assume I need to export certificates properly

Ubuntu 18.04 server failed grub install

Posted: 24 Jul 2021 08:08 PM PDT

I am trying a fresh install of Ubuntu 18.04 server, without an internet connection (not Live) on my Dell PowerEdge R640. The machine came with a Boot Optimized Storage SSD (RAID 1), which is where I'm trying to install to. I've wiped the partition clean and chosen "Guided - use entire disk". However, when the installer attempts to install the grub boot loader, I get "Unable to install grub in dummy 'grub-install dummy' failed" and I am unable to progress. Has anyone encountered this and/or know what my issue is?

How to install libsrtp 1.5 on Centos 7?

Posted: 24 Jul 2021 05:04 PM PDT

yum install libsrtp  

Gives me v 1.4.4-10

How can I force install the >=1.5 version instead ?

Fast Google Cloud SQL

Posted: 24 Jul 2021 07:02 PM PDT

I have always set up machines to have a typical LAMP set up and recently I've been testing an external database set up with Google Cloud SQL. The performance hits I'm taking from it seem a bit unreasonable though.

The average load speed of my website with a local database is 0.04s. With a connection to Cloud SQL over SSL the load speed is 0.4s. ~10x slower, so I investigated this and learned about connection pooling and how PHP doesn't support it, but ODBC does and that's what my server seems to be using, so that's good but ~10x slower is still bad.

I tried setting up a Cloud SQL Proxy with the hope of that being a solution, but after setting it up earlier today it gave me a load speed of 5s. ~100x slower, so definitely not a solution.

Is there something that I can do to get a near local database speed using the Google Cloud Platform, should I use some other service for better performance, or do I just have to take this performance hit and live with it?

EDIT:
More information about the system. The web server is a compute instance on Google Cloud Compute. Both the Compute instance and the SQL instance are in the same zone using g1-small (1 vCPU, 1.7 GB memory).

It seems like the latency is about 1 millisecond.

Comparison of query runtimes: Local db on the left, Remote db on the right

Right now each of these queries is individually sent across the network, so using a multi query could save me a lot of time, assuming PHP actually sends all the query in a single network request.

Apache is not serving static files from correct directory

Posted: 24 Jul 2021 06:00 PM PDT

I am actually not sure if the title of the topic is actually the source of my issue but there are serious indications for this. I am not an expert in application servers such as apache so any help is most welcome.

I have installed successfully a Django application in a google cloud VM machine (Ubuntu 16.04 with static IP). I am able to access the page but there is no CSS loaded, missing javascript files (e.g. jquery) and several 500 Internal Server Errors.

To give a better idea of the errors, I attach a screenshot enter image description here

The first think I thought is that I have not put the static files in the correct folder for the application server (www/../). But that was not the case.

Then I thought maybe the www folder doesn't have the right permissions. But that wasn't not the case. The user was set correct to: www-data.

My sites-enabled folder of apache2 include my project.conf file.

Then I tried to run this command:

     /usr/sbin/apache2 -S  

and I got that back:

VirtualHost configuration:  *:80                   localhost (/etc/apache2/sites-enabled/geonode.conf:3)  ServerRoot: "/etc/apache2"  Main DocumentRoot: "/var/www/html"  Main ErrorLog: "/var/log/apache2/error.log"  Mutex proxy: using_defaults  Mutex default: dir="/var/lock/apache2" mechanism=fcntl   Mutex watchdog-callback: using_defaults  PidFile: "/var/run/apache2/apache2.pid"  Define: DUMP_VHOSTS  Define: DUMP_RUN_CFG  User: name="www-data" id=33 not_used  Group: name="www-data" id=33 not_used  

As you can see the Main DocumentRoot is in the following folder: "/var/www/html" I was wondering if this could be the reason. Somehow apache is trying to read files from the wrong directory (correct one /var/www/project).

I tried to change the Main DocumentRoot by modifying the parameters in the apache.conf file but whenever I test the changes (/usr/sbin/apache2 -S) I still get the old directory.

I am not even sure that this could be the issue. Any ideas what is going on here?

Note1: I have tried the installation in a local VM and works fine Note2: I have tried in another remote VM and I get the same issue. EDIT

This is the apache error.log file:

[Fri Jun 01 03:42:58.356938 2018] [wsgi:error] [pid 32199:tid 140244594628352]   Internal Server Error: /favicon.ico  [Fri Jun 01 03:42:58.357214 2018] [wsgi:error] [pid 32199:tid 140244594628352]   Traceback (most recent call last):  [Fri Jun 01 03:42:58.357347 2018] [wsgi:error] [pid 32199:tid 140244594628352]     File "/usr/lib/python2.7/dist-packages/django/core/handlers/base.py", line   108, in get_response  [Fri Jun 01 03:42:58.357402 2018] [wsgi:error] [pid 32199:tid 140244594628352]       response = middleware_method(request)  [Fri Jun 01 03:42:58.357450 2018] [wsgi:error] [pid 32199:tid 140244594628352]     File "/usr/lib/python2.7/dist-packages/django/middleware/common.py", line 62,   in process_request  [Fri Jun 01 03:42:58.357496 2018] [wsgi:error] [pid 32199:tid 140244594628352]       host = request.get_host()  [Fri Jun 01 03:42:58.357556 2018] [wsgi:error] [pid 32199:tid 140244594628352]     File "/usr/lib/python2.7/dist-packages/django/http/request.py", line 94,   inget_host  [Fri Jun 01 03:42:58.357603 2018] [wsgi:error] [pid 32199:tid 140244594628352]       if domain and validate_host(domain, allowed_hosts):  [Fri Jun 01 03:42:58.357651 2018] [wsgi:error] [pid 32199:tid 140244594628352]     File "/usr/lib/python2.7/dist-packages/django/http/request.py", line 571, in   validate_host  [Fri Jun 01 03:42:58.357696 2018] [wsgi:error] [pid 32199:tid 140244594628352]       pattern = pattern.lower()  [Fri Jun 01 03:42:58.357762 2018] [wsgi:error] [pid 32199:tid 140244594628352]   AttributeError: 'NoneType' object has no attribute 'lower'  

EDIT

This is how my configuration file in sites-enabled folder looks like:

WSGIDaemonProcess geonode user=www-data threads=15 processes=2    <VirtualHost *:80>    Servername localhost    ServerAdmin webmaster@localhost      LimitRequestFieldSize 32760    LimitRequestLine 32760      ErrorLog /var/log/apache2/error.log    LogLevel warn    CustomLog /var/log/apache2/access.log combined      WSGIProcessGroup geonode    WSGIPassAuthorization On    WSGIScriptAlias / /var/www/geonode/wsgi/geonode.wsgi      <Directory "/var/www/geonode/">      Order allow,deny      Options -Indexes    ]   Allow from all      Require all granted     </Directory>      Alias /static/ /var/www/geonode/static/    Alias /uploaded/ /var/www/geonode/uploaded/    Alias /robots.txt /var/www/geonode/robots.txt     <Directory "/var/www/geonode/uploaded/documents/">     Order allow,deny     Deny from all   </Directory>     <Directory "/var/www/geonode/uploaded/layers/">     Order allow,deny     Deny from all   </Directory>     <Directory "/var/www/geonode/static_root/">      Order allow,deny      Options Indexes FollowSymLinks      Allow from all      Require all granted      IndexOptions FancyIndexing   </Directory>     <Directory "/var/www/geonode/uploaded/thumbs/">      Order allow,deny      Options Indexes FollowSymLinks      Allow from all      Require all granted      IndexOptions FancyIndexing   </Directory>     <Directory "/var/www/geonode/uploaded/avatars/">      Order allow,deny      Options Indexes FollowSymLinks      Allow from all      Require all granted      IndexOptions FancyIndexing   </Directory>     <Directory "/var/www/geonode/uploaded/people_group/">      Order allow,deny      Options Indexes FollowSymLinks      Allow from all      Require all granted      IndexOptions FancyIndexing  </Directory>    <Directory "/var/www/geonode/uploaded/group/">      Order allow,deny      Options Indexes FollowSymLinks      Allow from all      Require all granted      IndexOptions FancyIndexing  </Directory>    <Proxy *>    Order allow,deny    Require all granted     Allow from all  </Proxy>      ProxyPreserveHost On    ProxyPass /geoserver http://localhost:8080/geoserver    ProxyPassReverse /geoserver http://localhost:8080/geoserver  </VirtualHost>  

How can I get nginx-botsearch of Fail2Ban to match a string but also not match that same string if it has additional trailing characters?

Posted: 24 Jul 2021 06:00 PM PDT

System is Ubuntu 16.04. Using fail2ban from the package manager (which is currently 0.9.3-1). Have enabled nginx-botsearch in jail.local.

Here is my /etc/fail2ban/filter.d/nginx-botsearch.local (note that nginx-botsearch depends on botsearch-common):

[INCLUDES]    before = botsearch-common.conf  after = botsearch-common.local    [Definition]    failregex = ^<HOST> \- \S+ \[\] \"(GET|POST|HEAD) \/<block> \S+\" 404 .+$          ^ \[error\] \d+#\d+: \*\d+ (\S+ )?\"\S+\" (failed|is not found) \(2\: No such file or directory\), client\: <HOST>\, server\: \S*\, request: \"(GET|POST|HEAD) \/<block> \S+\"\, .*?$    ignoreregex =  

Here is my /etc/fail2ban/filter.d/botsearch-common.local:

[Init]    block = \/?(<webmail>|<phpmyadmin>|<wordpress>|cgi-bin|mysqladmin)[^,]*    webmail = roundcube|(ext)?mail|horde|(v-?)?webmail    phpmyadmin = (typo3/|xampp/|admin/|)(pma|(php)?[Mm]y[Aa]dmin)    wordpress = wp-(login|signup)\.php  

So here's the problem. I want it to match "http://example.com/wp-login.php" or "http://example.com/folder/wp-login.php"

and not

"http://example.com/wp-login.phpasdfasdfasdf" or "http://example.com/wp-login.php?asdfasdfasdf". I have tried using $, \n, \b, \B and any number of other things on the end of the wordpress line to no avail. Please advise how this might be accomplished.

Iptables rule to block http traffic not working

Posted: 24 Jul 2021 05:04 PM PDT

sudo iptables -A INPUT -p tcp --destination-port 80 -j DROP  

Seems that this rule is not blocking the internet traffic comming from the subnetwork (10.0.0.*)

Blocking ssh and ftp works well..

Iptables

Chain INPUT (policy ACCEPT)  num  target     prot opt source               destination           1    DROP       tcp  --  anywhere             anywhere             tcp dpt:ftp  2    DROP       tcp  --  anywhere             anywhere             tcp dpt:ssh  3    DROP       tcp  --  anywhere             anywhere             tcp dpt:http    Chain FORWARD (policy ACCEPT)  num  target     prot opt source               destination           1    ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED  2    ACCEPT     all  --  anywhere             anywhere                Chain OUTPUT (policy ACCEPT)  num  target     prot opt source               destination   

Robocopy - Exclude specific file from purge within subdirectory

Posted: 24 Jul 2021 04:04 PM PDT

I want to exclude a specific file from being deleted while still performing a purge. The specific file is located within a subdirectory that does not exist in source.

Source:

folder1\      file1.txt  

Destination:

folder1\      file1.txt      folder2\          dontdelete.txt          delete.txt  

If I use:

Robocopy C:\Source C:\Destination /e /purge /xf dontdelete.txt  

Then Robocopy will delete folder2\ which contains that file, so in essence still deleting the dontdelete.txt file.

Source : C:\Source\  Dest : C:\Destination\  Files : *.*       Exc Files : dontdelete.txt        Options : *.* /V /L /S /E /DCOPY:DA /COPY:DAT /PURGE /R:1000000 /W:30   ----------------------------------------------------------------------------                     0    C:\Source\                     1    C:\Source\folder1\  *EXTRA Dir        -1    C:\Destination\folder1\folder2\    *EXTRA File              0    delete.txt    *EXTRA File              0    dontdelete.txt            same             0    file1.txt  

If I use:

Robocopy C:\Source C:\Destination /e /purge /xd folder2 /xf dontdelete.txt  

Then Robocopy will not look inside folder2 at all for files that should be purged.

Source : C:\Source\  Dest : C:\Destination\  Files : *.*       Exc Files : dontdelete.txt        Exc Dirs : folder2        Options : *.* /V /L /S /E /DCOPY:DA /COPY:DAT /PURGE /R:1000000 /W:30   ----------------------------------------------------------------------------                     0    C:\Source\                     1    C:\Source\folder1\    *named dir      -1    C:\Destination\folder1\folder2\            same             0    file1.txt  

I have also tried using the entire path including the file with no difference in output.

How to store SSH key without attempting to login with password using Plink?

Posted: 24 Jul 2021 08:08 PM PDT

The below command is used to attempt to store the SSH key, even though we tried to force exit in the command, still it is asking password.

echo y | plink -ssh root@172.19.117.69 "exit".    The server's host key is not cached in the registry. You  have no guarantee that the server is the computer you  think it is.    The server's rsa2 key fingerprint is:  ssh-rsa 2048 a8:8a:f6:67:b4:42:03:09:ae:4b:57:ff:85:c0:94:bf  If you trust this host, enter "y" to add the key to  PuTTY's cache and carry on connecting.  If you want to carry on connecting just once, without  adding the key to the cache, enter "n".  If you do not trust this host, press Return to abandon the  connection.    Store key in cache? (y/n)   root@172.19.117.69's password:  

Is there an equivalent for docker testing something like tox for Python?

Posted: 24 Jul 2021 07:02 PM PDT

tox allows you to test your code against different versions of Python. Is there something out there similar to tox that allows me to test my deployment code against different version of a distribution say like centos 7, 6.8, 6.5 etc ?

NRPE (Winrpe) Powershell Command - Unable to read output in Nagios

Posted: 24 Jul 2021 10:07 PM PDT

I'm trying to run an Powershell script from NRPE.cfg and get the output in Nagios.

When i run the script on the local (Windows) server, everything is just fine. But when i put it in the NRPE.cfg en try to get the output in Nagios, i get an Unable to Read Output error.

Searched the internet but can't find the solution, so maybe you can help me out..

The command/script is:

command[check_veeam_dailyone]=cmd /c echo c:\install\veeam_check.ps1 ; exit($lastexitcode) | powershell.exe -ExecutionPolicy Bypass -noninteractive -noprofile -File -

When i put this on the Windows server in PowerShell, i'll get this output:

PS C:\Install> OK - Job: VeeamOne_Daily completed successfully at 10/09/2014 04:45:51.

The "PS C:\Install>" part is strange, but it does read the last job, so seems 'okay'..

But when I try to get this output in Nagios with:

root@nagios:~# /usr/lib/nagios/plugins/check_nrpe -H 192.168.1.1 -t 300 -c check_veeam_dailyone

It says:

NRPE: Unable to read output

NRPE is running fine, cause when i try to get another command, like the C drive, everything is OK:

/usr/lib/nagios/plugins/check_nrpe -H 192.168.1.1 -t 300 -c pdm_disk_c DISK OK - usage: C: 38717.2 MB (63.12% of total 61337.0 MB)|'disk in use'=38717.2MB; 'disk usage'=63.12%;90;95; 'disk total'=61337.0MB;

Just can't figure out whats wrong.

The script i use is this one:

http://exchange.nagios.org/directory/Plugins/Backup-and-Recovery/Others/check_veeam_backups/details

Thanks for your reply!

How can a bog-standard Wordpress install break PHP?

Posted: 24 Jul 2021 09:03 PM PDT

I'm trying to host a Wordpress site on the root of a standard Apache setup on Ubuntu 14.04. The main page of the site loads fine, but any other page causes a "no data received" message in the browser, and a segfault in the apache log:

[Wed Sep 17 09:47:57.278168 2014] [core:notice] [pid 26097] AH00051: child pid 26123 exit signal Segmentation fault (11), possible coredump in /etc/apache2

I can use gdb to attach to the process, try to load a linked page, and this is what I see:

Program received signal SIGSEGV, Segmentation fault. _zend_mm_free_int (heap=0x7f7370b94920, p=0x7f735c138880) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_alloc.c:2104 2104 /build/buildd/php5-5.5.9+dfsg/Zend/zend_alloc.c: No such file or directory.

I've loaded the debug symbols for Apache2 and PHP5, and this is the backtrace:

#0  _zend_mm_free_int (heap=0x7f7370b94920, p=0x7f735c138880) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_alloc.c:2104  #1  0x00007f736b4b7d55 in i_zval_ptr_dtor (zval_ptr=0x7f735c138880) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_execute.h:82  #2  zend_do_fcall_common_helper_SPEC (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:633  #3  0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108af0) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363  #4  0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73  #5  0x00007f736b4b8300 in zend_do_fcall_common_helper_SPEC (execute_data=0x7f7370108960)      at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:584  #6  0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108960) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363  #7  0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73  #8  0x00007f736b4b8300 in zend_do_fcall_common_helper_SPEC (execute_data=0x7f7370108828)      at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:584  #9  0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108828) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363  #10 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73  #11 0x00007f736b4b8300 in zend_do_fcall_common_helper_SPEC (execute_data=0x7f7370108710)      at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:584  #12 0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108710) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363  #13 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73  #14 0x00007f736b4b658c in ZEND_INCLUDE_OR_EVAL_SPEC_CV_HANDLER (execute_data=0x7f7370108600)      at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:30964  #15 0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108600) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363  #16 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73  #17 0x00007f736b4b8300 in zend_do_fcall_common_helper_SPEC (execute_data=0x7f7370108480)      at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:584  #18 0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108480) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363  #19 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73  #20 0x00007f736b4b8300 in zend_do_fcall_common_helper_SPEC (execute_data=0x7f7370108370)      at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:584  #21 0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108370) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363  #22 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73  #23 0x00007f736b4b658c in ZEND_INCLUDE_OR_EVAL_SPEC_CV_HANDLER (execute_data=0x7f7370108288)      at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:30964  #24 0x00007f736b4319e8 in execute_ex (execute_data=0x7f7370108288) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363  #25 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73  #26 0x00007f736b4b7241 in ZEND_INCLUDE_OR_EVAL_SPEC_TMP_HANDLER (execute_data=0x7f73701081a0)      at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:8053  #27 0x00007f736b4319e8 in execute_ex (execute_data=0x7f73701081a0) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363  #28 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73  #29 0x00007f736b4b7241 in ZEND_INCLUDE_OR_EVAL_SPEC_TMP_HANDLER (execute_data=0x7f73701080a0)      at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:8053  #30 0x00007f736b4319e8 in execute_ex (execute_data=0x7f73701080a0) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_vm_execute.h:363  #31 0x00007f736b3f7b59 in dtrace_execute_ex (execute_data=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/Zend/zend_dtrace.c:73  #32 0x00007f736b4095e0 in zend_execute_scripts (type=type@entry=8, retval=retval@entry=0x0, file_count=file_count@entry=3)      at /build/buildd/php5-5.5.9+dfsg/Zend/zend.c:1316  #33 0x00007f736b3a94c5 in php_execute_script (primary_file=primary_file@entry=0x7ffff71b7b40)      at /build/buildd/php5-5.5.9+dfsg/main/main.c:2506  #34 0x00007f736b4b993a in php_handler (r=<optimized out>) at /build/buildd/php5-5.5.9+dfsg/sapi/apache2handler/sapi_apache2.c:667  #35 0x00007f7370269680 in ap_run_handler (r=0x7f7370093130) at config.c:169  #36 0x00007f7370269bc9 in ap_invoke_handler (r=r@entry=0x7f7370093130) at config.c:439  #37 0x00007f737027ec2c in ap_internal_redirect (new_uri=<optimized out>, r=<optimized out>) at http_request.c:644  #38 0x00007f7369abdcfc in handler_redirect (r=0x7f73700990a0) at mod_rewrite.c:5063  #39 0x00007f7370269680 in ap_run_handler (r=0x7f73700990a0) at config.c:169  #40 0x00007f7370269bc9 in ap_invoke_handler (r=r@entry=0x7f73700990a0) at config.c:439  #41 0x00007f737027f16a in ap_process_async_request (r=0x7f73700990a0) at http_request.c:317  #42 0x00007f737027f444 in ap_process_request (r=r@entry=0x7f73700990a0) at http_request.c:363  #43 0x00007f737027bf02 in ap_process_http_sync_connection (c=0x7f737009f290) at http_core.c:190  #44 ap_process_http_connection (c=0x7f737009f290) at http_core.c:231  #45 0x00007f7370272cc0 in ap_run_process_connection (c=0x7f737009f290) at connection.c:41  #46 0x00007f73702730a8 in ap_process_connection (c=c@entry=0x7f737009f290, csd=<optimized out>) at connection.c:202  #47 0x00007f736caaa767 in child_main (child_num_arg=child_num_arg@entry=5) at prefork.c:704  #48 0x00007f736caaa9a6 in make_child (s=0x7f73701d8de0, slot=5) at prefork.c:800  #49 0x00007f736caab60e in perform_idle_server_maintenance (p=<optimized out>) at prefork.c:902  #50 prefork_run (_pconf=<optimized out>, plog=<optimized out>, s=<optimized out>) at prefork.c:1090  #51 0x00007f737025069e in ap_run_mpm (pconf=0x7f7370206028, plog=0x7f73701d4028, s=0x7f73701d8de0) at mpm_common.c:96  #52 0x00007f7370249e36 in main (argc=3, argv=0x7ffff71b82e8) at main.c:777  

For one thing, why is Zend involved at all? I'm guessing that's just the way PHP is built. I've uncommented the one line in php5.ini that references it, but that didn't change anything.

It seems reasonably clear that a call to load a linked page in the Wordpress site is going through mod_rewrite (as it should), gets handed off to PHP, then gets lost in a bunch of sub-calls to zend_vm_execute where it ultimately seems to be looking for a source file that's not installed. Do I need to install some other part of Zend on my installation? It doesn't seem like I should have to install non-free software for this.

Have I just found a bug? It doesn't seem like something as simple as a stock Wordpress install would uncover a latent problem.

The only other piece of the puzzle is that I've moved this site in from a shared host to a dedicated server. I used https://github.com/interconnectit/Search-Replace-DB to sort out the change in the URL. It was working when I set it up and used it a week ago, and now it's not. I've looked through all of the logs from the intervening week, and there's nothing but a handful of status messages. I haven't installed anything or changed anything since this was working. I went to update the site this morning, and found it broken.

Since the default page and the dashboard are working, I used the wp-admin page to change the permalink configuration back to the default, and moved the stock .htaccess file out of the way. Another backtrace showed that mod_rewrite is now out of the loop, but the problem persists.

No comments:

Post a Comment