On reboot the wrong chroot jail is entered in php-fpm configurations

Submitted by kkenyon on Sun, 09/27/2020 - 14:04 Pro Licensee

I am running Virtualmin on OpenSuse 15.1 with chroot jails. Every time I reboot the server (patches) in each of the sub servers the wrong chroot jail is added to the config file in /etc/php7/fpm/pool.d. It seems to always default to the first virtual server that was created and I have to manually change the chroot = in each file to point to the proper parent. This has happened in previous versions of Virtualmin so it is not a regression. I am not sure where the mapping file is located to provide better information on why this may be happening. I am also not sure if this is an OpenSuse issue or if I installed something incorrectly. Any pointers or thoughts would be welcomed.

Status: 
Active
Virtualmin version: 
6.12
Webmin version: 
1.955

Comments

Submitted by JamieCameron on Sun, 09/27/2020 - 14:24

Is this happening when you reboot the system, when you upgrade Virtualmin, or when some other package is upgraded?

Submitted by kkenyon on Sun, 10/04/2020 - 09:31 Pro Licensee

Any thoughts on this?

Submitted by JamieCameron on Sun, 10/04/2020 - 17:51

See my comment above - is this happening on every reboot, or only when you have updated packages?

Submitted by kkenyon on Sat, 12/05/2020 - 14:54 Pro Licensee

This issue is still happening. It also is triggered when adding a new host so I am becoming certain this is a bug in Virtualmin.

Submitted by JamieCameron on Sat, 12/05/2020 - 23:16

Is the wrong path added to just the config for the domain you added, or existing ones?

Submitted by kkenyon on Thu, 02/11/2021 - 21:10 Pro Licensee

Ok funny issue my browsers content blocker removed the replies so i was not seeing them. The issue happens when i reboot the server or add another server. Several of the hosted accounts rewrite the chroot jail to the first account I added (a personal domain used for testing) and I have to go to /etc/php/fpm/pool.d and correct all of the chroot jails to match what they should be. This happens on both domains and subdomains.

Submitted by JamieCameron on Sat, 02/13/2021 - 14:12

Is the chroot path for all of your domains being updated, or just some of them? If it's just some, are they all sub-domains of a single parent server?

Submitted by kkenyon on Sun, 02/28/2021 - 22:34 Pro Licensee

It is not all of my servers just servers with children. If the server does not have a child it is never overwritten. And it is multiple servers with children not just one.

Submitted by JamieCameron on Wed, 03/03/2021 - 22:59

So for domains where it's set wrong, is the root being set to the home directory of one of the children, the home dir of the parent, or some completely different domain?

Submitted by kkenyon on Thu, 03/04/2021 - 06:44 Pro Licensee

No what happens is on reboot all child domains get the chroot jail of the 1st server I created that has no children. Example below. domaina.com 1234 parenta.com 3456 chailda1.com 1234 chailda2.com 1234 domainb.com 5678 parentb.com 8901 childb1.com 1234

Hopefully that makes sense.

Submitted by JamieCameron on Fri, 03/05/2021 - 19:17

What's really odd is that Virtualmin doesn't run any code at boot time, other than starting it's own webserver. Unless you've created a bootup action to run something like virtualmin check-config ?

Submitted by kkenyon on Fri, 03/05/2021 - 20:36 Pro Licensee

I have not setup anything at boot (On purpose at least) and it does not happen every single reboot. It seems to be a reboot after adding a new child domain or maybe even a new domain (I don't reboot quite often enough to really tell which) I wonder if that is rewriting and not fully restarting php-fpm which seems the most reasonable to me. Can you tell me where the chroot jails are stored. Maybe I can look there and see if something is not quite right.

Submitted by JamieCameron on Fri, 03/05/2021 - 23:52

Ah ... maybe it happens more often, but because the FPM config isn't valid it doesn't get reloaded until reboot.

Submitted by kkenyon on Sat, 03/06/2021 - 07:37 Pro Licensee

So where does virtualmin pull the chroot jails from? The fact that is is ALWAYS the first chroot jail seems like where the issue lies. I suspect it is just not pulling in the parent chroot in in the script that writes the FPM config.

Submitted by JamieCameron on Sat, 03/06/2021 - 12:54

You can see the chroot jail by running a command like virtualmin list-domains --domain example.com --multiline and looking for the "Jail directory" line.

Submitted by kkenyon on Mon, 03/15/2021 - 21:25 Pro Licensee

Ok this is interesting. The sub domain I checked does not list a Jail directory: at all. Should it or does it inherit that from the parent?

Submitted by JamieCameron on Tue, 03/16/2021 - 00:35

Yes, all sub-servers inherit the jail from their parents (because the jail exists at the user account level).