bug#38295: manual-config php-fpm mismatch

bug#38295: manual-config php-fpm mismatch

[Efraim Flashner]

[-- Attachment #1: Type: text/plain, Size: 494 bytes --]

In (gnu services web) for <php-fpm-configuration> it says that default
for 'socket-group' is "nginx". In the manual, in 8.8.16 (Web Services),
it says the socket-group default is php-fpm.

Obviously when deploying the code trumps the manual, but what is it
supposed to be?


-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

bug#38295: manual-config php-fpm mismatch

[Tobias Geerinckx-Rice via Bug reports for GNU Guix]

[-- Attachment #1: Type: text/plain, Size: 453 bytes --]

Efraim,

Efraim Flashner 写道：
> In (gnu services web) for <php-fpm-configuration> it says that 
> default
> for 'socket-group' is "nginx". In the manual, in 8.8.16 (Web 
> Services),
> it says the socket-group default is php-fpm.

Good catch.

> Obviously when deploying the code trumps the manual, but what is 
> it
> supposed to be?

I think the code should follow the manual.  More privsep == 
better.

Kind regards,

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

bug#38295: manual-config php-fpm mismatch

[Efraim Flashner]

[-- Attachment #1: Type: text/plain, Size: 1049 bytes --]

On Wed, Nov 20, 2019 at 04:43:27PM +0100, Tobias Geerinckx-Rice via Bug reports for GNU Guix wrote:
> Efraim,
> 
> Efraim Flashner 写道：
> > In (gnu services web) for <php-fpm-configuration> it says that default
> > for 'socket-group' is "nginx". In the manual, in 8.8.16 (Web Services),
> > it says the socket-group default is php-fpm.
> 
> Good catch.
> 

I've been hanging out in that code for the past week or so and I find I
can move around the code faster than the manual in a webpage.

> > Obviously when deploying the code trumps the manual, but what is it
> > supposed to be?
> 
> I think the code should follow the manual.  More privsep == better.

After some searching I didn't see an nginx user or group so there's
another reason. I'll go ahead and patch it.

> 
> Kind regards,
> 
> T G-R



-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

bug#38295: manual-config php-fpm mismatch

[Efraim Flashner]

[-- Attachment #1: Type: text/plain, Size: 1235 bytes --]

On Thu, Nov 21, 2019 at 12:11:51PM +0200, Efraim Flashner wrote:
> On Wed, Nov 20, 2019 at 04:43:27PM +0100, Tobias Geerinckx-Rice via Bug reports for GNU Guix wrote:
> > Efraim,
> > 
> > Efraim Flashner 写道：
> > > In (gnu services web) for <php-fpm-configuration> it says that default
> > > for 'socket-group' is "nginx". In the manual, in 8.8.16 (Web Services),
> > > it says the socket-group default is php-fpm.
> > 
> > Good catch.
> > 
> 
> I've been hanging out in that code for the past week or so and I find I
> can move around the code faster than the manual in a webpage.
> 
> > > Obviously when deploying the code trumps the manual, but what is it
> > > supposed to be?
> > 
> > I think the code should follow the manual.  More privsep == better.
> 
> After some searching I didn't see an nginx user or group so there's
> another reason. I'll go ahead and patch it.
> 

Actually I see that nginx is run as user/group nginx, so the
socket-group is probably supposed to be nginx.


-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

bug#38295: manual-config php-fpm mismatch

[Efraim Flashner]

[-- Attachment #1: Type: text/plain, Size: 488 bytes --]

After looking at the manual and the sources some more, I saw that for
the apache2 service it has the socket directory owned by httpd, so it
stands to reason that the code is correct, and by default the socket
directory for php-fpm is nginx.

Patch pushed to fix this


-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]