| [11:21:15] | * inteja has joined #aegir |
| [11:35:20] | * DecipheredAFK is now known as Deciphered |
| [11:35:21] | * Deciphered has quit (Changing host) |
| [11:35:21] | * Deciphered has joined #aegir |
| [11:55:13] | * inteja_ has joined #aegir |
| [11:58:10] | * inteja has quit (Ping timeout: 276 seconds) |
| [12:03:55] | * Egyptian[Home] has quit (Ping timeout: 240 seconds) |
| [12:04:48] | * Deciphered is now known as DecipheredAFK |
| [12:05:10] | * DecipheredAFK is now known as Deciphered |
| [12:11:18] | * mstenta has quit (Ping timeout: 272 seconds) |
| [12:29:59] | * inteja has joined #aegir |
| [12:32:26] | * inteja_ has quit (Ping timeout: 240 seconds) |
| [12:45:50] | * Egyptian[Home] has joined #aegir |
| [12:51:36] | * fathima has joined #aegir |
| [13:05:49] | * Deciphered is now known as DecipheredAFK |
| [13:39:33] | * DecipheredAFK is now known as Deciphered |
| [13:49:15] | * inteja has quit (Ping timeout: 240 seconds) |
| [13:52:50] | * fathima has quit (Ping timeout: 246 seconds) |
| [15:23:50] | * Egyptian[Home] has quit (Ping timeout: 265 seconds) |
| [16:07:58] | * inteja has joined #aegir |
| [17:10:59] | * Einherjer has quit (Ping timeout: 260 seconds) |
| [17:18:57] | * fathima has joined #aegir |
| [17:22:15] | * inteja has quit (Ping timeout: 265 seconds) |
| [17:28:11] | * Deciphered is now known as DecipheredAFK |
| [18:05:42] | * DecipheredAFK is now known as Deciphered |
| [18:07:55] | * fathima has quit (Ping timeout: 260 seconds) |
| [18:09:06] | * rominronin has joined #aegir |
| [18:15:38] | * Deciphered is now known as DecipheredAFK |
| [19:00:00] | * DecipheredAFK is now known as Deciphered |
| [19:09:48] | * Deciphered is now known as DecipheredAFK |
| [19:17:21] | * boshtian has joined #aegir |
| [19:22:44] | * fathima has joined #aegir |
| [19:52:14] | * fathima has quit (Ping timeout: 245 seconds) |
| [19:54:17] | * DecipheredAFK is now known as Deciphered |
| [20:00:54] | * David_Hernandez has joined #aegir |
| [20:03:59] | * Deciphered is now known as DecipheredAFK |
| [20:16:53] | * inteja has joined #aegir |
| [20:18:10] | * gandhiano has joined #aegir |
| [20:48:23] | * DecipheredAFK is now known as Deciphered |
| [20:58:10] | * Deciphered is now known as DecipheredAFK |
| [21:01:11] | * azend|vps has quit (Remote host closed the connection) |
| [21:01:23] | * fathima has joined #aegir |
| [21:06:48] | * azend|vps has joined #aegir |
| [21:36:14] | * inteja has quit (Ping timeout: 246 seconds) |
| [21:42:33] | * DecipheredAFK is now known as Deciphered |
| [21:50:46] | * boshtian has quit (Ping timeout: 240 seconds) |
| [21:52:21] | * Deciphered is now known as DecipheredAFK |
| [22:12:43] | * boshtian has joined #aegir |
| [22:36:48] | * DecipheredAFK is now known as Deciphered |
| [22:47:22] | * Deciphered is now known as DecipheredAFK |
| [22:53:54] | * mstenta has joined #aegir |
| [23:05:50] | * fathima has quit (Ping timeout: 246 seconds) |
| [23:19:32] | * fathima has joined #aegir |
| [23:30:04] | * gandhiano has quit (Ping timeout: 265 seconds) |
| [23:37:58] | * noecc has joined #aegir |
| [00:08:07] | * Egyptian[Home] has joined #aegir |
| [00:12:28] | * Egyptian[Home] has quit (Remote host closed the connection) |
| [00:14:29] | * Egyptian[Home] has joined #aegir |
| [00:24:59] | * DecipheredAFK is now known as Deciphered |
| [00:30:15] | * fathima has quit (Ping timeout: 260 seconds) |
| [00:34:05] | * torum has joined #aegir |
| [00:34:26] | * zombiebeard has joined #aegir |
| [00:35:01] | * Deciphered is now known as DecipheredAFK |
| [00:37:51] | <torum> | Hi, we have a files permission issue within Aegir 3.2. Is there someone in the house that can help with this? |
| [00:43:12] | * mstenta has quit (Read error: Connection reset by peer) |
| [00:44:03] | * mstenta has joined #aegir |
| [00:45:25] | * Egyptian[Home] has quit (Ping timeout: 260 seconds) |
| [00:49:30] | * mstenta has quit (Ping timeout: 260 seconds) |
| [00:52:22] | * zz_drakythe is now known as drakythe |
| [01:19:28] | * DecipheredAFK is now known as Deciphered |
| [01:29:12] | * Deciphered is now known as DecipheredAFK |
| [01:40:25] | <ergonlogic> | torum: what's up? |
| [01:41:29] | <torum> | we did install Aegir 3.2 with Apache and Nginx |
| [01:42:00] | <ergonlogic> | with both? |
| [01:42:46] | <torum> | If we install a basic Drupal 7 site, the new site runs smooth until files need to be read from the files/ directory |
| [01:42:48] | <torum> | yes, both |
| [01:43:37] | <torum> | it turns out that files in de files/ directory have apache as user:group, but Nginx can't read them |
| [01:44:42] | <torum> | if we give the files/ and files/css/ directories a "chmod 771" (so add read permission to the "other group", we are able to access the files within files/css/ again |
| [01:44:42] | <ergonlogic> | you could try adding nginx to the apache group and vice versa |
| [01:45:37] | <ergonlogic> | are you using nginx as a reverse-proxy? |
| [01:45:59] | <torum> | in the Aegir docs only |
| [01:46:00] | <torum> | useradd --home-dir /var/aegir aegir gpasswd -a aegir apache gpasswd -a aegir nginx |
| [01:46:03] | <torum> | is mentioned |
| [01:46:19] | <torum> | useradd --home-dir /var/aegir aegir; gpasswd -a aegir apache; gpasswd -a aegir nginx |
| [01:46:32] | <torum> | yes, Nginx is the reverse proxy |
| [01:47:56] | <ergonlogic> | can you send a link to that doc |
| [01:47:57] | <ergonlogic> | ? |
| [01:49:04] | * mstenta has joined #aegir |
| [01:49:04] | <torum> | http://aegir.readthedocs.org/en/3.x/install/#31-create-the-aegir-user |
| [01:49:43] | <torum> | as we are running CentOS instead of Ubuntu/Debian, the command |
| [01:49:45] | <torum> | sudo adduser aegir www-data |
| [01:49:53] | <torum> | is equivalent for |
| [01:50:03] | <torum> | gpasswd -a aegir apache |
| [01:51:57] | <ergonlogic> | yes, but those are only adding aegir to the web servers' groups |
| [01:52:01] | <torum> | additionally, we tried to add apache to the aegir group, but it doesn't fix our problem: |
| [01:52:02] | <torum> | # cat /etc/group |grep -E "^aegir" aegir:x:10002:apache |
| [01:52:16] | <ergonlogic> | try adding apache to the nginx group |
| [01:52:34] | <ergonlogic> | and/or adding nginx to the apache group |
| [01:53:31] | <ergonlogic> | the problem doesn't appear to be with Aegir |
| [01:54:02] | <ergonlogic> | the files that apache uploads to files/ are owned by apache, which is normal |
| [01:54:23] | <ergonlogic> | for nginx to be able to read them, nginx will have to be in the apache group |
| [01:54:34] | <ergonlogic> | more or less |
| [01:54:57] | <ergonlogic> | some files are uploaded by apache with mode 600, but that's a separate issue |
| [01:55:01] | <torum> | just added nginx to apache group and apache to the nginx group, but read error still occur |
| [01:55:05] | <torum> | # cat /etc/group |grep -E "^nginx" nginx:x:498:nginx,aegir,apache |
| [01:55:11] | <torum> | # cat /etc/group |grep -E "^apache" apache:x:48:apache,aegir,nginx |
| [01:55:24] | <ergonlogic> | what's the mode of the files in question? |
| [01:56:57] | <ergonlogic> | but... as a reverse proxy, wouldn't nginx be caching files retrieved from via http? |
| [01:57:08] | <ergonlogic> | why is it reading the files directly? |
| [01:57:12] | <torum> | 2016/01/11 15:53:56 [crit] 27019#0: *1 open() "/var/aegir/platforms/drupal_7.38/sites/DRUPAL3.DOMAIN.TLD/files/images/test.txt" failed (13: Permission denied), client: 81.82.253.66, server: DRUPAL3.DOMAIN.TLD, request: "GET /sites/DRUPAL3.DOMAIN.TLD/files/images/test.txt HTTP/1.1", host: "DRUPAL3-DOMAIN-TLD.SERVER.DOMAIN.TLD" |
| [01:57:26] | <torum> | that's the error in the Nginx error log |
| [01:58:26] | <torum> | # ls -ald /var/aegir/platforms/drupal_7.38/sites/DRUPAL3.DOMAIN.TLD/ /var/aegir/platforms/drupal_7.38/sites/DRUPAL3.DOMAIN.TLD/files/ /var/aegir/platforms/drupal_7.38/sites/DRUPAL3.DOMAIN.TLD/files/css/ drwxr-xr-x 7 aegir aegir 4096 Dec 23 14:59 /var/aegir/platforms/drupal_7.38/sites/DRUPAL3.DOMAIN.TLD/ drwxrws--- 11 aegir aegir 4096 Dec 23 14:59 /var/aegir/platforms/drupal_7.38/sites/DRUPAL3.DOMAIN.TLD/files/ drwxrws--- 2 aegir apache 4096 Jan 11 |
| [01:58:55] | <ergonlogic> | that looks like nginx is trying to serve the files directly |
| [01:58:59] | <torum> | that are the current file permissions |
| [01:59:03] | <ergonlogic> | as opposed to proxying them |
| [02:00:04] | <ergonlogic> | can the nginx user read the files directly? |
| [02:00:31] | <ergonlogic> | like, if you `sudo -u nginx cat /path/to/file` |
| [02:01:01] | <torum> | no: # sudo -u nginx stat /var/aegir/platforms/drupal_7.38/sites/DRUPAL3.DOMAIN.TLD/files/images/testto.txt stat: cannot stat `/var/aegir/platforms/drupal_7.38/sites/DRUPAL3.DOMAIN.TLD/files/images/testto.txt': Permission denied |
| [02:01:18] | <torum> | (apache and aegir can) |
| [02:01:30] | <ergonlogic> | but either way, I don't think your current setup is going to be very maintainable |
| [02:02:01] | <ergonlogic> | it looks like you're trying to serve the site with both apache and nginx |
| [02:02:13] | <ergonlogic> | which is bound to be problematic |
| [02:03:42] | <torum> | actually, we would like to use Nginx only as a proxy for static content and Apache for serving dynamic content (PHP) |
| [02:04:14] | <ergonlogic> | right, but a proxy doesn't normally read the files directly |
| [02:04:19] | <ergonlogic> | at least not in my experience |
| [02:04:27] | <ergonlogic> | which is mostly with Varnish |
| [02:04:56] | <ergonlogic> | normally the proxy would cache files retrieved of http, and serve those |
| [02:05:09] | <ergonlogic> | s/of/over/g |
| [02:06:03] | <torum> | well, files in the files/css directory do are created by Apache which is fine? But Nginx seems to be unable to read them |
| [02:07:52] | <ergonlogic> | but that's my point, it shouldn't be reading them at all |
| [02:08:40] | <ergonlogic> | on a single host, you'd normally have apache listening on port 8080, and nginx listening on port 80 |
| [02:08:44] | <torum> | I think that's correct. However, with default permissions also Apache can't read the files/css directory |
| [02:09:00] | <ergonlogic> | nginx would then request assets via http://...:8080 |
| [02:09:28] | <ergonlogic> | well, if apache can't read the files it has created that's a separate issue |
| [02:09:42] | <ergonlogic> | and a very strange on, at that |
| [02:09:49] | <ergonlogic> | s/on/one/g |
| [02:10:11] | <ergonlogic> | does a 'verify' task work on the site? |
| [02:11:46] | <torum> | I'm trying what a verify does after changing user groups |
| [02:12:04] | <torum> | yes, verify succeeded |
| [02:13:02] | <ergonlogic> | and apache can't serve those files either? |
| [02:13:37] | * DecipheredAFK is now known as Deciphered |
| [02:15:08] | <torum> | hmmm, it looks like the files/css directory CAN be read by Apache/Nginx now... but I'm not sure what exactly did the trick |
| [02:15:41] | <ergonlogic> | a verify will usually fix any odd permissions issues |
| [02:15:58] | <ergonlogic> | or throw warnings/errors if 'aegir' can't run such ops |
| [02:16:19] | <torum> | let's try it with another site... just a moment |
| [02:16:28] | <ergonlogic> | in which case a quick sudo chown/chmod and another verify usually fixes it |
| [02:19:33] | <torum> | added a new Drupal 7 site, logged in as admin and enabled CSS/JS caching: everything works fine now |
| [02:22:07] | * flashpoint9 has joined #aegir |
| [02:22:46] | <ergonlogic> | ok, glad to hear it |
| [02:23:04] | <torum> | I'm not sure, but adding Nginx to the Apache group and Apache to the Nginx group might been the solution |
| [02:23:17] | <torum> | thanks for helping! |
| [02:23:23] | * Deciphered is now known as DecipheredAFK |
| [02:26:38] | * noecc has left #aegir ("pax") |
| [02:33:15] | * brianV has joined #aegir |
| [02:33:51] | <brianV> | Could someone who is running a bug-free, stable release please tell me what version and underlying OS / webserver etc. you are using? |
| [02:34:41] | <cweagans> | heh. "bug-free". I think the only piece of software that doesn't have a bug is assembly's NOP :P |
| [02:35:01] | <cweagans> | brianV: I think the most stable setup is Debian, Apache, MySQL, mod_php with Aegir 3. |
| [02:35:08] | <cweagans> | brianV: But I won't claim it's bug free. |
| [02:35:52] | <brianV> | We've attempted two deployments here (one the latest unstable on Ubuntu 14.04 with Nginx, and the other on Ubuntu 12.04 w/ apache), and both are almost unusable |
| [02:36:24] | <cweagans> | brianV: Yeah. Use Debian. Ubuntu is kind of weird. |
| [02:36:25] | <brianV> | sorry, that came across a little confrontational. It wasn't meant to be so. We're just having a rough go getting a decently usable Aegir stack running |
| [02:36:38] | <cweagans> | Nah, it's okay. I understood what you meant :) |
| [02:37:04] | <brianV> | It's just small stuff - like when we deploy a new site using the git plugin, it seems to put the .git folder in the wrong directory |
| [02:37:14] | <brianV> | clients can't see their assigned sites or plaforms |
| [02:38:16] | <cweagans> | brianV: Hm. Well, I'm not sure how widely used the Client functionality is. Personally, I don't use it at all, and instead opt for a separate frontend site for clients to log into. That way, you can treat Aegir as basically a provisioning API, and then have your frontend built however you want. |
| [02:40:07] | <brianV> | With respect to the git plugin - is that in wide use? I'm somewhat surprised at the issues there - I would have expected it to be pretty straightforward |
| [02:40:47] | <brianV> | sorry, rather I mean I would expect it to be pretty stable as I would think most sites would use it |
| [02:41:22] | <cweagans> | brianV: Yeah, I see what you mean. What's it doing? It may be just mismatched expectations? But it's also completely possible that there's a bug somewhere. |
| [02:41:24] | <brianV> | or do most people use drush make? |
| [02:41:36] | * cweagans doesn't use make |
| [02:41:58] | <brianV> | well, with the git plugin, there's a few things |
| [02:42:50] | <brianV> | 1. When importing a site from a remote host using SSH / key, you need to establish an SSH session as the aegir user from the command line first so that you can accept the remote hosts thumbprint |
| [02:43:31] | <brianV> | above, I meant 'importing a platform' |
| [02:44:03] | <brianV> | 2. Once the platform is imported, you can't do a git pull task, because the .git folder is in the wrong directory |
| [02:45:14] | <brianV> | (you can correct the above by moving the .git folder in the command line) |
| [02:45:54] | <cweagans> | re #1 - do you mean creating a platform from a Git repository? Or doing an actual import task for a remote platform? |
| [02:46:12] | <cweagans> | re #2: That's very strange - where does it end up? |
| [02:46:19] | <brianV> | 3. I was able to create a new site using the platform, but with -stable, I get Drush command terminated abnormally due to an unrecoverable error. Error: Cannot redeclare system_help() (previously declared in /var/aegir/platforms/<client>/modules/system/system.module:72) in /var/aegir/platforms/<client>/sites/<client>.redspace.com/modules/system/system.module, line 149 |
| [02:46:35] | <brianV> | #1 - that's when I create a platform from a git repo |
| [02:48:35] | <brianV> | #2. I need to double check. Our IT guy moved it in to resolve that one. He said it wasn't in the top level directory of the repo checkout |
| [02:49:57] | <brianV> | #3. The platform has a default .htaccess. Aegir doesn't appear to have imported the rewrite rules into the vhost. IE, mysite.com/index.php?q=pineapple works, but not mysite.com/pineapple |
| [02:50:07] | <brianV> | sorry, that would be #4 |
| [02:50:37] | <brianV> | and that's as far as we've gotten before giving up and researching solutions |
| [02:51:10] | * gandhiano has joined #aegir |
| [02:53:07] | <brianV> | oh, and because of #4, we can't use the one-time login link to get our password |
| [02:54:11] | * torum has quit (Ping timeout: 264 seconds) |
| [03:00:52] | <cweagans> | Huh. That seems pretty strange. I'm not sure why that would be happening with the git module. If you can open an issue on drupal.org with steps to reproduce the problem, I can dig into it a little bit. |
| [03:00:55] | <cweagans> | brianV: ^ |
| [03:00:59] | <cweagans> | sry, was in a meeting |
| [03:02:12] | * fathima has joined #aegir |
| [03:02:29] | <cweagans> | brianV: Also - http://askubuntu.com/questions/123072/ssh-automatically-accept-keys may be a solution for your host keys issue. |
| [03:05:31] | * hestenet has joined #aegir |
| [03:07:45] | * DecipheredAFK is now known as Deciphered |
| [03:08:42] | * fathima has quit (Quit: Leaving) |
| [03:13:53] | <brianV> | cweagans: ok, we're going to try a debian build first to see if the issue is distro-specific |
| [03:17:34] | * Deciphered is now known as DecipheredAFK |
| [03:45:29] | * boshtian has quit (Ping timeout: 246 seconds) |
| [03:51:27] | * rominronin has quit (Remote host closed the connection) |
| [04:01:56] | * DecipheredAFK is now known as Deciphered |
| [04:09:35] | * gandhiano has quit (Ping timeout: 240 seconds) |
| [04:11:43] | * Deciphered is now known as DecipheredAFK |
| [04:29:01] | * ahillio has joined #aegir |
| [04:41:52] | * flashpoint9 has quit (Quit: Leaving...) |
| [04:50:56] | * gandhiano has joined #aegir |
| [04:52:00] | * rominronin has joined #aegir |
| [04:54:21] | * Egyptian[Home] has joined #aegir |
| [04:56:11] | * DecipheredAFK is now known as Deciphered |
| [04:57:40] | * rominronin has quit (Ping timeout: 272 seconds) |
| [05:04:48] | * ahillio has quit (Ping timeout: 250 seconds) |
| [05:05:56] | * Deciphered is now known as DecipheredAFK |
| [05:11:18] | * Egyptian[Home] has quit (Ping timeout: 250 seconds) |
| [05:32:32] | * boshtian has joined #aegir |
| [05:33:35] | * Egyptian[Home] has joined #aegir |
| [05:39:56] | * Egyptian[Home] has quit (Ping timeout: 246 seconds) |
| [05:41:03] | * ahillio has joined #aegir |
| [05:41:37] | * drakythe is now known as zz_drakythe |
| [05:44:33] | * Egyptian[Home] has joined #aegir |
| [05:50:17] | * DecipheredAFK is now known as Deciphered |
| [05:50:27] | * boshtian has quit (Ping timeout: 265 seconds) |
| [05:53:23] | * rominronin has joined #aegir |
| [05:58:23] | * rominronin has quit (Ping timeout: 264 seconds) |
| [06:00:06] | * Deciphered is now known as DecipheredAFK |
| [06:00:25] | * Egyptian[Home] has quit (Ping timeout: 276 seconds) |
| [06:34:10] | * zz_drakythe is now known as drakythe |
| [06:44:34] | * DecipheredAFK is now known as Deciphered |
| [06:45:14] | * David_Hernandez has quit (Quit: Saliendo) |
| [06:50:16] | <brianV> | cweagans: what issue queue would I file git plugin issues in? |
| [06:52:20] | <cweagans> | brianV: Probably hosting_git |
| [06:52:25] | * rominronin has joined #aegir |
| [06:52:51] | <brianV> | cweagans: thanks. Couldn't find that (was looking at the 'main' Aegir project pages |
| [06:54:15] | * Deciphered is now known as DecipheredAFK |
| [06:54:49] | <brianV> | cweagans: git pull magically works on Debian |
| [06:55:07] | <brianV> | must be a script somewhere that is sensitive to a Ubuntu variation |
| [06:57:08] | * rominronin has quit (Ping timeout: 255 seconds) |
| [07:36:51] | * Egyptian[Home] has joined #aegir |
| [07:38:42] | * DecipheredAFK is now known as Deciphered |
| [07:41:38] | * gusaus has joined #aegir |
| [07:48:27] | * Deciphered is now known as DecipheredAFK |
| [07:53:15] | * rominron_ has joined #aegir |
| [07:55:28] | * ahillio has quit (Remote host closed the connection) |
| [07:58:42] | * rominron_ has quit (Ping timeout: 256 seconds) |
| [07:58:55] | * Egyptian[Home] has quit (Ping timeout: 240 seconds) |
| [08:01:55] | * brianV has quit (Ping timeout: 265 seconds) |
| [08:15:42] | * brianV has joined #aegir |
| [08:15:42] | * brianV has quit (Changing host) |
| [08:15:42] | * brianV has joined #aegir |
| [08:21:53] | <brianV> | ok, so once I enable the task processing on cron, it works. |
| [08:27:02] | * brianV has quit (Ping timeout: 256 seconds) |
| [08:32:31] | * flashpoint9 has joined #aegir |
| [08:32:50] | * DecipheredAFK is now known as Deciphered |
| [08:34:57] | * inteja has joined #aegir |
| [08:42:04] | * brianV has joined #aegir |
| [08:42:04] | * brianV has quit (Changing host) |
| [08:42:04] | * brianV has joined #aegir |
| [08:42:38] | * Deciphered is now known as DecipheredAFK |
| [08:55:36] | * rominron_ has joined #aegir |
| [09:00:39] | * rominron_ has quit (Ping timeout: 260 seconds) |
| [09:04:29] | * DecipheredAFK is now known as Deciphered |
| [09:05:57] | * flashpoint9 has quit (Quit: Leaving...) |
| [09:33:19] | * mstenta has quit (Ping timeout: 260 seconds) |
| [09:56:41] | * rominron_ has joined #aegir |
| [09:59:58] | * zombiebeard has quit (Quit: zombiebeard) |
| [10:01:35] | * rominron_ has quit (Ping timeout: 240 seconds) |
| [10:05:32] | * gandhiano has quit (Ping timeout: 250 seconds) |
| [10:33:20] | * mstenta has joined #aegir |
| [10:50:43] | * hestenet has quit (Remote host closed the connection) |
| [10:51:05] | * hestenet has joined #aegir |
| [10:51:06] | * hestenet has quit (Remote host closed the connection) |
| [10:57:43] | * rominron_ has joined #aegir |
