Bug #78889 [Com]: php-fpm service fails to start

Edit report at https://bugs.php.net/bug.php?id=78889&edit=1 ID: 78889 Comment by: glitsj16 at riseup dot net Reported by: glitsj16 at riseup dot net Summary: php-fpm service fails to start Status: Assigned Type: Bug Package: FPM related Operating System: Arch Linux PHP Version: 7.4.0 Assigned To: bukka Block user comment: N Private report: N New Comment: The bug is inded triggered when using an AF_UNIX socket. That should have been caught by the downstream Arch maintainer(s) who decided to change the defaults and broke the php-fpm service. This has been rectified via the 7.4.0-2 release so I think this can be closed. Thanks for looking into this. Previous Comments: ------------------------------------------------------------------------ [2019-11-30 16:44:25] build+php at de-korte dot org I don't want to be picking nits, but in the default configuration, php-fpm will listen to an AF_INET socket (127.0.0.1:9000), not an AF_UNIX socket (/run/php-fpm/php-fpm.sock) like mentioned in this report. The reported issue will only occur in the latter case, not in the first (which is the default). ------------------------------------------------------------------------ [2019-11-30 13:39:16] cmb@php.net Jakub, could you please check this? ------------------------------------------------------------------------ [2019-11-30 13:38:19] cmb@php.net Related To: Bug #78892 ------------------------------------------------------------------------ [2019-11-30 01:21:25] glitsj16 at riseup dot net During ongoing discussion in https://bugs.archlinux.org/task/64683 it was suggested to leave the CapabilityBoundingSet as-is, but edit /etc/php/php-fpm.d/www.conf instead. This looks the cleaner way of fixing this. https://bugs.archlinux.org/task/64683#comment184101 In /etc/php/php-fpm.d/www.conf replace ;listen.acl_users = ;listen.acl_groups = with listen.acl_users = http listen.acl_groups = http https://bugs.archlinux.org/task/64683#comment184102 @loqs Enabling ACL in /etc/php/php-fpm.d/www.conf as you suggested works for me. I also commented ;listen.owner = http ;listen.group = http to avoid [WARNING] [pool www] ACL set, listen.owner = 'http' is ignored [WARNING] [pool www] ACL set, listen.group = 'http' is ignored in systemctl status php-fpm.service Doing so deprecates the attached patch. It is up to the devs whether or not the needed changes to www.conf can be left for maintainers to implement or if anything can be done by upstream. ------------------------------------------------------------------------ [2019-11-29 21:30:25] glitsj16 at riseup dot net Description: ------------ php-fpm.service fails to start after upgrading to php 7.4.0. Using the default configuration files. systemctl status php-fpm.service: systemd[1]: Starting The PHP FastCGI Process Manager... php-fpm[10704]: [ERROR] [pool www] failed to chown() the socket '/run/php-fpm/php-fpm.sock': Operation not permitted (1) php-fpm[10704]: [ERROR] [pool www] failed to chown() the socket '/run/php-fpm/php-fpm.sock': Operation not permitted (1) php-fpm[10704]: [ERROR] FPM initialization failed php-fpm[10704]: [ERROR] FPM initialization failed systemd[1]: php-fpm.service: Main process exited, code=exited, status=78/CONFIG systemd[1]: php-fpm.service: Failed with result 'exit-code'. systemd[1]: Failed to start The PHP FastCGI Process Manager. This has been reported in the Arch bug tracker: https://bugs.archlinux.org/task/64683 Looks like the CapabilityBoundingSet needs to include CAP_CHOWN ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=78889&edit=1