Bug #80756 [NEW]: Since glibc 2.33 NSS must be initialized before calling chroot(2)

From: dpa-bugs at aegee dot org Operating system: Linux from Scratch PHP version: 7.3.27 Package: *General Issues Bug Type: Bug Bug description:Since glibc 2.33 NSS must be initialized before calling chroot(2) Description: ------------ I use php-fpm 7.3.25 . For each user php-fpm.ini contains chroot= . After I upgraded glbc 2.32 → 2.33 php started crashing like crazy, creating core dumps until it filled my entire disk. I have not investigated the core dumps. However, after the 2.32 → 2.33 upgrade openldap (which also runs in chroot) also stopped working. Investigating the cause lead to the conclusion, that since glibc 2.33 chrooted programmes must first initiate NSS and then switch in the chrooted environment, as within the chrooted environment NSS cannot be initialized: https://sourceware.org/bugzilla/show_bug.cgi?id=27077 In my particular example I had long time ago nscd long time ago running, then I disabled it and the system worked fine this way for many years. Since the upgrade to glibc 2.33 I must run ncsd again and bind-mount /var/nscd/socket in the chroot(2)ed environment. This makes php-fpm working again fine. As outlined in the above PR, since glibc 2.33 NSS must be initialized before switching to chroot. Please adjust php-fpm accordingly. -- Edit bug report at https://bugs.php.net/bug.php?id=80756&edit=1 -- Fix committed: https://bugs.php.net/fix.php?id=80756&r=fixed Fixed in release: https://bugs.php.net/fix.php?id=80756&r=alreadyfixed Need backtrace: https://bugs.php.net/fix.php?id=80756&r=needtrace Need Reproduce Script: https://bugs.php.net/fix.php?id=80756&r=needscript Try newer version: https://bugs.php.net/fix.php?id=80756&r=oldversion Not developer issue: https://bugs.php.net/fix.php?id=80756&r=support Expected behavior: https://bugs.php.net/fix.php?id=80756&r=notwrong Not enough info: https://bugs.php.net/fix.php?id=80756&r=notenoughinfo Submitted twice: https://bugs.php.net/fix.php?id=80756&r=submittedtwice register_globals: https://bugs.php.net/fix.php?id=80756&r=globals PHP version support discontinued: https://bugs.php.net/fix.php?id=80756&r=phptooold Daylight Savings: https://bugs.php.net/fix.php?id=80756&r=dst IIS Stability: https://bugs.php.net/fix.php?id=80756&r=isapi Install GNU Sed: https://bugs.php.net/fix.php?id=80756&r=gnused Floating point limitations: https://bugs.php.net/fix.php?id=80756&r=float No Zend Extensions: https://bugs.php.net/fix.php?id=80756&r=nozend MySQL Configuration Error: https://bugs.php.net/fix.php?id=80756&r=mysqlcfg