Terres dévastées

Vallée de montagne enneigée entre deux sommets rocheux, sous un ciel bleu

Catégorie : php-fpm

Notes d’exploitation, réglages de pools et optimisation des performances pour PHP-FPM.

Hardening systemd services is hard.

Especially when you want to harden php-pm services with jit enabled and with nextcloud running… More infos later

Articles liés

php-fpm jit selinux opcache issue

I had issues when trying to enable jit for php-fpm, segfault, core dumpt etc…:

php-fpm[10021]: segfault at 55ad7b400600 ip 000055ad7b400600 sp 00007ffc04059b30 error 15 in zero (deleted)[55ad3b400000+80000000] likely on CPU 4 (core 0, socket 0) php-fpm[27109]: mprotect() failed [13] Permission denied

Why the php-fpm JIT crashes under SELinux

After searching on google I found nothing really useful. But digging more made me find this: https://github.com/php/php-src/issues/13400 Only for MacOS, still not useful But the mprotect thing led me to that: https://lkml.org/lkml/2023/12/14/436 Interesting. And to that: https://bugzilla.kernel.org/show_bug.cgi?id=218258 But THIS: https://bugzilla.redhat.com/show_bug.cgi?id=1380930 Yes, tried and it wxas the answer !!!! so: setsebool -P httpd_execmem 1 systemctl restart php-fpm issue solved ! #php-fpm #selinux #opcache #jit

Articles liés

Propulsé par WordPress & Thème par Anders Norén