Hi,

I have interest problem when i try to chroot application on debian
linux. I'v got these errors:

*** Starting uWSGI 2.0.18-debian (64bit) on [Thu Feb 27 10:54:01 2020] ***
compiled with version: 8.2.0 on 10 February 2019 02:42:46
os: Linux-4.9.0-9-amd64 #1 SMP Debian 4.9.168-1+deb9u5 (2019-08-11)
nodename: debian
machine: x86_64
clock source: unix
pcre jit disabled
detected number of CPU cores: 2
current working directory: /
writing pidfile to /srv/user/run/uwsgi.pid
detected binary path: /usr/bin/uwsgi-core
chroot() to /srv/user
setgid() to 1001
setuid() to 1001
your processes number limit is 15733
your memory page size is 4096 bytes
detected max file descriptor number: 1024
lock engine: pthread robust mutexes
thunder lock: disabled (you can enable it with --thunder-lock)
uWSGI http bound on 10.0.10.101:31001 fd 4
uwsgi socket 0 bound to TCP address 127.0.0.1:35669 (port auto-assigned) fd 3
cannot chroot() as non-root user

Something tells me, that I must solve this problem last time ago on
another system, where this works. It's see like uwsgi try to chroot one
more time. But have got the same config, which works on one server
with lower version 2.0.7.

And of course, there is another chroot system, but both with base files,
libraries etc. So is there some files or whatever, which must be in
chroot? I try to run strace, but there is no special which could help me.

Thank's a lot

Here is ma config:

[uwsgi]

# one day may be included
#ini = /srv/user/etc/uwsgi.ini
chroot = /srv/user

autoload = true
plugin = python3

wsgi-file = /srv/app.py
#chdir = /srv
#module = app:app

# check-static = /srv/www

master = true
threads = 5

python-autoreload = true
optimize = 2
#limit-as = 32

uid = user
gid = user

http = 10.0.10.101:31001
pidfile = /srv/user/run/uwsgi.pid
daemonize = /srv/user/log/uwsgi.log
#socket = /run/uwsgi.socket
stats = /run/uwsgi.stats
touch-reload = /run/uwsgi.reload


-- 
Ondřej Tůma <mc...@zeropage.cz>
https://ipv6.mcbig.cz     https://keybase.io/mcbig    twitter: mcbig_cz

Attachment: pgpZyqCiCEVMb.pgp
Description: Digitální podpis OpenPGP

_______________________________________________
uWSGI mailing list
uWSGI@lists.unbit.it
http://lists.unbit.it/cgi-bin/mailman/listinfo/uwsgi

Reply via email to