New answers tagged chroot
I have two programs running under chroot. They are communicate each other via unix domain socket and one of them is apache httpd. I have %10 performance lost.
A chrooted process can see everything inside the chroot. That is perfectly normal, and it couldn't work any other way, if you want to be able to run a normal shell within the chroot. The point is, you shouldn't put all the normal contents of /bin, /dev, /etc etc. inside the chroot. Instead you should restrict it to only those absolutely needed by the things ...
I've solved the problem. I didn't make any changes to my configs. I've just done "aptitute update && aptitude upgrade" and voila - now it works with my configs listed above. So I think that was a bug.
@imz--IvanZakharyaschev comments on pehrs's answer that it may be possible with the introduction of namespaces, but this hasn't been tested and posted as an answer. Yes, that does indeed make it possible for a non-root user to use chroot. Given a statically-linked dash, and a statically-linked busybox, and a running bash shell running as non-root: $ mkdir ...
So you run a pool in chroot, but your paths are pointing to the directory tree without chroot. You should change the paths in the fastcgi_param options to reflect the actual path inside the chroot, so the chrooted php-fpm gets a proper understanding where to look for the php scripts.
Top 50 recent answers are included