Zabbix.sock file permissions are changed after restarting rh-php72-php-fpm

[V-Test]

After I go through an install of Zabbix and restart all the services to configure the front end, I'm getting a permission denied error in the error log for httpd.


My only solution was to reboot the machine and everything started up fine. When I checked the permissions of /var/opt/rh/rh-php72/run/php-fpm/zabbix.sock,...

[tim.mooney]

Sorry you're still encountering this issue. It's possible you're running into some weird bug or SCL issue that's causing this. With the earlier PHP 7.x releases (7.0, 7.1, and to some extent 7.2), the UNIX socket path method wasn't as well-tested as the TCP port method (i.e. 'listen = 127.0.0.1:9000")....

[V-Test]

I'm still having permission issues with the zabbix.sock file.

1. I edited /usr/lib/systemd/system/rh-php72-php-fpm.service to add user=apache and group=apache.
2. I edited /etc/opt/rh/rh-php72/php-fpm.d/www.conf to use apache for user and groups.
3. I edited /etc/opt/rh/rh-php72/php-fpm.d/zabbix.conf to

...

[tim.mooney]

Your environment may have requirements that meant you had to deploy on RHEL 7, but in general RHEL 8 would have been a better choice for a new Zabbix install. The Zabbix developers stopped supporting RHEL 7 as a Zabbix server (it's still supported for the agent) in the 5.2.x series, so your upgrade...

[comfyhorizon]

check code:


/var/opt/rh/rh-php72/run/php-fpm/

[vladimir_lv]

Please check permissions for the directory:

/var/opt/rh/rh-php72/run/php-fpm/

[vladimir_lv]

Hi!



"+" means that you are using ACL, you have to check ACL settings:

getfacl /var/opt/rh/rh-php72/run/php-fpm/zabbix.sock

if nessesary use the command to change your ACL and fix your issue:

setfacl -m u:zabbix:rwx /var/opt

...

[Atsushi]

In my environment, I was able to create a socket with the same permissions by restarting the service without restarting the OS or manually changing the permissions. Did you just happen to be unable to connect due to the order and timing of startup?

[root@zbx50d ~]# ls -l /var/opt/rh/rh-php72/run/php-fpm/

...

[tim.mooney]

I haven't experienced this issue at my site, that I know of. We're still on Zabbix 5.0.20, but I'll probably upgrade us to 5.0.24 soon. Like you, I'm also using rh-php72 (on RHEL 7.9), but I'm using rh-mariadb102-mariadb-server-10.2.33 as the database backend, not MySQL 8.0. Did your MySQL packages...

[damiancancela]

PHP conf if helps

[zabbix]
user = apache
group = apache

listen = /var/opt/rh/rh-php72/run/php-fpm/zabbix.sock
listen.acl_users = apache
listen.allowed_clients = 127.0.0.1

pm = dynamic
pm.max_children = 50
pm.start_servers = 5...

[martynasj]

This was the issue. After manual inspection trough rh-php files I found that old rh-php72 installation had this parameters set on /etc/opt/rh/rh-php72/php.ini

[MySQLi]
mysqli.default_socket = /opt/app/mysql/mysql.sock
mysqli.default_host = localhost
mysqli.default_user

...

[martynasj]

Hello, I have following setup:
RHEL 7.9
zabbix-server 5.0.7
rh-php72

I followed these steps to upgrade php to rh-php73.
After this when I go to zabbix web page I get error page:
Error: zabbix database error no such file or directory

/info.php shows...

[tim.mooney]

Ok, thanks for all the info you provided.

Since you have SCL rh-php72 and rh-php73 installed in parallel, the final thing I would recommend checking is that the 7.3 install has the same set of packages (so all the same PHP extensions), and that wherever you're setting the PHP settings needed...

[martynasj]

That's correct I use httpd and also forgot to mention that selinux is set to permissive mode.

I noticed this and fixed path.

Yes it is correct before and after changing php versions.

I checked those with httpd debug enabled. access_log just gives events with 200...

[johng]

We had a Zabbix 4.4 server running for about a month. We decided to drop the DB and do a fresh install for Zabbix 5.0.1 server on AWS t3.small(2GB memory). It ran out of memory in a few days. I relaunched the server as t3.medium(4GB memory). It ran out of memory. Does anyone know why php-fpm is using...