Your message dated Fri, 10 Jun 2022 13:09:10 -0400
with message-id <YqN6nAx/Y26WalZA@xps13>
and subject line Re: Bug#1012555: rng haveged speed up lighttpd start?
has caused the Debian Bug report #1012555,
regarding lighttpd: starte takes over an minute (php.socket-0 load: 1)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1012555: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012555
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: lighttpd
Version: 1.4.59-1+deb11u1
Severity: normal

Dear Maintainer,
we use an faster sd-card in our embedded system, nothing else.
Now the start from the lighttpd server takes often over an minute.
we use debian 10, for the bug submit i upgrade to bullseye, but the behaviour 
is the same.
Without fastcgi/php lighttpd start fast, only some second.

I can send some error.log from the debian 10 system, if needed, but it seems to 
identical

Sometimes we got the following error:
2022-06-09 06:26:17: gw_backend.c.238) establishing connection failed: socket: 
unix:/run/lighttpd/php.socket-0: Resource temporarily unavailable
2022-06-09 06:26:17: gw_backend.c.255) backend error; we'll disable for 1secs 
and send the request to another backend instead:load: 130
2022-06-09 06:26:17: gw_backend.c.262) If this happened on Linux: You have run 
out of local ports. Check the manual, section Performance how to handle this.

-- System Information:
Debian Release: 11.3
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: armhf (armv7l)

Kernel: Linux 4.14.126-rt62-ltsi (SMP w/2 CPU threads)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages lighttpd depends on:
ii  init-system-helpers  1.60
ii  libc6                2.31-13+deb11u3
ii  libcrypt1            1:4.4.18-4
ii  libnettle8           3.7.3-1
ii  libpcre3             2:8.39-13
ii  libxxhash0           0.8.0-2
ii  lsb-base             11.1.0
ii  mime-support         3.66

Versions of packages lighttpd recommends:
ii  lighttpd-mod-deflate  1.4.59-1+deb11u1
ii  lighttpd-mod-openssl  1.4.59-1+deb11u1
ii  perl                  5.32.1-4+deb11u2
ii  spawn-fcgi            1.6.4-2

Versions of packages lighttpd suggests:
pn  apache2-utils               <none>
pn  lighttpd-doc                <none>
pn  lighttpd-mod-authn-gssapi   <none>
pn  lighttpd-mod-authn-pam      <none>
pn  lighttpd-mod-authn-sasl     <none>
pn  lighttpd-mod-geoip          <none>
pn  lighttpd-mod-maxminddb      <none>
pn  lighttpd-mod-trigger-b4-dl  <none>
pn  lighttpd-mod-vhostdb-pgsql  <none>
pn  lighttpd-mod-webdav         <none>
pn  lighttpd-modules-dbi        <none>
ii  lighttpd-modules-ldap       1.4.59-1+deb11u1
pn  lighttpd-modules-lua        <none>
ii  lighttpd-modules-mysql      1.4.59-1+deb11u1
ii  openssl                     1.1.1n-0+deb11u1
ii  php-cgi                     2:7.4+76
pn  php-fpm                     <none>
ii  php7.4-cgi [php-cgi]        7.4.28-1+deb11u1
pn  rrdtool                     <none>

-- Configuration Files:
/etc/lighttpd/conf-available/10-ssl.conf changed:
server.modules += ( "mod_openssl" )
ssl.pemfile = "/etc/lighttpd/server.pem"
ssl.cipher-list = "HIGH"
$SERVER["socket"] == "0.0.0.0:443" {
        ssl.engine  = "enable"
}
include_shell "/usr/share/lighttpd/use-ipv6.pl 443"

/etc/lighttpd/lighttpd.conf changed:
server.modules = (
        "mod_indexfile",
        "mod_access",
        "mod_alias",
        "mod_redirect",
)
server.document-root        = "/var/www/html"
server.upload-dirs          = ( "/var/cache/lighttpd/uploads" )
server.errorlog             = "/var/log/lighttpd/error.log"
server.pid-file             = "/run/lighttpd.pid"
server.username             = "www-data"
server.groupname            = "www-data"
server.port                 = 80
fastcgi.debug = 1
server.feature-flags       += ("server.h2proto" => "enable")
server.feature-flags       += ("server.h2c"     => "enable")
server.feature-flags       += ("server.graceful-shutdown-timeout" => 5)
server.http-parseopts = (
  "header-strict"           => "enable",# default
  "host-strict"             => "enable",# default
  "host-normalize"          => "enable",# default
  "url-normalize-unreserved"=> "enable",# recommended highly
  "url-normalize-required"  => "enable",# recommended
  "url-ctrls-reject"        => "enable",# recommended
  "url-path-2f-decode"      => "enable",# recommended highly (unless breaks app)
 #"url-path-2f-reject"      => "enable",
  "url-path-dotseg-remove"  => "enable",# recommended highly (unless breaks app)
 #"url-path-dotseg-reject"  => "enable",
 #"url-query-20-plus"       => "enable",# consistency in query string
)
index-file.names            = ( "index.php", "index.html" )
url.access-deny             = ( "~", ".inc" )
static-file.exclude-extensions = ( ".php", ".pl", ".fcgi" )
include_shell "/usr/share/lighttpd/use-ipv6.pl " + server.port
include_shell "/usr/share/lighttpd/create-mime.conf.pl"
include "/etc/lighttpd/conf-enabled/*.conf"
server.modules += (
        "mod_dirlisting",
        "mod_staticfile",
)


-- no debconf information

--- End Message ---
--- Begin Message ---
On Fri, Jun 10, 2022 at 02:46:46PM +0200, Nico Becker wrote:
> I try php7.4-fpm on debian 11 and the startup time was acceptable.
> After that i try the php7.3-fpm at debian 10 and got the same issues
> (timeout).
> The service did not start after boot, sometimes.
> I try some more research and found the behaviour,
> the solution at the thread was to install an random generator.
> After installing rng at debian, was the php-fpm startup fast.
> I try the old configuration with php-cgi, the result was an fast lighttpd
> startup. I have no idea why the rng service boost my start. i although try
> haveged, with the same result an fast lighttpd start. Can you explain the
> behavior? (only if you have time)
> thanks again

PHP is PHP.  PHP is not lighttpd.
Your issue with your PHP startup *is not* an issue with lighttpd.

To repeat, this *is not* an issue with lighttpd.

This an issue with embedded systems and entropy.
https://daniel-lange.com/archives/152-Openssh-taking-minutes-to-become-available,-booting-takes-half-an-hour-...-because-your-server-waits-for-a-few-bytes-of-randomness.html

Additionally, PHP -- or the libraries used by your PHP script --
may be misusing entropy when your code does not actually need entropy.
(That depends on what your code is actually doing.)

--- End Message ---

Reply via email to