Package: libapache2-mod-fcgid
Version: 1:2.3.9-1+b1
Followup-For: Bug #779077

Dear Maintainer,

In early January I upgraded from Jessie to Stretch.

The server is running Sympa, which uses fcgid in Stretch for the web interface, 
and for Soap services.

Shortly after the upgrade I encountered this bug.  Researching the problem led 
to this report, and I determined that the bug was triggered by logrotate. 
I noted also that Apache only hangs if the fgci script has been accessed since 
last restart - ie if there are fcgi processes in memory when you attempt to 
reload Apache.

As a workaround I modified the logrotate configuration to restart Apache if 
defunct processes are found after the attempted reload.

This worked fine.  Yesterday, however, the bug appeared again and this time 
logrotate was not the culprit. I investigated and determined that certbot 
attempts to reload Apache multiple times when renewing our certificates.

I modified the letsencrypt configuration like this:
[renewalparams]
pre_hook = /usr/sbin/service apache2 restart

By restarting Apache before certbot runs I remove fcgi processes from memory, 
and if there are no fcgi processes Apache reload does not hang the service.

A better workaround might be to change the Apache scripts to automatically 
issue a restart instead of reload if any fcgi processes are in memory.

HTH,

Ben

-- System Information:
Debian Release: 9.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-8-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=ISO-8859-1), LANGUAGE=en_AU 
(charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libapache2-mod-fcgid depends on:
ii  apache2-bin [apache2-api-20120211]  2.4.25-3+deb9u6
ii  libc6                               2.24-11+deb9u3

libapache2-mod-fcgid recommends no packages.

libapache2-mod-fcgid suggests no packages.

-- no debconf information

Reply via email to