nginx: Do not use spawn-fcgi for munin-graph
#139
Open
mtrossevin
wants to merge 1 commits from mtrossevin/ansible-roles:nginx-munin-no-spawn-fcgi
into unstable
pull from: mtrossevin/ansible-roles:nginx-munin-no-spawn-fcgi
merge into: evolix:unstable
evolix:jitsimeet
evolix:unstable
evolix:jitsimeet_docker
evolix:ssh-split
evolix:emorino/patroni-etcd
evolix:peertube
evolix:hedgedoc
evolix:etherpad
evolix:privatebin
evolix:mattermost
evolix:gitea
evolix:stable
evolix:p10166-mastodon
evolix:etcd
evolix:patroni
evolix:replace_include
evolix:when-not-check
evolix:fix_lxc_php56_debian10
evolix:debian12
evolix:boost-proxy
evolix:debian12-keyring
evolix:evodomains
evolix:vrrp-addresses
evolix:lxc_etc-git
evolix:lxc_etc-commit
evolix:evoacme-v2
evolix:sshd_modular_config
evolix:exclusion_images_evobackup
evolix:rotate_elasticsearch_logs
evolix:evobackup_tags_redux
evolix:log2mail-beats
evolix:T47076
evolix:kvm-guest
evolix:lpoujol/fpm-php
evolix:lxc-php-buster
evolix:simplify-evolinux-users
evolix:openvpn
evolix:newkernel
evolix:etc-git-status-script
evolix:itk-add-EnableCapabilities-off
evolix:ubuntu
evolix:nagios-sudoers
evolix:configurable-swapiness
evolix:alert5-minifirewall-restart
evolix:fail2ban_ips_tag
evolix:audit-ftpadmin
evolix:projet6062
evolix:whitelisting-changes
evolix:uvrrpd
evolix:packweb-apache-lxc
evolix:backup/jlecour/ssh-groups
evolix:nextcloud
evolix:backup/jlecour/nextcloud
evolix:evoadmin-mail
evolix:haproxy_munin
evolix:evolinux-users
evolix:ansible-log
evolix:ansible-managed
evolix:apache-fix-default-vhost
evolix:ipsec
evolix:courier
evolix:spamassassin
evolix:samba
evolix:munin-openbsd
Reviewers
Request review
No reviewers
No Label
bug
duplicate
enhancement
help wanted
invalid
question
security
wontfix
Milestone
Set milestone
Clear milestone
No items
No Milestone
Assignees
Assign users
Clear assignees
No Assignees
2 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.
No due date set.
Dependencies
No dependencies set.
Reference: evolix/ansible-roles#139
Reference in New Issue
There is no content yet.
Delete Branch 'mtrossevin/ansible-roles:nginx-munin-no-spawn-fcgi'
Deleting a branch is permanent. It CANNOT be undone. Continue?
No
Yes
systemd provides already provides all the fonctionnalities of spawn-fcgi
with the exception of the possibility to spawn multiple process to a
single socket (it can be done using multiwatch though). So we might as
well use the fonctions provided by systemd instead of needing to install
a new package and add a layer of indirection in how the fastcgi service
is managed.
This make for a somewhat simpler service that can be started as an
unprivileged user.
@ -36,3 +41,3 @@
- name: Systemd unit for Munin-fcgi is started
systemd:
name: spawn-fcgi-munin-graph
name: fcgi-munin-graph.socket
Enabling only the socket mean that the service will be started on the first connexion on said socket instead of being started on boot. That increase the latency for the very first connexion (+ the first after a crash of the service) in exchange of not blocking boot until the service is started.
0b3a7cbc8f
to93084d6ce8
2 years ago@ -0,0 +12,4 @@
StandardError=journal
[Install]
WantedBy=multi-user.target
This allow the service to be started on boot instead of waiting for the first connexion on the socket if wanted.
nginx: Do not use spawn-fcgi for munin-graphto WIP: nginx: Do not use spawn-fcgi for munin-graph 2 years agoWIP: nginx: Do not use spawn-fcgi for munin-graphto nginx: Do not use spawn-fcgi for munin-graph 2 years agoI temporarily enabled this change on selks-dev (units in /run/systemd/system instead of /etc and spawn-fcgi-munin-graph stopped but not disabled so it will completely rollback with a reboot).
That seems to work without any problem.
In fact it works without any problem with this exact service unit:
(mostly checked the sandboxing options to know what exactly it need access to in order to works normally)
@ -35,2 +38,4 @@
src: systemd/fcgi-munin-graph.service
dest: /etc/systemd/system/fcgi-munin-graph.service
- name: Systemd unit for Munin-fcgi is started
I guess we should change the name to
Systemd socket for Munin-fcgi is installed
to mention the socket instead of the service.Reviewers
Step 1:
From your project repository, check out a new branch and test the changes.Step 2:
Merge the changes and update on Gitea.