Fix an issue preventing php-fpm for reading the ACL on its socket when the ...

Razique Mahroua

2019-12-16 4a2cd57eec39922b9b568449c3a0b79e29a9eae5

Fix an issue preventing php-fpm for reading the ACL on its socket when
the container is running in rootless mode in Podman.
Fix is compatible with Docker & podman

 php-ssl/Dockerfile

@@ -5,13 +5,17 @@
  creationDate="2019-12-13" \
  updatedDate="2019-12-13"

USER 0
RUN yum install -y --disableplugin=subscription-manager --nodocs \
  httpd php php-common net-tools procps-ng \
  mod_ssl \
  && yum clean all

COPY httpd/httpd.conf /etc/httpd/conf/httpd.conf
# PHP FPM configuration both compatible with Docker and Podman
# Allows us to run php-fpm as a non-root user yet still let
# Apache read the socket
COPY httpd/www.conf /etc/php-fpm.d/www.conf

## SSL - This directive configures SSL support for the container
COPY httpd/ssl.conf /etc/httpd/conf.d/ssl.conf
## End of SSL

 php-ssl/httpd/www.conf

New file
@@ -0,0 +1,21 @@
[www]
user = apache
group = apache
listen = /run/php-fpm/www.sock
listen.allowed_clients = 127.0.0.1

pm = dynamic
pm.max_children = 50
pm.start_servers = 5
pm.min_spare_servers = 5
pm.max_spare_servers = 35

slowlog = /var/log/php-fpm/www-slow.log

php_admin_value[error_log] = /var/log/php-fpm/www-error.log
php_admin_flag[log_errors] = on

php_value[session.save_handler] = files
php_value[session.save_path]    = /var/lib/php/session
php_value[soap.wsdl_cache_dir]  = /var/lib/php/wsdlcache
;php_value[opcache.file_cache]  = /var/lib/php/opcache