Welcome to Centmin Mod Community
Become a Member

Nginx Nginx 1.23.2 Upgrade issue

Discussion in 'Install & Upgrades or Pre-Install Questions' started by victor, Oct 21, 2022.

  1. victor

    victor New Member

    8
    0
    1
    Apr 9, 2015
    Slovenia
    Ratings:
    +2
    Local Time:
    10:52 PM
    MariaDB 10
    Please fill in any relevant information that applies to you:
    • CentOS Version: CentOS 7 64bit ?
    • Centmin Mod Version Installed: 130.00beta01 centminmod.com
    • Nginx Version Installed: 1.23.2

      After upgrading Nginx I got the following message
    Code:
    *************************************************
    * NGINX_STAPLE_CACHE_OVERRIDE='y' detected NGINX_STAPLE_CACHE_TTL='86400' set
    * nginx updated
    *************************************************
    Redirecting to /bin/systemctl restart nginx.service
    Job for nginx.service failed because the control process exited with error code. See "systemctl status nginx.service" and "journalctl -xe" for details.
    
    Code:
    [16:48][root@theo.olya.one ~]# ngxrestart
    Redirecting to /bin/systemctl restart nginx.service
    Job for nginx.service failed because the control process exited with error code. See "systemctl status nginx.service" and "journalctl -xe" for details.
    [16:49][root@theo.olya.one ~]# nginx -T
    nginx: [emerg] "modsecurity_rules_file" directive Rules error. File: /usr/local/nginx/modsec/main.conf. Line: 6. Column: 57. "/usr/local/nginx/coreruleset-3.3.4/rules/*.conf": Not able to open file. Looking at: '"/usr/local/nginx/coreruleset-3.3.4/rules/*.conf"', '"/usr/local/nginx/coreruleset-3.3.4/rules/*.conf"', '/usr/local/nginx/modsec/"/usr/local/nginx/coreruleset-3.3.4/rules/*.conf"', '/usr/local/nginx/modsec/"/usr/local/nginx/coreruleset-3.3.4/rules/*.conf"'. in /usr/local/nginx/conf/conf.d/virtual.conf:18
    nginx: configuration file /usr/local/nginx/conf/nginx.conf test failed
    [16:50][root@theo.olya.one ~]#
    


     
  2. victor

    victor New Member

    8
    0
    1
    Apr 9, 2015
    Slovenia
    Ratings:
    +2
    Local Time:
    10:52 PM
    MariaDB 10
    Code:
    ^C[17:53][root@theo.olya.one ~]# journalctl -xe
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit session-117.scope has finished starting up.
    --
    -- The start-up result is done.
    Oct 21 17:53:01 theo.olya.one CROND[4909]: (root) CMD (/usr/lib64/sa/sa1 1 1)
    Oct 21 17:53:08 theo.olya.one kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:54:af
    Oct 21 17:53:11 theo.olya.one kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=c4:37:72:31:2c:9d:34:e8
    Oct 21 17:53:16 theo.olya.one polkitd[634]: Registered Authentication Agent for unix-process:6663:501211
    Oct 21 17:53:16 theo.olya.one systemd[1]: Reloading.
    Oct 21 17:53:16 theo.olya.one polkitd[634]: Unregistered Authentication Agent for unix-process:6663:50121
    Oct 21 17:53:18 theo.olya.one kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:54:af
    Oct 21 17:53:18 theo.olya.one kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=c4:37:72:31:2c:9d:34:e8
    Oct 21 17:53:20 theo.olya.one polkitd[634]: Registered Authentication Agent for unix-process:6788:501578
    Oct 21 17:53:20 theo.olya.one systemd[1]: Reloading.
    Oct 21 17:53:20 theo.olya.one polkitd[634]: Unregistered Authentication Agent for unix-process:6788:50157
    Oct 21 17:53:20 theo.olya.one polkitd[634]: Registered Authentication Agent for unix-process:6806:501585
    Oct 21 17:53:20 theo.olya.one systemd[1]: Starting Centmin Mod NGINX Server...
    -- Subject: Unit nginx.service has begun start-up
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit nginx.service has begun starting up.
    Oct 21 17:53:20 theo.olya.one nginx[6820]: nginx: [emerg] "modsecurity_rules_file" directive Rules error.
    Oct 21 17:53:20 theo.olya.one nginx[6820]: nginx: configuration file /usr/local/nginx/conf/nginx.conf tes
    Oct 21 17:53:20 theo.olya.one systemd[1]: nginx.service: control process exited, code=exited status=1
    Oct 21 17:53:20 theo.olya.one systemd[1]: Failed to start Centmin Mod NGINX Server.
    -- Subject: Unit nginx.service has failed
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit nginx.service has failed.
    --
    -- The result is failed.
    Oct 21 17:53:20 theo.olya.one systemd[1]: Unit nginx.service entered failed state.
    Oct 21 17:53:20 theo.olya.one systemd[1]: nginx.service failed.
    Oct 21 17:53:20 theo.olya.one polkitd[634]: Unregistered Authentication Agent for unix-process:6806:50158
    Oct 21 17:53:20 theo.olya.one polkitd[634]: Registered Authentication Agent for unix-process:6909:501659
    Oct 21 17:53:20 theo.olya.one systemd[1]: Stopped Centmin Mod NGINX Server.
    -- Subject: Unit nginx.service has finished shutting down
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit nginx.service has finished shutting down.
    Oct 21 17:53:20 theo.olya.one systemd[1]: Starting Centmin Mod NGINX Server...
    -- Subject: Unit nginx.service has begun start-up
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit nginx.service has begun starting up.
    Oct 21 17:53:21 theo.olya.one nginx[6923]: nginx: [emerg] "modsecurity_rules_file" directive Rules error.
    Oct 21 17:53:21 theo.olya.one nginx[6923]: nginx: configuration file /usr/local/nginx/conf/nginx.conf tes
    Oct 21 17:53:21 theo.olya.one systemd[1]: nginx.service: control process exited, code=exited status=1
    Oct 21 17:53:21 theo.olya.one systemd[1]: Failed to start Centmin Mod NGINX Server.
    -- Subject: Unit nginx.service has failed
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit nginx.service has failed.
    --
    -- The result is failed.
    Oct 21 17:53:21 theo.olya.one systemd[1]: Unit nginx.service entered failed state.
    Oct 21 17:53:21 theo.olya.one systemd[1]: nginx.service failed.
    Oct 21 17:53:21 theo.olya.one polkitd[634]: Unregistered Authentication Agent for unix-process:6909:50165
    Oct 21 17:53:26 theo.olya.one systemd[1]: nginx.service holdoff time over, scheduling restart.
    Oct 21 17:53:26 theo.olya.one systemd[1]: Stopped Centmin Mod NGINX Server.
    -- Subject: Unit nginx.service has finished shutting down
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit nginx.service has finished shutting down.
    Oct 21 17:53:26 theo.olya.one systemd[1]: start request repeated too quickly for nginx.service
    Oct 21 17:53:26 theo.olya.one systemd[1]: Failed to start Centmin Mod NGINX Server.
    -- Subject: Unit nginx.service has failed
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    --
    -- Unit nginx.service has failed.
    --
    -- The result is failed.
    Oct 21 17:53:26 theo.olya.one systemd[1]: Unit nginx.service entered failed state.
    Oct 21 17:53:26 theo.olya.one systemd[1]: nginx.service failed.
    Oct 21 17:53:28 theo.olya.one kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:54:af
    Oct 21 17:53:38 theo.olya.one kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:54:af
     ESCOC
    
    
    
    
    D (/usr/lib64/sa/sa1 1 1)
    _IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:54:af:97:0e:7e:e0:08:00 SRC=38.32.212.3 DST=255.255.255.2
    _IN Blocked* IN=eth0 OUT= MAC=c4:37:72:31:2c:9d:34:e8:94:f8:7b:5f:08:00 SRC=5.8.18.58 DST=216.27.7.162 LE
    ed Authentication Agent for unix-process:6663:501211 (system bus name :1.296 [/usr/bin/pkttyagent --notif
    
    ered Authentication Agent for unix-process:6663:501211 (system bus name :1.296, object path /org/freedesk
    _IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:54:af:97:0e:7e:e0:08:00 SRC=38.32.212.3 DST=255.255.255.2
    _IN Blocked* IN=eth0 OUT= MAC=c4:37:72:31:2c:9d:34:e8:94:f8:7b:5f:08:00 SRC=209.188.7.160 DST=216.27.7.16
    ed Authentication Agent for unix-process:6788:501578 (system bus name :1.297 [/usr/bin/pkttyagent --notif
    
    ered Authentication Agent for unix-process:6788:501578 (system bus name :1.297, object path /org/freedesk
    ed Authentication Agent for unix-process:6806:501585 (system bus name :1.298 [/usr/bin/pkttyagent --notif
    entmin Mod NGINX Server...
    
    
    tinfo/systemd-devel
    
    
    merg] "modsecurity_rules_file" directive Rules error. File: /usr/local/nginx/modsec/main.conf. Line: 6. C
    nfiguration file /usr/local/nginx/conf/nginx.conf test failed
    ice: control process exited, code=exited status=1
    start Centmin Mod NGINX Server.
    
    
    tinfo/systemd-devel
    
    
    
    
    .service entered failed state.
    ice failed.
    ered Authentication Agent for unix-process:6806:501585 (system bus name :1.298, object path /org/freedesk
    ed Authentication Agent for unix-process:6909:501659 (system bus name :1.299 [/usr/bin/pkttyagent --notif
    ntmin Mod NGINX Server.
     down
    
    tinfo/systemd-devel
    
    
    entmin Mod NGINX Server...
    
    
    tinfo/systemd-devel
    
    
    merg] "modsecurity_rules_file" directive Rules error. File: /usr/local/nginx/modsec/main.conf. Line: 6. C
    nfiguration file /usr/local/nginx/conf/nginx.conf test failed
    ice: control process exited, code=exited status=1
    start Centmin Mod NGINX Server.
    
    
    tinfo/systemd-devel
    
    
    
    
    .service entered failed state.
    ice failed.
    ered Authentication Agent for unix-process:6909:501659 (system bus name :1.299, object path /org/freedesk
    ice holdoff time over, scheduling restart.
    ntmin Mod NGINX Server.
     down
    
    tinfo/systemd-devel
    
    
    est repeated too quickly for nginx.service
    start Centmin Mod NGINX Server.
    
    
    tinfo/systemd-devel
    
    
    
    
    .service entered failed state.
    ice failed.
    _IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:54:af:97:0e:7e:e0:08:00 SRC=38.32.212.3 DST=255.255.255.2
    _IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:54:af:97:0e:7e:e0:08:00 SRC=38.32.212.3 DST=255.255.255.2
    lines 1691-1773/1773 (END)
    
    Code:
    [17:59][root@theo.olya.one ~]# systemctl status nginx.service
    ● nginx.service - Centmin Mod NGINX Server
       Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor preset: disabled)
      Drop-In: /etc/systemd/system/nginx.service.d
               └─failure-restart.conf, openfileslimit.conf
       Active: failed (Result: start-limit) since Fri 2022-10-21 17:53:26 MSK; 5min ago
      Process: 6923 ExecStartPre=/usr/local/sbin/nginx -t (code=exited, status=1/FAILURE)
    
    Oct 21 17:53:21 theo.olya.one systemd[1]: Failed to start Centmin Mod NGINX Server.
    Oct 21 17:53:21 theo.olya.one systemd[1]: Unit nginx.service entered failed state.
    Oct 21 17:53:21 theo.olya.one systemd[1]: nginx.service failed.
    Oct 21 17:53:26 theo.olya.one systemd[1]: nginx.service holdoff time over, scheduling restart.
    Oct 21 17:53:26 theo.olya.one systemd[1]: Stopped Centmin Mod NGINX Server.
    Oct 21 17:53:26 theo.olya.one systemd[1]: start request repeated too quickly for nginx.service
    Oct 21 17:53:26 theo.olya.one systemd[1]: Failed to start Centmin Mod NGINX Server.
    Oct 21 17:53:26 theo.olya.one systemd[1]: Unit nginx.service entered failed state.
    Oct 21 17:53:26 theo.olya.one systemd[1]: nginx.service failed.
    
     
  3. victor

    victor New Member

    8
    0
    1
    Apr 9, 2015
    Slovenia
    Ratings:
    +2
    Local Time:
    10:52 PM
    MariaDB 10
    Fixed

    Open
    Code:
    /usr/local/nginx/modsec/main.conf
    Find
    Code:
    Include "/etc/nginx/coreruleset-3.3.2/rules/*.conf"
    Replace
    Code:
    Include /etc/nginx/coreruleset-3.3.2/rules/*.conf
     
    Last edited: Oct 22, 2022
  4. eva2000

    eva2000 Administrator Staff Member

    49,887
    11,488
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +17,845
    Local Time:
    5:52 AM
    Nginx 1.21.x
    MariaDB 10.x
  5. eva2000

    eva2000 Administrator Staff Member

    49,887
    11,488
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +17,845
    Local Time:
    5:52 AM
    Nginx 1.21.x
    MariaDB 10.x
    FYI, updated both 124.00stable and 130.00beta01 with the fix for this too :)