Upgrade Nginx Nginx recompile again twice aio on;

EckyBrazzz · Jan 4, 2020

Hi,

For some reason OVH had put the old kernel back into my server, so I put 5.4.x again back.
I had nginx complied for 5.4, so there was an entry in my nginx.conf

To prevent the same issue again, I removed all old kernels.

After I reinstalled the kernel 5.4.x and recompiled nginx and found this
Code (Text):
nginx -t
nginx: [emerg] "aio" directive is duplicate in /usr/local/nginx/conf/nginx.conf:110
nginx: configuration file /usr/local/nginx/conf/nginx.conf test failed
Code (Text):
aio on;
aio on;

eva2000 · Jan 4, 2020

contents of your persistent config file at /etc/centminmod/custom_config.inc ?

steph40 · Jan 5, 2020

Same for me. Here is my custom_config:
Code:
LETSENCRYPT_DETECT='y'
NGINX_IOURING_PATCH='y'
NGINX_HPACK='y'
NGINX_DYNAMICTLS='y'
PHP_PGO='y'

eva2000 · Jan 5, 2020

what kernels version are you both using ? output for
Code (Text):
uname -r
and
Code (Text):
uname -r | awk -F. '{ printf("%d%03d%03d%03d\n", $1,$2,$3,$4); }'

steph40 · Jan 5, 2020

eva2000 said: ↑

uname -r
Click to expand...
Code:
5.4.7-1.el7.elrepo.x86_64
eva2000 said: ↑

uname -r | awk -F. '{ printf("%d%03d%03d%03d\n", $1,$2,$3,$4); }'
Click to expand...
Code:
5004007000

EckyBrazzz · Jan 5, 2020

uname -sr
Linux 5.4.7-1.el7.elrepo.x86_64
Click to expand...

uname -r | awk -F. '{ printf("%d%03d%03d%03d\n", $1,$2,$3,$4); }'
5004007000
Click to expand...

cat /etc/centminmod/custom_config.inc
ALERTEMAIL='mine@mine.com'
WP_FASTCGI_CACHE='y' # Enable beta option 22-4
PHP_OVERWRITECONF='n' # Prevents stupid mistakes
VHOSTCTRL_CLOUDFLAREINC='y' # add VHOSTCTRL_CLOUDFLAREINC & VHOSTCTRL_AUTOPROTECTINC
RCLONE_ENABLE='y' # Must have entry to enable rclone addon
#####################################################

#####################################################
# Nginx Dynamic Module Switches
NGINX_DYNAMICTLS='y'
NGXDYNAMIC_GEOIPTWOLITE='y'
NGXDYNAMIC_BROTLI='y'
NGXDYNAMIC_HEADERSMORE='y'
NGXDYNAMIC_SETMISC='y'
NGXDYNAMIC_ECHO='y'
NGXDYNAMIC_IMAGEFILTER='y'
NGXDYNAMIC_VHOSTSTATS='n'

#####################################################
NGINX_HPACK='y'
NGINX_GEOIPTWOLITE='y' # leev/ngx_http_geoip2_module
NGINX_REALIP='y' # Module ngx_http_realip_module
NGINX_LIBBROTLI='y'
NGINX_OPENRESTY='y' # https://community.centminmod.com/th...esty-core-requirements-in-123-09beta01.15954/
ORESTY_LUANGINX='y' # https://community.centminmod.com/th...esty-core-requirements-in-123-09beta01.15954/
NGX_LUASTREAM_FORCED='y' # openresty stream-lua-nginx module openresty/stream-lua-nginx-module
NGINX_IOURING_PATCH='y' # Nginx 1.17.0+ and Linux Kernel 5.1 usage only 'y'
NGINX_MODSECURITY='y' # https://community.centminmod.com/threads/update-prep-for-modsecurity-v3-0.12453/
NGINX_MODSECURITY_MAXMIND='y' # https://community.centminmod.com/th...ix-for-geoip2-conflict-in-123-09beta01.17370/
NGINX_VHOSTSTATS='n' #
NGINX_ZLIBCUSTOM='y' # Use custom zlib instead of system version
NGINX_ZLIBVER='1.2.11' # http://www.zlib.net/ Latest 1.2.11 ZLIB, January 15, 2017
NGINX_ZERODT='y' # enable nginx zero downtime on the fly nginx binary upgrades
AUTOTUNE_CLIENTMAXBODY='y' # auto tune client_max_body_size option in nginx.conf
NGINX_IOURING_PATCH='y' # https://nginx.org/en/docs/http/ngx_http_core_module.html#aio
#####################################################
# PHP
PHP_PGO='y'
STRIPPHP='y' # set 'y' to strip PHP binary to reduce size
PHP_INSTALL='y' # Install PHP /w Fast Process Manager
PHP_MEMCACHE='y' # memcache PHP extension
PHP_PATCH='y' # Apply PHP patches if they exist
PHP_TUNING='y' # initial php-fpm install auto tuning
PHP_BROTLI='y' # brotli php extension https://github.com/kjdev/php-ext-brotli
PHP_LZFOUR='y' # lz4 php extension https://github.com/kjdev/php-ext-lz4
PHP_LZF='y' # lzf php extension https://github.com/php/pecl-file_formats-lzf php-ext-lzf
PHP_ZSTD='y' # zstd php extension https://github.com/kjdev/php-ext-zstd
PHP_CUSTOMSSL='n' # compile php-fpm against openssl 1.0.2+ or libressl 2.3+ whichever nginx uses
PHPFINFO='y' # Disable or Enable PHP File Info extension
PHPPCNTL='y' # Disable or Enable PHP Process Control extension
PHPINTL='y' # Disable or Enable PHP intl extension
PHPRECODE=n # Disable or Enable PHP Recode extension
PHPIMAGICK='y' # Disable or Enable PHP ImagicK extension
#PHPMAKETEST='y' # set to y to enable make test after PHP make for diagnostic purposes
AUTODETECPHP_OVERRIDE='y' # when enabled, php updates will always reinstall all php extensions even if minor php version
#PHPIONCUBE='y' #
MEMCACHED_INSTALL='y' # Install Memcached
PHPREDIS='y' # redis PHP extension install
AUTODETECPHP_OVERRIDE='n' # skip recompiles for minor versions set to'y' when compile to majoir version updates
GCCINTEL_PHP='y' # enable PHP-FPM GCC compiler with Intel cpu optimizations
DEVTOOLSET_PHP='y' # use devtoolset GCC for GCCINTEL_PHP='y'
#####################################################
PUREFTPD_DISABLED='y' # Disable FTP
#####################################################
# Open SSL
DISABLE_TLSONEZERO_PROTOCOL='y' # disable TLS 1.0 protocol by default industry is moving to deprecate for security
NOSOURCEOPENSSL='n' # set to 'y' to disable OpenSSL source compile for system default YUM package setup
OPENSSL_TLSONETHREE='y' # whether OpenSSL 1.1.1 builds enable TLSv1.3
#####################################################

ZSTD_LOGROTATE_NGINX='y'
ZSTD_LOGROTATE_PHPFPM='y'
LETSENCRYPT_DETECT='y'
DUALCERTS='y' # dual RSA+ECDSA ssl certs https://centminmod.com/acmetool/
AUDITD_ENABLE='y'

#####################################################
# MariaDB
MARIADB_INSTALLTENTWO='n' # MariaDB 10.2 YUM default install if set to yes
MARIADB_INSTALLTENTHREE='y' # MariaDB 10.3 YUM default install if set to yes
MARIADB_INSTALLTENFOUR='n' # MariaDB 10.4 YUM default install if set to yes
#####################################################
Click to expand...

eva2000 · Jan 5, 2020

steph40 said: ↑
Same for me. Here is my custom_config:
Code:
LETSENCRYPT_DETECT='y'
NGINX_IOURING_PATCH='y'
NGINX_HPACK='y'
NGINX_DYNAMICTLS='y'
PHP_PGO='y'
Click to expand...
what's output for Nginx version
Code (Text):
nginx -V
you can wrap Nginx version output in quote tags

@EckyBrazzz you have NGINX_IOURING_PATCH='y' listed twice in your persistent config file, so if you only set 1st instance to = n, then it would of still been detected as y due to latter instance so would of inserted aio on directive setting

EckyBrazzz · Jan 5, 2020

eva2000 said: ↑

NGINX_IOURING_PATCH='y'
Click to expand...

Again twice? lol Thanks. Remove one of them. Did it sleepwalking I think..... Think I did it twice to be sure it worked...
Here is the config of this server

nginx -V
nginx version: nginx/1.17.7 (030120-190928-centos7-2f339d2)
built by gcc 8.3.1 20190311 (Red Hat 8.3.1-3) (GCC)
built with OpenSSL 1.1.1d 10 Sep 2019
TLS SNI support enabled
configure arguments: --with-ld-opt='-Wl,-E -L/usr/local/zlib-cf/lib -L/usr/local/lib -ljemalloc -lpcre -Wl,-z,relro -Wl,-rpath,/usr/local/zlib-cf/lib:/usr/local/lib -flto=12 -fuse-ld=gold' --with-cc-opt='-I/usr/local/zlib-cf/include -I/usr/local/include -m64 -march=native -DTCP_FASTOPEN=23 -g -O3 -Wno-error=strict-aliasing -fstack-protector-strong -flto=12 -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wimplicit-fallthrough=0 -fcode-hoisting -Wp,-D_FORTIFY_SOURCE=2 -Wno-deprecated-declarations -gsplit-dwarf' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --build=030120-190928-centos7-2f339d2 --with-compat --with-http_stub_status_module --with-http_secure_link_module --with-libatomic --with-http_gzip_static_module --with-file-aio --add-dynamic-module=../ngx_brotli --add-dynamic-module=../ngx_http_geoip2_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.2 --add-module=../ngx_cache_purge-2.5 --add-dynamic-module=../ngx_devel_kit-0.3.0 --add-dynamic-module=../set-misc-nginx-module-0.32 --add-dynamic-module=../echo-nginx-module-0.61 --add-module=../redis2-nginx-module-0.15 --add-module=../ngx_http_redis-0.3.7 --add-dynamic-module=../lua-nginx-module-0.10.15 --add-module=../stream-lua-nginx-module-0.0.7 --add-module=../memc-nginx-module-0.18 --add-module=../srcache-nginx-module-0.31 --add-dynamic-module=../headers-more-nginx-module-0.33 --with-pcre-jit --with-zlib=../zlib-cloudflare-1.3.0 --with-http_ssl_module --with-http_v2_module --with-http_v2_hpack_enc --with-openssl=../openssl-1.1.1d --with-openssl-opt='enable-ec_nistp_64_gcc_128 enable-tls1_3 -fuse-ld=gold' --add-dynamic-module=../ModSecurity-nginx
Click to expand...

steph40 · Jan 5, 2020

[01:58][root@server.parlons.ca ~]# nginx -V
nginx version: nginx/1.17.7 (040120-140926-centos7-kvm-2f339d2)
built by gcc 8.3.1 20190311 (Red Hat 8.3.1-3) (GCC)
built with OpenSSL 1.1.1d 10 Sep 2019
TLS SNI support enabled
configure arguments: --with-ld-opt='-Wl,-E -L/usr/local/zlib-cf/lib -L/usr/local/lib -ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/zlib-cf/lib:/usr/local/lib -flto=6 -fuse-ld=gold' --with-cc-opt='-I/usr/local/zlib-cf/include -I/usr/local/include -m64 -march=native -DTCP_FASTOPEN=23 -g -O3 -Wno-error=strict-aliasing -fstack-protector-strong -flto=6 -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wimplicit-fallthrough=0 -fcode-hoisting -Wno-cast-function-type -Wno-format-extra-args -Wp,-D_FORTIFY_SOURCE=2' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --build=040120-140926-centos7-kvm-2f339d2 --with-compat --with-http_stub_status_module --with-http_secure_link_module --with-libatomic --with-http_gzip_static_module --with-file-aio --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.2 --add-module=../ngx_cache_purge-2.5 --add-dynamic-module=../ngx_devel_kit-0.3.0 --add-dynamic-module=../set-misc-nginx-module-0.32 --add-dynamic-module=../echo-nginx-module-0.61 --add-module=../redis2-nginx-module-0.15 --add-module=../ngx_http_redis-0.3.7 --add-module=../memc-nginx-module-0.18 --add-module=../srcache-nginx-module-0.31 --add-dynamic-module=../headers-more-nginx-module-0.33 --with-pcre-jit --with-zlib=../zlib-cloudflare-1.3.0 --with-http_ssl_module --with-http_v2_module --with-http_v2_hpack_enc --with-openssl=../openssl-1.1.1d --with-openssl-opt='enable-ec_nistp_64_gcc_128 enable-tls1_3 -fuse-ld=gold'
Click to expand...

EckyBrazzz · Jan 5, 2020

@steph40 May I ask you why you use cast-function-type? One say yes, other no. Gnome, bug. I don't know.

steph40 · Jan 6, 2020

EckyBrazzz said: ↑

@steph40 May I ask you why you use cast-function-type? One say yes, other no. Gnome, bug. I don't know.
Click to expand...

No clue, it just installed with centminmod install I guess.

eva2000 · Jan 6, 2020

EckyBrazzz said: ↑

@steph40 May I ask you why you use cast-function-type? One say yes, other no. Gnome, bug. I don't know.
Click to expand...

Centmin Mod determins that for Nginx build routines
steph40 said: ↑
Code:
5.4.7-1.el7.elrepo.x86_64
Code:
5004007000
Click to expand...
everything looks correct to me, remove the duplicate aio on entry and then try recompile nginx via centmin.sh menu option 4 again and see if it happens again

Nik · Feb 11, 2020

I can confirm this duplicate also. I did centmin install, add wp site, upgrade kernel, recompile nginx,php, found the dupe in nginx.conf. No biggie commented it out.

EckyBrazzz · Feb 20, 2020

Again, the same, manually deleted from nginx.conf.

If I did not have an online monitor, all my sites where offline until now because of this. And checked, no double NGINX_IOURING_PATCH='y' in the custom_config.inc

Code (Text):

Feb 20 12:42:10 <<SNIPPED>> systemd[1]: Starting SYSV: Nginx is an HTTP(S) server, HTTP(S) reverse proxy and IMAP/POP3 proxy server...
Feb 20 12:42:10 <<SNIPPED>> nginx[26043]: Starting nginx: nginx: [emerg] "aio" directive is duplicate in /usr/local/nginx/conf/nginx.conf:117
Feb 20 12:42:10 <<SNIPPED>> nginx[26043]: [FAILED]
Feb 20 12:42:10 <<SNIPPED>> systemd[1]: nginx.service: control process exited, code=exited status=1
Feb 20 12:42:10 <<SNIPPED>> systemd[1]: Failed to start SYSV: Nginx is an HTTP(S) server, HTTP(S) reverse proxy and IMAP/POP3 proxy server.
Feb 20 12:42:10 <<SNIPPED>> systemd[1]: Unit nginx.service entered failed state.
Feb 20 12:42:10 <<SNIPPED>> systemd[1]: nginx.service failed.
[12:43][root@<<SNIPPED>> ~]# nano /usr/local/nginx/conf/nginx.conf
[12:43][root@<<SNIPPED>> ~]# nprestart
Restarting nginx (via systemctl):                          [  OK  ]
Restarting php-fpm (via systemctl) [  OK  ]

eva2000 · Feb 20, 2020

probably best to set NGINX_IOURING_PATCH='n' for now until I have time to investigate

EckyBrazzz · Feb 21, 2020

Nik said: ↑

No biggie commented it out.
Click to expand...

Guess I stay with @Nik solution for now.

Also, I had to kill -9 process# in another screen to finish the recompile.

buik · Feb 22, 2020

Had the same, but I thought of a personal error, so removed the double entry and kept no logs. @eva Thanks for looking after it.

eva2000 · Feb 22, 2020

buik said: ↑

Had the same, but I thought of a personal error, so removed the double entry and kept no logs. @eva Thanks for looking after it.
Click to expand...

just tested and can't reproduce on my end, i only get a single aio on; instance

when you get duplicate aio on; instances, post contents of your /usr/local/nginx/conf/nginx.conf
Code (Text):
cat -n /usr/local/nginx/conf/nginx.conf
for posting code or output from commands to keep the formatting, you might want to use CODE tags for code How to use forum BBCODE code tags

Log in / Register

Forums

Want more timely Centmin Mod News Updates?

Upgrade Nginx Nginx recompile again twice aio on;

EckyBrazzz Active Member

eva2000 Administrator Staff Member

steph40 Member

eva2000 Administrator Staff Member

steph40 Member

EckyBrazzz Active Member

eva2000 Administrator Staff Member

EckyBrazzz Active Member

steph40 Member

EckyBrazzz Active Member

steph40 Member

eva2000 Administrator Staff Member

Nik Member

EckyBrazzz Active Member

eva2000 Administrator Staff Member

EckyBrazzz Active Member

buik “The best traveler is one without a camera.”

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Want more timely Centmin Mod News Updates?

Upgrade Nginx Nginx recompile again twice aio on;

EckyBrazzz Active Member

eva2000 Administrator Staff Member

steph40 Member

eva2000 Administrator Staff Member

steph40 Member

EckyBrazzz Active Member

eva2000 Administrator Staff Member

EckyBrazzz Active Member

steph40 Member

EckyBrazzz Active Member

steph40 Member

eva2000 Administrator Staff Member

Nik Member

EckyBrazzz Active Member

eva2000 Administrator Staff Member

EckyBrazzz Active Member

buik “The best traveler is one without a camera.”

eva2000 Administrator Staff Member

.