Nginx Nginx upgrade problem

dce · Jun 14, 2020

brijendrasial said: ↑

I am attaching another error thrown

https://gist.githubusercontent.com/Brijendrasial/73356b85aafa2a5c3a3799f4bc60970e/raw/8ed43e243205f02f4f6955e245cc3adb31c89547/error%20log%20centminmod%20nginx
Click to expand...

Make error. So the libatomic_ops library tweak by itself in not enough for a successful compile in your case?

dce · Jun 14, 2020

eva2000 said: ↑
no idea why all my servers don't need the path defined but while i am at it, decided to build a newer libatomic_ops custom RPM = 7.6.10 instead of CentOS 7 default 7.2d which is 6+ yrs older that you can try

install it
Code (Text):
wget -4 https://centminmod.com/centminmodparts/libatomic_ops/centmin-libatomic_ops-7.6.10-1.el7.x86_64.rpm -O /svr-setup/centmin-libatomic_ops-7.6.10-1.el7.x86_64.rpm
yum -y localinstall /svr-setup/centmin-libatomic_ops-7.6.10-1.el7.x86_64.rpm
then try centmin.sh menu option 4
Click to expand...
Thanks a bunch eva2000. I will try tonight. I will report back the results. We will see if f I also get the new error that brijendrasial has recently reported on.

dce · Jun 14, 2020

eva2000 said: ↑
log not revealing much, try changing persistent config file

from
Code (Text):
CLANG='n'
DEVTOOLSETSIX='y'
NGINX_DEVTOOLSETGCC='y'
ORESTY_LUANGINX='y'
NGXDYNAMIC_LUA='y'
NGXDYNAMIC_DEVELKIT='y'
NGINX_HPACK='y'
CLOUDFLARE_ZLIB='y'
LIBRESSL_SWITCH='n'
NGXDYNAMIC_NGXPAGESPEED='y'
NGINX_PAGESPEED='y'
MARCH_TARGETNATIVE='n'
LETSENCRYPT_DETECT='y'
AUDITD_ENABLE='y'
PUREFTPD_DISABLED=y
to
Code (Text):
#ORESTY_LUANGINX='y'
#NGXDYNAMIC_LUA='y'
#NGINX_HPACK='y'
#NGXDYNAMIC_NGXPAGESPEED='y'
#NGINX_PAGESPEED='y'
MARCH_TARGETNATIVE='n'
LETSENCRYPT_DETECT='y'
AUDITD_ENABLE='y'
PUREFTPD_DISABLED=y
and then run centmin.sh menu option 4
Click to expand...
Thanks eva2000. I use pagespeed. I am assuming I comment out the entries you indicate, compile and then individually re-enable and re-compile for each one in a process of elimation?

I will try the newer libatomic_ops tweak you supplied first and get back to you tonight.

Regards,

eva2000 · Jun 14, 2020

brijendrasial said: ↑

I am attaching another error thrown

https://gist.githubusercontent.com/Brijendrasial/73356b85aafa2a5c3a3799f4bc60970e/raw/8ed43e243205f02f4f6955e245cc3adb31c89547/error%20log%20centminmod%20nginx
Click to expand...

noticed your configure parameters as

./configure --with-ld-opt="-Wl,-E -L/usr/local/lib -ljemalloc -lpcre -Wl,-z,relro -Wl,-rpath,/usr/local/lib -flto=2 -fuse-ld=gold" --with-cc-opt="-I/usr/local/include -m64 -march=x86-64 -DTCP_FASTOPEN=23 -g -O3 -Wno-error=strict-aliasing -fstack-protector-strong -flto=2 -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wimplicit-fallthrough=0 -fcode-hoisting -Wno-cast-function-type -Wno-format-extra-args -Wp,-D_FORTIFY_SOURCE=2" --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --build=130620-135637-centos7-kvm-6cb7a97 --with-compat --with-http_stub_status_module --with-http_secure_link_module --with-libatomic=/usr/lib64 --with-http_gzip_static_module --add-dynamic-module=../incubator-pagespeed-ngx-1.13.35.2-stable --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.2 --add-module=../ngx_cache_purge-2.5 --add-dynamic-module=../ngx_devel_kit-0.3.0 --add-dynamic-module=../set-misc-nginx-module-0.32 --add-dynamic-module=../echo-nginx-module-0.61 --add-module=../redis2-nginx-module-0.15 --add-module=../ngx_http_redis-0.3.7 --add-dynamic-module=../lua-nginx-module-0.10.16rc5 --add-module=../stream-lua-nginx-module-0.0.8rc3 --add-module=../memc-nginx-module-0.18 --add-module=../srcache-nginx-module-0.32rc1 --add-dynamic-module=../headers-more-nginx-module-0.33 --with-pcre-jit --with-zlib=../zlib-1.2.11 --with-http_ssl_module --with-http_v2_module --with-http_v2_hpack_enc --with-openssl=../openssl-1.1.1g --with-openssl-opt="enable-ec_nistp_64_gcc_128 enable-tls1_3 -fuse-ld=gold"
Click to expand...

you're not using cloudflare zlib maybe because your server doesn't support sse4.2 cpu instructions and/or web server motherboard bios having AES-NI disabled ? I added a check for this Beta Branch - additional nginx & php-fpm Cloudflare zlib library prechecks which would force cloudflare zlib to switch to system zlib which you have in your configure paramters

what is output for
Code (Text):
lscpu
try reverting --with-libatomic=/usr/lib64 back to just --with-libatomic and also try nginx 1.19.0

just tried on a fresh KVM VPS install with persistent config file as
Code (Text):
NGXDYNAMIC_BROTLI='y'
NGINX_LIBBROTLI='y'
NGXDYNAMIC_NGXPAGESPEED='y'
NGINX_PAGESPEED='y'
and it worked

nginx -V
nginx version: nginx/1.19.0 (130620-230947-centos7-kvm-814d8fa-br-25f86f0)
built by gcc 8.3.1 20190311 (Red Hat 8.3.1-3) (GCC)
built with OpenSSL 1.1.1g 21 Apr 2020
TLS SNI support enabled
configure arguments: --with-ld-opt='-Wl,-E -L/usr/local/zlib-cf/lib -L/usr/local/lib -ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/zlib-cf/lib:/usr/local/lib -flto=1 -fuse-ld=gold' --with-cc-opt='-I/usr/local/zlib-cf/include -I/usr/local/include -m64 -march=native -DTCP_FASTOPEN=23 -g -O3 -fstack-protector-strong -flto=1 -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wimplicit-fallthrough=0 -fcode-hoisting -Wno-cast-function-type -Wno-format-extra-args -Wp,-D_FORTIFY_SOURCE=2 -Wno-deprecated-declarations' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --build=130620-230947-centos7-kvm-814d8fa-br-25f86f0 --with-compat --with-http_stub_status_module --with-http_secure_link_module --with-libatomic --with-http_gzip_static_module --add-dynamic-module=../ngx_brotli --add-dynamic-module=../incubator-pagespeed-ngx-1.13.35.2-stable --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.2 --add-module=../ngx_cache_purge-2.5 --add-dynamic-module=../ngx_devel_kit-0.3.0 --add-dynamic-module=../set-misc-nginx-module-0.32 --add-dynamic-module=../echo-nginx-module-0.61 --add-module=../redis2-nginx-module-0.15 --add-module=../ngx_http_redis-0.3.7 --add-module=../memc-nginx-module-0.18 --add-module=../srcache-nginx-module-0.32rc1 --add-dynamic-module=../headers-more-nginx-module-0.33 --with-pcre-jit --with-zlib=../zlib-cloudflare-1.3.0 --with-http_ssl_module --with-http_v2_module --with-openssl=../openssl-1.1.1g --with-openssl-opt='enable-ec_nistp_64_gcc_128 enable-tls1_3 -fuse-ld=gold'
Click to expand...

also tested fine with Nginx 1.18.0

nginx -V
nginx version: nginx/1.18.0 (130620-232551-centos7-kvm-814d8fa-br-25f86f0)
built by gcc 8.3.1 20190311 (Red Hat 8.3.1-3) (GCC)
built with OpenSSL 1.1.1g 21 Apr 2020
TLS SNI support enabled
configure arguments: --with-ld-opt='-Wl,-E -L/usr/local/zlib-cf/lib -L/usr/local/lib -ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/zlib-cf/lib:/usr/local/lib -flto=1 -fuse-ld=gold' --with-cc-opt='-I/usr/local/zlib-cf/include -I/usr/local/include -m64 -march=native -DTCP_FASTOPEN=23 -g -O3 -fstack-protector-strong -flto=1 -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wimplicit-fallthrough=0 -fcode-hoisting -Wno-cast-function-type -Wno-format-extra-args -Wp,-D_FORTIFY_SOURCE=2 -Wno-deprecated-declarations' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --build=130620-232551-centos7-kvm-814d8fa-br-25f86f0 --with-compat --with-http_stub_status_module --with-http_secure_link_module --with-libatomic --with-http_gzip_static_module --add-dynamic-module=../ngx_brotli --add-dynamic-module=../incubator-pagespeed-ngx-1.13.35.2-stable --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.2 --add-module=../ngx_cache_purge-2.5 --add-dynamic-module=../ngx_devel_kit-0.3.0 --add-dynamic-module=../set-misc-nginx-module-0.32 --add-dynamic-module=../echo-nginx-module-0.61 --add-module=../redis2-nginx-module-0.15 --add-module=../ngx_http_redis-0.3.7 --add-module=../memc-nginx-module-0.18 --add-module=../srcache-nginx-module-0.32rc1 --add-dynamic-module=../headers-more-nginx-module-0.33 --with-pcre-jit --with-zlib=../zlib-cloudflare-1.3.0 --with-http_ssl_module --with-http_v2_module --with-openssl=../openssl-1.1.1g --with-openssl-opt='enable-ec_nistp_64_gcc_128 enable-tls1_3 -fuse-ld=gold'
Click to expand...

using VPS with Intel Xeon E5-2643v1 Sandy Bridge processor with AES-NI and SSE4.2 support
Code (Text):
lscpu
Architecture:          x86_64
CPU op-mode(s):        32-bit, 64-bit
Byte Order:            Little Endian
CPU(s):                1
On-line CPU(s) list:   0
Thread(s) per core:    1
Core(s) per socket:    1
Socket(s):             1
NUMA node(s):          1
Vendor ID:             GenuineIntel
CPU family:            6
Model:                 45
Model name:            Intel(R) Xeon(R) CPU E5-2643 0 @ 3.30GHz
Stepping:              7
CPU MHz:               3299.998
BogoMIPS:              6599.99
Hypervisor vendor:     KVM
Virtualization type:   full
L1d cache:             32K
L1i cache:             32K
L2 cache:              4096K
NUMA node0 CPU(s):     0
Flags:                 fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss syscall nx pdpe1gb rdtscp lm constant_tsc arch_perfmon rep_good nopl xtopology eagerfpu pni pclmulqdq ssse3 cx16 pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx hypervisor lahf_lm tsc_adjust xsaveopt arat

dce · Jun 14, 2020

eva2000 said: ↑
noticed your configure parameters as

you're not using cloudflare zlib maybe because your server doesn't support sse4.2 cpu instructions and/or web server motherboard bios having AES-NI disabled ? I added a check for this Beta Branch - additional nginx & php-fpm Cloudflare zlib library prechecks which would force cloudflare zlib to switch to system zlib which you have in your configure paramters

what is output for
Code (Text):
lscpu
try reverting --with-libatomic=/usr/lib64 back to just --with-libatomic and also try nginx 1.19.0

just tried on a fresh KVM VPS install with persistent config file as
Code (Text):
NGXDYNAMIC_BROTLI='y'
NGINX_LIBBROTLI='y'
NGXDYNAMIC_NGXPAGESPEED='y'
NGINX_PAGESPEED='y'
and it worked
Click to expand...
Hey, eva2000, I am about to do some testing on the server in a few hours. Do you want me to try your latest suggestions first?

Basically do not install your custom centmin-libatomic_ops-7.6.10-1.el7.x86_64.rpm - leave the current one as is - and just try an upgrade with your suggest entries in the persistent config file?

eva2000 · Jun 14, 2020

dce said: ↑

Hey, eva2000, I am about to do some testing on the server in a few hours. Do you want me to try your latest suggestions first?

Basically do not install your custom centmin-libatomic_ops-7.6.10-1.el7.x86_64.rpm - leave the current one as is - and just try an upgrade with your suggest entries in the persistent config file?
Click to expand...

custom libatomic_ops rpm is enabled by default with latest 123.09beta01 update at Beta Branch - install newer libatomic_ops library for CentOS 7 64bit in 123.09beta01

so just run cmupdate command and run centmin.sh menu option 4 with your existing persistent config file settings in place first

dce · Jun 15, 2020

Hello eva2000
I updated centminmod and then attempted to upgrade nginx. libatomic library was updated by the centminmod upgrade. Same error.
Code:
yum -q info centmin-libatomic_ops-7.6.10
Installed Packages
Name        : centmin-libatomic_ops
Arch        : x86_64
Version     : 7.6.10
Release     : 1.el7
Size        : 709 k
Repo        : installed
From repo   : /centmin-libatomic_ops-7.6.10-1.el7.x86_64
Summary     : libatomic_ops-7.6.10 for centminmod.com LEMP stack libatomic_ops-7.6.10
URL         : https://centminmod.com
License     : unknown
Description : libatomic_ops-7.6.10 for centminmod.com LEMP stacks
I then directly added the path in inc/nginx_configure.inc (LIBATOMICOPT=" --with-libatomic=/usr/lib64") as brijendrasial mentioned.

The upgrade went further but again failed. The error was the same that brijendrasial reported: make[1]: *** [/usr/lib64/Makefile] Error 127

Here is the error log

centminmod_123.09beta01.b532_140620-223149_nginx_upgrade.log

eva2000 · Jun 15, 2020

don't set --with-libatomic=/usr/lib64 and do centmin.sh menu option 4 run and provide the nginx upgrade log for that run

eva2000 · Jun 15, 2020

Ok seems I am able to reproduce the libatomic_ops not found issue. It's some how related to when Lua Nginx modules are enabled via persistent config variables NGXDYNAMIC_LUA='y' and ORESTY_LUANGINX='y' combined with GCC 8.3.1 devtoolset-8. The Nginx atomic_ops library check routine is prematurely aborted due to GCC 8 warnings for -Werror=pointer-sign which can be ignored but due to default GCC 8 behaviour after too many -Werror=pointer-sign warnings it aborts process, so Nginx atomic_ops library check is not able to find the libatomic_ops library location. CentOS 7 native GCC 4.8.5 didn't support -Werror=pointer-sign checks so would of ignored the warnings. The fix is to tell GCC 8.3.1 compiler not to abort on the warnings by passing the flag -Wno-error=pointer-sign. Not sure why this problem only started to show now as in past been fine.

nginx -V
nginx version: nginx/1.19.0 (150620-054004-centos7-kvm-4e23e84-br-25f86f0)
built by gcc 8.3.1 20190311 (Red Hat 8.3.1-3) (GCC)
built with OpenSSL 1.1.1g 21 Apr 2020
TLS SNI support enabled
configure arguments: --with-ld-opt='-Wl,-E -L/usr/local/zlib-cf/lib -L/usr/local/lib -ljemalloc -lpcre -Wl,-z,relro -Wl,-rpath,/usr/local/zlib-cf/lib:/usr/local/lib -flto=1 -fuse-ld=gold' --with-cc-opt='-I/usr/local/zlib-cf/include -I/usr/local/include -m64 -march=native -DTCP_FASTOPEN=23 -g -O3 -fstack-protector-strong -flto=1 -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wno-error=pointer-sign -Wimplicit-fallthrough=0 -fcode-hoisting -Wno-cast-function-type -Wno-format-extra-args -Wp,-D_FORTIFY_SOURCE=2 -Wno-deprecated-declarations' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --build=150620-054004-centos7-kvm-4e23e84-br-25f86f0 --with-compat --with-http_stub_status_module --with-http_secure_link_module --with-libatomic --with-http_gzip_static_module --add-dynamic-module=../ngx_brotli --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.2 --add-module=../ngx_cache_purge-2.5 --add-dynamic-module=../ngx_devel_kit-0.3.0 --add-dynamic-module=../set-misc-nginx-module-0.32 --add-dynamic-module=../echo-nginx-module-0.61 --add-module=../redis2-nginx-module-0.15 --add-module=../ngx_http_redis-0.3.7 --add-dynamic-module=../lua-nginx-module-0.10.16rc5 --add-module=../stream-lua-nginx-module-0.0.8rc3 --add-module=../memc-nginx-module-0.18 --add-module=../srcache-nginx-module-0.32rc1 --add-dynamic-module=../headers-more-nginx-module-0.33 --with-pcre-jit --with-zlib=../zlib-cloudflare-1.3.0 --with-http_ssl_module --with-http_v2_module --with-openssl=../openssl-1.1.1g --with-openssl-opt='enable-ec_nistp_64_gcc_128 enable-tls1_3 -fuse-ld=gold'
Click to expand...

I've updated Centmin Mod 123.09beta01 with the fix, so you can just run cmupdate and re-run centmin.sh menu option 4

dce · Jun 16, 2020

eva2000 said: ↑

Ok seems I am able to reproduce the libatomic_ops not found issue. It's some how related to when Lua Nginx modules are enabled via persistent config variables NGXDYNAMIC_LUA='y' and ORESTY_LUANGINX='y' combined with GCC 8.3.1 devtoolset-8. The Nginx atomic_ops library check routine is prematurely aborted due to GCC 8 warnings for -Werror=pointer-sign which can be ignored but due to default GCC 8 behaviour after too many -Werror=pointer-sign warnings it aborts process, so Nginx atomic_ops library check is not able to find the libatomic_ops library location. CentOS 7 native GCC 4.8.5 didn't support -Werror=pointer-sign checks so would of ignored the warnings. The fix is to tell GCC 8.3.1 compiler not to abort on the warnings by passing the flag -Wno-error=pointer-sign. Not sure why this problem only started to show now as in past been fine.

I've updated Centmin Mod 123.09beta01 with the fix, so you can just run cmupdate and re-run centmin.sh menu option 4
Click to expand...

Excellent work eva2000.

I will unset --with-libatomic=/usr/lib64, update centminmod and then upgrade nginx as instructed.

Regards,

dce · Jun 16, 2020

eva2000 said: ↑

Ok seems I am able to reproduce the libatomic_ops not found issue. It's some how related to when Lua Nginx modules are enabled via persistent config variables NGXDYNAMIC_LUA='y' and ORESTY_LUANGINX='y' combined with GCC 8.3.1 devtoolset-8. The Nginx atomic_ops library check routine is prematurely aborted due to GCC 8 warnings for -Werror=pointer-sign which can be ignored but due to default GCC 8 behaviour after too many -Werror=pointer-sign warnings it aborts process, so Nginx atomic_ops library check is not able to find the libatomic_ops library location. CentOS 7 native GCC 4.8.5 didn't support -Werror=pointer-sign checks so would of ignored the warnings. The fix is to tell GCC 8.3.1 compiler not to abort on the warnings by passing the flag -Wno-error=pointer-sign. Not sure why this problem only started to show now as in past been fine.

I've updated Centmin Mod 123.09beta01 with the fix, so you can just run cmupdate and re-run centmin.sh menu option 4
Click to expand...

Worked. Nginx update was successful and now I am at version 1.19.0. Again, thank you for taking care of this problem.

eva2000 · Jun 16, 2020

dce said: ↑

Worked. Nginx update was successful and now I am at version 1.19.0. Again, thank you for taking care of this problem.
Click to expand...

Glad to hear - another bug ironed out

Log in / Register

Forums

Join the community today

Nginx Nginx upgrade problem

dce Member

dce Member

dce Member

eva2000 Administrator Staff Member

dce Member

eva2000 Administrator Staff Member

dce Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

dce Member

dce Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Join the community today

Nginx Nginx upgrade problem

dce Member

dce Member

dce Member

eva2000 Administrator Staff Member

dce Member

eva2000 Administrator Staff Member

dce Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

dce Member

dce Member

eva2000 Administrator Staff Member

.