Upgrade No Input File Specified - Logs?

Fair warning, noob question ahead!

I just upgraded nginx (to 1.9.7) and php-fpm (to 5.6.15) on our dev server (running v1.2.3-eva2000.08) and now I'm seeing intermittent no input file specified errors. Last time this happened @Matt fixed it, but I'd like to learn how to track it down and fix it on my own. Is there a log file I can reference, or somewhere else I can find clues as to what could be causing it?

 

Yep, in the browser, forum_list. We have a chatbox which refreshes, so if I leave a window open it'll pop up eventually. It's also happened a few times in the admin panel.

 

Great, this gives me something to go on. Are there no log files that would indicate what exactly might be causing it?

Edit: Yep, XF.

 

I just updated the permissions, so we'll see if that fixes it

 

I really appreciate how thoroughly you document everything

 

Yep, looks like it's a permission issue.

2015/12/01 14:02:19 [error] 22539#22539: *2236 FastCGI sent in stderr: "Unable to open primary script: /home/xenforo/index.php (Operation not permitted)"

Upon inspection it looks like they're all over the map

Hope this fixed it

 

I actually took that out for security (I'm a little paranoid)

 

Hmm, I guess that didn't fix it. I just verified all folders are 0755 and all files are 0644 (except data and internal_data at 0777). I've also made sure the basedir line is commented out in php.conf (and verified with phpinfo).

Code:

2015/12/01 16:17:03 [error] 22539#22539: *2940 FastCGI sent in stderr: "Unable to open primary script: /home/nginx/domains/domain.com/public/xenforo/admin.php (Operation not permitted)" while reading response header from upstream, client: x.x.x.x, server: domain.com, request: "GET /xenforo/admin.php?styles/style1.14/export&&_xfRequestUri=%2Fxenforo%2Fadmin.php%3Fstyles%2F&_xfNoRedirect=1&_xfToken=1%2C1449015414%2_xfResponseType=json HTTP/2.0", upstream: "fastcgi://127.0.0.1:9000", host: "domain.com", referrer: "https://domain.com/xenforo/admin.php?styles/"

 

I just noticed it looks like some of this stuff may be doubled up.

Code:

# Centmin Mod Getting Started Guide
# must read http://centminmod.com/getstarted.html

# redirect from non-www to www
# uncomment, save file and restart Nginx to enable
# if unsure use return 302 before using return 301
server {
            listen 80;
            server_name domain.com;
            return 301 https://$server_name$request_uri;
       }

# HTTPS www redirect
#server {
#        listen 443 ssl http2;
#        ssl on;
#        ssl_dhparm             /usr/local/nginx/conf/ssl/domain.com/dhparm.pem;
#        ssl_certificate        /usr/local/nginx/conf/ssl/domain.com/domain.com.crt;
#        ssl_certificate_key    /usr/local/nginx/conf/ssl/domain.com/domain.com.key;
#        include                /usr/local/nginx/conf/ssl.conf;
#        server_name            domain.com;
#        return 301 https://domain.com$request_uri;
# }

server {

        listen          443 reuseport ssl http2;
        server_name     domain.com;
        keepalive_timeout       30;

        ssl                     on;
        ssl_certificate         /usr/local/nginx/conf/ssl/domain.com/domain.com.crt;
        ssl_certificate_key     /usr/local/nginx/conf/ssl/domain.com/domain.com.key;
        include                 /usr/local/nginx/conf/ssl.conf;

        location /xenforo/ {
                try_files $uri $uri/ /xenforo/index.php?$uri&$args;
                index index.php index.html;
                auth_basic           "Restricted";
                auth_basic_user_file /usr/local/nginx/conf/htpasswd;
        }

        location /xenforo/internal_data/ {
                internal;
        }

        location /xenforo/library/ {
                internal;
        }

        location /data/chat {
                open_file_cache off;
        }

        # ngx_pagespeed & ngx_pagespeed handler
        #include /usr/local/nginx/conf/pagespeed.conf;
        #include /usr/local/nginx/conf/pagespeedhandler.conf;
        #include /usr/local/nginx/conf/pagespeedstatslog.conf;

        # limit_conn limit_per_ip 16;
        # ssi  on;
        ssl_certificate         /usr/local/nginx/conf/ssl/domain.com/domain.com.crt;
        ssl_certificate_key     /usr/local/nginx/conf/ssl/domain.com/domain.com.key;
        include                 /usr/local/nginx/conf/ssl.conf;

        location /xenforo/ {
                try_files $uri $uri/ /xenforo/index.php?$uri&$args;
                index index.php index.html;
                auth_basic           "Restricted";
                auth_basic_user_file /usr/local/nginx/conf/htpasswd;
        }

        location /xenforo/internal_data/ {
                internal;
        }

        location /xenforo/library/ {
                internal;
        }

        location /data/chat {
                open_file_cache off;
        }

        # ngx_pagespeed & ngx_pagespeed handler
        #include /usr/local/nginx/conf/pagespeed.conf;
        #include /usr/local/nginx/conf/pagespeedhandler.conf;
        #include /usr/local/nginx/conf/pagespeedstatslog.conf;

        # limit_conn limit_per_ip 16;
        # ssi  on;

        access_log /home/nginx/domains/domain.com/log/access.log combined buffer=256k flush=60m;
        error_log /home/nginx/domains/domain.com/log/error.log;

        root /home/nginx/domains/domain.com/public;

        # prevent access to ./directories and files
        location ~ (?:^|/)\. {
                deny all;
        }

        location / {

        # block common exploits, sql injections etc
        #include /usr/local/nginx/conf/block.conf;

        # Enables directory listings when index file not found
        #autoindex  on;

        # Shows file listing times as local time
        #autoindex_localtime on;

        # Enable for vBulletin usage WITHOUT vbSEO installed
        # More example Nginx vhost configurations at
        # http://centminmod.com/nginx_configure.html
        #try_files    $uri $uri/ /index.php;

        }

        include /usr/local/nginx/conf/staticfiles.conf;
        include /usr/local/nginx/conf/php.conf;
        include /usr/local/nginx/conf/drop.conf;
        #include /usr/local/nginx/conf/errorpage.conf;
        include /usr/local/nginx/conf/vts_server.conf;
}

 

Ah thanks for taking the time to check that out. I'm sure those tips will keep me busy for a few hours tomorrow!

What's the best way to password protect a directory?