FS#69731 - [nextcloud] Webserver displays blank page after switching php-fpm to nextcloud user

Attached to Project: Community Packages
Opened by Jonas Heinrich (onny) - Sunday, 21 February 2021, 18:05 GMT
Last edited by David Runge (dvzrv) - Tuesday, 23 February 2021, 10:31 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Sergej Pupykin (sergej)
David Runge (dvzrv)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Hey,
I created a php-fpm pool according to the Wiki: https://wiki.archlinux.org/index.php/Nextcloud#php-fpm

These are my permissions:

root@http /u/s/w/nextcloud [1]# namei -l /usr/share/webapps/nextcloud/index.php
f: /usr/share/webapps/nextcloud/index.php
drwxr-xr-x root root /
drwxr-xr-x root root usr
drwxr-xr-x root root share
drwxr-xr-x root root webapps
drwxr-x--- nextcloud nextcloud nextcloud
-rw-r--r-- nextcloud nextcloud index.php

root@http /u/s/w/nextcloud# namei -l /usr/share/webapps/nextcloud/config/config.php
f: /usr/share/webapps/nextcloud/config/config.php
drwxr-xr-x root root /
drwxr-xr-x root root usr
drwxr-xr-x root root share
drwxr-xr-x root root webapps
drwxr-x--- nextcloud nextcloud nextcloud
lrwxrwxrwx nextcloud nextcloud config -> /etc/webapps/nextcloud/config
drwxr-xr-x root root /
drwxr-xr-x root root etc
drwxr-xr-x root root webapps
drwxr-xr-x root root nextcloud
drwxr-xr-x nextcloud nextcloud config
-rw-r----- nextcloud nextcloud config.php

root@http /u/s/w/nextcloud# namei -l /var/lib/nextcloud/data/nextcloud.log
f: /var/lib/nextcloud/data/nextcloud.log
drwxr-xr-x root root /
drwxr-xr-x root root var
drwxr-xr-x root root lib
drwxr-xr-x nextcloud nextcloud nextcloud
drwxrwx--- nextcloud nextcloud data
-rw-r----- nextcloud nextcloud nextcloud.log

My web server Caddy is logging following when trying to access /:

MYIP - - [21/Feb/2021:18:01:06 +0000] "GET / HTTP/2.0" 404 0

Whereas for /index.php it is logging a "forbidden" but seems to redirect somehow:

MYIP - - [21/Feb/2021:18:01:48 +0000] "GET /login HTTP/2.0" 403 0

This is the web server configuration for Caddy 2 I'm using: https://git.project-insanity.org/-/snippets/81
This worked before switching manually to the nextcloud user.

Any help welcome ;)

Regards
Jonas
This task depends upon

Closed by  David Runge (dvzrv)
Tuesday, 23 February 2021, 10:31 GMT
Reason for closing:  Not a bug
Additional comments about closing:  User manually modified directories owned by package.
Comment by David Runge (dvzrv) - Sunday, 21 February 2021, 20:46 GMT
@onny: Thanks for the report.

I'm sorry, but I don't have any experience with caddy unfortunately.
I was successful with php-fpm (see the attached pool config in this comment [1]) and nginx (I mainly followed the upstream example [2]).

Is your TLS connection/setup working properly? I realized, that without TLS (for testing purposes), nextcloud just attempts a redirect on its own which leads nowhere.

[1] https://bugs.archlinux.org/task/69718#comment196955
[2] https://docs.nextcloud.com/server/20/admin_manual/installation/nginx.html#nextcloud-in-the-webroot-of-nginx
Comment by Larry Meyer (ljflyaway82) - Monday, 22 February 2021, 18:10 GMT
usr/share/webapps/nextcloud and all its subdirectories should be owned by root. (I believe the guide says this).
My permissions are also 755
Comment by Jonas Heinrich (onny) - Tuesday, 23 February 2021, 09:36 GMT
@lijflyaway82 That was the fix, thanks for the answer!
Comment by David Runge (dvzrv) - Tuesday, 23 February 2021, 10:30 GMT
@onny: If @lijflyaway82's comment [1] indeed fixed this for you, then this means you have manually modified your directories below /usr/share/webapps/nextcloud/.
Nextcloud >= 21.0.0-6 explicitely fixes any (dangling) directory permissions below /usr/share/webapps/nextcloud/ [2].

Please make sure to mention *any modifications* that you do on top of the package next time, as it is otherwise really hard to figure out what is going on and has people running in the wrong direction.

[1] https://bugs.archlinux.org/task/69731#comment197016
[2] https://github.com/archlinux/svntogit-community/commit/7d2072a2f0323551f1f354ca64f6b45a5ae71681#diff-3e341d2d9c67be01819b25b25d5e53ea3cdf3a38d28846cda85a195eb9b7203a

Loading...