search

ndigitals / ols-dockerfiles

Unofficial build of OpenLiteSpeed, High Performance, HTTP/3 supported, ready to use on arm64.
MIT License
6 stars 2 forks source link

openlitespeed 1.7.19-lsphp83 start the service wrong, Failed to init SSL Session Id Cache #172

Open shakugan0shana opened 1 month ago

shakugan0shana commented 1 month ago

I run the command:

/usr/local/lsws/bin/lswsctrl start

get the output :

[OK] litespeed: pid=348.
[OK] litespeed: pid=370.

the error log is below

2024-06-05 11:00:27.839707 [INFO] [config:server:basics] httpdWorkers: 8, Num of Processors: 8
2024-06-05 11:00:27.839738 [INFO] [config:server:basics] enableLVE: 0
2024-06-05 11:00:27.839744 [INFO] [config:server:basics] bubbleWrap: 0, cmd: '(null)'
2024-06-05 11:00:27.845425 [INFO] [PlainConf] [httpServerConfig:] start parsing file /usr/local/lsws/conf/httpd_config.conf
2024-06-05 11:00:27.845434 [INFO] [PlainConf] [httpServerConfig:] Finished parsing file /usr/local/lsws/conf/httpd_config.conf
2024-06-05 11:00:27.845438 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [checkprivatecache 1]
2024-06-05 11:00:27.845441 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [checkpubliccache 1]
2024-06-05 11:00:27.845444 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [maxcacheobjsize 10000000]
2024-06-05 11:00:27.845448 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [maxstaleage 200]
2024-06-05 11:00:27.845451 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [qscache 1]
2024-06-05 11:00:27.845454 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [reqcookiecache 1]
2024-06-05 11:00:27.845457 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [respcookiecache 1]
2024-06-05 11:00:27.845460 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [ignorereqcachectrl 1]
2024-06-05 11:00:27.845463 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [ignorerespcachectrl 0]
2024-06-05 11:00:27.845466 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [enablecache 0]
2024-06-05 11:00:27.845469 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [expireinseconds 3600]
2024-06-05 11:00:27.845472 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [enableprivatecache 0]
2024-06-05 11:00:27.845475 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [privateexpireinseconds 3600]
2024-06-05 11:00:27.845480 [NOTICE] Loading LiteSpeed/1.7.19 Open (lsquic 3.3.2, modgzip 1.1, cache 1.64, mod_security 1.4 (with libmodsecurity v3.0.11)) BUILD (built: Thu Mar 28 14:44:42 UTC 2024) ...
2024-06-05 11:00:27.845485 [NOTICE] Using [BoringSSL]
2024-06-05 11:00:27.846200 [NOTICE] [ADMIN] server socket: uds://usr/local/lsws/admin/tmp/admin.sock.7405, fd 6.
2024-06-05 11:00:27.846270 [NOTICE] [348] chroot is disabled.
2024-06-05 11:00:27.846279 [INFO] [348] old priority: 0, new priority: 0
2024-06-05 11:00:27.846365 [INFO] [348] [config:server:basics2] For better obscurity, server version number is hidden in the response header.
2024-06-05 11:00:27.847194 [INFO] [348] setuid is allowed in Ext Apps
2024-06-05 11:00:27.847435 [NOTICE] [348] [PID: 348]: forked cgid: 352
2024-06-05 11:00:27.847641 [INFO] [348] Add QUIC.cloud IPs from admin/conf/quic-cloud-ips to trusted ACL ...
2024-06-05 11:00:27.847737 [INFO] [348] Add CloudFlare Subnets to trusted ACL ...
2024-06-05 11:00:27.847772 [INFO] [348] [PlainConf] [adminConfig:] start parsing file /usr/local/lsws/admin/conf/admin_config.conf
2024-06-05 11:00:27.847922 [INFO] [348] [PlainConf] [adminConfig:] Finished parsing file /usr/local/lsws/admin/conf/admin_config.conf
2024-06-05 11:00:27.848393 [WARN] [348] Failed to init SSL Session Id Cache
2024-06-05 11:00:30.857728 [INFO] [config:server:basics] httpdWorkers: 8, Num of Processors: 8
2024-06-05 11:00:30.857750 [INFO] [config:server:basics] enableLVE: 0
2024-06-05 11:00:30.857755 [INFO] [config:server:basics] bubbleWrap: 0, cmd: '(null)'
2024-06-05 11:00:30.863512 [INFO] [PlainConf] [httpServerConfig:] start parsing file /usr/local/lsws/conf/httpd_config.conf
2024-06-05 11:00:30.863521 [INFO] [PlainConf] [httpServerConfig:] Finished parsing file /usr/local/lsws/conf/httpd_config.conf
2024-06-05 11:00:30.863525 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [checkprivatecache 1]
2024-06-05 11:00:30.863528 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [checkpubliccache 1]
2024-06-05 11:00:30.863531 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [maxcacheobjsize 10000000]
2024-06-05 11:00:30.863537 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [maxstaleage 200]
2024-06-05 11:00:30.863541 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [qscache 1]
2024-06-05 11:00:30.863544 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [reqcookiecache 1]
2024-06-05 11:00:30.863547 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [respcookiecache 1]
2024-06-05 11:00:30.863550 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [ignorereqcachectrl 1]
2024-06-05 11:00:30.863553 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [ignorerespcachectrl 0]
2024-06-05 11:00:30.863556 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [enablecache 0]
2024-06-05 11:00:30.863559 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [expireinseconds 3600]
2024-06-05 11:00:30.863562 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [enableprivatecache 0]
2024-06-05 11:00:30.863565 [INFO] [PlainConf] [httpServerConfig:] module [cache] add param [privateexpireinseconds 3600]
2024-06-05 11:00:30.863570 [NOTICE] Loading LiteSpeed/1.7.19 Open (lsquic 3.3.2, modgzip 1.1, cache 1.64, mod_security 1.4 (with libmodsecurity v3.0.11)) BUILD (built: Thu Mar 28 14:44:42 UTC 2024) ...
2024-06-05 11:00:30.863576 [NOTICE] Using [BoringSSL]
2024-06-05 11:00:30.864286 [NOTICE] [ADMIN] server socket: uds://usr/local/lsws/admin/tmp/admin.sock.7409, fd 6.
2024-06-05 11:00:30.864360 [NOTICE] [370] chroot is disabled.
2024-06-05 11:00:30.864369 [INFO] [370] old priority: 0, new priority: 0
2024-06-05 11:00:30.864457 [INFO] [370] [config:server:basics2] For better obscurity, server version number is hidden in the response header.
2024-06-05 11:00:30.865304 [INFO] [370] setuid is allowed in Ext Apps
2024-06-05 11:00:30.865524 [NOTICE] [370] [PID: 370]: forked cgid: 372
2024-06-05 11:00:30.865726 [INFO] [370] Add QUIC.cloud IPs from admin/conf/quic-cloud-ips to trusted ACL ...
2024-06-05 11:00:30.865824 [INFO] [370] Add CloudFlare Subnets to trusted ACL ...
2024-06-05 11:00:30.865861 [INFO] [370] [PlainConf] [adminConfig:] start parsing file /usr/local/lsws/admin/conf/admin_config.conf
2024-06-05 11:00:30.866010 [INFO] [370] [PlainConf] [adminConfig:] Finished parsing file /usr/local/lsws/admin/conf/admin_config.conf
2024-06-05 11:00:30.866458 [WARN] [370] Failed to init SSL Session Id Cache

after I delete SSL.lock, it still not work

rm -rf /dev/shm/ols
timnolte commented 1 month ago

Is there is specific reason you are manually running the service and not letting the entrypoint just run? The entrypoint.sh script also performs some configuration copy steps. If you are overriding the entrypoint on your container startup then this is more likely the problem. I don't see that SSL error in my own running instance.

shakugan0shana commented 4 weeks ago

@timnolte I do not overriding the entrypoint and do not change anything to the docker image。I am run the docker in centos 8 which cpu type is Ampere。Otherwise，in other environment，I run the openlitespeed binary which download from offical website，get the same error in aarch64。 Possiblely，it is a problem by openlitespeed itself，I find the same error in the forums。 Here is the link： https://forum.openlitespeed.org/threads/failed-to-init-ssl-session-id-cache.6002/ I guess in arm，it has some hidden issues to be solved

timnolte commented 4 weeks ago

So, interesting. I'm no longer building OLS from source as I originally started doing, there wasn't arm64 binaries when I started. I started having issues with building from source and then the arm64 binaries became available and that is what I began using to build the Docker image.

Have you tried to use an older tagged image? I'm wondering if we can pinpoint if it started with a specific OLS release.