nextcloud / server

☁️ Nextcloud server, a safe home for all your data
https://nextcloud.com
GNU Affero General Public License v3.0
26.95k stars 4.02k forks source link

Installing cms_pico with occ fails with Error: Following symlinks is not allowed #23394

Closed TerryHewitt closed 3 years ago

TerryHewitt commented 3 years ago

Steps to reproduce

sudo -u www-data php occ app:install cms_pico

I raised it on the nextcloud community support, see https://help.nextcloud.com/t/upgrading-pico-cms/94560 there I was asked to report it as bug. There is also much more details, including a workaround.

Expected behaviour

App installs and returns success

Actual behaviour

This is returned by the occ command Error: Following symlinks is not allowed

Server configuration detail

Operating system: Linux 5.4.0-48-generic #52-Ubuntu SMP Thu Sep 10 10:58:49 UTC 2020 x86_64

Webserver: nginx/1.18.0 (fpm-fcgi)

Database: mysql 10.3.22

PHP version:

7.4.3 Modules loaded: Core, date, libxml, openssl, pcre, zlib, filter, hash, Reflection, SPL, session, standard, sodium, cgi-fcgi, mysqlnd, PDO, xml, bcmath, bz2, calendar, ctype, curl, dom, mbstring, FFI, fileinfo, ftp, gd, gettext, gmp, iconv, igbinary, imagick, imap, intl, json, exif, mysqli, pdo_mysql, Phar, posix, readline, redis, shmop, SimpleXML, sockets, sysvmsg, sysvsem, sysvshm, tokenizer, xmlreader, xmlwriter, xsl, zip, Zend OPcache

Nextcloud version: 20.0.0 - 20.0.0.9

Updated from an older Nextcloud/ownCloud or fresh install:

Where did you install Nextcloud from: unknown

Signing status Array ( )
List of activated apps ``` Enabled: - accessibility: 1.6.0 - activity: 2.13.1 - admin_audit: 1.10.0 - analytics: 3.0.0 - appointments: 1.7.8 - calendar: 2.1.2 - camerarawpreviews: 0.7.8 - cloud_federation_api: 1.3.0 - comments: 1.10.0 - contacts: 3.4.0 - contactsinteraction: 1.1.0 - dashboard: 7.0.0 - dav: 1.16.0 - deck: 1.1.0 - federatedfilesharing: 1.10.1 - federation: 1.10.1 - files: 1.15.0 - files_external: 1.11.1 - files_markdown: 2.3.1 - files_mindmap: 0.0.22 - files_pdfviewer: 2.0.1 - files_rightclick: 0.17.0 - files_sharing: 1.12.0 - files_trashbin: 1.10.1 - files_versions: 1.13.0 - files_videoplayer: 1.9.0 - firstrunwizard: 2.9.0 - gpxedit: 0.0.13 - gpxmotion: 0.1.0 - gpxpod: 4.2.3 - issuetemplate: 0.7.0 - logreader: 2.5.0 - lookup_server_connector: 1.8.0 - maps: 0.1.8 - nextcloud_announcements: 1.9.0 - notifications: 2.8.0 - oauth2: 1.8.0 - password_policy: 1.10.1 - phonetrack: 0.6.5 - photos: 1.2.0 - privacy: 1.4.0 - provisioning_api: 1.10.0 - recommendations: 0.8.0 - serverinfo: 1.10.0 - settings: 1.2.0 - sharebymail: 1.10.0 - socialsharing_facebook: 2.1.0 - support: 1.3.0 - survey_client: 1.8.0 - systemtags: 1.10.0 - text: 3.1.0 - theming: 1.11.0 - twofactor_backupcodes: 1.9.0 - updatenotification: 1.10.0 - user_status: 1.0.0 - viewer: 1.4.0 - weather_status: 1.0.0 - workflowengine: 2.2.0 Disabled: - cms_pico - encryption - user_ldap ```
Configuration (config/config.php) ``` { "instanceid": "***REMOVED SENSITIVE VALUE***", "passwordsalt": "***REMOVED SENSITIVE VALUE***", "secret": "***REMOVED SENSITIVE VALUE***", "trusted_domains": [ "localhost", "nextcloud.wthassociates.com", "hewittzfs.duckdns.org", "zfsserver01", "192.168.1.18", "owncloud.wthassociates.com", "nextcloud", "photography.wthassociates.com", "librenms.wthassociates.com" ], "datadirectory": "***REMOVED SENSITIVE VALUE***", "dbtype": "mysql", "version": "20.0.0.9", "dbname": "***REMOVED SENSITIVE VALUE***", "dbhost": "***REMOVED SENSITIVE VALUE***", "dbport": "", "dbuser": "***REMOVED SENSITIVE VALUE***", "dbpassword": "***REMOVED SENSITIVE VALUE***", "installed": true, "theme": "", "memcache.local": "\\OC\\Memcache\\Redis", "filelocking.enabled": "true", "memcache.distributed": "\\OC\\Memcache\\Redis", "memcache.locking": "\\OC\\Memcache\\Redis", "redis": { "host": "***REMOVED SENSITIVE VALUE***", "port": 6379, "timeout": 0, "dbindex": 0 }, "mail_smtpmode": "smtp", "mail_smtpauthtype": "LOGIN", "mail_from_address": "***REMOVED SENSITIVE VALUE***", "mail_domain": "***REMOVED SENSITIVE VALUE***", "mail_smtpauth": 1, "mail_smtphost": "***REMOVED SENSITIVE VALUE***", "mail_smtpname": "***REMOVED SENSITIVE VALUE***", "mail_smtppassword": "***REMOVED SENSITIVE VALUE***", "mail_smtpport": "587", "mail_smtpsecure": "tls", "forcessl": true, "forceSSLforSubdomains": true, "defaultapp": "files", "knowledgebaseenabled": true, "enable_avatars": true, "allow_user_to_change_display_name": true, "maintenance": false, "debug": false, "loglevel": 1, "data-fingerprint": "d37bd8a6753bffcfd9fb1077ec46df42", "updatechecker": true, "updater.release.channel": "beta", "rewrite_url": true, "overwrite.cli.url": "https:\/\/nextcloud.wthassociates.com", "app_install_overwrite": [ "files_markdown", "announcementcenter", "audioplayer", "calendar", "deck", "external", "gpxedit", "gpxmotion", "gpxpod", "files_mindmap", "phonetrack", "cms_pico", "spreed", "camerarawpreviews", "user_external" ], "mysql.utf8mb4": true, "updater.secret": "***REMOVED SENSITIVE VALUE***" } ```

Are you using external storage, if yes which one: no

Are you using encryption:

Are you using an external user-backend, if yes which one: no

Client configuration

Browser: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 OPR/71.0.3770.228

Operating system:

Logs

Web server error log ``` Nothing relevant ```
Nextcloud log ``` hewitt@zfsserver01:/var/www/nextcloud$ more /volumes/H-v002/files/cloud/nextcloud.log hewitt@zfsserver01:/var/www/nextcloud$ more /volumes/H-v002/files/cloud/nextcloud.log {“reqId”:“5sXCOhWoccKGjDNVZSzk”,“level”:1,“time”:“2020-10-12T11:17:38+00:00”,“remoteAddr”:"",“user”:"–",“app”:“cms_pico “,“method”:””,“url”:"–",“message”:“Checking Pico CMS requirements \u2026”,“userAgent”:"–",“version”:“20.0.0.9”} {“reqId”:“5sXCOhWoccKGjDNVZSzk”,“level”:1,“time”:“2020-10-12T11:17:38+00:00”,“remoteAddr”:"",“user”:"–",“app”:“cms_pico “,“method”:””,“url”:"–",“message”:“Syncing Pico CMS app data folder \u2026”,“userAgent”:"–",“version”:“20.0.0.9”} {“reqId”:“5sXCOhWoccKGjDNVZSzk”,“level”:3,“time”:“2020-10-12T11:17:38+00:00”,“remoteAddr”:"",“user”:"–",“app”:“core”,“m ethod”:"",“url”:"–",“message”:“Following symlinks is not allowed (’/volumes/H-v002/files/cloud//Photography’ -> ‘/volum es/H-v002/Photography/’ not inside ‘/volumes/H-v002/files/cloud/’)”,“userAgent”:"–",“version”:“20.0.0.9”}: ```
Browser log Not relevant, using OCC
kesselb commented 3 years ago

Thanks for reporting :+1:

Closing your report in favour of https://github.com/nextcloud/server/issues/1257. The suggested fix is: https://github.com/nextcloud/server/issues/1257#issuecomment-345342440.