Captive Portal unable to create (1) /var/log/nginx/portal.log - Permission Denied (2) /opt/iiab/captiveportal/users.sqlite #2168
Description
1A) I've seen this on 2 different RPi 4's now, where Captive Portal appears to install (on the surface) but in fact doesn't work.
Is /opt/iiab/captiveportal/users.sqlite missing for a different (but somewhat related) reason possibly?
1B) If not exactly the same reason as Permission denied: '/var/log/nginx/portal.log' here? Likely unrelated to #2170?
root@box:~# systemctl status uwsgi-captiveportal.service
● uwsgi-captiveportal.service - uWSGI Service
Loaded: loaded (/etc/systemd/system/uwsgi-captiveportal.service; enabled; vendor preset: enabled)
Active: active (running) since Sat 2020-01-18 00:32:55 EST; 11min ago
Main PID: 6398 (uwsgi)
Status: "uWSGI is ready"
Tasks: 3 (limit: 4035)
Memory: 11.0M
CGroup: /system.slice/uwsgi-captiveportal.service
├─6398 /usr/bin/uwsgi --ini /opt/iiab/captiveportal/captiveportal.ini
└─6399 /usr/bin/uwsgi --ini /opt/iiab/captiveportal/captiveportal.ini
Jan 18 00:32:55 box.lan uwsgi[6398]: File "/usr/lib/python3.7/logging/__init__.py", line 1121, in _open
Jan 18 00:32:55 box.lan uwsgi[6398]: return open(self.baseFilename, self.mode, encoding=self.encoding)
Jan 18 00:32:55 box.lan uwsgi[6398]: PermissionError: [Errno 13] Permission denied: '/var/log/nginx/portal.log'
Jan 18 00:32:55 box.lan uwsgi[6398]: unable to load app 0 (mountpoint='') (callable not found or import error)
Jan 18 00:32:55 box.lan uwsgi[6398]: *** no app loaded. going in full dynamic mode ***
Jan 18 00:32:55 box.lan uwsgi[6398]: *** uWSGI is running in multiple interpreter mode ***
Jan 18 00:32:55 box.lan uwsgi[6398]: spawned uWSGI master process (pid: 6398)
Jan 18 00:32:55 box.lan systemd[1]: Started uWSGI Service.
Jan 18 00:32:55 box.lan uwsgi[6398]: spawned uWSGI worker 1 (pid: 6399, cores: 1)
Jan 18 00:32:55 box.lan uwsgi[6398]: Python auto-reloader enabled
-
./runrole captiveportaldoesn't work to install /opt/iiab/captiveportal/users.sqlite even whencaptiveportal_installed: Trueis removed from /etc/iiab/iiab_state.yml andsystemctl daemon-reloadis run, etc.BUT
./iiab-install --reinstalldoes seem to work to install & enable Captive Portal...on a 2nd pass anyway? Any ideas why? Originally reported @ Cleanup of NGINX/Apache log file PRs #2155, #2156 & begin streamlining Munin playbook (WIP) #2158 (comment) -
Even though these 2 log file directories had their initial owner:group set "correctly" to www-data:www-data (& initial permissions set "correctly" to '0770') within 2-common/tasks/fl.yml#L41-L50 — these have since changed to:
root@box:~# ls -ld /var/log/apache2/ /var/log/nginx/ drwxr-x--- 2 www-data www-data 4096 Jan 17 17:16 /var/log/apache2/ drwxr-xr-x 2 root adm 4096 Jan 17 17:28 /var/log/nginx/(Presumably these ownership/permissions settings changed automatically during 3-base-server's actual install of Apache & NGINX?)
Earlier discussions on much these same topics: logrotate daily disables captive portal after first day #2121 Separate Apache & NGINX logs... /var/log/apache2 vs /var/log/nginx ? [and AWStats followup] #2124 Cleanup of NGINX/Apache log file PRs #2155, #2156 & begin streamlining Munin playbook (WIP) #2158 (comment)