Cloudlinux CageFS + php-selector + LS + CRIU ?

CCRA

New Member
#1
Hi,

I have been trying to enable CRIU on my Litespeed setup running under Cloudlinux and CageFS.

Is it even possible? lsphp processes are suexeced to the user owning the process.
I am using vhost-specific external app configs for Lsphp binary, and tried to add LSAPI_CRIU=1 and image & socket path parameters to environment variables but it does not work.

Should I add /var/run/criu to cagefs mountpoint list? I have been searching thru Cloudlinux and LS documenattion but this usage scenario is not documented anywhere. I can only find instructions for mod_lsapi and cpanl installations but not this native version.
 
Last edited by a moderator:

CCRA

New Member
#3
Yes I have seen that WIKI page.

Vhost-based external app uses /usr/local/bin/lsphp as an executable. In CageFS it is mapped to latest alt-php73 lsphp binary.
phpinfo() reports LiteSpeed API

criu-lve version 3.9.2 is installed and running. socket /var/run/criu/criu_service.socket is there.

I have following env.variables in ext.app setting:
Code:
LSAPI_CRIU=1
LSAPI_INITIAL_START=5
LSAPI_CRIU_DEBUG=1
(also tried to put socket path and image path with no help)


stderr log contains following:
Code:
2019-01-29 19:07:38.091 [STDERR] (DEBUG) CRIU_CTRL:1373 19642: CRIU_CTRL_Done entry, close socket -1
2019-01-29 19:07:59.425 [STDERR] (DEBUG) CRIU_CTRL:1373 19232: CRIU_CTRL_Done entry, close socket -1
2019-01-29 19:07:59.686 [STDERR] (DEBUG) CRIU_CTRL:1356 19667: CRIU_CTRL_Init entry (cwd: /tmp/lshttpd)
(DEBUG) CRIU_CTRL:1356 19668: CRIU_CTRL_Init entry (cwd: /tmp/lshttpd)
[lscgid: 19667] CRIU initialized successfully.
[lscgid: 19668] CRIU initialized successfully.
2019-01-29 19:08:00.582 [STDERR] (DEBUG) lscgid:19678 Line #186 CRIU initial start = 5
2019-01-29 19:08:01.971 [STDERR] (DEBUG) CRIU_CTRL:1373 19683: CRIU_CTRL_Done entry, close socket -1
2019-01-29 19:08:44.547 [STDERR] (DEBUG) lscgid:19731 Line #186 CRIU initial start = 5
but no matter how many times I reload the php page, criu image dump is not created.
 
Last edited by a moderator:
Top