Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-24367

Default ssl.conf file in zabbix/zabbix-web-apache-pgsql:6.4.13-alpine causes zabbix-web docker container fail to start

XMLWordPrintable

    • Icon: Problem report Problem report
    • Resolution: Unresolved
    • Icon: Trivial Trivial
    • None
    • 6.4.13
    • Frontend (F)
    • None
    • docker

      We recently upgraded from 6.4.10 to 6.4.13, which involves us pulling the zabbix official container images to our own repo.

      After updating our docker compose with the latest images, the web server failed to start with the following error:

      ########################################################
      ** Executing '/usr/sbin/httpd -D FOREGROUND'
      AH00526: Syntax error on line 147 of /etc/apache2/conf.d/ssl.conf:
      SSLCertificateFile: file '/etc/ssl/apache2/server.pem' does not exist or is empty
      ** Deploying Zabbix web-interface (Apache) with PostgreSQL database
      ** Using POSTGRES_USER variable from secret file
      ** Using POSTGRES_PASSWORD variable from secret file
      ********************
      * DB_SERVER_HOST: postgres-server
      * DB_SERVER_PORT: 5432
      * DB_SERVER_DBNAME: zabbix
      * DB_SERVER_SCHEMA: public
      ********************
      ** Adding Zabbix virtual host (HTTP)
      **** Impossible to enable SSL support for Apache2. Certificates are missed.
      ** Preparing Zabbix frontend configuration file
      ########################################################
      ** Executing '/usr/sbin/httpd -D FOREGROUND'
      AH00526: Syntax error on line 147 of /etc/apache2/conf.d/ssl.conf:
      SSLCertificateFile: file '/etc/ssl/apache2/server.pem' does not exist or is empty
      

       

      Upon checking the /etc/apache2/conf.d/ directory and comparing between this container and the previous 6.4.10, the following files are now present:

      /etc/apache2/conf.d/ssl.conf
      /etc/apache2/conf.d/default.conf
       

      Upon deleting these files in my docker build, and deploying the updated container, everything works as expected.
       
      It seems when either PHP or apachd was updated, these new default files were added.
       
      FYI our Dockerfile below also:

      ARG zabbix_version
      
      FROM zabbix/zabbix-web-apache-pgsql:${zabbix_version}
      
      ARG version
      ARG build_timestamp
      
      LABEL version=${version}
      LABEL build_timestamp=${build_timestamp}
      LABEL maintainer="SecurityShift <[email protected]>"
      
      USER root
      RUN apk update && apk upgrade -y --no-cache && \
          # due to some bug we encountered
          sed -i 's/memory_limit = 128M/memory_limit = 512M/' /etc/php83/php.ini && \
          rm -rf /etc/apache2/conf.d/ssl.conf /etc/apache2/conf.d/default.conf
      USER zabbix
      

            ksalins Karlis Salins
            steve.falzon@securityshift.com Steve
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: