Re: apache2 run script

[Charlie Brady <charlieb-supervision@budge.apana.org.au>]

On Fri, 6 Oct 2006, Alex Efros wrote:

> On Fri, Oct 06, 2006 at 12:01:49PM -0400, Paul Jarc wrote:
>> Alex Efros <powerman@powerman.asdfGroup.com> wrote:
>>> Anyway. Why you dislike `env -i` so much to invent all these alternatives? :)
>>
>> I think the interest is mostly in -i, not env.  Do you have variables
>> in runsv's environment that Apache shouldn't have?
>
> Hmm. No, I don't think -i really needed. In ./run script there about 30
> variables, but most of them bash-related and I don't think some of them may
> affect apache execution.
>
> But... it just ease to use -i when starting apache than think 'is it safe'
> about every from these 30 variables, check apache's documentation about used
> variables, etc.

I'd be surprised if you have 30 variables set. I have only these:

@400000004526ef972d1a97bc SELINUX_INIT=YES
@400000004526ef972d1a9f8c CONSOLE=/dev/console
@400000004526ef972d1aa374 TERM=linux
@400000004526ef972d1aa374 INIT_VERSION=sysvinit-2.85
@400000004526ef972d1aa75c PATH=/command:/usr/local/bin:/usr/local/sbin:/bin:/sbin:/usr/bin:/usr/sbin
@400000004526ef972d1aab44 RUNLEVEL=7
@400000004526ef972d1aaf2c PWD=/var/service/mysqld
@400000004526ef972d1aaf2c PREVLEVEL=N
@400000004526ef972d1ab314 HOME=/
@400000004526ef972d1ab6fc SHLVL=1
@400000004526ef972d1ab6fc _=/bin/env

Add 'env' to one of your run scripts and you will learn what you have.

My /etc/runit/2 script is this (but with proctitle arg edited for 
brevity):

===
#!/bin/sh

PATH=/command:/usr/local/bin:/usr/local/sbin:/bin:/sbin:/usr/bin:/usr/sbin

exec </dev/null
exec runsvdir -P /service 'log: ...[snip]...'
===

The environment could be smaller again if I used 'env -' in the 
/etc/runit/2 script.

> Many years ago when I was a newbie sysadmin I have some
> problems with apache started in unclean environment, so I always use -i
> from that time... just for the case. That's called experience. ;-)

That was before you started to use supervision, which was designed in part 
to guarantee a clean, predictable and invariant environment.

'env -' is not harmful, it's just wasted cycles.