使用Thin運行的Rails應用程序（Redmine）中的權限被拒絕

Question

我正在嘗試使用Thin和nginx作為反向代理運行Redmine。

我的/etc/thin2.1/redmine.yml ：

---
pid: /var/run/thin/redmine.pid
group: redmine
wait: 30
timeout: 30
log: /var/log/thin/redmine.log
max_conns: 1024
require: []

environment: production
max_persistent_conns: 512
servers: 4
daemonize: true
user: redmine
socket: /var/run/thin/redmine.sock
chdir: /var/www/projects.mydomain.tld

當我使用我的網絡瀏覽器訪問該網站時，我得到了一個502 Bad Gateway 。 這是/var/log/thin/redmine.0.log的內容：

>> Writing PID to /var/run/thin/redmine.0.pid
>> Changing process privilege to redmine:redmine
>> Using rack adapter
>> Exiting!
/usr/lib/ruby/vendor_ruby/thin/daemonizing.rb:158:in `delete': Permission denied @ unlink_internal - /var/run/thin/redmine.0.pid (Errno::EACCES)
        from /usr/lib/ruby/vendor_ruby/thin/daemonizing.rb:158:in `remove_pid_file'
        from /usr/lib/ruby/vendor_ruby/thin/daemonizing.rb:59:in `block in daemonize'
/usr/lib/ruby/2.1.0/rubygems/core_ext/kernel_require.rb:55:in `require': cannot load such file -- bundler/setup (LoadError)
        from /usr/lib/ruby/2.1.0/rubygems/core_ext/kernel_require.rb:55:in `require'
        from /var/www/projects.mydomain.tld/config/boot.rb:4:in `<top (required)>'
        from /usr/lib/ruby/2.1.0/rubygems/core_ext/kernel_require.rb:55:in `require'
        from /usr/lib/ruby/2.1.0/rubygems/core_ext/kernel_require.rb:55:in `require'
        from /var/www/projects.mydomain.tld/config/application.rb:1:in `<top (required)>'
        from /usr/lib/ruby/2.1.0/rubygems/core_ext/kernel_require.rb:55:in `require'
        from /usr/lib/ruby/2.1.0/rubygems/core_ext/kernel_require.rb:55:in `require'
        from /var/www/projects.mydomain.tld/config/environment.rb:2:in `<top (required)>'
        from /usr/lib/ruby/2.1.0/rubygems/core_ext/kernel_require.rb:55:in `require'
        from /usr/lib/ruby/2.1.0/rubygems/core_ext/kernel_require.rb:55:in `require'
        from /var/www/projects.mydomain.tld/config.ru:3:in `block in <main>'
        from /usr/lib/ruby/vendor_ruby/rack/builder.rb:55:in `instance_eval'
        from /usr/lib/ruby/vendor_ruby/rack/builder.rb:55:in `initialize'
        from /var/www/projects.mydomain.tld/config.ru:1:in `new'
        from /var/www/projects.mydomain.tld/config.ru:1:in `<main>'
        from /usr/lib/ruby/vendor_ruby/rack/adapter/loader.rb:36:in `eval'
        from /usr/lib/ruby/vendor_ruby/rack/adapter/loader.rb:36:in `load'
        from /usr/lib/ruby/vendor_ruby/rack/adapter/loader.rb:45:in `for'
        from /usr/lib/ruby/vendor_ruby/thin/controllers/controller.rb:169:in `load_adapter'
        from /usr/lib/ruby/vendor_ruby/thin/controllers/controller.rb:73:in `start'
        from /usr/lib/ruby/vendor_ruby/thin/runner.rb:185:in `run_command'
        from /usr/lib/ruby/vendor_ruby/thin/runner.rb:151:in `run!'
        from /usr/bin/thin:6:in `<main>'

我不明白是什么導致了這個錯誤。 /var/run/thin/中的.pid文件歸root所有。 我試圖給redmine和thin賦予所有權但是得到了相同的錯誤（這些文件在重新啟動時重新創建）。

我用rbenv安裝了Ruby。 我以root身份運行bundle install ，這促使這樣做will break this application for all non-root users on this machine 。 根據這個答案，這應該不是問題，是嗎？

編輯：如果我在/etc/thin2.1/redmine.yml中將用戶和組設置為root ，則權限被拒絕錯誤消失。 我雖然它導致了另一個錯誤，但那個仍然存在。

Answer 1

對於unlink文件權限進程實際上需要一個權限來寫入該文件的目錄。

因此要么給予redmine寫入/var/run/thin/權限，要么將pids和socket放在別處 - 通常在app的共享tmp ，rails甚至為這些創建dirs。