freebsd stable - Nov 2012 - mod_fcgid doesn't work in 9-stable jails after upgrade from 8.x

Hi,

I've just tried to upgrade a machine running an older 8-stable to 
9-stable at r242549M without success.
It runs an apache with mod_fcgid in a jail and the latter can't start 
with the error message of:
[Sun Nov 04 16:09:12 2012] [emerg] (78)Function not implemented: 
mod_fcgid: Can't create shared memory for size 1192488 bytes

security.jail.sysvipc_allowed is enabled (it was needed on 8.x too), 
nothing else has changed.

There are some reports from this, but from earlier versions, and the 
only confirmed solution was sysvipc_allowed, which works for 8.x, but 
doesn't with the above version.

Any ideas?

I could finally take the time to look into this, so here's the solution:
Setting jail_sysvipc_allow="YES" in rc.conf is no longer enough, it
only
sets the sysctl, but the new rc.d/jail script won't add the 
allow.sysvipc=1 parameter.
So in order to work, you must change the above to:
jail_jailname_parameters="allow.sysvipc=1"

ps: it's not related to 9, stable/8 rc.d/jail has the same new style 
jail invocation and hence the same problem.

On 11/04/2012 07:47 PM, Attila Nagy wrote:
> Hi,
>
> I've just tried to upgrade a machine running an older 8-stable to 
> 9-stable at r242549M without success.
> It runs an apache with mod_fcgid in a jail and the latter can't start 
> with the error message of:
> [Sun Nov 04 16:09:12 2012] [emerg] (78)Function not implemented: 
> mod_fcgid: Can't create shared memory for size 1192488 bytes
>
> security.jail.sysvipc_allowed is enabled (it was needed on 8.x too), 
> nothing else has changed.
>
> There are some reports from this, but from earlier versions, and the 
> only confirmed solution was sysvipc_allowed, which works for 8.x, but 
> doesn't with the above version.
>
> Any ideas?