passenger 5.0.7 → 5.0.8

checksums.yaml

@@ -1,15 +1,15 @@
 ---
 !binary "U0hBMQ==":
   metadata.gz: !binary |-
-    ZGVkMzYyMTlmMjgxNzMzZjM2OGUwZjcyZTA2NzNiYjMxODc0NzBiMg==
+    NDM2NTNjMzUzYmRhZmI2YzFmNTkyNTQ4OTQ0OWM3YjBhZTljYTVhYg==
   data.tar.gz: !binary |-
-    OTBhOGFhYWM3MDY4YzU5Y2M2YmQ1MWQ0MWQ4YjQyNDVkNzc5ZDk5Nw==
+    ZjQ0NTUwNjQ1ZDNlZThlNzEwODUzOTJkOTM3N2QwNjQ5YTVlNjBhZQ==
 SHA512:
   metadata.gz: !binary |-
-    NzU3MDE1MGEzYzExOTg2NmZlNDYxYzQ4YmQ0YzUwYWJhMjdlY2NiNWYxYTE1
-    Nzc1ZDcxZWMxNWI1ZTY1Mzc5NDYxNWZlZWMwOGVlMjJjZGI4NTJjMGQxNzZk
-    YjZiZTQ3OWI1ODZiNTMzMjU5MjEwZDY4ZmI2OWJkNDM1NDFkMTk=
+    NzQwMjVkYmUyMDAyMTllYzYwNmRkNGJmZDE2ZmM0OGY1ZDVjMmE2Mjk2YTRh
+    NDNkODliZGM4NjQwNWY4OTYwNWFmNTVlMzczNWZkN2I3MzZmYjM1ODNkZmVh
+    ZDJlNDQzY2M0ODY1Mjk2Y2U5ZTZhNmU3MzI1ZWNiYTczZmM5OWE=
   data.tar.gz: !binary |-
-    ZThmNTdiODU2MDIwODgwNmJjM2FkYzNhMjhlNDNhNjAzNDk4MGQ1ZGJkYWZk
-    OGEyMzM5MWNkNDcxMWNmNmEyNGFjOWNjYzAyMjNmNjRkNjViZTA4ODJjMTUw
-    NjNmZjQzNmRjNTM3ODhmZTIyYWU1NGY0MzA4YzBlNzIzNzllYTY=
+    NGQ0OGNmYTAwMDI4MDg5YTQ3MzhhZTlkOGMwNmUyMzE4Y2UxNzFmMTY3NWQ4
+    NjExNGI4MzhhNjYyMDEzZjUwNmFhZTRmYjY5NmZmYWRjYzI0NTAzZWZhM2E1
+    NjliZTBiNmNkMWMwYmRlMzA4M2VkOTM0ZTNmNGVkZDk2MjFkOTE=

checksums.yaml.gz.asc

@@ -2,11 +2,11 @@
 Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
 Comment: GPGTools - http://gpgtools.org
 
-iQEcBAABAgAGBQJVP5XZAAoJECrHRaUKISqMKj8IAIGrbTDuXh7udR1pCe9K5JHf
-wsBtEQvDAZpp+mPdwddODK5a/2e0UsXoHPniq9kZIESGv/plrlW5QdO8ISjPClHB
-H/VxlnaHFgqqCoIZUxNwtO6wMHaKRM80BJZj74UcZ5GtWhKi3fymgoJDXjKpltsv
-6Og68fJdLKEDY9fYr9/V/32B7wk06cW6VTcZmZKYqUsKcroqcKUZqFmHmUddp6rf
-WUQb/ftEn2/kzOEvO4KemikyAjVVFftSLLXMAcpKqEPcEf8maaXALMdxffUPmdYm
-ljSQULByzhttNz+Aj+3l8P/UC6iMAGgZk0v6LGvm7acaSutMMOuE6Kxpc3XcM54=
-=/84R
+iQEcBAABAgAGBQJVXENEAAoJECrHRaUKISqM1yIH/3iiP55teXIQdypzsniSos6Q
+lDKqr0KDOAK1HRthLmc1xyTYPqzrHNqdJelH0Hj2SEw70aM5SSJ1miwTZPuwEThT
+kzwk4+rSAoeUumxr5kqW5BHrcGj5KD5lVXDpYZbwP+Ggz/UJpC0mZ0g4AxbB9//R
+azlnpXIjOcek1GmxvsTOsesFYX9DCKfHpC50Droc5biUtUm7x+GHzTwALazNyUkn
+chlYoAzrORXkt9N2m5l/D3qOtYKZ9MMc4ZWFGrziGgdrwiRg8lon/V4xjcKdF2JB
+tppn5PEczG5co6cJ69rrKFr88nH6xqnvipxjqiGRz5jou4OTBcy46F3YKYZi/CI=
+=A3tu
 -----END PGP SIGNATURE-----

data.tar.gz.asc

@@ -2,11 +2,11 @@
 Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
 Comment: GPGTools - http://gpgtools.org
 
-iQEcBAABAgAGBQJVP5XZAAoJECrHRaUKISqMA/4IAJ2gXqVHccGedmr4esxxyFYS
-RNHZgu+S/dmaC+BhuboGroSqnB3SMgR2R9efGU54NmnrDb6VJfeaj+iSSy9hTX4g
-3TL849nKlZmwc/bY1A47aZ6CXsm5XoxFsry+j4eUD4yrkJasIAvJjlBhiOy2oVyO
-cgAt18iqpdN1SyA39akeX15Qufw6sDK+4XBlXzIR2w0pXG0aCIkvil3TYCVDxlRv
-ZEABXT+63H6wuGRk3rFut8JYGFspE1PXP6u0/KSauo+EcJvzASo8Z1Tkdu7WqZtZ
-HOpaspDAJaCosT2Is23dwoAqi6EK4NIFxWqD6mm9SnK9pChXbqJ8JqrYZjqtFtA=
-=jxZu
+iQEcBAABAgAGBQJVXENEAAoJECrHRaUKISqMJu8H/j+UFpo8bgsMoBBAQmb9VFG8
+A6l0wsFtxEnd1pFNkI4+KFT4olD/rpksJAUUAt2s3yXhfreTP1lkjO/eCSX2PBBp
+DQc03J7XM05SHsoJ1Vo3HqWB0gIdZQ79xn0R0DAmlZQ2EubvqtskNUsb4Eu+0qIk
+/sjt8yKGt2Q+ZSxfxQGWaA85ZCIIfXQOR7ZZG0Da/v917WZ5vWEO64yOT31eAR7p
+KIUzyp8o/Cit5Z1+f7iX0IhhlUZJhcVgqXTm1dNuNyW8MOlRQU+N7nbT9Rk7Jhy5
+ST6vX+Ay0nqi65wU5IkXmLwJe1n+bJBXnocLigfb6tYjGfLElYtYlCbyl61PCSo=
+=gIJk
 -----END PGP SIGNATURE-----

data/CHANGELOG

@@ -1,3 +1,20 @@
+Release 5.0.8
+-------------
+
+ * We now supply Debian 8 and Ubuntu 15.04 packages. Closes GH-1494 and GH-1400.
+ * We now supply Red Hat 6, Red Hat 7, CentOS 6 and CentOS 7 packages.
+ * We no longer supply Ubuntu 10.04 packages because Ubuntu 10.04 is no longer supported by Canonical.
+ * Fixes a Passenger crash (SIGSEGV) that occurs occasionally when out-of-band garbage collection is enabled. Closes GH-1469.
+ * Fixes a Passenger crash (SIGSEGV) that occurs occasionally with redirects to relative URLs. Closes GH-1513.
+ * Fixes cases when Passenger shuts down more processes than is allowed by the `min_instances` limit. Closes GH-1500.
+ * Fixes "Bad Gateway" errors that would occur when an application sets the X-Sendfile or X-Accel-Redirect header, together with a non-empty response body. Closes GH-1498.
+ * Fixes the fact that Passenger agent processes don't lower their privilege when user switching is turned off.
+ * Fixes autodetection of Apache on Gentoo. Closes GH-1510.
+ * Fixes compilation problems on Solaris. Closes GH-1508.
+ * [Standalone] Adds the `--pool-idle-time` command line parameter.
+ * [Standalone] Adds the `--auto` command line parameter for running non-interactively. This supresses prompts. Closes GH-1511.
+
+
 Release 5.0.7
 -------------
 

data/bin/passenger-install-apache2-module

@@ -45,6 +45,8 @@ require 'optparse'
 require 'stringio'
 PhusionPassenger.require_passenger_lib 'constants'
 PhusionPassenger.require_passenger_lib 'platform_info/ruby'
+PhusionPassenger.require_passenger_lib 'platform_info/operating_system'
+PhusionPassenger.require_passenger_lib 'platform_info/linux'
 PhusionPassenger.require_passenger_lib 'platform_info/apache'
 PhusionPassenger.require_passenger_lib 'platform_info/apache_detector'
 PhusionPassenger.require_passenger_lib 'abstract_installer'
@@ -122,6 +124,7 @@ class Installer < PhusionPassenger::AbstractInstaller
 
     Dir.chdir(PhusionPassenger.build_system_dir)
     show_welcome_screen
+    check_selinux_and_suggest_rpm
     query_interested_languages
     check_gem_install_permission_problems || exit(1)
     check_directory_accessible_by_web_server
@@ -148,6 +151,28 @@ private
     wait
   end
 
+  def check_selinux_and_suggest_rpm
+    return if !PhusionPassenger.originally_packaged? ||
+      PlatformInfo.os_name != "linux" ||
+      !(PlatformInfo.linux_distro_tags.include?(:rhel) ||
+          PlatformInfo.linux_distro_tags.include?(:centos))
+      !PlatformInfo.find_command('sestatus')
+
+    begin
+      sestatus = `sestatus`
+      getenforce = `getenforce`
+    rescue Errno::ENOTENT
+      return
+    end
+
+    status = sestatus.scan(/^SELinux status:.*/).first
+    if status =~ /enabled/ && getenforce =~ /Enforcing/
+      new_screen
+      render_template 'apache2/rpm_installation_recommended'
+      wait
+    end
+  end
+
   def query_interested_languages
     menu = TerminalChoiceMenu.new(["Ruby", "Python", "Node.js", "Meteor"])
     menu["Ruby"].checked = interesting_language?('ruby')
@@ -381,10 +406,14 @@ private
   end
 
   def config_snippet
-    return "<IfModule mod_passenger.c>\n" +
+    result = "<IfModule mod_passenger.c>\n" +
       "  PassengerRoot #{PhusionPassenger.install_spec}\n" +
-      "  PassengerDefaultRuby #{PlatformInfo.ruby_command}\n" +
-      "</IfModule>"
+      "  PassengerDefaultRuby #{PlatformInfo.ruby_command}\n"
+    if PhusionPassenger.packaging_method == "rpm"
+      result << "  PassengerInstanceRegistryDir /var/run/passenger-instreg\n"
+    end
+    result << "</IfModule>"
+    result
   end
 
   def apache2_config_snippets
@@ -782,8 +811,11 @@ private
     new_screen
     puts "<banner>Validating installation...</banner>"
     puts
-    validator = PhusionPassenger::Config::ValidateInstallCommand.new([
-      "--auto", "--validate-apache2", "--invoked-from-installer"])
+    args = ["--validate-apache2", "--invoked-from-installer"]
+    args << "--auto" if @auto
+    # The validator will get the path to apxs2 from the APXS2 environment
+    # variable that this installer sets.
+    validator = PhusionPassenger::Config::ValidateInstallCommand.new(args)
     exit_code = validator.run_and_get_exit_code
     STDOUT.write(@colors.default_terminal_color)
 

data/build/basics.rb

@@ -1,5 +1,5 @@
 #  Phusion Passenger - https://www.phusionpassenger.com/
-#  Copyright (c) 2010-2014 Phusion
+#  Copyright (c) 2010-2015 Phusion
 #
 #  "Phusion Passenger" is a trademark of Hongli Lai & Ninh Bui.
 #
@@ -145,12 +145,14 @@ LIBEXT   = PlatformInfo.library_extension
 USE_DMALLOC = boolean_option('USE_DMALLOC')
 USE_EFENCE  = boolean_option('USE_EFENCE')
 USE_ASAN    = boolean_option('USE_ASAN')
+USE_SELINUX = boolean_option('USE_SELINUX')
 OPTIMIZE    = boolean_option('OPTIMIZE')
 LTO         = OPTIMIZE && boolean_option('LTO')
 
 # Agent-specific compiler flags.
 AGENT_CFLAGS  = ""
 AGENT_CFLAGS << " -O" if OPTIMIZE
+AGENT_CFLAGS << " -DUSE_SELINUX" if USE_SELINUX
 AGENT_CFLAGS << " -flto" if LTO
 AGENT_CFLAGS << " #{PlatformInfo.adress_sanitizer_flag}" if USE_ASAN
 AGENT_CFLAGS.strip!
@@ -162,6 +164,7 @@ AGENT_LDFLAGS << " -flto" if LTO
 AGENT_LDFLAGS << " #{PlatformInfo.dmalloc_ldflags}" if USE_DMALLOC
 AGENT_LDFLAGS << " #{PlatformInfo.electric_fence_ldflags}" if USE_EFENCE
 AGENT_LDFLAGS << " #{PlatformInfo.adress_sanitizer_flag}" if USE_ASAN
+AGENT_LDFLAGS << " -lselinux" if USE_SELINUX
 # Extra linker flags for backtrace_symbols() to generate useful output (see AgentsBase.cpp).
 AGENT_LDFLAGS << " #{PlatformInfo.export_dynamic_flags}"
 # Enable dead symbol elimination on OS X.

data/build/integration_tests.rb

@@ -1,5 +1,5 @@
 #  Phusion Passenger - https://www.phusionpassenger.com/
-#  Copyright (c) 2010-2014 Phusion
+#  Copyright (c) 2010-2015 Phusion
 #
 #  "Phusion Passenger" is a trademark of Hongli Lai & Ninh Bui.
 #
@@ -91,12 +91,15 @@ task 'test:integration:native_packaging' do
   case PlatformInfo.os_name
   when "linux"
     if PlatformInfo.linux_distro_tags.include?(:debian)
+      rubylibdir = RbConfig::CONFIG["vendordir"]
       command = "env NATIVE_PACKAGING_METHOD=deb " +
-        "LOCATIONS_INI=/usr/lib/ruby/vendor_ruby/phusion_passenger/locations.ini " +
+        "LOCATIONS_INI=#{rubylibdir}/phusion_passenger/locations.ini " +
         command
     elsif PlatformInfo.linux_distro_tags.include?(:redhat)
+      vendorlibdir = RbConfig::CONFIG["vendorlibdir"]
+      locations_ini = File.join(vendorlibdir, "phusion_passenger/locations.ini")
       command = "env NATIVE_PACKAGING_METHOD=rpm " +
-        "LOCATIONS_INI=/usr/lib/ruby/site_ruby/1.8/phusion_passenger/locations.ini " +
+        "LOCATIONS_INI=#{locations_ini} " +
         command
     else
       abort "Unsupported Linux distribution"

data/build/packaging.rb

@@ -193,6 +193,8 @@ task 'package:release' => ['package:set_official', 'package:gem', 'package:tarba
       if !is_beta
         puts "Initiating building of Debian packages"
         Rake::Task['package:initiate_debian_building'].invoke
+        puts "Initiating building of RPM packages"
+        Rake::Task['package:initiate_rpm_building'].invoke
       end
 
       puts "Building OS X binaries..."
@@ -234,6 +236,8 @@ task 'package:release' => ['package:set_official', 'package:gem', 'package:tarba
       if !is_beta
         puts "Initiating building of Debian packages"
         Rake::Task['package:initiate_debian_building'].invoke
+        puts "Initiating building of RPM packages"
+        Rake::Task['package:initiate_rpm_building'].invoke
       end
 
       puts "Building OS X binaries..."
@@ -459,6 +463,54 @@ task 'package:initiate_debian_building' do
   puts "Initiated building of Debian packages."
 end
 
+task 'package:initiate_rpm_building' do
+  require 'yaml'
+  require 'uri'
+  require 'net/http'
+  require 'net/https'
+  version = VERSION_STRING
+  begin
+    website_config = YAML.load_file(File.expand_path("~/.passenger_website.yml"))
+  rescue Errno::ENOENT
+    STDERR.puts "-------------------"
+    abort "*** ERROR: Please put the Phusion Passenger website admin " +
+      "password in ~/.passenger_website.yml:\n" +
+      "admin_password: ..."
+  end
+  if is_open_source?
+    type = "open%20source"
+    jenkins_token = website_config["jenkins_token"]
+    if !jenkins_token
+      abort "*** ERROR: Please put the Passenger open source Jenkins " +
+        "authentication token in ~/.passenger_website.yml, under " +
+        "the 'jenkins_token' key."
+    end
+  else
+    type = "Enterprise"
+    jenkins_token = website_config["jenkins_enterprise_token"]
+    if !jenkins_token
+      abort "*** ERROR: Please put the Passenger Enterprise Jenkins " +
+        "authentication token in ~/.passenger_website.yml, under " +
+        "the 'jenkins_enterprise_token' key."
+    end
+  end
+
+  uri = URI.parse("https://oss-jenkins.phusion.nl/buildByToken/buildWithParameters?" +
+    "job=Passenger%20#{type}%20RPM%20packages%20(release)&ref=#{git_tag}&repo=#{apt_repo_name}")
+  http = Net::HTTP.new(uri.host, uri.port)
+  http.use_ssl = true
+  http.verify_mode = OpenSSL::SSL::VERIFY_PEER
+  request = Net::HTTP::Post.new(uri.request_uri)
+  request.set_form_data("token" => jenkins_token)
+  response = http.request(request)
+  if response.code != 200 && response.body != "Scheduled.\n"
+    abort "*** ERROR: Cannot initiate building of RPM packages:\n" +
+      "Status: #{response.code}\n\n" +
+      response.body
+  end
+  puts "Initiated building of RPM packages."
+end
+
 task 'package:build_osx_binaries' do
   if is_open_source?
     sh "cd ../passenger_autobuilder && " +
@@ -520,6 +572,8 @@ task :fakeroot => [:apache2, :nginx, :doc] do
   psg_apache2_module_path       = ENV['APACHE2_MODULE_PATH'] || "#{fs_libdir}/apache2/modules/mod_passenger.so"
   psg_ruby_extension_source_dir = "#{fs_datadir}/#{GLOBAL_NAMESPACE_DIRNAME}/ruby_extension_source"
   psg_nginx_module_source_dir   = "#{fs_datadir}/#{GLOBAL_NAMESPACE_DIRNAME}/ngx_http_passenger_module"
+  psg_ruby       = ENV['RUBY'] || "#{fs_bindir}/ruby"
+  psg_free_ruby  = ENV['FREE_RUBY'] || "/usr/bin/env ruby"
 
   fakeroot = "pkg/fakeroot"
   fake_rubylibdir = "#{fakeroot}#{psg_rubylibdir}"
@@ -616,18 +670,24 @@ task :fakeroot => [:apache2, :nginx, :doc] do
   sh "mkdir -p #{fake_bindir}"
   Packaging::USER_EXECUTABLES.each do |exe|
     sh "cp bin/#{exe} #{fake_bindir}/"
-    if !Packaging::EXECUTABLES_WITH_FREE_RUBY.include?(exe)
-      change_shebang("#{fake_bindir}/#{exe}", "#{fs_bindir}/ruby")
+    if Packaging::EXECUTABLES_WITH_FREE_RUBY.include?(exe)
+      shebang = psg_free_ruby
+    else
+      shebang = psg_ruby
     end
+    change_shebang("#{fake_bindir}/#{exe}", shebang)
   end
 
   # Superuser binaries
   sh "mkdir -p #{fake_sbindir}"
   Packaging::SUPER_USER_EXECUTABLES.each do |exe|
     sh "cp bin/#{exe} #{fake_sbindir}/"
-    if !Packaging::EXECUTABLES_WITH_FREE_RUBY.include?(exe)
-      change_shebang("#{fake_sbindir}/#{exe}", "#{fs_bindir}/ruby")
+    if Packaging::EXECUTABLES_WITH_FREE_RUBY.include?(exe)
+      shebang = psg_free_ruby
+    else
+      shebang = psg_ruby
     end
+    change_shebang("#{fake_sbindir}/#{exe}", shebang)
   end
 
   # Apache 2 module

data/dev/ci/run_jenkins.sh

@@ -13,9 +13,6 @@ fi
 
 JENKINS_CACHE_DIR="$WORKSPACE/.jenkins_cache"
 mkdir -p "$JENKINS_CACHE_DIR"
-if [[ "$TEST_RPM_BUILDING" != 0 ]]; then
-	rm -rf "$JENKINS_CACHE_DIR/passenger_rpm/output"
-fi
 
 # run_travis.sh defaults COMPILE_CONCURRENCY to 2, but
 # Jenkins jobs are run on a single machine so we'll want
@@ -66,11 +63,8 @@ run_exec docker run --rm \
 	-e "TEST_APACHE2=$TEST_APACHE2" \
 	-e "TEST_STANDALONE=$TEST_STANDALONE" \
 	-e "TEST_SOURCE_PACKAGING=$TEST_SOURCE_PACKAGING" \
-	-e "TEST_DEBIAN_PACKAGING=$TEST_DEBIAN_PACKAGING" \
-	-e "TEST_RPM_PACKAGING=$TEST_RPM_PACKAGING" \
-	-e "TEST_RPM_BUILDING=$TEST_RPM_BUILDING" \
 	phusion/apachai-hopachai-sandbox \
-	python /passenger/packaging/rpm/internal/my_init --skip-runit --skip-startup-files --quiet -- \
+	python /passenger/packaging/rpm/internal/scripts/my_init --skip-runit --skip-startup-files --quiet -- \
 	/passenger/dev/ci/inituidgid \
 	/sbin/setuser appa \
 	/bin/bash -lc "cd /passenger && exec ./dev/ci/run_travis.sh"

data/dev/ci/run_travis.sh

@@ -23,8 +23,9 @@ export rvmsudo_secure_path=1
 export LC_CTYPE=C.UTF-8
 unset BUNDLE_GEMFILE
 
-if [[ -e /etc/workaround-docker-2267/hosts ]]; then
+if [[ -e /etc/workaround-docker-2267 ]]; then
 	HOSTS_FILE=/etc/workaround-docker-2267/hosts
+	sudo ln -s /etc/hosts /etc/workaround-docker-2267/hosts
 	sudo workaround-docker-2267
 	find /usr/local/rvm/rubies/*/lib/ruby -name resolv.rb | sudo xargs sed -i 's|/etc/hosts|/cte/hosts|g'
 else
@@ -208,39 +209,6 @@ if [[ "$TEST_STANDALONE" = 1 ]]; then
 	run bundle exec drake -j$COMPILE_CONCURRENCY test:integration:standalone
 fi
 
-if [[ "$TEST_RPM_PACKAGING" = 1 ]]; then
-	if [[ "$TEST_RPM_BUILDING" != 0 ]]; then
-		pushd packaging/rpm
-		run mkdir -p "$CACHE_DIR/passenger_rpm"
-		run mkdir -p "$CACHE_DIR/passenger_rpm/cache"
-		run mkdir "$CACHE_DIR/passenger_rpm/output"
-		run ./build -S "$PASSENGER_ROOT_ON_DOCKER_HOST/packaging/rpm" \
-			-P "$PASSENGER_ROOT_ON_DOCKER_HOST" \
-			-o "$CACHE_DIR_ON_DOCKER_HOST/passenger_rpm/output" \
-			-c "$CACHE_DIR_ON_DOCKER_HOST/passenger_rpm/cache" \
-			-d el6 -a x86_64
-		popd >/dev/null
-	fi
-
-	echo "------------- Testing built RPMs -------------"
-	run cp "test/config.json.rpm-automation" "test/config.json"
-	run mkdir -p "$CACHE_DIR/passenger_rpm/output/el6-x86_64"
-	if [[ "$TEST_RPM_BUILDING" != 0 ]]; then
-		run rm "$CACHE_DIR/passenger_rpm/output/el6-x86_64"/*.src.rpm
-	fi
-	run docker run --rm \
-		-v "$PASSENGER_ROOT_ON_DOCKER_HOST/packaging/rpm:/system:ro" \
-		-v "$PASSENGER_ROOT_ON_DOCKER_HOST:/passenger" \
-		-v "$CACHE_DIR_ON_DOCKER_HOST/passenger_rpm/output/el6-x86_64:/packages:ro" \
-		-e "APP_UID=`id -u`" \
-		-e "APP_GID=`id -g`" \
-		phusion/passenger_rpm_automation \
-		/system/internal/my_init --skip-runit --skip-startup-files --quiet -- \
-		/system/internal/inituidgid \
-		/bin/bash -c "cd /passenger && exec ./dev/ci/run_rpm_tests.sh"
-	run cp "test/config.json.travis" "test/config.json"
-fi
-
 if [[ "$TEST_SOURCE_PACKAGING" = 1 ]]; then
 	apt_get_update
 	run sudo apt-get install -y --no-install-recommends source-highlight

data/doc/Users guide Apache.html

@@ -1113,7 +1113,9 @@ using the command line.</p></div>
 <div class="foo toclevel3"><a href="#install_on_debian_ubuntu">2.3. Installing or upgrading on Debian or Ubuntu</a></div>
 <div class="foo toclevel4"><a href="#install_add_apt_repo">2.3.1. Adding our APT repository</a></div>
 <div class="foo toclevel4"><a href="#_installing_packages">2.3.2. Installing packages</a></div>
-<div class="foo toclevel3"><a href="#_installing_or_upgrading_on_red_hat_fedora_centos_or_scientificlinux">2.4. Installing or upgrading on Red Hat, Fedora, CentOS or ScientificLinux</a></div>
+<div class="foo toclevel3"><a href="#installing_or_upgrading_on_red_hat">2.4. Installing or upgrading on Red Hat or CentOS</a></div>
+<div class="foo toclevel4"><a href="#install_add_yum_repo">2.4.1. Adding our YUM repository</a></div>
+<div class="foo toclevel4"><a href="#_installing_packages_2">2.4.2. Installing packages</a></div>
 <div class="foo toclevel3"><a href="#_installing_or_upgrading_on_heroku">2.5. Installing or upgrading on Heroku</a></div>
 <div class="foo toclevel3"><a href="#rubygems_generic_install">2.6. Generic installation, upgrade and downgrade method: via RubyGems</a></div>
 <div class="foo toclevel3"><a href="#tarball_generic_install">2.7. Generic installation, upgrade and downgrade method: via tarball</a></div>
@@ -1239,7 +1241,7 @@ using the command line.</p></div>
 <div class="foo toclevel3"><a href="#_os_x_the_installer_cannot_locate_mamp_8217_s_apache">8.4. OS X: The installer cannot locate MAMP’s Apache</a></div>
 <div class="foo toclevel3"><a href="#_apache_reports_a_403_forbidden_error">8.5. Apache reports a "403 Forbidden" error</a></div>
 <div class="foo toclevel3"><a href="#_static_assets_such_as_images_and_stylesheets_aren_8217_t_being_displayed">8.6. Static assets such as images and stylesheets aren’t being displayed</a></div>
-<div class="foo toclevel3"><a href="#_the_apache_error_log_says_that_the_spawn_manager_script_does_not_exist_or_that_it_does_not_have_permission_to_execute_it">8.7. The Apache error log says that the spawn manager script does not exist, or that it does not have permission to execute it</a></div>
+<div class="foo toclevel3"><a href="#apache_selinux_permissions">8.7. Apache cannot access my app’s files because of SELinux errors</a></div>
 <div class="foo toclevel3"><a href="#_the_application_thinks_its_not_on_ssl_even_though_it_is">8.8. The application thinks its not on SSL even though it is</a></div>
 <div class="foo toclevel3"><a href="#_ruby_on_rails_specific_troubleshooting">8.9. Ruby on Rails-specific troubleshooting</a></div>
 <div class="foo toclevel4"><a href="#_the_about_your_application_8217_s_environment_link_does_not_work">8.9.1. The "About your application’s environment" link does not work</a></div>
@@ -1260,7 +1262,8 @@ using the command line.</p></div>
 <div class="foo toclevel4"><a href="#_requirements">10.1.1. Requirements</a></div>
 <div class="foo toclevel4"><a href="#_effects">10.1.2. Effects</a></div>
 <div class="foo toclevel4"><a href="#_caveats_amp_troubleshooting">10.1.3. Caveats &amp; troubleshooting</a></div>
-<div class="foo toclevel4"><a href="#finding_out_app_user">10.1.4. Finding out what user an application is running as</a></div>
+<div class="foo toclevel4"><a href="#user_switching_rpm_caveats">10.1.4. Red Hat and CentOS caveats</a></div>
+<div class="foo toclevel4"><a href="#finding_out_app_user">10.1.5. Finding out what user an application is running as</a></div>
 <div class="foo toclevel3"><a href="#reducing_memory_usage">10.2. Copy-on-write memory support (reducing memory consumption of Ruby applications)</a></div>
 <div class="foo toclevel3"><a href="#tuning_sse_websockets">10.3. Tuning for Server Sent Events and WebSockets</a></div>
 <div class="foo toclevel3"><a href="#bundler_support">10.4. Bundler support</a></div>
@@ -1583,12 +1586,14 @@ by Lorenzo Bettini
 http://www.lorenzobettini.it
 http://www.gnu.org/software/src-highlite -->
 <pre><tt><span style="font-style: italic"><span style="color: #9A1900">##### !!!! Only add ONE of these lines, not all of them !!!! #####</span></span>
+<span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 15.04</span></span>
+deb https<span style="color: #990000">:</span>//oss-binaries<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/apt/passenger vivid main
 <span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 14.04</span></span>
 deb https<span style="color: #990000">:</span>//oss-binaries<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/apt/passenger trusty main
 <span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 12.04</span></span>
 deb https<span style="color: #990000">:</span>//oss-binaries<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/apt/passenger precise main
-<span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 10.04</span></span>
-deb https<span style="color: #990000">:</span>//oss-binaries<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/apt/passenger lucid main
+<span style="font-style: italic"><span style="color: #9A1900"># Debian 8</span></span>
+deb https<span style="color: #990000">:</span>//oss-binaries<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/apt/passenger jessie main
 <span style="font-style: italic"><span style="color: #9A1900"># Debian 7</span></span>
 deb https<span style="color: #990000">:</span>//oss-binaries<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/apt/passenger wheezy main
 <span style="font-style: italic"><span style="color: #9A1900"># Debian 6</span></span>
@@ -1607,12 +1612,14 @@ by Lorenzo Bettini
 http://www.lorenzobettini.it
 http://www.gnu.org/software/src-highlite -->
 <pre><tt><span style="font-style: italic"><span style="color: #9A1900">##### !!!! Only add ONE of these lines, not all of them !!!! #####</span></span>
+<span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 15.04</span></span>
+deb https<span style="color: #990000">:</span>//download<span style="color: #990000">:</span>YOUR_DOWNLOAD_TOKEN@www<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/enterprise_apt vivid main
 <span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 14.04</span></span>
 deb https<span style="color: #990000">:</span>//download<span style="color: #990000">:</span>YOUR_DOWNLOAD_TOKEN@www<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/enterprise_apt trusty main
 <span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 12.04</span></span>
 deb https<span style="color: #990000">:</span>//download<span style="color: #990000">:</span>YOUR_DOWNLOAD_TOKEN@www<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/enterprise_apt precise main
-<span style="font-style: italic"><span style="color: #9A1900"># Ubuntu 10.04</span></span>
-deb https<span style="color: #990000">:</span>//download<span style="color: #990000">:</span>YOUR_DOWNLOAD_TOKEN@www<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/enterprise_apt lucid main
+<span style="font-style: italic"><span style="color: #9A1900"># Debian 8</span></span>
+deb https<span style="color: #990000">:</span>//download<span style="color: #990000">:</span>YOUR_DOWNLOAD_TOKEN@www<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/enterprise_apt jessie main
 <span style="font-style: italic"><span style="color: #9A1900"># Debian 7</span></span>
 deb https<span style="color: #990000">:</span>//download<span style="color: #990000">:</span>YOUR_DOWNLOAD_TOKEN@www<span style="color: #990000">.</span>phusionpassenger<span style="color: #990000">.</span>com/enterprise_apt wheezy main
 <span style="font-style: italic"><span style="color: #9A1900"># Debian 6</span></span>
@@ -1735,83 +1742,155 @@ sudo apache2ctl stop; sudo apache2ctl start</pre>
 </div>
 </div>
 <div class="sect2">
-<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="_installing_or_upgrading_on_red_hat_fedora_centos_or_scientificlinux"></span><h3 data-comment-topic="installing-or-upgrading-on-red-hat-fedora-centos-or-scientificlinux-1y5ie8b" data-anchor="_installing_or_upgrading_on_red_hat_fedora_centos_or_scientificlinux">2.4. Installing or upgrading on Red Hat, Fedora, CentOS or ScientificLinux</h3>
-<div class="admonitionblock">
-<table><tr>
-<td class="icon">
-<img src="./images/icons/warning.png" alt="Warning">
-</td>
-<td class="content">The RPMs are currently unmaintained. As such, the repository only contains Phusion Passenger 3.x (the latest version is 4.x), which did not support Node.js, Meteor, multiple Rubies, etc. For more recent versions of Phusion Passenger, you are suggested to install from gem or tarball instead.</td>
-</tr></table>
-</div>
-<div class="paragraph"><p>YUM repositories with RPMs are maintained by <a href="https://github.com/erikogan/passenger">Erik Ogan</a> and <a href="http://stealthymonkeys.com/">Stealthy Monkeys Consulting</a>. Only packages for the open source version of Phusion Passenger are provided. <a href="https://www.phusionpassenger.com/enterprise">Phusion Passenger Enterprise</a> customers should use the <a href="#rubygems_generic_install">generic RubyGems installation method</a> or <a href="#tarball_generic_install">the generic tarball installation method</a> instead.</p></div>
-<div class="paragraph"><p>If you use YUM to install Phusion Passenger then you do not need to run <span class="monospaced">passenger-install-apache2-module</span> or <span class="monospaced">passenger-install-nginx-module</span>. The YUM packages contain all the binaries that you need. You also don’t need to modify any Apache or Nginx configuration to get them to load Phusion Passenger, the packages provide configuration snippets for you as well.</p></div>
-<span class="anchor_helper" id="_step_1_import_the_stealthy_monkeys_consulting_8217_s_gpg_key"></span><h4 class="float" data-anchor="_step_1_import_the_stealthy_monkeys_consulting_8217_s_gpg_key">Step 1: Import the Stealthy Monkeys Consulting’s GPG key</h4>
+<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="installing_or_upgrading_on_red_hat"></span><h3 data-comment-topic="installing-or-upgrading-on-red-hat-fedora-centos-or-scientificlinux-1y5ie8b" data-anchor="installing_or_upgrading_on_red_hat">2.4. Installing or upgrading on Red Hat or CentOS</h3>
+<div class="paragraph"><p>We provide an official Phusion Passenger YUM repository with packages for Red Hat Enterprise Linux and CentOS. These packages are automatically built by our build server after we push out a source release, and thus are always up to date with the official source releases.</p></div>
+<div class="paragraph"><p>If you use these packages to install Phusion Passenger then you do not need to run <span class="monospaced">passenger-install-apache2-module</span> or <span class="monospaced">passenger-install-nginx-module</span>. These packages contain all the binaries that you need. These packages also come with SELinux policy modules so that Passenger works nicely with SELinux.</p></div>
+<div class="paragraph"><p>Packages are available for the x86 and x86_64 architectures. Our policy is to support all Red Hat and CentOS releases that still receive full updates by their vendors. The earliest Red Hat and CentOS version we support is version 5.</p></div>
+<div class="sect3">
+<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="install_add_yum_repo"></span><h4 data-comment-topic="adding-our-yum-repository-1fb671i" data-anchor="install_add_yum_repo">2.4.1. Adding our YUM repository</h4>
+<div class="olist arabic"><ol class="arabic">
+<li>
+<p>
+Install <a href="https://fedoraproject.org/wiki/EPEL">EPEL</a> and a few other prerequisites.
+</p>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>rpm --import http://passenger.stealthymonkeys.com/RPM-GPG-KEY-stealthymonkeys.asc</pre>
+<pre>sudo yum install epel-release pygpgme curl</pre>
 </div>
 </div>
-<span class="anchor_helper" id="_step_2_install_the_release_package"></span><h4 class="float" data-anchor="_step_2_install_the_release_package">Step 2: Install the release package</h4>
-<div class="paragraph"><p>Install the passenger-release package from the <a href="http://passenger.stealthymonkeys.com/">main repository</a>.</p></div>
-<div class="paragraph"><p>Fedora Core 17:</p></div>
+</li>
+<li>
+<p>
+Download the Passenger YUM repository definition.
+</p>
+<div class="dlist"><dl>
+<dt class="hdlist1">
+<strong>Open source</strong>
+</dt>
+<dd>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>yum install http://passenger.stealthymonkeys.com/fedora/17/passenger-release.noarch.rpm</pre>
+<pre>sudo curl --fail -sSLo /etc/yum.repos.d/passenger.repo https://oss-binaries.phusionpassenger.com/yum/definitions/el-passenger.repo</pre>
 </div>
 </div>
-<div class="paragraph"><p>Fedora Core 16:</p></div>
+</dd>
+<dt class="hdlist1">
+<strong>Enterprise</strong>
+</dt>
+<dd>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>yum install http://passenger.stealthymonkeys.com/fedora/16/passenger-release.noarch.rpm</pre>
+<pre>unset HISTFILE
+sudo curl --fail -sSLo -u download:YOUR_DOWNLOAD_TOKEN /etc/yum.repos.d/passenger.repo https://www.phusionpassenger.com/enterprise_yum/el-passenger-enterprise.repo</pre>
 </div>
 </div>
-<div class="paragraph"><p>Fedora Core 15:</p></div>
+<div class="paragraph"><p>The <span class="monospaced">unset HISTFILE</span> command ensures that your download token isn’t saved to the Bash history file.</p></div>
+<div class="paragraph"><p>You can find the correct value for <em>YOUR_DOWNLOAD_TOKEN</em> in the <a href="https://www.phusionpassenger.com/orders">Customer Area</a>.</p></div>
+</dd>
+</dl></div>
+</li>
+<li>
+<p>
+Secure <span class="monospaced">passenger.repo</span>:
+</p>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>yum install http://passenger.stealthymonkeys.com/fedora/15/passenger-release.noarch.rpm</pre>
+<pre>sudo chown root: /etc/yum.repos.d/passenger.repo
+sudo chmod 600 /etc/yum.repos.d/passenger.repo</pre>
 </div>
 </div>
-<div class="paragraph"><p>Fedora Core 14:</p></div>
-<div class="listingblock">
-<div class="content monospaced">
-<pre>yum install http://passenger.stealthymonkeys.com/fedora/14/passenger-release.noarch.rpm</pre>
-</div>
+</li>
+</ol></div>
 </div>
-<div class="paragraph"><p>RHEL 6 / CentOS 6 / ScientificLinux 6: (Note: these packages depend on <a href="http://fedoraproject.org/wiki/EPEL">EPEL</a>.)</p></div>
-<div class="listingblock">
-<div class="content monospaced">
-<pre>yum install http://passenger.stealthymonkeys.com/rhel/6/passenger-release.noarch.rpm</pre>
-</div>
+<div class="sect3">
+<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="_installing_packages_2"></span><h4 data-comment-topic="installing-packages-12a3uty" data-anchor="_installing_packages_2">2.4.2. Installing packages</h4>
+<div class="admonitionblock">
+<table><tr>
+<td class="icon">
+<img src="./images/icons/note.png" alt="Note">
+</td>
+<td class="content">
+<div class="title">Notes about SELinux on Red Hat 6 and CentOS 6</div>
+<div class="paragraph"><p>If you are on Red Hat 6 or CentOS 6, and you are also using SELinux in enforcing mode, then Passenger requires kernel &gt;= 2.6.39.</p></div>
+<div class="paragraph"><p>If you want to install Passenger on Red Hat 6 or CentOS 6, without upgrading your kernel, then you must <strong>disable</strong> SELinux completely. Edit <span class="monospaced">/etc/selinux/config</span>, set <span class="monospaced">SELINUX=disabled</span> and reboot. Note that merely setting SELinux to permissive mode is not enough.</p></div>
+<div class="paragraph"><p>This issue does not apply to Red Hat &gt;= 7 and CentOS &gt;= 7, because these OS versions supply recent enough kernel versions.</p></div>
+</td>
+</tr></table>
 </div>
-<div class="paragraph"><p>RHEL 5 / CentOS 5 / ScientificLinux 5: (Note: these packages depend on <a href="http://fedoraproject.org/wiki/EPEL">EPEL</a>.)</p></div>
+<div class="paragraph"><p>You can install the Passenger packages as follows.</p></div>
+<div class="dlist"><dl>
+<dt class="hdlist1">
+<strong>Open source</strong>
+</dt>
+<dd>
+<div class="olist arabic"><ol class="arabic">
+<li>
+<p>
+<a href="#install_add_yum_repo">Add our YUM repository.</a>
+</p>
+</li>
+<li>
+<p>
+Install the package:
+</p>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>rpm -Uvh http://passenger.stealthymonkeys.com/rhel/5/passenger-release.noarch.rpm</pre>
+<pre>sudo yum install mod_passenger</pre>
 </div>
 </div>
-<span class="anchor_helper" id="_step_3_install_the_right_phusion_passenger_package"></span><h4 class="float" data-anchor="_step_3_install_the_right_phusion_passenger_package">Step 3: Install the right Phusion Passenger package</h4>
-<div class="paragraph"><p>From there you can use <a href="http://prefetch.net/articles/yum.html">YUM</a> to install packages. For example, try one of these:</p></div>
-<div class="paragraph"><p>Phusion Passenger for Apache:</p></div>
+</li>
+<li>
+<p>
+Stop/start Apache (reload or restart is not enough when upgrading):
+</p>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>yum install mod_passenger</pre>
+<pre>sudo service httpd stop; sudo service httpd start</pre>
 </div>
 </div>
-<div class="paragraph"><p>Phusion Passenger for Nginx:</p></div>
+</li>
+</ol></div>
+</dd>
+<dt class="hdlist1">
+<strong>Enterprise</strong>
+</dt>
+<dd>
+<div class="olist arabic"><ol class="arabic">
+<li>
+<p>
+Download your license key from the <a href="https://www.phusionpassenger.com/orders">Customer Area</a> and save it as <span class="monospaced">/etc/passenger-enterprise-license</span>.
+</p>
+</li>
+<li>
+<p>
+<a href="#install_add_yum_repo">Add our YUM repository.</a>
+</p>
+</li>
+<li>
+<p>
+Install the packages:
+</p>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>yum install nginx-passenger</pre>
+<pre>sudo yum install mod_passenger_enterprise</pre>
 </div>
 </div>
-<div class="paragraph"><p>Phusion Passenger Standalone:</p></div>
+</li>
+<li>
+<p>
+Stop/start Apache (reload or restart is not enough when upgrading):
+</p>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>yum install passenger-standalone</pre>
+<pre>sudo service httpd stop; sudo service httpd start</pre>
 </div>
 </div>
-<span class="anchor_helper" id="_building_your_own_packages"></span><h4 class="float" data-anchor="_building_your_own_packages">Building your own packages</h4>
-<div class="paragraph"><p>There are instructions for building your own packages and Yum repositories in the <a href="https://github.com/phusion/passenger/tree/master/rpm#readme">rpm directory ReadMe</a> within the <a href="https://github.com/phusion/passenger">GitHub repository</a>.</p></div>
+</li>
+</ol></div>
+</dd>
+</dl></div>
+<div class="paragraph"><p>You can now proceed with a chapter for Deploying your (specific type of) application.</p></div>
+</div>
 </div>
 <div class="sect2">
 <a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="_installing_or_upgrading_on_heroku"></span><h3 data-comment-topic="installing-or-upgrading-on-heroku-o0o2mk" data-anchor="_installing_or_upgrading_on_heroku">2.5. Installing or upgrading on Heroku</h3>
@@ -4165,6 +4244,14 @@ In <em>.htaccess</em>, if <span class="monospaced">AllowOverride Options</span>
 <div class="paragraph"><p>Whether to enable <a href="#user_switching">user switching support</a>.</p></div>
 <div class="paragraph"><p>This option may only occur once, in the global server configuration.
 The default value is <em>on</em>.</p></div>
+<div class="admonitionblock">
+<table><tr>
+<td class="icon">
+<img src="./images/icons/warning.png" alt="Warning">
+</td>
+<td class="content">If you’re on Red Hat or CentOS, be sure to read <a href="#user_switching_rpm_caveats">the Red Hat and CentOS user switching caveats</a>.</td>
+</tr></table>
+</div>
 </div>
 <div class="sect3">
 <a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="PassengerUser"></span><h4 data-comment-topic="passengeruser" data-anchor="PassengerUser">7.5.2. PassengerUser &lt;username&gt;</h4>
@@ -5695,15 +5782,19 @@ In <em>.htaccess</em>, if <span class="monospaced">AllowOverride Options</span>
 <div class="paragraph"><p>It is therefore important that, while Phusion Passenger is working, the instance directory is never removed or tampered with. However, the default path for the instance registry directory is the system’s temporary directory, and some systems may run background jobs that periodically clean this directory. If this happens, and the files inside the instance directory are removed, then it will cause Phusion Passenger to malfunction: Phusion Passenger won’t be able to communicate with its own processes, and you will see all kinds of connection errors in the log files. This malfunction can only be recovered from by restarting Apache. You can prevent such cleaning background jobs from interfering by setting this option to a different directory.</p></div>
 <div class="paragraph"><p>This option is also useful if Apache is not allowed to write to the system’s temporary directory (which is the case on some systems with strict SELinux policies) or if the partition that the temporary directory lives on doesn’t have enough disk space.</p></div>
 <div class="paragraph"><p>The instance directory is automatically removed when Apache shuts down.</p></div>
-<div class="paragraph"><p>This option may be specified once, in the global server configuration. The default value is the value of the <span class="monospaced">$TMPDIR</span> environment variable. Or, if <span class="monospaced">$TMPDIR</span> is not set, <span class="monospaced">/tmp</span>.</p></div>
-<div class="admonitionblock">
-<table><tr>
-<td class="icon">
-<img src="./images/icons/note.png" alt="Note">
-</td>
-<td class="content">This option has no effect when you are using <a href="#flying_passenger">Flying Passenger</a>. Instead, you should configure this by passing the <span class="monospaced">--instance-registry-dir</span> command line option to the Flying Passenger daemon.</td>
-</tr></table>
-</div>
+<div class="paragraph"><p>This option may be specified once, in the global server configuration. The default value is as follows:</p></div>
+<div class="ulist"><ul>
+<li>
+<p>
+If you are on Red Hat and CentOS, and installed Passenger through the RPMs provided by Phusion, then the default value is <span class="monospaced">/var/run/passenger-instreg</span>.
+</p>
+</li>
+<li>
+<p>
+Otherwise, the default value is the value of the <span class="monospaced">$TMPDIR</span> environment variable. Or, if <span class="monospaced">$TMPDIR</span> is not set, <span class="monospaced">/tmp</span>.
+</p>
+</li>
+</ul></div>
 <div class="paragraph">
 <div class="title">Note regarding command line tools</div>
 <p>Some Phusion Passenger command line administration tools, such as <span class="monospaced">passenger-status</span>, must know what Phusion Passenger’s instance registry directory is in order to function properly. You can pass the directory through the <span class="monospaced">PASSENGER_INSTANCE_REGISTRY_DIR</span> or the <span class="monospaced">TMPDIR</span> environment variable.</p>
@@ -6017,46 +6108,15 @@ The Apache process doesn’t have permission to access your Rails application’
 </ol></div>
 </div>
 <div class="sect2">
-<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="_the_apache_error_log_says_that_the_spawn_manager_script_does_not_exist_or_that_it_does_not_have_permission_to_execute_it"></span><h3 data-comment-topic="the-apache-error-log-says-that-the-spawn-manager-script-does-not-exist-or-that-it-does-not-have-permission-to-execute-it-1fmoozk" data-anchor="_the_apache_error_log_says_that_the_spawn_manager_script_does_not_exist_or_that_it_does_not_have_permission_to_execute_it">8.7. The Apache error log says that the spawn manager script does not exist, or that it does not have permission to execute it</h3>
-<div class="paragraph"><p>If you are sure that the <em>PassengerRoot</em> configuration option is set correctly,
-then this problem is most likely caused by the fact that you’re running Apache
-with SELinux. On Fedora, CentOS and RedHat Enterprise Linux, Apache is locked
-down by SELinux policies.</p></div>
-<div class="paragraph"><p>To solve this problem, you must set some permissions on the Phusion Passenger files
-and folders, so that Apache can access them.</p></div>
-<div class="ulist"><ul>
-<li>
-<p>
-If you’ve installed Phusion Passenger via a gem, then run this command to determine
-  Phusion Passenger’s root folder:
-</p>
-<div class="listingblock">
-<div class="content monospaced">
-<pre>passenger-config --root</pre>
-</div>
-</div>
-<div class="paragraph"><p>Next, run the following command:</p></div>
+<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="apache_selinux_permissions"></span><h3 data-comment-topic="apache-cannot-access-my-app-s-files-because-of-selinux-errors-6febhd" data-anchor="apache_selinux_permissions">8.7. Apache cannot access my app’s files because of SELinux errors</h3>
+<div class="paragraph"><p>On Red Hat Enterprise Linux and CentOS, Apache is locked down by a security mechanism called SELinux. This security mechanism works on top of normal Unix permissions. In order for Apache to be able to access your app’s files, you must set the proper SELinux labels on your files.</p></div>
+<div class="paragraph"><p>First, ensure that your app does not live in a home directory. It is not possible to allow Apache to read files from your home directory.</p></div>
+<div class="paragraph"><p>Second, give your app’s files the <span class="monospaced">httpd_sys_content_t</span> labels by running the following command:</p></div>
 <div class="listingblock">
 <div class="content monospaced">
-<pre>chcon -R -h -t httpd_sys_content_t /path-to-passenger-root</pre>
+<pre>sudo chcon -R -h -t httpd_sys_content_t /path-to-your-app</pre>
 </div>
 </div>
-<div class="paragraph"><p>where <em>/path-to-passenger-root</em> should be replaced with whatever
-<span class="monospaced">passenger-config --root</span> printed.</p></div>
-</li>
-<li>
-<p>
-If you’ve installed Phusion Passenger via the source tarball, then run the following
-  command:
-</p>
-<div class="listingblock">
-<div class="content monospaced">
-<pre>chcon -R -h -t httpd_sys_content_t /path/to/passenger/folder</pre>
-</div>
-</div>
-</li>
-</ul></div>
-<div class="paragraph"><p>Once the permissions are fixed, restart Apache.</p></div>
 </div>
 <div class="sect2">
 <a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="_the_application_thinks_its_not_on_ssl_even_though_it_is"></span><h3 data-comment-topic="the-application-thinks-its-not-on-ssl-even-though-it-is-u9fcp1" data-anchor="_the_application_thinks_its_not_on_ssl_even_though_it_is">8.8. The application thinks its not on SSL even though it is</h3>
@@ -6572,7 +6632,35 @@ The application fails to start and its error message mentions the path <em>/none
 <div class="paragraph"><p>Whatever user your application runs as, it must have read access to the <a href="#application_root">application root</a>, and read/write access to the application’s <em>logs</em> directory.</p></div>
 </div>
 <div class="sect3">
-<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="finding_out_app_user"></span><h4 data-comment-topic="finding-out-what-user-an-application-is-running-as-7uwrol" data-anchor="finding_out_app_user">10.1.4. Finding out what user an application is running as</h4>
+<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="user_switching_rpm_caveats"></span><h4 data-comment-topic="red-hat-and-centos-caveats-1335bpz" data-anchor="user_switching_rpm_caveats">10.1.4. Red Hat and CentOS caveats</h4>
+<div class="admonitionblock">
+<table><tr>
+<td class="icon">
+<img src="./images/icons/note.png" alt="Note">
+</td>
+<td class="content">This information only applies if you installed Passenger through the RPM packages provided by Phusion. If you did not installed Passenger through the RPM packages provided by Phusion, then you can ignore this section.</td>
+</tr></table>
+</div>
+<div class="paragraph"><p>If you installed Passenger through Phusion’s RPM packages, and you want to disable user switching, then you must also change <a href="#PassengerInstanceRegistryDir">the location of the instance registry directory</a>.</p></div>
+<div class="paragraph"><p>This is because our RPMs configure the default instance registry directory to <span class="monospaced">/var/run/passenger-instreg</span>, which is only writable by root. If you disable user switching, then the Passenger processes will run as
+  <a href="#PassengerDefaultUser">PassengerDefaultUser</a>,
+which (as long as it’s not root) won’t be able to write to that directory.</p></div>
+<div class="paragraph"><p>Note that any alternative instance registry directory must have the proper SELinux context, allowing the web server to read and write to it. We recommend that you create a directory <span class="monospaced">/var/lib/passenger-instreg</span> and give it the label <span class="monospaced">var_run_t</span>:</p></div>
+<div class="listingblock">
+<div class="content monospaced">
+<pre>sudo mkdir /var/lib/passenger-instreg
+sudo chcon -t var_run_t /var/lib/passenger-instreg</pre>
+</div>
+</div>
+<div class="paragraph"><p>Then, in your Apache config file:</p></div>
+<div class="listingblock">
+<div class="content monospaced">
+<pre>PassengerInstanceRegistryDir /var/lib/passenger-instreg</pre>
+</div>
+</div>
+</div>
+<div class="sect3">
+<a href="javascript:void(0)" class="comments empty" title="Add a comment"><span class="count"></span></a><span class="anchor_helper" id="finding_out_app_user"></span><h4 data-comment-topic="finding-out-what-user-an-application-is-running-as-7uwrol" data-anchor="finding_out_app_user">10.1.5. Finding out what user an application is running as</h4>
 <div class="paragraph"><p>To find our what user an application is started as, first access its URL in your browser so that Phusion Passenger starts the application. For example:</p></div>
 <div class="listingblock">
 <div class="content monospaced">