passenger 6.0.1 → 6.0.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: d32b7b733ff8e0ad7bbfba5e03e4550f5688c991
-  data.tar.gz: 9fd2550bd78fdbd5a7d40ebee8e41cd0fe748a3d
+  metadata.gz: 87f764bdc885d673f1ba838702def911cfd13ba8
+  data.tar.gz: 9982f3dc4eb3f18af26e2b1192b79a8baf9fe19b
 SHA512:
-  metadata.gz: 353d24ed6888fc0eb1aa81308a7d81390f87e8b51c67ae384b68982cc4cc493d3a3129dc53087c17459e69c8b641728c03a8033f1b2ca8aef653c0dfdd001858
-  data.tar.gz: 1a9d27b7d986f2249bc5536b0002ec17b5c0c2b1f9d638d1ccd144dc3079398ecc1b2b773ba79d2c5ed66a8a95fba8fafd77981b44fca338f463396ef7970fde
+  metadata.gz: '08b7a77a27a7078e34385dd4b9b4b64f6b47da977c43c004bbc909a6f13d0607a107d13177de5f09cd5cb2a4b45a1bed4cac8f7c39b42eb9aaff39cbc40bb9c0'
+  data.tar.gz: a16daedbe97fe019dc1be1515a763ffacbed6fefff59620637ee7897df2df50c495f05fb306ef679e1af93ebf28ee6b40b6729c0c5e8d52587162ba571bf41fc

data/CHANGELOG

@@ -1,3 +1,130 @@
+Release 6.0.6
+-------------------------------
+ * Update gemspec with up to date metadata.
+ * Reverts the addition of the 'etc' gem to the Passenger gemspec, because it broke on normal ruby installs. Closes GH-2283.
+ * Builds Ubuntu focal Nginx dynamic module package against Nginx 1.18.0. Closes GH-2291.
+ * No longer providing prebuilt Ruby 2.1 or 2.2 binaries, they have been EOL for years and rubygems no longer supports them.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+    - ccache 3.7.10 (was 3.7.9)
+    - Curl 7.71.1 (was 7.69.1)
+    - Git 2.27.0 (was 2.26.2)
+    - GnuPG 2.2.21 (was 2.2.20)
+    - libgpg_error 1.38 (was 1.37)
+    - libgcrypt 1.8.6 (was 1.8.5)
+    - RubyGems 3.1.4 (was 3.0.8)
+
+Release 6.0.5
+-------------
+
+ * [Enterprise] Fixed a regression (introduced in 5.0.0) where Flying Passenger could not update the Passenger configuration. Closes GH-1554.
+ * Adds Ubuntu 20.04 "Focal" packages, and removes Ubuntu 19.04 "Disco" packages.
+ * Adds RHEL / CentOS 8 packages.
+ * [Nginx] Converts CentOS 7 packages to provide a dynamic module instead of a full Nginx install.
+ * Fixes the encoding name for xml output from the `passenger-status --show=xml` command. Closes GH-2248.
+ * Adds the 'etc' gem as an explicit dependency. Closes GH-2124.
+ * Adds a user agent to the passenger pre-spawn script. Closes GH-1534.
+ * Fixes a compilation issue on FreeBSD. Closes GH-2240.
+ * Fixes an issue where rack bodies may not be processed correctly.
+ * Improves the database reconnection speed in forked processes. closes GH-2253.
+ * [Nginx] Adds a config option `passenger_temp_path` to set the path used for the disk backed response cache. Re-Closes GH-2075.
+ * [Apache] Protects the path info and script name passed to the app from modifications done by mod_security. Closes GH-2198.
+ * Ensures baseuri is set per request, even if config is loaded from cache. Closes GH-2117.
+ * Make temp dir toucher cleanup code more resilient to permissions issues.
+ * [Nginx] Bumps the preferred Nginx version to 1.18.0 (previously 1.17.3).
+ * [Nginx] The preferred PCRE version is now 8.44 (previously 8.43).
+ * Removed deprecated rubyforge gemspec property. Contributed by @olleolleolle.
+ * Adds an option for specifying the attributes on the sticky session cookie:
+	- Apache:     PassengerStickySessionsCookieAttributes     "SameSite=Lax; Secure;"
+	- Nginx:      passenger_sticky_sessions_cookie_attributes "SameSite=Lax; Secure;"
+	- Standalone: --sticky-sessions-cookie-attributes         "SameSite=Lax; Secure;"
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+    - ccache 3.7.9 (was 3.7.3)
+    - Curl 7.69.1 (was 7.66.0)
+    - Git 2.26.2 (was 2.23.0)
+    - GnuPG 2.2.20 (was 2.2.17)
+    - libgpg_error 1.37 (was 1.36)
+    - OpenSSL 1.0.2u (was 1.0.2t)
+    - PCRE 8.44 (was 8.43)
+    - s3cmd 2.1.0 (was 2.0.2)
+    - RubyGems 3.0.8 (was 3.0.6)
+    - Rubies:
+      - 2.4.6 -> 2.4.10
+      - 2.5.5 -> 2.5.8
+      - 2.6.3 -> 2.6.6
+      + 2.7.1
+
+
+Release 6.0.4
+-------------
+
+ * Adds Debian 10 "Buster" packages.
+
+
+Release 6.0.3
+-------------
+
+ * Add an option to specify the spawn dir during startup, which is specifically useful for CageFS users. Contributed by @plmnikulin. Closes GH-2145.
+
+    - Apache: `PassengerSpawnDir`
+    - Nginx: `passenger_spawn_dir`
+
+ * [Nginx] Bumps the preferred Nginx version to 1.17.3 (previously 1.15.8).
+ * [Nginx] The preferred PCRE version is now 8.43 (previously 8.42).
+ * Adds Ubuntu 19.04 "Disco" packages, and removes Ubuntu 18.10 "Cosmic" and Ubuntu 14.04 "Trusty" packages.
+ * Changes minimum supported macOS version to 10.12 Sierra.
+ * Improves container detection and fixes a compilation warning in GCC 8+. Closes GH-2186.
+ * Allowed externally specifying an app instance to send a request to. Contributed by Mark R. James (@mrj).
+ * Fixed an incompatibility with sending requests to specific app instances, when using the rails web-console gem. Contributed by Mark R. James (@mrj).
+ * Fixed a regression (introduced in 5.1.9) where some hooks were not called. Closes GH-2103. Contributed by Mark R. James (@mrj).
+ * Fixes compilation with clang 8 (latest macOS update) by updating vendored boost library from 1.67 to 1.69.
+ * Reverts a regression intruduced in 6.0.2 where Passenger would crash if it had to use the disk backed response cache. Closes GH-2189.
+ * [Nginx] Adds an option `passenger_buffer_upload` to allow buffering uploaded data in Passenger before forwarding it to the app. As a workaround for apps that cannot handle chunked data.
+ * [Enterprise] When using deferred port binding, no longer binds port if all apps do not start up.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+    - PCRE 8.43 (was 8.42)
+    - Curl 7.65.1 (was 7.64.0)
+    - ccache 3.7.3 (was 3.6)
+    - Git 2.22.0 (was 2.20.1)
+    - OpenSSL 1.0.2s (was 1.0.2q)
+    - RubyGems 3.0.6 (was 3.0.2)
+    - GnuPG 2.2.16 (was 2.2.13)
+    - libgcrypt 1.8.5 (was 1.8.4)
+    - libgpg_error 1.36 (was 1.35)
+    - libiconv 1.16 (was 1.15)
+    - Ruby:
+      - 2.4.5 -> 2.4.6
+      - 2.5.3 -> 2.5.5
+      - 2.6.1 -> 2.6.3
+
+
+Release 6.0.2
+-------------
+
+ * Allow compilation to work when Apple messed up their system ruby headers.
+ * Only try to read pid 1's /proc files as root, in container detection. Closes GH-2168.
+ * Add an option to disable prefixing application logs with "App PID stdout". Contributed by Ian Kottman. Closes GH-1915.
+
+    - Apache: `PassengerDisableLogPrefix`
+    - Nginx: `passenger_disable_log_prefix`
+
+ * Add support for identifying the Passenger instance by PID. Closes GH-2146. Contributed by Saverio Miroddi (@saveriomiroddi).
+ * [Ruby] Made Passenger more resiliant to Rack bugs. Closes GH-2150.
+ * [Nginx] Do not touch Nginx's proxy_temp_path var in Passenger's nginx modules. Closes GH-2075. Contributed by Roman Berestnikov-Sivolov (@ROMB).
+ * Updated Ruby versions used in precompiled binaries (used for e.g. gem installs) to include 2.6.1.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+    - Curl: 7.64.0 (was: 7.63.0)
+    - Ruby: 2.6.1 (was: 2.6.0)
+    - RubyGems 3.0.2 (was: 3.0.1)
+    - ccache 3.6 (was: 3.5)
+    - GnuPG 2.2.13 (was: 2.2.12)
+    - libassuan 2.5.3 (was: 2.5.2)
+    - libgpg_error 1.35 (was: 1.33)
+
+
 Release 6.0.1
 -------------
 
@@ -317,7 +444,7 @@ Release 5.1.1
  * The security update check now reports whether libcurl + SSL backend are statically linked to Passenger, in which case the check also needs to warn about relevant OpenSSL vulnerabilities in the linked library.
  * Increases the allowed line lengths emitted by apps at startup.
  * Adds support for the unary 'not' operator in the Union Station filter language.
- * [Enterprise] Add missing flying-passenger integration mode to security update check. 
+ * [Enterprise] Add missing flying-passenger integration mode to security update check.
  * Fixes support for Rails 5.0.1 Action Cable. Specifically, we now support the `options` argument in the `write_nonblock` method in hijacked Rack IO sockets.
  * [Apache] Introduces a small delay to prevent running the Security Update Checker twice at startup.
 
@@ -329,11 +456,11 @@ Release 5.1.0
  * [Enterprise] When running a Rails app in multithreaded mode, Passenger Enterprise automatically tags Rails logs with the current thread number. This makes it possible to distinguish logs generated by different threads.
  * Fixes permissions issue on Linux when setting OOM score after lowering privileges. Closes GH-1858.
  * [Standalone] Allows raw json envvars in Passengerfile.json. Closes GH-1837.
- * [Standalone] Make the `max_requests` option available on the command line as well. 
+ * [Standalone] Make the `max_requests` option available on the command line as well.
  * Fixes unaligned memory access in base64 decoder on platforms that have strict aliasing requirements (non x86/x86_64). Closes GH-1646.
  * Introduces daily Passenger security update check to warn (error log) if there are newer Passenger versions with important security fixes (describing what was discovered, what is affected, which version has the fix).
  * Fixes compilation on Linux when a non-glibc C library is in use. Closes GH-1870.
- * `passenger-install-nginx-module` and the standalone compiler now add the http v2, realip and addition module flags for Nginx (just like the APT/RPM/autobuilder already had). Closes GH-1788. 
+ * `passenger-install-nginx-module` and the standalone compiler now add the http v2, realip and addition module flags for Nginx (just like the APT/RPM/autobuilder already had). Closes GH-1788.
  * [Apache] Fixes PassengerShowVersionInHeader option. Thanks to Sebastian Welther for contributing this.
  * Passenger now reports when you try to use Node.js or Meteor clustering, and tries to continue with just a nonfunctional shim in place, so that if your code uses the clustering APIs your app may still work.
  * Updates libev config.sub and config.guess to support newer platforms such as the IBM power 8.
@@ -496,7 +623,7 @@ Release 5.0.22
  * The `passenger-config validate-install` command no longer prints false warnings about duplicate Passenger installs on systems that use RBenv. Closes GH-1627.
  * Fixes race conditions in the automatic building of the Ruby native support extension. Closes GH-1570.
  * [Enterprise] Fixes compatibility with byebug 7.0. Closes GH-1662.
- * Support Union Station logging for Node.js applications, with Express/MongoDB automatically supported. 
+ * Support Union Station logging for Node.js applications, with Express/MongoDB automatically supported.
  * The Ruby Union Station hooks no longer abort with a fatal error when the application does not call the Union Station initializer method during startup. The error is now only logged.
  * In case of an error response (HTTP 5xx), Union Station logging will also contain request headers.
  * The Union Station hooks are now more resilient against environment variable problems.
@@ -559,7 +686,7 @@ Release 5.0.16
  * Supports seek() such that body.rewind works when using Rack middleware that uses Zlib::GzipReader (e.g. for compressed requests). Closes GH-1553.
  * [Apache] Improves detection of Apache configuration file problems. Closes GH-1577.
  * [Enterprise] Fixes installation of the Passenger Enterprise Apache module on Debian Testing.
- * Fixes logging of HTTP response code for Union Station. This regression was introduced by Passenger 5. Closes GH-1581. 
+ * Fixes logging of HTTP response code for Union Station. This regression was introduced by Passenger 5. Closes GH-1581.
  * Adds a new subcommand `passenger-config about support-binaries-dir`.
  * Fixes a regression in the Node.js loader with regard to custom startup files. This bug was introduced in 5.0.14. Closes GH-1557 (again).
  * Fixes a crash when a Ruby application is accessed through a sub-URI and a root virtual host at the same time.
@@ -2380,9 +2507,9 @@ Release 2.2.15
  * [Apache] Fixed incorrect temp dir cleanup by passenger-status
    On some systems, running passenger-status could print the following
    message:
-   
+
       *** Cleaning stale folder /tmp/passenger.1234
-   
+
    ...after which Phusion Passenger breaks because that directory is
    necessary for it to function properly. The cause of this problem
    has been found and has been fixed.
@@ -2459,10 +2586,10 @@ Release 2.2.11
    affects Apache. When under high load, Apache might freeze and stop
    responding to requests. It is caused by a race condition which is
    why it escaped our last release testing.
-   
+
    This problem does not affect Nginx; you only have to upgrade if
    you're using Apache.
-   
+
    http://groups.google.com/group/phusion-passenger/t/d5bb2f17c8446ea0
 
 
@@ -2484,20 +2611,20 @@ Release 2.2.9
    Actually, previous Phusion Passenger releases were already compatible
    with Rails 3, depending on the spawn method that would be invoked. Here's
    the story:
-   
+
    Since Phusion Passenger 2.2.8, when the file config.ru exists, Phusion
    Passenger will treat the app as a Rack app, not as a Rails app. This is
    in contrast to earlier versions which gave Rails detection more priority
    than Rack detection. Phusion Passenger loads Rack apps and Rails apps in
    different ways. The Rails loader was not compatible with Rails 3, which
    is what we've fixed in this release.
-   
+
    That said, a Rails 3 app would have worked out-of-the-box on Phusion
    Passenger 2.2.8 as well because Rails 3 apps include a config.ru file
    by default, causing Phusion Passenger 2.2.8 to use the Rack loader.
    Earlier versions of Phusion Passenger would just completely bail out
    because they'd use the Rails loader.
-   
+
    That said, with 2.2.9 there are still some caveats:
    - Smart spawning (the mechanism with which REE's 33% memory reduction
      is implemented) is *not* supported for Rack apps. This means that if
@@ -2506,7 +2633,7 @@ Release 2.2.9
    - Rails 3 depends on Rack 1.1.0. You must have Rack 1.1.0 installed as
      a gem, even if you've bundled it with the gem bundler. This is because
      Phusion Passenger itself depends on Rack.
-   
+
    Both of these caveats are temporary. We have plans to solve both of these
    properly in the future.
  * What's up with the Gem Bundler?
@@ -2516,9 +2643,9 @@ Release 2.2.9
    version seems to work fine. Please note that you need to insert the
    following snippet in config/preinitializer.rb, as instructed by the gem
    bundler's README:
-   
+
      require "#{RAILS_ROOT}/vendor/gems/environment"
-   
+
    The Rails::Boot monkey patching code as posted at
    http://yehudakatz.com/2009/11/03/using-the-new-gem-bundler-today/
    does not seem to be required anymore.
@@ -2567,7 +2694,7 @@ Release 2.2.8
    seen an error message along the lines of
 
       *** Exception IOError in Passenger RequestHandler (closed stream)
-   
+
    then this is a Ruby bug at work. This bug has been fixed in Ruby 1.9.2,
    but Ruby 1.9.1 still contains this bug. We've added a workaround so that
    the bug is not triggered with this Ruby version. Issue #432.
@@ -2658,7 +2785,7 @@ Release 2.2.5
    headers. It turns out that some people relied on the old behavior, we so now
    environment variables set with mod_env are set in both ENV and in the CGI
    environment.
-   
+
    Fixes bug #335.
 
  * [Apache] Fixed compilation problems on some Linux systems with older versions of Apache
@@ -2726,7 +2853,7 @@ Release 2.2.5
    order: first models, then controllers, then helpers.
 
    Bug #359.
- 
+
  * Fixed a few bugs in WSGI compliance
    PATH_INFO is supposed to be set to the request URI, but without the query
    string and without the base URI. This has been fixed: bug #360.

data/CONTRIBUTORS

@@ -40,6 +40,7 @@ Gokulnath Manakkattil
 Gregory Potamianos
 Hongli Lai (Phusion)
 Ian Ehlert
+Ian Kottman
 Igor Vuk
 isaac
 Isaac Reuben
@@ -63,6 +64,7 @@ Luuk Hafkamp (Phusion)
 Luuk Hendriks (Phusion)
 MAEDA Go
 Magnus Holm
+Mark R. James
 Michal Papis
 Michał Pokrywka
 Mike
@@ -72,6 +74,7 @@ Nathaniel Bibler
 Neil Wilson
 Ninh Bui (Phusion)
 Oleksiy Shchukin
+Olle Jonsson
 Pat Downey
 Paul B
 Paul Kmiec
@@ -79,6 +82,7 @@ Pepijn Looije
 Perry Smith
 Philip M. Gollucci
 PikachuEXE
+plmnikulin
 Po-Chuan Hsieh
 Radagaisus
 Redmar Kerkhoff
@@ -87,11 +91,13 @@ Richard Michael
 Rob Paisley
 Robin Bowes
 Romain Tartière
+ROMB
 Ruslan Ermilov (NGINX Inc)
 Ryan Schwartz
 Ryo Onodera
 Saimon Moore
 Sam Pohlenz
+Saverio Miroddi
 Sean Wilkinson
 Sebastian Delmont
 Sebastian Welther

data/bin/passenger-install-nginx-module

@@ -268,7 +268,7 @@ private
     new_screen
     puts "<banner>PCRE (required by Nginx) not installed, downloading it...</banner>"
 
-    url = "http://downloads.sourceforge.net/project/pcre/pcre/#{PREFERRED_PCRE_VERSION}/pcre-#{PREFERRED_PCRE_VERSION}.tar.gz"
+    url = "https://ftp.pcre.org/pub/pcre/pcre-#{PREFERRED_PCRE_VERSION}.tar.gz"
     dirname = "pcre-#{PREFERRED_PCRE_VERSION}"
     tarball = "#{@working_dir}/pcre.tar.gz"
 

data/bin/passenger-status

@@ -55,6 +55,8 @@ DEFAULT_OPTIONS = { :show => 'pool', :color => STDOUT.tty? }.freeze
 def command_show_status(argv, options)
   if argv.empty?
     instance = find_sole_instance
+  elsif options[:pid_identifier]
+    instance = find_instance_by_watchdog_pid(argv[0].to_i)
   else
     instance = find_instance_by_name_prefix(argv[0])
   end
@@ -100,6 +102,16 @@ def find_instance_by_name_prefix(name)
   end
 end
 
+def find_instance_by_watchdog_pid(pid)
+  instance = InstanceRegistry.new.find_by_watchdog_pid(pid)
+
+  if instance
+    return instance
+  else
+    abort "ERROR: there doesn't seem to be a #{PROGRAM_NAME} instance running with the pid #{pid}."
+  end
+end
+
 def show_status(instance, options)
   # if the noshow override is not specified, the default is to show the header, unless show=xml
   if options[:noheader] != true && options[:show] != 'xml'
@@ -292,6 +304,9 @@ def create_option_parser(options)
     opts.on("--force-colors", "Display colors even if stdout is not a TTY") do
       options[:color] = true
     end
+    opts.on("--pid-identifier", "Identify instance by [Watchdog] PID, rather than name.") do
+      options[:pid_identifier] = true
+    end
     opts.on("--verbose", "-v", "Show verbose information.") do
       options[:verbose] = true
     end

data/build/misc.rb

@@ -143,6 +143,8 @@ task :contributors do
   entries.push "Floor Drees (Phusion)"
   entries.delete "Luuk Hafkamp"
   entries.push "Luuk Hafkamp (Phusion)"
+  entries.delete "Luuk Hendriks"
+  entries.push "Luuk Hendriks (Phusion)"
 
   # Non-employee contributors
   entries.push "Ruslan Ermilov (NGINX Inc)"
@@ -152,7 +154,7 @@ task :contributors do
   entries.push "Yichun Zhang"
 
   File.open("CONTRIBUTORS", "w") do |f|
-    f.puts(entries.sort{ |a, b| a.downcase <=> b.downcase }.join("\n"))
+    f.puts(entries.sort{ |a, b| a.downcase <=> b.downcase }.uniq.join("\n"))
   end
   puts "Updated CONTRIBUTORS"
 end

data/build/support/vendor/cxxcodebuilder/lib/cxxcodebuilder/builder.rb

@@ -1,6 +1,6 @@
 # encoding: utf-8
 
-#  Copyright (c) 2016 Phusion Holding B.V.
+#  Copyright (c) 2016-2018 Phusion Holding B.V.
 #
 #  "Union Station" and "Passenger" are trademarks of Phusion Holding B.V.
 #
@@ -360,13 +360,66 @@ module CxxCodeBuilder
     #   bar(int x) {
     #       printf("x = %d\n", x);
     #   }
-    def function(declaration, body = nil)
+    def function(declaration, body = nil, &block)
+      function_or_constructor(declaration, nil, body, &block)
+    end
+
+    # Adds a C++ constructor definition to the internal buffer. This is
+    # like #function, but also allows defining member initializers.
+    # `member_initializers` is a Hash which maps field names to their
+    # initialization expressions.
+    #
+    # Example:
+    #
+    #   member_initializers = {
+    #     'name' => '"Delorean"',
+    #     'color' => 'COLOR_RED'
+    #   }
+    #   constructor('Car::Car()', member_initializers) do
+    #     add_code 'printf("Created a car\n");'
+    #   end
+    #
+    # Output:
+    #
+    #   Car::Car()
+    #       : name("Delorean"),
+    #         color(COLOR_RED)
+    #   {
+    #       printf("Created a car\n");
+    #   }
+    def constructor(declaration, member_initializers, body = nil, &block)
+      function_or_constructor(declaration, member_initializers, body, &block)
+    end
+
+    def function_or_constructor(declaration, member_initializers, body = nil)
       declaration =~ /(.*?)([a-z0-9_:]+)\s*\((.*)\s*(const)?/mi
       return_type_and_attributes = $1
       name_and_params = "#{$2}(#{$3} #{$4}".strip
 
       add_code return_type_and_attributes.strip
-      add_code "#{name_and_params.strip} {"
+      if member_initializers && !member_initializers.empty?
+        add_code "#{name_and_params.strip}"
+        indent do
+          member_initializers.each_with_index do |elem, i|
+            field, expr = elem
+            if i == 0
+              prefix = @indent_string * @indent_level + ': '
+            else
+              prefix = @indent_string * @indent_level + '  '
+            end
+            if i == member_initializers.size - 1
+              suffix = nil
+            else
+              suffix = ','
+            end
+            add_raw_code("#{prefix}#{field}(#{expr})#{suffix}\n")
+          end
+        end
+        add_code '{'
+      else
+        add_code "#{name_and_params.strip} {"
+      end
+
       indent do
         if block_given?
           yield