passenger 6.0.2 → 6.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: '0619ca90cabc94ee6b8801d143b14877ab15500d'
-  data.tar.gz: f65f9070719053192fcc50206cb146cd18dbba2f
+  metadata.gz: ebb3374512eae8eb1edd402341ea109452844677
+  data.tar.gz: db47b30191bc3f74cb2271e44c23fee48fda4505
 SHA512:
-  metadata.gz: 9e844139554498a4662950e649dcf56b768bc74f9a306ef070d13fa504e2f18869e701fd8ceb064aaba5bb4987277ee9910f8aaf2ec8135f60823645895a1965
-  data.tar.gz: 8b0bc8083d5a620506813ae1946fc900e3ae65016fcd552a5c8ea6273d0cf247482d676146eb889fa776b1059e91d4dc51249c9aa7a2c070120f2d9458e32992
+  metadata.gz: 724090920c409056aa63ff5fc6cc01f21e648a455d7f1bb8102f6da624f567ceb1797493aeec142e1700665126894f934462920dc7b582c66234a2260e5dcb20
+  data.tar.gz: 5d622a75b737a8a3968d123e2260f183092ebcd924494284e6af37f34d8fa04c675d73c08dfa3a2c12df57a7deba2271e430d6e95f6739e21c21e56dd9da5168

data/CHANGELOG

@@ -1,9 +1,50 @@
+Release 6.0.3
+-------------
+
+ * Add and option to specify the spawn dir during startup, which is specifically useful for CageFS users. Contributed by @plmnikulin. Closes GH-2145.
+
+    - Apache: `PassengerSpawnDir`
+    - Nginx: `passenger_spawn_dir`
+
+ * [Nginx] Bumps the preferred Nginx version to 1.17.3 (previously 1.15.8).
+ * [Nginx] The preferred PCRE version is now 8.43 (previously 8.42).
+ * Adds Ubuntu 19.04 "Disco" packages, and removes Ubuntu 18.10 "Cosmic" and Ubuntu 14.04 "Trusty" packages.
+ * Changes minimum supported macOS version to 10.12 Sierra.
+ * Improves container detection and fixes a compilation warning in GCC 8+. Closes GH-2186.
+ * Allowed externally specifying an app instance to send a request to. Contributed by Mark R. James (@mrj).
+ * Fixed an incompatibility with sending requests to specific app instances, when using the rails web-console gem. Contributed by Mark R. James (@mrj).
+ * Fixed a regression (introduced in 5.1.9) where some hooks were not called. Closes GH-2103. Contributed by Mark R. James (@mrj).
+ * Fixes compilation with clang 8 (latest macOS update) by updating vendored boost library from 1.67 to 1.69.
+ * Reverts a regression intruduced in 6.0.2 where Passenger would crash if it had to use the disk backed response cache. Closes GH-2189.
+ * [Nginx] Adds an option `passenger_buffer_upload` to allow buffering uploaded data in Passenger before forwarding it to the app. As a workaround for apps that cannot handle chunked data.
+ * [Enterprise] When using deferred port binding, no longer binds port if all apps do not start up.
+ * Updated various library versions used in precompiled binaries (used for e.g. gem installs):
+
+    - PCRE 8.43 (was 8.42)
+    - Curl 7.65.1 (was 7.64.0)
+    - ccache 3.7.3 (was 3.6)
+    - Git 2.22.0 (was 2.20.1)
+    - OpenSSL 1.0.2s (was 1.0.2q)
+    - RubyGems 3.0.6 (was 3.0.2)
+    - GnuPG 2.2.16 (was 2.2.13)
+    - libgcrypt 1.8.5 (was 1.8.4)
+    - libgpg_error 1.36 (was 1.35)
+    - libiconv 1.16 (was 1.15)
+    - Ruby:
+      - 2.4.5 -> 2.4.6
+      - 2.5.3 -> 2.5.5
+      - 2.6.1 -> 2.6.3
+
 Release 6.0.2
 -------------
 
  * Allow compilation to work when Apple messed up their system ruby headers.
  * Only try to read pid 1's /proc files as root, in container detection. Closes GH-2168.
- * Add an option to disable prefixing application logs with "App PID stdout": `PassengerDisableLogPrefix` (Apache) / `passenger_disable_log_prefix` (Nginx). Closes GH-1915.
+ * Add an option to disable prefixing application logs with "App PID stdout". Contributed by Ian Kottman. Closes GH-1915.
+
+    - Apache: `PassengerDisableLogPrefix`
+    - Nginx: `passenger_disable_log_prefix`
+
  * Add support for identifying the Passenger instance by PID. Closes GH-2146. Contributed by Saverio Miroddi (@saveriomiroddi).
  * [Ruby] Made Passenger more resiliant to Rack bugs. Closes GH-2150.
  * [Nginx] Do not touch Nginx's proxy_temp_path var in Passenger's nginx modules. Closes GH-2075. Contributed by Roman Berestnikov-Sivolov (@ROMB).
@@ -338,7 +379,7 @@ Release 5.1.1
  * The security update check now reports whether libcurl + SSL backend are statically linked to Passenger, in which case the check also needs to warn about relevant OpenSSL vulnerabilities in the linked library.
  * Increases the allowed line lengths emitted by apps at startup.
  * Adds support for the unary 'not' operator in the Union Station filter language.
- * [Enterprise] Add missing flying-passenger integration mode to security update check. 
+ * [Enterprise] Add missing flying-passenger integration mode to security update check.
  * Fixes support for Rails 5.0.1 Action Cable. Specifically, we now support the `options` argument in the `write_nonblock` method in hijacked Rack IO sockets.
  * [Apache] Introduces a small delay to prevent running the Security Update Checker twice at startup.
 
@@ -350,11 +391,11 @@ Release 5.1.0
  * [Enterprise] When running a Rails app in multithreaded mode, Passenger Enterprise automatically tags Rails logs with the current thread number. This makes it possible to distinguish logs generated by different threads.
  * Fixes permissions issue on Linux when setting OOM score after lowering privileges. Closes GH-1858.
  * [Standalone] Allows raw json envvars in Passengerfile.json. Closes GH-1837.
- * [Standalone] Make the `max_requests` option available on the command line as well. 
+ * [Standalone] Make the `max_requests` option available on the command line as well.
  * Fixes unaligned memory access in base64 decoder on platforms that have strict aliasing requirements (non x86/x86_64). Closes GH-1646.
  * Introduces daily Passenger security update check to warn (error log) if there are newer Passenger versions with important security fixes (describing what was discovered, what is affected, which version has the fix).
  * Fixes compilation on Linux when a non-glibc C library is in use. Closes GH-1870.
- * `passenger-install-nginx-module` and the standalone compiler now add the http v2, realip and addition module flags for Nginx (just like the APT/RPM/autobuilder already had). Closes GH-1788. 
+ * `passenger-install-nginx-module` and the standalone compiler now add the http v2, realip and addition module flags for Nginx (just like the APT/RPM/autobuilder already had). Closes GH-1788.
  * [Apache] Fixes PassengerShowVersionInHeader option. Thanks to Sebastian Welther for contributing this.
  * Passenger now reports when you try to use Node.js or Meteor clustering, and tries to continue with just a nonfunctional shim in place, so that if your code uses the clustering APIs your app may still work.
  * Updates libev config.sub and config.guess to support newer platforms such as the IBM power 8.
@@ -517,7 +558,7 @@ Release 5.0.22
  * The `passenger-config validate-install` command no longer prints false warnings about duplicate Passenger installs on systems that use RBenv. Closes GH-1627.
  * Fixes race conditions in the automatic building of the Ruby native support extension. Closes GH-1570.
  * [Enterprise] Fixes compatibility with byebug 7.0. Closes GH-1662.
- * Support Union Station logging for Node.js applications, with Express/MongoDB automatically supported. 
+ * Support Union Station logging for Node.js applications, with Express/MongoDB automatically supported.
  * The Ruby Union Station hooks no longer abort with a fatal error when the application does not call the Union Station initializer method during startup. The error is now only logged.
  * In case of an error response (HTTP 5xx), Union Station logging will also contain request headers.
  * The Union Station hooks are now more resilient against environment variable problems.
@@ -580,7 +621,7 @@ Release 5.0.16
  * Supports seek() such that body.rewind works when using Rack middleware that uses Zlib::GzipReader (e.g. for compressed requests). Closes GH-1553.
  * [Apache] Improves detection of Apache configuration file problems. Closes GH-1577.
  * [Enterprise] Fixes installation of the Passenger Enterprise Apache module on Debian Testing.
- * Fixes logging of HTTP response code for Union Station. This regression was introduced by Passenger 5. Closes GH-1581. 
+ * Fixes logging of HTTP response code for Union Station. This regression was introduced by Passenger 5. Closes GH-1581.
  * Adds a new subcommand `passenger-config about support-binaries-dir`.
  * Fixes a regression in the Node.js loader with regard to custom startup files. This bug was introduced in 5.0.14. Closes GH-1557 (again).
  * Fixes a crash when a Ruby application is accessed through a sub-URI and a root virtual host at the same time.
@@ -2401,9 +2442,9 @@ Release 2.2.15
  * [Apache] Fixed incorrect temp dir cleanup by passenger-status
    On some systems, running passenger-status could print the following
    message:
-   
+
       *** Cleaning stale folder /tmp/passenger.1234
-   
+
    ...after which Phusion Passenger breaks because that directory is
    necessary for it to function properly. The cause of this problem
    has been found and has been fixed.
@@ -2480,10 +2521,10 @@ Release 2.2.11
    affects Apache. When under high load, Apache might freeze and stop
    responding to requests. It is caused by a race condition which is
    why it escaped our last release testing.
-   
+
    This problem does not affect Nginx; you only have to upgrade if
    you're using Apache.
-   
+
    http://groups.google.com/group/phusion-passenger/t/d5bb2f17c8446ea0
 
 
@@ -2505,20 +2546,20 @@ Release 2.2.9
    Actually, previous Phusion Passenger releases were already compatible
    with Rails 3, depending on the spawn method that would be invoked. Here's
    the story:
-   
+
    Since Phusion Passenger 2.2.8, when the file config.ru exists, Phusion
    Passenger will treat the app as a Rack app, not as a Rails app. This is
    in contrast to earlier versions which gave Rails detection more priority
    than Rack detection. Phusion Passenger loads Rack apps and Rails apps in
    different ways. The Rails loader was not compatible with Rails 3, which
    is what we've fixed in this release.
-   
+
    That said, a Rails 3 app would have worked out-of-the-box on Phusion
    Passenger 2.2.8 as well because Rails 3 apps include a config.ru file
    by default, causing Phusion Passenger 2.2.8 to use the Rack loader.
    Earlier versions of Phusion Passenger would just completely bail out
    because they'd use the Rails loader.
-   
+
    That said, with 2.2.9 there are still some caveats:
    - Smart spawning (the mechanism with which REE's 33% memory reduction
      is implemented) is *not* supported for Rack apps. This means that if
@@ -2527,7 +2568,7 @@ Release 2.2.9
    - Rails 3 depends on Rack 1.1.0. You must have Rack 1.1.0 installed as
      a gem, even if you've bundled it with the gem bundler. This is because
      Phusion Passenger itself depends on Rack.
-   
+
    Both of these caveats are temporary. We have plans to solve both of these
    properly in the future.
  * What's up with the Gem Bundler?
@@ -2537,9 +2578,9 @@ Release 2.2.9
    version seems to work fine. Please note that you need to insert the
    following snippet in config/preinitializer.rb, as instructed by the gem
    bundler's README:
-   
+
      require "#{RAILS_ROOT}/vendor/gems/environment"
-   
+
    The Rails::Boot monkey patching code as posted at
    http://yehudakatz.com/2009/11/03/using-the-new-gem-bundler-today/
    does not seem to be required anymore.
@@ -2588,7 +2629,7 @@ Release 2.2.8
    seen an error message along the lines of
 
       *** Exception IOError in Passenger RequestHandler (closed stream)
-   
+
    then this is a Ruby bug at work. This bug has been fixed in Ruby 1.9.2,
    but Ruby 1.9.1 still contains this bug. We've added a workaround so that
    the bug is not triggered with this Ruby version. Issue #432.
@@ -2679,7 +2720,7 @@ Release 2.2.5
    headers. It turns out that some people relied on the old behavior, we so now
    environment variables set with mod_env are set in both ENV and in the CGI
    environment.
-   
+
    Fixes bug #335.
 
  * [Apache] Fixed compilation problems on some Linux systems with older versions of Apache
@@ -2747,7 +2788,7 @@ Release 2.2.5
    order: first models, then controllers, then helpers.
 
    Bug #359.
- 
+
  * Fixed a few bugs in WSGI compliance
    PATH_INFO is supposed to be set to the request URI, but without the query
    string and without the base URI. This has been fixed: bug #360.

data/CONTRIBUTORS

@@ -64,6 +64,7 @@ Luuk Hafkamp (Phusion)
 Luuk Hendriks (Phusion)
 MAEDA Go
 Magnus Holm
+Mark R. James
 Michal Papis
 Michał Pokrywka
 Mike
@@ -80,6 +81,7 @@ Pepijn Looije
 Perry Smith
 Philip M. Gollucci
 PikachuEXE
+plmnikulin
 Po-Chuan Hsieh
 Radagaisus
 Redmar Kerkhoff

data/build/support/vendor/cxxcodebuilder/lib/cxxcodebuilder/builder.rb

@@ -1,6 +1,6 @@
 # encoding: utf-8
 
-#  Copyright (c) 2016 Phusion Holding B.V.
+#  Copyright (c) 2016-2018 Phusion Holding B.V.
 #
 #  "Union Station" and "Passenger" are trademarks of Phusion Holding B.V.
 #
@@ -360,13 +360,66 @@ module CxxCodeBuilder
     #   bar(int x) {
     #       printf("x = %d\n", x);
     #   }
-    def function(declaration, body = nil)
+    def function(declaration, body = nil, &block)
+      function_or_constructor(declaration, nil, body, &block)
+    end
+
+    # Adds a C++ constructor definition to the internal buffer. This is
+    # like #function, but also allows defining member initializers.
+    # `member_initializers` is a Hash which maps field names to their
+    # initialization expressions.
+    #
+    # Example:
+    #
+    #   member_initializers = {
+    #     'name' => '"Delorean"',
+    #     'color' => 'COLOR_RED'
+    #   }
+    #   constructor('Car::Car()', member_initializers) do
+    #     add_code 'printf("Created a car\n");'
+    #   end
+    #
+    # Output:
+    #
+    #   Car::Car()
+    #       : name("Delorean"),
+    #         color(COLOR_RED)
+    #   {
+    #       printf("Created a car\n");
+    #   }
+    def constructor(declaration, member_initializers, body = nil, &block)
+      function_or_constructor(declaration, member_initializers, body, &block)
+    end
+
+    def function_or_constructor(declaration, member_initializers, body = nil)
       declaration =~ /(.*?)([a-z0-9_:]+)\s*\((.*)\s*(const)?/mi
       return_type_and_attributes = $1
       name_and_params = "#{$2}(#{$3} #{$4}".strip
 
       add_code return_type_and_attributes.strip
-      add_code "#{name_and_params.strip} {"
+      if member_initializers && !member_initializers.empty?
+        add_code "#{name_and_params.strip}"
+        indent do
+          member_initializers.each_with_index do |elem, i|
+            field, expr = elem
+            if i == 0
+              prefix = @indent_string * @indent_level + ': '
+            else
+              prefix = @indent_string * @indent_level + '  '
+            end
+            if i == member_initializers.size - 1
+              suffix = nil
+            else
+              suffix = ','
+            end
+            add_raw_code("#{prefix}#{field}(#{expr})#{suffix}\n")
+          end
+        end
+        add_code '{'
+      else
+        add_code "#{name_and_params.strip} {"
+      end
+
       indent do
         if block_given?
           yield

data/dev/copy_boost_headers

@@ -71,6 +71,7 @@ ESSENTIALS = [
   "boost/foreach.hpp",
   "boost/none*",
   "boost/system/detail/error_code.ipp",
+  "boost/system/config.hpp",
   "boost/detail/reference_content.hpp",
   "boost/algorithm/string"
 ]

data/package.json

@@ -13,7 +13,7 @@
     "express": "^4.16.3",
     "extract-text-webpack-plugin": "^2.1.2",
     "jquery": "^3.2.1",
-    "mocha": "^1.15.1",
+    "mocha": "^6.0.2",
     "multer": "^1.3.0",
     "preact": "^8.1.0",
     "should": "^2.0.1",

data/resources/templates/standalone/http.erb

@@ -33,6 +33,7 @@ passenger_user_switching off;
 <%= nginx_http_option(:max_preloader_idle_time) %>
 <%= nginx_http_option(:turbocaching) %>
 <%= nginx_http_option(:instance_registry_dir) %>
+<%= nginx_http_option(:spawn_dir) %>
 <%= nginx_http_option(:disable_security_update_check) %>
 <%= nginx_http_option(:security_update_check_proxy) %>
 <%= nginx_http_option(:disable_anonymous_telemetry) %>

data/src/agent/Core/Config.h

@@ -135,9 +135,14 @@ using namespace std;
  *   default_sticky_sessions                                         boolean            -          default(false)
  *   default_sticky_sessions_cookie_name                             string             -          default("_passenger_route")
  *   default_user                                                    string             -          default("nobody")
+ *   disable_log_prefix                                              boolean            -          default(false)
  *   file_descriptor_log_target                                      any                -          -
  *   file_descriptor_ulimit                                          unsigned integer   -          default(0),read_only
  *   graceful_exit                                                   boolean            -          default(true)
+ *   hook_attached_process                                           string             -          read_only
+ *   hook_detached_process                                           string             -          read_only
+ *   hook_queue_full_error                                           string             -          read_only
+ *   hook_spawn_failed                                               string             -          read_only
  *   instance_dir                                                    string             -          read_only
  *   integration_mode                                                string             -          default("standalone")
  *   log_level                                                       string             -          default("notice")
@@ -157,12 +162,13 @@ using namespace std;
  *   security_update_checker_interval                                unsigned integer   -          default(86400)
  *   security_update_checker_proxy_url                               string             -          -
  *   security_update_checker_url                                     string             -          default("https://securitycheck.phusionpassenger.com/v1/check.json")
- *   server_software                                                 string             -          default("Phusion_Passenger/6.0.2")
+ *   server_software                                                 string             -          default("Phusion_Passenger/6.0.3")
  *   show_version_in_header                                          boolean            -          default(true)
  *   single_app_mode_app_root                                        string             -          default,read_only
  *   single_app_mode_app_start_command                               string             -          read_only
  *   single_app_mode_app_type                                        string             -          read_only
  *   single_app_mode_startup_file                                    string             -          read_only
+ *   spawn_dir                                                       string             required   read_only
  *   standalone_engine                                               string             -          default
  *   stat_throttle_rate                                              unsigned integer   -          default(10)
  *   telemetry_collector_ca_certificate_path                         string             -          -
@@ -475,6 +481,7 @@ public:
 		overrideWithDynamicDefault("default_server_port", UINT_TYPE, OPTIONAL, getDefaultServerPort);
 
 		add("passenger_root", STRING_TYPE, REQUIRED | READ_ONLY);
+		add("spawn_dir", STRING_TYPE, REQUIRED | READ_ONLY);
 		add("config_manifest", OBJECT_TYPE, OPTIONAL | READ_ONLY);
 		add("pid_file", STRING_TYPE, OPTIONAL | READ_ONLY);
 		add("web_server_version", STRING_TYPE, OPTIONAL | READ_ONLY);
@@ -491,6 +498,11 @@ public:
 		add("controller_cpu_affine", BOOL_TYPE, OPTIONAL | READ_ONLY, false);
 		add("file_descriptor_ulimit", UINT_TYPE, OPTIONAL | READ_ONLY, 0);
 
+		add("hook_attached_process", STRING_TYPE, OPTIONAL | READ_ONLY);
+		add("hook_detached_process", STRING_TYPE, OPTIONAL | READ_ONLY);
+		add("hook_spawn_failed", STRING_TYPE, OPTIONAL | READ_ONLY);
+		add("hook_queue_full_error", STRING_TYPE, OPTIONAL | READ_ONLY);
+
 		addValidator(validateMultiAppMode);
 		addValidator(boost::bind(validateSingleAppMode, boost::placeholders::_1,
 			wrapperRegistry, boost::placeholders::_2));

data/src/agent/Core/Controller/Config.h

@@ -113,7 +113,7 @@ parseControllerBenchmarkMode(const StaticString &mode) {
  *   multi_app                                           boolean            -          default(true),read_only
  *   request_freelist_limit                              unsigned integer   -          default(1024)
  *   response_buffer_high_watermark                      unsigned integer   -          default(134217728)
- *   server_software                                     string             -          default("Phusion_Passenger/6.0.2")
+ *   server_software                                     string             -          default("Phusion_Passenger/6.0.3")
  *   show_version_in_header                              boolean            -          default(true)
  *   start_reading_after_accept                          boolean            -          default(true)
  *   stat_throttle_rate                                  unsigned integer   -          default(10)

data/src/agent/Core/CoreMain.cpp

@@ -714,6 +714,7 @@ initializeNonPrivilegedWorkingObjects() {
 	wo->spawningKitContext->randomGenerator = wo->randomGenerator;
 	wo->spawningKitContext->integrationMode = coreConfig->get("integration_mode").asString();
 	wo->spawningKitContext->instanceDir = coreConfig->get("instance_dir").asString();
+	wo->spawningKitContext->spawnDir = coreConfig->get("spawn_dir").asString();
 	if (!wo->spawningKitContext->instanceDir.empty()) {
 		wo->spawningKitContext->instanceDir = absolutizePath(
 			wo->spawningKitContext->instanceDir);

data/src/agent/Core/SpawningKit/Context.h

@@ -138,6 +138,7 @@ public:
 	RandomGeneratorPtr randomGenerator;
 	string integrationMode;
 	string instanceDir;
+	string spawnDir;
 	DebugSupport *debugSupport;
 	//UnionStation::ContextPtr unionStationContext;
 

data/src/agent/Core/SpawningKit/Handshake/Prepare.h

@@ -123,7 +123,7 @@ private:
 
 	void createWorkDir() {
 		TRACE_POINT();
-		session.workDir.reset(new HandshakeWorkDir());
+		session.workDir.reset(new HandshakeWorkDir(context->spawnDir));
 
 		session.envDumpDir = session.workDir->getPath() + "/envdump";
 		makeDirTree(session.envDumpDir,

data/src/agent/Core/SpawningKit/Handshake/WorkDir.h

@@ -54,12 +54,15 @@ private:
 	string path;
 
 public:
-	HandshakeWorkDir() {
+	HandshakeWorkDir(const std::string& spawn_dir) {
 		char buf[PATH_MAX + 1];
 		char *pos = buf;
 		const char *end = buf + PATH_MAX;
 
-		pos = appendData(pos, end, getSystemTempDir());
+		if (spawn_dir.empty())
+			throw RuntimeException("spawn_dir is not set");
+		pos = appendData(pos, end, spawn_dir.c_str());
+
 		pos = appendData(pos, end, "/passenger.spawn.XXXXXXXXXX");
 		*pos = '\0';
 

data/src/agent/Watchdog/Config.h

@@ -122,12 +122,17 @@ using namespace std;
  *   default_sticky_sessions                                                  boolean            -          default(false)
  *   default_sticky_sessions_cookie_name                                      string             -          default("_passenger_route")
  *   default_user                                                             string             -          default("nobody")
+ *   disable_log_prefix                                                       boolean            -          default(false)
  *   file_descriptor_log_target                                               any                -          -
  *   graceful_exit                                                            boolean            -          default(true)
  *   hook_after_watchdog_initialization                                       string             -          -
  *   hook_after_watchdog_shutdown                                             string             -          -
+ *   hook_attached_process                                                    string             -          read_only
  *   hook_before_watchdog_initialization                                      string             -          -
  *   hook_before_watchdog_shutdown                                            string             -          -
+ *   hook_detached_process                                                    string             -          read_only
+ *   hook_queue_full_error                                                    string             -          read_only
+ *   hook_spawn_failed                                                        string             -          read_only
  *   instance_registry_dir                                                    string             -          default,read_only
  *   integration_mode                                                         string             -          default("standalone")
  *   log_level                                                                string             -          default("notice")
@@ -146,13 +151,14 @@ using namespace std;
  *   security_update_checker_interval                                         unsigned integer   -          default(86400)
  *   security_update_checker_proxy_url                                        string             -          -
  *   security_update_checker_url                                              string             -          default("https://securitycheck.phusionpassenger.com/v1/check.json")
- *   server_software                                                          string             -          default("Phusion_Passenger/6.0.2")
+ *   server_software                                                          string             -          default("Phusion_Passenger/6.0.3")
  *   setsid                                                                   boolean            -          default(false)
  *   show_version_in_header                                                   boolean            -          default(true)
  *   single_app_mode_app_root                                                 string             -          default,read_only
  *   single_app_mode_app_start_command                                        string             -          read_only
  *   single_app_mode_app_type                                                 string             -          read_only
  *   single_app_mode_startup_file                                             string             -          read_only
+ *   spawn_dir                                                                string             -          default,read_only
  *   standalone_engine                                                        string             -          default
  *   startup_report_file                                                      string             -          -
  *   stat_throttle_rate                                                       unsigned integer   -          default(10)
@@ -246,6 +252,10 @@ private:
 		return getSystemTempDir();
 	}
 
+	static Json::Value getDefaultSpawnDir(const ConfigKit::Store &store) {
+		return getSystemTempDir();
+	}
+
 	static void validateAddresses(const ConfigKit::Store &config, vector<ConfigKit::Error> &errors) {
 		typedef ConfigKit::Error Error;
 
@@ -258,6 +268,7 @@ private:
 	static Json::Value normalizePaths(const Json::Value &effectiveValues) {
 		Json::Value updates;
 		updates["instance_registry_dir"] = absolutizePath(effectiveValues["instance_registry_dir"].asString());
+		updates["spawn_dir"] = absolutizePath(effectiveValues["spawn_dir"].asString());
 		if (!effectiveValues["watchdog_pid_file"].isNull()) {
 			updates["watchdog_pid_file"] = absolutizePath(effectiveValues["watchdog_pid_file"].asString());
 		}
@@ -334,6 +345,8 @@ public:
 			OPTIONAL | READ_ONLY | CACHE_DEFAULT_VALUE, getDefaultUser);
 		addWithDynamicDefault("instance_registry_dir", STRING_TYPE,
 			OPTIONAL | READ_ONLY | CACHE_DEFAULT_VALUE, getDefaultInstanceRegistryDir);
+		addWithDynamicDefault("spawn_dir", STRING_TYPE,
+			OPTIONAL | READ_ONLY | CACHE_DEFAULT_VALUE, getDefaultSpawnDir);
 
 		add("hook_before_watchdog_initialization", STRING_TYPE, OPTIONAL);
 		add("hook_after_watchdog_initialization", STRING_TYPE, OPTIONAL);