Tails

#1 Updated by intrigeri 2019-03-12 17:28:21

• Estimated time changed from 160 h to 16 h

#2 Updated by intrigeri 2019-06-29 08:14:11

• Description updated

#3 Updated by hefee 2019-07-05 15:37:52

• blocks Feature #15087: Public call for testing added

#4 Updated by Anonymous 2019-07-19 11:27:41

• Status changed from Confirmed to Needs Validation

@groente: 10 days ago you said you’d like to add Apache mod_security before we send out the call for testing. As said over email (July 9th 2019), I am preparing to send out this call today. Is there a chance you’ll still implement this, or should I ignore this for now?

#6 Updated by Anonymous 2019-07-19 16:44:00

• blocked by deleted (Feature #15087: Public call for testing)

#13 Updated by groente 2019-08-15 11:45:20

• Assignee changed from groente to hefee

Hey Hefee,

If you don’t mind, I’d like your thoughts on the following:

I’ve been seeing these kind of error messages pop up on a few occassions in the logfiles:

Unable to connect to WSGI daemon process ‘translate.tails.boum.org’ on ‘/var/run/apache2/wsgi.21667.5.1.sock’ after multiple attempts as listener backlog limit was exceeded.

Do you think this is related to https://github.com/GrahamDumpleton/mod_wsgi/issues/181 ? To get the mod_wsgi version which supports the new settings, we would have to upgrade to buster…

#14 Updated by hefee 2019-08-15 22:45:28

• Assignee changed from hefee to groente

groente wrote:
> Hey Hefee,
>
> If you don’t mind, I’d like your thoughts on the following:
>
> I’ve been seeing these kind of error messages pop up on a few occasions in the logfiles:
>
> Unable to connect to WSGI daemon process ‘translate.tails.boum.org’ on ‘/var/run/apache2/wsgi.21667.5.1.sock’ after multiple attempts as listener backlog limit was exceeded.
>
> Do you think this is related to https://github.com/GrahamDumpleton/mod_wsgi/issues/181 ?

I don’t think it is related.

What may be worth looking into is using uwsgi to ship Weblate and not use mod_wsgi from Apache. I switched several years ago from mod_wsgi to uwsgi and I never regret it, when it comes to ship python apps. As uswgi is performing very well and it is not bundled with Apache, so it is easy to use Nginx etc as Webserver. We need https://httpd.apache.org/docs/2.4/en/mod/mod_proxy_uwsgi.html as the uwsgi protocol is faster than the http, or use an http socket from uwsgi.

an initial ini file for uwsgi:

# cat /etc/uwsgi/apps-enabled/translate.tails.boum.org.ini 
[uwsgi]
master = true
touch-reload = %p  # this is a nice feature, if you touch this file, the app will be restarted automatically with the new settings

chown-socket = www-data:www-data

uid = weblate
gid = weblate

plugin = python3
chdir = <%= @code_git_checkout %>
file = <%= @code_git_checkout %>/weblate/wsgi.py

vacuum=True
max-requests=5000

and that creates the uwsgi-socket /run/uwsgi/app/translate.tails.boum.org/socket where Apache can connect to.

#16 Updated by groente 2019-08-16 19:59:04

• Status changed from Needs Validation to In Progress

thanks for the feedback! i haven’t actually seen the wsgi error again since the last parameter adjustments i made a few days ago. if it keeps behaving, i’ll just stick with the setup as is, else i’ll look into mod_proxy_uwsgi.

#17 Updated by CyrilBrulebois 2019-09-05 00:05:29

• Target version changed from Tails_3.16 to Tails_3.17

#19 Updated by intrigeri 2019-09-12 14:25:09

• Target version changed from Tails_3.17 to Tails_4.0

#20 Updated by Anonymous 2019-09-13 09:14:39

• Status changed from In Progress to Resolved

Yay!