After executing the Migrationscript to Debian 11 YH site ist not reachabel

Just tried to upgrade my YH raspi 4 server by executing the Migration script to Debian 11
at the end of the Migration I read the message that the Migration was successful.
But now the - YH site is not reachable at all by the browser.

I can login by ssh and see all the files.

What could i try to get YH running again ? - Thanks.

this what apt update and apt upgrade gives me:

root@my:~# apt update
Hit:1 http://archive.raspberrypi.org/debian bullseye InRelease
Hit:2 http://raspbian.raspberrypi.org/raspbian bullseye InRelease                               
Hit:3 http://forge.yunohost.org/debian bullseye InRelease                                       
Hit:4 https://packages.sury.org/php bullseye InRelease                                          
Reading package lists... Done                       
Building dependency tree... Done
Reading state information... Done
1 package can be upgraded. Run 'apt list --upgradable' to see it.
W: Target Packages (main/binary-armhf/Packages) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
W: Target Translations (main/i18n/Translation-en_US) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
W: Target Translations (main/i18n/Translation-en) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
W: Target Packages (main/binary-armhf/Packages) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
W: Target Translations (main/i18n/Translation-en_US) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
W: Target Translations (main/i18n/Translation-en) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
root@my:~# apt list --upgradable
Listing... Done
gcc-8-base/stable 8.4.0-7+rpi1 armhf [upgradable from: 8.3.0-6+rpi1]
N: There is 1 additional version. Please use the '-a' switch to see it
root@my:~# apt list --upgradable -a
Listing... Done
gcc-8-base/stable 8.4.0-7+rpi1 armhf [upgradable from: 8.3.0-6+rpi1]
gcc-8-base/now 8.3.0-6+rpi1 armhf [installed,upgradable to: 8.4.0-7+rpi1]

root@my:~# apt update
Hit:1 http://forge.yunohost.org/debian bullseye InRelease
Hit:2 http://raspbian.raspberrypi.org/raspbian bullseye InRelease                             
Hit:3 http://archive.raspberrypi.org/debian bullseye InRelease                                
Hit:4 https://packages.sury.org/php bullseye InRelease                                        
Reading package lists... Done                     
Building dependency tree... Done
Reading state information... Done
1 package can be upgraded. Run 'apt list --upgradable' to see it.
W: Target Packages (main/binary-armhf/Packages) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
W: Target Translations (main/i18n/Translation-en_US) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
W: Target Translations (main/i18n/Translation-en) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
W: Target Packages (main/binary-armhf/Packages) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
W: Target Translations (main/i18n/Translation-en_US) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
W: Target Translations (main/i18n/Translation-en) is configured multiple times in /etc/apt/sources.list.d/extra_php_version.list:1 and /etc/apt/sources.list.d/sury-php.list:1
root@my:~# apt upgrade
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Calculating upgrade... Done
The following packages were automatically installed and are no longer required:
  bind9-utils bind9utils dnsutils libicu63 libllvm7 php-gettext postgresql-11 postgresql-client-11
  python3-publicsuffix
Use 'apt autoremove' to remove them.
The following packages have been kept back:
  gcc-8-base
0 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.

Maybe first you could actually use the support template when posting in the Support section …

Before posting, please :

DID not find any info about it…

  • Take the time to say Hi and stay friendly, this is a forum and project 100% ran by volunteer human beings :stuck_out_tongue_winking_eye: I hope i sound friendly - certainly i want to be fiendly

My YunoHost server

Hardware: Raspberry Pi (4) at home
YunoHost version: last version for debian 10
I have access to my server : Through SSH YES

| through the webadmin - NO

| direct access via keyboard / screen -NO

Are you in a special context or did you perform some particular tweaking on your YunoHost instance ? : NO

Description of my issue

Just tried to upgrade my YH raspi 4 server by executing the Migration script to Debian 11
at the end of the Migration I read the message that the Migration was successful.
But now the - YH site is not reachable at all by the browser.

Don´t have logs.

So let’s look at the diagnosis result with yunohost diagnosis run and yunohost diagnosis show --share

https://paste.yunohost.org/raw/edocebobuz

Nginx is down

Let’s look at nginx -t to check if the config is valid

And systemctl status nginx

root@my:~# nginx -t
nginx: [emerg] BIO_new_file("/usr/share/yunohost/other/ffdhe2048.pem") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/usr/share/yunohost/other/ffdhe2048.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)
nginx: configuration file /etc/nginx/nginx.conf test failed
root@my:~# systemctl status nginx
â—Ź nginx.service - A high performance web server and a reverse proxy server
     Loaded: loaded (/lib/systemd/system/nginx.service; enabled; vendor preset: enabled)
     Active: failed (Result: exit-code) since Sun 2022-08-14 14:17:09 BST; 5h 40min ago
       Docs: man:nginx(8)
    Process: 715 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, >
        CPU: 269ms

Aug 14 14:17:07 domain.tld systemd[1]: Starting A high performance web server and a reverse prox>
Aug 14 14:17:09 domain.tld nginx[715]: nginx: [emerg] BIO_new_file("/usr/share/yunohost/other/ff>
Aug 14 14:17:09 domain.tld nginx[715]: nginx: configuration file /etc/nginx/nginx.conf test fail>
Aug 14 14:17:09 domain.tld systemd[1]: nginx.service: Control process exited, code=exited, statu>
Aug 14 14:17:09 domain.tld systemd[1]: nginx.service: Failed with result 'exit-code'.
Aug 14 14:17:09 domain.tld systemd[1]: Failed to start A high performance web server and a rever>
lines 1-13/13 (END)

Sounds like maybe you manually edited security.conf.inc in the nginx conf …

You may want to yunohost tools regen-conf nginx --dry-run --with-diff , review the diff, and then yunohost tools regen-conf nginx --force if you’re happy with it

1 Like
root@my:~# yunohost tools regen-conf nginx --dry-run --with-diff

Warning: The configuration file '/etc/nginx/conf.d/yunohost_panel.conf.inc' has been manually modified and will not be updated
Warning: The configuration file '/etc/nginx/conf.d/security.conf.inc' has been manually modified and will not be updated
nginx: 
  applied: 
  pending: 
    /etc/nginx/conf.d/security.conf.inc: 
      diff: @@ -13,7 +13,7 @@
 # Pre-defined FFDHE group (RFC 7919)
 # From https://ssl-config.mozilla.org/ffdhe2048.txt
 # https://security.stackexchange.com/a/149818
-ssl_dhparam /usr/share/yunohost/other/ffdhe2048.pem;
+ssl_dhparam /usr/share/yunohost/ffdhe2048.pem;
 
 
 
@@ -22,13 +22,13 @@
 # https://observatory.mozilla.org/
 
 more_set_headers "Content-Security-Policy : upgrade-insecure-requests";
-more_set_headers "Content-Security-Policy-Report-Only : default-src https: data: blob: ; object-src https: data: 'unsafe-inline'; style-src https: data: 'unsafe-inline' ; script-src https: data: 'unsafe-inline' 'unsafe-eval'";
+more_set_headers "Content-Security-Policy-Report-Only : default-src https: wss: data: blob: ; object-src https: data: 'unsafe-inline'; style-src https: data: 'unsafe-inline' ; script-src https: data: 'unsafe-inline' 'unsafe-eval'";
 
 more_set_headers "X-Content-Type-Options : nosniff";
 more_set_headers "X-XSS-Protection : 1; mode=block";
 more_set_headers "X-Download-Options : noopen";
 more_set_headers "X-Permitted-Cross-Domain-Policies : none";
-# more_set_headers "X-Frame-Options : SAMEORIGIN";
+more_set_headers "X-Frame-Options : SAMEORIGIN";
 
 # Disable the disaster privacy thing that is FLoC
      status: modified
    /etc/nginx/conf.d/yunohost_panel.conf.inc: 
      diff: @@ -0,0 +1,8 @@
+# Insert YunoHost button + portal overlay
+sub_filter </head> '<script type="text/javascript" src="/ynh_portal.js"></script><link type="text/css" rel="stylesheet" href="/ynh_overlay.css"><script type="text/javascript" src="/ynhtheme/custom_portal.js"></script><link type="text/css" rel="stylesheet" href="/ynhtheme/custom_overlay.css"></head>';
+sub_filter_once on;
+# Apply to other mime types than text/html
+sub_filter_types application/xhtml+xml;
+# Prevent YunoHost panel files from being blocked by specific app rules
+location ~ (ynh_portal.js|ynh_overlay.css|ynh_userinfo.json|ynhtheme/custom_portal.js|ynhtheme/custom_overlay.css) {
+}
      status: modified
root@my:~# 
root@my:~# yunohost tools regen-conf nginx --force
Success! Configuration updated for 'nginx'
Warning: -- Journal begins at Thu 2022-08-11 19:57:44 BST, ends at Sun 2022-08-14 20:33:32 BST. --
Warning: Aug 14 13:54:12 my.domain.tld nginx[28128]: nginx: configuration file /etc/nginx/nginx.conf test failed
Warning: Aug 14 13:54:12 my.domain.tld systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE
Warning: Aug 14 13:54:12 my.domain.tld systemd[1]: nginx.service: Failed with result 'exit-code'.
Warning: Aug 14 13:54:12 my.domain.tld systemd[1]: Failed to start A high performance web server and a reverse proxy server.
Warning: -- Boot 972782aaa138491ba546bce468f86314 --
Warning: Aug 14 14:17:07 my.domain.tld systemd[1]: Starting A high performance web server and a reverse proxy server...
Warning: Aug 14 14:17:09 my.domain.tld nginx[715]: nginx: [emerg] BIO_new_file("/usr/share/yunohost/other/ffdhe2048.pem") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/usr/share/yunohost/other/ffdhe2048.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)
Warning: Aug 14 14:17:09 my.domain.tld nginx[715]: nginx: configuration file /etc/nginx/nginx.conf test failed
Warning: Aug 14 14:17:09 my.domain.tld systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE
Warning: Aug 14 14:17:09 my.domain.tld systemd[1]: nginx.service: Failed with result 'exit-code'.
Warning: Aug 14 14:17:09 my.domain.tld systemd[1]: Failed to start A high performance web server and a reverse proxy server.
Error: Could not run script: /usr/share/yunohost/hooks/conf_regen/15-nginx
nginx: 
  applied: 
    /etc/nginx/conf.d/security.conf.inc: 
      status: force-updated
    /etc/nginx/conf.d/yunohost_panel.conf.inc: 
      status: force-updated
  pending:

server is still not up… is this to hard to fix? Du you recommend an new install of debian 11 ?

DId you force the regen conf … ?

yes I did:

yunohost tools regen-conf nginx --force

then let’s see if nginx -t is happier …

root@my:~# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful

Then let’s look at systemctl status nginx to make sure it’s running, and systemctl restart nginx if it’s not

THANKS a LOT
systemctl restart nginx did help - server is running now… i will check now if all in working fine

mysql kepps crashing - in the logs i see things like this:

Aug 15 14:54:53 mariadbd[9739]: 2022-08-15 14:54:53 0 [ERROR] InnoDB: Space id and page no stored in the page, read in are [page id: space=1277, page number=50680], should be [page id: space=1277, page number=312824]
Aug 15 14:54:53 mariadbd[9739]: 2022-08-15 14:54:53 0 [Note] InnoDB: Buffer pool(s) load completed at 220815 14:54:53

Any idea what i could try? Thanks

Can you share the full log …

https://paste.yunohost.org/raw/ulotehewew

https://paste.yunohost.org/raw/otazabosev