cPanel on LXC - where do I perform required changes?

[karateka]

Hello,

I have installed cPanel on Proxmox 4.1 (Jessie) with a Centos 7 lxc.

However, some services are marked as failed in the system monitor, when they are actually up.
So whilst troubleshooting this, I came across the following regarding required changes to Centos 7:
documentation.cpanel.net/pages/viewpage.action?pageId=14550793


I added the following lines to /etc/pve/lxc/VMID.conf

lxc.include = /usr/share/lxc/config/fedora.common.conf
lxc.aa_profile = unconfined
lxc.cap.drop = setpcap
lxc.cap.drop = setfcap

However, it doesn't seem to make a difference, so I am wondering:
Where is the proper place to add the required lines?
Am I using the proper syntax?
What am I missing to get cPanel's instructions to work with Proxmox 4.1?

 

[sahostking]

I'd also like some clarity on this.

Did you possibly come right with this? Going to do some testing myself but migrated a test VPS from openvz proxmox 3.4 to 4.1 lxc and same issue.

 

[fusion]

hello no news on this? , I have the same incidence.

 

[Jim O]

This thread is a bit old, but here's how to get cPanel working in a linux container on Proxmox 4.1:

First, only use a CentOS 6 container. Follow the instructions at https://documentation.cpanel.net/display/1152Docs/Linux+Containers+and+cPanel. I can get cPanel up and running with no problems There are, however (at least) two issues which I have come upon. First, the MySQL socket (/var/lib/mysql/mysql.sock) is created with insufficient privileges (755, and it requires 777), causing MySQL based sites to throw a "can't connect to database" error. Similarly, Dovecot does not function because the files in /var/run/dovecot/login/ are also created with insufficient privileges. Mail cannot be retrieved by remote email clients and webmail clients won't load.

Both problems can be corrected by changing the ACL in those two directories as follows:

# yum install -y acl

# cd /var/lib/mysql

# setfacl -d -m g::rwx .

# setfacl -d -m o::rwx .

# service mysql restart

# cd /var/run/dovecot/login

# setfacl -d -m g::rwx .

# setfacl -d -m o::rwx .

# service dovecot restart

As of now (less than 24 hours) things appear to be running smoothly. I haven't tested mail relay or FTP yet.

 

[fusion]

Hi, thanks for your help, thank you for sharing more news on this, I thank you, now I'm running cpanel in kvm, but with very high CPU consumption.

 

[Jim O]

Further investigation has shown that I also needed to change the ACL on /var/run/dovecot as /var/run/dovecot/auth-client (which is used for Exim authentication) needed 666 permissions and had 644. Without doing that we couldn't relay mail from remote desktop email clients.

 

[Sergiio]

This thread is a bit old, but here's how to get cPanel working in a linux container on Proxmox 4.1:

First, only use a CentOS 6 container. Follow the instructions at https://documentation.cpanel.net/display/1152Docs/Linux+Containers+and+cPanel. I can get cPanel up and running with no problems There are, however (at least) two issues which I have come upon. First, the MySQL socket (/var/lib/mysql/mysql.sock) is created with insufficient privileges (755, and it requires 777), causing MySQL based sites to throw a "can't connect to database" error. Similarly, Dovecot does not function because the files in /var/run/dovecot/login/ are also created with insufficient privileges. Mail cannot be retrieved by remote email clients and webmail clients won't load.

Both problems can be corrected by changing the ACL in those two directories as follows:

# yum install -y acl

# cd /var/lib/mysql

# setfacl -d -m g::rwx .

# setfacl -d -m o::rwx .

# service mysql restart

# cd /var/run/dovecot/login

# setfacl -d -m g::rwx .

# setfacl -d -m o::rwx .

# service dovecot restart

As of now (less than 24 hours) things appear to be running smoothly. I haven't tested mail relay or FTP yet.

I followed your steps, it has solved all but exim below in red.

 

[Jim O]

I followed your steps, it has solved all but exim below in red.

Did you also follow the steps on the /var/run/dovecot directory as outlined in post #6 above? That should correct the problems with Exim.

If not, please restart Exim and post the output of "ls -l /var/run/dovecot | grep auth-client".

 

[Sergiio]

Did you also follow the steps on the /var/run/dovecot directory as outlined in post #6 above? That should correct the problems with Exim.

If not, please restart Exim and post the output of "ls -l /var/run/dovecot as /var/run/dovecot/ | grep auth-client".

Already works, it has taken some time, thank you very much.