Phusion 乘客安全检查更新保持连接

Question

我每天都在使用 phusion 乘客 5.1 版，正在进行安全更新检查，该检查保持连接附在日志中以供参考。安全检查有什么用。如果我禁用这是否解决了问题，或者我应该运行命令乘客

[ N 2020-02-24 06:31:06.4719 13587/T4 age/Cor/CoreMain.cpp:1068 ]: Checking whether to disconnect long-running connections for process 5035, application /var/lib/raj/
App 30989 stdout: 
App 30989 stderr:  [passenger_native_support.so] not found for current Ruby interpreter.
App 30989 stderr: 
App 30989 stderr:      This library provides various optimized routines that make
App 30989 stderr: 
App 30989 stderr:      Phusion Passenger faster. Please run 'sudo yum install passenger-devel-5.2.1'
App 30989 stderr: 
App 30989 stderr:      so that Phusion Passenger can compile one on the next run.
App 30989 stderr: 
App 30989 stderr:  [passenger_native_support.so] finding downloads for the current Ruby interpreter...
App 30989 stderr: 
App 30989 stderr:      (set PASSENGER_DOWNLOAD_NATIVE_SUPPORT_BINARY=0 to disable)
App 30989 stderr: 
App 30989 stderr:      Could not download https://oss-binaries.phusionpassenger.com/binaries/passenger/by_release/5.2.1/rubyext-ruby-2.0.0-x86_64-linux.tar.gz: connect() timed out!
App 30989 stderr:      Trying next mirror...
App 30989 stderr:      Could not download https://s3.amazonaws.com/phusion-passenger/binaries/passenger/by_release/5.2.1/rubyext-ruby-2.0.0-x86_64-linux.tar.gz: connect() timed out!
App 30989 stderr:  [passenger_native_support.so] will not be used (can't compile or download) 
App 30989 stderr:   --> Passenger will still operate normally.
App 31075 stdout: 
[ N 2020-02-24 06:54:21.2705 13587/T4 age/Cor/CoreMain.cpp:1068 ]: Checking whether to disconnect long-running connections for process 31075, application /var/lib/raj/rails-srv/releases/initial_release/rails-srv (production)
[ E 2020-02-24 07:19:32.7365 13587/T5 age/Cor/SecurityUpdateChecker.h:505 ]: Security update check failed: Couldn't connect to server for https://securitycheck.phusionpassenger.com/v1/check.json (if this error persists check your connection security or try upgrading Passenger) (next check in 24 hours)
App 396 stdout: 
App 396 stderr:  [passenger_native_support.so] not found for current Ruby interpreter.
App 396 stderr: 
App 396 stderr:      This library provides various optimized routines that make
App 396 stderr: 
App 396 stderr:      Phusion Passenger faster. Please run 'sudo yum install passenger-devel-5.2.1'
App 396 stderr: 
App 396 stderr:      so that Phusion Passenger can compile one on the next run.
App 396 stderr: 
App 396 stderr:  [passenger_native_support.so] finding downloads for the current Ruby interpreter...
App 396 stderr: 
App 396 stderr:      (set PASSENGER_DOWNLOAD_NATIVE_SUPPORT_BINARY=0 to disable)
App 396 stderr: 
App 396 stderr:      Could not download https://oss-binaries.phusionpassenger.com/binaries/passenger/by_release/5.2.1/rubyext-ruby-2.0.0-x86_64-linux.tar.gz: connect() timed out!
App 396 stderr:      Trying next mirror...
App 396 stderr:      Could not download https://s3.amazonaws.com/phusion-passenger/binaries/passenger/by_release/5.2.1/rubyext-ruby-2.0.0-x86_64-linux.tar.gz: connect() timed out!
App 396 stderr:  [passenger_native_support.so] will not be used (can't compile or download) 
App 396 stderr:   --> Passenger will still operate normally.
App 466 stdout: 
[ N 2020-02-24 07:36:28.1279 13587/T4 age/Cor/CoreMain.cpp:1068 ]: Checking whether to disconnect long-running connections for process 466, application /var/lib/raj/rails-srv/releases/initial_release/rails-srv (production)
App 19802 stdout: 
App 19802 stderr:  [passenger_native_support.so] not found for current Ruby interpreter.
App 19802 stderr: 
App 19802 stderr:      This library provides various optimized routines that make
App 19802 stderr: 
App 19802 stderr:      Phusion Passenger faster. Please run 'sudo yum install passenger-devel-5.2.1'
App 19802 stderr: 
App 19802 stderr:      so that Phusion Passenger can compile one on the next run.
App 19802 stderr: 
App 19802 stderr:  [passenger_native_support.so] finding downloads for the current Ruby interpreter...
App 19802 stderr: 
App 19802 stderr:      (set PASSENGER_DOWNLOAD_NATIVE_SUPPORT_BINARY=0 to disable)
App 19802 stderr: 
App 19802 stderr:      Could not download https://oss-binaries.phusionpassenger.com/binaries/passenger/by_release/5.2.1/rubyext-ruby-2.0.0-x86_64-linux.tar.gz: connect() timed out!
App 19802 stderr:      Trying next mirror...
App 19802 stderr:      Could not download https://s3.amazonaws.com/phusion-passenger/binaries/passenger/by_release/5.2.1/rubyext-ruby-2.0.0-x86_64-linux.tar.gz: connect() timed out!

Answer 1

passenger 5.1.0 中引入的安全检查尝试连接到 securitycheck.phusionpassenger.com 以查看是否存在包含安全更新的新版本的乘客。

这可以通过将乘客配置变量 PassengerDisableSecurityUpdateCheck 设置为 on see here 来禁用，之后需要重新启动网络服务器。

即使设置了该标志，在重新启动后的第一个客户端请求中，下载和构建尝试也会随之而来。我发现在专用网络（没有互联网访问）中，这可以阻止 apache 大约 20 秒。然而，这两个步骤可以通过成功禁用 您的网络服务器配置中的环境标志，如您帖子中的日志消息中所示。对于 apache，这对我有用：

<VirtualHost *:443>
   PassengerDisableSecurityUpdateCheck on
   SetEnv PASSENGER_COMPILE_NATIVE_SUPPORT_BINARY 0
   SetEnv PASSENGER_DOWNLOAD_NATIVE_SUPPORT_BINARY 0
...

在网络服务器重新启动后，日志现在显示：

App 23626 stdout: 
App 23626 stderr:  [passenger_native_support.so] not compiling because PASSENGER_COMPILE_NATIVE_SUPPORT_BINARY=0
App 23626 stderr:  [passenger_native_support.so] not downloading because PASSENGER_DOWNLOAD_NATIVE_SUPPORT_BINARY=0
App 23626 stderr:  [passenger_native_support.so] will not be used (can't compile or download) 
App 23626 stderr:   --> Passenger will still operate normally.

.. 客户端与服务器的连接在重新启动后立即响应。