Trellis deploy hangs, then fails on reload php-fpm

trellis
7

Easiest option, probably. Here’s a workaround, given your slightly unusual usage of Trellis (i.e., not provisioning with Trellis; deploying only).

  1. Adjust the Reload php-fpm task to know that it needs to provide your password. Indentation on become parameter matters; is the same as name, shell, and args.
  - name: Reload php-fpm
    shell: sudo service php7.1-fpm reload
    args:
      warn: false
+   become: yes
  1. Provide user’s sudo password when deploying:
    (or use -K as the short version of --ask-become-pass)
ansible-playbook deploy.yml -e env=stating -e site=example.com --ask-become-pass

It will prompt you to enter your user’s sudo password.

Assumptions. The above assumes the following:

  • service --status-all | grep php (on server) outputs only php7.1-fpm
  • you are able to ssh as web_user (as tackettz I think) and sudo service php7.1-fpm reload successfully, by providing a password

Passwordless sudo. If you choose to try to fix the problem instead of using the workaround above, there are some helpful notes on the related thread you already saw, especially this post.

You will probably have to coordinate with your IT department because it sounds like they have a specific user management strategy for this server. As a simple example, I expect your server would need an /etc/sudoers file where the last line is

#includedir /etc/sudoers.d

The server would also need a file such as /etc/sudoers.d/tackettz-services with the following:

tackettz ALL=(root) NOPASSWD: /usr/sbin/service php7.1-fpm *

where the permissions are like this

$ ls -alh /etc/sudoers.d
-r--r-----   1 root root   75 Feb  1 02:25 tackettz-services

PHP versions.

The php that runs on the cli is completely separate, as far as I know, and is not relevant.

2 Likes