Skip to main content

ea-nginx dependency over ea-modsec30 differs in CentOS and CloudLinux

Comments

6 comments

  • ankeshanand
    Hello, On a CentOS 7 server I installed ea-nginx without any issues with modsec2 working with apache. [CODE=bash]# cat /etc/redhat-release CentOS Linux release 7.9.2009 (Core) # rpm -qa | grep -e nginx -e mod_*sec ea-apache24-mod_security2-2.9.3-12.12.6.cpanel.x86_64 ea-modsec-sdbm-util-0.02-1.1.29.cpanel.x86_64 cpanel-ng-whm-nginx-manager-8-1.cp1196.noarch ea-nginx-1.20.0-1.1.1.cpanel.x86_64
    But on a CloudLinux 7 server I cannot do the same. ea-nginx has a dependency on ea-modsec30 which conflicts with ea-apache24-mod_security2. [CODE=bash]Resolving Dependencies --> Running transaction check ---> Package ea-nginx.x86_64 3:1.19.7-3.el7.cloudlinux will be installed --> Processing Dependency: ea-modsec30 for package: 3:ea-nginx-1.19.7-3.el7.cloudlinux.x86_64 --> Processing Dependency: ea-modsec30-connector-nginx for package: 3:ea-nginx-1.19.7-3.el7.cloudlinux.x86_64 --> Running transaction check ---> Package ea-modsec30.x86_64 1:3.0.4-6.el7.cloudlinux will be installed ---> Package ea-modsec30-connector-nginx.x86_64 1:1.0.1-1.el7.cloudlinux will be installed --> Processing Conflict: 2:ea-apache24-mod_security2-2.9.3-4.el7.cloudlinux.x86_64 conflicts mod_security --> Processing Conflict: 1:ea-modsec30-3.0.4-6.el7.cloudlinux.x86_64 conflicts ea-apache24-mod_security2 --> Finished Dependency Resolution
    Is there anything I am missing? Why this different behavior and which one is the right behavior? Thanks

    Its processing the Conflict by Disabling/Enabling modules and its normal behaviour. --> Processing Conflict: 2:ea-apache24-mod_security2-2.9.3-4.el7.cloudlinux.x86_64 conflicts mod_security --> Processing Conflict: 1:ea-modsec30-3.0.4-6.el7.cloudlinux.x86_64 conflicts ea-apache24-mod_security2
    EasyApache4 has Inbuilt profile pre-made for CloudLinux+All PHP Options+NGINX .Maybe, You should try directly Provisioning it because there are no conflicts in that!
    0
  • Indianets
    EasyApache4 has Inbuilt profile pre-made for CloudLinux+All PHP Options+NGINX .Maybe, You should try directly Provisioning it because there are no conflicts in that!

    It has nothing to do with original question in this thread. Let someone from cPanel have a look so that they can replicate the same on test boxes having CentOS and CloudLinux.
    0
  • cPRex Jurassic Moderator
    Hey there! I created a 96.0.1 cPanel server running on CloudLinux 7. The only warning I got when installing the ea-nginx package was to choose the version of Ruby Passenger, either 2.4 or 2.7. After that, the provision process went through just fine with no dependency problems. I also confirmed I had this version of ModSecurity installed: ea-apache24-mod_security2-2.9.3-4.el7.cloudlinux.x86_64 Could you run this on your server and post the results? rpm -qa | grep mod_security
    as this would show all the packages and potentially let us see the conflict.
    0
  • Indianets
    Hey there! I created a 96.0.1 cPanel server running on CloudLinux 7. The only warning I got when installing the ea-nginx package was to choose the version of Ruby Passenger, either 2.4 or 2.7. After that, the provision process went through just fine with no dependency problems. I also confirmed I had this version of ModSecurity installed: ea-apache24-mod_security2-2.9.3-4.el7.cloudlinux.x86_64 Could you run this on your server and post the results? rpm -qa | grep mod_security
    as this would show all the packages and potentially let us see the conflict.

    Hello Rex, I have the exact same version of mod_security2 version as yours. # rpm -qa | grep mod_security ea-apache24-mod_security2-2.9.3-4.el7.cloudlinux.x86_64 ea-apache24-mod_security2-mlogc-2.9.3-4.el7.cloudlinux.x86_64
    Just for clarity, I have sdbm utility as well which is a dependency of modsec2 -- # rpm -qa | grep -e nginx -e mod_*sec ea-apache24-mod_security2-2.9.3-4.el7.cloudlinux.x86_64 ea-apache24-mod_security2-mlogc-2.9.3-4.el7.cloudlinux.x86_64 cpanel-ng-whm-nginx-manager-8-1.cp1196.noarch ea-modsec-sdbm-util-0.02-1.el7.cloudlinux.1.x86_64
    Could you please check the version of ea-nginx and ea-modsec30 on your box, I am getting these -- # yum list ea-nginx ea-modsec30* ... Available Packages ea-modsec30.x86_64 1:3.0.4-6.el7.cloudlinux cl-ea4 ea-modsec30-connector-nginx.x86_64 1:1.0.1-1.el7.cloudlinux cl-ea4 ea-nginx.x86_64 3:1.19.7-3.el7.cloudlinux cl-ea4
    Thanks
    0
  • Indianets
    @cPRex It seems the problem is with the ea-nginx in cl-ea4 stable repo. I just tried installing from cl-ea4-testing repo and it didn't have the ea-modsec30 dependency. # yum list ea-nginx --enablerepo=cl-ea4-testing ... Available Packages ea-nginx.x86_64 3:1.19.8-3.el7.cloudlinux.1 cl-ea4-testing
    Seem has been resolved in 1.19.8-3 of cloudlinux version. Also, the cPanel provided version is even higher (on CentOS) - ea-nginx-1.20.0-1.1.1.cpanel.x86_64. Thanks
    0
  • cPRex Jurassic Moderator
    I'm glad a CL update took care of that!
    0

Please sign in to leave a comment.