python 3.5 / mod_wsgi / apache 2.4 / SOME static files are not found, others are
joskra...@gmail.com
I have installed Mezzanine under Apache 2.4 and Python 3.5. Most everything works great, except for one thing: certain static files are not found. This problem does not occur if I start a project under Python 3.5 and use the runserver command- if I do that EVERYTHING works fine.
99% of the static files are found properly. However... if I go to browse a gallery, the thumbnails are missing. Also, if I do a blog post and insert a graphic from the gallery, the graphic is missing from the blog post. If I inspect the HTML in the browser, for the missing images I have something like this:
<div class="col-xs-4 col-sm-3"> <a class="thumbnail" rel="#image-1" title="Amsterdam Holland" href="/static/media/uploads/gallery/Amsterdam%2C%20Holland.jpg"> <img class="img-responsive" src="/static/media/"> </a> </div>
I should have something like this:
<div class="col-xs-4 col-sm-3"> <a class="thumbnail" rel="#image-1" title="Amsterdam Holland" href="/static/media/uploads/gallery/Amsterdam%2C%20Holland.jpg"> <img class="img-responsive" src="/static/media/uploads/gallery/.thumbnails/Amsterdam%2C%20Holland.jpg/Amsterdam%2C%20Holland-131x75.jpg"> </a> </div>
I have made sure that the security on the files in question is permissive, like so:
<Directory /srv/www/blog-sites/mywebsite/static>
Require all granted
</Directory>
<Directory /srv/www/blog-sites/mywebsite>
<Files wsgi.py>
Require all granted
</Files>
</Directory>
SELinux is disabled, at least for this testing. The only clue I can find is in the error logs:
[Sat Jun 10 12:52:44.250023 2017] [autoindex:error] [pid 4638] [client 140.254.70.225:34634] AH01276: Cannot serve directory /srv/www/blog-sites/mysite_net/static/media/: No matching DirectoryIndex (index.html) found, and server-generated directory index forbidden by Options directive, referer: http://www.mysite.net/test-post-two/
Does anyone have an idea as to what may be going wrong here?
Thanks!
-JK
joskra...@gmail.com
Karim
One update. I was able to get rid of the error related to Indexes, but the graphic URLs are still not being formed properly (and therefore, no graphics are shown).
One update. I was able to get rid of the error related to Indexes
Karim
Joshua Kramer
importing PIL. On line 298 of the file:
/srv/www/blog-sites/lib/python3.5/site-packages/mezzanine/core/templatetags/mezzanine_tags.py
...it tries to import PIL, but it fails. When I switch to this
virtualenv and try to import Image from PIL, I get an error about
loading a JPEG shared library. So I need to chase down why this JPEG
library isn't there.
> You received this message because you are subscribed to a topic in the
> Google Groups "Mezzanine Users" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/mezzanine-users/2_hf9eIc4eM/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> mezzanine-use...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
Karim
...it tries to import PIL, but it fails. When I switch to this
virtualenv and try to import Image from PIL, I get an error about
loading a JPEG shared library. So I need to chase down why this JPEG
library isn't there.
Joshua Kramer
libraries that were not installed on my target system. So I installed
them. (I am not sure why the Mezzanine site worked in debug mod even
without having those libraries installed, but it works now.)
Secondly, SELinux was denying access to httpd to execute those shared
libraries, even when they were there. So I used the SELinux
diagnostic tools to create SELinux policies to allow that to occur.
presto! Everything works now.
ProTip: There are some SELinux denials that are not logged by default!
A program that tries to execute a bit of code within a shared library
will silently fail if SELinux doesn't approve of that execution. The
documentation for RedHat 7 describes how to fix this. (Basically
rebuild the selinux policy with an option enabled, and reboot the
system. The problem is your logs will fill up quickly and you'll have
to sift through some stuff to find the denial. But then you can
rebuild the selinux policy without this option enabled to return to
normal operation. Once you sift through the denial you can use the
normal audit2allow and friends to create the correct policy.)
If anyone is curious: I am running this on CentOS 7 with the Software
Collections versions of Python 3.5 and Apache 2.4. Lots of custom
configuration here. But now it appears to work fully!
Melvyn Sopacua
Hi Karim,
If STATIC_URL fixes part of your problem, then your setting is incorrect. Make sure they are absolute, not relative, so /static/ not static/.
If no thumbnails are generated on disk, then (like Joshua) the problem is with Pillow.
You can test what happens in a django shell as follows:
>>> from mezzanine.core.templatetags.mezzanine_tags import thumbnail
>>> thumbnail('/media/uploads/foo.jpg', 80, 80)
(needs to be an existing image bigger then 80x80 for any Pillow runtime related errors to surface.)
--
Melvyn Sopacua
Karim
Melvyn Sopacua
On Monday 12 June 2017 18:12:58 Karim wrote:
> On Sun, Jun 11, 2017 at 10:43 PM, Melvyn Sopacua
> wrote:
> > On Sunday 11 June 2017 08:26:44 Karim wrote:
> > > UPDATE
> > >
> > >
> > >
> > > if STATIC_URL and MEDIA_URL are set with the `http://....` the img
> > > are
> > >
> > > correctly rendered in the posts with the right `src`.
> > >
> > >
> > >
> > > The thumbnails generation in django-filebrowser is still broken
> > >
> > > because point to `static/media`
> >
> > If STATIC_URL fixes part of your problem, then your setting is
> > incorrect. Make sure they are absolute, not relative, so /static/
> > not static/.
> >
> >
> >
> > If no thumbnails are generated on disk, then (like Joshua) the
> > problem is with Pillow.
> >
> > You can test what happens in a django shell as follows:
> > >>> from mezzanine.core.templatetags.mezzanine_tags import thumbnail
> > >>>
> > >>> thumbnail('/media/uploads/foo.jpg', 80, 80)
> >
> > (needs to be an existing image bigger then 80x80 for any Pillow
> > runtime related errors to surface.)
>
> ​Thanks, I think you pointed me to the right way to solve this.
>
> SuspiciousFileOperation: The joined path
> (.../kng_static/media/uploads/qa_fields.png) is located outside of the
> base path component (.../kng/kng_site/static/media)​
>
> ​This happens because the `static` dir in my project is a link to
> another dir.â€
Use os.path.realpath() in your settings file. The drawback being that changing the target of the symlink requires a reload of Django/WSGI for it to be picked up. This is not by definition a bad thing.
A similar approach is to implement your own storage engine and call os.path.realpath on STATIC_ROOT. Of course, this opens you up to symlink attacks.
Personally, I use bind mounts.
--
Melvyn Sopacua
Karim
Use os.path.realpath() in your settings file. The drawback being that changing the target of the symlink requires a reload of Django/WSGI for it to be picked up. This is not by definition a bad thing.
A similar approach is to implement your own storage engine and call os.path.realpath on STATIC_ROOT. Of course, this opens you up to symlink attacks.
Melvyn Sopacua
On Monday 12 June 2017 20:47:33 Karim wrote:
> ​If I try the mezzanine_tags:​
>
> In [3]: from mezzanine.core.templatetags.mezzanine_tags import
> thumbnail ...: img = '/home//myuser/webapps/kng_static/media/upload/test_image.jpg'
Thumbnail takes a URL not a filesystem path.
--
Melvyn Sopacua