Add --with-compat to NGINX packages
Bug #1797897 reported by
Thomas Ward
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Nginx |
Fix Released
|
Wishlist
|
Thomas Ward | ||
Mainline |
Fix Released
|
Wishlist
|
Thomas Ward | ||
Stable |
Fix Released
|
Wishlist
|
Thomas Ward | ||
nginx (Debian) |
Fix Released
|
Unknown
|
|||
nginx (Ubuntu) |
Fix Released
|
Wishlist
|
Thomas Ward | ||
Cosmic |
Won't Fix
|
Wishlist
|
Thomas Ward | ||
Disco |
Fix Released
|
Wishlist
|
Thomas Ward |
Bug Description
Adding --with-compat would allow for those compiling dynamic modules separately to include them in the NGINX packages.
This should be considered for Ubuntu and Debian as well.
Changed in nginx: | |
status: | Triaged → In Progress |
Changed in nginx (Ubuntu): | |
status: | New → Triaged |
importance: | Undecided → Wishlist |
summary: |
- Add --with-compat to PPA packages + Add --with-compat to NGINX packages |
Changed in nginx (Ubuntu Disco): | |
status: | Triaged → In Progress |
Changed in nginx (Debian): | |
status: | Unknown → New |
Changed in nginx (Debian): | |
status: | New → Fix Released |
To post a comment you must log in.
I realized in IRC I failed to explain properly what happens here.
Related: /forum. nginx.org/ read.php? 29,270210, 270213# msg-270213 and mailman. nginx.org/ pipermail/ nginx-devel/ 2018-May/ 011119. html
https:/
http://
IN a nut-shell, what --with-compat does is allow people who build NGINX dynamic modules against NGINX in a separate compilation to take their compiled .so modules and include them in the NGINX versions on Ubuntu on their local machine. It would allow someone who, say, built modsecurity for NGINX dynamically and separately to `include` the configuration to enable the modsecurity module for NGINX without having to recompile and install manually alongside it the entire NGINX binary and all the other modules.
From a Security perspective, the only concern would be that third-party modules could be built dynamically then included and activated in individual users' NGINX builds on their own systems. As that happens separately from the NGINX package in Ubuntu, any issues stemming from such inclusions are "End User Problems" and not directly related to the NGINX packages in Ubuntu.
This has some considerations before it gets inserted, as to whether we want users to be able to dynamically compile and include extra modules outside of the binaries we ship already.
However, this bug and the request was prompted thanks to an uptick in requests (10 over 2 days from 10 separate individuals) in my email to enable this functionality both for the PPAs and for Ubuntu.