Articles in this section

See more

Plesk Update fails on CentOS/RHEL: "Operation not permitted" or "Permission denied"

Avatar
Kuzma Ivanov
Updated
Follow
Plesk for Linux kb: technical ABT: Group B

Applicable to:

  • Plesk for Linux

Symptoms

  • Plesk Update fails with one of the following error messages:

    CONFIG_TEXT: error: unpacking of archive failed on file /usr/local/psa/admin/sbin/deployer: cpio: rename failed - Operation not permitted

    CONFIG_TEXT: error: unpacking of archive failed on file /usr/local/psa/admin/sbin/deployer: cpio: rename failed - Permission denied

  • SELinux security module is in the enforcing mode:

    # getenforce
    Enforcing

Cause

The file mentioned in the error message has incorrect SELinux context.

Resolution

  1. Connect to the Plesk server via SSH.

  2. Restore SELinux context on the file from the error message. In this example, the file is /usr/local/psa/admin/sbin/deployer:

    # restorecon -v -F /usr/local/psa/admin/sbin/deployer

  3. Rerun Plesk Update:

    # plesk installer update

Comments

5 comments

Sort by Date Votes
  • Avatar
    Miha Gregorš

    Hello,

    I try to upgrade Plesk Onyx to Plesk Obisidan on LXC container. I run /usr/local/psa/admin/bin/autoinstaller and after few steps I got
    error:

    chcon: failed to change context of '/usr/local/psa/bin/yum_install' to
    'system_u:object_r:rpm_exec_t:s0': Operation not permitted

    I can continue the upgrade anyway but configuration of all server will
    be broken, especially httpd. I think that problem is because of LXC unpriviliged container.

    Can I solve this problem?

    CentOS: 7.6

    Product: Plesk Onyx 17.8.11 Update #67 , last updated at Sept 11, 2019 04:51 AM

    Virtualization: unpriviliged LXC container and Proxmox 6

    Regards,

    Miha Gregorš

    0
    Comment actions Permalink
  • Avatar
    Maxim Krasikov

    Hello,

    Please let me clarify that Plesk installation on unprivileged LXC container was not tested by Plesk and is not supported. The installation could be performed on your risk.

    I suggest reviewing security policies on the server or contacting the hosting provider for assistance.

    In general, I found the information about the issue of installing httpd service on an unprivileged container. The links below can be helpful to you:
    https://github.com/lxc/lxd/issues/1245
    https://forum.proxmox.com/threads/cant-update-centos7-or-install-httpd-in-unprivileged-lxc-container.31174/

    1
    Comment actions Permalink
  • Avatar
    Miha Gregorš

    Hello,

    thank you for your information. It was very helpful. Did now anyone from you on Plesk tested installation on unprivileged LXC container? Cause I install version Onyx 17 on CentOS 7 then upgrade to 17.8 and then upgrade to Obsidion 18.0 without any problem. What kind of problems can we expect at all with unprivileged LXC container?

    Regards,

    0
    Comment actions Permalink
  • Avatar
    Ivan Postnikov

    Hello @Miha,

    Generally, everything should go smoothly.

    In case of issues, feel free o submit a request for support.

    1
    Comment actions Permalink
  • Avatar
    Miha Gregorš

    Hello,

    thank you for your information. Just keep on going that Plesk will support unpriviliged LXC containers in the future. I work at a hosting company and we are using Plesk for a long time. We will be using Plesk in LXV virtualization to. So we need a full support of unpriviliged LXC containers. I will let you know if we will have some problems using Plesk with unpriviliged LXC containers. Thanks again!!!

    Regards,

    0
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request

Related articles