我只是做了一个基础安装和Apache 2.4启动就好了。 我正在从运行Apache 2.2的旧服务器迁移。
当我把一个文件放到/etc/httpd/conf.d ，并且包含一个VirtualHost定义并重启服务器，它就会在启动时崩溃。 这个VirtualHost定义是我以前的服务器使用的。
# systemctl restart httpd.service Job for httpd.service failed because the control process exited with error code. See "systemctl status httpd.service" and "journalctl -xe" for details. # systemctl -l status httpd.service ● httpd.service - The Apache HTTP Server Loaded: loaded (/usr/lib/systemd/system/httpd.service; disabled; vendor preset: disabled) Active: failed (Result: exit-code) since Sun 2017-01-22 03:03:35 UTC; 10s ago Docs: man:httpd(8) man:apachectl(8) Process: 20621 ExecStop=/bin/kill -WINCH ${MAINPID} (code=exited, status=1/FAILURE) Process: 20620 ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND (code=exited, status=1/FAILURE) Main PID: 20620 (code=exited, status=1/FAILURE) Jan 22 03:03:35 production-frontend-0 systemd[1]: Starting The Apache HTTP Server... Jan 22 03:03:35 production-frontend-0 systemd[1]: httpd.service: main process exited, code=exited, status=1/FAILURE Jan 22 03:03:35 production-frontend-0 kill[20621]: kill: cannot find process "" Jan 22 03:03:35 production-frontend-0 systemd[1]: httpd.service: control process exited, code=exited status=1 Jan 22 03:03:35 production-frontend-0 systemd[1]: Failed to start The Apache HTTP Server. Jan 22 03:03:35 production-frontend-0 systemd[1]: Unit httpd.service entered failed state. Jan 22 03:03:35 production-frontend-0 systemd[1]: httpd.service failed. #
这里是conf文件的内容（改变了域名）：
<VirtualHost *:80> ServerName mydomain.com ServerAlias www.mydomain.com <Directory /home/kenny/domains/mydomain.com/html> Options Indexes FollowSymLinks MultiViews ExecCGI Includes AllowOverride All </Directory> DocumentRoot /home/kenny/domains/mydomain.com/html CustomLog /home/kenny/domains/mydomain.com/logs/access.log combined ErrorLog /home/kenny/domains/mydomain.com/logs/error.log ScriptAlias /cgi-bin /home/kenny/domains/mydomain.com/cgi RewriteEngine on # Does the file exist? RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule ^ http://mydomain.otherdomain.com [R,L] </VirtualHost>
我检查了文件语法：
# httpd -t Syntax OK #
如果我删除文件并重新启动，那么Apache启动就好了。 我已经确定我的文件的权限与现有的conf文件匹配：
# ls -l total 20 -rw-r--r--. 1 root root 2926 Nov 14 18:04 autoindex.conf -rw-r--r--. 1 root root 366 Nov 14 18:05 README -rw-r--r--. 1 root root 1252 Nov 14 16:53 userdir.conf -rw-r--r--. 1 root root 674 Jan 22 03:03 vhost.mydomain.com.conf -rw-r--r--. 1 root root 824 Nov 14 16:53 welcome.conf #
在Apache 2.4中有什么变化与我的VirtualHost定义相冲突？
在标准的Google Compute实例中是否存在拒绝我的configuration的某种安全措施？
有几年前我在旧服务器上调整了一些configuration选项，我忘了我需要调整我的Google Compute实例？ 🙂
编辑：
在错误日志中find这个：
Permission denied: AH00649: could not open transfer log file /home/kenny/domains/mydomain.com/logs/access.log. AH00015: Unable to open logs
我检查了httpd.conf ，它说服务器以User：Group apache:apache 。 所以我做了以下确保Apache有权写这些日志文件：
chgrp -R apache /home/kenny/domains chmod g+w /home/kenny/domains/mydomain.com/logs
我仍然得到错误。 我甚至尝试过：
touch /home/kenny/domains/mydomain.com/logs/access.log chown kenny:apache /home/kenny/domains/mydomain.com/logs/access.log chmod g+w /home/kenny/domains/mydomain.com/logs/access.log
仍然给我错误。 我确保祖先的path也可以执行到Apache。
/home/kenny is owned by kenny:kenny and is 755 /home/kenny/domains is owned by kenny:apache and is 755 /home/kenny/domains/mydomain.com is owned by kenny:apache and is 755 /home/kenny/domains/mydomain.com/logs is owned by kenny:apache and is 775 /home/kenny/domains/mydomain.com/logs/access.log is owned by kenny:apache and is 664
audit.log的内容：
type=AVC msg=audit(1485115416.525:2112): avc: denied { open } for pid=25759 comm="httpd" path="/home/kenny/domains/mydomain.com/logs/access.log" dev="sda1" ino=36516072 scontext=system_u:system_r:httpd_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file type=SYSCALL msg=audit(1485115416.525:2112): arch=c000003e syscall=2 success=no exit=-13 a0=7f6620cd15a8 a1=80441 a2=1b6 a3=ffffff00 items=0 ppid=1 pid=25759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="httpd" exe="/usr/sbin/httpd" subj=system_u:system_r:httpd_t:s0 key=(null) type=SERVICE_START msg=audit(1485115416.567:2113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=httpd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed
“
你正在运行CentOS 7，默认启用SELinux。
当您尝试启动Apache时，它会尝试将文件加载到用户的主目录中，默认情况下这是不允许的。
您可以通过设置合适的布尔值httpd_read_user_content来允许Apache 读取用户主目录中的文件。 将Web内容重新定位到更合适的位置（如/srv/www或/var/www会更好。
但是，没有SELinux布尔值允许Web服务器写入用户主目录，这当然是固有危险的。 你真的应该把日志文件移到其他地方。 标准位置是/var/log/httpd 。 如果用户需要读取它们，则可以为其设置权限。