New security warnings upgrading from NC26 to NC27

🚧 Installation
1

Installed NC 27, getting the following security warnings (warnings were clean/non-existent before the update):

The database is used for transactional file locking. To enhance performance, please configure memcache, if available. See the documentation ? for more information.
The database is missing some indexes. Due to the fact that adding indexes on big tables could take some time they were not added automatically. By running "occ db:add-missing-indices" those missing indexes could be added manually while the instance keeps running. Once the indexes are added queries to those tables are usually much faster.
Missing index "mounts_user_root_path_index" in table "oc_mounts".
Please double check the installation guides ?, and check for any errors or warnings in the log.

Check the security of your Nextcloud over our security scan ?.

Running NC27 under OMV6 under docker on a Pi4.
Any comments appreciated.
R.

2

Ran the occ command for the second warning, and only the first warning remains now. I think it can be ignored…

3

redis is recommended for performance but if you are happy with your system nothing wrong to stay at this point.

4

ok thanks, just read that in the NC documentation.

https://docs.nextcloud.com/server/24/admin_manual/configuration_server/caching_configuration.html?highlight=redis

I’m worried about breaking my installation as I don’t see instructions for Docker installs.

Is is safe to install this:
https://hub.docker.com/_/redis
?
I would also need to figure out any PHP file mods.

I’m happy with the performance of NC27 under docker on a Pi4 so I may leave well enough alone.

R.

5

yes adding redis is safe. see Docker .examples

6

Because of this Warning I installed Redis but the warning won’t disappear. Checked if Redis is getting input, but redid-cli monitor is not showing anything when I surf on my nextcloud instance.
Tried both with Unix socket as well as over TCP.

7

in my instance with working redis I see tons of redis logs only browsing through the interface…

there must b something wrong with your redis config…

8

Slowly I am getting the feeling the problem is my NGINX setting using a php-fpm socket.

9

This command, and it’s okay :slight_smile:

sudo -u www-data php /var/www/html/nextcloud/occ db:add-missing-indices
10

This adds only the missing indices, and does not solve the problem with the memcache.

11

Are you using nginx?

12

no - apache docker behind traefik

13

Turned out, installing php8.1-redis solved my problem… My bad, thought this is already installed.
Thx for your help!

1 Like
14

I installed redis today and edited the config.php file accordingly with file locking enabled… everything works fine and Nextcloud 27 seems a little snappier. All warnings are now gone from my Nextcloud install. Happy days.

15

After some tests, it seems that you should add these 2 lines in config.php to suppress the warning without needing to install and configure redis :

'memcache.local' => 'OC\\Memcache\\APCu',
'memcache.locking' => 'OC\\Memcache\\APCu',

The first is from nextcloud doc recommandations. The second make the warning go away.

1 Like