Thruk: 404 error when fastfetch is installed

[haary]

Describe the bug
If fastfetch ( https://github.com/fastfetch-cli/fastfetch ) is installed, and put as a command in /root/.profile ,Thruk no longer works and Apache gives an 404 error. This is reproducible on Debian 12.

Thruk Version
3.22-1

To Reproduce
Steps to reproduce the behavior:

1. Install Thruk from http://download.opensuse.org/repositories/home:/naemon/Debian_12/ on Debian 12 with Apache web server.
2. Install the fastfetch Debian package from https://github.com/fastfetch-cli/fastfetch/releases/tag/2.49.0 (or just copy the fastfetch binary to /usr/local/bin/fastfetch or anywhere else in your $PATH )
3. put fastfetch command in /root/.profile directory
4. Restart apache
5. Open the Thruk page in a browser - you see a 404 error
6. Expected behavior Show the Thruk page

Edit
It's not the fastfetch binary itselfs, as I have assumed first - it is if you put the fastfetch command in roots .profile file.

[sni]

that sounds weird, what does fastfetch do?

[haary]

fastfetch is a utility like neofetch and displays system information. I had the command set in /root/.profile, so that it displays system information at shell login. For some reason thruk_auth seems to source /root/.profile

[ckujau]

Thruk usually runs as a separate user, or as the webserver user and doesn't have access to /root/.profile. I've installed fastfetch here too, put it into /root/.profile, restarted Apache, but Thruk works just fine.

If this is still an issue, can you maybe put some debug statements in your /root/.profile to find out what's calling it? For example:

# cat /root/.profile
[...]
echo "\$0: $0 / PID: $$ / PPID: $PPID" > /tmp/debug.txt
ps -fp $$,$PPID >> /tmp/debug.txt

fastfetch

...and if we're lucky we find the calling PID or program in /tmp/debug.txt when Thruk is called, if it really does have access to that file.

[haary]

Thruk usually runs as a separate user, or as the webserver user

It does, but /usr/share/thruk/thruk_auth runs at root user. I guess that is, because this process is started before apache drops privileges:

root@myserver:~# ps aux|grep thruk
root      444881  0.0  2.8  34084 29568 ?        S    06:58   0:00 perl -x /usr/share/thruk/thruk_auth
root      444882  0.0  3.4  40752 36224 ?        S    06:58   0:00 perl -x /usr/share/thruk/thruk_auth
www-data  547747  0.0  5.2  59460 54912 ?        S    12:58   0:01 /usr/bin/perl /usr/share/thruk/script/thruk_fastcgi.pl
www-data  547788  0.0  4.7  54100 49408 ?        S    12:58   0:00 /usr/bin/perl /usr/share/thruk/script/thruk_fastcgi.pl

root@myserver:~# cat /tmp/debug.txt 
$0: /usr/share/thruk/thruk_auth / PID: 592974 / PPID: 592966
UID          PID    PPID  C STIME TTY          TIME CMD
root      592966       1  0 15:32 ?        00:00:00 /usr/sbin/apache2 -k start
root      592974  592966  0 15:32 ?        00:00:00 /bin/bash /usr/share/thruk/thruk_auth
UID          PID    PPID  C STIME TTY          TIME CMD
root      592966       1  0 15:32 ?        00:00:00 /usr/sbin/apache2 -k start
root      592973  592966  0 15:32 ?        00:00:00 /bin/bash /usr/share/thruk/thruk_auth

[ckujau]

OK, wow. Thanks for checking. I guess Thruk running as root is a problem in itself, but /usr/share/thruk/thruk_auth really has this:

unset PROFILEDOTD
[ -e /etc/thruk/thruk.env  ] && . /etc/thruk/thruk.env
[ -e ~/etc/thruk/thruk.env ] && . ~/etc/thruk/thruk.env
[ -e ~/.thruk              ] && . ~/.thruk
[ -e ~/.profile            ] && . ~/.profile

Can't check right now, I wonder what's the reason to source .profile (even www-data's .profile) here.