12.21.6 now available

Adam

https://enhance.com/support/release-notes

Security

Hide ‘mailq’ and ‘postqueue’ binaries from customer container.

Enhanced

Improved cleanup of expired “run in customer container” tasks initiated by WordPress/Joomla toolkit to prevent potential task queue overrun.

mendozal

Hi Adam. What security issue does this fix?

Adam

It's not in relation to a specific issue, we're just hiding unnecessary setuid and setgid binaries from the customer environment.

fabest

Hi,
Just to confirm, did hiding mailq and postqueue cause the PHP mail() function to stop working?
Does this mean it is now necessary to use SMTP for WordPress?

Thanks.

Adam

fabest

No it didn't, it won't affect email functionality at all.

imreltd

I am unable to use PHP mail() now, using elastic mail as relay. It did work so I am a bit at a loss. Is there anything special about how enhance installs MTAs and/or treat them after 12.21.6?

AdamM

My clients also started reporting that email on their websites stopped working...

Kosta

AdamM any logs you can see, share ?

Adam

I don't think this was related directly to the Enhance update. There are a few issues I've seen lately in support tickets.

Postfix resolv.conf

Postfix copies the /etc/resolv.conf to its chroot /var/spool/postfix/etc/resolv.conf on startup. A restart would happen after a Postfix package update. If the /etc/resolv.conf was empty at that point, the postfix resolv.conf might also be empty. Running systemctl restart postfix would fix it assuming /etc/resolv.conf is now correct.

Postfix postdrop binary in overlay dir

Some servers that were upgraded from Ubuntu 22.04 to 24.04 or Enhance v11 to v12 might have an old copy of the postfix postdrop binary in the container overlay directory. As root, run ls /var/local/enhance/containers/*/*/overlay/usr/sbin/postdrop - there should be no results. If any are found, remove those files and restart the affected containers through the Enhance UI.

If problems persist please send a support ticket.

imreltd

The thing is, usually I would try and solve it myself with postfix etc. sshing to server, but I believe Enhance installs postfix differently than conventional way

Adam

Enhance just installs Postfix from the Ubuntu repo, there is nothing unusual.

adil

Adam

If we modify its config, will enhance override it on next update ?

Adam

You can modify /etc/postfix/main.cf and /etc/postfix/master.cf and those changes will be preserved. The exception being the relayhost config which Enhance manages and which should be configured through the smart host settings in the UI. You should not modify the SNI list, this is built automatically from the list of hosted domains on the server.