[PR #19213] fix: fix ssrf_proxy docker-compose start up fail. #29100

Closed
opened 2026-02-21 20:44:52 -05:00 by yindo · 0 comments
Owner

Original Pull Request: https://github.com/langgenius/dify/pull/19213

State: closed
Merged: No


  1. set SSRF_DEFAULT_TIME_OUT to 60s, it will fix plugin download fail.
  2. add ssrf_proxy docker volume, fix ssrf_proxy start err.

maybe fix https://github.com/langgenius/dify/issues/19302

Summary

docker-compse delpyment, docker-ssrf_proxy-1 will exit.
that log like it:

2025/05/03 02:49:46| Configuring Parent sandbox
fopen: Permission denied
2025/05/03 02:49:46 pinger| Initialising ICMP pinger ...
2025/05/03 02:49:46 pinger| Open  icmp_sock: (1) Operation not permitted
2025/05/03 02:49:46 pinger| ERROR: Unable to start ICMP pinger.
2025/05/03 02:49:46 pinger| Open  icmp_sock: (1) Operation not permitted
2025/05/03 02:49:46 pinger| ERROR: Unable to start ICMPv6 pinger.
2025/05/03 02:49:46 pinger| FATAL: Unable to open any ICMP sockets.
2025/05/03 02:49:47| storeLateRelease: released 0 objects
2025/05/03 02:49:47| ERROR: logfileHandleWrite: daemon:/var/log/squid/access.log: error writing ((32) Broken pipe)
2025/05/03 02:49:47| Closing HTTP(S) port [::]:3128
    listening port: 3128
2025/05/03 02:49:47| Closing HTTP(S) port [::]:8194
    listening port: 8194
2025/05/03 02:49:47| storeDirWriteCleanLogs: Starting...
2025/05/03 02:49:47|   Finished.  Wrote 0 entries.
2025/05/03 02:49:47|   Took 0.00 seconds (  0.00 entries/sec).
2025/05/03 02:49:47| FATAL: I don't handle this error well!
2025/05/03 02:49:47| Squid Cache (Version 6.6): Terminated abnormally.
CPU Usage: 0.018 seconds = 0.010 user + 0.008 sys
Maximum Resident Size: 93696 KB
Page faults with physical i/o: 0
2025/05/03 02:49:47| Removing PID file (/run/squid.pid)
2025/05/03 02:49:47| Closing Pinger socket on FD 14

the config fix logs and cache volumes.

Tip

Close issue syntax: Fixes #<issue number> or Resolves #<issue number>, see documentation for more details.

Screenshots

Before After
... ...

Checklist

Important

Please review the checklist below before submitting your pull request.

  • This change requires a documentation update, included: Dify Document
  • I understand that this PR may be closed in case there was no previous discussion or issues. (This doesn't apply to typos!)
  • I've added a test for each change that was introduced, and I tried as much as possible to make a single atomic change.
  • I've updated the documentation accordingly.
  • I ran dev/reformat(backend) and cd web && npx lint-staged(frontend) to appease the lint gods
**Original Pull Request:** https://github.com/langgenius/dify/pull/19213 **State:** closed **Merged:** No --- 1. set SSRF_DEFAULT_TIME_OUT to 60s, it will fix plugin download fail. 2. add ssrf_proxy docker volume, fix ssrf_proxy start err. maybe fix https://github.com/langgenius/dify/issues/19302 # Summary docker-compse delpyment, docker-ssrf_proxy-1 will exit. that log like it: ```log 2025/05/03 02:49:46| Configuring Parent sandbox fopen: Permission denied 2025/05/03 02:49:46 pinger| Initialising ICMP pinger ... 2025/05/03 02:49:46 pinger| Open icmp_sock: (1) Operation not permitted 2025/05/03 02:49:46 pinger| ERROR: Unable to start ICMP pinger. 2025/05/03 02:49:46 pinger| Open icmp_sock: (1) Operation not permitted 2025/05/03 02:49:46 pinger| ERROR: Unable to start ICMPv6 pinger. 2025/05/03 02:49:46 pinger| FATAL: Unable to open any ICMP sockets. 2025/05/03 02:49:47| storeLateRelease: released 0 objects 2025/05/03 02:49:47| ERROR: logfileHandleWrite: daemon:/var/log/squid/access.log: error writing ((32) Broken pipe) 2025/05/03 02:49:47| Closing HTTP(S) port [::]:3128 listening port: 3128 2025/05/03 02:49:47| Closing HTTP(S) port [::]:8194 listening port: 8194 2025/05/03 02:49:47| storeDirWriteCleanLogs: Starting... 2025/05/03 02:49:47| Finished. Wrote 0 entries. 2025/05/03 02:49:47| Took 0.00 seconds ( 0.00 entries/sec). 2025/05/03 02:49:47| FATAL: I don't handle this error well! 2025/05/03 02:49:47| Squid Cache (Version 6.6): Terminated abnormally. CPU Usage: 0.018 seconds = 0.010 user + 0.008 sys Maximum Resident Size: 93696 KB Page faults with physical i/o: 0 2025/05/03 02:49:47| Removing PID file (/run/squid.pid) 2025/05/03 02:49:47| Closing Pinger socket on FD 14 ``` the config fix logs and cache volumes. > [!Tip] > Close issue syntax: `Fixes #<issue number>` or `Resolves #<issue number>`, see [documentation](https://docs.github.com/en/issues/tracking-your-work-with-issues/linking-a-pull-request-to-an-issue#linking-a-pull-request-to-an-issue-using-a-keyword) for more details. # Screenshots | Before | After | |--------|-------| | ... | ... | # Checklist > [!IMPORTANT] > Please review the checklist below before submitting your pull request. - [ ] This change requires a documentation update, included: [Dify Document](https://github.com/langgenius/dify-docs) - [x] I understand that this PR may be closed in case there was no previous discussion or issues. (This doesn't apply to typos!) - [x] I've added a test for each change that was introduced, and I tried as much as possible to make a single atomic change. - [x] I've updated the documentation accordingly. - [x] I ran `dev/reformat`(backend) and `cd web && npx lint-staged`(frontend) to appease the lint gods
yindo added the pull-request label 2026-02-21 20:44:52 -05:00
yindo closed this issue 2026-02-21 20:44:52 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langgenius/dify#29100