WordPress 5.5 auto-updates not working in Managed version, likely due to core updates blocked.

jdaviescoates

@MooCloud_Matt said in WordPress 5.5 auto-updates not working in Managed version, likely due to core updates blocked.:

https://www.wordfence.com/blog/2020/08/wordpress-auto-updates-what-do-you-have-to-lose/

A good overview (as one would expect from Wordfence), thanks.

girish

OK, I waiting for Hello Dolly to auto-update in 12 hours to see what the error is. I couldn't figure an obvious way to trigger auto-updates immediately.

girish

I was able to reproduce this. It looks like it triggers the cron event wp_update_plugins but that even does nothing.

root@01d9cbb3-049c-4b99-b5e6-299ea3775d75:/app/code# exec /usr/local/bin/gosu www-data:www-data /app/pkg/wp --skip-themes cron event run wp_update_plugins
Executed the cron event 'wp_update_plugins' in 0.007s.
Success: Executed a total of 1 cron event.

d19dotca

@girish Is this a WordPress issue then in that case or to do with the way this is packaged in Cloudron?

d19dotca

@girish just wanted to follow-up on this. Any idea what could be causing this?

girish

@d19dotca It's in my todo list, have to investigate but so it's not obvious yet what the issue is.

jdaviescoates

@girish @d19dotca I wonder if the issue I'm having with configuring Wordfence Firewall is related....?

When I try to do it I end up getting asked for FTP credentials (which of course I can't supply as they don't exist for WordPress Managed app).

d19dotca

@jdaviescoates Good question! That won't be the root cause for me though I'm pretty sure as I don't have WordFence installed (or any security-related plugins really yet).

girish

@jdaviescoates Yeah, same as @d19dotca for my setup as well. I don't have WordFence. Why does wordfence want FTP permissions anyway? Is it patching some code?

jdaviescoates

@girish it's for adding firewall rules to .htaccess

MooCloud_Matt

@jdaviescoates
Normally this kind of plugin for security they want to have access to all the WordPress to intervene if needed on all the WordPress root directory.
This message is form wp. Because WordPress it's self provide an interface not edit files and accessing data, when a plugin try to access the filesystem with the filesystem API and the API fail, will automatically ask for the credential of ftp.
But .htaccess is editable I think on managed too, so it's trying to do something in a read only directory on the image.

d19dotca

@girish Hi Girish, Any updates on this one? Did we ever find what causes the auto-updates to not work?

girish

@d19dotca This one has me totally stumped. It's crazy that there is no obvious way to test this. All the time it is "scheduled in 12 hours".

d19dotca

@girish Do we know if this works in Unmanaged? I haven't tried there, but if it works in Unmanaged... maybe that's one more reason to make Unmanaged the primary WordPress app package haha I'll maybe try in Unmanaged over the weekend if it hasn't already been tried.

jdaviescoates

@d19dotca good question! I've just enabled auto-updates on a load of plugins (and the Twenty Twenty theme) on one of my Unmanaged sites so will report back...

Lonkle

@jdaviescoates This was before my time here. But if you successfully get the feature working on Unmanaged. I'll install Managed and see where the break lies. I use to dive into the Wordpress Core Code for fun so I should be able to find what it's trying to write to but can't and quits (most likely a log file, maybe a backup before updating - but you'd think those files would be written in /uploads which is writeable.

jdaviescoates

@jdaviescoates said in WordPress 5.5 auto-updates not working in Managed version, likely due to core updates blocked.:

@d19dotca good question! I've just enabled auto-updates on a load of plugins (and the Twenty Twenty theme) on one of my Unmanaged sites so will report back...

Works!

Lonkle

@jdaviescoates You're on unmanaged, right? If you are, I'll look into it on Managed to see if I can find the break. My actual expertise is Wordpress so I want to make WP a first class citizen on Cloudron as much as possible! ️

jdaviescoates

@Lonk said in WordPress 5.5 auto-updates not working in Managed version, likely due to core updates blocked.:

@jdaviescoates You're on unmanaged, right?

Correct.

@Lonk said in WordPress 5.5 auto-updates not working in Managed version, likely due to core updates blocked.:

If you are, I'll look into it on Managed to see if I can find the break. My actual expertise is Wordpress so I want to make WP a first class citizen on Cloudron as much as possible! ️

Great

d19dotca

@Lonk That'd be awesome! I hope to learn lots from you over time, haha. I'm very comfortable with WordPress but not quite at the "development" level. So this sounds great if we can learn later what the root cause was (assuming you find one).

Lonkle

@d19dotca said in WordPress 5.5 auto-updates not working in Managed version, likely due to core updates blocked.:

@Lonk That'd be awesome! I hope to learn lots from you over time, haha. I'm very comfortable with WordPress but not quite at the "development" level. So this sounds great if we can learn later what the root cause was (assuming you find one).

Thanks for the encouragement. Now that I feel Comfortable with Docker / Cloudron / Docerode / Networking / etc, I'll solely be focusing on making Wordpress better in every way I can. I used Wordpress for 10 years as a developer and I really loved it, so getting to help architecture the platform around it to make it run more efficiently / be easier for other's to use, I'm excited to do for this community (whom I feel has given me a lot of support when building my first app).

d19dotca

@Lonk @girish So what was the fix for this btw, assuming you found one? Just curious because in the other thread I see the feature parity of plugin auto-updates working, so assumed someone found the root cause for that?

Lonkle

@d19dotca I didn't get to looking into it so that was all @girish!

girish

@d19dotca The issue had to with the plugin that was disabling automatic update of WordPress. I had initially removed the plugin since it disappeared from wordpress.org as well as reported here - https://forum.cloudron.io/topic/3114/wordpress-issue-the-plugin-disable-wordpress-core-updates-has-been-removed-from-wordpress-org . To fix that, I wrote a custom plugin which also has some issue I guess. In any case, I just removed the plugin now, it's not really needed.

rmdes

I just installed a brand new domain and wanted to install Wordpress Managed
it all goes fine but when I want to upgrade WP to latest version, I'm being asked for FTP credentials ?
no matter what I use it does not work, WP won't upgrade itself.
I don't have this bug in any of my other WP managed installs..
I read this thread but now I'm even more confused on what's happening here..
Anyone managed to upgrade WP in the end ?

Lonkle

@girish said in WordPress 5.5 auto-updates not working in Managed version, likely due to core updates blocked.:

@d19dotca The issue had to with the plugin that was disabling automatic update of WordPress. I had initially removed the plugin since it disappeared from wordpress.org as well as reported here - https://forum.cloudron.io/topic/3114/wordpress-issue-the-plugin-disable-wordpress-core-updates-has-been-removed-from-wordpress-org . To fix that, I wrote a custom plugin which also has some issue I guess. In any case, I just removed the plugin now, it's not really needed.

So Managed now can enable automatic updates? Or maybe I’m confused - why isn’t it needed anymore?

girish

@rmdes said in WordPress 5.5 auto-updates not working in Managed version, likely due to core updates blocked.:

it all goes fine but when I want to upgrade WP to latest version, I'm being asked for FTP credentials ?

You cannot update WordPress with the managed version. It's asking for FTP creds because the filesystem is read only. We will push an update to WP 5.5.3 in the coming day or two.

Some technical info: In previous managed cloudron packages, it won't show the update UI. This was because we had a custom plugin that blocked updates. Unfortunately, that plugin also blocked plugin auto updates. I had removed it so that automatic updates of plugins work in Managed WP. That removal has the side effect that you see update WP UI...

rmdes

Oh I understand now, thanks for the explanation

girish

@rmdes I have pushed a 5.5.3 package some time back

Lonkle

@girish But why is the disable plugins not needed anymore, is it hard coded somewhere else (like in wp-config.php)?

rmdes

It's fixed over here, thanks a lot !!

robi

Can the custom blocking plugin be modified to block core updates but allow other plugin auto-updates?

Lonkle

@robi said in WordPress 5.5 auto-updates not working in Managed version, likely due to core updates blocked.:

Can the custom blocking plugin be modified to block core updates but allow other plugin auto-updates?

I believe that’s what he did.

girish

@Lonk said in WordPress 5.5 auto-updates not working in Managed version, likely due to core updates blocked.:

I believe that’s what he did.

Unfortunately, no. Since, I am not a WP dev, I couldn't figure out how to just disable core updates and keep plugin updates enabled. So, I disabled the plugin altogether. https://git.cloudron.io/cloudron/wordpress-managed-app/-/commit/08e6cf17a24e047806f4846bf1083b33c40642d6 is the plugin we previously had. If you know how to disable just core updates but not plugin updates, let me know and I can put that plugin back in.

robi

Since this plugin was before the WP auto-update functionality, it may make sense to rethink how to do this now.

Allow all updates, but filter out only the core and hide the auto-update option from core to maintain the desired effect.

rmdes

I'm having this issue again, but not on all my WP's, I'm so confused right now, I don't even know what's happening, but it's asking for credentials again instead of updating from cloudron packages, I'm on managed, I even tried to install a clean new WP and restore my backup from my old WP (also managed) and guess what : exact same problem, can't upgrade, asking for credentials..even though the WP managed app just got installed and is supposed to be last version ?

What's going on here ?

nebulon

@rmdes what kind of credentials is who asking for?

rmdes

@nebulon It's asking FTP credentials on all my WP managed, maybe it's just because there is a new version but not yet packaged ?

girish

@rmdes on the managed app, you cannot update WP. It will behave similar to what you faced i.e it will ask for credentials. This is because WP figures that it cannot write to the code directory and falls back to uploading code via FTP (a behavior I really dislike but I don't think this can be disabled).

Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.

Solved WordPress 5.5 auto-updates not working in Managed version, likely due to core updates blocked.