Upgrade to Nextcloud 22.1.1 - Missing PHP module Sodium

Support
1

NethServer Version: 7.9.2009
Module: Nextcloud 22.1.1

Hello @support_team,

I’ve applied upgrades to my Nethserver which brought my Nextcloud from version 21 to 22. After upgrade I’m seeing in the Nextcloud Security and Warnings Settings page the following:

  • This instance is missing some recommended PHP modules. For improved performance and better compatibility it is highly recommended to install them.
    sodium

Has anyone else seen this? What would be the command I would need to use to install this php module on my Nextcloud? Any ideas what this module is for?

I’ve searched Nextcloud and can see recent incidents from August and September related to this module in PHP 8 and argon2.

Thank you.

4 Likes
2

hum I did a work on glpi recently and it needed also sodium

I think this could provide the missing dependencies.

yum install sclo-php73-php-sodium libsodium

2 Likes
3

Screenshot - 2021-09-18T091600.672
Screenshot - 2021-09-18T091600.6721888×392 57.5 KB

I think it is a valid bug @giacomo

2 Likes
4

Thanks for reporting.
We will add it on next Nextcloud release.

1 Like
5

i know this will be an issue when updating nextcloud on arm as sclo-php73-php-sodium isnot available but libsodium is i know we need it for glpi for arm as we have all other dependencies

2 Likes
6

Thanks all for your review and comments on this thread. What’s interesting is my test Nethserver upgrade did not have the same issue with the missing sodium php module.

Thanks!

7

my guess is that it would have already been installed as a dependency from something else

2 Likes
8

I will patch nextcloud

3 Likes
9

Hum I cannot remove the warning even if I add the required dependencies. I suppose it is how nextcloud test the mission modules, if it is done by the default php version

[root@ns7loc4 ~]# php -m
[PHP Modules]
bz2
calendar
Core
ctype
curl
date
dom
ereg
exif
fileinfo
filter
ftp
gettext
gmp
hash
iconv
intl
json
libxml
mhash
openssl
pcntl
pcre
Phar
readline
Reflection
session
shmop
SimpleXML
sockets
SPL
standard
tokenizer
wddx
xml
xmlreader
xmlwriter
xsl
zip
zlib

[Zend Modules]

but if I test by the rh-php73

[root@ns7loc4 ~]# /opt/rh/rh-php73/root/bin/php -m
[PHP Modules]
apcu
bcmath
bz2
calendar
Core
ctype
curl
date
dom
enchant
exif
fileinfo
filter
ftp
gd
gettext
gmp
hash
iconv
imagick
imap
intl
json
ldap
libsmbclient
libxml
mbstring
mysqli
mysqlnd
openssl
pcntl
pcre
PDO
pdo_mysql
pdo_pgsql
pdo_sqlite
pgsql
Phar
posix
readline
Reflection
session
shmop
SimpleXML
smbclient
soap
sockets
sodium
SPL
sqlite3
standard
sysvmsg
sysvsem
sysvshm
tidy
tokenizer
wddx
xml
xmlreader
xmlrpc
xmlwriter
xsl
Zend OPcache
zip
zlib

[Zend Modules]
Zend OPcache

I suppose it is good to add the missing dependencies to rh-php73 but it won’t remove the warning …

cc @giacomo

2 Likes
10
1 Like
11

Well that’s not good

Note that the following behavior is different from upstream:
The rh-php73 Software Collection does not support the Argon2 password hashing algorithm.
12

we need >= php7.4

1 Like
13
1 Like
14

time to test nextcloud 22.2.0

The libsodium warnings should have been removed, we have probably now many other things they have broken.

2 Likes