Shopware6安装器为何以www-data为/var/cache和/var/log所有者及权限排查

问题场景 #

在Ubuntu 18.04环境安装Shopware 6.4.14.0时，即使Apache运行用户并非www-data，安装器仍会将/var/cache和/var/log目录下的资源所有者设为www-data。上传安装包执行安装时，触发以下致命错误：

Fatal error: Uncaught RuntimeException: Unable to create the "cache" directory (/var/www/shopware/var/cache/prod_h9d31c36e0ebc8a2d9604631b55f50e36). in /var/www/shopware/vendor/symfony/http-kernel/Kernel.php:638 Stack trace: #0 /var/www/shopware/vendor/symfony/http-kernel/Kernel.php(545): Symfony\Component\HttpKernel\Kernel->buildContainer() #1 /var/www/shopware/vendor/shopware/core/Kernel.php(191): Symfony\Component\HttpKernel\Kernel->initializeContainer() #2 /var/www/shopware/vendor/shopware/recovery/Install/src/app.php(46): Shopware\Core\Kernel->boot() #3 /var/www/shopware/vendor/shopware/recovery/Install/index.php(74): getApplication() #4 /var/www/shopware/public/recovery/install/index.php(6): require_once('...') #5 {main} thrown in /var/www/shopware/vendor/symfony/http-kernel/Kernel.php on line 638

Fatal error: Uncaught RuntimeException: Unable to write in the "logs" directory (/var/www/shopware/var/log). in /var/www/shopware/vendor/symfony/http-kernel/Kernel.php:641 Stack trace: #0 /var/www/shopware/vendor/symfony/http-kernel/Kernel.php(545): Symfony\Component\HttpKernel\Kernel->buildContainer() #1 /var/www/shopware/vendor/shopware/core/Kernel.php(191): Symfony\Component\HttpKernel\Kernel->initializeContainer() #2 /var/www/shopware/vendor/shopware/recovery/Install/src/app.php(46): Shopware\Core\Kernel->boot() #3 /var/www/shopware/vendor/shopware/recovery/Install/index.php(74): getApplication() #4 /var/www/shopware/public/recovery/install/index.php(6): require_once('...') #5 {main} thrown in /var/www/shopware/vendor/symfony/http-kernel/Kernel.php on line 641

将/var/cache和/var/log目录权限改为777后，安装器可正常启动，但创建的目录和文件所有者仍为www-data。

问题解答 #

存在控制该行为的环境变量 #

Shopware基于Symfony框架构建，权限控制逻辑结合了Symfony和自身的配置：

• Symfony层面：默认使用www-data作为web服务器用户，可通过SYMFONY_WEB_SERVER_USER环境变量覆盖。
• Shopware安装器层面：安装程序会读取SHOPWARE_HTTP_USER环境变量来指定web服务器用户，优先级高于Symfony的默认设置。

查找与配置方法 #

1. 检查当前环境变量
   在终端执行以下命令，确认是否已配置相关变量：

printenv | grep -E "SYMFONY_WEB_SERVER_USER|SHOPWARE_HTTP_USER"

2. 临时设置（仅当前终端会话有效）
   替换your-apache-user为实际的Apache运行用户，执行：

export SYMFONY_WEB_SERVER_USER=your-apache-user
export SHOPWARE_HTTP_USER=your-apache-user

设置后重新运行安装器验证权限是否正常。

3. 永久设置（系统全局生效）
   编辑Apache环境配置文件（通常为/etc/apache2/envvars），添加以下两行：

export SYMFONY_WEB_SERVER_USER=your-apache-user
export SHOPWARE_HTTP_USER=your-apache-user

保存后重启Apache：

sudo systemctl restart apache2

4. 源码验证（可选）
   若需确认逻辑，可查看Shopware安装器的权限处理代码：/var/www/shopware/vendor/shopware/recovery/Install/src/Service/FileSystemService.php，其中明确包含读取上述环境变量并设置目录所有者的逻辑。

安全建议 #

不要长期使用777权限，配置完环境变量后，恢复安全的权限设置：

sudo chown -R your-apache-user:your-apache-group /var/www/shopware/var/cache /var/www/shopware/var/log
sudo chmod -R 755 /var/www/shopware/var/cache /var/www/shopware/var/log

内容的提问来源于stack exchange，提问作者Adam Augustynowicz