Package: php8.4
Version: 8.4.11-1
Hello!
We have noticed that the PHP configuration file installed by default
with the PHP 8.4 package contains a note that states that cleaning up
session files on Debian, specifically is offloaded as a task to Cron.
Specifically, here is the quote from a "php.ini" file:
; This is disabled in the Debian packages due to the strict permissions
; on /var/lib/php. Instead, GC is performed through /etc/cron.d/php,
; which uses the session.gc_maxlifetime setting. Please, check
; /usr/share/doc/php8.2-common/README.Debian.gz for further reference.
session.gc_probability = 0
However, the php8.4 package does not mark the "cron" package as a
dependency such that it invariably leads to filling up the session
directory with session files given that nothing else is cleaning up the
session files.
Aside from using up a lot of hard-drive space, when and if the session
directory fills, then the services start failing, and PHP complains that
there is no more space to create session files.
In case the decision will be to maintain the PHP configuration as-is
then it would be advisable to make the PHP packages depend on Cron such
that they can be installed together.
Thank you!
