I'm trying to host a completely vanilla Umbraco install as an Azure App Service. Got my basic build and deploy pipelines running, but I'm running into problems with (I think) file system permissions when I hit the site.
I've been doing some reading around the subject to try to get to the bottom of it, but the words from Microsoft strongly suggest that giving write access to the files system backing a web app is just not a thing https://github.com/projectkudu/kudu/wiki/Azure-Web-App-sandbox
Which is odd because I'm clearly not the first person to attempt this and the Umbraco docs suggest that it's possible. Does anyone have any experiences of actually doing this? Is there something blinding obvious to which I'm oblivious?
There are a few setting you will need to apply for an Azure App Service. You can set these within the App Service Environment variables. You will need to use underscores though, for example the 'MainDomLock' setting would be:
Umbraco__CMS__Global__MainDomLock
You will probably need to restart the app service also after applying new settings
@Conor I have indeed set those app configurations and it's making no difference. Which version of Umbraco are you using?
@Per good to know you're using Windows AND linux as that was something that occurred to me. Notice you're running Umbraco 9 on linux though.
Gonna try that... will let you know
It's also possible that something else is going wrong here. The guts of the IIS error message is pretty bland:
IIS received the request; however, an internal error occurred during the processing of the
request. The root cause of this error depends on which module handles the request and what was
happening in the worker process when this error occurred.
IIS was not able to access the web.config file for the Web site or application. This can occur
if the NTFS permissions are set incorrectly.
IIS was not able to process configuration for the Web site or application.
The authenticated user does not have permission to use this DLL.
The request is mapped to a managed handler but the .NET Extensibility Feature is not installed.
A combination of error and trial has proven me to be traveling on completely the wrong kind of path.
I got it running in a Linux app service, but on inspection it was only because I'd garbled the DB connection string name, which is the same as removing it entirely. Once removed on the Windows version, it springs to life. I suspect the authentication scheme - my next battle to fight.
Hosting Umbraco as an Azure App Service (Web App)
Hi there,
I'm trying to host a completely vanilla Umbraco install as an Azure App Service. Got my basic build and deploy pipelines running, but I'm running into problems with (I think) file system permissions when I hit the site.
I've been doing some reading around the subject to try to get to the bottom of it, but the words from Microsoft strongly suggest that giving write access to the files system backing a web app is just not a thing https://github.com/projectkudu/kudu/wiki/Azure-Web-App-sandbox
Which is odd because I'm clearly not the first person to attempt this and the Umbraco docs suggest that it's possible. Does anyone have any experiences of actually doing this? Is there something blinding obvious to which I'm oblivious?
Thanks for any clues you guys can offer :)
Hi Oliver,
Have you gone through this documentation below?
https://docs.umbraco.com/umbraco-cms/fundamentals/setup/server-setup/azure-web-apps#recommended-configuration
There are a few setting you will need to apply for an Azure App Service. You can set these within the App Service Environment variables. You will need to use underscores though, for example the 'MainDomLock' setting would be:
You will probably need to restart the app service also after applying new settings
Hope this helps 😊
We run all our Umbracœs as Azure Web Apps.
We use a load-balanced setup with one App for editing, and one App for frontend.
We use both Windows Apps (for Umbraco 8) and Linux Apps (for Umbraco 9+).
Our build and release pipes are, more or less, out-of-the-box pipes based on ASP.NET 4 or ASP.NET Core templates.
Everything works fine, no need to configure permissions or anything.
What does your appsettings look like?
Simple stuff.
The appsettings file is
And there are the standard environment config settings for:
and a link to a KeyVault with one secret for
Obviously the program.cs has been updated to read from KeyVault.
Anything obvious spring to mind?
Thanks for the responses guys,
@Conor I have indeed set those app configurations and it's making no difference. Which version of Umbraco are you using?
@Per good to know you're using Windows AND linux as that was something that occurred to me. Notice you're running Umbraco 9 on linux though.
Gonna try that... will let you know
It's also possible that something else is going wrong here. The guts of the IIS error message is pretty bland:
Gah!
A combination of error and trial has proven me to be traveling on completely the wrong kind of path.
I got it running in a Linux app service, but on inspection it was only because I'd garbled the DB connection string name, which is the same as removing it entirely. Once removed on the Windows version, it springs to life. I suspect the authentication scheme - my next battle to fight.
Sorry and thanks!
Ah! There we go 😊 Glad you got it working, Oliver!
is working on a reply...