[tianon]

mod_php (via apache2) has been disrecommended by upstream PHP for years in favor of php-fpm (https://www.php.net/manual/en/install.unix.apache2.php). 8.6+ now builds every variant with zts enabled (2e430cd), and mod_php gains nothing from that -- it still can't use a threaded MPM, so the added thread-safety overhead is pure cost for zero benefit. Years of disrecommendation plus a new cost with no offsetting benefit is reason enough to drop the variant.

• [PHP 8.6] switch the default from NTS to ZTS #1673 (comment)

Assisted-By: "claude my eyes right out"

[tianon]

I'm open to making this 9.0+ instead of 8.6+, but I think going all-in on ZTS is really a compelling lever for making this change too, so IMO 8.6 is the correct place for us to finally flip this and get rid of mod_php.

https://www.php.net/manual/en/install.unix.apache2.php really doesn't mince words here:

Warning

Use PHP-FPM Instead

Do not use mod_php for new installations. The instructions on this page are retained for historical reference and for the rare cases where embedding PHP directly in the Apache httpd process is specifically required.

For all modern deployments, use PHP-FPM (FastCGI Process Manager) with Apache httpd's mod_proxy_fcgi module. PHP-FPM provides better resource management, process isolation, independent restart of PHP without restarting Apache httpd, and compatibility with Apache httpd's event MPM (the default since Apache httpd 2.4). Major Linux distributions ship this as the default configuration.

The mod_php approach embeds PHP directly into every Apache httpd worker process. Unless PHP is compiled with thread safety (--enable-zts), mod_php requires the prefork MPM, which significantly limits concurrency. If you proceed with mod_php, you should fully understand the performance and security implications.

That last paragraph seems to imply that enabling ZTS allows switching to a better MPM, but it really doesn't (primarily because other non-PHP libraries need to be thread-safe too for that to work, and they're not necessarily going to be).

[henderkes]

ZTS allows using the old threaded apache2module instead of the prefork mpm. I think they still serve a point - at least for people not using FrankenPHP: using only a single image for web server + php runtime instead of two, as they would with fpm.

I don't think switching to ZTS has any bearing on dropping apache images. But the only people I know who still use the apache module don't use Docker, so I'd be in favour anyhow.

That last paragraph seems to imply that enabling ZTS allows switching to a better MPM, but it really doesn't (primarily because other non-PHP libraries need to be thread-safe too for that to work, and they're not necessarily going to be).

Fwiw I think the only non-thread safe library used by php is the php-imap's UW c-client. (And the extension was unbundled in 8.4 anyways)

[TimWolla]

using only a single image for web server + php runtime instead of two, as they would with fpm.

👍 The wordpress Docker Official image also used Apache + mod_php by default (likely for that reason).

[chrisvanpatten]

Just an opinion but the infrastructure changes required to switch from one container to multiple (or to build a custom container with both) are not necessarily straightforward, and it feels safer to do this on the 9.0 upgrade cycle. Maybe start with a prominent note in the readme that these images are being deprecated? Maybe even a log message in the container, if there's precedent/capability for that?

[pereorga]

Please put the pull numbers in the PR before dropping apache images. Nobody outside Docker can see whether *-apache is a rounding error or still a large share of pulls.

[J0WI]

using only a single image for web server + php runtime instead of two, as they would with fpm.

👍 The wordpress Docker Official image also used Apache + mod_php by default (likely for that reason).

I'd first remove it from the other official images before removing it from PHP itself.

Unfortunately most PHP application expect the application code and the user data in the web root. So the web server needs to share a volume with (all) php containers. This makes it less convenient than just spinning up a <image> and connect it over a network port.