Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Activity
  • Jan 16 22:34

    j8r on gh-pages

    Update docs (compare)

  • Jan 16 22:32

    j8r on master

    Cleanup code (compare)

  • Jan 16 15:27

    j8r on gh-pages

    Update docs (compare)

  • Jan 16 15:25

    j8r on master

    Cleanup file configuration hand… (compare)

  • Jan 16 15:22

    j8r on master

    Remove empty configuration file… (compare)

  • Jan 15 21:44

    j8r on gh-pages

    Update docs (compare)

  • Jan 15 21:43
    j8r commented #33
  • Jan 15 21:42

    j8r on group-actions

    (compare)

  • Jan 15 21:42

    j8r on master

    Make CLI utitlity functions ava… Add user delete route Move config helpers out of the … and 8 more (compare)

  • Jan 15 21:42
    j8r closed #33
  • Jan 15 21:41

    j8r on gh-pages

    Update docs (compare)

  • Jan 15 21:39
    j8r synchronize #33
  • Jan 15 21:39

    j8r on group-actions

    Make CLI utitlity functions ava… Add user delete route Move config helpers out of the … and 8 more (compare)

  • Jan 15 14:50

    j8r on gh-pages

    Update docs (compare)

  • Jan 15 14:48

    j8r on master

    Improve available port checker (compare)

  • Jan 15 14:22

    j8r on master

    Improve available port checker (compare)

  • Jan 15 14:20

    j8r on master

    Improve available port checker (compare)

  • Jan 15 00:05

    j8r on gh-pages

    Update docs (compare)

  • Jan 15 00:04

    j8r on master

    Change conf/ mode to 710 for HT… (compare)

  • Jan 10 17:59

    j8r on gh-pages

    Update docs (compare)

Julien Reichardt
@j8r
Yes the purpose is to install and manager our apps through a web ui, and a rest API
in order to allow untechnical users to use it
Julien Reichardt
@j8r
what did you try @dtrckd?
Adrien D.
@dtrckd

after having installed crystal and build the dppm-rest-api, I try the following:

$ ./bin/dppm server run
ERR! Error opening file './data/permissions.json' with mode 'r': No such file or directory

and

$ sudo ./bin/dppm server group a id=test name=test
ERR! Error opening file './data/permissions.json' with mode 'r': No such file or directory

Running the test, I everithing goes well, except maybe, the pending case here:

$ crystal spec
...........................................................................................*....

Pending:
  DppmRestApi::Actions has access

Finished in 36.85 seconds
96 examples, 0 failures, 0 errors, 1 pending
Julien Reichardt
@j8r
there are still some rough edges, the file has to be created before hand
I agree it should be created automatically
Adrien D.
@dtrckd

hey, so i tried , I think it blocks possibly due to this ip issue again.
In the front side , the build succeeded, but then I have this error in the browser console:

XHR POST http://[::1]:8994/sign_in
TypeError: "NetworkError when attempting to fetch resource."
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://[::1]:8994/sign_in. (Reason: CORS request did not succeed).

In the backend side, it stoped during the build:

$ ./run.sh test-api
DATA_DIR: /tmp/tmp.U1v4UBZuxQ_dppm_data
[...]
Installing db (0.8.0)
Installing tail (0.3.0)
Installing inotify (1.0.1)
Installing semantic_compare (0.5.0)
Installing ameba (0.11.0)
Postinstall make bin && make run_file
Building: dppm
T7qyeZcAl9KPMwy/fEywkYUNVFfmNfmI+UHZ6NA6G7439/UtFqveCBojLTRKJqZ/9ysuTScC1KIdcFaIRG4I
ERR! bind: Cannot assign requested address
Julien Reichardt
@j8r
the web ui is not ready at all, it was an initial draft
for the API, I think it's again the Ipv6 issue on your PC
do you know why you can't bind to IPv6 addresses?
Adrien D.
@dtrckd
Probably because I disabled it.
Julien Reichardt
@j8r
any reason?
Adrien D.
@dtrckd
Because I don't like the idea to have a dual net/ip stack on my machines, and I guess IPv4 is operating well right now, but also for privacy reason.
Julien Reichardt
@j8r
IPv6 is the future, I don't see any issue to have both locally
I hope we will only have IPv6 everywhere, much simpler to deal with
what's privacy issues about ipv6, is it about mac address?
Adrien D.
@dtrckd
Maybe, but in the meanwhile, IPv4 is still strongly used and will be (unfortunately, as you can think) probably stay for a long time again. Furthermore, NAT have important privacy properties which makes IPv4 relevant nowadays I believe.
Julien Reichardt
@j8r
but I don't see how it is related to forbid IPv6
NAT is a pain
I have designed a SaaS version of DPPM, it will rely on IPv6 to have our cloud box accessible on the free tier
because IPv4 is costly. But there will be an IPv4/IPv6 reverse proxy for 80/443
Julien Reichardt
@j8r
NAT was never meant for privacy, but order to cope with the scarcity of free IPv4 addresses
No NAT hassle with IPv6, but need a good firewall
Julien Reichardt
@j8r
Anyway - file configuration issue fixed
thanks a lot!
Adrien D.
@dtrckd

Hey @j8r, I understand you, but beyond the NAT question, disabling IPv6, was for me to reduce the complexity of dealing with IPV6 when interacting with particular devices/services, and also to simply avoid the potential security flaws associated with it. One could say its because of lazyness, maybe, still I didn't need to add that layer of complexity until now. I will see see in the future if it worth it.

Moving on, I could successfully run the backend, many thanks ;), like this:
bin/dppm server run host=127.0.0.1

When I plug the frontend, I the rest-api returns this error:
ERROR@2020-01-16 18:43:14 UTC type: Kemal::Exceptions::RouteNotFound; message: Requested path: 'POST:/sign_in' was not found.

(I manually modify the frontend to replace ::1 where I found it by 127.0.0.1 just to be able to test it .)
Julien Reichardt
@j8r
it seems to be chagend to"/api/sign_in"
the web ui is a very draft, unfinished by my previous comrade
it may be even re built from scratch by the next I will employ
Julien Reichardt
@j8r
nothing to test on it - all to build
thanks @dtrckd to have spent so much time, greatly appreciated :)
Adrien D.
@dtrckd
You're welcome ;).
I was wondering, as I am also testing cloudron in my research in self hosting solution, if you know it and how do you differentiate from them, in term of service you want to provide ?
Julien Reichardt
@j8r
I know it too, there is also Yunohost as a "competitor" we can say
Feautures we have: ARM support, easier to install and manage, lighter in resources, cheaper SaaS offering (in the future)
Julien Reichardt
@j8r
Honestly Cloudron is quite complete feature-wise, but i'm convinced we can compete
The possibility to run DPPM on BSD, macOS and hopefully in windows in the future could help
(non-root at first)
Adrien D.
@dtrckd

Ok, I think also the way dppm handle package/app, which don't depend on the docker layer and don't hide things makes a difference.
I have an issue when trying to set to auto-start a service at boot. I can set it to true with dppm S boot service-name true, and no error is returned. But the status "boot" is still false, when querying dppm S status service-name.
Another related fact is that can not query systemd to see the state of the service for exemple, for etherpad, I have the following:

$ systemctl is-enabled  etherpad-df932653e44041b0
Failed to lookup unit file state: Invalid argument

And watch the "bad" keyword in the status here :

$ systemctl status  etherpad-df932653e44041b0
● etherpad-df932653e44041b0.service - Really real-time collaborative document editing
   Loaded: loaded (/srv/dppm/app/default-group/etherpad-df932653e44041b0/conf/init/systemd; bad)
   Active: active (running) since Mon 2020-01-13 07:44:52 UTC; 4 days ago
 Main PID: 814 (node)
    Tasks: 11 (limit: 4915)
   Memory: 4.2M
   CGroup: /system.slice/etherpad-df932653e44041b0.service
           └─814 /srv/dppm/app/default-group/etherpad-df932653e44041b0/libs/nodejs/bin/node app/src/node/server.js --apikey ../data/APIKEY.txt --sessionkey ../data/SESSIONKEY.txt --settings ../conf/config.json
Julien Reichardt
@j8r
What does "bad" mean? Yeah, it should raise an error, if the service is wrong somehow
The challenge here is not to fall in a systemd specific logic
I think if the service dont run, we can check the logs generally
I'm in vacation, I will look at it in 1 week
Adrien D.
@dtrckd
The service is running, it's just that I can't enable it at boot time. The bad word appears in the third line, last word, in my snippet above. I was looking at systemd log to try tounderstand what's going on.
Ok, happy vacation to you ;)
Julien Reichardt
@j8r
You can try to enable with the systemcl command, and see what it returns
Adrien D.
@dtrckd
it returns the same error than when typing is-enable :
Failed to lookup unit file state: Invalid argument
Julien Reichardt
@j8r
It may be due to a syntax issue, for example due to the description. I will look at it
Adrien D.
@dtrckd
Ok nice. And btw, when I do systemctl list-unit-files, all the service managed by dppm, dppm include have the state bad (which means that service doesn't support all the feature of systemd). I have no idea why either at the moment...