jupyter/tmpnb

Creates temporary Jupyter Notebook servers using Docker containers.

Anton Akhmerov

@akhmerov

In which image should I report it?

Min RK

@minrk

On docker-stacks

Jeremy Watt

@jermwatt

Hi! I am having a little trouble understanding how to access a docker-stacks spawn from browser. When I use any --image tag = jupyter/docker-stacks image and attempt to access at my_ip:9999 I get the error 500 code, but I'm not sure what to do with the hint at the end of the github readme

Jeremy Watt

@jermwatt

Sorry in short - what does the hint at the end mean: "If you change the proxy port, its internal port also changes to that port+1 unless you specify it otherwise."

Dan Allan

@danielballan

@rgbkrk It's been a long time coming (I think we chatted about this 18 months ago) but https://try.nsls2.bnl.gov is now on the public web. Thanks for your help. Maybe its existence could be a useful precedent for others trying to host tmpnb in a conservative institution.

Min RK

@minrk

Nice!

Dhanasekaran Anbalagan

@bugcy013

Hi Guys, I am currently trying tmpnb setup using docker, When I try to hit browser every hit it's asking for token, please guide me How to disable token based authication

Min RK

@minrk

@bugcy013 this PR fixes token issues: jupyter/tmpnb#257

Dhanasekaran Anbalagan

@bugcy013

thanks you I will check

Dhanasekaran Anbalagan

@bugcy013

@minrk Have tested it's working

Dhanasekaran Anbalagan

@bugcy013

Hi Guys, Currenly I am trying with tmpnb with (OReily THEBE), Currenly I am getting error

XMLHttpRequest cannot load http://192.168.70.54:8000/user/MCkTzGFH4xN1?token=fc868fcdf38d1e03d00aeef57bf5f5c91333de3e61e65325/api/kernels. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:5555' is therefore not allowed access. The response had HTTP status code 405.

When I check the Web Console I see the following error:

Thebe is in tmpnb mode
main-built.js:28 cookie was wrong/outdated, call spawn as needed
main-built.js:28 Tmpnb server seems to be up
main-built.js:28 Thebe: start
main-built.js:28 show cell state: start for 0
main-built.js:28 call spawn
main-built.js:28 spawn handler called
main-built.js:28 tmpnb says we should use
main-built.js:28 http://192.168.70.54:8000/user/MCkTzGFH4xN1?token=fc868fcdf38d1e03d00aeef57bf5f5c91333de3e61e65325/
main-built.js:28 start_kernel with http://192.168.70.54:8000/user/MCkTzGFH4xN1?token=fc868fcdf38d1e03d00aeef57bf5f5c91333de3e61e65325/
jquery-2.1.4.min.js:4 POST http://192.168.70.54:8000/user/MCkTzGFH4xN1?token=fc868fcdf38d1e03d00aeef57bf5f5c91333de3e61e65325/api/kernels send @ jquery-2.1.4.min.js:4ajax @ jquery-2.1.4.min.js:4o.start @ main-built.js:20e.start_kernel @ main-built.js:28(anonymous function) @ main-built.js:28e.spawn_handler @ main-built.js:28(anonymous function) @ main-built.js:28(anonymous function) @ main-built.js:28
(index):1 XMLHttpRequest cannot load http://192.168.70.54:8000/user/MCkTzGFH4xN1?token=fc868fcdf38d1e03d00aeef57bf5f5c91333de3e61e65325/api/kernels. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:5555' is therefore not allowed access. The response had HTTP status code 405.
main-built.js:6 Object {readyState: 0, responseJSON: undefined, status: 0, statusText: "error"}
main-built.js:6 API request failed (0): error
main-built.js:28 Ajax Error!
main-built.js:28 Thebe: disconnected

Please guide me How to fix this.

Min RK

@minrk

I think the latest version of the notebook server (4.3.1) should fix the CORS header

Dhanasekaran Anbalagan

@bugcy013

Though I took the latest built container, it still gave me 4.2.1. Will use it from a different container and check

Dhanasekaran Anbalagan

@bugcy013

@minrk sorry I am using 4.3.1 only notebook==4.3.1

tmpnb startup commands docker run -d \
--net=host \
--name=tmpnb \
-e CONFIGPROXY_AUTH_TOKEN=$TOKEN \
-v /var/run/docker.sock:/docker.sock \
jupyter/tmpnb \
python orchestrate.py --use_tokens=1 --image='jupyter/minimal-notebook' --allow-origin='' \
--command='start-notebook.sh \
"--NotebookApp.base_url={base_path} \
--ip=0.0.0.0 \
--port={port} \
--NotebookApp.trust_xheaders=True" \
--NotebookApp.allow_origin='' \
--NotebookApp.token='''

sabarirjpm

@sabarirjpm

I get a 403 forbidden message when trying to post to jupyter

to the /api/kernels

sabarirjpm

@sabarirjpm

trying to use jupyter r notebook

sabarirjpm

@sabarirjpm

_xsrf' argument missing from POST is the error that I receive

Min RK

@minrk

@sabarirjpm how are you accessing the server?

Dhanasekaran Anbalagan

@bugcy013

Hi guys, We like to know how to integrate docker-swarm with tmpnb. if someone could list the steps .

MattKravetz

@MattKravetz

Hi all. Super basic question here, but I'm struggling to make notebooks accessible to users. I am using the docker-compose.yml provided in the readme, and have modified it to set the --home-directories flag to my my notebooks folder.

The notebooks are on the spawned containers, in mnt/vol0/, but are not visible to users. How do I get them in the [user hash]/tree directory?

Davide Bortolami

@ddavidebor

can tmpnb proxy generic tcp connections too or only http?

Min RK

@minrk

Only http

Davide Bortolami

@ddavidebor

@minrk thanks

Utsav Kesharwani

@utsavkesharwani

Hello,

I've just updated my jupyter/demo base image.
With base image initially at sha256:e0e8a60da29a30331d778c31cef28695e8c37e02881fa3775e107943a5017adb, I was able to customize the notebooks by adding custom.js & custom.css to ADD custom.css /home/jovyan/.jupyter/custom/ directory.

However, after the update, the custom.css & custom.js fail to load.

It tried to load them from http://user/<12-char-hash>/custom/custom.js (i.e. ignores the base domain)

Did some config change? Am not able to figure out what's the new way to fix this..

I tried reverting back to original image sha, but following command gives me an error:

docker pull jupyter/demo@sha256:e0e8a60da29a30331d778c31cef28695e8c37e02881fa3775e107943a5017adb
Error response from daemon: manifest for jupyter/demo@sha256:e0e8a60da29a30331d778c31cef28695e8c37e02881fa3775e107943a5017adb not found

Utsav Kesharwani

@utsavkesharwani

I tried debugging further..

The HTML gets generated with following:

<link rel="stylesheet" href="//user/Vu6mrCBHW08i/custom/custom.css" type="text/css">

Looks like that the link is wrong. Should be with single forward slash

Utsav Kesharwani

@utsavkesharwani

Finally figured out.

 --NotebookApp.base_url=/{base_path}

had to be updated to

 --NotebookApp.base_url={base_path}

Bill Major

@rwmajor2

Security Question. When I start 50 containers, for example, with tmpnb, is there anyway possible that 1 container could communicate to another container? There are some security questions being raised about rogue code execution and I am just doing a little research. I have been doing some Docker research at https://docs.docker.com/engine/userguide/networking/default_network/container-communication/#communication-between-containers and curious if anyone knows.

Matthias Bussonnier

@Carreau

Yes it is technically possible; also you most likely want to look as jupyterhub/binderhub and jte jupyterhub/binder channel as this is more generic tool which will likely replace tmpnb at some point.

Bill Major

@rwmajor2

Another question. With tmpnb, it appears that once a URL is created, e.g. http://myserver.abc.com/user/eoLXga8dz758/tree, I can take this URL and send it to someone else and they can actually get into my same session. This seems like a security risk. This is behaving properly or do you know of ways to eliminate the possibility of this happening?

Min RK

@minrk

@rwmajor2 that's as designed, but if tokens are enabled, having that URL doesn't mean having access.

There shouldn't generally be anything in a tmpnb instance where security is an issue, though. If you are concerned about access to tmpnb, then it's probably time to switch to something like JupyterHub, which has authentication measures.

Bill Major

@rwmajor2

thanks @minrk. Understood.

Next question, I am trying to prevent XSS using tmpnb. Supposedly, there is an option to do the following:

c.NotebookApp.jinja_environment_options = {"autoescape": True}

but

when I try and start tmpnb, I keep getting the following errors:

[E 171106 14:26:30 gen:794] Multiple exceptions in yield list
    Traceback (most recent call last):
      File "/usr/local/lib/python3.4/site-packages/tornado/gen.py", line 789, in callback
        result_list.append(f.result())
      File "/usr/local/lib/python3.4/site-packages/tornado/concurrent.py", line 232, in result
        raise_exc_info(self._exc_info)
      File "<string>", line 3, in raise_exc_info
      File "/usr/local/lib/python3.4/site-packages/tornado/gen.py", line 1014, in run
        yielded = self.gen.throw(*exc_info)
      File "/srv/tmpnb/spawnpool.py", line 284, in _launch_container
        container_config=self.container_config)
      File "/usr/local/lib/python3.4/site-packages/tornado/gen.py", line 1008, in run
        value = future.result()
      File "/usr/local/lib/python3.4/site-packages/tornado/concurrent.py", line 232, in result
        raise_exc_info(self._exc_info)
      File "<string>", line 3, in raise_exc_info
      File "/usr/local/lib/python3.4/site-packages/tornado/gen.py", line 282, in wrapper
        yielded = next(result)
      File "/srv/tmpnb/dockworker.py", line 119, in create_notebook_server
        ip=container_config.container_ip, token=token)
    KeyError: '"autoescape"'

Any thoughts on why? I am using Notebooks 5.0.

harifetraram

@harifetraram

Hi everyone, I want to change basepath to "--NotebookApp.base_url=jupyter/{base_path}" but I have this error

docker.errors.APIError: 400 Client Error: Bad Request ("b'{"message":"Conflict. The container name \\"/tmp.jupyterminimal-notebook.xW8xVpnT6VW3\\" is already in use by container \\"53748de3d2303848f49afbad65203870579f6014c422a643c8b02348045e0306\\". You have to remove (or rename) that container to be able to reuse that name."}'")

I would like to know how to change the basepath. I want this to redirect the tmpnb from apache server.

Does someone have an idea?

Min RK

@minrk

@rwmajor2 jinja autoescape should already on by default in the notebook templates

brondou666

@brondou666

I want to start a jupyterhub-singleuser on a remote server to connect to a jupyterhub running on another machine. I used sshspawner from github, but when jupyterhub-singleuser cannot communicate with the hub, can someone help me?

@brondou666
I did not use ssl to start jupyterhub, there are related content on the official website:
https://jupyterhub.readthedocs.io/en/stable/reference/spawners.html#encryption
Could this be the cause of the impact?
This is the github address of sshspawner
https://github.com/NERSC/sshspawner.git

Where communities thrive

People

Repo info

Activity

When I check the Web Console I see the following error: