Anmol Sharma

Osada package for YunoHost

Anmol Sharma

Fri, 12 Feb 2021 08:36:07 -0800

@YunoHost (yunohost@mastodon.social)

#Osada package for #YunoHost has been fixed and updated. Osada uses #zot protocol.

https://github.com/YunoHost-Apps/osada_ynh

Yunohost zot

anmol

Fri, 12 Feb 2021 08:42:37 -0800

🔁 Repeated @Anmol Sharma's Note

Zeronet packge for YunoHost

Anmol Sharma

Tue, 09 Feb 2021 10:49:13 -0800

@YunoHost (yunohost@mastodon.social)
Zeronet package for YunoHost which was broken from quite some time has been fixed and updated to the latest version.

#Zeronet provides a decentralize network for the websites based on the technologies like #cryptography #bittorrent and #Tor

https://github.com/YunoHost-Apps/zeronet_ynh

Reviews are welcomed.

YunoHost Zeronet self-hosting

show all 5 comments

YunoHost

Tue, 09 Feb 2021 11:43:24 -0800

🔁 Repeated @Anmol Sharma's Note

Papa Dragon (on Mastodon)

Tue, 09 Feb 2021 11:50:34 -0800

🔁 Repeated @Anmol Sharma's Note

Jean-Baptiste

Tue, 09 Feb 2021 11:52:11 -0800

🔁 Repeated @Anmol Sharma's Note

Hubzilla YunoHost package updated to 5.2.1

Anmol Sharma

Fri, 05 Feb 2021 08:17:18 -0800

Hubzilla YunoHost package updated to version 5.2.1.

#yunohost #hubzilla #SelfHosting

Yunohost Hubzilla

Anmol Sharma

Fri, 05 Feb 2021 08:17:59 -0800

@Hubzilla Support Forum (support@zotadel.net)

anmol

Fri, 05 Feb 2021 08:18:25 -0800

🔁 Repeated @Anmol Sharma's Note

Friendica Ldap not working

Anmol Sharma

Thu, 19 Nov 2020 03:51:11 -0800 last edited: Tue, 15 Dec 2020 06:33:54 -0800

@Friendica Support (helpers@forum.friendi.ca)
I am trying to debug the Ldap issue for Friendica Yunohost package. This is the reason the PR for latest release is still pending.
The ldap plugin seems to be enable on fresh install. But something in Authentication.php is not working the way it use to be.
Here is the log for a ldap user tying to login.

[WARNING]: authenticate: failed login attempt {"action":"login","username":"anmol@yolo.test","ip":"10.61.111.1"} - {"file":"Authentication.php","line":272,"function":"withPassword","uid":"6d2315","process_id":14968}

Server Yunohost

Friendica Support

Thu, 19 Nov 2020 03:51:13 -0800

🔁 Repeated @Anmol Sharma's Note

Installing Linux inside Linux

Anmol Sharma

Fri, 06 Nov 2020 11:34:48 -0800 last edited: Sun, 07 Mar 2021 18:33:34 -0800

Chroot and installing Debian inside base Linux

Installing a Linux inside a Linux and giving the access through ssh to an user along with providing some services through the main server is a very specific requirement, and an interesting one to have in your admin skills.

I assume you will be installing an app my_webapp__1 through Yunohost that gives a empty container for PHP use. But if you want try this on normal Debian system, then you must have an web server installed like Nginx, Apache etc. A folder and user with user having access to that folder. Lastly a ssh server to connect remotely.
If your installation is ready go to step 2. Assume my_webapp__1 as your folder and user. Change the names according to your configurations.

Install my_webapp on yunohost.
# yunohost app install https://github.com/YunoHost-Apps/my_webapp_ynh/
Remove force sftp for the app from ssh
# nano /etc/ssh/sshd_config
Remove ForceCommand internal-sftp from the my_webapp__1 or the what ever your my_webapp instance number is.
Allow the user to have ssh permission by adding the line AllowUsers my_webapp__1
Restart ssh
# service ssh restart
Install debootstrap. Read more about chroot and debootstrap here
# apt-get install debootstrap
Install the choice of os in chroot directory.
# debootstrap stable /var/www/my_webapp__1 http://deb.debian.org/debian/
You can login to the root of the new installed os by chroot
# chroot /var/www/my_webapp__1
Install the required packages like ssh,sudo
# apt-get install ssh sudo
Exit the chroot
# exit
The uid of users should be same for both users in the real os and the chroot os. So we put the real os uid of the my_webapp__1 user to the chroot my_webapp__1 after creating it.
# cat /etc/passwd
Check the uid of the my_webapp__1 and copy it.
Again login to chroot directory by step 7 and create a user my_webapp__1 in chroot OS.
# adduser my_webapp__1
Give it the same password as real OS user.
Make the uid of the real os same with the chroot os by coping the uid of real os to chroot os.
# nano /etc/passwd
Copy the uid to the my_webapp__2
Now you can ssh to the chroot folder with the my_webapp__1 user.

Try it
$ ssh my_webapp__1@domain.tld
Enter password and you will be in the shell as my_webapp__1 user of chroot os.

Sometimes the my_webapp__1 will require root privileges. For this either you can give my_webapp__2 as root privileges or login as root by su. Other way is giving user privilege to run sudo without password and with root access by editing /etc/sudoers.
Login to the chroot root by step 7 again and add the user to have sudo privieges.
# nano /etc/sudoers
Add this line under Allow members of group sudo to execute any command
my_webapp__1 ALL=(ALL) NOPASSWD: ALL

Now you can ssh to the chroot by ssh my_webapp__1@domain.tld and run any command which require by sudo.

#server #yunohost #ssh #Debian #chroot #debootstrap #linux

Server Yunohost how-to

FourOh-LLC

Mon, 08 Mar 2021 03:33:22 -0800

You need to be born to be able to deal with this much abstraction and complexity, there is no way to master this by training alone. Your brain must be wired in a compatible way. I do not mean like this is something incredibly special - its not. But "learn to code" is also an illusion, a few people are people born with exceptional natural aptitudes and this is one of them.

The rest of us who do not have anything special may only envy or admire these talents, but sadly there is no way to learn them.

At one point in my life I spoke four languages - Hungarian my native, Russian I had to learn in school, German while I was living in Austria waiting for my Visa to the US - and English, since I live in the USA. Today I can speak only one - I lost Russian and English in years, and I am losing my mother-tongue.

Most of us people are not particularly bright, and it takes a lot of effort and repetition to learn and retain what we know - or believe to know.

So, I am reading this, and I know it would take me hours to even attempt to do this. This is why I could never figure out Virtualmin / Cloudmin, and this is why YunoHost is such a wonderful service stack to me.

Papa Dragon

Mon, 08 Mar 2021 14:12:35 -0800

Clever. Could be useful for those who want to have the latest possible versions of Zap, Misty & co running within a regular Yunohost install.

Reminds me of LXC containers without the networking stuff you have to deal with.

Anmol Sharma

Wed, 10 Mar 2021 04:26:47 -0800

At one point in my life I spoke four languages

That is so cool. I have faced same problem. I learn new things and if I don't find someone to talk to, I forget it. I have a problem to forget things very quickly if I loose interest in something. If I come across things which I have learnt and forgotten, I feel like deja vo, and I have to put more effort to learn it again compared to effort I put in first time.

@Papa Dragon (dragondaddy@zap.omtc.fr)
We can install Zap and other zot6 protocols on different domains on Yunohost.
Yunohost has now LXC container package too.

Install Django on Yunohost

Anmol Sharma

Tue, 20 Oct 2020 17:41:30 -0700 last edited: Sun, 07 Mar 2021 18:34:30 -0800

Yunohost is a self hosting solution for users who want to run there own servers without have knowledge of the server administration. To know more about Yunohost see here.

I am using custom web app for the installation of the Django because Yunohost do not have an official package for installing Django.

Install the custom web app:

$ yunohost app install https://github.com/YunoHost-Apps/my_webapp_ynh --debug

In-order to have Django within virtual environment we need to execute virtualenv command. We can install virtualenv through pip. First we install pip and then trough pip install virtualenv.
```
$ sudo apt-get install python-pip  
$ sudo pip install virtualenv
```
We have our virtualenv ready, so we can go to our project directory to execute it.

$ cd /var/www/my_webapp/www/

Remove the index.html in the project directory.

$ rm index.html

Within this project directory, create a Python virtual environment for Python by typing:

$ virtualenv myproject_env

By executing this command a folder named myproject_env will be created in the directory. It will be used to install and configure different python environments.

Now to activate this virtual environment, execute following command:

$ source myproject_env/bin/activate

With your virtual environment activated. We can move forward and install, Gunicorn.

$ pip install django gunicorn

Now with virtual environment been activated. Start Django project using Django management command.

$ django-admin.py startproject myproject .
Note: Don't ignore the trailing dot in the end.

Now we edit the settings.py file located inside myproject folder. We use Nano to do it.
```
$ cd myproject 
$ nano  settings.py
```
Replace the following code inside settings.py.

ALLOWED_HOSTS = ['domain_where_custom_web_app_installed.tld',] STATIC_URL = '/static/' STATIC_ROOT = os.path.join(BASE_DIR, 'static/')

Use ctrl+x to close the Nano. Save the file by typing "y" when asked.

We will need to install the Python and MySQL development headers and libraries:

$ sudo apt-get install python-dev libmysqlclient-dev      
$ pip install mysqlclient

Open again settings.py file located under myproject folder.
Enter your database details which are available in /var/www/my_webapp/db_access.txt

$ cat /var/www/my_webapp/db_access.txt

Copy the database password from here.

Open the settings.py again.

$ sudo nano settings.py

Replace the password which you got from above command at the place of PASSWORD.
DATABASES = { 'default': { 'ENGINE': 'django.db.backends.mysql', 'NAME': 'my_webapp', 'USER': 'my_webapp', 'PASSWORD': 'password in db_access.txt', 'HOST': 'localhost', 'OPTIONS': { 'init_command': "SET sql_mode='STRICT_TRANS_TABLES'", }, 'PORT': '', } }

Run commands:

$ ./manage.py makemigrations ./manage.py migrate ./manage.py createsuperuser ./manage.py runserver 0.0.0.0:8000

For testing in web browser, enter example.com:8000 and press enter or in command line do:

$ curl example.com:8000

Once you had finished exploring recently created project, hit ctrl+c.

Now let’s test Gunicorn interface.

$ gunicorn --bind 0.0.0.0:8000 myproject.wsgi:application

This will start Gunicorn on same interface on which our earlier development server was working.Test the Gunicorn as described in step 13.

Now type this command to deactivate the virtual environment:

$ deactivate

Now we have to create Gunicorn systemd service file.This service file will be used to start or stop our application server. Open the gunicorn systemd service file using this command.

$ sudo nano /etc/systemd/system/gunicorn.service

Add these lines to the service file.

[Unit]
Description=gunicorn daemon
After=network.target

[Service]
User=root
Group=www-data
WorkingDirectory=/var/www/my_webapp/www
ExecStart=//var/www/my_webapp/www/myproject_env/bin/gunicorn --workers 3 --bind unix:/var/www/my_webapp/www/myproject.sock myproject.wsgi:application

[Install]
WantedBy=multi-user.target

Save and close the file. Start the Gunicorn service using following command.
```
$ sudo systemctl start gunicorn  
$ sudo systemctl enable gunicorn
```
This will create socket file inside your project directory. Always check that the socket file has www-data group and this group should have ownership for the group.

Edit etc/nginx/conf.d/domain_where_custom_web_app_installed.tld.d/my_webapp.conf

location / { 
                  include proxy_params;

                    proxy_pass http://unix:/var/www/my_webapp/www/myproject.sock;

              # Prevent useless logs

                location = /favicon.ico {

                    log_not_found off;

                    access_log off;

                }

                  location /static/ {

                    root /var/www/my_webapp/www;

                }

                location = /robots.txt {

                    allow all;

                    log_not_found off;

                    access_log off;

                }



              #Deny access to hidden files and directories

            # location ~ ^/(.+/|)\.(?!well-known\/) {

              #  deny all;

            }

        # Include SSOWAT user panel.

            include conf.d/yunohost_panel.conf.inc;

        }

Test Nginx configuration for syntax errors by typing:

$ sudo nginx -t

If no error is found, restart Nginx by typing:

$ sudo systemctl restart nginx

That's it!
Now you should have a running instance of the Django on Yunohost.

Note: Components which are installed under virtual environment are isolated from other os global environments. After adding each static file in your app migrate it with:

$ sudo python manage.py collectstatic
$ sudo service gunicorn restart

I have not tested the backup and restore script. So backup manually all your project before trying the web app backup and restore.

#yunohost #Django #Python #Hosting

Yunohost