Anmol Sharma

Friendica Ldap not working

Anmol Sharma

Thu, 19 Nov 2020 03:51:11 -0800

@Friendica Support (Friendica Support)
I am trying to debug the Ldap issue for Friendica Yunohost package. This is the reason the PR for latest release in still pending.
The ldap plugin seems to be enable on fresh install. But something in Authentication.php is not working the way it use to be.
Here is the log for a ldap user tying to login.

[WARNING]: authenticate: failed login attempt {"action":"login","username":"anmol@yolo.test","ip":"10.61.111.1"} - {"file":"Authentication.php","line":272,"function":"withPassword","uid":"6d2315","process_id":14968}

Server Yunohost

Friendica Support

Thu, 19 Nov 2020 03:51:13 -0800

🔁 Repeated @Anmol Sharma's Note

Installing Linux inside Linux

Anmol Sharma

Fri, 06 Nov 2020 11:34:48 -0800 last edited: Fri, 06 Nov 2020 12:08:45 -0800

Chroot and installing Debian inside base Linux

Installing a Linux inside a Linux and giving the access through ssh to a user and providing some services through the main server is a very specific requirement, an interesting one to have in your admin skills.

I assume you will be installing an app my_webapp__1 through Yunohost that gives a empty container for PHP use. But if you want try this on normal Debian system, then you must have an web server installed like Nginx, Apache etc. A folder and user with user having access to that folder. Lastly a ssh server to connect remotely.
If your installation is ready go to step 2. Assume my_webapp__1 as your folder and user. Change the names according to your configurations.

Install my_webapp on yunohost.

# yunohost app install https://github.com/YunoHost-Apps/my_webapp_ynh/

Remove force sftp for the app from ssh
```
# nano /etc/ssh/sshd_config
```
Remove
```
ForceCommand internal-sftp
```
from the my_webapp__1 or the what ever your my_webapp instance number is.
Allow the user to have ssh permission by adding the line
```
AllowUsers  my_webapp__1
```
Restart ssh
```
# service ssh restart
```
Install debootstrap. Read more about chroot and debootstrap here
```
# apt-get install debootstrap
```

Install the choice of os in chroot directory.

# debootstrap stable /var/www/my_webapp__1 http://deb.debian.org/debian/

You can login to the root of the new installed os by chroot
```
# chroot /var/www/my_webapp__1
```
Install the required packages like ssh,sudo
```
# apt-get install ssh sudo
```
Exit the chroot
```
# exit
```
The uid of users should be same for both users in the real os and the chroot os. So we put the real os uid of the my_webapp1 user to the chroot my_webapp1 after creating it.
```
# cat  /etc/passwd
```
Check the uid of the my_webapp__1 and copy it.
Again login to chroot directory by step 7 and create a user my_webapp__1 in chroot OS.
```
# adduser my_webapp__1
```
Give it the same password as real OS user.
Make the uid of the real os same with the chroot os by coping the uid of real os to chroot os.
```
 # nano  /etc/passwd
```
Copy the uid to the my_webapp__2
Now you can ssh to the chroot folder with the my_webapp__1 user.

Try it

$ ssh my_webapp__1@domain.tld

Enter password and you will be in the shell as my_webapp__1 user of chroot os.

Sometimes the my_webapp1 will require root privileges. For this either you can give my_webapp2 as root privileges or login as root by su. Other way is giving user privilege to run sudo without password and with root access by editing /etc/sudoers.
Login to the chroot root by step 7 again and add the user to have sudo privieges.

# nano /etc/sudoers

Add this line under Allow members of group sudo to execute any command

my_webapp__1 ALL=(ALL) NOPASSWD: ALL

Now you can ssh to the chroot by ssh my_webapp__1@domain.tld and run any command which require by sudo.

#server #Yunohot #ssh #Debian #chroot #debootstrap #linux

Server Yunohost how-to

Install Django on Yunohost

Anmol Sharma

Tue, 20 Oct 2020 17:41:30 -0700 last edited: Fri, 30 Oct 2020 09:59:47 -0700

Yunohost is a self hosting solution for users who want to run there own servers without have knowledge of the server administration. To know more about Yunohost see here.

I am using custom web app for the installation of the Django because Yunohost do not have an official package for installing Django.

Install the custom web app:

$ yunohost app install https://github.com/YunoHost-Apps/my_webapp_ynh --debug

In-order to have Django within virtual environment we need to execute virtualenv command. We can install virtualenv through pip. First we install pip and then trough pip install virtualenv.
```
$ sudo apt-get install python-pip  
$ sudo pip install virtualenv
```
We have our virtualenv ready, so we can go to our project directory to execute it.

$ cd /var/www/my_webapp/www/

Remove the index.html in the project directory.

$ rm index.html

Within this project directory, create a Python virtual environment for Python by typing:

$ virtualenv myproject_env

By executing this command a folder named myproject_env will be created in the directory. It will be used to install and configure different python environments.

Now to activate this virtual environment, execute following command:

$ source myproject_env/bin/activate

With your virtual environment activated. We can move forward and install, Gunicorn.

$ pip install django gunicorn

Now with virtual environment been activated. Start Django project using Django management command.

$ django-admin.py startproject myproject .
Note: Don't ignore the trailing dot in the end.

Now we edit the settings.py file located inside myproject folder. We use Nano to do it.
```
$ cd myproject 
$ nano  settings.py
```
Replace the following code inside settings.py.

ALLOWED_HOSTS = ['domain_where_custom_web_app_installed.tld',] STATIC_URL = '/static/' STATIC_ROOT = os.path.join(BASE_DIR, 'static/')

Use ctrl+x to close the Nano. Save the file by typing "y" when asked.

We will need to install the Python and MySQL development headers and libraries:

$ sudo apt-get install python-dev libmysqlclient-dev      
$ pip install mysqlclient

Open again settings.py file located under myproject folder.
Enter your database details which are available in /var/www/my_webapp/db_access.txt

$ cat /var/www/my_webapp/db_access.txt

Copy the database password from here.

Open the settings.py again.

$ sudo nano settings.py

Replace the password which you got from above command at the place of PASSWORD.
DATABASES = { 'default': { 'ENGINE': 'django.db.backends.mysql', 'NAME': 'my_webapp', 'USER': 'my_webapp', 'PASSWORD': 'password in db_access.txt', 'HOST': 'localhost', 'OPTIONS': { 'init_command': "SET sql_mode='STRICT_TRANS_TABLES'", }, 'PORT': '', } }

Run commands:

$ ./manage.py makemigrations ./manage.py migrate ./manage.py createsuperuser ./manage.py runserver 0.0.0.0:8000

For testing in web browser, enter example.com:8000 and press enter or in command line do:

$ curl example.com:8000

Once you had finished exploring recently created project, hit ctrl+c.

Now let’s test Gunicorn interface.

$ gunicorn --bind 0.0.0.0:8000 myproject.wsgi:application

This will start Gunicorn on same interface on which our earlier development server was working.Test the Gunicorn as described in step 13.

Now type this command to deactivate the virtual environment:

$ deactivate

Now we have to create Gunicorn systemd service file.This service file will be used to start or stop our application server. Open the gunicorn systemd service file using this command.

$ sudo nano /etc/systemd/system/gunicorn.service

Add these lines to the service file.

[Unit]
Description=gunicorn daemon
After=network.target

[Service]
User=root
Group=www-data
WorkingDirectory=/var/www/my_webapp/www
ExecStart=//var/www/my_webapp/www/myproject_env/bin/gunicorn --workers 3 --bind unix:/var/www/my_webapp/www/myproject.sock myproject.wsgi:application

[Install]
WantedBy=multi-user.target

Save and close the file. Start the Gunicorn service using following command.
```
$ sudo systemctl start gunicorn  
$ sudo systemctl enable gunicorn
```
This will create socket file inside your project directory. Always check that the socket file has www-data group and this group should have ownership for the group.

Edit etc/nginx/conf.d/domain_where_custom_web_app_installed.tld.d/my_webapp.conf

location / { 
                  include proxy_params;

                    proxy_pass http://unix:/var/www/my_webapp/www/myproject.sock;

              # Prevent useless logs

                location = /favicon.ico {

                    log_not_found off;

                    access_log off;

                }

                  location /static/ {

                    root /var/www/my_webapp/www;

                }

                location = /robots.txt {

                    allow all;

                    log_not_found off;

                    access_log off;

                }



              #Deny access to hidden files and directories

            # location ~ ^/(.+/|)\.(?!well-known\/) {

              #  deny all;

            }

        # Include SSOWAT user panel.

            include conf.d/yunohost_panel.conf.inc;

        }

Test Nginx configuration for syntax errors by typing:

$ sudo nginx -t

If no error is found, restart Nginx by typing:

$ sudo systemctl restart nginx

That's it!
Now you should have a running instance of the Django on Yunohost.

Note: Components which are installed under virtual environment are isolated from other os global environments. After adding each static file in your app migrate it with:

$ sudo python manage.py collectstatic
$ sudo service gunicorn restart

I have not tested the backup and restore script. So backup manually all your project before trying the web app backup and restore.

#Yunohot #Django #Python #Hosting

Yunohost