bb010g has joined #sandstorm
<ocdtrekkie> Apparently my PE2950 is better than my PE2970. So off I go to reinstall everything on the older (but better) server.
<ocdtrekkie> It takes the right type of RAM too.
<mcpherrin> P memory is the good stuff
* mcpherrin shoots neutrons at your un-ECCd F memory
<zarvox> paulproteus: clearly we should "just" package Insipid or Scuttle or something for Sandstorm, and then that can replace bookmarks.makesad.us :)
joshbuddy has quit [Quit: joshbuddy]
joshbuddy has joined #sandstorm
Fernandos has joined #sandstorm
<Fernandos> hi
<kentonv> hi
<mcpherrin> hi
<Fernandos> I just setup sandstorm, but it seems sandcat.io isn't working for me, therefore I changed the sandstorm conf to the local dns, but now I get 414 Request-URI Too Large for the sample nginx config.
Fernandos has quit [Quit:
Fernandos has joined #sandstorm
<Fernandos> I added client_header_buffer_size 128k; large_client_header_buffers 4 128k; to nginx.conf and restarted nginx without luck
<Fernandos> I added github login
joshbuddy has quit [Quit: joshbuddy]
<kentonv> Fernandos: what do you mean when you say "sandcats.io isn't working"?
<kentonv> could you tell us what went wrong?
<Fernandos> kentonv: sure. I cannot access tex.sandcats.io it's not loading at all
<maurer> Fernandos: I get Address: 212.201.18.129
<kentonv> Fernandos: is it possible you're behind a firewall and need to open the port?
<Fernandos> kentonv: oh.. dang! it's a little more complicated.. I'm ssh-tunneling trough a company server to another company server, because the main server is only accessible from whitelisted IPs
<Fernandos> I just run ssh tex, add the proxy into my browser and ssh does the forwarding for me
<Fernandos> but that means, sandcats.io cannot access that server... heh I should've known that!
<kentonv> yeah sorry, we only provide DNS, we don't forward actual traffic. So basically the host points at your IP, and it's up to you to make sure the port is open.
joshbuddy has joined #sandstorm
<kentonv> (your public IP, as seen from our servers)
<Fernandos> absolutely! And you're providing an excellent service btw! I'm going to setup sandstorm at the local university soon and will have to add another login provider
<kentonv> I don't know what would cause the 414 error, that seems odd. Do you know what URI it was trying to use?
<Fernandos> hmm it looks like something is in an infinite loop there..
<Fernandos> the url's content repeats
<kentonv> what does it look like?
<Fernandos> the original nginx.conf had a line that caused the infinite loop #return 301 http://$host$request_uri$is_args$args;
<kentonv> where does it repeat?
<kentonv> ah hah
<Fernandos> I changed the BASE_URL to http://my.domain.org in /opt/sandstorm/sandstorm.conf
<Fernandos> What should I change SANDCATS_BASE_DOMAIN=sandcats.io to ?
<kentonv> you should remove that line
<kentonv> if you aren't using sandcats
<Fernandos> ok
<Fernandos> you should add this http://hastebin.com/zirokopuqa.nginx to your howto
<Fernandos> that worked for me :)
<Fernandos> yeah :) github login works too.
<kentonv> oh sorry, maybe the problem was that you were trying to use our nginx example but you weren't actually using SSL?
<kentonv> the example is meant for setting up SSL
<kentonv> so it has the redirect to convert HTTP to HTTPS
<kentonv> if you change that redirect to HTTP then you'd get a loop
<Fernandos> nah, I splitted the config you provided into sandstorm and sandstorm-ssl, but enabled the first one only
<kentonv> yeah so that config doesn't actually work for non-SSL since it tries to redirect you to SSL
<Fernandos> yes I afterwards changed the redirect to http, I'll have to tell our admins to give me a certificate tomorrow and check if dns wildcards are enabled for our domain, I suppose >10k users will use it, if it works.
<kentonv> oh really?
<Fernandos> I currently just testing it on a testserver.
<Fernandos> s/I/I'm/g
<kentonv> if you are hosting 10k users then we want to be your best friends. :)
<kentonv> that is to say, please let us know what we can do for you.
<Fernandos> it's on a powerful vmware vsphere server and students are going to use it at the campus
<Fernandos> sure, thank you for your help kentonv!
NwS has joined #sandstorm
<kentonv> can I get your email address? Or can you send a message to community@sandstorm.io? I'm very interested to hear how things go (good or bad).
Isla_de_Muerte has quit [Ping timeout: 276 seconds]
paroneayea has quit [Read error: Connection reset by peer]
paroneayea has joined #sandstorm
gopar has quit [Quit: Leaving]
gopar has joined #sandstorm
joshbuddy has quit [Quit: joshbuddy]
rhapsodhy has quit [Remote host closed the connection]
rhapsodhy has joined #sandstorm
joshbuddy has joined #sandstorm
jadewang has quit [Remote host closed the connection]
gopar has quit [Quit: Leaving]
Fernandos has quit [Ping timeout: 264 seconds]
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 256 seconds]
itscassa|away is now known as itscassa
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 240 seconds]
mort___ has joined #sandstorm
joshbuddy has quit [Quit: joshbuddy]
maurer has quit [Ping timeout: 240 seconds]
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 264 seconds]
maurer has joined #sandstorm
mort___ has left #sandstorm [#sandstorm]
maurer has quit [Ping timeout: 246 seconds]
jadewang has joined #sandstorm
maurer has joined #sandstorm
jadewang has quit [Ping timeout: 264 seconds]
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 240 seconds]
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 258 seconds]
paroneayea has quit [Read error: Connection reset by peer]
paroneayea has joined #sandstorm
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 240 seconds]
natea has joined #sandstorm
decipherstatic has quit [Remote host closed the connection]
natea has quit [Quit: natea]
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 256 seconds]
landspite has joined #sandstorm
natea has joined #sandstorm
paulfitz has joined #sandstorm
paulfitz has quit [Read error: Connection reset by peer]
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 244 seconds]
dwrensha has joined #sandstorm
paulfitz has joined #sandstorm
paulfitz has quit [Read error: Connection reset by peer]
dwrensha has quit [Quit: ChatZilla 0.9.91.1 [Firefox 37.0.2/20150415140819]]
jadewang has joined #sandstorm
dwrensha has joined #sandstorm
<mquandalle> Yesterday I chatted with the #cozycloud team and introduced them to sandstorm
jadewang has quit [Ping timeout: 256 seconds]
<mquandalle> They are a team of 14 who raised $1,1M to build a “personal cloud platform”
<mquandalle> in France
natea has quit [Quit: natea]
natea has joined #sandstorm
<kentonv> mquandalle: yeah, I've looked at it before. What did they have to say?
<ocdtrekkie> https://news.ycombinator.com/item?id=9569667 <- Found a use for the appdemo link. :)
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 256 seconds]
natea has quit [Quit: natea]
natea has joined #sandstorm
rhapsodhy has quit [Ping timeout: 244 seconds]
jadewang has joined #sandstorm
<mquandalle> kentonv: actually not much, the people I've talked to didn't take a deep look into sandstorm
<mquandalle> so I've been mostly evangelizing sandstorm design decisions
<mquandalle> especially container isolation (currently they don't have anything like that)
<mquandalle> I think they're focusing on building apps (contacts, calendar, etc.)
<kentonv> mquandalle: so you're telling our competitors all our secrets? :)
<kentonv> yeah their platform requires apps to be built on their stack, which means they need to build all-new apps, I think
<mquandalle> yep
<mquandalle> I didn't dare propose them to develop their apps for sandstorm
<ocdtrekkie> Cozy looks nice, like ownCloud, perhaps a bit more polished even. And one thing it has that ownCloud does not is a clear app permission model from the looks of it.
<ocdtrekkie> But particularly as more app developers get interested in it, Sandstorm's ability to work with applications written in anything is going to be the top perk.
<ocdtrekkie> Cozy's permission model looks like Android's: "This app can access your x", accept/decline.
<ocdtrekkie> I am kinda jealous of ownCloud/Cozy's already present contacts and calendar and stuff with sync and whatnot. I'd REALLY love to get my contacts and calendar out of GApps.
<ocdtrekkie> And CalDAV and CardDAV make it a very approachable thing to do that while still using the same apps/devices and such.
joshbuddy has joined #sandstorm
rhapsodhy has joined #sandstorm
natea has quit [Quit: natea]
natea has joined #sandstorm
joshbuddy has quit [Read error: Connection reset by peer]
joshbuddy has joined #sandstorm
natea has quit [Quit: natea]
gopar has joined #sandstorm
joshbuddy has quit [Quit: joshbuddy]
natea has joined #sandstorm
joshbuddy has joined #sandstorm
pixelport has joined #sandstorm
landspite has quit [Ping timeout: 258 seconds]
pixelport has quit [Quit: Leaving]
<kentonv> jparyani have you seen that link?
paroneayea has quit [Read error: Connection reset by peer]
paroneayea has joined #sandstorm
dosch has joined #sandstorm
<dosch> kentonv: from twitter to the irc's
<dosch> the problem I had with sandstorm was this:
<kentonv> hi
<dosch> I get my admin inlog token to my sandtorm VPS through the sandcats.io site
<dosch> and yeah, hi btw ;-)
<dosch> once on the site I can update different inlog settings
<dosch> but that is about it
<dosch> i can activate google, github or email only login
<dosch> but the admin panel, to install apps for instance; I can;t find it
<kentonv> if you click the word "sandstorm" in the upper-right (or delete the path off of the address) you get to the home page
<dosch> yeah. and there is just the homepage...
<kentonv> and then you can click "install apps" there
<kentonv> or do you just see the logo?
<zarvox> the "My Files" section should have a button "Install apps".
<dosch> just the logo
<kentonv> ah
<kentonv> ok, so here's probably the problem...
<kentonv> did you log in as a different account before the one you are currently logged in as?
<kentonv> because the first account to log in becomes admin
<kentonv> and then future accounts are nobody, and cannot install apps unless the admin invites them
<dosch> nope, used the token for the first login
<kentonv> this is a known source of confusion which we plan to fix soon by creating a way to manage user through the admin panel
<kentonv> hmm, well if you've only ever logged in as one user then you should be admin
<kentonv> so that seems strange
<dosch> shall I destroy the VPS and try again?
<dosch> or is there a fix/
<dosch> ?
<kentonv> let's find out what happened so we can improve the flow
<kentonv> if you do "sudo sandstorm mongo" from the terminal, you'll be brought to a MongoDB shell
<dosch> ok, I am now on a computer without the ssh keys. So I need to find a way in
<dosch> gonna try that now]
<kentonv> oh, hmm
<kentonv> well, once you are able to log in and get to mongo, you'll want to do "db.users.find()" to see all user accounts. If you've only logged in once then there should only be one account there, but I suspect we'll find that somehow there is another account and that other account is admin.
<dosch> ok, I am in
<kentonv> does db.users.find() show multiple users? (Don't copy/paste them since there are secret tokens in there.)
<dosch> yes, many users
<dosch> admin is there
<dosch> i see my mail adres
<dosch> and and the logins that have happened I know of over Github
<kentonv> so, you'll need to log in using the account that is listed as admin
<dosch> how do I know from that strong of charachter what is the password?
<dosch> s/strong/string
<kentonv> Sandstorm doesn't use passwords. For Github, we send you to Github to log in.
<dosch> ah, ok, so I use that account
<kentonv> if the user in the table says "services": {"github": ...
<kentonv> then it is a github account
<kentonv> yes
<dosch> hm
<dosch> it is a different email adres then I use for github
<dosch> i get
<dosch> " You are not logged in as admin and there isn't a valid token specified. You should either log in as an admin user or generate a token from the command line by doing `sandstorm admin-token` in order to access the admin settings page. "
<kentonv> is it possible that the account in question isn't actually github? Does it say "github" in the "services" block, or does it say "google" or "email"?
<dosch> yeah, it doesn't say github
<dosch> it is email
<kentonv> I see. Did you attempt to use email login before you used github login, and it didn't work?
<dosch> can;t remember. I might. And probably didn;t set the right values for the smtp server
<kentonv> yeah
<kentonv> my guess is you tried to use email login but SMTP wasn't configured. Unfortunately, attempting to log in caused a user account to be created, and then that user account was made admin, even though you never successfully logged in.
<kentonv> this is a bug
<dosch> clearly
<dosch> so. my best next try woul be to add correct smtp values?
<kentonv> that's one possibility. You can also manually set "isAdmin" on some other account via the mongo shell.
<kentonv> find your github account in the list, then find its "_id" field
<dosch> :-) I have no experience with changing these values... Is it something you care to talk me through?
<kentonv> then do: db.users.update({_id: "<place ID here>"}, {$set: {isAdmin: true}})
<dosch> ok, tried that. got an error. Some syntax error.
<kentonv> hmm, what's the error exactly?
<dosch> do I need to remove the tickmarks?
<dosch> I have my system in Dutch, but can still paste the error...
<kentonv> it should be exactly as I typed it, except replacing <place ID here> with the ID
<dosch> did so
<dosch> -bash: syntaxfout nabij onverwacht symbool '{_id:'
<dosch> roughly translates as:
<kentonv> oh, sorry, you need to be in the mongo shell
<kentonv> "sudo sandstorm mongo"
<dosch> ok, that worked! Do I need to save it before exiting the shell?
<kentonv> nope, if you go back to your browser you should find you're already admin. :)
<dosch> :(
<dosch> nope
<kentonv> if you go to /admin do you see the admin page?
<kentonv> (without the token)
<dosch> no, same error as before
<kentonv> hmm
<dosch> not logged in as admin
<dosch> let me try again with the database
<dosch> nope, no luck
<kentonv> try: db.users.update({_id: "<place ID here>"}, {$set: {isAdmin: true, signupKey: "admin"}})
<kentonv> also, double-check that you have the correct ID, from the github account. db.users.find()
<kentonv> the ID is something like "4kaWcx89JQWLkeFx2" -- a bunch of random letters and digits
<dosch> ah, ok, that might have been the problem. I had something like 535456
<dosch> I had id without underscore
<kentonv> ohhh, sorry, you probably took the "id" field from the "github" block.
<kentonv> yeah sorry this is confusing.
<dosch> damnit, I now had the correct one but still no cigare
<kentonv> hmm
<kentonv> well here's a simpler idea... we'll just erase the database and start over.
<dosch> i like simpler ideas
<dosch> :-)
<kentonv> at the ssh shell, do:
<kentonv> sudo sandstorm stop
<kentonv> sudo rm -rf /opt/sandstorm/var/mongo
<kentonv> sudo sandstorm start
<dosch> should I worry about the error: "sudo: unable to resolve host Sandstorm
<dosch> "
<dosch> other then that the server stopped and started
<kentonv> weird, I'm not sure what would cause that error... sudo shouldn't be trying to resolve any hosts.
<dosch> well, I just checked in cat and mongo is no longer there
<dosch> s/cat/var
<kentonv> oops I forgot one line: sudo mkdir /opt/sandstorm/var/mongo
<kentonv> and then "sudo sandstorm start" should work
<kentonv> no, dang, also...
<kentonv> sigh
<dosch> no swaet. Really appriciate your help here :-)
<kentonv> sudo chmod 770 /opt/sandstorm/var/mongo
<kentonv> sudo chgrp sandstorm /opt/sandstorm/var/mongo
<kentonv> I really should have had you delete mongo/* instead of mongo. Oops.
<dosch> chgrp?
<kentonv> sets the group that owns the directory
<dosch> ok, did it
<kentonv> ok, now "sudo sandstorm start"
<kentonv> and then do "sudo sandstorm status" to verify that it started
<dosch> Sandstorm started. PID = 26198
<dosch> Sandstorm is not running
<dosch> to be complete:
<dosch> sudo: unable to resolve host Sandstorm
<dosch> Sandstorm is not running.
<dosch> restarted it
<dosch> now it is running
<kentonv> oh, phew
<dosch> weird error still of that unable to resolve host name...
<kentonv> yeah that is... odd
<dosch> anyawy, now what should I do?
<dosch> generate new token?
<kentonv> sudo sandstorm admin-token
<dosch> done
<kentonv> and then visit the admin URL like normal
<dosch> now login with github?
<kentonv> yeah. You'll have to configure it again.
<dosch> but... If I now login as github user
<dosch> that user becomes admin?
<kentonv> yes
<kentonv> as long as you don't attempt email login first
<dosch> ok, gonna try :-)
<dosch> fingers crossed
<kentonv> for what it's worth, we're working on a new UI for user management that should roll out in a week or two that would have saved us from all of this work.
<kentonv> but it's really useful to go through this and understand the kinds of things that can go wrong.
<dosch> OWRKS!
<kentonv> so thanks for coming to chat!
<dosch> haha
<kentonv> yay
<dosch> thank you for helping out
<dosch> really appriciate your work on this
<dosch> I am playing with Yunohost, ArkOS and Sandstorm now
<dosch> really a nice new breed of software out there
<dosch> and I like the emphasis you seem to have on security
<kentonv> thanks
<kentonv> sorry that your first experience had to be our UI failing!
<kentonv> hopefully it's smoother from here
<dosch> nah. I have seen the huge alpha warning on the site
<dosch> no worries
<kentonv> so are you able to install and run an app now?
<dosch> yeah, just installed paperwork
<kentonv> cool!
<dosch> will have a go for it. Any special place you'd like to see bug reports files?
<dosch> filed
<kentonv> for apps, click through to their github repo from the app list and report issues there. For Sandstorm itself, report issues on Sandstorm's github repo.
gopar has quit [Remote host closed the connection]
<dosch> ok, will do
<dosch> btw. I am working for a Dutch hoster. We aim to launch some nifty new VPS system soon. If you guys are interested to test sandstorm on our system, ping me here on IRC or twitter
<dosch> maybe we can set you up with some testing VPS's
<dosch> and we can later offer it as a custom image to new customers
<kentonv> neat
<kentonv> let me know if you have any other problems.
<dosch> if you want to get a gist of where we are coming from and why we like this kind of work, have a look at our blog: https://greenhost.net/weblog/
<dosch> will do. Thnx a bunch for now!
<kentonv> I'd love to see hosts offering Sandstorm.
<kentonv> FWIW, we're working on a distributed version of Sandstorm which will be much more efficient for hosting a large number of users on a large cluster of machines.
<kentonv> (this is our startup's product, which we'll sell to companies for running internal services, and perhaps to hosting providers)
<dosch> nice. Seems to be heading in the right direction :-)
<kentonv> we plan to open our managed hosting based on this soon, but eventually we'd prefer to be selling it to other hosts rather than running the service ourselves. Also our service will be in the US, so we're particularly hoping to see a European company offering an option located there.
<dosch> well, ping me if you would like to try on our system. We just started using Ceph and SSD's only. So my guess is that the performance should be decent
<zarvox> hooray, Ceph!
<dosch> we're from the Netherlands :-)
natea has quit [Quit: natea]
decipherstatic has joined #sandstorm
landspite has joined #sandstorm
itscassa is now known as itscassa|away
natea has joined #sandstorm
gopar has joined #sandstorm