Shane has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
ocdtrekkie has quit [Remote host closed the connection]
aldeka has quit [Remote host closed the connection]
aldeka has joined #sandstorm
ocdtrekkie has joined #sandstorm
paroneayea has quit [Read error: Connection reset by peer]
natea has quit [Quit: natea]
paroneayea has joined #sandstorm
natea has joined #sandstorm
gopar has quit [Quit: Leaving]
joshbuddy has quit [Quit: joshbuddy]
soulshake has joined #sandstorm
gopar has joined #sandstorm
bb010g has quit [Quit: Connection closed for inactivity]
aatkin has joined #sandstorm
<aatkin> Just wondering if anyone could advise me on whether ipfs (specifically the webui) would be a good candidate for a sandstorm app. One of the porting problems would be that the background daemon communicates via DHT...so I'm not sure about how to handle that. Was hoping a single daemon could run in the background outside Sandbox and the grains would just be webui sessions all talking to the same daemon...
<aatkin> ...or maybe the daemon could run on another non sandstorm server and talk to webui via https...hmmm
rhapsodhy has quit [Remote host closed the connection]
rhapsodhy has joined #sandstorm
bb010g has joined #sandstorm
<kentonv> aatkin: it sounds like Sandstorm will need an ipfs "driver" before it can support the webui as an app.
<kentonv> unfortunately we're not ready for drivers just yet.
<kentonv> (a driver is an app that has full network access, implements some network protocol, and then re-exports the protocol to other apps as a Cap'n Proto capability-based API)
aatkin has quit [Ping timeout: 246 seconds]
aatkin has joined #sandstorm
aatkin has quit [Ping timeout: 272 seconds]
aatkin has joined #sandstorm
paroneayea has quit [Read error: Connection reset by peer]
aatkin has quit [Quit: Leaving]
paroneayea has joined #sandstorm
jadewang has quit [Remote host closed the connection]
jadewang has joined #sandstorm
jadewang has quit [Remote host closed the connection]
jadewang has joined #sandstorm
pixelport has joined #sandstorm
Isla_de_Muerte has joined #sandstorm
gopar has quit [Quit: Leaving]
jadewang has quit [Ping timeout: 272 seconds]
pixelport has quit [Ping timeout: 252 seconds]
NwS has quit [Ping timeout: 258 seconds]
pixelport has joined #sandstorm
<pixelport> Do I have to invite a user to sandstorm to let them use libre board?
<pixelport> I have a private board and I can't find any way to add a new member
rhapsodhy has quit [Ping timeout: 256 seconds]
rhapsodhy has joined #sandstorm
Isla_de_Muerte has quit [Ping timeout: 272 seconds]
<paulproteus> mquandalle: ^
<paulproteus> pixelport: Please meet mquandalle , one of the LibreBoard authors!
<paulproteus> Stick around a few hours for .fr to get online. I'm going to sleep now myself.
<pixelport> have to go now but will be back in a few hours
<paulproteus> dosch: I'm glad you found your way on to IRC, and that you got your problem resolved, and that you tried out Sandcats!
<paulproteus> ocdtrekkie: Awesome!!! re: https://news.ycombinator.com/item?id=9569667 appdemo
<paulproteus> Cool! Consider looking at the logs later too.
<paulproteus> Ciao!
<pixelport> accorrding to http://libreboard.com/boards/MeSsFJaSqeuo9M6bs/libreboard-roadmap user management wasn't implemented until 0.9. Sandstorm only lets you install 0.8 :-(
<pixelport> This might be the problem
jadewang has joined #sandstorm
pixelport has quit [Ping timeout: 252 seconds]
jadewang has quit [Ping timeout: 272 seconds]
pixelport has joined #sandstorm
pixelport has quit [Ping timeout: 252 seconds]
itscassa|away is now known as itscassa
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 250 seconds]
pixelport has joined #sandstorm
pixelport has quit [Ping timeout: 252 seconds]
<dosch> paulproteus: yeah, went smooth. Sandcats seems nice.
<dosch> I think so far the thing I miss in Sandstorm is nice URLS. Say I create an etherpad, or chatchannel and want to invite friends, I'd like to be able to spell out the url over phone.
<dosch> So far sandstorm only seems to create urls for sharing that are very secure and unique and thus long...
<dosch> for instance. I'd like to have a website based on Telescope. But visitors to my website will have to go to http://zand.sandcats.io:6080/shared/wl4-Tiy4TYX4GGWX-QTcKAVDrcPKShdx8Lxg_wOL8KJ
<dosch> I wish it was more in the direction of news.zand.io
<dosch> so, to be able to set certain apps on their own subdomain would be a big pro for me
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 240 seconds]
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 276 seconds]
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 256 seconds]
<landspite> the prereq on x86… is that strictly due to meteor ?
<dwrensha> it's to avoid fragmenting the app ecosystem
<dwrensha> apps are distributed as native code
<landspite> of course ;)
<landspite> i noticed meteor borks if I try and install on arm anyway.
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 272 seconds]
natea has quit [Quit: natea]
natea has joined #sandstorm
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 264 seconds]
pixelport has joined #sandstorm
<pixelport> mquandalle: Do I have to invite a user to sandstorm to let them use a private libre board?
<dwrensha> pixelport: "invited" users don't get any special permissions as far as apps can tell
<dwrensha> "invited" just means "can install apps" and "can create new grains"
<pixelport> seems to be right. but how do I set special permissions of libre board? I think its currently not supportet
<pixelport> but how should you run a private board with multiple people then
<dwrensha> looks like the libreboard app has not been updated since we've added the new sharing model
<mquandalle> Yes
<mquandalle> The Libreboard spk doesn't implement the sharing model yet
<pixelport> mquandalle: any workaround for this? chaning something in the mongo db?
<mquandalle> AFAIK there is no easy way to modify the database inside an instance
<pixelport> there is
<pixelport> sandstorm mongo
<mquandalle> that's the sandstorm database
<pixelport> oh shit
<mquandalle> there is nothing related to libreboard in it
<pixelport> I wondered
<pixelport> when can we expect the update from 0.8 to 0.9?
<pixelport> 0.9 seems to implement user settings
<mquandalle> I started to work on sandstorm sharing integration https://github.com/libreboard/libreboard/commit/e4219b93187807e5fd5197a371b2abd917c7cf23
<mquandalle> but basically 0.9 changes a lot of things under the hood (new ui component system, new user system) along with the new UI
<pixelport> according to http://libreboard.com/boards/MeSsFJaSqeuo9M6bs/libreboard-roadmap "New user account system" seems done
<mquandalle> yes
<mquandalle> but since I've done many changes, there is a serious amount of bugs in the current master branch
<mquandalle> (and a few missing features)
<mquandalle> that need to be fixed before releasing v0.9
<pixelport> okay
<mquandalle> Reading your previous message I just want to make it clear that v0.9 is not yet released
<pixelport> Could a workaround be to set the bort to public and add a robot.txt for the server directory? But it seems like there is no easy way to edit this in sandstorm
<pixelport> so it would not be found by google. The url seems long enugh that its hard to guess
<pixelport> *enaugh
<pixelport> *enough :)
<ocdtrekkie> pixelport: For a decent amount of time, the primary security of Sandstorm was that nobody could guess the URL. :)
<ocdtrekkie> The fact that the URL doesn't work for anyone who enters it by default is actually a very new feature for Sandstorm.
<pixelport> does sandstorm anything that tells search engine bots that there is a libre board on this server?
<ocdtrekkie> No, the URLs are unguessable for a reason.
<pixelport> okay than I will go with this route
<ocdtrekkie> By default, currently, you should be able to create Share links to your board in Sandstorm, if permissions haven't been enabled by LibreBoard yet (they haven't), anyone who uses the /shared link on your server has write access to that board.
<ocdtrekkie> And as long as you don't post that shared link anywhere public, or give it to people who shouldn't have it, your board is private. (You can also revoke the shared link and access to anyone who shouldn't have it from the Share button.)
<pixelport> ocdtrekkie: no this defietly doesn't work with board which are set to private
<pixelport> the user can create a new account
<pixelport> but cannot access the board and there is no way to give the user the rights to do so
<ocdtrekkie> They can sign into Sandstorm, which will identify them when they visit a sharing link, but it doesn't let them create their own LibreBoards and such without an invite.
<ocdtrekkie> If you've got a LibreBoard open in Sandstorm, you should have a blue Share button on the black bar at the top, yes?
<pixelport> yes thats correct but when someone tries to register over this link the permissions aren't set
<ocdtrekkie> So you gave someone a /shared/ link to your LibreBoard grain and they cannot create cards and such?
<pixelport> yes when the board is private the user who registered over the shared link can not access the board in any way
<ocdtrekkie> I'm kinda getting caught on what you mean by "registered". Signing into Sandstorm itself, right? What do they see if they click the /shared/ link?
<ocdtrekkie> See if you can use it/create cards/etc.
<ocdtrekkie> Oooooh, I see. Yeah, that's a LibreBoard 0.8 issue/bug, I would think.
<ocdtrekkie> LibreBoard shouldn't ever show you a "sign up" or "log in" button on Sandstorm.
<ocdtrekkie> Most Sandstorm apps allow write access by default if shared. I had to go into an incognito window to see what you were looking at.
<pixelport> ocdtrekkie: this board is public. The problem only occurs when the board is set to private
<pixelport> but I think this should be fixed in 0.9
<ocdtrekkie> pixelport: A "public" board in Sandstorm, is still private, basically.
<pixelport> In sandstorm this might be true
jadewang has joined #sandstorm
<ocdtrekkie> This is basically just an issue because LibreBoard is designed to run outside of Sandstorm, so it has it's own public/private permissions and then Sandstorm has it's own shared/private permissions basically.
<ocdtrekkie> So for you to share something using the Sandstorm options, it needs to be "public" in LibreBoard.
<pixelport> you shouldn't need to invite users to sandstorm to let them access apps like libre board.
<pixelport> the privacy settings are misleading
jadewang has quit [Ping timeout: 264 seconds]
<ocdtrekkie> They don't need to be invited to Sandstorm, but they need a Sandstorm sharing link. LibreBoard having it's own public/private setting inside Sandstorm is a bit confusing (I was confused).
<ocdtrekkie> Inviting to Sandstorm allows people to *create* new instances of apps (like new LibreBoards), but you do not need an invite to use them.
<ocdtrekkie> For example, you are not invited to the Alpha server, but if you click this link, you can edit this Etherpad: https://alpha.sandstorm.io/shared/LS-euWUH54FRmOAqn8r-h6r428W16MUCLRBbQnsbaCu
pixelport has quit [Quit: Leaving]
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 256 seconds]
gopar has joined #sandstorm
natea has quit [Quit: natea]
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 265 seconds]
pixelport has joined #sandstorm
<pixelport> ocdtrekkie: Its not working at all! How to reproduce: create new sandstorm.io demo. Install Libre board. Create new Board. Create with blue "Share" button a share Link. Open Share Link in new Incognito window. Register new Libre board account ("Sign up for free"). Error: "0 must be an object [400]". Try to login with new account. User cannot access boards: "No boards.". If you go back to the shared link the user is not
<pixelport> logged in.
<dwrensha> I suspect that this is a bug in the LibreBoard package
<dwrensha> I remember seeing similar problems when I tried it out
<kentonv> right, this is a bug in libreboard; it should not be asking you to "sign in" at all, because Sandstorm handles all login
<pixelport> Is there already a github issue open?
<kentonv> I'm not sure
<ocdtrekkie> Well, mquandalle already said it'll be fixed in 0.9, which isn't ready for release yet.
<ocdtrekkie> There's really no solution other than to wait for the app to get updated.
<pixelport> ocdtrekkie: should I open a github issue then?
<kentonv> you should report an issue against libreboard
<kentonv> cool, I'll comment
jadewang has joined #sandstorm
<pixelport> b
niek has joined #sandstorm
joshbuddy has joined #sandstorm
pixelport has quit [Quit: Leaving]
gopar has quit [Quit: Leaving]
mort___ has joined #sandstorm
bb010g has quit [Quit: Connection closed for inactivity]
paroneayea has quit [Read error: Connection reset by peer]
paroneayea has joined #sandstorm
bb010g has joined #sandstorm
aldeka has quit [Remote host closed the connection]
ocdtrekkie has quit [Remote host closed the connection]
aldeka has joined #sandstorm
ocdtrekkie has joined #sandstorm
<jeffmendoza> Do I have to do anything special to get *.local.sandstorm.io to resolve to 127.0.0.1 ?
<kentonv> nope, it should just work
<kentonv> since we've configured it that way at our end
<jeffmendoza> ah ok crap
<kentonv> what are you seeing?
<jeffmendoza> ping: unknown host asdf.local.sandstorm.io
<jeffmendoza> ** server can't find asdf.local.sandstorm.io: SERVFAIL
<jeffmendoza> I'm on a corp network, so there is probably funny business going on
<kentonv> how about local.sandstorm.io itself (no subdomain)?
<kentonv> should also map to 127.0.0.1
<jeffmendoza> didn't work either, so I added it to /etc/hosts, but that doesn't do wildcards
<kentonv> I wonder if your corp network's DNS cache has some policy against outside domains mapping to 127.0.0.1
<jeffmendoza> seems like running dnsmasq might be an option
<kentonv> what if you do: dig @8.8.8.8 asdf.local.sandstorm.io
<kentonv> (8.8.8.8 being Google's wonderfully-memorable public DNS server)
<jeffmendoza> dig looks good: asdf.local.sandstorm.io. 299 IN A 127.0.0.1
<kentonv> so it seems your corp DNS server is blocking this host, but at least your corp network doesn't block DNS in general
<itscassa> Ah wait, forgot that there's IRC too :p
<itscassa> When I go to /admin/<token> and then to Invite users
<itscassa> I'm getting "Must be admin to send invites."
<itscassa> Is this my fault or is it a bug
<ocdtrekkie> You can't do wildcards in your hosts file on Linux?
<itscassa> ocdtrekkie: Not by default
<ocdtrekkie> My Windows machine took it, so I just assumed Linux did it.
<kentonv> itscassa: currently the "invite users" page is actually a separate page form the admin panel and does not accept the token
<kentonv> we're actually fixing this soon
* ocdtrekkie is learning things
<itscassa> How can I invite myself to access Sandstorm then?
<kentonv> but for now you need to be logged in as the admin user to send invites
<kentonv> the first user to log in becomes admin
<kentonv> automatically
<itscassa> Not in my case :/
<kentonv> hmm
<itscassa> Is there some way to reset that?
<kentonv> did you by any chance attempt email login first, have it not work (due to SMTP configuration), and then attempt a different login mechanism subsequently?
<itscassa> Ah, yes
<kentonv> heh... yeah so the email you tried to log in with is admin, but you can't use it. :(
<itscassa> Yep
<kentonv> someone reported the same problem yesterday
mort___ has quit [Quit: Leaving.]
<kentonv> we will also have this fixed soon, by introducing a user management panel where you can assign admin rights
<itscassa> Is there a way to reset it other than reinstalling sandstorm?
<kentonv> there are two options
<kentonv> one is, use "sudo sandstorm mongo" to get to the mongo shell and manually add "isAdmin: true" to your user entry in db.users
<kentonv> I tried to talk someone through this yesterday but didn't succeed
<kentonv> so maybe only do that if you are familiar with mongo already
<kentonv> otherwise, the other option is to delete the mongo DB and start over, that is:
<kentonv> sudo rm -rf /opt/sandstorm/var/mongo/*
<kentonv> err
<kentonv> first: sudo sandstorm stop
<kentonv> :)
<kentonv> and then after deleting: sudo sandstorm start
<kentonv> and to get a new token: sudo sandstorm admin-token
<itscassa> db.users.find(): error: { "$err" : "not authorized for query on sandstorm.users", "code" : 16550 }
<kentonv> that's weird
<itscassa> Wait
<itscassa> I'm logged in as the user sandstorm :p
<itscassa> Or, su'ed
<kentonv> use "sudo sandstorm mongo" to connect, it should authenticate you correctly
<kentonv> or if you installed sandstorm non-root, I guess you have to su to sandstorm and then do "sandstorm mongo"
<itscassa> Yep, got it
<jeffmendoza> ok got *.local.sandstorm.io working
<jeffmendoza> added: /etc/NetworkManager/dnsmasq.d/sandstorm
<jeffmendoza> contents: address=/.local.sandstorm.io/127.0.0.1
<jeffmendoza> sudo service network-manager restart
<kentonv> jeffmendoza: interesting!
<jeffmendoza> network manager uses dnsmasq by default it seems
<kentonv> on what distros?
<jeffmendoza> oh hmm, maybe not then
<jeffmendoza> I'm on ubuntu
<jeffmendoza> arch has some good docs though: https://wiki.archlinux.org/index.php/Dnsmasq
<itscassa> kentonv: Where should the isAdmin be set? As a "main key"?
<kentonv> I mean I didn't know that even existed. Maybe it works on lots of distros, which if so is pretty useful.
<kentonv> itscassa: you should see one of the users has "isAdmin" already.
<itscassa> Oh well, seems like I fucked up the database XD
<itscassa> Nah, nothing important running, will just reinstall the whole VM :P
<kentonv> itscassa: note that if you're using sandcats you'll have to go through the recovery process
<kentonv> if you delete your keys
<kentonv> but that's not too hard at this point, I think
<itscassa> kentonv: Wasn't using it
<kentonv> ok then, blow it away
<kentonv> although deleting mongo as I mentioned should also do the trick
<itscassa> Nope, sandstorm wasn't starting anymore
<kentonv> ah, hmm
<itscassa> Long time ago I used mongo, so that may be the problem
<itscassa> Yay! It works
<itscassa> Any plans for ACL too? I mean, sharing an URL works but it might be better to say, these users can access these apps
<kentonv> we are actually planning to support naming users explicitly rather than sending them a secret URL
<kentonv> which is I think what itscassa means
<itscassa> kentonv: Great
<kentonv> the thing we don't like is representing things as a flat list rather than a graph
<kentonv> a graph captures intent better, gives you more information, and supports important use cases that ACLs traditionally don't
<itscassa> And for things like Hackerslides, it would be useful to have read only urls
<kentonv> itscassa: several apps support that already, just not hackerslides
<kentonv> Etherpad and Ethercalc support read-only sharing
<itscassa> Cool
<kentonv> we just added this support recently so apps need updating
<itscassa> I think it should be done on the app side indeed
<ocdtrekkie> It'd be kinda impossible for Sandstorm to define what "read-only" is to an app anyways.
<kentonv> sandstorm computes the user's permissions but it's up to the app to define what permissions exist and ultimately enforce them
<kentonv> the blog post David links talks about this
<itscassa> ocdtrekkie: That's what I mean ;)
<kentonv> s/links/linked/
<itscassa> Hmm
<itscassa> SMTP is not working
<itscassa> Internal server error
<kentonv> where do you see that?
<itscassa> I'm guessing it's because the username is an email address
<itscassa> Passwordless email login
<kentonv> you mean, you enter an email and click "send' and it just says "internal server error"?
<itscassa> It takes a while, but yep
<kentonv> /opt/sandstorm/var/log/sandstorm.log might have more info
<dwrensha> itscassa: did you URL-encode the "@" in the username? (see https://github.com/sandstorm-io/sandstorm/wiki/Configuring-your-server-for-email#outgoing-smtp )
<itscassa> Ahh
<itscassa> Thought so
<kentonv> interesting, maybe we should auto-detect that problem
<itscassa> Nope :-(
<kentonv> hmm normally the greeting is actually sent to the client before the client says anything
<kentonv> so it sounds like your SMTP server is accepting the connection then remaining silent
<kentonv> that is, if the error message is correct, which of course it might not be
<kentonv> try telnetting to it and see what you get back?
<itscassa> telnetting works
<itscassa> And other mailing clients work
<jparyani> itscassa: are you setting the smtp url in the admin settings page or in sandstorm.conf?
<itscassa> Admin settings page
<itscassa> What's the key for sandstorm.conf SMTP?
<itscassa> Nvm :P
<itscassa> Hmm dang
<itscassa> Setting it broke the instance XD
<jparyani> i was worried about a confusing interaction in that the admin settings page takes precedence over the sandstorm.conf setting. I don't think that's your problem though
<itscassa> Nvm, permissions errors
<itscassa> Let's check again
<itscassa> Hmm nope
<jeffmendoza> I'm going through the porting guide with a sample app, how do you tell spk to pack up mysql with your app?
bb010g has quit []
bb010g has joined #sandstorm
<kentonv> jeffmendoza: well, the first step is to have a start script that starts mysql and then your app
<kentonv> and have that be your start command
<jeffmendoza> ah I See
<kentonv> jparyani can help with details
<kentonv> note that if you can use sqlite, it's probably better than mysql on Sandstorm
<jeffmendoza> right
<itscassa> Who's the builder of Paperworks
<itscassa> Or what's the repo
<kentonv> itscassa: should be linked from the app list
<itscassa> Ah forgot that
<jeffmendoza> it's ironic, most people are trying to scale out, sandstorm apps are the opposite
<kentonv> indeed. :)
<kentonv> sandstorm is targeted at the individual user or internal business apps
<kentonv> not SaaS
<kentonv> also we try to do things like one-document-per-instance, which makes instances really small even if there are lots of documents
<kentonv> this actually makes apps a lot easier to develop; no need to implement document management, access control, etc.
<jeffmendoza> =)
<kentonv> and it means that an individual instance has no need to scale out
<kentonv> Sandstorm can easily scale out by load-balancing instances across worker machines. (This is what Blackrock, our enterprise product, will do.)
<jadewang> just saw this in my twitter stream: http://opensource.com/life/15/5/your-open-source-story-matters
<jparyani> itscassa: what version of sandstorm are you running? you can check by running `sandstorm --version` on the command line, or viewing the home page of your sandstorm instance when not logged in
<itscassa> jparyani: 81
itscassa is now known as itscassa|away
paroneayea has quit [Read error: Connection reset by peer]
paroneayea has joined #sandstorm