Solved Unable to install apps

[metalcated]

I am followings this simple guide https://docs.cloudron.io/installation/ using Ubuntu 20.04 LTS and every single time I try to install an App, I get an error saying unable to write to /root/appdata/etc.

Based on what I am seeing this isn't supposed to be the case? I have tried installing 2x now and don't understand where things are going wrong.

Any direction would be great. I am just testing this out to see how it works and performs.

Thanks

[opensourced]

@girish I moved the appsdata folder to another mounted drive -> after creating the symlink (as root) i didn't propperly set the permissions. I fixed it, so all good now. Thanks!

[girish]

@metalcated Thanks for trying us out! Can you give us more information about the error? Maybe some screenshot ?

When the app install fails, can you get the logs using the app's log viewer (it's a button in the top toolbar) ? See https://docs.cloudron.io/apps/#log-viewer . You can paste the logs into https://paste.cloudron.io and give us a link.

[metalcated]

@girish Hey sorry about that, I should have included that with my original post.

Sep 28 15:41:29 box:apptask test.domain.com error installing app: BoxError: Error creating directory: EACCES: permission denied, mkdir '/root/appsdata/645af55f-853d-47a1-9e29-6504e1fc00b5'
at /home/yellowtent/box/src/apptask.js:162:36
at FSReqCallback.oncomplete (fs.js:171:23) {
reason: 'FileSystem Error',
details: {}

Full log: https://paste.cloudron.io/inukequheh.js

[girish]

@metalcated Thanks. For some reason, it thinks that /root is the home directory. Cloudron runs as the user yellowtent and it should be using /home/yellowtent as the "base".

Can you check the output of systemctl show box | grep User= ? It should say yellowtent. Also, can you check the output of su - yellowtent and then env | grep HOME ?

If you can tell me which VPS provider you use, I can test out the installation there myself as well.

[metalcated]

@girish said in Unable to install apps:

systemctl show box | grep User=

root@cloudron] ~$ systemctl show box | grep User=
User=yellowtent
DynamicUser=no

$ env | grep HOME
HOME=/home/yellowtent

This is a self built VM on my home lab vCenter instance.
Ubuntu 20.04.3 LTS

[metalcated]

Also, I just noticed that this wiped out my entire set of A records from Cloudflare! Took me all weekend to notice. Believe I am done using this with a bug like that. Thanks.

[girish]

@metalcated Mmm, everything looks OK. If you can give us SSH access, please send a mail to support@cloudron.io and we can look into it.

[girish]

@metalcated mm, our cloudflare backend is used quite extensively, so I would be surprised to hit such a bug. If Cloudflare has audit logs, can you check where the delete requests came from?

[girish]

@metalcated https://support.cloudflare.com/hc/en-us/articles/115002833612-Understanding-Cloudflare-Audit-Logs . In our cloudflare account, I can see there are records for every DNS change as "Rec del" and "Rec add".

[opensourced]

@girish just hit the same error...

May 28 14:27:13 box:tasks update 186: {"percent":50,"message":"Creating app data directory"}
May 28 14:27:13 box:apptask run: app error for state pending_install: BoxError: Error creating directory: EACCES: permission denied, mkdir '/home/yellowtent/appsdata/8076edfc-1155-43e1-9bc1-f00aa3f207c5'
at createAppDir (/home/yellowtent/box/src/apptask.js:119:22)
at async install (/home/yellowtent/box/src/apptask.js:358:5) {
reason: 'FileSystem Error',
details: {}
May 28 14:27:13 box:taskworker Task took 12.297 seconds
May 28 14:27:13 box:tasks setCompleted - 186: {"result":null,"error":{"stack":"BoxError: Error creating directory: EACCES: permission denied, mkdir '/home/yellowtent/appsdata/8076edfc-1155-43e1-9bc1-f00aa3f207c5'\n at createAppDir (/home/yellowtent/box/src/apptask.js:119:22)\n at async install (/home/yellowtent/box/src/apptask.js:358:5)","name":"BoxError","reason":"FileSystem Error","details":{},"message":"Error creating directory: EACCES: permission denied, mkdir '/home/yellowtent/appsdata/8076edfc-1155-43e1-9bc1-f00aa3f207c5'"}}
May 28 14:27:13 box:tasks update 186: {"percent":100,"result":null,"error":{"stack":"BoxError: Error creating directory: EACCES: permission denied, mkdir '/home/yellowtent/appsdata/8076edfc-1155-43e1-9bc1-f00aa3f207c5'\n at createAppDir (/home/yellowtent/box/src/apptask.js:119:22)\n at async install (/home/yellowtent/box/src/apptask.js:358:5)","name":"BoxError","reason":"FileSystem Error","details":{},"message":"Error creating directory: EACCES: permission denied, mkdir '/home/yellowtent/appsdata/8076edfc-1155-43e1-9bc1-f00aa3f207c5'"}}
Error creating directory: EACCES: permission denied, mkdir '/home/yellowtent/appsdata/8076edfc-1155-43e1-9bc1-f00aa3f207c5'
at createAppDir (/home/yellowtent/box/src/apptask.js:119:22)
at async install (/home/yellowtent/box/src/apptask.js:358:5)

my outputs are as followed:

root@host:/home/# systemctl show box | grep User=
User=yellowtent
DynamicUser=no

root@host:/home/# su - yellowtent
This account is currently not available.

What could be the reasons for my yellowtent not to be availlable?

Thanks in advance!

[girish]

@opensourced said in Unable to install apps:

What could be the reasons for my yellowtent not to be availlable?

This is expected. yellowtent is created as a system user (it's only used to run the box code as a non-root user for security reasons).

Can you please try:

sudo -u yellowtent mkdir /home/yellowtent/appsdata/8076edfc-1155-43e1-9bc1-f00aa3f207c5

For some reason, the above thing fails on your system. Is there something special about /home/yellowtent mount we need to know about? Can you check if /home/yellowtent/appsdata and /home/yellowtent/ are owned by the yellowtent user?

[opensourced]

@girish I moved the appsdata folder to another mounted drive -> after creating the symlink (as root) i didn't propperly set the permissions. I fixed it, so all good now. Thanks!

[necrevistonnezr]

@opensourced said in Unable to install apps:

@girish I moved the appsdata folder to another mounted drive

I think you should have led with that...