I would like someone to review my greenlight-app.
Just heads up this is my first app for Cloudron so I expect some issues but I will be happy to fix and learn from them.

I am currently working on the greenlight Cloudron App for BigBlueButton.
So far the basic functionality is working fine but the ldap-auth is giving me trouble.

Right now the /app/code/bin/start script writes these variables

sed -i -e "s/LDAP_SERVER=.*/LDAP_SERVER=$CLOUDRON_LDAP_SERVER/g" /app/data/.env \
&& sed -i -e "s/LDAP_PORT=.*/LDAP_PORT=$CLOUDRON_LDAP_PORT/g" /app/data/.env \
&& sed -i -e "s/LDAP_BASE=.*/LDAP_BASE=$CLOUDRON_LDAP_USERS_BASE_DN/g" /app/data/.env \
&& sed -i -e "s/LDAP_BIND_DN=.*/LDAP_BIND_DN=$CLOUDRON_LDAP_BIND_DN/g" /app/data/.env \
&& sed -i -e "s/LDAP_PASSWORD=.*/LDAP_PASSWORD=$CLOUDRON_LDAP_BIND_PASSWORD=/g" /app/data/.env \
&& sed -i -e "s/LDAP_METHOD=.*/LDAP_METHOD=plain/g" /app/data/.env \
&& sed -i -e "s/LDAP_UID=.*/LDAP_UID=cn/g" /app/data/.env \
&& sed -i -e "s/LDAP_AUTH=.*/LDAP_AUTH=simple/g" /app/data/.env \
&& sed -i -e "s/LDAP_FILTER=.*/LDAP_FILTER=\(\&\(objectclass=user\)\(\|\(username=%uid\)\(mail=%uid\)\)\)/g" /app/data/.env \
&& sed -i -e "s/LDAP_ATTRIBUTE_MAPPING=.*/LDAP_ATTRIBUTE_MAPPING=uid=uid;name=displayname;email=mail;nickname=givenName;/g" /app/data/.env

But the LDAP Login fails.

INFO: [af608168-79eb-41e2-818c-1e514f0306bd] method=POST path=/auth/ldap format=html controller=SessionsController action=ldap status=302 duration=17.26 view=0.00 db=0.71 location=https://greenlight.stage.gzevd.de/ldap_signin host=greenlight 
INFO: [70994248-8131-4f51-bfdb-db159292bca0] method=GET path=/ldap_signin format=html controller=SessionsController action=ldap_signin status=200 duration=21.65 view=15.03 db=0.86 host=greenlight 

Maybe someone can help out?

I just pushed my work here: https://git.cloudron.io/BrutalBirdie/greenlight-app
ps: Please ignore my .gitlab-ci.yml this is for my own gitlab for deploying and testing the App.

EDIT:
Thanks @nebulon
The LDAP_UID was wrong. Has to be username
And the Filter can be deleted.
Pushed.

@nebulon Changes pushed.

I love the addition of the File Manager but when using Cloudron it can be pain to access.
I don't want to click config>console>File Manager every time.

There is a log button on the app tile, which includes a button for the Terminal. Why not also include a button for the File Manager?

I would like something like this

ps: Please ignore the css spacing issue I just hacked it into there to get an idea

I'm assuming you're using BigBlueButton 2.3-alpha-2 as the basis for this?

@jdaviescoates the Greenlight App is just the front end for BigBlueButton.
As @luckow mentioned BBB can be installed anywhere and Greenlight is just the front end which connects to a specific BBB instance or cluster to provide a UI etc.

@nebulon said in BigBlueButton - web conferencing system for on-line learning:

I took a brief look at the app and overall it appears to work. Thanks a lot!

Some things to improve:

• I was not sure how to login with the pre-setup admin, since I didn't know the admin email address
• The tests need also test admin login
• The tests need some code cleanup
• Since it is only the webfrontend as far as I can tell, the icon has to somehow reflect this
• The postinstall docs need to mention the fact that the backend has to be adjusted to not use the default test backend

• The Admin E-Mail address is the Mail FROM Address aka. CLOUDRON_MAIL_SMTP_USERNAME variable from e-mail addon also noted in the POSTINSTALL.md. As far as I am aware of I can not write the POSTINSTALL.md dynamically to display the env CLOUDRON_MAIL_SMTP_USERNAME.
  So either I have to do a better job to explain how to get the E-Mail address from Terminal or the log or use a static e-mail address.
  What would be the status quo to for this type of issue?
• Will add the test for admin login as well (above issue again, hmm so static admin e-mail would be better?)
• Understandable
• Greenlight has no own Icon sadly, I would suggest the BBB Icon but in Green?
• Will add that.

Cheers.

@nebulon said in BigBlueButton - web conferencing system for on-line learning:

For the email address, we use admin@server.local in such a case. Hopefully it is possible to change this later by the user, just like the pre-setup password?

Yes e-mail and password can be changed.
And I will use admin@server.local.

Thanks for the input.

The App is still in the git https://git.cloudron.io/cloudron/paperwork-app
But not in the store not even as unstable.
Also the git version did not get an update for over 1 year. This might be the problem.

Linking the official github as well. https://github.com/paperwork/paperwork/

Just subscribed and turned on the bell, don't wanna miss your session

In addition to App Wish BigBlueButton.

I already created a the greenlight-app which needs review.

Maybe we can get some person from BBB/Greenlight to help with the review and tuning?

@johnbolt Sorry John but with the lack of information about your system I am not willing to invest any time.

To your last question, of course you can download your backups, but since you did not give any information about your setup, all I can do is - RTFM.

https://docs.cloudron.io/backups/

@johnbolt said in NEW UPDATE pulls other app backup...WHAT the CRAP is going ON?:

Looks like it affected one of my non Cloudron controlled worpress sites.

What? A Wordpress site is affected which is not even controlled by Cloudron? o_O wtf?

Every app has it's own id which also is used for the backups.
Example one of my lamp apps has the id 07458679-64b6-4921-9f37-318a57518f85
and the backup name is:
app_435994c4-bb05-43a6-b941-9f9440fe5124_2020-09-22-210133-071_v1.4.0.tar.gz

@imc67

My thought process:

Zabbix Agent creates a user

Example from one of my Cloudrons with Zabbix.

zabbix:x:113:117::/var/lib/zabbix/:/usr/sbin/nologin

The Zabbix Agent Service file states:

~# cat /lib/systemd/system/zabbix-agent.service
[Unit]
Description=Zabbix Agent
After=syslog.target
After=network.target

[Service]
Environment="CONFFILE=/etc/zabbix/zabbix_agentd.conf"
EnvironmentFile=-/etc/default/zabbix-agent
Type=forking
Restart=on-failure
PIDFile=/run/zabbix/zabbix_agentd.pid
KillMode=control-group
ExecStart=/usr/sbin/zabbix_agentd -c $CONFFILE
ExecStop=/bin/kill -SIGTERM $MAINPID
RestartSec=10s
User=zabbix
Group=zabbix

[Install]
WantedBy=multi-user.target

Running as User:Group zabbix:zabbix and:

~# groups zabbix
zabbix : zabbix

Cloudron uses the user yellowtent - which has the docker group

~# groups yellowtent 
yellowtent : yellowtent adm systemd-journal docker

I would think that the zabbix user needs the docker group as well to get the information from docker and not get "[13] Permissions denied".

copy pasta:

usermod -aG docker zabbix

Other option would be to edit zabbix_agentd.conf and set AllowRoot (Zabbix agent with root permissions): - Which I would not prefer...

AllowRoot=1

edit:
Also your solution works but I prefer passiv agents.

A "bit" necroing here but since I use the Zabbix Agent on all my hosts, including multible Cloudron instances, I can say that installing and running the Zabbix Agent is no Problem.

But you need to make sure you allow the Zabbix Agent Port in iptables.
Also you need to install iptables-persistent as well to persist your manual changes.

iptables -I CLOUDRON 2 -p tcp -m tcp --dport 10050 -j ACCEPT

Why put the Rule into the CLOUDRON table and on second place? You may ask.

Since the first table of iptables is

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
CLOUDRON_RATELIMIT  all  --  anywhere             anywhere            
CLOUDRON            all  --  anywhere             anywhere 

This will first lookup the RATELIMIT table and then the CLOUDRON table:

Chain CLOUDRON (1 references)
target     prot opt source               destination         
DROP       all  --  anywhere             anywhere             match-set cloudron_blocklist src
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:zabbix-agent
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ACCEPT     tcp  --  anywhere             anywhere             tcp multiport dports ssh,smtp,http,at-nbp,https
ACCEPT     tcp  --  anywhere             anywhere             multiport dports 3478,5349
ACCEPT     udp  --  anywhere             anywhere             multiport dports 3478,5349
ACCEPT     udp  --  anywhere             anywhere             multiport dports 50000:51000
ACCEPT     icmp --  anywhere             anywhere             icmp echo-request
ACCEPT     icmp --  anywhere             anywhere             icmp echo-reply
ACCEPT     udp  --  anywhere             anywhere             udp spt:domain
ACCEPT     all  --  172.18.0.0/16        anywhere            
ACCEPT     all  --  anywhere             anywhere            
LOG        all  --  anywhere             anywhere             limit: avg 2/min burst 5 LOG level debug prefix "IPTables Packet Dropped: "
DROP       all  --  anywhere             anywhere

First Rule is a DROP and last one is a DROP so we want the rule to be within the other ACCEPT rules.
(Can see above the result of the command, the rule for zabbix is on the second place)

In addition to App Wish BigBlueButton.

I already created a the greenlight-app which needs review.

Maybe we can get some person from BBB/Greenlight to help with the review and tuning?

@nebulon Changes pushed.

@nebulon said in BigBlueButton - web conferencing system for on-line learning:

For the email address, we use admin@server.local in such a case. Hopefully it is possible to change this later by the user, just like the pre-setup password?

Yes e-mail and password can be changed.
And I will use admin@server.local.

Thanks for the input.

@nebulon said in BigBlueButton - web conferencing system for on-line learning:

I took a brief look at the app and overall it appears to work. Thanks a lot!

Some things to improve:

• I was not sure how to login with the pre-setup admin, since I didn't know the admin email address
• The tests need also test admin login
• The tests need some code cleanup
• Since it is only the webfrontend as far as I can tell, the icon has to somehow reflect this
• The postinstall docs need to mention the fact that the backend has to be adjusted to not use the default test backend

• The Admin E-Mail address is the Mail FROM Address aka. CLOUDRON_MAIL_SMTP_USERNAME variable from e-mail addon also noted in the POSTINSTALL.md. As far as I am aware of I can not write the POSTINSTALL.md dynamically to display the env CLOUDRON_MAIL_SMTP_USERNAME.
  So either I have to do a better job to explain how to get the E-Mail address from Terminal or the log or use a static e-mail address.
  What would be the status quo to for this type of issue?
• Will add the test for admin login as well (above issue again, hmm so static admin e-mail would be better?)
• Understandable
• Greenlight has no own Icon sadly, I would suggest the BBB Icon but in Green?
• Will add that.

Cheers.

The App is still in the git https://git.cloudron.io/cloudron/paperwork-app
But not in the store not even as unstable.
Also the git version did not get an update for over 1 year. This might be the problem.

Linking the official github as well. https://github.com/paperwork/paperwork/

I would like someone to review my greenlight-app.
Just heads up this is my first app for Cloudron so I expect some issues but I will be happy to fix and learn from them.

I love the addition of the File Manager but when using Cloudron it can be pain to access.
I don't want to click config>console>File Manager every time.

There is a log button on the app tile, which includes a button for the Terminal. Why not also include a button for the File Manager?

I would like something like this

ps: Please ignore the css spacing issue I just hacked it into there to get an idea