@fbartels It works now with the fix from my colleague m4rg4sh (he submitted a pull request). Also there is a new version 1.8.0 - I just updated to it and everything looks great so far

Hi @fbartels

Thank you for your great work! This is definitely on a good path

Some few things I noticed:

• Saving a config throws a Error saving config: IOError. I also checked with a reboot and it seems it really can't be saved right now. (also smtp wouldn't be possible without this fixed)
• When accessing the admin panel when not logged into cloudron, you get a password prompt. A 403 HTTP would probably be more suitable and secure

And as a small Bonus: As the app is getting in a pretty good shape, it is time for a logo =D
here you go: https://github.com/bitwarden/brand/blob/master/icons/256x256.png

I use it, in combination with DANE for certificate pinning in DNS.
mehdi is sort of right - clients dont really use it, some mail providers do. But I know of no one that enforces it (by dropping e-mails or traffic).

I use a browser add on in Firefox that displays me the DNSSEC and DANE status of webpages I'm visiting. With the add on I know at least something is odd when it fails on my own pages / domains.

My whole cloudron was not really working after the update. I did a reboot, nothing really changed, System looked like this:

After the fix from @girish and restart of box everything worked again.

Hope you push a hotfix pretty soon for all others. Still wish for a GUI option to choose if i want auto or manually install system updates, just for cases like this (this exists for the apps and has existed for the cloudron itself in the past). Auto updates always have this bitter aftertaste of waking up next day and it could work or not work.

Looking forward to this. Need to track all my IP addresses & subnets somehow and it would be great to have it in cloudron!

Hi @fbartels

Build and install worked without problems, but i'm facing the same issue as @necrevistonnezr

Couln't really find something on the first view, but i'm not that familiar with containers. Would be great to see it running, thank you for your efforts you already made!

You're welcome

I hope this pr is going to be merged into bitwarden_rs soon: https://github.com/dani-garcia/bitwarden_rs/pull/396

It would make it a lot easier for the user management. Currently registration is open to the world until you set ENV SIGNUPS_ALLOWED=false, which only makes sense after you created a first account. After setting it you could work with invites, but the invitation model sucks (you can just invite when having an Organisation or you can do it in the admin panel, but you have to set another env variable to access it and you can't save stuff there).

So currently not really usable for the normal user. As far as I understood, with the ldap integration accounts / invites will be synced for all ldap users, which is exactly what we want. I also hope the admin panel gets some love, as in my eyes the token system to log in there isn't really easy to handle. And there seems to be a problem saving the settings you set there, but that's probably a problem in the cloudron integration.

@girish To me it looks like mysql is taking too long to start and box is giving up eventually. I had to wait a long time until mysql was ready and listening. That was the moment I kicked the restart of the box service, which got stuff running (still slowly, but moving forward). My apps are now configuring / starting, so it looks fine. Maybe that information helps a bit. Here some box.log output:

Mar 17 21:56:51 box:services Waiting for mysql
Mar 17 21:56:51 box:services Attempt 1 failed. Will retry: Network error waiting for mysql: connect ECONNREFUSED 172.18.0.3:3000
Mar 17 21:57:06 box:services Attempt 2 failed. Will retry: Network error waiting for mysql: connect ECONNREFUSED 172.18.0.3:3000
Mar 17 21:57:21 box:services Attempt 3 failed. Will retry: Network error waiting for mysql: connect ECONNREFUSED 172.18.0.3:3000
Mar 17 21:57:36 box:services Attempt 4 failed. Will retry: Network error waiting for mysql: connect ECONNREFUSED 172.18.0.3:3000
Mar 17 21:57:51 box:services Attempt 5 failed. Will retry: Network error waiting for mysql: connect ECONNREFUSED 172.18.0.3:3000
Mar 17 21:58:06 box:services Attempt 6 failed. Will retry: Network error waiting for mysql: connect ECONNREFUSED 172.18.0.3:3000
Mar 17 21:58:21 box:services Attempt 7 failed. Will retry: Network error waiting for mysql: connect ECONNREFUSED 172.18.0.3:3000
Mar 17 21:58:36 box:services Attempt 8 failed. Will retry: Network error waiting for mysql: connect ECONNREFUSED 172.18.0.3:3000
Mar 17 21:58:51 box:services Attempt 9 failed. Will retry: Network error waiting for mysql: connect ECONNREFUSED 172.18.0.3:3000
Mar 17 21:58:53 box:shell statusNginx exec: systemctl is-active nginx
Mar 17 21:58:53 box:shell statusUnbound exec: systemctl is-active unbound
Mar 17 21:58:53 box:shell statusNginx (stdout): active
Mar 17 21:58:53 box:shell statusNginx (stderr): null
Mar 17 21:58:53 box:shell statusUnbound (stdout): active
Mar 17 21:58:53 box:shell statusUnbound (stderr): null
Mar 17 21:59:06 box:platform Failed to start services. retry=false (attempt 0): Network error waiting for mysql: connect ECONNREFUSED 172.18.0.3:3000
Mar 17 21:59:06 box:cloudron Startup task at index 3 failed: Network error waiting for mysql: connect ECONNREFUSED 172.18.0.3:3000
Mar 17 22:01:14 box:locker Lock unreleased platform_start

I use it, in combination with DANE for certificate pinning in DNS.
mehdi is sort of right - clients dont really use it, some mail providers do. But I know of no one that enforces it (by dropping e-mails or traffic).

I use a browser add on in Firefox that displays me the DNSSEC and DANE status of webpages I'm visiting. With the add on I know at least something is odd when it fails on my own pages / domains.

@girish As i'm using Sogo for calendars - nope, that's not possible to migrate... And as it does not start, it's also not possible to download the data and start from scratch via import. Anyway, no need for me to put extra efforts in it - but for Businesses this would not be a good situation I guess.

Are there other apps that have been silently replaced with a new version which is not updatable and will be deprecated? Did I miss communication about it or was there none? Probably an indicator in the GUI would help, like a (!) top right at the App tile, where you find more information about the app being deprecated and you need to migrate (or a migration routine in cloudron directly would be preferred i think).

@girish That works, yes. But my question was if there is a way to rollback a complete cloudron upgrade (so including the box part). In some cases this is the fastest path when you need the services up and running quickly.

I just saw that Sogo is not responding. Restore the backup and restart the app did not help. The logs say the following:
Mar 14 20:19:14 => Convert the sql schema
Mar 14 20:19:14 Converting c_content from TEXT to LONGTEXT in the sogo_user_profile table
Mar 14 20:19:14 mysql: [Warning] Using a password on the command line interface can be insecure.
Mar 14 20:19:14 ERROR 2026 (HY000): SSL connection error: unknown error number

Thx @girish, that solved it!
Should the line be activated after everything is up and running again?

BTW: I was looking for an option to rollback the upgrade to the previous release - is it somehow possible to rollback the whole cloudron to a backup without setting up everything from scratch?

Hello
I upgraded from 6.1.2 to 6.2.4. After the upgrade, following apps are stuck in " Restarting - Waiting for Cloudron to initialize":

• Invoice Ninja
• Bitwarden
• Sogo
• Gitlab
• Rocketchat (2x)
• Matrix
• Monica
• Paperwork
• FreshRSS
• Nextcloud
• Wekan

Following Apps could start:

• Shaarli
• Collabora
• Trillium
• Riot / Element
• Simple Torrent
• Rainloop

I assume it could be a DB issue.

I did already reboot the server, restart box, restart mysql, mongodb & postgresql, no success so far.

That seemed to solve it, even if a server reboot did not solve it. I also got a mail, that this was also visible from other mail-servers (not just from my mail client), as I use DANE for certificate pinning.
Thx girish!

@girish Just checked, yes i'm already on 5.6.1.
And good to know, thx

I also got SSL errors after the upgrade, but in Thunderbird. It seems like the default self signed Cert is used.

A possibility to postpone updates for like 2 weeks would be nice, to not run into such things.

My whole cloudron was not really working after the update. I did a reboot, nothing really changed, System looked like this:

After the fix from @girish and restart of box everything worked again.

Hope you push a hotfix pretty soon for all others. Still wish for a GUI option to choose if i want auto or manually install system updates, just for cases like this (this exists for the apps and has existed for the cloudron itself in the past). Auto updates always have this bitter aftertaste of waking up next day and it could work or not work.