Saturday, November 26, 2022
apps@conference.yunohost.org
November
Mon Tue Wed Thu Fri Sat Sun
  1 2
3
4
5
6
7
8
9
10
11
12 13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
       
             

[15:04:16] <Yunohost Git/Infra notifications> [wordpress_ynh] @theRAGEhero commented on issue #205 How to change PHP memory limit: Ok, Ive found a solution. https://forum.yunohost.org/t/php-memory-limit-en-fr/3836/13 Dont forget to use the right P... https://github.com/YunoHost-Apps/wordpress_ynh/issues/205#issuecomment-1328061690
[15:04:19] <Yunohost Git/Infra notifications> [wordpress_ynh] @theRAGEhero commented on issue #205 How to change PHP memory limit: Ok, Ive found a solution. https://forum.yunohost.org/t/php-memory-limit-en-fr/3836/14 Dont forget to use the right P... https://github.com/YunoHost-Apps/wordpress_ynh/issues/205#issuecomment-1328061690
[15:59:52] <florent> Question: May it help if I create a Yunohost app for opensearch by chance? (a FLOSS fork of ElasticSearch which has turned to a non-FLOSS licence)
[16:00:16] <florent> I can ask this question on the forum rather than here if you think it is more appropriate
[16:14:48] <tituspijean> It's definitely appropriate and you are more than welcome to contribute to the catalog
[17:45:07] <Salamandar> Hey guys, i got an issue on Pytition. The app is run with systemd as `__APP__:__APP__` (normal).
But the process creates files that should be accessible by nginx (so `www-data` group).
I set `gid=www-data` in the UWSGI configuration, but that doesn't help: the files are created as the systemd owner, `__APP__:__APP__`.

If I set `www-data` as group in the systemd service, that looks like a security flaw because pytition will be able to access any file from any other app… and the linter warns about this.

Soooo… What should i do ? :(
[17:45:08] <Salamandar> it's a media upload directory
[17:45:08] <tituspijean> What about using ACL?
[17:45:08] <tituspijean> Does NGINX need to write into the app directory?
[17:45:08] <Salamandar> hmmm pliz explain :D
[17:45:08] <Salamandar> nope, only read
[17:45:15] <tituspijean> Then try `setfacl -Rmd g:www-data:r /thedirectory`
[17:45:28] <tituspijean> (Untested, might need some fine tuning)
[17:46:46] <tituspijean> There might be other apps using that command, you can loik for it on github :)
[17:49:20] <Salamandar> > <@titus:pijean.ovh> Then try `setfacl -Rmd g:www-data:r /thedirectory`

interesting
[17:49:26] <Salamandar> i'll read about it. thanks.
[17:49:59] <Salamandar> (in truth, that makes us think about the whole design of the software: those media might not be left accessible without check. The python app should serve those media instead of leaving them served by nginx directly.)
[19:07:37] <Yunohost Git/Infra notifications> [apps] @Krakinou opened pull request #1545: zwave-js-ui working https://github.com/YunoHost/apps/pull/1545
[19:37:11] <Yunohost Git/Infra notifications> [apps] @tituspijean approved pull request #1545 zwave-js-ui working: 🚀 https://github.com/YunoHost/apps/pull/1545#pullrequestreview-1194903197
[19:37:26] <Yunohost Git/Infra notifications> [apps] @tituspijean pushed 2 commits to master: https://github.com/YunoHost/apps/compare/a7d3fcfad7ea...1240af25f08f
[19:37:26] <Yunohost Git/Infra notifications> [apps] @tituspijean merged pull request #1545: zwave-js-ui working https://github.com/YunoHost/apps/pull/1545
[19:37:31] <Yunohost Git/Infra notifications> [apps/master] zwave-js-ui working - Krakinou
[19:37:35] <Yunohost Git/Infra notifications> [apps/master] Merge pull request #1545 from Krakinou/master - tituspijean
[19:54:04] <Yunohost Git/Infra notifications> [apps] @tituspijean pushed 2 commits to bot-repo-cleanup: https://github.com/YunoHost/apps/compare/94cdb2ca9e15...89f1da0ca307
[19:54:07] <Yunohost Git/Infra notifications> [apps/bot-repo-cleanup] Comment the bot-repo-cleanup script - tituspijean
[19:54:10] <Yunohost Git/Infra notifications> [apps/bot-repo-cleanup] Optimize the bot-repo-cleanup script - tituspijean
[20:01:38] <Yunohost Git/Infra notifications> [apps] @ericgaspar opened pull request #1546: Update apps level https://github.com/YunoHost/apps/pull/1546
[20:02:28] <Yunohost Git/Infra notifications> [apps] @alexAubin pushed 1 commit to master: Fix github hook for json validation, python2 deprecated as hell https://github.com/YunoHost/apps/commit/f50a370d9b621fd0972917fa445ce0dcf5d58ad7
[20:03:29] <Yunohost Git/Infra notifications> [apps] @tituspijean pushed 1 commit to bot-repo-cleanup: Remove superfluous continue clause in bot-repo-cleanup https://github.com/YunoHost/apps/commit/c87472b0e24aaaeb5122c6c89ec4d755e480ca12
[23:33:34] <Yunohost Git/Infra notifications> [apps] @tituspijean changes_requested pull request #1546 Update apps level https://github.com/YunoHost/apps/pull/1546#pullrequestreview-1194911046
[23:33:34] <Yunohost Git/Infra notifications> [my_webapp_ynh] @blindi0815 commented on issue #97 "500" Internal Server Error when trying to access config pannel from webadmin: So I know this is closed but I just wanted to add that you have to enter the command sudo yunohost app upgrade my_web... https://github.com/YunoHost-Apps/my_webapp_ynh/issues/97#issuecomment-1328120150
[23:33:34] <Yunohost Git/Infra notifications> [apps] @tituspijean edited review pull request #1546: Update apps level https://github.com/YunoHost/apps/pull/1546#pullrequestreview-1194911046
[23:33:34] <Yunohost Git/Infra notifications> [apps] @tituspijean commented on pull request #1546 Update apps level: suggestion "level": 8, Pending [[Test Badge](https://img.shields.io/endpoint?url=https://ci-apps.yunoho... https://github.com/YunoHost/apps/pull/1546#discussion_r1032836409
[23:46:31] <Yunohost Git/Infra notifications> [package_linter] @alexAubin merged pull request #105: fix: default value for manifest.upstream.website https://github.com/YunoHost/package_linter/pull/105
[23:46:31] <Yunohost Git/Infra notifications> [package_linter] @alexAubin pushed 2 commits to master: https://github.com/YunoHost/package_linter/compare/76e8d962e189...8367d3ed8600
[23:46:36] <Yunohost Git/Infra notifications> [package_linter/master] fix: default value for manifest.upstream.website - Tagadda
[23:46:38] <Yunohost Git/Infra notifications> [package_linter/master] Merge pull request #105 from YunoHost/fix-website fix: default value for manifest.upstream.website - Alexandre Aubin