[04:32:14]
<tituspijean> > <@kayou:matrix.org> And idea of improvement: being able to give args to shell in `yunohost app shell app_id`, for example:
>
> ```
> sudo yunohost app shell borg - borg list
> ```
```
yunohost app shell borg <<< 'borg list'
```
The doc is a but hidden: https://github.com/YunoHost/yunohost/blob/0e390076a75e8f1fcb30285de8aa2dac9bc00e6f/helpers/helpers.v2.1.d/0-utils#L404
[04:32:41]
<tituspijean> > <@kayou:matrix.org> And idea of improvement: being able to give args to shell in `yunohost app shell app_id`, for example:
>
> ```
> sudo yunohost app shell borg - borg list
> ```
```
yunohost app shell borg <<< 'borg list'
```
The doc is a bit hidden: https://github.com/YunoHost/yunohost/blob/0e390076a75e8f1fcb30285de8aa2dac9bc00e6f/helpers/helpers.v2.1.d/0-utils#L404
[06:01:28]
<kayou> ho, that's nice! thank you
[08:04:08]
<Yunohost Git/Infra notifications> [issues] tituspijean opened [issue #2685](https://github.com/YunoHost/issues/issues/2685): Automatically update the application tags in the forum
[15:16:19]
<artlog> Hi / Salut. ( french or english whatever ) i use ynh-dev and following documentation once installed i have to use ./ynh-dev script, but it is not more executable since a commit in june, i have to chmod +x it.
[16:05:35]
<Salamandar> It's fixed, thanks for the report :)
[16:05:41]
<Yunohost Git/Infra notifications> [ynh-dev] Salamandar pushed to main: Re-chmod +x ynh-dev ([59a0e643](https://github.com/YunoHost/ynh-dev/commit/59a0e643691cb297a60c4ab2e3a4761a60f55156))
[16:12:57]
<artlog> i have a small remark , when using incus images, all dev images have the very same yunohost.org CA certificate & key, those are not regenerated.
[16:13:17]
<artlog> i mean same dev image
[16:27:01]
<Salamandar> hmmmm
[16:27:03]
<Salamandar> yeah ?
[16:27:13]
<Salamandar> i don't get how that's an issue :D
[16:30:06]
<artlog> well, if someone want to trust globally all its dev certificates by trust the yunohost CA of it dev isntallation, this is somehow ennoying, since anybody can generate a valid certificate then, having the ca key.
[16:31:53]
<artlog> normaly i guess people will only add exception for each certificates, but one can just decide to import dev CA in firefox browser to ease it dev, then , well ...
[16:39:47]
<Salamandar> well that would be the same for standard installs then, i guess, right ?
[16:44:50]
<artlog> this led this question : what is a standard install
[16:47:21]
<artlog> so if image is provided after this init is done : same CA, if not then it will generated
[16:49:33]
<artlog> yunohost.org CA is not provided in packages, it is genereated on the fly by /usr/share/yunohost/hooks/conf\_regen/02-ssl init
[16:49:46]
<artlog> yunohost.org CA is not provided in packages, it is generated on the fly by /usr/share/yunohost/hooks/conf\_regen/02-ssl init
[16:59:24]
<Aleks (he/him/il/lui)> I suppose that's not ideal because some machines may share the same CA, but I'm not sure how much of a deal it is, since nobody should ever trust an entire self-signing CA. When adding a certificate exception in your browser, it's always for a specific, individual certificate so I don't know what anybody would achieve by knowing the private key of the CA...
[17:03:04]
<artlog> yeah that was a **a small remark**
[17:05:38]
<artlog> i didn't dig in the way to actively exploit it. As caution it is better to avoid it.
[18:06:41]
<Salamandar> Oh ! Yeah okay i get it then
[18:07:33]
<Salamandar> But how would you solve this ? Something that regens the ca when an image is first instanciated locally ?
[19:10:35]
<Yunohost Git/Infra notifications> [yunohost] alexAubin edited [pull request #2070](https://github.com/YunoHost/yunohost/pull/2070): WIP: Packaging v3
[19:22:45]
<Yunohost Git/Infra notifications> [issues] tituspijean [commented](https://github.com/YunoHost/issues/issues/2136#issuecomment-3433893232) on [issue #2136](https://github.com/YunoHost/issues/issues/2136) Packaging v3 wishlist: Add a S3 storage resource, maybe with Garage or SeaweedFS, to store data on apps that require it.
Backup and restore is ...
[19:32:26]
<Yunohost Git/Infra notifications> [yunohost] zamentur pushed 44 commits to fix-ynh_write_var_in_file_boolean ([34434bb7f6cb...d657a398a669](https://github.com/YunoHost/yunohost/compare/34434bb7f6cb...d657a398a669))
[19:32:59]
<Yunohost Git/Infra notifications> [yunohost] zamentur edited [pull request #2186](https://github.com/YunoHost/yunohost/pull/2186): [fix] Boolean are transform into string by ynh_write_var_in_file
[19:33:08]
<Yunohost Git/Infra notifications> [yunohost] zamentur edited [pull request #2186](https://github.com/YunoHost/yunohost/pull/2186): [fix] Boolean are transform into string by ynh_write_var_in_file
[19:33:58]
<Yunohost Git/Infra notifications> [yunohost] github-advanced-security[bot] [commented](https://github.com/YunoHost/yunohost/pull/2186#discussion_r2453155498) on pull request #2186 [fix] Boolean are transform into string by ynh_write_var_in_file: ## Jinja2 templating with autoescape=False
Using jinja2 templates with autoescape=False can potentially allow XSS attac...
[19:33:59]
<Yunohost Git/Infra notifications> [yunohost] github-advanced-security[bot] [commented](https://github.com/YunoHost/yunohost/pull/2186#discussion_r2453155509) on pull request #2186 [fix] Boolean are transform into string by ynh_write_var_in_file: ## Duplication in regular expression character class
This regular expression includes duplicate character \\ in a set...
[19:33:59]
<Yunohost Git/Infra notifications> [yunohost] github-advanced-security[bot] [commented](https://github.com/YunoHost/yunohost/pull/2186#discussion_r2453155504) on pull request #2186 [fix] Boolean are transform into string by ynh_write_var_in_file: ## Jinja2 templating with autoescape=False
Using jinja2 templates with autoescape=False can potentially allow XSS attac...
[19:38:43]
<Yunohost Git/Infra notifications> [yunohost] zamentur pushed 6 commits to fix-ynh_write_var_in_file_boolean2 ([3d56c857c8b5^...602b1c609b29](https://github.com/YunoHost/yunohost/compare/3d56c857c8b5^...602b1c609b29))
[19:39:30]
<Yunohost Git/Infra notifications> [yunohost] zamentur opened [pull request #2209](https://github.com/YunoHost/yunohost/pull/2209): Fix ynh write var in file boolean2
[19:48:47]
<Yunohost Git/Infra notifications> [yunohost] tituspijean [commented](https://github.com/YunoHost/yunohost/pull/2209#discussion_r2453185561) on pull request #2209 Fix ynh write var in file boolean2: FYI its formatted
[19:56:55]
<Yunohost Git/Infra notifications> [yunohost] alexAubin pushed to dev: Fix ynh write var in file boolean2 (#2209) * [fix] Boolean are transform into string by ynh_write_var_in_file * [fix] ... ([d91f4cb5](https://github.com/YunoHost/yunohost/commit/d91f4cb5d3db772c988c346ef1c43a4f2bcf55c1))
[19:56:55]
<Yunohost Git/Infra notifications> [yunohost] alexAubin merged [pull request #2209](https://github.com/YunoHost/yunohost/pull/2209): Fix ynh write var in file boolean2
[19:56:58]
<Yunohost Git/Infra notifications> [yunohost] alexAubin deleted branch fix-ynh_write_var_in_file_boolean2
[19:57:20]
<Yunohost Git/Infra notifications> [yunohost] alexAubin closed [pull request #2186](https://github.com/YunoHost/yunohost/pull/2186): [fix] Boolean are transform into string by ynh_write_var_in_file
[19:57:21]
<Yunohost Git/Infra notifications> [yunohost] alexAubin [commented](https://github.com/YunoHost/yunohost/pull/2186#issuecomment-3434003207) on [issue #2186](https://github.com/YunoHost/yunohost/pull/2186) [fix] Boolean are transform into string by ynh_write_var_in_file: Superseded by https://github.com/YunoHost/yunohost/pull/2209
[19:57:24]
<Yunohost Git/Infra notifications> [yunohost] alexAubin deleted branch fix-ynh_write_var_in_file_boolean
[20:00:07]
<Yunohost Git/Infra notifications> 🏗️ Starting build for yunohost/12.1.29+202510222200 for bookworm/unstable/all...
[20:01:34]
<Yunohost Git/Infra notifications> ✔️ Completed build for yunohost/12.1.29+202510222200 for bookworm/unstable/all.
[20:01:34]
<Yunohost Git/Infra notifications> ✔️ Completed distribution for yunohost/12.1.29+202510222200 for bookworm/unstable.
[21:20:29]
<Yunohost Git/Infra notifications> [yunohost] alexAubin pushed to dev: postfix: remove reject_rbl_client abuseat.org because its in fact spamshaus.org since a few years ([42f0b91b](https://github.com/YunoHost/yunohost/commit/42f0b91bf0430bd949329e3cb6687f72781cb948))
[21:23:44]
<Yunohost Git/Infra notifications> [yunohost] alexAubin pushed to dev: diagnosis/mail/blocklists: remove abuseat.org which is in fact spamhaus.org since a few years ([6af03482](https://github.com/YunoHost/yunohost/commit/6af034820cdce9630bad30fdd43f6d3d7e2440ab))
[21:26:52]
<Yunohost Git/Infra notifications> [yunohost] tituspijean pushed to dev: diagnosis/mail/blocklists: use spamhaus own ns to avoid open resolver errors ([b45b9d4f](https://github.com/YunoHost/yunohost/commit/b45b9d4f425337105b93face02c862825ff93cc9))
[21:29:36]
<Yunohost Git/Infra notifications> [yunohost] alexAubin pushed to dev: Revert "diagnosis/email/dnsbl: fix infamous issue with spamhaus returning openresolver". Were moving to a more genera... ([51c46873](https://github.com/YunoHost/yunohost/commit/51c468735a4f26a91e87bf6eb4ff74ff7a0e72ee))
[21:30:05]
<Yunohost Git/Infra notifications> 🏗️ Starting build for yunohost/12.1.29+202510222330 for bookworm/unstable/all...
[21:31:30]
<Yunohost Git/Infra notifications> ✔️ Completed build for yunohost/12.1.29+202510222330 for bookworm/unstable/all.
[21:31:30]
<Yunohost Git/Infra notifications> ✔️ Completed distribution for yunohost/12.1.29+202510222330 for bookworm/unstable.
[21:32:17]
<Yunohost Git/Infra notifications> [yunohost] alexAubin pushed 26 commits to openresolver ([765097735a78...cb283f9088f8](https://github.com/YunoHost/yunohost/compare/765097735a78...cb283f9088f8))
[21:33:49]
<Yunohost Git/Infra notifications> [yunohost] alexAubin pushed to openresolver: Update en.json ([ac19f6cd](https://github.com/YunoHost/yunohost/commit/ac19f6cd993dd07f836bc5353d5f383a2365a791))
[21:36:22]
<Yunohost Git/Infra notifications> [yunohost] alexAubin edited [pull request #2201](https://github.com/YunoHost/yunohost/pull/2201): diagnosis/mail/blocklist: when obtaining an open resolver reason, advise admins to check their /etc/resolv.conf
[21:36:29]
<Yunohost Git/Infra notifications> [yunohost] alexAubin pushed to dev: diagnosis/mail/blocklist: when obtaining an open resolver reason, advise admins to check their /etc/resolv.conf (#2201... ([d525bfbc](https://github.com/YunoHost/yunohost/commit/d525bfbc63659382a516362b0da4e77ddbb800a0))
[21:36:29]
<Yunohost Git/Infra notifications> [yunohost] alexAubin merged [pull request #2201](https://github.com/YunoHost/yunohost/pull/2201): diagnosis/mail/blocklist: when obtaining an open resolver reason, advise admins to check their /etc/resolv.conf
[21:36:34]
<Yunohost Git/Infra notifications> [yunohost] alexAubin deleted branch openresolver
[21:37:35]
<Yunohost Git/Infra notifications> [yunohost] alexAubin pushed to dev: Translated using Weblate (French) (#2204) Currently translated at 100.0% (895 of 895 strings) Translation: YunoHost/co... ([9fc6718f](https://github.com/YunoHost/yunohost/commit/9fc6718f84953fd97745bfaf37a8cd655e075a54))
[21:37:35]
<Yunohost Git/Infra notifications> [yunohost] alexAubin merged [pull request #2204](https://github.com/YunoHost/yunohost/pull/2204): Translations update from Weblate
[21:45:06]
<Yunohost Git/Infra notifications> 🏗️ Starting build for yunohost/12.1.29+202510222345 for bookworm/unstable/all...
[21:46:29]
<Yunohost Git/Infra notifications> ✔️ Completed build for yunohost/12.1.29+202510222345 for bookworm/unstable/all.
[21:46:33]
<Yunohost Git/Infra notifications> ✔️ Completed distribution for yunohost/12.1.29+202510222345 for bookworm/unstable.
[22:20:13]
<Yunohost Git/Infra notifications> [yunohost] alexAubin pushed to dev: Update changelog for 12.1.30 ([65e1bb1d](https://github.com/YunoHost/yunohost/commit/65e1bb1dc782faaa79bed8575811458600683114))
[22:20:13]
<Yunohost Git/Infra notifications> [yunohost] alexAubin created new t𝚊g debian/12.1.30
[22:20:13]
<Yunohost Git/Infra notifications> ✔️ Completed distribution for yunohost/12.1.30 for bookworm/stable.
[22:20:13]
<Yunohost Git/Infra notifications> [repository] github-actions[bot] published [new release #debian/12.1.30](https://github.com/YunoHost/yunohost/releases/tag/debian/12.1.30) YunoHost 12.1.30
[22:20:14]
<Yunohost Git/Infra notifications> 🏗️ Starting build for yunohost/12.1.30 for bookworm/stable/all...
[22:20:14]
<Yunohost Git/Infra notifications> ✔️ Completed build for yunohost/12.1.30 for bookworm/stable/all.
[22:30:13]
<Yunohost Git/Infra notifications> 🏗️ Starting build for yunohost/12.1.30+202510230030 for bookworm/unstable/all...
[22:31:38]
<Yunohost Git/Infra notifications> ✔️ Completed build for yunohost/12.1.30+202510230030 for bookworm/unstable/all.
[22:31:39]
<Yunohost Git/Infra notifications> ✔️ Completed distribution for yunohost/12.1.30+202510230030 for bookworm/unstable.
[22:32:02]
<Émy – OniriCorpe> GG pour la release <3
[23:45:09]
<Yunohost Git/Infra notifications> [yunohost] kevinwherron [comment](https://github.com/YunoHost/yunohost/commit/b45b9d4f425337105b93face02c862825ff93cc9#commitcomment-168616425) on commit b45b9d4: This change broke dnsmasq on my system: Oct 22 23:27:18 systemd[1]: Starting dnsmasq.service - dnsmasq - A lightweight DHCP and caching DNS server... Oct 22 23:27:18 dnsmasq[2274]: Cannot resolve server name at line 16 of /etc/dnsmasq.conf Oct 22 23:27:18 dnsmasq[2274]: FAILED to start up Oct 22 23:27:18 systemd[1]: dnsmasq.service: Control process exited, code=exited, status=1/FAILURE Oct 22 23:27:18 systemd[1]: dnsmasq.service: Failed with result exit-code. Oct 22 23:27:18 systemd[1]: Failed to start dnsmasq.service - dnsmasq - A lightweight DHCP and caching DNS server. Line 16 is the Spamhaus name server: # Which will otherwise complain that we may be using an open resolver... # cf https://www.spamhaus.com/resource-center/successfully-accessing-spamhauss-free-block-lists-using-a-public-dns/#yes-but-why-block-queries-from-public-recursive-name-servers # We pick one of spamhaus a/b/c/d/e nameservers, cf https://multirbl.valli.org/detail/zen.spamhaus.org.html -#server=/*.zen.spamhaus.org/c.gns.spamhaus.org +server=/*.zen.spamhaus.org/c.gns.spamhaus.org