[11:41:24]
<rathantara> > <@Alekswag:matrix.org> rathantara: can you try if the testing fixes the issue with `yunohost app upgrade scratch -u https://github.com/YunoHost-Apps/scratch_ynh/tree/testing` ?
removed grocy, now unable to install stable or testing
[11:41:49]
<Aleks (he/him/il/lui)> https://aria.im/_matrix/media/v1/download/matrix.org/hwSExbkWxnsiCuaiVdTEARZK
[11:45:43]
<rathantara> huh?
[11:50:25]
<rathantara> https://paste.yunohost.org/raw/ofokulenip
[12:11:49]
<Aleks (he/him/il/lui)> looks like a bug related to the new experimental 2.1 helpers
[12:23:40]
<Aleks (he/him/il/lui)> fixed in upcoming 11.2.17.1
[14:29:00]
<thatoo> Bonjour,
J'ai un problème avec nextcloud. Une bonne partie des apps ne s'affichent plus.
[14:30:41]
<thatoo> Dans les logs, j'ai une liste de
```Could not read app info file for app "onlyoffice"
Could not read app info file for app "spreed"
```
[14:30:57]
<thatoo> Dans les logs, j'ai une liste de
```
Could not read app info file for app "onlyoffice"
Could not read app info file for app "spreed"
```
[14:31:02]
<thatoo> et les autres apps, "tasks, "polls", "mail" etc...
[14:31:40]
<Aleks (he/him/il/lui)> est-ce que le problème est arrivé suite à une manipulation particulière ?
[14:32:59]
<thatoo> je suis sûr que ça fonctionnait avant la maj de 28.0.5 à 28.0.6
[14:33:08]
<thatoo> mais sinon, non
[14:34:30]
<thatoo> en désespoir de cause, je viens d'essayer de faire la maj vers 29.0.2 mais ça n'a pas résolu le pbm
[14:36:09]
<thatoo> Je ne sais pas si c'est lié mais j'ai aussi ce warning dans la Vue d'ensemble :
[14:36:10]
<thatoo>
> Ce serveur ne peut se connecter à Internet : plusieurs points finaux ne peuvent être atteints. Cela signifie que certaines fonctionnalités, telles que le montage de stockages externes, les notifications de mises à jour ou l'installation d'applications tierces, ne fonctionneront pas. L'accès aux fichiers à distance, ainsi que l'envoi de notifications par e-mail peuvent aussi être indisponibles. Il est recommandé d'activer la connexion internet pour ce serveur si vous souhaitez disposer de l'ensemble des fonctionnalités offertes.
[14:45:50]
<thatoo> je crois que j'ai une piste mais ça sent pas très bon
[14:45:59]
<thatoo> ```
root@ynh:/var/www/nextcloud/apps# ls -al collectives/appinfo/routes.php
-rw-r--r-- 1 nextcloud www-data 8321 22 mai 11:40 collectives/appinfo/routes.php
root@ynh:/var/www/nextcloud/apps# ls -al onlyoffice/appinfo/routes.php
-rw-r--r-- 1 nextcloud www-data 0 26 avril 10:27 onlyoffice/appinfo/routes.php
```
[14:46:00]
<thatoo> collectives est une des apps qui fonctionne alors que onlyoffice ne fonctionne pas
[14:46:11]
<thatoo> et on voit que `onlyoffice/appinfo/routes.php` est vide
[14:48:12]
<thatoo> ```
root@ynh:/var/www/nextcloud/apps# ls -al spreed/appinfo/routes.php
-rw-r--r-- 1 nextcloud www-data 0 24 mai 05:01 spreed/appinfo/routes.php
root@ynh:/var/www/nextcloud/apps# ls -al polls/appinfo/routes.php
-rw-r--r-- 1 nextcloud www-data 0 12 avril 10:26 polls/appinfo/routes.php
root@ynh:/var/www/nextcloud/apps# ls -al forms/appinfo/routes.php
-rw-r--r-- 1 nextcloud www-data 0 24 mai 14:56 forms/appinfo/routes.php
```
[14:48:18]
<thatoo> ```
root@ynh:/var/www/nextcloud/apps# ls -al forms/appinfo/
total 8
drwxr-xr-x 2 nextcloud www-data 4096 24 mai 14:56 .
drwxr-xr-x 10 nextcloud www-data 4096 24 mai 14:56 ..
-rw-r--r-- 1 nextcloud www-data 0 24 mai 14:56 info.xml
-rw-r--r-- 1 nextcloud www-data 0 24 mai 14:56 routes.php
-rw-r--r-- 1 nextcloud www-data 0 24 mai 14:56 signature.json
root@ynh:/var/www/nextcloud/apps# ls -al spreed/appinfo/
total 12
drwxr-xr-x 3 nextcloud www-data 4096 24 mai 05:01 .
drwxr-xr-x 12 nextcloud www-data 4096 24 mai 05:01 ..
-rw-r--r-- 1 nextcloud www-data 0 24 mai 05:01 info.xml
drwxr-xr-x 2 nextcloud www-data 4096 24 mai 05:01 routes
-rw-r--r-- 1 nextcloud www-data 0 24 mai 05:01 routes.php
-rw-r--r-- 1 nextcloud www-data 0 24 mai 05:01 signature.json
```
[14:48:18]
<thatoo> 😞
[15:00:44]
<thatoo> J'ai fait ça
`mv /var/www/nextcloud/apps/APPNAME /root/nextcloud_apps/APPNAME`
pour toutes les apps qui affichaient une erreur.
Je n'ai plus ces erreurs!
[15:00:47]
<thatoo> mais je ne peux pas réinstaller les apps
[15:01:45]
<thatoo> c'est comme si mon nextcloud n'avait plus accès au store d'app
[15:01:56]
<thatoo> > <@thatoo:defis.info> > Ce serveur ne peut se connecter à Internet : plusieurs points finaux ne peuvent être atteints. Cela signifie que certaines fonctionnalités, telles que le montage de stockages externes, les notifications de mises à jour ou l'installation d'applications tierces, ne fonctionneront pas. L'accès aux fichiers à distance, ainsi que l'envoi de notifications par e-mail peuvent aussi être indisponibles. Il est recommandé d'activer la connexion internet pour ce serveur si vous souhaitez disposer de l'ensemble des fonctionnalités offertes.
ce qui fait sens avec ça
[15:02:47]
<thatoo> Sauf qu'il faut bien qu'il ait accès à internet pour que je puisse m'y connecter
[15:02:48]
<thatoo> Dans journalisation, je trouve aussi ces erreurs :
```
Erreur internet_connection_check
RequestException cURL error 77: error setting certificate verify locations: CAfile: /home/yunohost.app/nextcloud/data/files_external/rootcerts.crt CApath: /etc/ssl/certs (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://www.edri.org/
Cannot connect to: www.edri.org
"25 juin 2024, 16:59:38"
Erreur internet_connection_check
RequestException cURL error 77: error setting certificate verify locations: CAfile: /home/yunohost.app/nextcloud/data/files_external/rootcerts.crt CApath: /etc/ssl/certs (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://www.eff.org/
Cannot connect to: www.eff.org
"25 juin 2024, 16:59:38"
Erreur internet_connection_check
RequestException cURL error 77: error setting certificate verify locations: CAfile: /home/yunohost.app/nextcloud/data/files_external/rootcerts.crt CApath: /etc/ssl/certs (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://www.startpage.com/
Cannot connect to: www.startpage.com
"25 juin 2024, 16:59:37"
Erreur internet_connection_check
RequestException cURL error 77: error setting certificate verify locations: CAfile: /home/yunohost.app/nextcloud/data/files_external/rootcerts.crt CApath: /etc/ssl/certs (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://nextcloud.com/
Cannot connect to: www.nextcloud.com
"25 juin 2024, 16:59:37"
Erreur internet_connection_check
RequestException cURL error 77: error setting certificate verify locations: CAfile: /home/yunohost.app/nextcloud/data/files_external/rootcerts.crt CApath: /etc/ssl/certs (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://www.edri.org/
Cannot connect to: www.edri.org
"25 juin 2024, 16:57:33"
Erreur internet_connection_check
RequestException cURL error 77: error setting certificate verify locations: CAfile: /home/yunohost.app/nextcloud/data/files_external/rootcerts.crt CApath: /etc/ssl/certs (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://www.eff.org/
Cannot connect to: www.eff.org
"25 juin 2024, 16:57:33"
Erreur internet_connection_check
RequestException cURL error 77: error setting certificate verify locations: CAfile: /home/yunohost.app/nextcloud/data/files_external/rootcerts.crt CApath: /etc/ssl/certs (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://www.startpage.com/
Cannot connect to: www.startpage.com
"25 juin 2024, 16:57:33"
Erreur internet_connection_check
RequestException cURL error 77: error setting certificate verify locations: CAfile: /home/yunohost.app/nextcloud/data/files_external/rootcerts.crt CApath: /etc/ssl/certs (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://nextcloud.com/
Cannot connect to: www.nextcloud.com
```
[15:04:30]
<thatoo> pourtant, si je me connecte en ssh, je peux ping eff.org, startpage.com, nextcloud.com
[15:04:37]
<thatoo> mais par contre, c'est vrai que je n'arrive pas à pinger edri.org
[15:04:58]
<thatoo> je bloque un peu là...
[15:11:17]
<thatoo> Si ça peut aider, voici l'entrée brute du log `internet_connection_check` pour edri.org
```
{"reqId":"6ugLKRf2yANj8buAeSJk","level":3,"time":"2024-06-25T14:59:38+00:00","remoteAddr":"89.234.177.91","user":"administrateur","app":"internet_connection_check","method":"GET","url":"/settings/ajax/checksetup","message":"Cannot connect to: www.edri.org","userAgent":"Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0","version":"29.0.2.2","exception":{"Exception":"GuzzleHttp\\Exception\\RequestException","Message":"cURL error 77: error setting certificate verify locations: CAfile: /home/yunohost.app/nextcloud/data/files_external/rootcerts.crt CApath: /etc/ssl/certs (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for https://www.edri.org/","Code":0,"Trace":[{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Handler/CurlFactory.php","line":158,"function":"createRejection","class":"GuzzleHttp\\Handler\\CurlFactory","type":"::","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Handler/CurlFactory.php","line":110,"function":"finishError","class":"GuzzleHttp\\Handler\\CurlFactory","type":"::"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Handler/CurlHandler.php","line":47,"function":"finish","class":"GuzzleHttp\\Handler\\CurlFactory","type":"::"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Middleware.php","line":142,"function":"__invoke","class":"GuzzleHttp\\Handler\\CurlHandler","type":"->"},{"file":"/var/www/nextcloud/lib/private/Http/Client/DnsPinMiddleware.php","line":163,"function":"GuzzleHttp\\{closure}","class":"GuzzleHttp\\Middleware","type":"::","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/PrepareBodyMiddleware.php","line":35,"function":"OC\\Http\\Client\\{closure}","class":"OC\\Http\\Client\\DnsPinMiddleware","type":"->","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Middleware.php","line":31,"function":"__invoke","class":"GuzzleHttp\\PrepareBodyMiddleware","type":"->"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/RedirectMiddleware.php","line":71,"function":"GuzzleHttp\\{closure}","class":"GuzzleHttp\\Middleware","type":"::","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/RedirectMiddleware.php","line":107,"function":"__invoke","class":"GuzzleHttp\\RedirectMiddleware","type":"->"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/RedirectMiddleware.php","line":73,"function":"checkRedirect","class":"GuzzleHttp\\RedirectMiddleware","type":"->"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/FulfilledPromise.php","line":41,"function":"GuzzleHttp\\{closure}","class":"GuzzleHttp\\RedirectMiddleware","type":"->","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/TaskQueue.php","line":48,"function":"GuzzleHttp\\Promise\\{closure}","class":"GuzzleHttp\\Promise\\FulfilledPromise","type":"::","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":248,"function":"run","class":"GuzzleHttp\\Promise\\TaskQueue","type":"->"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":224,"function":"invokeWaitFn","class":"GuzzleHttp\\Promise\\Promise","type":"->"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":269,"function":"waitIfPending","class":"GuzzleHttp\\Promise\\Promise","type":"->"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":226,"function":"invokeWaitList","class":"GuzzleHttp\\Promise\\Promise","type":"->"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/promises/src/Promise.php","line":62,"function":"waitIfPending","class":"GuzzleHttp\\Promise\\Promise","type":"->"},{"file":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Client.php","line":189,"function":"wait","class":"GuzzleHttp\\Promise\\Promise","type":"->"},{"file":"/var/www/nextcloud/lib/private/Http/Client/Client.php","line":230,"function":"request","class":"GuzzleHttp\\Client","type":"->"},{"file":"/var/www/nextcloud/apps/settings/lib/SetupChecks/InternetConnectivity.php","line":85,"function":"get","class":"OC\\Http\\Client\\Client","type":"->"},{"file":"/var/www/nextcloud/apps/settings/lib/SetupChecks/InternetConnectivity.php","line":68,"function":"isSiteReachable","class":"OCA\\Settings\\SetupChecks\\InternetConnectivity","type":"->"},{"file":"/var/www/nextcloud/lib/private/SetupCheck/SetupCheckManager.php","line":51,"function":"run","class":"OCA\\Settings\\SetupChecks\\InternetConnectivity","type":"->"},{"file":"/var/www/nextcloud/apps/settings/lib/Controller/CheckSetupController.php","line":179,"function":"runAll","class":"OC\\SetupCheck\\SetupCheckManager","type":"->"},{"file":"/var/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php","line":232,"function":"check","class":"OCA\\Settings\\Controller\\CheckSetupController","type":"->"},{"file":"/var/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php","line":138,"function":"executeController","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->"},{"file":"/var/www/nextcloud/lib/private/AppFramework/App.php","line":184,"function":"dispatch","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->"},{"file":"/var/www/nextcloud/lib/private/Route/Router.php","line":338,"function":"main","class":"OC\\AppFramework\\App","type":"::"},{"file":"/var/www/nextcloud/lib/base.php","line":1050,"function":"match","class":"OC\\Route\\Router","type":"->"},{"file":"/var/www/nextcloud/index.php","line":49,"function":"handleRequest","class":"OC","type":"::"}],"File":"/var/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Handler/CurlFactory.php","Line":211,"message":"Cannot connect to: www.edri.org","exception":[],"CustomMessage":"Cannot connect to: www.edri.org"},"id":"667adb5e72bcb"}
```
[15:15:30]
<thatoo> mais curl https://edri.org me donne bien la page
[15:24:46]
<thatoo> ```
root@ynh:/var/www/nextcloud/config# sudo -u nextcloud php8.2 --define apc.enable_cli=1 /var/www/nextcloud/occ app:install mail
Error: Could not download app mail
```
😵💫
[15:26:53]
<Aleks (he/him/il/lui)> > <@thatoo:defis.info> mais curl https://edri.org me donne bien la page
depuis ton serveur ?
[15:28:45]
<thatoo> oui
[15:30:21]
<Aleks (he/him/il/lui)> ah c'est Nextcloud qui utilise ses propres autorité de cert pour checker HTTPS ? ` CAfile: /home/yunohost.app/nextcloud/data/files_external/rootcerts.crt`
[15:30:22]
<Aleks (he/him/il/lui)> wtf...
[15:30:33]
<Aleks (he/him/il/lui)> est-ce que `/home/yunohost.app/nextcloud/data/files_external/` existe ?
[15:33:32]
<thatoo> oui mais
[15:33:38]
<thatoo> ```
$ sudo ls -al /home/yunohost.app/nextcloud/data/files\_external/rootcerts.crt
-rw-r----- 1 nextcloud nextcloud 0 19 juin 13:35 /home/yunohost.app/nextcloud/data/files\_external/rootcerts.crt
```
[15:34:30]
<thatoo> le fichier est vide aussi
[15:37:06]
<Aleks (he/him/il/lui)> :|
[15:37:08]
<Aleks (he/him/il/lui)> est-ce que tu aurais eu un problème d'espace disque à un moment ?
[15:37:17]
<thatoo> je l'ai reconstitué à l'aide du même fichier depuis un autre nextcloud d'un autre ynh
[15:37:26]
<thatoo> et ça fonctionne
[15:37:29]
<thatoo> je n'ai plus les erreurs
[15:37:54]
<thatoo> et j'ai de nouveau accès au store d'apps
[15:38:58]
<thatoo> la question que je me demande est si je réinstalle les apps ou si je re `mv` les apps qui ne s'affichaient plus dans l'autre sens
[15:39:21]
<thatoo> je verrais ça ce soir
[15:39:26]
<thatoo> je dois filer
[15:39:31]
<thatoo> par contre
[15:39:41]
<thatoo> merci encore Aleks (he/him/il/lui)
[15:39:55]
<Aleks (he/him/il/lui)> est-ce que tu aurais eu un problème d'espace disque à un moment ?²
[15:42:01]
<thatoo> non, par contre, j'ai dû m'y reprendre à deux fois pour la maj de 28.0.5 à 28.0.6
[15:42:08]
<thatoo> mais la maj 28.0.6 à 29.0.2 s'est passé nickel
[15:42:48]
<Aleks (he/him/il/lui)> dans ce cas peut-être qu'il y a des infos dans la première upgrade qui a foiré
[15:42:49]
<thatoo> si je regarde, là présentement, j'ai encore 117 Go donc, je ne pense vraiment pas avoir manqué d'espace disque
[15:45:07]
<thatoo> > <@Alekswag:matrix.org> dans ce cas peut-être qu'il y a des infos dans la première upgrade qui a foiré
Est-ce qu'il n'y a pas un risque que d'autres trucs aient foirés?
Est-ce qu'il y existe un process de "resintall" de nextcloud dans ynh à faire dans ce cas là qui permet de garder fichier et ddb de nextcloud tout en gardant toute l'intégration magique de ynh?
[15:46:01]
<Aleks (he/him/il/lui)> en l'occurence le problème viens d'un fichier dans le dossier de data de nextcloud qui n'est ni backupé dans le backup de secours automatique (sinon il pèserait des tonnes)
[15:46:05]
<Aleks (he/him/il/lui)> et je peux rien dire d'autres sur le problème vu que j'ai pas le log
[15:46:51]
<Aleks (he/him/il/lui)> m'enfin dans le cas présent le vrai problème de fond c'est "pourquoi diantre Nextcloud ship ses propres certiticats SSL racines", c'est du grand n'importe quoi
[21:27:48]
<tane> fail2ban config broken after restore from backup.
https://paste.yunohost.org/qejabuhohu
[21:35:14]
<Aleks (he/him/il/lui)> after restore of ... freshrss ?
[21:37:20]
<Aleks (he/him/il/lui)> that's uuuuh `Removed logfile: '/var/log/auth.log'`
[21:37:21]
<Aleks (he/him/il/lui)> not good
[21:37:25]
<tane> Hard to say, I restored a full backup which failed at searchngx so then I tried all the peices that hadn't failed. It might have been broken then but i didn't get an error until the VPN Client wouldn't restore.
[21:37:35]
<tane> Try \yunohost tools regen-conf
[21:39:43]
<Salamandar> freshrss is probably missing /var/log in its backup
[21:40:16]
<Aleks (he/him/il/lui)> it looks the entire /var/log got deleted ...
[21:43:53]
<tane> This is the output of fail2ban-client -x start
https://pad.sans-nuage.fr/p/myownprison
*Sorry, no pastebin at arn
[21:43:53]
<Salamandar> lol vat
[21:46:29]
<tane> Try uninstalling all the apps with errors (freshrss, gitea, and nextcloud) and then restoring from an older backup?
[21:47:47]
<Aleks (he/him/il/lui)> what we should try is understand what happened exactly using the logs of what happened on the system, brute-forcing the situation won't magically make the log files reappear
[21:53:44]
<tane> OK, situation. Fresh install on deb 11, used the vps install method, altered /etc/network/interfaces because the ethernet port is broken to give a fixed wifi ip.
Yunohost installed fine. Attached usb drive, mounted and copied backup files across.
Restored from latest backup (20240620) which filed at Searchngx. Uninstalled searchngx and tried to just install the VPN client, install failed because of fail2ban.
I think that is pretty much it.
[21:55:36]
<miro5001> `Jun 25 22:41:28 fail2ban-client[25036]: Shutdown successful`
[21:56:06]
<tane> I have full access
[21:57:27]
<Aleks (he/him/il/lui)> if searxngx failed then we should check the log to understand what happened exactly, since that looks like the moment fail2ban broke ...
[21:58:14]
<tane> https://paste.yunohost.org/raw/isifevedod
[22:00:12]
<Aleks (he/him/il/lui)> do you have the "remove after failed restore" somewhere in the logs ?
[22:01:52]
<tane> phrase not found
[22:03:34]
<tane> It all goes wrong here "2024-06-25 22:44:25,903: DEBUG - + systemctl start uwsgi-app@searxng.service"
[22:03:34]
<miro5001> The first log was removed at 22:41:28
[22:03:51]
<Aleks (he/him/il/lui)> i mean in the log list in the webadmin, Tools, Logs
[22:03:53]
<Aleks (he/him/il/lui)> ah good point
[22:03:56]
<Aleks (he/him/il/lui)> so the issue started before searx restore ?
[22:03:58]
<tane> The removal of searxng failed as well
https://paste.yunohost.org/raw/amobaxemev
That is the next log
[22:04:41]
<Aleks (he/him/il/lui)> do you remember what was happening 3 minutes exactly before trying to restore searxng ?
[22:05:49]
<tane> My wife came home....:) No, is the short answer. I but the restore on and went downstairs.
[22:05:59]
<tane> put*
[22:06:49]
<Aleks (he/him/il/lui)> so you started a full restore using the backup ? including system stuff ?
[22:07:46]
<tane> Yes, Select all
[22:09:32]
<Aleks (he/him/il/lui)> and does `ls -l /var/log/` right now list many entries ? or is it suspiciously empty ?
[22:10:27]
<tane> total 3400
[22:11:02]
<Aleks (he/him/il/lui)> could it be that you manually modified the fail2ban conf in the past ?
[22:13:52]
<tane> I did a couple of days ago but that was after this backup. I did this https://yunohost.org/en/fail2ban
[22:15:50]
<tane> XXX was replaced with 192.168.0.0/24
[22:15:57]
<Aleks (he/him/il/lui)> wokay well i'm not sure exactly what the heck happened but somehow the restore restored a conf snippet related to freshrss and it's doesn't work (yet?) because there's no log for freshrss ... Anyway .... I guess we can find the culprit with `grep -nr freshrss /etc/fail2ban`
[22:17:46]
<tane> /etc/fail2ban/jail.d/freshrss.conf:2:[freshrss]
/etc/fail2ban/jail.d/freshrss.conf:5:filter = freshrss
[22:21:35]
<Aleks (he/him/il/lui)> yeah .. I don't know where that can come from if it only restored the system and attempted searxng
[22:21:47]
<Aleks (he/him/il/lui)> or freshrss was restored before searxng ?
[22:21:58]
<tane> yes
[22:22:04]
<tane> https://aria.im/_matrix/media/v1/download/matrix.org/wXSIKDxaYBFOXaSFiQeqjzpv
[22:22:05]
<Aleks (he/him/il/lui)> ah well that looks less disastrous than i thought
[22:22:06]
<tane> I am certain it will get worse :) If you want to sleep this can wait. I have a child tomorrow as well.
[22:22:29]
<Aleks (he/him/il/lui)> i usually go to sleep at X am so i'm fine but feel free to go
[22:26:15]
<tane> I'll go at one...or before. Where do I start?
[22:26:15]
<Aleks (he/him/il/lui)> right now the summary is : freshrss broke fail2ban because it tried to restore the fail2ban conf without restoring the log, and fail2ban is stupid as hell and will fail if the log it's supposed to monitor doesn't exist yet ... On the other hand, I don't understand how this was not caught up by our automatic tests, because we do test backup on fresh system so what the heck ...
The story about searxng seems unrelated, that's uwsgi crashing because ???
[22:26:18]
<Aleks (he/him/il/lui)> wtf
[22:26:19]
<Aleks (he/him/il/lui)> zzzzz
[22:26:19]
<Aleks (he/him/il/lui)> ah but freshrss restore didn't actually crash
[22:26:19]
<Aleks (he/him/il/lui)> can you share logs of all the restores ?
[22:26:20]
<miro5001> Look for the log that started before 22:41:28 and finished after that time.
[22:43:17]
<tane> Sorry, I would have put more time stamps but I am starting to make mistakes.
started_at: 2024-06-25 20:37:59.261489
https://paste.yunohost.org/raw/etafukemab
started_at: 2024-06-25 20:37:59.078140
https://paste.yunohost.org/raw/acazefisoz
started_at: 2024-06-25 20:37:59.043567
https://paste.yunohost.org/raw/wobefupapu
started_at: 2024-06-25 20:37:59.120984
https://paste.yunohost.org/raw/heqavekoki
started_at: 2024-06-25 20:37:59.011189
https://paste.yunohost.org/raw/qefatezati
started_at: 2024-06-25 20:37:59.215648
https://paste.yunohost.org/raw/xadujemimo
started_at: 2024-06-25 20:40:18.334717
https://paste.yunohost.org/raw/umujijavaf
started_at: 2024-06-25 20:40:55.831377
https://paste.yunohost.org/raw/wagilayuyi
started_at: 2024-06-25 20:41:30.047632
https://paste.yunohost.org/raw/wunufamoju
started_at: 2024-06-25 20:41:48.826511
https://paste.yunohost.org/raw/ulutocimur
started_at: 2024-06-25 20:42:24.810712
https://paste.yunohost.org/raw/edipisocow
started_at: 2024-06-25 20:42:42.984540
https://paste.yunohost.org/raw/iwekuqusaj
started_at: 2024-06-25 20:42:51.710717
https://paste.yunohost.org/raw/akocuneval
started_at: 2024-06-25 20:43:54.934157
https://paste.yunohost.org/raw/qolagasugi
started_at: 2024-06-25 20:44:07.071888
https://paste.yunohost.org/raw/siqamowitu
started_at: 2024-06-25 20:44:27.477722
https://paste.yunohost.org/raw/yisavovexi
started_at: 2024-06-25 21:14:22.171480
https://paste.yunohost.org/raw/owaqidones
started_at: 2024-06-25 21:15:09.929616
https://paste.yunohost.org/raw/demugohemi
https://paste.yunohost.org/raw/itavunocas
https://paste.yunohost.org/raw/cetayawiqe
https://paste.yunohost.org/raw/eyovedaxih
https://paste.yunohost.org/raw/ahuxakiven
https://paste.yunohost.org/raw/dobiciqoro
https://paste.yunohost.org/raw/gixuhajifu
2024-06-25 21:38:47.023051
https://paste.yunohost.org/raw/umujicucet
[22:44:24]
<tane> https://paste.yunohost.org/olewucidek.apache
[22:49:11]
<Aleks (he/him/il/lui)> ah yeah i see so `systemctl restart fail2ban` "worked" because the failure only happens later and systemctl doesn't actually check that the service is still up a few second later etc
[22:49:20]
<Aleks (he/him/il/lui)> zgmerfpcklb
[22:50:51]
<tane> And the error for that is , Failed during configuration: Have not found any log file for freshrss jail
Can't I remove fresh rss which will remove that constraint?
[22:54:16]
<Aleks (he/him/il/lui)> https://github.com/YunoHost-Apps/freshrss_ynh/blob/master/scripts/install#L61 turns out there is a stupid typo, it should be /var/log/nginx/$domain-access.log here -_-
[22:54:17]
<Aleks (he/him/il/lui)> zzzzz
[22:54:41]
<Aleks (he/him/il/lui)> soooooooooooo...
[22:54:49]
<Aleks (he/him/il/lui)> yeah let's remove the stupid fail2ban conf snippet for now
[22:54:59]
<Aleks (he/him/il/lui)> using `rm /etc/fail2ban/jail.d/freshrss.conf`
[22:56:02]
<Aleks (he/him/il/lui)> and then `systemctl restart fail2ban`
[22:56:03]
<Aleks (he/him/il/lui)> and then `systemctl status fail2ban` should show the service is happy and running
[22:56:43]
<tane> Active running
[22:58:18]
<tane> Was the error what made freshrss check permissions twice in the logs?
[22:58:48]
<Aleks (he/him/il/lui)> so that fixes the fail2ban issue but searxng's failure is unrelated ... can you share the output of `ls -ld /etc/uwsgi/apps-available/` ?
[22:58:49]
<Aleks (he/him/il/lui)> "check permissions twice" ?
[22:59:29]
<tane> No such directory
[23:00:20]
<tane> Sorry, create permissions twice.
-Update accesses for permission 'freshrss'
-Create permission 'freshrss'
-Create permission 'freshrss'
-Update URL related to permission 'freshrss'
The second sublog has uhoh's literally.
https://paste.yunohost.org/raw/ifuyanukaf
[23:00:57]
<Aleks (he/him/il/lui)> ah yeah nevermind that it's just when creating permissions
[23:01:17]
<Aleks (he/him/il/lui)> we could get rid of this warning maybe but it's not trivial but in the current context it's expected
[23:02:35]
<Aleks (he/him/il/lui)> hence the `(Maybe we're in the process or deleting the perm for this app...)`
[23:02:35]
<Aleks (he/him/il/lui)> it's missing "creating " in front of "or deleting"
[23:02:36]
<Aleks (he/him/il/lui)> anyway
[23:03:02]
<tane> There is not /etc/uwsgi directory either. I have to go to bed and I am probably not going to use searngx anymore as it is very annoying when it goes down. TY
[23:04:28]
<Aleks (he/him/il/lui)> hmokay not clear to me why our test didn't find this but it looks like a bug in the restore process of this app too, i don't have any quickfix
[23:04:29]
<Aleks (he/him/il/lui)> gudnight
[23:05:03]
<tane> I will leave it in this state and come back on Friday if you want to look further.
[23:05:21]
<Aleks (he/him/il/lui)> restoring the other apps should work now that fail2ban is back online