Sunday, July 14, 2024
support@conference.yunohost.org
July
Mon Tue Wed Thu Fri Sat Sun
1
2
3
4
5
6 7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
       
             

[07:51:12] <Buster Keaton> How to get rid of thie error -

E: Release file for http://deb.debian.org/debian/dists/bullseye-updates/InRelease is not valid yet (invalid for another 17h 0min 48s). Updates for this repository will not be applied.
[07:51:26] <Buster Keaton> it comes during sudo apt update
[07:52:10] <Buster Keaton> and also during installation of apps from the web gui
[07:52:35] <Buster Keaton> I checked the time, date and time is correct
[07:54:25] <Buster Keaton> sudo apt upgrade shows --

The following packages have been kept back:
pipewire pipewire-audio-client-libraries
0 upgraded, 0 newly installed, 0 to remove and 2 not upgraded.
[07:54:44] <Buster Keaton> this problem started after I added some repos for installing pipewire
[07:54:53] <Buster Keaton> and I am unable to remove those repos
[08:05:41] <Buster Keaton> i was able to delete the added repos
[08:06:04] <Buster Keaton> but it is a time issue, when i checked before the time was correct, but now it is not.
[08:09:42] <Buster Keaton> problem solved, uninstalled ntp, and installed systemd-timesyncd
[08:10:31] <Buster Keaton> But, I am still not able to use the thelounge command in the termninal
[08:10:44] <Buster Keaton> can someone please help me with that?
[09:23:29] <tituspijean> > <Buster Keaton> But, I am still not able to use the thelounge command in the termninal

Thelounge is installed from sources in YunoHost, as per https://github.com/thelounge/thelounge#running-from-source you need to replace `thelounge` by `node index`
[09:23:30] <tituspijean> I've created an issue suggesting the creation of an alias for it: https://github.com/YunoHost-Apps/thelounge_ynh/issues/69
[09:49:02] <Buster Keaton> > > <Buster Keaton> But, I am still not able to use the thelounge command in the termninal
>
> Thelounge is installed from sources in YunoHost, as per https://github.com/thelounge/thelounge#running-from-source you need to replace `thelounge` by `node index`
so node index after entering the thelounge shell is not working
[09:49:27] <Buster Keaton> oh wait it is working
[09:51:03] <Buster Keaton> i tried the add command to add user, that didnt worked
[09:52:47] <Buster Keaton> Thanks a ton tituspijean 🙂
[09:54:26] <tituspijean> > <Buster Keaton> i tried the add command to add user, that didnt worked

What is the output error?
[09:54:56] <tituspijean> Actually, since I am not a thelounge user, how is a new user supposed to use the app?
[09:55:03] <Buster Keaton> error: unknown command 'add'
[09:55:29] <Buster Keaton> node index add anyrandomname
[09:55:37] <Buster Keaton> that is the command I used
[09:56:33] <tituspijean> That's weird, `node index list` mentions the `add` command, but it is not listed in the help of `node index`
[09:56:35] <Buster Keaton> > Actually, since I am not a thelounge user, how is a new user supposed to use the app?
in Yunohost's case, it automatically creates the user. but normally one creates the user with the help of 'add' command
[09:57:02] <tituspijean> Then why do you need to manually create a user?
[09:57:15] <tituspijean> (I'm trying to understand all use cases)
[09:59:34] <Buster Keaton> In my case I dont need to actually. because only I will use this instance. I was using the install command before, before knowing about node index, and after knowing node index, i randomly used the add comannd just to check. but unluckily, that command is not there, hence I said above that node index is not working
[09:59:56] <Buster Keaton> if multiple users want to use thelounge then add command is useful
[10:06:34] <tituspijean> I think that's actually normal (though I could not find the documentation for it) that you cannot create users, since the app is configured to check the LDAP server to authenticate them
[10:07:12] <tituspijean> You can manually remove them since it will delete their internal config file, but it will get recreated upon next login
[10:07:32] <tituspijean> If you need more users, create them in the YunoHost webadmin
[11:00:45] <Buster Keaton> >> <Buster Keaton> But, I am still not able to use the thelounge command in the termninal
>
> Thelounge is installed from sources in YunoHost, as per https://github.com/thelounge/thelounge#running-from-source you need to replace `thelounge` by `node index`
Ok, understood. Thank you.
[11:01:13] <Buster Keaton> > If you need more users, create them in the YunoHost webadmin
So these users will be also available for other apps, right?
[11:02:36] <Buster Keaton> And i posted about all of ports in Diagnosis not reachable from outside. Is it safe to open them? I think i will open them in firewall.
[11:03:10] <Xan> > <Buster Keaton> > If you need more users, create them in the YunoHost webadmin
> So these users will be also available for other apps, right?

Yes, for the apps working with LDAP auth
[11:09:53] <Buster Keaton> >> <Buster Keaton> > If you need more users, create them in the YunoHost webadmin
>> So these users will be also available for other apps, right?
>
> Yes, for the apps working with LDAP auth
Oh I see
[11:18:47] <tituspijean> If you do not want these users to access user apps, there is a permissions system in YunoHost.
[11:18:47] <tituspijean> > <Buster Keaton> And i posted about all of ports in Diagnosis not reachable from outside. Is it safe to open them? I think i will open them in firewall.

If the Diagnosis requests them to be open, open them, yes.
[11:21:07] <Buster Keaton> When i enable UPNP in the firewall page, it gets disabled again.
[11:24:37] <tituspijean> It is buggy. Open them manually.
[11:24:53] <Buster Keaton> Oki
[11:31:06] <Buster Keaton> The External port and Internal Port will be the same port number right? And protocol will be both. This is in the router settings page.
[11:31:14] <tituspijean> Yes
[11:59:36] <Buster Keaton> > Yes
I forwarded port 22. Restarted both my device and router, but the diagnosis says that it is still closed.
[12:01:09] <tituspijean> ¯\_(ツ)_/¯ can you log in with SSH from an external connection? (Like tethering with your phone?)
[12:06:16] <Buster Keaton> No, I can't.
[12:06:34] <Buster Keaton> Do I need to enable 80 and 443 for that to work?
[12:19:38] <Xan> > <Buster Keaton> Do I need to enable 80 and 443 for that to work?

You can't make 2 process listening on only 1 port. So SSH can't work on ports 443 or 80 if Nginx is already using these ports.
[12:21:50] <Xan> Unfortunately, selfhosting also depends on ISP. If your ISP blocks the port 22, there is nothing you can do about it.
[12:35:30] <Xan> Other idea to eventually bypass ports blocking : working with IPv6 addresses. When IPv4 means 1 public IP address by customer (sometimes 1 IP address for several customers), IPv6 means 1 public IP address by device. It means no need to open ports on the router, but ISP can eventually block it too for safety : With IPv6 enabled, **every** connected device on your network (even your IP cameras if you have) can be exposed on the internet.
IPv6 can remove some walls, but it requires being careful and understanding aftermaths to avoid intrusions.
[12:40:03] <Xan> Your ISP can block these ports. In France, for example, some ISP are blocking these ports, no matter if the customer opens the ports in router settings...
[12:41:30] <Buster Keaton> Ohh i see.
[12:41:57] <Buster Keaton> I dont think i have an ipv6 address.
[12:42:14] <Buster Keaton> > Your ISP can block these ports. In France, for example, some ISP are blocking these ports, no matter if the customer opens the ports in router settings...
Must be this. :(
[12:42:36] <Buster Keaton> I will do some more investigation if possible.
[12:43:54] <Buster Keaton> > Other idea to eventually bypass ports blocking : working with IPv6 addresses. When IPv4 means 1 public IP address by customer (sometimes 1 IP address for several customers), IPv6 means 1 public IP address by device. It means no need to open ports on the router, but ISP can eventually block it too for safety : With IPv6 enabled, **every** connected device on your network (even your IP cameras if you have) can be exposed on the internet.
> IPv6 can remove some walls, but it requires being careful and understanding aftermaths to avoid intrusions.
Any other alternatives? I think cosmos os uss cloudflare tunneling or something. Not sure how that works.
[12:45:45] <Xan> > <Buster Keaton> > Your ISP can block these ports. In France, for example, some ISP are blocking these ports, no matter if the customer opens the ports in router settings...
> Must be this. :(

In France, I know that the port 25 (SMTP) is closed by default by the ISP "Free" and requires manual action on account panel. Some ISP are closing ports. They are doing it to avoid abuse requests management, I suppose.
[12:47:39] <Xan> > <Buster Keaton> I dont think i have an ipv6 address.

Your ISP can answer you about this. IPv6 is expanding around the world in response to the lack of available IPv4 addresses.
[12:51:29] <Buster Keaton> I will try to contact them.
[12:51:34] <Xan> > <Buster Keaton> > Other idea to eventually bypass ports blocking : working with IPv6 addresses. When IPv4 means 1 public IP address by customer (sometimes 1 IP address for several customers), IPv6 means 1 public IP address by device. It means no need to open ports on the router, but ISP can eventually block it too for safety : With IPv6 enabled, **every** connected device on your network (even your IP cameras if you have) can be exposed on the internet.
> > IPv6 can remove some walls, but it requires being careful and understanding aftermaths to avoid intrusions.
> Any other alternatives? I think cosmos os uss cloudflare tunneling or something. Not sure how that works.

In my opinion, another alternative is buying a VPS : For about 15$/month, you have your own virtual machine, with high availability and full open firewall. My VPS are hosted by Contabo (Germany). It works fine. Not exactly selfhosting, but you own your VPS and you're free to install what you want on it.
Maybe someone has another idea 🙂
[12:51:38] <Buster Keaton> Thanks for info xan.
[12:53:29] <Xan> > <Buster Keaton> Thanks for info xan.

You're welcome ! I hope it helped you 🙂
[12:54:03] <Buster Keaton> >> <Buster Keaton> > Other idea to eventually bypass ports blocking : working with IPv6 addresses. When IPv4 means 1 public IP address by customer (sometimes 1 IP address for several customers), IPv6 means 1 public IP address by device. It means no need to open ports on the router, but ISP can eventually block it too for safety : With IPv6 enabled, **every** connected device on your network (even your IP cameras if you have) can be exposed on the internet.
>> Any other alternatives? I think cosmos os uss cloudflare tunneling or something. Not sure how that works.
>
> In my opinion, another alternative is buying a VPS : For about 15$/month, you have your own virtual machine, with high availability and full open firewall. My VPS are hosted by Contabo (Germany). It works fine. Not exactly selfhosting, but you own your VPS and you're free to install what you want on it.
> Maybe someone has another idea 🙂
Great! Unfortunately i cant afford that much. Maybe in future. Hetzner is good and cheap i have heard. But one of my main purpose is to use my pi as storage server. Not a NAS, but simple backup solution with a help of external tb. VPS have limited space.
[12:54:16] <Buster Keaton> >> <Buster Keaton> Thanks for info xan.
>
> You're welcome ! I hope it helped you 🙂
Definitely :)
[14:36:27] <trendx> Hello,

I'm new to yunohost and new to linux.

I have been able to setup yunohost on a vps.

I'm getting messages about a high number of authentication failures.
And would like to connect via SSH keys and switch of password auth.

But whatever I try (according to tutorials) I can't get it to work.
My SSH client is MobaXterm on Windows 11.

Any help/tips on this subject would be appreciated.
[15:18:45] <Salamandar> Hmmm, what did you do ?
[15:19:23] <Salamandar> I mean it should work normally, just run `ssh copy-id -i <your key> <user>@<domain>` to add your computer's key to the authorized keys of your server
[15:25:30] <trendx> I did follow instructions but it gave an error.
Something like unexpected character.
My subdomain is like a.mydomain.com

I tried uploading the key manually --> is that a problem?
[15:49:47] <Salamandar> which errors ?
[15:49:52] <Salamandar> we want logs :)
[15:52:45] <yunohelper> Hi! To help us volunteers help you, read about <a href="https://yunohost.org/en/help-me">how to ask for help</a>.<br />Notably, if you are getting an error, share its <em>full</em> log by pasting here the link to the page created by the YunoPaste buttons.<br />Thank you for you patience, and thank you for using YunoHost!
[16:10:28] <Xan Surnamehere (xan.lol)> > <@am:am-networks.fr> In my opinion, another alternative is buying a VPS : For about 15$/month, you have your own virtual machine, with high availability and full open firewall. My VPS are hosted by Contabo (Germany). It works fine. Not exactly selfhosting, but you own your VPS and you're free to install what you want on it.
> Maybe someone has another idea 🙂

Omg I use Contabo too, but it's only ~$6/month
[16:30:33] <djangz> Hello, Bonjour
On my ovh vps I recently migrated to a new range. Since then, my yunohost updates page has been borked, here is the error message:
> Unable to update the cache of APT (Debian's package manager). Here is a dump of the sources.list lines, which might help identify problematic lines:
sources.list:deb http://deb.debian.org/debian bullseye main
sources.list:deb-src http://deb.debian.org/debian bullseye main
sources.list:deb http://security.debian.org/ bullseye/updates main
sources.list:deb-src http://security.debian.org/ bullseye/updates main
sources.list:deb http://deb.debian.org/debian bullseye-updates main
sources.list:deb-src http://deb.debian.org/debian bullseye-updates main
sources.list:deb http://deb.debian.org/debian bullseye-backports main
sources.list:deb-src http://deb.debian.org/debian bullseye-backports main
sources.list.d/yunohost.list:deb http://forge.yunohost.org/debian/ bullseye stable
sources.list.d/extra_php_version.list:deb https://packages.sury.org/php/ bullseye main

> While processing the action the server said:
Fetching available upgrades for system packages…
E: The repository 'http://security.debian.org bullseye/updates Release' does not have a Release file.

How could I fix this? Is there a ‘yunohost’ service or tools cdn to fix the lists? I still have ssh access!
[16:41:18] <trendx> Ok thnks I will try later again and see what precise errors it throws.
If I do that (on my ssh client) where will I find the logs ?
[16:48:00] <Salamandar> i meant just the exact output of the command
[16:55:56] <trendx> Ah ok ic.
😄 I can do that (later) 👌
[17:31:10] <djangz> > <@djungle:matrix.org> Hello, Bonjour
> On my ovh vps I recently migrated to a new range. Since then, my yunohost updates page has been borked, here is the error message:
> > Unable to update the cache of APT (Debian's package manager). Here is a dump of the sources.list lines, which might help identify problematic lines:
> sources.list:deb http://deb.debian.org/debian bullseye main
> sources.list:deb-src http://deb.debian.org/debian bullseye main
> sources.list:deb http://security.debian.org/ bullseye/updates main
> sources.list:deb-src http://security.debian.org/ bullseye/updates main
> sources.list:deb http://deb.debian.org/debian bullseye-updates main
> sources.list:deb-src http://deb.debian.org/debian bullseye-updates main
> sources.list:deb http://deb.debian.org/debian bullseye-backports main
> sources.list:deb-src http://deb.debian.org/debian bullseye-backports main
> sources.list.d/yunohost.list:deb http://forge.yunohost.org/debian/ bullseye stable
> sources.list.d/extra_php_version.list:deb https://packages.sury.org/php/ bullseye main
>
> > While processing the action the server said:
> Fetching available upgrades for system packages…
> E: The repository 'http://security.debian.org bullseye/updates Release' does not have a Release file.
>
> How could I fix this? Is there a ‘yunohost’ service or tools cdn to fix the lists? I still have ssh access!

Ok, confirming I’m still on bullseye
[18:16:28] <Buster Keaton> https://upload.movim.eu/files/88faa17c20b8dd280b696837ac6ad4ff6193f451/PMU6bTYdPKzf/4a7248f7-1b2f-4b2a-a692-ebd6b07934b2.png
[18:19:54] <tituspijean> Buster Keaton: either our pastebin service got disrupted (it works now, it seems), or you have connection issues. If you want to share the log again, find it in the webadmin, menu Tools > Logs, and click on the green button
[18:20:20] <Buster Keaton> Ok, trying again
[18:20:25] <tituspijean> I see this is immich, I have difficulties installing it on my server because the build takes a LOT of resources
[18:21:23] <Buster Keaton> https://paste.yunohost.org/raw/desejariqu
[18:21:31] <Buster Keaton> Oh ok
[18:31:09] <Buster Keaton> I forwarded the ports on the router, yet, not any of them are reachable! can ISP block all the ports?!
[18:32:37] <tituspijean> > <Buster Keaton> https://paste.yunohost.org/raw/desejariqu

"HTTPSConnectionPool(host='www.piwheels.org', port=443): Read timed out."

So it actually was the same connection issue. You may try again maybe?
[18:32:56] <Buster Keaton> I forwarded port 443 too
[18:33:11] <tituspijean> > <Buster Keaton> I forwarded the ports on the router, yet, not any of them are reachable! can ISP block all the ports?!

Are you sure you put the correct local IP address of your server?
[18:33:12] <Buster Keaton> but in the diagnosis, it says its not reachable
[18:33:26] <Buster Keaton> Yes
[18:43:08] <Buster Keaton> Have any of you faced problems connecting to Jellyfin server on Yunhost from an android phone?
[20:25:09] <Nadine> Hi,
I encounter the issue that whenever I'm connected to the internet with a VPN (ProtonVPN) I cannot reach my YNH server hosted on a VPS (neither the YNH portal nor any of the hosted apps). It seems like my server is blocking incoming requests from a VPN. How can I troubleshoot and fix this? Thanks 🙏
[20:52:06] <tufek> edit: (for report mode of mtr) would try `mtr -tCc 5 yourdomain.tld` with and without your vpn activated