OSE Staging Server Notes

From Open Source Ecology
Jump to: navigation, search

OSE Staging Server is used to test installs before they go into production.

OSE's staging server carries the staging site of Discourse.

To access:

  1. Connect via VPN. You need to install packages before you connect (sudo apt-get install openvpn openresolv openssl)
  2. Use Firefox
  3. Test if you're connected - if you are not, you get a 404 error at https://www.opensourceecology.org/is_staging

Try 5

After opening VPN.


sudo firecfg --clean

tmpDir=`mktemp -d`
tmpProfileDir="${tmpDir}/firefoxProfile"
mkdir -p "${tmpProfileDir}"

firejail --noprofile --whitelist="${tmpProfileDir}" --dns=10.241.189.1 firefox -no-remote -new-instance -profile "${tmpProfileDir}" https://www.opensourceecology.org

Then go to discourse.opensourceecology.org

Try 4

Try4.png

Try 3

Tried it on another computer, installed firejail. See screenshot of terminals with  VPN connection, firejail running - and firefox. Firefox does not load any websites. Only when I quit firejail do websites begin loading.

Try3.png

Try 2

MA

> setting DoH manually in Firefox

Our VPN DNS server doesn't support DoH, that's why. There's no way to set DNS in Firefox other than DoH; that's why I recommended firejail.

> Firejail didn't install

The output suggests there's some conflict with python related to your freecad install. Maybe try it on a system that you haven't installed freecad on.

Or try to run `apt-get -f install` as it is suggesting you to do..

> How did we make it update when we did it over the phone?

I'm assuming by "over the phone" you mean our last meeting when I was in Bangalore (connecting to the VPN over the phone hasn't been tested).

On our last call, we updated your DNS by changing it for the entire system in /etc/resolv.conf. But doing that promptly caused you to drop the call and you had to reboot to fix the DNS on your system. This is why I recommend firejail. But if you can't get firejail to work, then you can just do that. It's documented on the wiki as well..

* https://wiki.opensourceecology.org/wiki/OSE_Staging_Server#Accessing_Staging_Websites

This is the command to change your whole systems' DNS; I recommend firejail instead, howoever. `firejail` is safer in many ways.

 echo "nameserver 10.241.189.1" | sudo tee /etc/resolv.conf

MJ

Change attempt for DNS.

Tried using method at https://www.zdnet.com/article/how-to-enable-dns-over-https-doh-in-firefox/ - and set DNS over HTTP to custom value 10.241.189.1

Restarted Firefox.

https://www.opensourceecology.org/is_staging gives me a 404 error still.

This is after failed attempt to install firejail:

catarina@Computer:~$ sudo apt-get install firejail Reading package lists... Done Building dependency tree Reading state information... Done You might want to run 'apt-get -f install' to correct these: The following packages have unmet dependencies:

libfreecad-daily-python3-0.19 : Depends: libocct-data-exchange-7.3 but it is not going to be installed
                                Depends: libocct-foundation-7.3 but it is not going to be installed
                                Depends: libocct-modeling-algorithms-7.3 but it is not going to be installed
                                Depends: libocct-modeling-data-7.3 but it is not going to be installed
                                Depends: libocct-ocaf-7.3 but it is not going to be installed
                                Depends: libocct-visualization-7.3 but it is not going to be installed
libfreecad-python3-0.18 : Depends: libocct-data-exchange-7.3 but it is not going to be installed
                          Depends: libocct-foundation-7.3 but it is not going to be installed
                          Depends: libocct-modeling-algorithms-7.3 but it is not going to be installed
                          Depends: libocct-modeling-data-7.3 but it is not going to be installed
                          Depends: libocct-ocaf-7.3 but it is not going to be installed
                          Depends: libocct-visualization-7.3 but it is not going to be installed

E: Unmet dependencies. Try 'apt-get -f install' with no packages (or specify a solution).

Communications

MJ Sez

I was able to access the VPN as instructed at https://wiki.opensourceecology.org/wiki/VPN#How_to_connect_to_the_VPN

However, https://www.opensourceecology.org/is_staging returns a 404 error, indicating that I am still on production.

What am I missing?

Can you also remind me the URL for Discourse on Staging? Should that be public info on the wiki?

Marcin

Maltfield Sez

Did you update your DNS after connecting to the VPN? Try using firejail to force a new firefox window's DNS settings after connecting to the VPN. Using `firejail` has the added benefit of letting you access prod in one window and staging in another window (rather than forcing your entire system to staging).

 sudo apt-get install firejail
 firejail --dns=10.241.189.1 firefox

The discourse site is currently discourse.opensourceecology.org. But that's not written in stone yet. Other options are forum(s).opensourceecology.org, or discuss.opensourceecology.org, etc. Do you have a preference?

There's no privacy/security reasons not to make the URL public; it's safely protected behind the VPN. I just haven't added it yet, and we should probably decide what it _should_ be first.