TupambAdminOrg [2024.03]

4 months ago •

TupambAdminOrg [2024.03]
4 months ago •

Filtered word: nsfw

#friendica #fediadmin @Friendica Support @EDITion | EN

Thx @Tobias 👍,
added the respective links to the publication.
I guess there is nothing to add with respect to the difference between 2024.12 and 12-1, it's just installing 2024.12-1 instead of 2024.12 (?).

@Tobias

TupambAdminOrg [2024.03]

4 months ago •

¿from github?

On github it looks like 12-1 was released a day later (right now it states 29 days) than 12 (1 month), as if it is a fix, also it states:

nupplaphil [CI] Fix releaser

In the list of tags it looks like "older" or lesser in the hierarchy.

[as of now just edited the difference in the inicial post between github branch and anouncement post]

utopiArte

4 months ago •

yes that is the same code in Friendica

Learning/comprehension question @Tobias:
What does "in Friendica" mean?
The stable version 2024.12, in other words the github pull of 2024.12 even when the date says "1 month" like it if werent as upt o date than 12-1?

@Tobias

TupambAdminOrg [2024.03]

4 months ago •

In other words @Tobias, these are changes in files on github for github and are not transfered by a git pull, right?

(a like for verifying refrasing questions to asure that I got the comment right is suffice @ Tobi!)

@Tobias

utopiArte

4 months ago •

I understand that it's not relevant because it's an "auxiliar file".
👍

At the same time I do have to point out that you did two opposite staments, didn't you?

nothing that is used when Friendica is running on the web server.

But the files are part of the files that Friendica uses while running on the server.

🤔

…ᘛ⁐̤ᕐᐷ jesuisatire bitPickup

4 months ago •

Starting this announced updating cycle now.

Question:
Release notes and news forum announcement do not mention setting the site into maintenance mode by "going offline" stopping cron job:

1. If you had set up a worker cron job like this */10 * * * * cd /var/www/friendica; /usr/bin/php bin/worker.php run crontab -e and comment out this line.

and the following command:

2. Put your server into maintenance mode:
bin/console maintenance 1 "We are currently upgrading our system and will be back soon."

This is described for moving from one server to another in the helpers page:
https://forum.friendi.ca/help/Migrate

Shouldn't this be somehow be a more safe procedure?

Planning to do that right now ..

…ᘛ⁐̤ᕐᐷ jesuisatire bitPickup

4 months ago •

Problems using github update.

Trying to pull the update from 2023.05 to 2023.12 I get the message that the branch I'm trying to pull doesn't exist:
www-data@myservername:~/html$ git pull https://github.com/friendica/friendica/tree/2023.12
fatal: repository 'https://github.com/friendica/friendica/tree/2023.12/' not found

What am I doing wrong?

…ᘛ⁐̤ᕐᐷ jesuisatire bitPickup

4 months ago •

If you want to use a different branch than the stable one, you need to fetch and checkout the branch before your perform the git pull.

TupambAdminOrg [2024.03]

4 months ago •

Database structure update 1542 was successfully applied.

👍

TupambAdminOrg [2024.03]

4 months ago •

error notice: DefinitionCache/Serializer not writable

Serializer.php php line 298

2025-02-20T22:15:46Z WARNING app E_USER_WARNING: Directory /var/www/html/vendor/ezyang/htmlpurifier/library/HTMLPurifier/DefinitionCache/Serializer not writable.
Directory /var/www/html/vendor/ezyang/htmlpurifier/library/HTMLPurifier/DefinitionCache/Serializer not writable.
file
/var/www/html/vendor/ezyang/htmlpurifier/library/HTMLPurifier/DefinitionCache/Serializer.php
php line 298
error 512

Hypolite Petovan

4 months ago •

@TupambAdmin [2023.05] @Tobias @…ᘛ⁐̤ᕐᐷ jesuisatire bitPickup Please verify the ownership of these folders. You might have ran Composer as root, which would have made the folders in /vendor unable to modify by the web server user.

@…ᘛ⁐̤ᕐᐷ jesuisatire bitPickup @Tobias

Friendica Support reshared this.

utopiArte

4 months ago •

hypolite wrote:

Please verify the ownership of these folders.

vendor ownership

drwxr-xr-x 40 www-data www-data 4096 Feb 20 21:22 vendor
drwxr-xr-x 3 www-data www-data 4096 Feb 20 21:20 ezyang
drwxr-xr-x 3 root root 4096 Feb 20 21:20 htmlpurifier

-rw-r--r-- 1 root root   341 Nov 17  2023 CREDITS
-rw-r--r-- 1 root root 26456 Nov 17  2023 LICENSE
-rw-r--r-- 1 root root  1271 Nov 17  2023 README.md
-rw-r--r-- 1 root root     6 Nov 17  2023 VERSION
-rw-r--r-- 1 root root  1415 Nov 17  2023 composer.json
drwxr-xr-x 3 root root  4096 Feb 20 21:20 library

drwxr-xr-x 21 root root  4096 Feb 20 21:20 HTMLPurifier
-rw-r--r--  1 root root   274 Nov 17  2023 HTMLPurifier.auto.php
-rw-r--r--  1 root root   213 Nov 17  2023 HTMLPurifier.autoload-legacy.php
-rw-r--r--  1 root root   910 Nov 17  2023 HTMLPurifier.autoload.php
-rw-r--r--  1 root root   101 Nov 17  2023 HT

Hypolite Petovan likes this.

utopiArte

4 months ago •

Ownership, www-data and root related conversation from last year when the instalation was migrated to this VPS:
https://tupambae.org/display/0ac89072-1765-64c7-8419-cd5442334821

utopiArte

2023-11-27 16:44:52

Implications of access by the user www-data to all friendica folders

@Friendica Support
Hi there,
the friendica helpers page describes the installation process of friendica as follows:
/help/Install: wrote:
The Linux commands to clone the repository into a directory "mywebsite" would be
git clone https://github.com/friendica/friendica.git -b stable mywebsite
cd mywebsite
bin/composer.phar install --no-dev
Make sure the folder view/smarty3 exists and is writable by the webserver user, in this case www-data
mkdir -p view/smarty3
chown www-data:www-data view/smarty3
chmod 775 view/smarty3
Get the addons by going into your website folder.
cd mywebsite
Clone the addon repository (separately):
git clone https://github.com/friendica/friendica-addons.git -b stable addon
askubuntu.com: wrote:
What is the www-data user?
https://askubuntu.com/questions/873839/what-is-the-www-data-user
The web server has to be run under a specific user. That user must exist.
If it were run under root, then all the files would have to be accessible by root and the user would need to be root to access the files. With root being the owner, a compromised web server would have access to your entire system. By specifying a specific ID a compromised web server would only have full access to its files and not the entire server.
I guess this observation goes both ways, a compromised friendica instalation get's access to all the friendica folders if I choose to first create/activate the www-data user, than create the friendica installation folder structure, than git clone friendica, than create the smarty3 folder and ultimately do the git clone of the addon folder as described here:
https://tupambae.org/display/0ac89072-2065-5da2-9124-8b5839853793
The order in which the creation of www-data related folders in the above case is described makes all folders and files in the friendica directory belong to www-data.
In the friendica help description first comes the git-clone, than the the smarty3 folder part than the addon git-clone. Actually I guess that last part would make the addon folder belong to www-data too if I run one command after another. Is that intended?
I wonder if this could have some kind of security implications.
I guess www-data is somehow the friendica site and has permissions to do "what ever it wants" (-> "writable by the webserver user") with all the folders in the friendica directories if it's the owner of them.

@TupambAdmin [stable]

Database structure update 1557 was successfully applied.

👍

⇧