<phildini>
yeah. My desire is to make django-sandstorm support every feature you expose via headers, so docs on "expected values" for those fields would be really helpful.
<phildini>
If you say so, my c (c++?) is real rusty.
<zarvox>
it is a comma-separated list of the .name values from the appropriate elements of bridgeConfig.viewInfo.permissions
<phildini>
Do people here think it's reasonable to say: if you want to use this django package to make sandstorm integration easier, you must define your admin permission the way we say?
<asheesh>
I think that's nearly a great idea. Alternatively you could parse the sandstorm-pkgdef.capnp.
<phildini>
Ew.
<asheesh>
Or, inversely, you could have a Django settings option that defines the name of the admin permission.
<asheesh>
SANDSTORM_ADMIN_PERMISSION = 'admin'
<phildini>
Yeah, that, I think.
<asheesh>
And then it could default to admin, even.
<asheesh>
And that way you can implement it as hard-coded now and the first time someone says YOU REALLY NEED TO SUPPORT A CUSTOM NAME then you can say "OK here's how you'd implement that on top of what exists now"
<asheesh>
I can report that as a bug and you can label it 'future' even.
<ckocagil>
heads up: vagrant-up causes rsync to throw up when it encounters a broken symlink
<asheesh>
ckocagil: Ick. I guess you've changed Vagrantfile in a vagrant-spk VM to use sync type of rsync?
<ckocagil>
asheesh: IIRC this is the default diy vagrantfile
<asheesh>
Fascinating. So why does rynsc get involved then?
<ckocagil>
no idea :)
<ckocagil>
I thought this was some new feature.
<asheesh>
hmmmmm.
<asheesh>
I will see if I can repro it tomorrow.
<zarvox>
Hmmm, that's surprising to me. I'd thought under Virtualbox you'd get vboxsf, and under libvirt you'd get 9p
<zarvox>
are you using virtualbox, libvirt, or something else here?
<ckocagil>
vbox
<zarvox>
Curious.
decipherstatic has quit [Ping timeout: 272 seconds]
<zarvox>
Wonder if for some reason the vboxsf driver failed to load in the guest, and vagrant fell back to rsync instead.
<zarvox>
The rsync provider is not good for us, because we need two-way sync to handle build stuff that gets written to the repo and copying the packed spk out and adding newly generated keys to the sandstorm keyring shared from the host
<ckocagil>
I see vboxsf failures after removing the symlinks
<ckocagil>
Hm. I guess I have the wrong vagrant box.
<zarvox>
hmmm, is rsync part of your setup.sh or something?
<ckocagil>
nope.
<zarvox>
"sandstorm/debian-jessie64" ?
<ckocagil>
"No guest additions were detected on the base box for this VM! Guest additions are required for forwarded ports, shared folders, host only networking, and more. If SSH fails on this machine, please install the guest additions and repackage the box to continue."
<luluganeta>
hey everyone, thank you for the wonder that is Sandstorm. Getting it to run has actually been a fun process, and it's just unreal to be able to use all these applications without the hassle of manual installation, it's a true godsend for lazy sysadmins like me
<luluganeta>
I do have one admin question: I already have Apache running on port 80 and 443 for Owncloud, so I can't have Sandstorm use those ports. It's running fine on port 6080 but it would be great to have HTTPS support. Is it possible to have SSL without using port 443?
<luluganeta>
oh sweet! Sorry to have missed that in the docs
<luluganeta>
I'll give it a go
<dwrensha>
note that our HTTPS docs are a bit outdated and inconsistent at the moment. I recently submitted a pull request to make them a bit less confusing. https://github.com/sandstorm-io/sandstorm/pull/1426
<luluganeta>
At Manufactura (our design studio) we really needed Etherpad, Ethercalc and Mediagoblin, and we're now switching everything over to Sandstorm on our server
<asheesh>
Perhaps you also needed Davros, just didn't know it!
<luluganeta>
We are already running OwnCloud, Davros is along the same lines right?
<asheesh>
Yeah. You can make your own decision about which you prefer; they are along the same lines.
<luluganeta>
I also really like the idea of running everything inside Sandstorm. But we had already spent a lot of time setting up OwnCloud, and it's running fine for us. Nevertheless there's a ton of useful stuff in Sandstorm we didn't know we'd need, like Rocket.Chat
<asheesh>
Great. (-:
<luluganeta>
So yes, we're really happy users, thanks again for all your endeavours
<asheesh>
So happy to hear it.
<asheesh>
Whatever else I can do, let me know.
<luluganeta>
Also, *great* docs, really like the unusually friendly but not condescending tone
<luluganeta>
and that the tone doesn't get in the way of conveying useful practical information
<asheesh>
Aww.
<asheesh>
I appreciate that. That's something I strive for.
<luluganeta>
that's a really hard balance to strike, imho :-)
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 256 seconds]
jon1012_ has quit [Ping timeout: 246 seconds]
rustyrazorblade has quit [Quit: rustyrazorblade]
simonv3 has joined #sandstorm
wolcen has quit [Ping timeout: 240 seconds]
bb010g has quit [Quit: Connection closed for inactivity]
notevil has joined #sandstorm
Guest96344 has quit [Ping timeout: 250 seconds]
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 276 seconds]
Guest93293 has joined #sandstorm
wolcen has joined #sandstorm
<digitalcircuit>
asheesh, luluganeta: HAProxy also works for SNI proxying, and though it's more complex than sniproxy to configure (I should put together a tutorial...), haproxy is included in the main Debian/Ubuntu repositories so you'll get security updates and whatnot via Apt, no need to track a Git repo and rebuild from source.
<luluganeta>
A tutorial would be grand :-)
xet7 has joined #sandstorm
<phildini>
I'm having serious trouble understanding the sandstorm-http-bridge stuff, especially re: roles and permissions in the capnp.
<phildini>
does what gets passed in the header the role or the permission?
rustyrazorblade has joined #sandstorm
<dwrensha>
phildini: the HTTP header contains the permissions of the current user
<phildini>
I see! and the "role" is what gets shown in the shell for adding new users?
<dwrensha>
permissions are what the app needs to decide what to do
<dwrensha>
right, roles dictate what the options are in the Share Access menu
<dwrensha>
each role has a set of permissions
<asheesh>
digitalcircuit: Yeah, the fact that is is complicated has scared me off from recommending it.
<asheesh>
But if there's a tutorial,that would be great!
<asheesh>
In other news, I have just presented a little bit to the first Berlin Sandstorm meetup group.
<asheesh>
It was a bit laggy. I hope they liked me.
wolcen has quit [Ping timeout: 260 seconds]
<phildini>
can someone tell me if this looks sane?
<blutux>
Hi everybody, Somebody can tell me if is it possible to configure a sandstorm grain to access on it without login (for a wiki in readonly)
<blutux>
?
<erikmaarten>
It's quite fair because the game doesn't really clearly say much about how to get the other side playing, but I don't have time right now to go through updating it (last time was on a different machine and it seems I have to get vagrant-spk etc working again)
<kentonv>
blutux: yes, use "share access" and then create a sharing link. People will be able to access the link without logging in.
<kentonv>
erikmaarten: yeah that's unfortunate. I'll add a review mentioning that there's no AI.
<erikmaarten>
thanks kentonv!
<blutux>
@kentonv thanks i will looking for this option for my apps :) it's exactly what I was looking for many apps in readonly mode. :)
<blutux>
good by :)
blutux has left #sandstorm [#sandstorm]
<kentonv>
erikmaarten: when you do get a chance to update it, note that it's now possible for the app to request that Sandstorm show the sharing dialog via a postMessage request. So you can have an in-app button to add another player, rather than try to convince the user to click "share access".
Guest61696 has joined #sandstorm
joshbuddy has joined #sandstorm
<erikmaarten>
kentonv: that's great, that will definitely help!
jadewang_ has quit [Remote host closed the connection]
jadewang has joined #sandstorm
<digitalcircuit>
Anyone else using the Groove Basin app, and if so, does the playback stop while listening to a long single track, such as a podcast? It seems like the Sandstorm supervisor isn't detecting that the grain is active when only existing connections are kept without new requests happening (e.g. playback controls).
<digitalcircuit>
Aiming to file a bug in the near future, just checking if it's a known issue first :)
<kentonv>
digitalcircuit: you are keeping Groovebasin open as a tab in the Sandstorm UI, right? If so it shouldn't be killed.
blutux has joined #sandstorm
<digitalcircuit>
kentonv: yes, though the Sandstorm browser tab may not have had focus. I'll test again now to be sure.
<kentonv>
how long does it take before it stops? Are we talking minutes, hours, ...?
blutux has quit [Client Quit]
<digitalcircuit>
That I'm not sure; I'll set up a test grain with an hour-long audio file (thunderstorm and rain) and check when it stops.
blutux has joined #sandstorm
<blutux>
hi, anybody could tell me if when you share a grain, is it possible to "rename" the link ? By example, if the link is hostname.sandcats.io/share/guebskdvfzjpqflvzs to rename it to hostname.sandcats.io/share/appname/doc1
<blutux>
And when you create a share link, how many times the link will stay available ?
<mrdomino>
asheesh: so in the example smtp config at https://docs.sandstorm.io/en/latest/administering/email/, i'm being told to use /etc/keys/my-ssl.key and so on for ssl config. do i want to make a self-signed key? can i use sandstorm's? should the docs be updated?
jadewang has quit [Read error: No route to host]
jadewang has joined #sandstorm
<mrdomino>
(we may have had this conversation already. if so, sorry. goldfish memory and no permanent irc logs.)
<digitalcircuit>
Hrm, Groove Basin is still working about 45m later. I'll keep investigating.
luluganeta has joined #sandstorm
xet7 has quit [Quit: Leaving]
jadewang has quit [Remote host closed the connection]
michael_s has joined #sandstorm
<asheesh>
blutux: No, not possible to rename it, alas.
<asheesh>
It should be eventually, though. It's a matter of time and getting other stuff fixed first.
<michael_s>
Hello - is there any kind of service outage or other problem today? I've been using an Etherpad instance as a workout log on Oasis for months without problems, but today it won't load.
<asheesh>
michael_s: Hmm! Let me see.
<asheesh>
Etherpad grains load OK for me. I wonder if refreshing in your browser does the trick.
<asheesh>
We do have some monitoring of this too, and it hasn't fired yet.
<michael_s>
I'll try another browser, maybe Firefox is doing something weird. But Firefox is loading my local backup copy in my local hosted sandcats instance just fine.
<asheesh>
mrdomino: re: SSL certs: For now, self-signed is OK (though yucky).
<asheesh>
It'd be possible to use the Sandstorm ones, except they're not in the right format.
<asheesh>
Yes the docs should be clarified. Please file a bug and/or fix the docs! I'm about to hop between locations (home -> coffee shop) but will attempt to look at that soon.
<michael_s>
Sorry to bother you, it must be a Firefox problem. Worked fine in Chrome (once I logged in to my Github so I could login to Oasis :D )
luluganeta has quit [Ping timeout: 240 seconds]
<asheesh>
It's weird though. It really shouldn't happen!
<notevil>
new firefox? Wasn't 44.0 just pushed out?
dwrensha has quit [Remote host closed the connection]
<michael_s>
It's probably a false alarm, I'm running Firefox Nightly on Elementary Linux (an Ubuntu 14.04 spinoff with a nice OS X styled desktop).
joshbuddy has joined #sandstorm
dwrensha has joined #sandstorm
<michael_s>
Not a mainstream setup. I respectfully suggest nobody dig into it unless a more common OS/browser combo has problems.
<michael_s>
Thanks anyway. Off to get the youngest kid from daycare. Bye.