asheesh changed the topic of #sandstorm to: Welcome to #sandstorm: home of all things sandstorm.io. Say hi! | Channel glossary: "i,i" means "I have no point, I just want to say". b == thumbs up. | Public logs at https://botbot.me/freenode/sandstorm/ & http://logbot.g0v.tw/channel/sandstorm/today
jadewang has quit [Remote host closed the connection]
jemc has quit [Ping timeout: 260 seconds]
<digitalcircuit> Thanks asheesh; TIL too :)
ocdtrekkie has quit [Remote host closed the connection]
aldeka has quit [Remote host closed the connection]
ocdtrekkie has joined #sandstorm
aldeka has joined #sandstorm
<asheesh> Tuxick: Are you == https://github.com/tuxick ?
<asheesh> I want to ping you on a GitHub issue but wasn't sure how to do that.
<asheesh> I will tentatively assume yes unless told otherwise, but keep me posted.
mnutt_ has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
mnutt_ has joined #sandstorm
frigginglorious has quit [Quit: frigginglorious]
mnutt_ has quit [Ping timeout: 246 seconds]
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 244 seconds]
frigginglorious has joined #sandstorm
jemc has joined #sandstorm
jadewang has joined #sandstorm
mnutt_ has joined #sandstorm
frigginglorious has quit [Quit: frigginglorious]
frigginglorious has joined #sandstorm
jdenz has joined #sandstorm
<jdenz> Hi all. So, I think I have SMTP setup correctly as I'm able to sign into my sandstorm self-hosted instance via email. I'm guessing that's an indication that the SMTP settings are correct. Am I also supposed to be getting email notifications from apps or is there something else I need to configure? Thanks!
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
kentonv has joined #sandstorm
<jdenz> An example of what I'm asking about is receiving email notifications from Rocket Chat. I added my SMTP settings within the app and attempted to click the "Send A Test Mail to My User" button, but didn't get any dialogue nor did I receive any email.
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
chabes has joined #sandstorm
<zarvox> Hi jdenz! Right now Rocket Chat doesn't send email on Sandstorm. It needs some patches to send email through Sandstorm, and we recognize that email support is more at "feature preview" maturity than totally polished.
<zarvox> But it sounds like you have SMTP configured sanely, if you were able to get your login email. :)
<zarvox> Also, Kenton is working on the notifications API, which should help close that feature gap.
<jdenz> Ok, thanks. Does this apply to every app right now? Two others I'd like email notifications from are Gogs and Wekan.
<zarvox> I think that with the exception of Roundcube, no app implements Sandstorm email integration.
<asheesh> Oh yay, hi jdenz, it's always a pleasure to see you here.
<jdenz> Cool. Thanks.
kentonv has quit [Read error: Connection timed out]
<jdenz> Also, thanks for the info @zarvox.
kentonv has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
kentonv has quit [Read error: Connection timed out]
kentonv has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jdenz has left #sandstorm [#sandstorm]
jadewang has joined #sandstorm
mnutt_ has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
kentonv has quit [Read error: Connection timed out]
kentonv has joined #sandstorm
jadewang has quit [Remote host closed the connection]
aldeka has quit [Remote host closed the connection]
ocdtrekkie has quit [Remote host closed the connection]
aldeka has joined #sandstorm
ocdtrekkie has joined #sandstorm
c-mart has joined #sandstorm
decipherstatic has quit [Ping timeout: 250 seconds]
rgrinberg has quit [Ping timeout: 260 seconds]
chabes has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
frigginglorious has quit [Quit: frigginglorious]
frigginglorious has joined #sandstorm
kentonv has quit [Read error: Connection timed out]
kentonv has joined #sandstorm
c-mart has quit [Quit: c-mart]
decipherstatic has joined #sandstorm
tierce has quit [Ping timeout: 276 seconds]
frigginglorious has quit [Ping timeout: 276 seconds]
jemc has quit [Ping timeout: 276 seconds]
frigginglorious has joined #sandstorm
jemc has joined #sandstorm
raoulzecat has joined #sandstorm
frigginglorious has quit [Ping timeout: 250 seconds]
raoulzecat has quit [Ping timeout: 276 seconds]
frankier has quit [Ping timeout: 244 seconds]
kentonv has quit [Read error: Connection timed out]
kentonv has joined #sandstorm
jemc has quit [Ping timeout: 260 seconds]
jadewang has joined #sandstorm
kentonv has quit [Read error: Connection timed out]
kentonv has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
raoulzecat has joined #sandstorm
kentonv has quit [Read error: Connection timed out]
kentonv has joined #sandstorm
raoulzecat has quit [Ping timeout: 276 seconds]
aldeka has quit [Remote host closed the connection]
ocdtrekkie has quit [Remote host closed the connection]
aldeka has joined #sandstorm
ocdtrekkie has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
kentonv has quit [Read error: Connection timed out]
kentonv has joined #sandstorm
raoulzecat has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
raoulzecat has quit [Ping timeout: 276 seconds]
raoulzecat has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
kentonv has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
kentonv has joined #sandstorm
<eternaleye> If a library is written so as to expose a Cap'n Proto RPC endpoint as its API, is there an easy way to 1.) hook it into the dependent program's event loop and 2.) have performing RPCs on it be close to native function call performance (pass by reference, etc) without jumping through manual hoops (akin to capnp-ffi)?
davidar has joined #sandstorm
raoulzecat has quit [Ping timeout: 260 seconds]
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
raoulzecat has joined #sandstorm
raoulzecat has quit [Ping timeout: 244 seconds]
frankier has joined #sandstorm
raoulzecat has joined #sandstorm
<Tuxick> asheesh: yes that's me
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
frankier has quit [Ping timeout: 260 seconds]
frankier has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
kentonv has quit [Read error: Connection timed out]
kentonv has joined #sandstorm
aldeka has quit [Remote host closed the connection]
ocdtrekkie has quit [Remote host closed the connection]
aldeka has joined #sandstorm
ocdtrekkie has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
rgrinberg has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
jemc has joined #sandstorm
frigginglorious has joined #sandstorm
frankier has quit [Ping timeout: 252 seconds]
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
kentonv has quit [Read error: Connection timed out]
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
frankier has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
mnutt_ has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
rgrinberg has quit [Ping timeout: 244 seconds]
frigginglorious_ has joined #sandstorm
frigginglorious has quit [Read error: Connection reset by peer]
frigginglorious_ is now known as frigginglorious
rgrinberg has joined #sandstorm
rgrinberg has quit [Client Quit]
rgrinberg has joined #sandstorm
rgrinberg has quit [Quit: WeeChat 1.5]
rgrinberg has joined #sandstorm
kentonv has joined #sandstorm
nwf has joined #sandstorm
jadewang has quit []
jadewang has joined #sandstorm
rgrinberg has quit [Quit: WeeChat 1.5]
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
chabes has joined #sandstorm
rgrinberg has joined #sandstorm
<asheesh> Howdy all.
<asheesh> If there's something I can help people with, feel free to let me know!
<asheesh> people e.g. you
chabes has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
nwf has quit [Read error: Connection reset by peer]
nwf has joined #sandstorm
chabes has joined #sandstorm
nwf has quit [Read error: Connection reset by peer]
nwf has joined #sandstorm
<Tuxick> well, any way to make browser understand to accept selfsigned wildcard cert ?
<Tuxick> since that seems to be my problem
<cmr> make a "CA" and add your "CA" certificate as a trusted root.
<dwrensha> In Firefox, navigate to Firefox -> Preferences -> Advanced -> Certificates -> View Certificates -> Authorities
kentonv has quit [Read error: Connection timed out]
mnutt_ has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
<dwrensha> In my experience, it's simpler if you use a WILDCARD_HOST such as "sandstorm-*.example.com", so that, with a BASE_URL of "https://sandstorm.example.com", a wildcard for "*.example.com" covers everything
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
<asheesh> Tuxick: https://github.com/sandstorm-io/sandstorm/blob/6d02f78ae242dda0f0055143fbd1bb2478515ace/docs/administering/self-signed.md "To use Sandstorm with a self-signed certificate, you must create a certificate authority (CA) certificate and import the CA certificate into all web browsers where you want the Sandstorm server to able to be viewed. Web browsers do not show a "OK to continue?" prompt for IFR
<asheesh> AMEs, and Sandstorm embeds IFRAMEs to subdomains of its main domain, so there is no warning that users can click through. Therefore you must add the CA certificate to web browsers."
<asheesh> https://docs.sandstorm.io/en/latest/administering/self-signed/ is the normal version of that doc; I was working on a clarification/revision, which is the github link.
<asheesh> aka "what cmr said"
<Tuxick> :)
<Tuxick> well at least in chromium i can't simply import rootCA.pem
mnutt_ has joined #sandstorm
<dwrensha> yeah, I seem to remember this being easier in Firefox
<Tuxick> k will see
<Tuxick> after dinner :)
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
<cmr> I wonder how quick Let's Encrypt is at issuing certs. Depending on how often Sandstorm makes subdomains, might be able to use that for self-hosted instances?
<asheesh> Currently that looks bad for the Sandstorm security model; some details at https://github.com/sandstorm-io/sandstorm/issues/1998
<cmr> asheesh: I mean doing an ACME negotation per-subdomain, as sandstorm makes them, not pre-allocating them
<cmr> Oh, the issue is *publishing* the hostname, ok.
<cmr> Yeah, fair enough
jadewang has quit [Remote host closed the connection]
rgrinberg has quit [Ping timeout: 260 seconds]
frankier has quit [Ping timeout: 244 seconds]
halindrome has quit [Ping timeout: 260 seconds]
halindrome has joined #sandstorm
jadewang has joined #sandstorm
<Tuxick> letsencrypt won't do wildcards, do they?
<cmr> no.
<Tuxick> not much use then :/
<cmr> you could issue a cert when a subdomain is created.
<cmr> but as paulproteus pointed out in the issue asheesh linked, it doesn't work.
<Tuxick> the selfest-xxx thing?
<cmr> I don't know what you mean.
mnutt_ has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
mnutt_ has joined #sandstorm
frigginglorious_ has joined #sandstorm
frigginglorious has quit [Ping timeout: 246 seconds]
frigginglorious_ is now known as frigginglorious
Mitar has quit [Ping timeout: 252 seconds]
Mitar has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
<cmr> Can external clients connect to grains over Cap'n Proto?
<cmr> using the raw API somehow?
<cmr> eg, a desktop client for a game server hosted on Cap'n Proto.
mnutt_ has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
rgrinberg has joined #sandstorm
<cmr> err, hosted on Sandstorm.
mnutt_ has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
kentonv has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
chrisbirk has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
<asheesh> Howdy cmr. Not at the moment, but you could tunnel that over a socket over the API host if you want.
chrisbirk has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
<zarvox> There's also IpInterface, though I suspect it will undergo future revision to better deal with port assignment and persistent listening
mnutt_ has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
<asheesh> Oh, yeah, see also src/sandstorm/ip.capnp's "interface TcpPort" I suppose.
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
kentonv has quit [Read error: Connection timed out]
mnutt_ has joined #sandstorm
tierce has joined #sandstorm
raoulzecat has quit [Ping timeout: 260 seconds]
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
Psy-Q has quit [Ping timeout: 240 seconds]
Psy-Q has joined #sandstorm
mnutt_ has quit [Quit: My Mac has gone to sleep. ZZZzzz…]
frigginglorious has quit [Quit: frigginglorious]
JimVFD has quit [Quit: Nettalk6 - www.ntalk.de]
sydney_untangle has quit [Ping timeout: 276 seconds]
sydney_untangle has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
anops has joined #sandstorm
<anops> hi
<anops> Is it possible to run a graphical desktop environment in sandstorm?
<anops> I would like to use Sandstorm like a HyperVisor
<asheesh> Howdy anops
<asheesh> It is probably possible, if you do something like run qemu within a grain, and run an operating system within there.
codebam has left #sandstorm ["WeeChat 1.5"]
<asheesh> You would probably have to use something like https://github.com/safl/jsVNC to connect to the grain.
<asheesh> It would probably be quite a bit of a hassle, but if it sounds like fun to you, then do please go ahead!
<asheesh> You'll need to make sure that whatever program you use for virtualizing, if you do virtualizing, doesn't use any syscalls that are blocked by the Sandstorm sandbox. See e.g. https://docs.sandstorm.io/en/latest/using/security-practices/
<anops> asheesh: What about spice? Couldn't that go through spice instead of javascript? http://www.spice-space.org/
<anops> That would also be a great way to connect to sandstorm instances remotely without a web-browser
<anops> or from within, because there are html5 and native plugins for spice for the browser too
<asheesh> Sure, just make sure you integrate with one of the ways that Sandstorm can handle access control to the grain.
JimVFD has joined #sandstorm
<asheesh> The two main ways are: (1) Grain URLs & sharing links, and (2) HTTP APIs.
<asheesh> You can work around those by listening on a TCP port instead, if you prefer, although we haven't smoothed that path yet.
<anops> asheesh: hmm ok stupid question I guess.. Can you run tensorflow in sandstorm? And how would that get virtualized/isolated from the host system?
jadewang has quit [Read error: Connection timed out]
kentonv has joined #sandstorm
jadewang has joined #sandstorm
<anops> I know how an LXC container isolated the application for such a task, but I don't know how or if sandstorm does that. Maybe I'm missinterpreting sandstorm for something it wasn't meant for? Can you help me clarify this :)
<anops> It would be awesome if I knew if Sandstorm does something similar to https://jujucharms.com/ or entirely different
frigginglorious has joined #sandstorm
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
prettyvanilla has quit [Read error: Connection reset by peer]
prettyvanilla has joined #sandstorm
<asheesh> anops: The packaging system for Sandstorm is different - for one thing, it emphasizes one container per document, which is a little intense, but has the upside that the "Share access" button makes sense.
<asheesh> You might find it instructive to work through https://docs.sandstorm.io/en/latest/vagrant-spk/packaging-tutorial/ (which I helped write, so I can help you answer questions within it).
jadewang has quit [Read error: Connection timed out]
jadewang has joined #sandstorm
<ocdtrekkie> asheesh: Is there any way maybe to warn people about packaging things with cdn dependencies? Ahead of just breaking them with client sandboxing?
<ocdtrekkie> Crazy thought and all.
<ocdtrekkie> I filed an issue on Brainstorm to ask the "fontawesome at a cdn" meteor package be swapped out for "fontawesome in a meteor package", the latter of which, is actually the official one.
<kentonv> ocdtrekkie: we probably won't just break existing packages, but rather flag them in the UI as old and non-confined.
<asheesh> It'd be "pretty easy" to warn packages via Content-Security-Policy-Report-Only.
<asheesh> We've considered doign that a handful of ways.