00:03 <losingkeys> hey sandstormers! (not sure what the collective noun is :). I'm trying to port an app to sandstorm (https://git.zx2c4.com/cgit/) and am following the docs, and looking at https://github.com/dwrensha/gitlab-sandstorm and https://github.com/cem/gogs-sandstorm. I'm currently stuck. Where should I get the source to build from? The other repos I found seem to assume they're just in the source directory. How'd they get there?

00:21 <asheesh> Hi losingkeys

00:21 <asheesh> I'm mostly AFK right now but the basic summary is:

00:21 <asheesh> - Fork the upstream repo

00:21 <asheesh> - Use the 'vagrant-spk' tooling to add a .sandstorm/ directory, per https://docs.sandstorm.io/en/latest/vagrant-spk/packaging-tutorial/

00:22 <asheesh> - Do this in your own fork so that you have control and can fiddle with upstream source as needed, if needed

00:22 <asheesh> - Eventually, if you are interested, work with upstream to get your .sandstorm/ directory + any changes you made into their repo

00:26 <isd> If upstream doesn't require much in the way of modification, https://github.com/dwrensha/gitweb-sandstorm might be a better starting point; most stuff is gotten just by installing the upstream software, and it just has the custom bits in the repo.

00:26 <isd> Also, sandcats is a common collective noun, but I'm not picky

00:27 <losingkeys> ahh ok. I was confused because https://github.com/cem/gogs-sandstorm and https://github.com/dwrensha/gitlab-sandstorm don't seem to be in forks of their upstream repos

00:29 <losingkeys> how do those projects get the source to build their sandstorm apps? it's not in a submodule... is the sandstorm part just cloned, then copied into another repo?

00:29 <losingkeys> s/copied/its contents' copied/

00:29 <losingkeys> also some of those repos have vagratant files... doesn't look like something I need, right?

00:30 <losingkeys> also thanks for your help so far :). I'm still poking. It looks like I'll need a custom screen w/info about downloading/pushing to the repo, and to hook into sandstorm permissions for ro/rw access, but other than that I'm close

00:32 <isd> losingkeys: read up on vagrant-spk; should shed some light on the boilerplate bits in there. See aslo: https://docs.sandstorm.io/en/latest/vagrant-spk/packaging-tutorial/

00:33 <isd> re: gogs, the makefile seems to fetch & build the executable.

00:36 <isd> But yeah, read the tutorial, then inspect .sandstorm/setup.sh, .sandstorm/build.sh and friends for examples.

00:45 <losingkeys> sorry-- wifi sucks. working on that makefile now

01:06 <isd> Going afk; later.

03:06 <liam> I did a bit of research into live streaming. It looks like there's no way out of using RTMP -- even using HFS, it still needs a source stream coming in over RTMP. Problem is, RTMP is not http (port 1935). which means sanstorm streaming is pretty much DOA :(

03:24 <asheesh> liam: You *could* do what https://github.com/jparyani/mumble-server-sandstorm does, which is to request the ability to listen on an honest-to-goodness TCP port.

03:24 <liam> but oasis?

03:24 <asheesh> Yeah, no dice on Oasis there.

03:25 <liam> Is that request done through capnp?

03:25 <asheesh> Depends on your perspective.

03:25 <asheesh> The request for the authority to listen on TCP is done via window.postMessage().

03:26 <asheesh> The _use_ of the TCP socket is done via capnp.

03:27 <liam> Why is this mumble port not on the app market?

03:27 <liam> Did the person never publish it, or is it some oasis restriction?

03:29 <asheesh> Person never published

09:47 <Svulltopp> Hello Sandstorm :-)

09:51 <Svulltopp> I have installed Sandstorm on a Ubuntu 16.04 digitalocean droplet, using the address mydomain.tld:6080. I could not get it to work by installing with root domain only, I had to accept the default suggestion from the install script (http://mydomain.tld:6080). Installation is now working well it seems, but I find it a bit ugly that I have to use the 6080 port in the url's. What do I have to do in order to make the installation use the rootdomain

09:51 <Svulltopp> only (default port 80)?

09:55 <Tryum_> Svulltopp: you have to edit sandstorm.conf there you have PORT and HTTPS_PORT

09:56 <Tryum_> to configure http and https ports

09:58 <Svulltopp> @Tryum_ Thank you, I will try that.

10:03 <Svulltopp> It worked :-)

10:07 <Svulltopp> When I add other user, I whish them to only access my own applications/grains, I dont' want them to be able to install their own grains. Example Rocket Chat, I want the other users to participate in my Rocket Chat application, I don't want them to be able to install their own Rocket chats. Am I misunderstanding something about what a "collaborator" is? I thought I could install a lot of useful apps, then get a userbase to use them as I have set

10:07 <Svulltopp> them up, instead of becoming a "host" for these users own apps

17:35 <asheesh> Svulltopp: Hi!

17:36 <asheesh> Right now, you'd have to send those people sharing links, and when they redeem them, they can become a Visitor when they log in.

17:36 <asheesh> See also https://docs.sandstorm.io/en/latest/administering/guide/#accounts-authentication-and-access-control

19:03 <Svulltopp> asheesh thank you, I did find that document while doing some required reading :-) I like Sandstorm, but a steep learningcurve, even if it is supposed to be easy. (I am not a system administrator, so have a lot to learn) ;.(

19:24 <asheesh> Gotcha. Svulltopp fwiw we're often blind to what is hard, so thank you and anything you can share would help us out. It also sounds like "I want to grant other people access to a bunch of things at once" is a flow we should be optimizing for.

19:25 <zarvox> Theoretically that's supported by the collections app; in practice, that may still be hard to discover.

19:28 <Svulltopp> I have a homeserver running Owncloud on https. While doing some testing on the DigitalOcean droplet I found it difficult to make Sandstorm coexist with a separate virtual host. So that will be my biggest challenge, how to get Sandstorm running alongside my Owncloud at the homeserver. I will have to do some more testing and reading, and then come back with more questions :-)

19:30 <Svulltopp> proxys sharing port 80, and ssl certificates will be the biggest challenge. I need to run my own domainname, can not run *.sandstorm.io

20:40 <JonTheNiceGuy[m]> @svulltopp take a look at sslh which will do transparent TLS forwarding.

21:03 <Svulltopp> @JonTheNiceGuy thank you, it does look complicated though, I don't understand what it is used for. Phew...have a lot to learn :-)

21:07 <Svulltopp> is it possible to create a permanent subdomain for...let say Rocket Chat (for public access), like chat.mysandstorm.tld? If I create CNAME record for the domain like "chat", what should I put in the corresponding hostname field to have this subdomain permanently link to Rocket Chat?

21:10 <Svulltopp> chat.mysandstorm.tld looks better than http://mysandstorm.tld/shared/FgAj8thg1K3hWEzsqkaqCIMzfaqwpbiO5hZTJ3S6GZ2

21:32 <Svulltopp> Also, I wonder if it is possible to install Sandstorm in virtual server software like Virtualmin/Webmin, let say on one of the virtual domains?

23:10 <ocdtrekkie> Svulltopp: There is discussion/work on allowing that in the near future.

23:12 <ocdtrekkie> https://groups.google.com/d/msg/sandstorm-dev/2IdZeijPTXk/6a2cDyX6AQAJ