asheesh changed the topic of #sandstorm to: Welcome to #sandstorm: home of all things sandstorm.io. Say hi! | Channel glossary: "i,i" means "I have no point, I just want to say". b == thumbs up. | Public logs at https://botbot.me/freenode/sandstorm/ & http://logbot.g0v.tw/channel/sandstorm/today
jemc has quit [Ping timeout: 260 seconds]
KooBaa has quit [Remote host closed the connection]
jemc has joined #sandstorm
<asheesh> " A static front-end for public resources (profiles and statuses) is also provided.
<asheesh> "
jemc has quit [Ping timeout: 252 seconds]
fqtw__ is now known as fqtw
KooBaa has joined #sandstorm
jemc has joined #sandstorm
KooBaa has quit [Ping timeout: 260 seconds]
phoenix1796 has joined #sandstorm
wolcen has joined #sandstorm
<russruss> Hey, I’m curious if there’s a way for sandstorm to support something like a self-hosted irccloud, like https://www.irccloud.com - my understanding is that there are two problems - persistance, and access to the tcp port of the chat server (which maybe powerbox can handle now?). Am I wrong that the grain will be shut down at some point, so something like irccloud where it needs a persistant connection to another server wouldn
<russruss> work?
Jan\ has quit [Ping timeout: 245 seconds]
Jan\ has joined #sandstorm
aggelos_ has quit [Ping timeout: 265 seconds]
aggelos_ has joined #sandstorm
vvalt has joined #sandstorm
<vvalt> hi!
<vvalt> could someone plz point me to a way of installing/running sandstorm side-by-side with a regular apache2 webserver?
<vvalt> it seems I'm having multiple issues with port listeners etc.
<vvalt> running on Ubuntu server 16.04
<vvalt> many thanks
KooBaa has joined #sandstorm
<zarvox> vvalt: you can have apache2 own the primary port and reverse-proxy to Sandstorm: https://docs.sandstorm.io/en/latest/administering/reverse-proxy/
<zarvox> vvalt: if you want to use sandcats free wildcard SSL, you may need to go with sniproxy: https://xamar.sandcats.io/shared/Bqa9dftNbc1Ni06D-SgBdkFuM_iky8VHAlTw0Rk1lzN
<simonv3_> russruss: I think there’s stuff in place for keeping grains up now
<simonv3_> I know some of The Lounge people looked into hosting it on sandstorm but it was a bit too much effort
<simonv3_> Don’t quite remember what the issues where. I think they hang out in #thelounge if you want to ask.
KooBaa has quit [Ping timeout: 260 seconds]
<zarvox> powerbox-requesting IpNetwork will work on self-hosted Sandstorm and grant raw outgoing network access, which I think is what you'd need for The Lounge.
<zarvox> That said, you'd have to speak tcp-over-capnproto or implement a TCP bridge, which is a big ask for most developers.
<zarvox> While we do have wakelocks for keeping grains alive, they're not perfect - they don't persist across updates, and they don't autostart if the grain gets killed for any other reason. This may be perfectly acceptable, depending on your use case.
<russruss> zarvox: any documentation about wakelocks?
yeehi has joined #sandstorm
<zarvox> russruss: not really, but your grain's backend would call stayAwake on the SandstormApi interface: https://github.com/sandstorm-io/sandstorm/blob/61e6d8646e59f14dc61f8c059b3bfa063ca42e0e/src/sandstorm/grain.capnp#L101..L117
phoenix1796 has quit [Quit: Connection closed for inactivity]
<zarvox> russruss: an example of calling stayAwake() from Python lives at https://github.com/jparyani/sandstorm-test-app/blob/background-test/main.py
fqtw_ has joined #sandstorm
<vvalt> thanks zarvox!
fqtw has quit [Ping timeout: 268 seconds]
ptrvldz has quit [Remote host closed the connection]
fqtw_ is now known as fqtw
KooBaa has joined #sandstorm
vvalt has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
KooBaa has quit [Ping timeout: 252 seconds]
<isd> russruss: I'm using both of these mechanisms in my app: https://github.com/zenhack/irc-idler
<isd> Also, the comments in the capnp schema are pretty useful.
<isd> Some of the IpNetwork bits that app uses are wrapped by https://github.com/zenhack/go.sandstorm
<isd> If you're using a different language, they may still be useful as a reference
<isd> Though especially with the latter, be aware that it's not very well tested; It's been driven by the needs of irc-idler, so the other corners aren't as fleshed out.
<isd> Hope that's helpful
mnutt_ has joined #sandstorm
<mnutt_> I'm trying to publish some files with davros+sandstorm, and some of the filenames contain spaces. I would expect that I'd be able to access these, encoding the spaces as %20 but it doesn't seem to work. Is this expected?
jemc has quit [Ping timeout: 244 seconds]
<zarvox> mnutt_: huh, looks like neither the node process nor the supervisor handles urldecoding the path
<zarvox> mnutt_: would you like to file a bug, or should I? :)
<mnutt_> I can do it, thanks
<zarvox> just thinking out loud: it should probably be the supervisor that handles decoding the path before trying to open the file it serves
<mnutt_> I see where to add it (https://github.com/sandstorm-io/sandstorm/blob/master/src/sandstorm/supervisor.c++#L2102) but am guessing that we don't currently have any url encoding/decoding facilities in our existing c++ dependencies? (that I can find, anyway)
mrflos has joined #sandstorm
mnutt_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
KooBaa has joined #sandstorm
KooBaa has quit [Ping timeout: 268 seconds]
evernite- has quit [Quit: ZNC 1.6.1 - http://znc.in]
KooBaa has joined #sandstorm
KooBaa has quit [Ping timeout: 260 seconds]
yeehi has quit [Ping timeout: 268 seconds]
fqtw_ has joined #sandstorm
fqtw has quit [Ping timeout: 268 seconds]
fqtw__ has joined #sandstorm
fqtw_ has quit [Ping timeout: 244 seconds]
KooBaa has joined #sandstorm
KooBaa has quit [Ping timeout: 250 seconds]
gillisig1 is now known as gillisig2
gillisig has quit [Quit: ZNC - http://znc.in]
gillisig2 is now known as gillisig
KooBaa has joined #sandstorm
mrflos has quit [Ping timeout: 250 seconds]
KooBaa has quit [Ping timeout: 252 seconds]
demonimin has quit [Remote host closed the connection]
demonimin has joined #sandstorm
mrflos has joined #sandstorm
frigginglorious has joined #sandstorm
bavier has joined #sandstorm
<bavier> is there any way to get a gitlab link that doesn't require visitors to sign in?
<bavier> dwrensha: great, thanks for the link
mnutt_ has joined #sandstorm
xet7 has quit [Quit: Leaving]
wew has joined #sandstorm
KooBaa has joined #sandstorm
xet7 has joined #sandstorm
ThePurgingPanda has quit [Ping timeout: 260 seconds]
evernite- has joined #sandstorm
KooBaa has quit [Ping timeout: 250 seconds]
dwrensha has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
mnutt_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
dwrensha has joined #sandstorm
mnutt_ has joined #sandstorm
dwrensha has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
mnutt_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<mrdomino> hey, i'm noticing backup downloads getting truncated on wordpress grain backups on only one of my two sandstorm instances
<mrdomino> currently trying to determine if it's just backup size that's triggering it or if it's specific to wordpress
jemc has joined #sandstorm
<mrdomino> it's just backup size
fqtw__ has quit [Read error: Connection reset by peer]
fqtw__ has joined #sandstorm
fqtw_ has joined #sandstorm
fqtw__ has quit [Ping timeout: 250 seconds]
mnutt_ has joined #sandstorm
yeehi has joined #sandstorm
mynameis has joined #sandstorm
<mynameis> hello
<mynameis> I just set up an new sandstorm installation to try to rocket.chat application
<mynameis> now I want invite some friends to chat
dwrensha has joined #sandstorm
<mynameis> is it possible to chat without registration?
<mynameis> Because the always get the message: You must login to Sandstorm (on the top right) in order to access this chat.
wolcen has quit [Ping timeout: 256 seconds]
KooBaa has joined #sandstorm
KooBaa has quit [Ping timeout: 260 seconds]
dwrensha has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
jemc has quit [Quit: WeeChat 1.4]
jemc has joined #sandstorm
<mokomull> Oh, dang, mounting the things for the grain (notably: the fuse filesystem that'll be its /) happens in an already-unshared mountns, doesn't it?
<mokomull> (i.e. already unshared to mount /opt/sandstorm/sandstorm-version as a root) ... if I'm reading this right?
funwhilelost has joined #sandstorm
<zarvox> Yes.
dwrensha has joined #sandstorm
<zarvox> runServerMonitor() is the thing that launches the `spk dev` daemon; it calls enterChroot(true) at the top, which unshares the mountns
<mokomull> zarvox: Yeah, I had just a 30 minute break to read through that. Things were abstracted so I couldn't tell what runs where.
fqtw has joined #sandstorm
<mokomull> zarvox: I was slightly confused because FuseMount doesn't appear to actually be used in the "normal" case.
<zarvox> there's a bunch of unsharing; I probably couldn't tell you what things share what namespace offhand
<zarvox> Oh, yes, it's only needed for the dev mode tracing.
<zarvox> Which is why Ubuntu 16.04 is fine for use in production, if you're not attempting to run `spk dev`
<zarvox> (It's also a significant perf hit, so...another reason not to use it in the "normal" case)
fqtw_ has quit [Ping timeout: 250 seconds]
<mokomull> only in the spk dev --mount case is FuseMount class used
dwrensha has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
mynameis has quit []
<mokomull> zarvox: I was trying to figure out where mount(... "fuse" ...) was called. It's already unshared from the initial-ns afaict, whereas the user's "spk dev" instantiation actually processes the I/O, while running in the initial-ns.
<mokomull> zarvox: I also couldn't quite find any references to run-bundle.c++, yet.
<mokomull> I understand that code must run somehow, I just missed it.
<zarvox> run-bundle.c++ is the main entrypoint; see the KJ_MAIN macro on the last line
<zarvox> KJ_MAIN is defined in deps/capnproto/c++/src/kj/main.h , where deps/capnproto is https://github.com/sandstorm-io/capnproto/
<mokomull> the main entry point for which binary?
<zarvox> the swiss-army-knife-dispatches-on-argv-statically-linked "sandstorm" binary
<mokomull> ekam is Too Much Magic(tm) for the amount of coffee I've consumed yet.
<mokomull> ah, so that's what gets run when "spk dev" execs "sandstorm dev".
<mokomull> That helps my mental model.
<zarvox> It's all one binary. spk is a symlink to that same sandstorm binary.
<mokomull> *blink*
<zarvox> /usr/local/bin/spk -> /opt/sandstorm/sandstorm -> /opt/sandstorm/latest/sandstorm
<mokomull> ooh, that reminds me: I observed the result of automated re-exec'ed updates when I went back to my dev box. Neat!
<mokomull> Now just heard a presentaton about file capabilities in userns.
<zarvox> was that luto's "ambient capabilities" thing?
<mokomull> no, Serge Hallyn. "ambient capabilities" is a word hilighted in my paper notes already.
<zarvox> It is a contradiction in terms! But that's posix's fault for misnaming capabilities.
Telesight has joined #sandstorm
<mokomull> I think it was the runc folks that caused me to save off that word.
mrflos has quit [Ping timeout: 244 seconds]
mrflos has joined #sandstorm
dwrensha has joined #sandstorm
<dwrensha> does https://github.com/sandstorm-io/sandstorm/pull/2644 have any bearing on the ubuntu spk dev issue?
KooBaa has joined #sandstorm
<dwrensha> like, if you use the new sandboxing strategy, does FUSE work okay?
KooBaa has quit [Ping timeout: 252 seconds]
Telesight has quit [Quit: Leaving.]
dwrensha has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
dwrensha has joined #sandstorm
mnutt_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
mnutt_ has joined #sandstorm
dwrensha has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
<zarvox> Huh. I'd guess the answer is "yes", given that the issue was userns-specific.
dwrensha has joined #sandstorm
dwrensha has quit [Client Quit]
wolcen has joined #sandstorm
mnutt_ has quit [Ping timeout: 250 seconds]
dwrensha has joined #sandstorm
deviocitty has joined #sandstorm
<mokomull> zarvox: dwrensha: the issue was _pid_ns specific.
<mokomull> zarvox: Crap. I was looking at mount namespaces. I'm guessing the answer for pidns is similar, but ... I guess I'm going to double-check that work.
<mokomull> Ok, yeah, the sandstorm daemon is running in a non-initial pidns too. Darn.
<mokomull> Oh, huh. I think the I/O that makes it *immediately* fail with EIO is the read-the-manifest that happens like 10 lines after mounting FUSE in runDevSession -- that's why it *always* happens, rather than waiting for the application to do something.
dwrensha has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
<simonv3_> Hey, when I run `vagrant-spk dev` everything works fine, but when I run `vagrant-spk pack` I get an error:
<simonv3_> "No file found to satisfy requirement: getPublicId"
isd has quit [Remote host closed the connection]
<simonv3_> getPublicId is a file that does exist, and it hasn’t moved since last time I ran that command to package my app.
yeehi has quit [Ping timeout: 245 seconds]
afuentes has joined #sandstorm
<simonv3_> hmm, I think I hadn’t merged all the files properly, one sec
KooBaa has joined #sandstorm
zokier` has left #sandstorm [#sandstorm]
KooBaa has quit [Ping timeout: 250 seconds]
<simonv3_> Yep, nvm me.
mrflos has quit [Ping timeout: 256 seconds]
vvalt has joined #sandstorm
mnutt_ has joined #sandstorm
vvalt has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
mnutt_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
mnutt_ has joined #sandstorm
vvalt has joined #sandstorm
mnutt_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
mnutt_ has joined #sandstorm
frigginglorious has quit [Ping timeout: 244 seconds]
funwhilelost has quit [Quit: Sleepy...]
mnutt_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
mnutt_ has joined #sandstorm
KooBaa has joined #sandstorm
wolcen has quit [Ping timeout: 250 seconds]
dwrensha has joined #sandstorm
dwrensha has quit [Client Quit]
vvalt has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
yeehi has joined #sandstorm
wolcen has joined #sandstorm
frigginglorious has joined #sandstorm
afuentes has quit [Ping timeout: 260 seconds]
frigginglorious has quit [Quit: frigginglorious]
frigginglorious has joined #sandstorm
frigginglorious has quit [Client Quit]
KooBaa has quit [Remote host closed the connection]