NS8-Dolibarr App

oneitonitram · March 5, 2024, 5:55am

i think it was for security reasons

LayLow · March 5, 2024, 5:56am

Restore to have issues. Trying to restore a backup, replacing Dolibarr1. The restore, but I now there now is a Dolibarr2 instance (despite force replace Dolibarr1). This repeats itself when trying a second time, restore fails and there is a Dollibar3.

<7>dump_env() is deprecated and implemented as a no-op
restic restore latest --target . --exclude state/environment
Trying to pull Package restic · GitHub…
Getting image source signatures
Copying blob sha256:85c8a0c11f9af554b4c971ff20ba13733377aee70bdecb352874093bfa9acfc3
Copying blob sha256:82e94dfc42a5139b349717d0ef16203b01c32a0a5c61b3b3c034e6a329868fbf
Copying config sha256:3c3b20364e388f1ee2304949bee14c712413c1fa1ac1e4da1a9a9f6092690b74
Writing manifest to image destination
restoring <Snapshot b5f83ae7 of [/srv/state/smarthost.env /srv/volumes/dolidoc /srv/volumes/doliscripts /srv/volumes/dolicustom /srv/volumes/mysql-data /srv/state/environment] at 2024-03-05 05:48:27.598257802 +0000 UTC by root@srv1> to .
mkdir: created directory ‘initdb.d’
mv: cannot stat ‘dolibarr.sql’: No such file or directory

oneitonitram · March 5, 2024, 6:20am

Had you deleted the first instance prior to backup restore?

Does the new restored instance work?

LayLow · March 5, 2024, 6:22am

I don’t know for both instances (original and restored) are present with the same details…

So I do not know which instance is in effect when going to the FQDN in settings e.g. dolibarr.myserver.com

oneitonitram · March 5, 2024, 6:32am

try modify the restored instance with a different domain, and acccess it, inform if all the data has been restored

Also

Did you chose replace existing app during restore

LayLow · March 5, 2024, 7:30am

Yes, specifically as I mentioned before

oneitonitram · March 5, 2024, 9:15am

I have attempted to restore to existing app, and it seems to have hung, let me look into it and revert

kemboielvis22 · March 25, 2024, 4:23pm

@stephdl am trying to impliment LDAP in dolibarr but am having issues like:
agent.ldapproxy: domain mydomain.com should not be used by dolibarr6. Invoke agent.bind_user_domains([“mydomain.com”]) to fix this warning.

how can i solve this
The gituhbrepo: GitHub - geniusdynamics/ns8-dolibarr at ldap

stephdl · March 25, 2024, 4:39pm

this is an example of what you have to do

github.com/NethServer/ns8-dokuwiki

Add LDAP authentication

NethServer:main ← NethServer:LDAP

opened 03:10PM - 14 Mar 24 UTC

stephdl

+334 -56

This pull request adds LDAP authentication As a side note, we need to create …first the admin of internal authentication, else if we try to not authenticate after LDAP, we cannot login anymore refs: https://github.com/NethServer/dev/issues/6894 ![Capture d’écran du 2024-03-18 09-14-48](https://github.com/NethServer/ns8-dokuwiki/assets/3164851/11db25ef-4c60-451a-9a4c-697502f9ef35) ![Capture d’écran du 2024-03-18 09-15-30](https://github.com/NethServer/ns8-dokuwiki/assets/3164851/d366fa2d-a54e-406c-8ab5-c71d961f46d5) ![Capture d’écran du 2024-03-18 09-16-37](https://github.com/NethServer/ns8-dokuwiki/assets/3164851/51428046-a19b-491f-8745-a054df688b62) ![Capture d’écran du 2024-03-18 09-16-45](https://github.com/NethServer/ns8-dokuwiki/assets/3164851/e20be70b-335b-463e-b000-3ee24f3a120b) ![Capture d’écran du 2024-03-18 09-17-10](https://github.com/NethServer/ns8-dokuwiki/assets/3164851/9ec95f4d-7faa-4010-ae1e-6a50f43a8509) ![Capture d’écran du 2024-03-18 09-17-15](https://github.com/NethServer/ns8-dokuwiki/assets/3164851/8f85c928-4f33-4333-bd24-16dcefaccd41) ![Capture d’écran du 2024-03-18 09-17-37](https://github.com/NethServer/ns8-dokuwiki/assets/3164851/29ffaf7f-bb43-4503-b7a8-e41c3a114436)

github.com

NethServer/ns8-dokuwiki/blob/ca6c12ea963496f14fe9a1c270a6e30537b8146e/build-images.sh#L56


      
              nodebuilder-dokuwiki \
              sh -c "yarn install && yarn build"
          
          # Add imageroot directory to the container image
          buildah add "${container}" imageroot /imageroot
          buildah add "${container}" ui/dist /ui
          # Setup the entrypoint, ask to reserve one TCP port with the label and set a rootless container
          buildah config --entrypoint=/ \
              --label="org.nethserver.tcp-ports-demand=1" \
              --label="org.nethserver.rootfull=0" \
              --label="org.nethserver.authorizations=traefik@any:routeadm cluster:accountconsumer" \
              --label="org.nethserver.images=docker.io/bitnami/dokuwiki:20240206-debian-12" \
              "${container}"
          # Commit everything
          buildah commit "${container}" "${repobase}/${reponame}"
          
          images+=("${repobase}/${reponame}")
          
          # Setup CI when pushing to Github. 
          # Warning! docker::// protocol expects lowercase letters (,,)
          if [[ -n "${CI}" ]]; then

github.com

NethServer/ns8-dokuwiki/blob/ca6c12ea963496f14fe9a1c270a6e30537b8146e/imageroot/actions/configure-module/20configure#L45


      
          data = json.load(sys.stdin)
          
          # Setup default values
          wiki_name = data.get("wiki_name","Dokuwiki")
          username = data.get("username","admin")
          password = data.get("password","admin")
          email = data.get("email", "admin@example.org")
          full_name = data.get("user_full_name","Administrator")
          ldap_domain = data.get("ldap_domain", "")
          # bind user to the domain
          if ldap_domain:
              agent.bind_user_domains([ldap_domain])
          else:
              agent.bind_user_domains([])
          
          
          # Talk with agent using file descriptor.
          # Setup configuration from user input.
          agent.set_env("DOKUWIKI_WIKI_NAME", wiki_name)
          agent.set_env("DOKUWIKI_USERNAME", username)
          agent.set_env("DOKUWIKI_PASSWORD", password)

Unfortunately for what I recall (check my dolibarr version in my github) the ldap schema must be set inside the mysql database, it is a kind of holly sh…

kemboielvis22 · March 25, 2024, 4:52pm

I have added all of this

Also how can i get the ldap values such as bind password from the ldap provider and such. I think thats what i am missing

stephdl · March 25, 2024, 4:54pm

github.com

NethServer/ns8-dokuwiki/blob/main/imageroot/bin/discover-ldap

#!/usr/bin/env python3

#
# Copyright (C) 2024 Nethesis S.r.l.
# SPDX-License-Identifier: GPL-3.0-or-later
#

#
# Find settings for LDAP service
#

import os
import agent
from agent.ldapproxy import Ldapproxy

udomname = os.environ.get('LDAP_DOMAIN','')

try:
    odom = Ldapproxy().get_domain(udomname)
    'host' in odom # Throw exception if odom is None

This file has been truncated. show original

kemboielvis22 · March 25, 2024, 5:02pm

Okay understood
Also is there a command to see the contents inside a .env file

kemboielvis22 · March 26, 2024, 12:33am

@stephdl how can i solve this error

stephdl · March 26, 2024, 6:41am

Do not use the 127.0.0.1 but the special ip 10.0.2.2

kemboielvis22 · March 26, 2024, 3:31pm

Okay let me try

kemboielvis22 · March 27, 2024, 12:41pm

Has refused to connect

stephdl · March 27, 2024, 12:42pm

Show me the code

kemboielvis22 · March 27, 2024, 12:51pm

github.com

geniusdynamics/ns8-dolibarr/blob/ldap/imageroot/systemd/user/dolibarr-app.service

#
# Copyright (C) 2022 Nethesis S.r.l.
# SPDX-License-Identifier: GPL-3.0-or-later
#

[Unit]
Description=Podman  dolibarr-app.service
BindsTo=dolibarr.service
After=dolibarr.service mariadb-app.service

[Service]
Environment=PODMAN_SYSTEMD_UNIT=%n
EnvironmentFile=%S/state/environment
EnvironmentFile=-%S/state/smarthost.env
EnvironmentFile=-%S/state/discovery_ldap.env
WorkingDirectory=%S/state
Restart=always
TimeoutStopSec=70
ExecStartPre=/bin/mkdir -p config
ExecStartPre=/bin/rm -f %t/dolibarr-app.pid %t/dolibarr-app.ctr-id

This file has been truncated. show original

stephdl · March 27, 2024, 1:35pm

github.com

NethServer/ns8-dokuwiki/blob/main/imageroot/systemd/user/dokuwiki.service#L29


      
          ExecStartPre=/bin/rm -f %t/dokuwiki.pid %t/dokuwiki.ctr-id
          # Podman should bind only to 127.0.0.1:TCP_PORT
          # Data are persistend inside dokuwiki-data volume
          ExecStart=/usr/bin/podman run --conmon-pidfile %t/dokuwiki.pid \
              --cidfile %t/dokuwiki.ctr-id \
              --cgroups=no-conmon \
              --replace --name dokuwiki -d \
              --env-file=%S/state/environment \
              --publish 127.0.0.1:${TCP_PORT}:8080 \
              --volume dokuwiki-data:/bitnami/dokuwiki:z \
              --network=slirp4netns:allow_host_loopback=true \
              --add-host=accountprovider:10.0.2.2 \
              ${DOKUWIKI_IMAGE}
          ExecStartPost=/usr/local/bin/runagent wait-after-boot
          ExecStartPost=podman cp ./dokuwiki-config/local.protected.php dokuwiki:/bitnami/dokuwiki/conf/local.protected.php
          ExecStartPost=podman cp ./dokuwiki-config/plugins.local.php dokuwiki:/bitnami/dokuwiki/conf/plugins.local.php
          ExecStop=/usr/bin/podman stop --ignore --cidfile %t/dokuwiki.ctr-id -t 10
          ExecStopPost=/usr/bin/podman rm --ignore -f --cidfile %t/dokuwiki.ctr-id
          PIDFile=%t/dokuwiki.pid
          Type=forking

you miss something inside the pod systemd service, you could add the host definition but it is not a mandatory

kemboielvis22 · March 27, 2024, 1:42pm

Okay
Anything else you have noticed