What Are You Doing Right Now

[scottalanmiller]

NextCloud 11.0.3 update is available.

[JaredBusch]

Guess I cannot update..

[Kelly]

@RojoLoco said in What Are You Doing Right Now:

Man, I hate it when our staff in Hyderabad feels the need to call me. They can write english quite well, but speaking it tends to give them (and me) some trouble. Not sure why a simple email wouldn't suffice.

When my wife and I were there we were told that they conduct all their legal proceedings in English and we thought, great, we'll be able to understand what is going on. The reality is that they have their own version of English, and it is nigh incomprehensible on 2 hours of sleep.

[dafyre]

@scottalanmiller said in What Are You Doing Right Now:

NextCloud 11.0.3 update is available.

Update went fine for me.

[dafyre]

@JaredBusch said in What Are You Doing Right Now:

Guess I cannot update..

SELinux strikes again?

[dafyre]

Also, discovered a neat NextCloud addon called Deck. It's a Kanban type setup.

Cursory glance tells me it'll be right nice.

[JaredBusch]

@dafyre said in What Are You Doing Right Now:

@JaredBusch said in What Are You Doing Right Now:

Guess I cannot update..

SELinux strikes again?

nope.

but if you look at the list. I assume the problem was some of the original owncloud style hardening I did.

Some of the steps of my install process was to set varius ownership and folder/file permissions.

[root@bna-nc ~]# ls -lZ /var/www/html/nextcloud/
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 3rdparty
drwxr-x---. apache apache unconfined_u:object_r:httpd_sys_rw_content_t:s0 apps
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 AUTHORS
drwxr-xr-x. apache apache unconfined_u:object_r:httpd_sys_rw_content_t:s0 config
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 console.php
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 core
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 cron.php
lrwxrwxrwx. apache apache unconfined_u:object_r:httpd_sys_content_t:s0 data -> /home/nc_data
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 db_structure.xml
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 index.html
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 index.php
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 l10n
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 lib
-rwxr-xr-x. apache apache unconfined_u:object_r:httpd_sys_content_t:s0 occ
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 ocs
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 ocs-provider
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 public.php
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 remote.php
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 resources
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 robots.txt
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 settings
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 status.php
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 themes
drwxr-xr-x. apache apache unconfined_u:object_r:httpd_sys_rw_content_t:s0 updater
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 version.php

[JaredBusch]

first thing it errs on is the ocs folder..

drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 ocs

[wirestyle22]

@JaredBusch said in What Are You Doing Right Now:

@dafyre said in What Are You Doing Right Now:

@JaredBusch said in What Are You Doing Right Now:

Guess I cannot update..

SELinux strikes again?

nope.

but if you look at the list. I assume the problem was some of the original owncloud style hardening I did.

Some of the steps of my install process was to set varius ownership and folder/file permissions.

[root@bna-nc ~]# ls -lZ /var/www/html/nextcloud/
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 3rdparty
drwxr-x---. apache apache unconfined_u:object_r:httpd_sys_rw_content_t:s0 apps
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 AUTHORS
drwxr-xr-x. apache apache unconfined_u:object_r:httpd_sys_rw_content_t:s0 config
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 console.php
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 core
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 cron.php
lrwxrwxrwx. apache apache unconfined_u:object_r:httpd_sys_content_t:s0 data -> /home/nc_data
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 db_structure.xml
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 index.html
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 index.php
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 l10n
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 lib
-rwxr-xr-x. apache apache unconfined_u:object_r:httpd_sys_content_t:s0 occ
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 ocs
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 ocs-provider
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 public.php
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 remote.php
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 resources
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 robots.txt
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 settings
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 status.php
drwxr-x---. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 themes
drwxr-xr-x. apache apache unconfined_u:object_r:httpd_sys_rw_content_t:s0 updater
-rw-r-----. root   apache unconfined_u:object_r:httpd_sys_content_t:s0 version.php

what is ls -lZ? -Z is not a modifier listed in the man-pages

[JaredBusch]

@wirestyle22 shows the SELinux context

in mine. CentOS 7

[wirestyle22]

@JaredBusch said in What Are You Doing Right Now:

@wirestyle22 shows the SELinux context

in mine. CentOS 7

if you do rpm -qf $(man -w 2 chown) what is the output?

mine is: man-pages-3.53-5.el7.noarch

[JaredBusch]

And found the problem... FFS

Securing your install breaks the updater. Says it right in the guide.

https://docs.nextcloud.com/server/11/admin_manual/installation/installation_wizard.html#strong-perms-label

[JaredBusch]

What a pain in the ass.
https://docs.nextcloud.com/server/11/admin_manual/maintenance/update.html#set-updating-permissions-label

[dafyre]

@JaredBusch said in What Are You Doing Right Now:

What a pain in the ass.
https://docs.nextcloud.com/server/11/admin_manual/maintenance/update.html#set-updating-permissions-label

Can't you just... use the CLI app to begin the update process? That way you don't have to muck around with permissions every time you do an upgrade.

[JaredBusch]

@dafyre said in What Are You Doing Right Now:

@JaredBusch said in What Are You Doing Right Now:

What a pain in the ass.
https://docs.nextcloud.com/server/11/admin_manual/maintenance/update.html#set-updating-permissions-label

Can't you just... use the CLI app to begin the update process? That way you don't have to muck around with permissions every time you do an upgrade.

There is no CLI app. Are you inferring to use occ manually? That does not get arond the problem of getting the files replaced. that is only the upgrade command for the database. That runs with current permissions.

[dafyre]

@JaredBusch said in What Are You Doing Right Now:

@dafyre said in What Are You Doing Right Now:

@JaredBusch said in What Are You Doing Right Now:

What a pain in the ass.
https://docs.nextcloud.com/server/11/admin_manual/maintenance/update.html#set-updating-permissions-label

Can't you just... use the CLI app to begin the update process? That way you don't have to muck around with permissions every time you do an upgrade.

There is no CLI app. Are you inferring to use occ manually? That does not get arond the problem of getting the files replaced. that is only the upgrade command for the database. That runs with current permissions.

I thought that was supposed to do everything the web updater did.

Edit, yes, I am referrring to occ

[wirestyle22]

@JaredBusch said in What Are You Doing Right Now:

@wirestyle22 shows the SELinux context

in mine. CentOS 7

You did ls --help not man ls. That's why we have a disparity.

[EddieJennings]

Trying to get my little dokuwiki test working.

[wirestyle22]

@EddieJennings said in What Are You Doing Right Now:

Trying to get my little dokuwiki test working.

I want to make a wiki for all of our documentation here. That will be one of my projects.

[JaredBusch]

@dafyre said in What Are You Doing Right Now:

@JaredBusch said in What Are You Doing Right Now:

@dafyre said in What Are You Doing Right Now:

@JaredBusch said in What Are You Doing Right Now:

What a pain in the ass.
https://docs.nextcloud.com/server/11/admin_manual/maintenance/update.html#set-updating-permissions-label

Can't you just... use the CLI app to begin the update process? That way you don't have to muck around with permissions every time you do an upgrade.

There is no CLI app. Are you inferring to use occ manually? That does not get arond the problem of getting the files replaced. that is only the upgrade command for the database. That runs with current permissions.

I thought that was supposed to do everything the web updater did.

Edit, yes, I am referrring to occ

No, occ does not and never has. The web update does has command line options it seems. but again. the issue is directory permissions for the extract from the compressed archive