Install NextCloud 11 on Fedora 25 with SaltStack

JaredBusch

@wrx7m said in Install NextCloud 11 on Fedora 25 with SaltStack:

I am going to blow up my nextcloud vm and start with the Fedora netinstall.

If you are only after Nextcloud, here is my guide for that.
https://mangolassi.it/topic/13573/install-nextcloud-11-03-on-fedora-25-minimal

If you want to learn Salt, then continue with this post as you have been.

wrx7m

@JaredBusch said in Install NextCloud 11 on Fedora 25 with SaltStack:

@wrx7m said in Install NextCloud 11 on Fedora 25 with SaltStack:

I am going to blow up my nextcloud vm and start with the Fedora netinstall.

If you are only after Nextcloud, here is my guide for that.
https://mangolassi.it/topic/13573/install-nextcloud-11-03-on-fedora-25-minimal

If you want to learn Salt, then continue with this post as you have been.

I will do both Thanks for this.

travisdh1

@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:

Let's try this...

install_network_packages:
  pkg.installed:
    - pkgs:
      - wget
      - unzip
      - firewalld
      - net-tools
      - php 
      - mariadb 
      - mariadb-server 
      - mod_ssl
      - php-pecl-apcu
      - httpd 
      - php-xml 
      - php-gd 
      - php-pecl-zip
      - php-mbstring
      - redis
      - php-pecl-redis
      - php-process
      - php-pdo
      - certbot
      - php-mysqlnd
      - policycoreutils
      - policycoreutils-python
      - policycoreutils-python-utils
      - dnf-automatic
      - python2-certbot-apache
  archive:
    - extracted
    - name: /var/www/html/
    - source: https://download.nextcloud.com/server/releases/nextcloud-11.0.2.zip
    - source_hash: md5=720cb50f98a94f2888f2d07d5d4e91b4
    - archive_format: zip
    - if_missing: /var/www/html/nextcloud 

/swapfile:
  cmd.run:
    - name: |
        [ -f /swapfile ] || dd if=/dev/zero of=/swapfile bs=1M count={{ grains["mem_total"] * 2 }}
        chmod 0600 /swapfile
        mkswap /swapfile
        swapon -a
    - unless:
      - file /swapfile 2>&1 | grep -q "Linux/i386 swap"
  mount.swap:
    - persist: true

configure_swappiness:
  file.append:
    - name: /etc/sysctl.conf
    - text: vm.swappiness = 10

/var/www/html/:
  file.directory:
    - user: apache
    - group: apache
    - recurse:
      - user
      - group

/etc/httpd/conf.d/ssl.conf:
  file.managed:
    - source: 
      - salt://ssl.conf
    - user: root
    - group: root
    - mode: 644

/data:
  file.directory:
    - user: apache
    - group: apache

/var/run/redis:
  file.directory:
    - user: redis
    - group: redis

/etc/redis.conf:
  file.managed:
    - source:
      - salt://redis.conf
    - user: root
    - group: root
    - mode: 644

httpd:
  pkg.installed: []
  service.running:
    - enable: True
    - require:
      - pkg: httpd

mariadb:
  pkg.installed: []
  service.running:
    - enable: True
    - require:
      - pkg: mariadb

redis:
  pkg.installed: []
  service.running:
    - enable: True
    - require:
      - pkg: redis

FedoraServer:
  firewalld.present:
    - name: FedoraServer
    - block_icmp:
      - echo-reply
      - echo-request
    - default: False
    - masquerade: True
    - ports:
      - 443/tcp
      - 22/tcp
      - 9090/tcp

permissive:
  selinux.mode

install-foo:
  cmd.run:
    - name: |
        cd /var/www/html/nextcloud
        setenforce 0
        sudo -u apache php occ maintenance:install --database="mysql" --database-name "nextcloud" --database-user "root" --database-pass "" --admin-user "admin" --admin-pass "superdupercrazysecretepasswordthatnooneknows" --data-dir "/data"
        sed -i "/0 => 'localhost',/a \ \ \ \ 1 => '*'," config/config.php
        sed -i "/'installed' => true,/a \ \ 'memcache.local' => '\\\OC\\\Memcache\\\APCu',\n\ \ 'filelocking.enabled' => true,\n\ \ 'memcache.locking' => '\\\OC\\\Memcache\\\Redis',\n\ \ 'redis' => array(\n\ \ \ \ \ \ \ 'host' => '/var/run/redis/redis.sock',\n\ \ \ \ \ \ \ 'port' => 0,\n\ \ \ \ \ \ \ 'timeout' => 0.0,\n\ \ \ \ \ \ \ \ )," config/config.php
        semanage fcontext -a -t httpd_sys_rw_content_t '/data'
        restorecon '/data'
        semanage fcontext -a -t httpd_sys_rw_content_t '/var/www/html/nextcloud/config(/.*)?'
        semanage fcontext -a -t httpd_sys_rw_content_t '/var/www/html/nextcloud/apps(/.*)?'
        semanage fcontext -a -t httpd_sys_rw_content_t '/var/www/html/nextcloud/assets(/.*)?'
        semanage fcontext -a -t httpd_sys_rw_content_t '/var/www/html/nextcloud/.htaccess'
        semanage fcontext -a -t httpd_sys_rw_content_t '/var/www/html/nextcloud/.user.ini'
        restorecon -Rv '/var/www/html/nextcloud/' > /dev/null
        systemctl restart httpd
        touch install_complete
    - cwd: /var/www/html/nextcloud
    - shell: /bin/bash
    - timeout: 300
    - creates: /var/www/html/nextcloud/install_complete

Try this. Hopefully it fixes both your firewall and service issues.

This 2nd one worked for me, but I updated it to the latest NextCloud install.

install_network_packages:
  pkg.installed:
  - pkgs:
  - wget
  - unzip
  - firewalld
  - net-tools
  - php
  - mariadb
  - mariadb-server
  - mod_ssl
  - php-pecl-apcu
  - httpd
  - php-xml
  - php-gd
  - php-pecl-zip
  - php-mbstring
  - redis
  - php-pecl-redis
  - php-process
  - php-pdo
  - certbot
  - php-mysqlnd
  - policycoreutils
  - policycoreutils-python
  - policycoreutils-python-utils
  - dnf-automatic
  - python2-certbot-apache
  archive:
    - extracted
    - name: /var/www/html/
    - source: https://download.nextcloud.com/server/releases/nextcloud-11.0.5.zip
    - source_hash: md5=d503c4d28b8e193925f2c65ea1350e99
    - archive_format: zip
    - if_missing: /var/www/html/nextcloud

/swapfile:
  cmd.run:
    - name: |
        [ -f /swapfile ] || dd if=/dev/zero of=/swapfile bs=1M count={{ grains["mem_total"] * 2 }}
    chmod 0600 /swapfile
    mkswap /swapfile
    swapon -a
- unless:
  - file /swapfile 2>&1 | grep -q "Linux/i386 swap"
  mount.swap:
    - persist: true

configure_swappiness:
  file.append:
    - name: /etc/sysctl.conf
    - text: vm.swappiness = 10

/var/www/html/:
  file.directory:
    - user: apache
    - group: apache
    - recurse:
      - user
      - group

/etc/httpd/conf.d/ssl.conf:
  file.managed:
    - source:
     - salt://ssl.conf
    - user: root
    - group: root
    - mode: 644

/data:
  file.directory:
    - user: apache
    - group: apache

/var/run/redis:
  file.directory:
    - user: redis
    - group: redis

/etc/redis.conf:
  file.managed:
    - source:
  - salt://redis.conf
  - user: root
  - group: root
  - mode: 644

httpd:
  pkg.installed: []
  service.running:
    - enable: True
    - require:
      - pkg: httpd

mariadb:
  pkg.installed: []
  service.running:
    - enable: True
    - require:
      - pkg: mariadb

redis:
  pkg.installed: []
  service.running:
    - enable: True
    - require:
      - pkg: redis

FedoraServer:
  firewalld.present:
    - name: FedoraServer
    - block_icmp:
      - echo-reply
      - echo-request
    - default: False
    - masquerade: True
    - ports:
      - 443/tcp
      - 22/tcp
      - 9090/tcp

permissive:
  selinux.mode

install-foo:
  cmd.run:
    - name: |
        cd /var/www/html/nextcloud
        setenforce 0
        sudo -u apache php occ maintenance:install --database="mysql" --database-name "nextcloud" --
database-user "root" --database-pass "" --admin-user "admin" --admin-pass 
"superdupercrazysecretepasswordthatnooneknows" --data-dir "/data"
        sed -i "/0 => 'localhost',/a \ \ \ \ 1 => '*'," config/config.php
        sed -i "/'installed' => true,/a \ \ 'memcache.local' => '\\\OC\\\Memcache\\\APCu',\n\ \ 'filelocking.enabled' => true,\n\ \ 'memcache.locking' => '\\\OC\\\Memcache\\\Redis',\n\ \ 'redis' => array(\n\ \ \ \ \ \ \ 'host' => '/var/run/redis/redis.sock',\n\ \ \ \ \ \ \ 'port' => 0,\n\ \ \ \ \ \ \ 'timeout' => 0.0,\n\ \ \ \ \ \ \ \ )," config/config.php
    semanage fcontext -a -t httpd_sys_rw_content_t '/data'
    restorecon '/data'
    semanage fcontext -a -t httpd_sys_rw_content_t '/var/www/html/nextcloud/config(/.*)?'
    semanage fcontext -a -t httpd_sys_rw_content_t '/var/www/html/nextcloud/apps(/.*)?'
    semanage fcontext -a -t httpd_sys_rw_content_t '/var/www/html/nextcloud/assets(/.*)?'
    semanage fcontext -a -t httpd_sys_rw_content_t '/var/www/html/nextcloud/.htaccess'
    semanage fcontext -a -t httpd_sys_rw_content_t '/var/www/html/nextcloud/.user.ini'
    restorecon -Rv '/var/www/html/nextcloud/' > /dev/null
    systemctl restart httpd
    touch install_complete
- cwd: /var/www/html/nextcloud
- shell: /bin/bash
- timeout: 300
- creates: /var/www/html/nextcloud/install_complete

FATeknollogee

Trying to do this with v 12.0.3 (os is Fedora 26), but I'm getting one error...any ideas

    ID: redis                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  
Function: service.running                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        
  Result: False                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  
 Comment: Service redis is already enabled, and is dead                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          
 Started: 00:32:28.386168                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        
Duration: 68.777 ms

scottalanmiller

Do this...

systemctl restart redis
systemctl status redis

black3dynamite

I notice you’re using swapfile. Is this script based on the Fedora instance that vultr provides?

FATeknollogee

@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:

Do this...

systemctl restart redis
systemctl status redis

Thanks. I'm redoing the whole install, will report back in a few...

scottalanmiller

@black3dynamite said in Install NextCloud 11 on Fedora 25 with SaltStack:

I notice you’re using swapfile. Is this script based on the Fedora instance that vultr provides?

That's where I use it, that's correct. I use the SATA based storage instances.

FATeknollogee

@scottalanmiller
● redis.service - Redis persistent key-value database
Loaded: loaded (/usr/lib/systemd/system/redis.service; enabled; vendor preset: disabled)
Drop-In: /etc/systemd/system/redis.service.d
└─limit.conf
Active: failed (Result: exit-code) since Fri 2017-10-06 09:14:55 PDT; 1s ago
Process: 2063 ExecStart=/usr/bin/redis-server /etc/redis.conf --daemonize no (code=exited, status=1/FAILURE)
Main PID: 2063 (code=exited, status=1/FAILURE)

Oct 06 09:14:55 salt systemd[1]: Started Redis persistent key-value database.
Oct 06 09:14:55 salt redis-server[2063]: *** FATAL CONFIG FILE ERROR ***
Oct 06 09:14:55 salt redis-server[2063]: Reading the configuration file, at line 5
Oct 06 09:14:55 salt redis-server[2063]: >>> 'Listen 443 https'
Oct 06 09:14:55 salt redis-server[2063]: Bad directive or wrong number of arguments
Oct 06 09:14:55 salt systemd[1]: redis.service: Main process exited, code=exited, status=1/FAILURE
Oct 06 09:14:55 salt systemd[1]: redis.service: Unit entered failed state.
Oct 06 09:14:55 salt systemd[1]: redis.service: Failed with result 'exit-code'.

scottalanmiller

Okay, what do we have at line 5? I'm guessing you have it set to listen on HTTPS which will not work as the web server needs that.

FATeknollogee

I just copied & pasted your files per instuction.

Did I miss a step somewhere?

scottalanmiller

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

I just copied & pasted your files per instuction.

Did I miss a step somewhere?

Under normal conditions, Redis does not run on port 443. Check the config file.

FATeknollogee

Boys & gals....don't be a dumb ass like me & install stuff late at night when you are half awake!!! #dumbass

Yes @scottalanmiller I copied/pasted the contents of ssl.conf & saved it as redis.conf !!

scottalanmiller

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

Boys & gals....don't be a dumb ass like me & install stuff late at night when you are half awake!!! #dumbass

Yes @scottalanmiller I copied/pasted the contents of ssl.conf & saved it as redis.conf !!

LOL, well that will do it!

FATeknollogee

Install completed with no errors.
Open web browser, type https://ipaddress ....is unreachable.
I must have missed a step, somewhere!!

Reid Cooper

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

Install completed with no errors.
Open web browser, type https://ipaddress ....is unreachable.
I must have missed a step, somewhere!!

Check to see if the web server is running.

Or look at what ports are listening...

netstat -tulpn

FATeknollogee

@reid-cooper said in Install NextCloud 11 on Fedora 25 with SaltStack:

netstat -tulpn

tcp 0 0 127.0.0.1:37733 0.0.0.0:* LISTEN 2189/cockpit-bridge
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 932/sshd
tcp 0 0 127.0.0.1:45335 0.0.0.0:* LISTEN 2173/cockpit-bridge
tcp 0 0 0.0.0.0:4505 0.0.0.0:* LISTEN 2967/python
tcp 0 0 0.0.0.0:4506 0.0.0.0:* LISTEN 2973/python
tcp6 0 0 :::3306 :::* LISTEN 7316/mysqld
tcp6 0 0 :::80 :::* LISTEN 7605/httpd
tcp6 0 0 :::22 :::* LISTEN 932/sshd
tcp6 0 0 :::443 :::* LISTEN 7605/httpd
udp 0 0 127.0.0.1:323 0.0.0.0:*
896/chronyd
udp 0 0 0.0.0.0:68 0.0.0.0:*
1076/dhclient
udp6 0 0 ::1:323 :::*
896/chronyd

Reid Cooper

Looks like the web server is running (ports 80 and 443 show up there). Chances are your firewall is still closed.

FATeknollogee

Maybe I should disable the firewall & see if that helps.

Reid Cooper

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

Maybe I should disable the firewall & see if that helps.

That's an easy way to start, yes.