Nextcloud: Difference between revisions

From DaqWiki
Jump to navigation Jump to search
 
(41 intermediate revisions by the same user not shown)
Line 1: Line 1:
= owncloud =
== Links ==
== Links ==


* https://daq00.triumf.ca/nextcloud
* http://cernbox.web.cern.ch/
* http://cernbox.web.cern.ch/
* https://cernbox.cern.ch/cernbox/doc/index.html
* https://cernbox.cern.ch/cernbox/doc/index.html
* https://download.owncloud.org/download/repositories/stable/owncloud/
* https://nextcloud.com/


== Installation ==
NOTE: owncloud has been renamed/forked into nextcloud.


On el6, update php from 5.3 to 5.6:
== Installation (el7) ==


on el7, upgrade php:
<pre>
<pre>
rpm -Uvh http://mirror.webtatic.com/yum/el6/latest.rpm
rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
yum remove php-common
yum erase php
yum install "php56w*" --exclude "php56w-conflicting" --exclude php56w-mysqlnd
yum install mod_php71w php71w-opcache
yum install "php71w*" --exclude "*mysql*"
</pre>
</pre>


From https://download.owncloud.org/download/repositories/stable/owncloud/
utter selinux incantations:
follow instructions for CentOS6 with php5.6: CentOS_6_PHP56 owncloud-8.2.2-1
<pre>
setsebool -P httpd_can_sendmail=1
setsebool -P httpd_execmem true
</pre>


Note: this will install php5.6 and httpd-2.4 from el6 software collections.
configure apache httpd with ssl and certbot: [[SLinstall#Configure_HTTPS_server_.28CentOS7.29]]


add this to ssl-daqstore.conf
<pre>
<pre>
rpm --import https://download.owncloud.org/download/repositories/stable/CentOS_6_PHP56/repodata/repomd.xml.key
<Directory /var/www/html/nextcloud/>
wget http://download.owncloud.org/download/repositories/stable/CentOS_6_PHP56/ce:stable.repo -O /etc/yum.repos.d/ce:stable.repo
AllowOverride All
yum clean expire-cache
</Directory>
yum install owncloud
</pre>
</pre>


Actual repo files are here: http://download.owncloud.org/download/repositories/stable/CentOS_6_PHP56/
systemctl restart httpd


Restart the web server (this restarts the httpd-2.2)
== nextcloud ==


<pre>
<pre>
service httpd restart
cd /var/www/html
wget https://download.nextcloud.com/server/releases/nextcloud-12.0.4.tar.bz2
tar xjvf nextcloud-12.0.4.tar.bz2
chown -R apache.apache nextcloud
 
semanage fcontext -a -t httpd_sys_rw_content_t '/var/www/html/nextcloud'
semanage fcontext -a -t httpd_sys_rw_content_t '/var/www/html/nextcloud/3rdparty/aws/aws-sdk-php/src/data/logs(/.*)?'
restorecon -Rv '/var/www/html/nextcloud'
 
zfs create pool/nextcloud
 
/bin/mv -v nextcloud/data /pool/nextcloud/
/bin/ln -s /pool/nextcloud/data nextcloud/
 
semanage fcontext -a -t httpd_sys_rw_content_t '/pool/nextcloud/data(/.*)?'
restorecon -Rv /pool/nextcloud/data
</pre>
</pre>


Open https://daqshare.triumf.ca/owncloud/index.php
== Installation (Ubuntu LTS 20.04) ==
 
(we are migrating nextcloud-12 from daqstore to daq00)
 
* install apache2, php, etc per https://daq.triumf.ca/DaqWiki/index.php/Ubuntu#Install_PHP
* apt install php-curl php-simplexml php-zip php-doctrine-dbal php-gd php-intl php-bcmath php-gmp php-imagick
* cd nextcloud
* sudo -u www-data /bin/bash
* ./php ./updater/updater.phar ### updates to nextcloud-13
* if crash, install missing php module, rm data/updater-ocs8zykhjqsy/.step and try again
* again ### updates to nextcloud-14
* again ### updates to nextcloud-15
* again ### updates to nextcloud-16
* again ### updates to nextcloud-17
* again ### updates to nextcloud-18 ### occ upgrade now runs locally
* again ### updates to nextcloud-19
* again ### updates to nextcloud-20
* that's it Nextcloud Updater - version: v20.0.0beta4-11-g68fa0d4
* open https://daq00.triumf.ca/nextcloud/index.php ### Internal Server Error
* /etc/php.ini change post_max_size and upload_max_filesize to 100M, memory_limit to 600M, output_buffering to 0.
 
== Self registration ==
 
* check that email notifications work
* go to nextcloud settings -> apps -> show disabled apps -> enable "registration"
* you will be bumped into the "upgrade" page, with luck there will be no errors
* adjust settings under "admin -> additional settings, at the very bottom"


* enter username "admin", password "admin"
To test registration:
* push "finish install" (or whatever it was)
* you will be logged in as admin user
* ...
* follow instructions at https://doc.owncloud.org/server/8.2/admin_manual/contents.html


Missing items:
* open browser that does not remember you (firefox)
* go to nextcloud, click on "register"
* enter email address, send the request, wait for reply email to arrive
* the reply email has a web link for completing account creation, go there
* select the new user name, new user password, say yes
* new account is created automatically, notice is sent to the owncloud administrators


* redirect to https
There is no owncloud app for self registration "with approval". If somebody starts
* set HSTS header
creating spam user accounts and filling them with evil contents shared the world,
* test email
it is only possible to delete the badnicks after the fact.

Latest revision as of 13:51, 28 June 2023

Links

NOTE: owncloud has been renamed/forked into nextcloud.

Installation (el7)

on el7, upgrade php:

rpm -Uvh https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
yum erase php
yum install mod_php71w php71w-opcache
yum install "php71w*" --exclude "*mysql*"

utter selinux incantations:

setsebool -P httpd_can_sendmail=1
setsebool -P httpd_execmem true

configure apache httpd with ssl and certbot: SLinstall#Configure_HTTPS_server_.28CentOS7.29

add this to ssl-daqstore.conf

<Directory /var/www/html/nextcloud/>
AllowOverride All
</Directory>

systemctl restart httpd

nextcloud

cd /var/www/html
wget https://download.nextcloud.com/server/releases/nextcloud-12.0.4.tar.bz2
tar xjvf nextcloud-12.0.4.tar.bz2
chown -R apache.apache nextcloud

semanage fcontext -a -t httpd_sys_rw_content_t '/var/www/html/nextcloud'
semanage fcontext -a -t httpd_sys_rw_content_t '/var/www/html/nextcloud/3rdparty/aws/aws-sdk-php/src/data/logs(/.*)?'
restorecon -Rv '/var/www/html/nextcloud'

zfs create pool/nextcloud

/bin/mv -v nextcloud/data /pool/nextcloud/
/bin/ln -s /pool/nextcloud/data nextcloud/

semanage fcontext -a -t httpd_sys_rw_content_t '/pool/nextcloud/data(/.*)?'
restorecon -Rv /pool/nextcloud/data

Installation (Ubuntu LTS 20.04)

(we are migrating nextcloud-12 from daqstore to daq00)

  • install apache2, php, etc per https://daq.triumf.ca/DaqWiki/index.php/Ubuntu#Install_PHP
  • apt install php-curl php-simplexml php-zip php-doctrine-dbal php-gd php-intl php-bcmath php-gmp php-imagick
  • cd nextcloud
  • sudo -u www-data /bin/bash
  • ./php ./updater/updater.phar ### updates to nextcloud-13
  • if crash, install missing php module, rm data/updater-ocs8zykhjqsy/.step and try again
  • again ### updates to nextcloud-14
  • again ### updates to nextcloud-15
  • again ### updates to nextcloud-16
  • again ### updates to nextcloud-17
  • again ### updates to nextcloud-18 ### occ upgrade now runs locally
  • again ### updates to nextcloud-19
  • again ### updates to nextcloud-20
  • that's it Nextcloud Updater - version: v20.0.0beta4-11-g68fa0d4
  • open https://daq00.triumf.ca/nextcloud/index.php ### Internal Server Error
  • /etc/php.ini change post_max_size and upload_max_filesize to 100M, memory_limit to 600M, output_buffering to 0.

Self registration

  • check that email notifications work
  • go to nextcloud settings -> apps -> show disabled apps -> enable "registration"
  • you will be bumped into the "upgrade" page, with luck there will be no errors
  • adjust settings under "admin -> additional settings, at the very bottom"

To test registration:

  • open browser that does not remember you (firefox)
  • go to nextcloud, click on "register"
  • enter email address, send the request, wait for reply email to arrive
  • the reply email has a web link for completing account creation, go there
  • select the new user name, new user password, say yes
  • new account is created automatically, notice is sent to the owncloud administrators

There is no owncloud app for self registration "with approval". If somebody starts creating spam user accounts and filling them with evil contents shared the world, it is only possible to delete the badnicks after the fact.