Beta-testing for YunoHost 4.0 on Debian Buster (and migration shipped in Yunohost 3.8.5)

pigpig · July 27, 2020, 4:15pm

I don’t know if it is usefull :

d34e8be4e307e4c41e92871530effbade442852f  /etc/ssl/certs/ca-certificates.crt

Aleks · July 27, 2020, 4:32pm

Can you clarify which hash algorithm you used for that ?

(Anyway I’d be surprised I get a match, it looks like it’s a cat of many files and the slightest difference for whatever reason will change the hash - namely I think it contains Yunohost’s local cert auth)

pigpig · July 27, 2020, 5:34pm

It was sha1, but it will definitely be different if it contains the local ca.

Do you have any other VM to try? Since the update has report the new file it should (as always ) have work. Maybe you could try to copy the file instead of linking to it

xeu100 · July 28, 2020, 10:07pm

I’ve mentioned this above, but this issue is still persistent and prevents me from accessing the majority of things.

Aleks · July 28, 2020, 11:20pm

@xeu100 : meh … are you sure this is the root issue … you just pasted this without describing the symptoms … what error message do you see in your browser such that you are not able to access apps …

xeu100 · July 29, 2020, 12:59am

I’m pretty sure this is the root issue. The issue is that assets other than the main page (such as js and css) sometimes have access issues. The issue in the browser is simply a blank page as most stuff refuses to load unless I refresh it many many times. This issue persists across browsers and on different devices.

bjarkan · July 29, 2020, 7:44pm

I’ve installed yunohost testing in kvm and even trick metronome (for http-bind) and install nextcloud 19. EVERYTHING SMOOOOOOOOOTH. I wont call it testing… I call it stable… working without flaws in debian buster latest update. Even changing the nextcloud database to postgresql, and working flawlessly. I could restore backup from previus yunohost for wallabag2, wordpress and roundcube… without any problem. It work by itself. AMAZING JOBS u guys…

Oni-Shadow · July 29, 2020, 8:35pm

Now that 4.0 has been released, is it possible to fall back to stable ? if so how to ?

Aleks · July 29, 2020, 9:06pm

You can edit /etc/apt/sources.list.d/yunohost.list and remove the “testing” keyword

Oni-Shadow · July 30, 2020, 4:04pm

Ok, since there was a script to update I though it might be the same to get back to sable.
Simple change in sources.list, that’s fine with me !

pigpig · July 31, 2020, 3:11pm

I did it again on a fresh install on another raspberry pi (the only thing I’ve done). And it works

admin@x:~ $ curl https://perdu.com
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
admin@x:~ $ sudo -s
root@x:/home/admin# cd /usr/share/ca-certificates/
root@x:/usr/share/ca-certificates# ln -s /etc/ssl/certs/ca-certificates.crt .
root@x:/usr/share/ca-certificates# echo "ca-certificates.crt" >> /etc/ca-certificates.conf 
root@x:/usr/share/ca-certificates# update-ca-certificates 
Updating certificates in /etc/ssl/certs...
1 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
root@x:/usr/share/ca-certificates# curl https://perdu.com
<html><head><title>Vous Etes Perdu ?</title></head><body><h1>Perdu sur l'Internet ?</h1><h2>Pas de panique, on va vous aider</h2><strong><pre>    * <----- vous &ecirc;tes ici</pre></strong></body></html>

Aleks · August 1, 2020, 12:26pm

@pigpig : if you (or anybody else) have some time could you try this new build : https://build.yunohost.org/yunohost-buster-4.0.3-rpi-beta2.zip ?

It should include your fix built in (though if I try with qemu I still get the issue … but who knows)

Would be curious to know if that works out of the box.

I can try it on my side but I won’t have much time during the next days and I need to get my hands on a working SD card :s

pigpig · August 1, 2020, 12:29pm

I can try if I have some time in the next days !
I have some issues with one of my SD card too . I have to use a live usb to recognize it (another thing to debug…)

pigpig · August 4, 2020, 11:02am

Well, the image doesn’t boot… (The wpa_supplicant.conf isn’t moved from boot partition, I tried with the exact same file in the first beta and it worked.)

kuba-orlik · August 4, 2020, 3:16pm

After upgrade to 4.0 from 3.8.5 it failed to update mastodon app:

https://paste.yunohost.org/raw/qidadahomo

Edit: I also cannot restore it from backup: https://paste.yunohost.org/raw/cetehovuni

tufek · August 4, 2020, 5:40pm

“Fresh” installation manuelle fraîche sur Rpi4 il y a qqes jours (sorry @Aleks je viens de voir ton appel à test pour l’image )

Les soucis déjà rapportés concernant le boot, avec l’image 3.4.2 sont résolus avec un curl | bash sur une raspbian buster lite (pour une raison qui m’échappe, impossible de lancer l’installation depuis une raspbian complète qui ne m’a pas laissé faire en sudo su et m’a empêché de logout l’utilisateur “pi” avec un # pkill -u pi avant de lancer la commande).

Ensuite l’installation/migration s’est bien déroulée (merci aux devs encore, toujours aussi impressionnant tout ça!).

À noter quand-même un petit bug similaire à https://frama.link/infinite_loop (une boucle de chargement infinie dans Nextcloud) solutionnée en commentant les lignes:

error_page 403 /core/templates/403.php;
error_page 404 /core/templates/404.php;

dans le fichier
/etc/nginx/conf.d/mondomaine.d/nextcloud.conf

Merci encore!

pigpig · August 14, 2020, 8:31am

Could you try to build it again @Aleks ?

I have no clue why it is not booting. Maybe we can try with a copy of the certificate instead of a symlink