From 30873924b973eb7bf8954a9a6cfd186e28f39437 Mon Sep 17 00:00:00 2001 From: ericgaspar Date: Wed, 11 Jan 2023 21:10:44 +0100 Subject: [PATCH 1/7] 0.6.2 --- conf/app.src | 4 ++-- manifest.json | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/conf/app.src b/conf/app.src index de43293..de0a54e 100644 --- a/conf/app.src +++ b/conf/app.src @@ -1,5 +1,5 @@ -SOURCE_URL=https://github.com/jech/galene/archive/refs/tags/galene-0.6.1.tar.gz -SOURCE_SUM=ea7ac0d0c5cff685e1d2a2e077d7197588fb570adfab1a1a924c87271f682f29 +SOURCE_URL=https://github.com/jech/galene/archive/refs/tags/galene-0.6.2.tar.gz +SOURCE_SUM=7caedc1b2cb8cfeee0136e02c006d13d7b2b3cb9908685654c8cec020265428d SOURCE_SUM_PRG=sha256sum SOURCE_FORMAT=tar.gz SOURCE_IN_SUBDIR=true diff --git a/manifest.json b/manifest.json index ce78217..e22e81e 100644 --- a/manifest.json +++ b/manifest.json @@ -6,7 +6,7 @@ "en": "Videoconferencing server that is easy to deploy", "fr": "Serveur de visioconférence facile à déployer" }, - "version": "0.6.1~ynh4", + "version": "0.6.2~ynh1", "url": "https://galene.org/", "upstream": { "license": "MIT", From 1ad9d3e7baebc2afe6a0070edce7aa36a2dcadcc Mon Sep 17 00:00:00 2001 From: yunohost-bot Date: Wed, 11 Jan 2023 20:10:50 +0000 Subject: [PATCH 2/7] Auto-update README --- README.md | 2 +- README_fr.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 43507c1..1117f08 100644 --- a/README.md +++ b/README.md @@ -45,7 +45,7 @@ Galène is a videoconference server (an “SFU”) that is easy to deploy and th - built-in TURN server. -**Shipped version:** 0.6.1~ynh4 +**Shipped version:** 0.6.2~ynh1 **Demo:** https://galene.org:8443/ diff --git a/README_fr.md b/README_fr.md index c747597..4f48abe 100644 --- a/README_fr.md +++ b/README_fr.md @@ -28,7 +28,7 @@ Galène est un serveur de visioconférence (un « SFU ») facile à déployer et - prise en charge LDAP -**Version incluse :** 0.6.1~ynh4 +**Version incluse :** 0.6.2~ynh1 **Démo :** https://galene.org:8443/ From 3bad4b7826cc596500cd83ea260d067f54511218 Mon Sep 17 00:00:00 2001 From: ericgaspar Date: Wed, 11 Jan 2023 21:12:21 +0100 Subject: [PATCH 3/7] cleaning --- check_process | 9 ++------- doc/DESCRIPTION.md | 15 --------------- 2 files changed, 2 insertions(+), 22 deletions(-) diff --git a/check_process b/check_process index 89ea880..a7e831f 100644 --- a/check_process +++ b/check_process @@ -15,11 +15,6 @@ setup_private=1 setup_public=1 upgrade=1 - upgrade=1 from_commit=aaae7fbe83ce001fabd40509882e765a5d8da2c1 - # 0.6~ynh1 - upgrade=1 from_commit=c5cc50f1b1f326080f4f657b7805f2c27c1c3f20 - # 0.6.1~ynh1 - upgrade=1 from_commit=f55a3d1990a0fb2fe17eb9b70aefb13337c2b623 # 0.6.1~ynh2 upgrade=1 from_commit=ed1506fa3eb56358fecb06d832c9684acbf682d9 backup_restore=1 @@ -30,6 +25,6 @@ Email= Notification=none ;;; Upgrade options - ; commit=aaae7fbe83ce001fabd40509882e765a5d8da2c1 - name=Testing (#62) + ; commit=ed1506fa3eb56358fecb06d832c9684acbf682d9 + name=0.6.1~ynh2 manifest_arg=domain=DOMAIN&path=PATH&admin=USER&language=fr&is_public=1&password=pass&port=666& diff --git a/doc/DESCRIPTION.md b/doc/DESCRIPTION.md index 40f8d90..a527d48 100644 --- a/doc/DESCRIPTION.md +++ b/doc/DESCRIPTION.md @@ -11,18 +11,3 @@ Galène is a videoconference server (an “SFU”) that is easy to deploy and th - streaming video and audio from disk - activity detection - LDAP support - -### Server features - -- redistribution of arbitrary numbers of audio and video streams; -- text chat; -- recording to disk; -- user statuses ("raise hand", etc.); -- choice of audio and video codecs (full functionality for VP8, VP9, and H.264, preliminary support for AV1); -- Simulcast; -- Scalable Video Coding (SVC) for VP8 and VP9; -- automatic restarting of failed flows (on ICE failure); -- congestion control in the server → client direction (both loss-based and using REMB indications); -- congestion control in the client → server direction (loss-based, partial REMB support); -- dynamic tuning of buffer sizes depending on the clients' RTT; -- built-in TURN server. From e8fd2165d9f17948ee5970580f4998ce37fda002 Mon Sep 17 00:00:00 2001 From: yunohost-bot Date: Wed, 11 Jan 2023 20:12:34 +0000 Subject: [PATCH 4/7] Auto-update README --- README.md | 15 --------------- 1 file changed, 15 deletions(-) diff --git a/README.md b/README.md index 1117f08..f290836 100644 --- a/README.md +++ b/README.md @@ -29,21 +29,6 @@ Galène is a videoconference server (an “SFU”) that is easy to deploy and th - activity detection - LDAP support -### Server features - -- redistribution of arbitrary numbers of audio and video streams; -- text chat; -- recording to disk; -- user statuses ("raise hand", etc.); -- choice of audio and video codecs (full functionality for VP8, VP9, and H.264, preliminary support for AV1); -- Simulcast; -- Scalable Video Coding (SVC) for VP8 and VP9; -- automatic restarting of failed flows (on ICE failure); -- congestion control in the server → client direction (both loss-based and using REMB indications); -- congestion control in the client → server direction (loss-based, partial REMB support); -- dynamic tuning of buffer sizes depending on the clients' RTT; -- built-in TURN server. - **Shipped version:** 0.6.2~ynh1 From 38c77efd1e5fa5a30262744b0c6f98cd76a8624b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=89ric=20Gaspar?= <46165813+ericgaspar@users.noreply.github.com> Date: Thu, 12 Jan 2023 08:22:50 +0100 Subject: [PATCH 5/7] Testing (#102) * Stop auto updating for now * Update manifest.json * Update ynh_install_go * Update ynh_install_go * Update ldap.src * Add feature to readme * Auto-update README * 0.6.2 * Auto-update README * cleaning * Auto-update README Co-authored-by: yunohost-bot --- .github/workflows/updater.sh | 2 ++ README.md | 18 ++---------------- README_fr.md | 3 ++- check_process | 9 ++------- conf/app.src | 4 ++-- conf/ldap.src | 4 ++-- doc/DESCRIPTION.md | 16 +--------------- doc/DESCRIPTION_fr.md | 1 + manifest.json | 4 ++-- scripts/ynh_install_go | 12 ++++++------ 10 files changed, 22 insertions(+), 51 deletions(-) diff --git a/.github/workflows/updater.sh b/.github/workflows/updater.sh index 4740d92..1e22ce2 100644 --- a/.github/workflows/updater.sh +++ b/.github/workflows/updater.sh @@ -9,6 +9,8 @@ # Since each app is different, maintainers can adapt its contents so as to perform # automatic actions when a new upstream release is detected. +exit 1 + #================================================= # FETCHING LATEST RELEASE AND ITS ASSETS #================================================= diff --git a/README.md b/README.md index 1130466..f290836 100644 --- a/README.md +++ b/README.md @@ -27,24 +27,10 @@ Galène is a videoconference server (an “SFU”) that is easy to deploy and th - screen and window sharing, including sharing multiple windows simultaneously (not on mobile) - streaming video and audio from disk - activity detection - -### Server features - -- redistribution of arbitrary numbers of audio and video streams; -- text chat; -- recording to disk; -- user statuses ("raise hand", etc.); -- choice of audio and video codecs (full functionality for VP8, VP9, and H.264, preliminary support for AV1); -- Simulcast; -- Scalable Video Coding (SVC) for VP8 and VP9; -- automatic restarting of failed flows (on ICE failure); -- congestion control in the server → client direction (both loss-based and using REMB indications); -- congestion control in the client → server direction (loss-based, partial REMB support); -- dynamic tuning of buffer sizes depending on the clients' RTT; -- built-in TURN server. +- LDAP support -**Shipped version:** 0.6.1~ynh4 +**Shipped version:** 0.6.2~ynh1 **Demo:** https://galene.org:8443/ diff --git a/README_fr.md b/README_fr.md index e5f85d8..4f48abe 100644 --- a/README_fr.md +++ b/README_fr.md @@ -25,9 +25,10 @@ Galène est un serveur de visioconférence (un « SFU ») facile à déployer et - partage d'écran et de fenêtre, y compris le partage de plusieurs fenêtres simultanément (pas sur mobile) - streaming vidéo et audio à partir du disque - détection d'activité +- prise en charge LDAP -**Version incluse :** 0.6.1~ynh4 +**Version incluse :** 0.6.2~ynh1 **Démo :** https://galene.org:8443/ diff --git a/check_process b/check_process index 89ea880..a7e831f 100644 --- a/check_process +++ b/check_process @@ -15,11 +15,6 @@ setup_private=1 setup_public=1 upgrade=1 - upgrade=1 from_commit=aaae7fbe83ce001fabd40509882e765a5d8da2c1 - # 0.6~ynh1 - upgrade=1 from_commit=c5cc50f1b1f326080f4f657b7805f2c27c1c3f20 - # 0.6.1~ynh1 - upgrade=1 from_commit=f55a3d1990a0fb2fe17eb9b70aefb13337c2b623 # 0.6.1~ynh2 upgrade=1 from_commit=ed1506fa3eb56358fecb06d832c9684acbf682d9 backup_restore=1 @@ -30,6 +25,6 @@ Email= Notification=none ;;; Upgrade options - ; commit=aaae7fbe83ce001fabd40509882e765a5d8da2c1 - name=Testing (#62) + ; commit=ed1506fa3eb56358fecb06d832c9684acbf682d9 + name=0.6.1~ynh2 manifest_arg=domain=DOMAIN&path=PATH&admin=USER&language=fr&is_public=1&password=pass&port=666& diff --git a/conf/app.src b/conf/app.src index de43293..de0a54e 100644 --- a/conf/app.src +++ b/conf/app.src @@ -1,5 +1,5 @@ -SOURCE_URL=https://github.com/jech/galene/archive/refs/tags/galene-0.6.1.tar.gz -SOURCE_SUM=ea7ac0d0c5cff685e1d2a2e077d7197588fb570adfab1a1a924c87271f682f29 +SOURCE_URL=https://github.com/jech/galene/archive/refs/tags/galene-0.6.2.tar.gz +SOURCE_SUM=7caedc1b2cb8cfeee0136e02c006d13d7b2b3cb9908685654c8cec020265428d SOURCE_SUM_PRG=sha256sum SOURCE_FORMAT=tar.gz SOURCE_IN_SUBDIR=true diff --git a/conf/ldap.src b/conf/ldap.src index 5572ac7..56042fd 100644 --- a/conf/ldap.src +++ b/conf/ldap.src @@ -1,5 +1,5 @@ -SOURCE_URL=https://github.com/jech/galene-ldap/archive/d0ffa0eadcf17150450d0222c07a2f8cf4e28d7e.tar.gz -SOURCE_SUM=e779ee173770799e3e0f398461a24f24576d87b1c8918712a8ee70702b74d4c9 +SOURCE_URL=https://github.com/jech/galene-ldap/archive/33b8a930372388b2b8b506d2564516fb3eaf895a.tar.gz +SOURCE_SUM=00247712e4e7944fed42026f056f48eb59a95cf476c3ff1cb6e24c54469ce070 SOURCE_SUM_PRG=sha256sum SOURCE_FORMAT=tar.gz SOURCE_IN_SUBDIR=true diff --git a/doc/DESCRIPTION.md b/doc/DESCRIPTION.md index 6575a4e..a527d48 100644 --- a/doc/DESCRIPTION.md +++ b/doc/DESCRIPTION.md @@ -10,18 +10,4 @@ Galène is a videoconference server (an “SFU”) that is easy to deploy and th - screen and window sharing, including sharing multiple windows simultaneously (not on mobile) - streaming video and audio from disk - activity detection - -### Server features - -- redistribution of arbitrary numbers of audio and video streams; -- text chat; -- recording to disk; -- user statuses ("raise hand", etc.); -- choice of audio and video codecs (full functionality for VP8, VP9, and H.264, preliminary support for AV1); -- Simulcast; -- Scalable Video Coding (SVC) for VP8 and VP9; -- automatic restarting of failed flows (on ICE failure); -- congestion control in the server → client direction (both loss-based and using REMB indications); -- congestion control in the client → server direction (loss-based, partial REMB support); -- dynamic tuning of buffer sizes depending on the clients' RTT; -- built-in TURN server. +- LDAP support diff --git a/doc/DESCRIPTION_fr.md b/doc/DESCRIPTION_fr.md index cb17ea2..e4a0524 100644 --- a/doc/DESCRIPTION_fr.md +++ b/doc/DESCRIPTION_fr.md @@ -8,3 +8,4 @@ Galène est un serveur de visioconférence (un « SFU ») facile à déployer et - partage d'écran et de fenêtre, y compris le partage de plusieurs fenêtres simultanément (pas sur mobile) - streaming vidéo et audio à partir du disque - détection d'activité +- prise en charge LDAP diff --git a/manifest.json b/manifest.json index 25b4e8b..e22e81e 100644 --- a/manifest.json +++ b/manifest.json @@ -6,7 +6,7 @@ "en": "Videoconferencing server that is easy to deploy", "fr": "Serveur de visioconférence facile à déployer" }, - "version": "0.6.1~ynh4", + "version": "0.6.2~ynh1", "url": "https://galene.org/", "upstream": { "license": "MIT", @@ -22,7 +22,7 @@ "email": "" }, "requirements": { - "yunohost": ">= 4.3.0" + "yunohost": ">= 11.0.9" }, "multi_instance": false, "services": [ diff --git a/scripts/ynh_install_go b/scripts/ynh_install_go index e3ad06a..4e0b499 100644 --- a/scripts/ynh_install_go +++ b/scripts/ynh_install_go @@ -123,7 +123,7 @@ ynh_install_go () { fi popd else - ynh_print_info --message="Installing goenv with git..." + #ynh_print_info --message="Installing goenv with Git..." mkdir -p $goenv_install_dir pushd $goenv_install_dir git init -q @@ -139,12 +139,12 @@ ynh_install_go () { ynh_print_info --message="\`goenv latest' command already available in \`$goenv_latest'." pushd "${goenv_latest%/*/*}" if git remote -v 2>/dev/null | grep "https://github.com/momo-lab/xxenv-latest.git"; then - ynh_print_info --message="Trying to update xxenv-latest with git..." + ynh_print_info --message="Trying to update xxenv-latest with Git..." git pull -q origin master fi popd else - ynh_print_info --message="Installing xxenv-latest with git..." + #ynh_print_info --message="Installing xxenv-latest with Git..." mkdir -p "${goenv_install_dir}/plugins" git clone -q https://github.com/momo-lab/xxenv-latest.git "${goenv_install_dir}/plugins/xxenv-latest" fi @@ -163,7 +163,7 @@ ynh_install_go () { # Install the requested version of Go local final_go_version=$(goenv latest --print $go_version) - ynh_print_info --message="Installation of Go-$final_go_version" + #ynh_print_info --message="Installation of Go-$final_go_version" goenv install --skip-existing $final_go_version # Store go_version into the config of this app @@ -231,7 +231,7 @@ ynh_cleanup_go () { do if ! `echo ${required_go_versions} | grep "${installed_go_version}" 1>/dev/null 2>&1` then - ynh_print_info --message="Removing of Go-$installed_go_version" + #ynh_print_info --message="Removing of Go-$installed_go_version" $goenv_install_dir/bin/goenv uninstall --force $installed_go_version fi done @@ -240,7 +240,7 @@ ynh_cleanup_go () { if [[ ! $required_go_versions ]] then # Remove goenv environment configuration - ynh_print_info --message="Removing of goenv" + #ynh_print_info --message="Removing of goenv" ynh_secure_remove --file="$goenv_install_dir" ynh_secure_remove --file="/etc/profile.d/goenv.sh" fi From 2a5fb78d8b20e8d3b8408175d301b4011f672844 Mon Sep 17 00:00:00 2001 From: yunohost-bot Date: Tue, 31 Jan 2023 11:06:03 +0000 Subject: [PATCH 6/7] Auto-update README --- README.md | 2 +- README_fr.md | 20 ++++++++++---------- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/README.md b/README.md index f290836..9f577e1 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,7 @@ It shall NOT be edited by hand. # Galène for YunoHost -[![Integration level](https://dash.yunohost.org/integration/galene.svg)](https://dash.yunohost.org/appci/app/galene) ![Working status](https://ci-apps.yunohost.org/ci/badges/galene.status.svg) ![Maintenance status](https://ci-apps.yunohost.org/ci/badges/galene.maintain.svg) +[![Integration level](https://dash.yunohost.org/integration/galene.svg)](https://dash.yunohost.org/appci/app/galene) ![Working status](https://ci-apps.yunohost.org/ci/badges/galene.status.svg) ![Maintenance status](https://ci-apps.yunohost.org/ci/badges/galene.maintain.svg) [![Install Galène with YunoHost](https://install-app.yunohost.org/install-with-yunohost.svg)](https://install-app.yunohost.org/?app=galene) *[Lire ce readme en français.](./README_fr.md)* diff --git a/README_fr.md b/README_fr.md index 4f48abe..d291126 100644 --- a/README_fr.md +++ b/README_fr.md @@ -5,15 +5,15 @@ It shall NOT be edited by hand. # Galène pour YunoHost -[![Niveau d'intégration](https://dash.yunohost.org/integration/galene.svg)](https://dash.yunohost.org/appci/app/galene) ![Statut du fonctionnement](https://ci-apps.yunohost.org/ci/badges/galene.status.svg) ![Statut de maintenance](https://ci-apps.yunohost.org/ci/badges/galene.maintain.svg) +[![Niveau d’intégration](https://dash.yunohost.org/integration/galene.svg)](https://dash.yunohost.org/appci/app/galene) ![Statut du fonctionnement](https://ci-apps.yunohost.org/ci/badges/galene.status.svg) ![Statut de maintenance](https://ci-apps.yunohost.org/ci/badges/galene.maintain.svg) [![Installer Galène avec YunoHost](https://install-app.yunohost.org/install-with-yunohost.svg)](https://install-app.yunohost.org/?app=galene) *[Read this readme in english.](./README.md)* -> *Ce package vous permet d'installer Galène rapidement et simplement sur un serveur YunoHost. -Si vous n'avez pas YunoHost, regardez [ici](https://yunohost.org/#/install) pour savoir comment l'installer et en profiter.* +> *Ce package vous permet d’installer Galène rapidement et simplement sur un serveur YunoHost. +Si vous n’avez pas YunoHost, regardez [ici](https://yunohost.org/#/install) pour savoir comment l’installer et en profiter.* -## Vue d'ensemble +## Vue d’ensemble Galène est un serveur de visioconférence (un « SFU ») facile à déployer et qui nécessite des ressources serveur modérées. Il a été conçu à l'origine pour les cours et les conférences (où un seul orateur diffuse de l'audio et de la vidéo à des centaines ou des milliers d'utilisateurs), mais a évolué par la suite pour être utile pour les travaux pratiques des étudiants (où les utilisateurs sont divisés en plusieurs petits groupes) et les réunions (où un douzaine d'utilisateurs interagissent entre eux). @@ -32,9 +32,9 @@ Galène est un serveur de visioconférence (un « SFU ») facile à déployer et **Démo :** https://galene.org:8443/ -## Captures d'écran +## Captures d’écran -![Capture d'écran de Galène](./doc/screenshots/screenshot.png) +![Capture d’écran de Galène](./doc/screenshots/screenshot.png) ## Avertissements / informations importantes @@ -90,10 +90,10 @@ Assurez-vous que l'autorisation d'enregistrement est définie dans la configurat ## Documentations et ressources -* Site officiel de l'app : +* Site officiel de l’app : * Documentation officielle utilisateur : -* Documentation officielle de l'admin : -* Dépôt de code officiel de l'app : +* Documentation officielle de l’admin : +* Dépôt de code officiel de l’app : * Documentation YunoHost pour cette app : * Signaler un bug : @@ -109,4 +109,4 @@ ou sudo yunohost app upgrade galene -u https://github.com/YunoHost-Apps/galene_ynh/tree/testing --debug ``` -**Plus d'infos sur le packaging d'applications :** +**Plus d’infos sur le packaging d’applications :** \ No newline at end of file From a0f20ebc41dd8ebd8bc89f6f6d90e1b098486939 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=89ric=20Gaspar?= <46165813+ericgaspar@users.noreply.github.com> Date: Tue, 31 Jan 2023 12:25:06 +0100 Subject: [PATCH 7/7] Update systemd.service --- conf/systemd.service | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/conf/systemd.service b/conf/systemd.service index 1417126..cdbdbcc 100644 --- a/conf/systemd.service +++ b/conf/systemd.service @@ -11,5 +11,34 @@ WorkingDirectory=__FINALPATH__/live/ ExecStart=__FINALPATH__/live/galene -http "127.0.0.1:__PORT__" -insecure -turn __PUBLIC_IP4__:__TURN_PORT__ -udp-range 49152-65535 -groups __DATADIR__/groups -recordings __DATADIR__/recordings -data __FINALPATH__/live/data/ LimitNOFILE=65536 +# various hardening options +ReadWritePaths=/var/lib/galene/recordings +CapabilityBoundingSet= +AmbientCapabilities= +PrivateTmp=yes +PrivateDevices=yes +DevicePolicy=closed +ProtectSystem=strict +ProtectHome=yes +ProtectKernelModules=yes +ProtectKernelTunables=yes +ProtectKernelLogs=yes +ProtectControlGroups=yes +ProtectHostname=yes +ProtectClock=yes +NoNewPrivileges=yes +MountFlags=private +LockPersonality=yes +RestrictRealtime=yes +RestrictNamespaces=yes +RestrictSUIDSGID=yes +KeyringMode=private +MemoryDenyWriteExecute=yes +RemoveIPC=yes +SystemCallArchitectures=native +SystemCallFilter=~ @clock @cpu-emulation @debug @keyring @module @mount @raw-io @reboot @swap @obsolete @timer @resources @privileged @pkey @obsolete @setuid +RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX +UMask=0077 + [Install] WantedBy=multi-user.target