From 7d1e6250083d1955dfcb814f5eb3039f7024be02 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Thu, 27 Apr 2023 23:04:36 +0200 Subject: [PATCH 01/21] Packaging v2 --- conf/app-upgrade.src | 6 -- conf/app.src | 6 -- conf/ldap.src | 7 --- conf/nginx.conf | 47 ++++++++------- conf/php-fpm.conf | 2 +- config_panel.toml | 26 +++++++++ manifest.json | 86 --------------------------- manifest.toml | 80 ++++++++++++++++++++++++++ scripts/_common.sh | 5 -- scripts/backup | 20 +------ scripts/change_url | 86 +-------------------------- scripts/config | 56 +++++++++++++++++- scripts/install | 114 +++++------------------------------- scripts/remove | 38 ------------ scripts/restore | 64 ++------------------- scripts/update_version.sh | 89 ---------------------------- scripts/upgrade | 118 ++++++-------------------------------- 17 files changed, 225 insertions(+), 625 deletions(-) delete mode 100644 conf/app-upgrade.src delete mode 100644 conf/app.src delete mode 100644 conf/ldap.src delete mode 100644 manifest.json create mode 100644 manifest.toml delete mode 100755 scripts/update_version.sh diff --git a/conf/app-upgrade.src b/conf/app-upgrade.src deleted file mode 100644 index b06d61b..0000000 --- a/conf/app-upgrade.src +++ /dev/null @@ -1,6 +0,0 @@ -SOURCE_URL=https://github.com/getgrav/grav/releases/download/1.7.40/grav-update-v1.7.40.zip -SOURCE_SUM=e202ed8b74673cd30230a1349c68a7b667c6fb743b64ba796111468b9ed9fd09 -SOURCE_SUM_PRG=sha256sum -SOURCE_FORMAT=zip -SOURCE_IN_SUBDIR=true -SOURCE_FILENAME= diff --git a/conf/app.src b/conf/app.src deleted file mode 100644 index c2eecc9..0000000 --- a/conf/app.src +++ /dev/null @@ -1,6 +0,0 @@ -SOURCE_URL=https://github.com/getgrav/grav/releases/download/1.7.40/grav-admin-v1.7.40.zip -SOURCE_SUM=c3b5735a8b3c66d7d1a9347fa3300f0a3f545fd9521304208acec2d52a3ada8d -SOURCE_SUM_PRG=sha256sum -SOURCE_FORMAT=zip -SOURCE_IN_SUBDIR=true -SOURCE_FILENAME= diff --git a/conf/ldap.src b/conf/ldap.src deleted file mode 100644 index 563e3a0..0000000 --- a/conf/ldap.src +++ /dev/null @@ -1,7 +0,0 @@ -SOURCE_URL=https://github.com/trilbymedia/grav-plugin-login-ldap/archive/refs/tags/1.0.2.zip -SOURCE_SUM=bdaea681730e800ab8eda7edf56d772baca1de783d0f8c321ac2ec86d82628ca -SOURCE_SUM_PRG=sha256sum -SOURCE_FORMAT=zip -SOURCE_IN_SUBDIR=true -SOURCE_FILENAME=ldap.zip -SOURCE_EXTRACT=true diff --git a/conf/nginx.conf b/conf/nginx.conf index 5985a89..caab054 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -1,6 +1,6 @@ #sub_path_only rewrite ^__PATH__$ __PATH__/ permanent; location __PATH__/ { - alias __FINALPATH__/; + alias __INSTALL_DIR__/; index index.php; # Common parameter to increase upload size limit in conjunction with dedicated php-fpm file @@ -18,36 +18,35 @@ location __PATH__/ { try_files $uri $uri/ __PATH__/__PATH__/index.php?$query_string; location ~ \.php$ { - fastcgi_split_path_info ^(.+\.php)(/.+)$; - fastcgi_pass unix:/var/run/php/php__PHPVERSION__-fpm-__NAME__.sock; - fastcgi_index index.php; - include fastcgi_params; - # https://learn.getgrav.org/webservers-hosting/servers/nginx#fix-against-httpoxy-vulnerability - fastcgi_param HTTP_PROXY ""; - fastcgi_param REMOTE_USER $remote_user; - fastcgi_param PATH_INFO $fastcgi_path_info; - fastcgi_param SCRIPT_FILENAME $request_filename; + fastcgi_split_path_info ^(.+\.php)(/.+)$; + fastcgi_pass unix:/var/run/php/php__PHPVERSION__-fpm-__NAME__.sock; + fastcgi_index index.php; + include fastcgi_params; + # https://learn.getgrav.org/webservers-hosting/servers/nginx#fix-against-httpoxy-vulnerability + fastcgi_param HTTP_PROXY ""; + fastcgi_param REMOTE_USER $remote_user; + fastcgi_param PATH_INFO $fastcgi_path_info; + fastcgi_param SCRIPT_FILENAME $request_filename; } location ~* \.(?:ico|css|js|gif|jpe?g|png)$ { - expires 30d; - more_set_headers "Vary: Accept-Encoding"; - log_not_found off; + expires 30d; + more_set_headers "Vary: Accept-Encoding"; + log_not_found off; } location ~* ^.+\.(?:css|cur|js|jpe?g|gif|htc|ico|png|html|xml|otf|ttf|eot|woff|woff2|svg)$ { - access_log off; - expires 30d; - more_set_headers "Cache-Control: public"; + access_log off; + expires 30d; + more_set_headers "Cache-Control: public"; + ## No need to bleed constant updates. Send the all shebang in one fell swoop. + tcp_nodelay off; - ## No need to bleed constant updates. Send the all shebang in one fell swoop. - tcp_nodelay off; - - ## Set the OS file cache. - open_file_cache max=3000 inactive=120s; - open_file_cache_valid 45s; - open_file_cache_min_uses 2; - open_file_cache_errors off; + ## Set the OS file cache. + open_file_cache max=3000 inactive=120s; + open_file_cache_valid 45s; + open_file_cache_min_uses 2; + open_file_cache_errors off; } ## Begin - Security diff --git a/conf/php-fpm.conf b/conf/php-fpm.conf index 9ea382b..f3a0486 100644 --- a/conf/php-fpm.conf +++ b/conf/php-fpm.conf @@ -358,7 +358,7 @@ request_terminate_timeout = 1d ; Chdir to this directory at the start. ; Note: relative path can be used. ; Default Value: current directory or / when chroot -chdir = __FINALPATH__ +chdir = __INSTALL_DIR__ ; Redirect worker stdout and stderr into main error log. If not set, stdout and ; stderr will be redirected to /dev/null according to FastCGI specs. diff --git a/config_panel.toml b/config_panel.toml index 2b1a213..9cc4e6d 100644 --- a/config_panel.toml +++ b/config_panel.toml @@ -17,3 +17,29 @@ name = "Grav configuration" optional = true visible = "with_sftp" help = "If a password already exists, leave blank and it will not be replaced." + + [main.php_fpm_config] + name = "PHP-FPM configuration" + + [main.php_fpm_config.fpm_footprint] + ask = "Memory footprint" + type = "select" + choices.low = "Low, <= 20Mb per pool" + choices.medium = "Medium, between 20Mb and 40Mb per pool" + choices.high = "High, > 40Mb per pool" + choices.specific = "Use specific value" + default = "low" + + [main.php_fpm_config.fpm_free_footprint] + visible = "fpm_footprint == 'specific'" + ask = "Memory footprint of the service?" + type = "number" + default = "0" + help = "Free field to specify exactly the footprint in Mb if you don't want to use one of the three previous values." + + [main.php_fpm_config.fpm_usage] + ask = "Expected usage" + type = "select" + choices = ["low", "medium", "high"] + default = "low" + help = "low: Personal usage, behind the SSO. No RAM footprint when not used, but the impact on the processor can be high if many users are using the service.
medium: Low usage, few people or/and publicly accessible. Low RAM footprint, medium processor footprint when used.
high: High usage, frequently visited website. High RAM footprint, but lower on processor usage and quickly responding." diff --git a/manifest.json b/manifest.json deleted file mode 100644 index 403a074..0000000 --- a/manifest.json +++ /dev/null @@ -1,86 +0,0 @@ -{ - "name": "Grav", - "id": "grav", - "packaging_format": 1, - "description": { - "en": "Modern open source flat-file CMS", - "fr": "CMS moderne basé sur des fichiers plats" - }, - "version": "1.7.40~ynh1", - "url": "https://www.getgrav.org/", - "upstream": { - "license": "MIT", - "website": "https://www.getgrav.org/", - "demo": "https://getgrav.org/downloads/themes", - "admindoc": "https://learn.getgrav.org", - "code": "https://github.com/getgrav/grav" - }, - "license": "MIT", - "maintainer": [ - { - "name": "tituspijean", - "email": "tituspijean@outlook.com" - } - ], - "previous_maintainers": [ - { - "name": "cyp", - "email": "cyp@rouquin.me" - }, - { - "name": "lithrel", - "email": "lithrel@randomdomainname.net" - }, - { - "name": "jibec", - "email": "jean-baptiste@holcroft.fr" - } - ], - "requirements": { - "yunohost": ">= 4.3.0" - }, - "multi_instance": true, - "services": [ - "nginx" - ], - "arguments": { - "install": [ - { - "name": "domain", - "type": "domain" - }, - { - "name": "path", - "type": "path", - "example": "/grav", - "default": "/grav" - }, - { - "name": "is_public", - "type": "boolean", - "help": { - "en": "Will anyone be able to access the website?", - "fr": "Est-ce que quiconque pourra accéder au site ?" - }, - "default": true - }, - { - "name": "language", - "type": "string", - "ask": { - "en": "Choose the application language", - "fr": "Choisissez la langue de l'application" - }, - "choices": [ - "en_EN", - "fr_FR" - ], - "default": "fr_FR" - }, - { - "name": "admin", - "type": "user" - } - ] - } -} diff --git a/manifest.toml b/manifest.toml new file mode 100644 index 0000000..0f31c83 --- /dev/null +++ b/manifest.toml @@ -0,0 +1,80 @@ +packaging_format = 2 + +id = "grav" +name = "Grav" +description.en = "Modern open source flat-file CMS" +description.fr = "CMS moderne basé sur des fichiers plats" + +version = "1.7.40~ynh1" + +maintainers = ["tituspijean"] + +[upstream] +license = "MIT" +website = "https://www.getgrav.org/" +demo = "https://getgrav.org/downloads/themes" +admindoc = "https://learn.getgrav.org" +code = "https://github.com/getgrav/grav" +cpe = "cpe:2.3:a:getgrav:grav" +fund = "https://opencollective.com/grav" + +[integration] +yunohost = ">= 11.1" +architectures = "all" +multi_instance = true +ldap = "true" +sso = "false" +disk = "50M" +ram.build = "50M" +ram.runtime = "50M" + +[install] + [install.domain] + type = "domain" + + [install.path] + type = "path" + default = "/grav" + + [install.init_main_permission] + help.en = "Will anyone be able to access the website?" + help.fr = "Est-ce que quiconque pourra accéder au site ?" + type = "group" + default = "visitors" + + [install.language] + ask.en = "Choose the application language" + ask.fr = "Choisissez la langue de l'application" + type = "string" + choices = ["en_EN", "fr_FR"] + default = "fr_FR" + + [install.admin] + type = "user" + +[resources] + [resources.sources] + [resources.sources.ldap] + url = "https://github.com/trilbymedia/grav-plugin-login-ldap/archive/refs/tags/1.0.2.zip" + sha256 = "bdaea681730e800ab8eda7edf56d772baca1de783d0f8c321ac2ec86d82628ca" + autoupdate.strategy = "latest_github_tag" + + [resources.sources.main] + url = "https://github.com/getgrav/grav/releases/download/1.7.40/grav-admin-v1.7.40.zip" + sha256 = "c3b5735a8b3c66d7d1a9347fa3300f0a3f545fd9521304208acec2d52a3ada8d" + autoupdate.strategy = "latest_github_tag" + + [resources.sources.app-upgrade] + url = "https://github.com/getgrav/grav/releases/download/1.7.40/grav-update-v1.7.40.zip" + sha256 = "e202ed8b74673cd30230a1349c68a7b667c6fb743b64ba796111468b9ed9fd09" + autoupdate.strategy = "latest_github_tag" + + [resources.system_user] + + [resources.install_dir] + + [resources.permissions] + main.url = "/" + + [resources.apt] + packages = "php7.4, php7.4-zip, php7.4-mbstring, php7.4-curl, php7.4-dom, php7.4-gd, php7.4-xml, php7.4-ldap" diff --git a/scripts/_common.sh b/scripts/_common.sh index febad80..26d0914 100644 --- a/scripts/_common.sh +++ b/scripts/_common.sh @@ -4,11 +4,6 @@ # COMMON VARIABLES #================================================= -php_dependencies="php$YNH_DEFAULT_PHP_VERSION-zip php$YNH_DEFAULT_PHP_VERSION-mbstring php$YNH_DEFAULT_PHP_VERSION-curl php$YNH_DEFAULT_PHP_VERSION-dom php$YNH_DEFAULT_PHP_VERSION-gd php$YNH_DEFAULT_PHP_VERSION-xml php$YNH_DEFAULT_PHP_VERSION-ldap" - -# dependencies used by the app (must be on a single line) -pkg_dependencies="$php_dependencies" - #================================================= # PERSONAL HELPERS #================================================= diff --git a/scripts/backup b/scripts/backup index df79dd9..d4ae004 100644 --- a/scripts/backup +++ b/scripts/backup @@ -10,24 +10,6 @@ source ../settings/scripts/_common.sh source /usr/share/yunohost/helpers -#================================================= -# MANAGE SCRIPT FAILURE -#================================================= - -# Exit if an error occurs during the execution of the script -ynh_abort_if_errors - -#================================================= -# LOAD SETTINGS -#================================================= -ynh_print_info --message="Loading installation settings..." - -app=$YNH_APP_INSTANCE_NAME - -final_path=$(ynh_app_setting_get --app=$app --key=final_path) -domain=$(ynh_app_setting_get --app=$app --key=domain) -phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) - #================================================= # DECLARE DATA AND CONF FILES TO BACKUP #================================================= @@ -37,7 +19,7 @@ ynh_print_info --message="Declaring files to be backed up..." # BACKUP THE APP MAIN DIR #================================================= -ynh_backup --src_path="$final_path" +ynh_backup --src_path="$install_dir" #================================================= # BACKUP THE NGINX CONFIGURATION diff --git a/scripts/change_url b/scripts/change_url index abf1be5..d50c1a8 100644 --- a/scripts/change_url +++ b/scripts/change_url @@ -9,59 +9,6 @@ source _common.sh source /usr/share/yunohost/helpers -#================================================= -# RETRIEVE ARGUMENTS -#================================================= - -old_domain=$YNH_APP_OLD_DOMAIN -old_path=$YNH_APP_OLD_PATH - -new_domain=$YNH_APP_NEW_DOMAIN -new_path=$YNH_APP_NEW_PATH - -app=$YNH_APP_INSTANCE_NAME - -#================================================= -# LOAD SETTINGS -#================================================= -ynh_script_progression --message="Loading installation settings..." --weight=1 - -# Needed for helper "ynh_add_nginx_config" -final_path=$(ynh_app_setting_get --app=$app --key=final_path) - -#================================================= -# BACKUP BEFORE CHANGE URL THEN ACTIVE TRAP -#================================================= -ynh_script_progression --message="Backing up the app before changing its URL (may take a while)..." --weight=1 - -# Backup the current version of the app -ynh_backup_before_upgrade -ynh_clean_setup () { - # Remove the new domain config file, the remove script won't do it as it doesn't know yet its location. - ynh_secure_remove --file="/etc/nginx/conf.d/$new_domain.d/$app.conf" - - # Restore it if the upgrade fails - ynh_restore_upgradebackup -} -# Exit if an error occurs during the execution of the script -ynh_abort_if_errors - -#================================================= -# CHECK WHICH PARTS SHOULD BE CHANGED -#================================================= - -change_domain=0 -if [ "$old_domain" != "$new_domain" ] -then - change_domain=1 -fi - -change_path=0 -if [ "$old_path" != "$new_path" ] -then - change_path=1 -fi - #================================================= # STANDARD MODIFICATIONS #================================================= @@ -69,38 +16,7 @@ fi #================================================= ynh_script_progression --message="Updating NGINX web server configuration..." --weight=3 -nginx_conf_path=/etc/nginx/conf.d/$old_domain.d/$app.conf - -# Change the path in the NGINX config file -if [ $change_path -eq 1 ] -then - # Make a backup of the original NGINX config file if modified - ynh_backup_if_checksum_is_different --file="$nginx_conf_path" - # Set global variables for NGINX helper - domain="$old_domain" - path_url="$new_path" - # Create a dedicated NGINX config - ynh_add_nginx_config -fi - -# Change the domain for NGINX -if [ $change_domain -eq 1 ] -then - # Delete file checksum for the old conf file location - ynh_delete_file_checksum --file="$nginx_conf_path" - mv $nginx_conf_path /etc/nginx/conf.d/$new_domain.d/$app.conf - # Store file checksum for the new config file location - ynh_store_file_checksum --file="/etc/nginx/conf.d/$new_domain.d/$app.conf" -fi - -#================================================= -# GENERIC FINALISATION -#================================================= -# RELOAD NGINX -#================================================= -ynh_script_progression --message="Reloading NGINX web server..." --weight=3 - -ynh_systemd_action --service_name=nginx --action=reload +ynh_change_url_nginx_config #================================================= # END OF SCRIPT diff --git a/scripts/config b/scripts/config index 756c326..9eb2603 100644 --- a/scripts/config +++ b/scripts/config @@ -15,12 +15,37 @@ ynh_abort_if_errors # RETRIEVE ARGUMENTS #================================================= -final_path=$(ynh_app_setting_get $app final_path) +install_dir=$(ynh_app_setting_get --app=$app --key=install_dir) +phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) +current_fpm_footprint=$(ynh_app_setting_get --app=$app --key=fpm_footprint) #================================================= # SPECIFIC GETTERS FOR TOML SHORT KEY #================================================= +get__fpm_footprint() { + # Free footprint value for php-fpm + # Check if current_fpm_footprint is an integer + if [ "$current_fpm_footprint" -eq "$current_fpm_footprint" ] 2> /dev/null + then + echo "specific" + else + echo "$current_fpm_footprint" + fi +} + +get__free_footprint() { + # Free footprint value for php-fpm + # Check if current_fpm_footprint is an integer + if [ "$current_fpm_footprint" -eq "$current_fpm_footprint" ] 2> /dev/null + then + # If current_fpm_footprint is an integer, that's a numeric value for the footprint + echo "$current_fpm_footprint" + else + echo "0" + fi +} + #================================================= # SPECIFIC VALIDATORS FOR TOML SHORT KEYS #================================================= @@ -36,6 +61,20 @@ set__password() { fi } +set__fpm_footprint() { + if [ "$fpm_footprint" != "specific" ] + then + ynh_app_setting_set --app=$app --key=fpm_footprint --value="$fpm_footprint" + fi +} + +set__fpm_free_footprint() { + if [ "$fpm_footprint" = "specific" ] + then + ynh_app_setting_set --app=$app --key=fpm_footprint --value="$fpm_free_footprint" + fi +} + #================================================= # GENERIC FINALIZATION #================================================= @@ -47,6 +86,20 @@ ynh_app_config_validate() { then ynh_die --message="You need to set a password to enable SSH and SFTP" fi + + if [ "${changed[fpm_usage]}" == "true" ] || [ "${changed[fpm_footprint]}" == "true" ] || [ "${changed[fpm_free_footprint]}" == "true" ]; then + # If fpm_footprint is set to 'specific', use $fpm_free_footprint value. + if [ "$fpm_footprint" = "specific" ] + then + fpm_footprint=$fpm_free_footprint + fi + + if [ "$fpm_footprint" == "0" ] + then + ynh_print_err --message="When selecting 'specific', you have to set a footprint value into the field below." + exit 0 + fi + fi } ynh_app_config_apply() { @@ -67,6 +120,7 @@ ynh_app_config_apply() { usermod --shel /usr/sbin/nologin $app fi + ynh_add_fpm_config --phpversion=$phpversion --usage=$fpm_usage --footprint=$fpm_footprint } ynh_app_config_run $1 diff --git a/scripts/install b/scripts/install index 8e12fb4..9e2d1fc 100644 --- a/scripts/install +++ b/scripts/install @@ -9,81 +9,24 @@ source _common.sh source /usr/share/yunohost/helpers -#================================================= -# MANAGE SCRIPT FAILURE -#================================================= - -# Exit if an error occurs during the execution of the script -ynh_abort_if_errors - -#================================================= -# RETRIEVE ARGUMENTS FROM THE MANIFEST -#================================================= - -domain=$YNH_APP_ARG_DOMAIN -path_url=$YNH_APP_ARG_PATH -is_public=$YNH_APP_ARG_IS_PUBLIC -language=$YNH_APP_ARG_LANGUAGE -admin=$YNH_APP_ARG_ADMIN - -app=$YNH_APP_INSTANCE_NAME - -#================================================= -# CHECK IF THE APP CAN BE INSTALLED WITH THESE ARGS -#================================================= -ynh_script_progression --message="Validating installation parameters..." --weight=1 - -final_path=/var/www/$app -test ! -e "$final_path" || ynh_die --message="This path already contains a folder" - -# Register (book) web path -ynh_webpath_register --app=$app --domain=$domain --path_url=$path_url - -#================================================= -# STORE SETTINGS FROM MANIFEST -#================================================= -ynh_script_progression --message="Storing installation settings..." --weight=1 - -ynh_app_setting_set --app=$app --key=domain --value=$domain -ynh_app_setting_set --app=$app --key=path --value=$path_url -ynh_app_setting_set --app=$app --key=language --value=$language -ynh_app_setting_set --app=$app --key=admin --value=$admin +# Initialize the with_sftp setting for the config panel ynh_app_setting_set --app=$app --key=with_sftp --value="false" -ynh_app_setting_set --app=$app --key=password --value=$(ynh_string_random) - -#================================================= -# STANDARD MODIFICATIONS -#================================================= -# INSTALL DEPENDENCIES -#================================================= -ynh_script_progression --message="Installing dependencies..." --weight=1 - -ynh_install_app_dependencies $pkg_dependencies - -#================================================= -# CREATE DEDICATED USER -#================================================= -ynh_script_progression --message="Configuring system user..." --weight=1 - -# Create a system user -ynh_system_user_create --username=$app --home_dir="$final_path" #================================================= # DOWNLOAD, CHECK AND UNPACK SOURCE #================================================= ynh_script_progression --message="Setting up source files..." --weight=2 -ynh_app_setting_set --app=$app --key=final_path --value=$final_path # Download, check integrity, uncompress and patch the source from app.src -ynh_setup_source --dest_dir="$final_path" -ynh_setup_source --dest_dir="$final_path/user/plugins/login-ldap" --source_id="ldap" +ynh_setup_source --dest_dir="$install_dir" +ynh_setup_source --dest_dir="$install_dir/user/plugins/login-ldap" --source_id="ldap" # Set permissions on app files -chown -R $app:www-data "$final_path" -find "$final_path" -type f -exec chmod 640 {} \; -find "$final_path/bin" -type f -exec chmod 750 {} \; -find "$final_path" -type d -exec chmod 750 {} \; -find "$final_path" -type d -exec chmod +s {} \; +chown -R $app:www-data "$install_dir" +find "$install_dir" -type f -exec chmod 640 {} \; +find "$install_dir/bin" -type f -exec chmod 750 {} \; +find "$install_dir" -type d -exec chmod 750 {} \; +find "$install_dir" -type d -exec chmod +s {} \; #================================================= # PHP-FPM CONFIGURATION @@ -92,7 +35,6 @@ ynh_script_progression --message="Configuring PHP-FPM..." --weight=3 # Create a dedicated PHP-FPM config ynh_add_fpm_config --usage=medium --footprint=medium -phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) #================================================= # NGINX CONFIGURATION @@ -110,51 +52,23 @@ ynh_add_nginx_config ynh_script_progression --message="Adding a configuration file..." --weight=1 # Preparing config -ynh_exec_as $app mkdir -p "$final_path/user/config/plugins/login-ldap" -ynh_exec_as $app touch "$final_path/user/accounts/admin.yaml" +ynh_exec_as $app mkdir -p "$install_dir/user/config/plugins/login-ldap" +ynh_exec_as $app touch "$install_dir/user/accounts/admin.yaml" # Setting up config -ynh_add_config --template="../conf/login-ldap.yaml" --destination="$final_path/user/config/plugins/login-ldap.yaml" -chown $app:$app "$final_path/user/config/plugins/login-ldap.yaml" -chmod 640 "$final_path/user/config/plugins/login-ldap.yaml" +ynh_add_config --template="../conf/login-ldap.yaml" --destination="$install_dir/user/config/plugins/login-ldap.yaml" +chown $app:$app "$install_dir/user/config/plugins/login-ldap.yaml" +chmod 640 "$install_dir/user/config/plugins/login-ldap.yaml" #================================================= # CREATE A CRON TASK #================================================= ynh_script_progression --message="Creating a cron task..." --weight=1 -echo "* * * * * $app php$phpversion $final_path/bin/grav scheduler 1>> /dev/null 2>&1" > /etc/cron.d/$app +echo "* * * * * $app php$phpversion $install_dir/bin/grav scheduler 1>> /dev/null 2>&1" > /etc/cron.d/$app chmod 644 /etc/cron.d/$app -#================================================= -# GENERIC FINALIZATION -#================================================= -# SETUP SSOWAT -#================================================= -ynh_script_progression --message="Configuring permissions..." --weight=1 - -# Make app public if necessary -if [ $is_public -eq 1 ] -then - # Everyone can access the app. - # The "main" permission is automatically created before the install script. - ynh_permission_update --permission="main" --add="visitors" -fi - -# Giving admin permission to the specified used -ynh_permission_create --permission="admin" --allowed=$admin - -# Creating user permission -ynh_permission_create --permission="user" - -#================================================= -# RELOAD NGINX -#================================================= -ynh_script_progression --message="Reloading NGINX web server..." --weight=1 - -ynh_systemd_action --service_name=nginx --action=reload - #================================================= # END OF SCRIPT #================================================= diff --git a/scripts/remove b/scripts/remove index d9d704e..0031436 100644 --- a/scripts/remove +++ b/scripts/remove @@ -9,26 +9,6 @@ source _common.sh source /usr/share/yunohost/helpers -#================================================= -# LOAD SETTINGS -#================================================= -ynh_script_progression --message="Loading installation settings..." --weight=1 - -app=$YNH_APP_INSTANCE_NAME - -domain=$(ynh_app_setting_get --app=$app --key=domain) -final_path=$(ynh_app_setting_get --app=$app --key=final_path) - -#================================================= -# STANDARD REMOVE -#================================================= -# REMOVE APP MAIN DIR -#================================================= -ynh_script_progression --message="Removing app main directory..." --weight=1 - -# Remove the app directory securely -ynh_secure_remove --file="$final_path" - #================================================= # REMOVE NGINX CONFIGURATION #================================================= @@ -45,14 +25,6 @@ ynh_script_progression --message="Removing PHP-FPM configuration..." --weight=2 # Remove the dedicated PHP-FPM config ynh_remove_fpm_config -#================================================= -# REMOVE DEPENDENCIES -#================================================= -ynh_script_progression --message="Removing dependencies..." --weight=1 - -# Remove metapackage and its dependencies -ynh_remove_app_dependencies - #================================================= # SPECIFIC REMOVE #================================================= @@ -63,16 +35,6 @@ ynh_script_progression --message="Removing various files..." --weight=1 # Remove a cron file ynh_secure_remove --file="/etc/cron.d/$app" -#================================================= -# GENERIC FINALIZATION -#================================================= -# REMOVE DEDICATED USER -#================================================= -ynh_script_progression --message="Removing the dedicated system user..." --weight=1 - -# Delete a system user -ynh_system_user_delete --username=$app - #================================================= # END OF SCRIPT #================================================= diff --git a/scripts/restore b/scripts/restore index 843210c..edc753a 100644 --- a/scripts/restore +++ b/scripts/restore @@ -10,70 +10,18 @@ source ../settings/scripts/_common.sh source /usr/share/yunohost/helpers -#================================================= -# MANAGE SCRIPT FAILURE -#================================================= - -ynh_clean_setup () { - true -} -# Exit if an error occurs during the execution of the script -ynh_abort_if_errors - -#================================================= -# LOAD SETTINGS -#================================================= -ynh_script_progression --message="Loading installation settings..." --weight=1 - -app=$YNH_APP_INSTANCE_NAME - -domain=$(ynh_app_setting_get --app=$app --key=domain) -path_url=$(ynh_app_setting_get --app=$app --key=path) -final_path=$(ynh_app_setting_get --app=$app --key=final_path) -phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) -fpm_footprint=$(ynh_app_setting_get --app=$app --key=fpm_footprint) -fpm_usage=$(ynh_app_setting_get --app=$app --key=fpm_usage) - -#================================================= -# CHECK IF THE APP CAN BE RESTORED -#================================================= -ynh_script_progression --message="Validating restoration parameters..." --weight=1 - -test ! -d $final_path \ - || ynh_die --message="There is already a directory: $final_path " - -#================================================= -# STANDARD RESTORATION STEPS -#================================================= -# RECREATE THE DEDICATED USER -#================================================= -ynh_script_progression --message="Recreating the dedicated system user..." --weight=3 - -# Create the dedicated user (if not existing) -ynh_system_user_create --username=$app --home_dir="$final_path" - #================================================= # RESTORE THE APP MAIN DIR #================================================= ynh_script_progression --message="Restoring the app main directory..." --weight=2 -ynh_restore_file --origin_path="$final_path" +ynh_restore_file --origin_path="$install_dir" -chown -R $app:www-data "$final_path" -find "$final_path" -type f -exec chmod 640 {} \; -find "$final_path/bin" -type f -exec chmod 750 {} \; -find "$final_path" -type d -exec chmod 750 {} \; -find "$final_path" -type d -exec chmod +s {} \; - -#================================================= -# SPECIFIC RESTORATION -#================================================= -# REINSTALL DEPENDENCIES -#================================================= -ynh_script_progression --message="Reinstalling dependencies..." --weight=1 - -# Define and install dependencies -ynh_install_app_dependencies $pkg_dependencies +chown -R $app:www-data "$install_dir" +find "$install_dir" -type f -exec chmod 640 {} \; +find "$install_dir/bin" -type f -exec chmod 750 {} \; +find "$install_dir" -type d -exec chmod 750 {} \; +find "$install_dir" -type d -exec chmod +s {} \; #================================================= # RESTORE THE PHP-FPM CONFIGURATION diff --git a/scripts/update_version.sh b/scripts/update_version.sh deleted file mode 100755 index 9824561..0000000 --- a/scripts/update_version.sh +++ /dev/null @@ -1,89 +0,0 @@ -#!/bin/bash - -source /usr/share/yunohost/helpers - -repo="getgrav/grav" - -#================================================= -# META HELPER FOR PACKAGE RELEASES -#================================================= - -# This script is meant to be manually run by the app packagers -# to automatically update the source files. - -# Thanks @lukechild and @jbellocastro -# https://gist.github.com/lukechilds/a83e1d7127b78fef38c2914c4ececc3c -version=$(curl --silent "https://api.github.com/repos/$repo/releases/latest" | jq -r ".tag_name") -app_url=$(curl --silent "https://api.github.com/repos/$repo/releases/latest" | jq -r ".assets[0].browser_download_url") -app_upgrade_url=$(curl --silent "https://api.github.com/repos/$repo/releases/latest" | jq -r ".assets[0].browser_download_url") - -### -# APP.SRC -### - -# Create the temporary directory -tempdir="$(mktemp -d)" - -# Download sources and calculate checksum -filename=${app_url##*/} -curl --silent -4 -L $app_url -o "$tempdir/$filename" -checksum=$(sha256sum "$tempdir/$filename" | head -c 64) -ynh_secure_remove $tempdir - -# Get extension -if [[ $filename == *.tar.gz ]]; then - extension=tar.gz -else - extension=${filename##*.} -fi - -cat < ../conf/app.src -SOURCE_URL=$app_url -SOURCE_SUM=$checksum -SOURCE_SUM_PRG=sha256sum -SOURCE_FORMAT=$extension -SOURCE_IN_SUBDIR=true -SOURCE_FILENAME= -EOT - -### -# APP.UPDATE.SRC -### - -# Create the temporary directory -tempdir="$(mktemp -d)" - -# Download sources and calculate checksum -filename=${app_upgrade_url##*/} -curl --silent -4 -L $app_upgrade_url -o "$tempdir/$filename" -checksum=$(sha256sum "$tempdir/$filename" | head -c 64) -ynh_secure_remove $tempdir - -# Get extension -if [[ $filename == *.tar.gz ]]; then - extension=tar.gz -else - extension=${filename##*.} -fi - -cat < ../conf/app.src -SOURCE_URL=$app_upgrade_url -SOURCE_SUM=$checksum -SOURCE_SUM_PRG=sha256sum -SOURCE_FORMAT=$extension -SOURCE_IN_SUBDIR=true -SOURCE_FILENAME= -EOT - -### -# README and COMMIT -### - -sed -i "s# \"version\": \".*# \"version\": \"${version}\~ynh1\",#" ../manifest.json - -message="Upgrade to v$version" -if [ "$message" == "$(git show -s --format=%s)" ]; then - git commit ../manifest.json ../conf/app.src --amend -m "$message" -else - git commit ../manifest.json ../conf/app.src -m "$message" -fi diff --git a/scripts/upgrade b/scripts/upgrade index a5b85e3..178a811 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -9,24 +9,6 @@ source _common.sh source /usr/share/yunohost/helpers -#================================================= -# LOAD SETTINGS -#================================================= -ynh_script_progression --message="Loading installation settings..." --weight=1 - -app=$YNH_APP_INSTANCE_NAME - -domain=$(ynh_app_setting_get --app=$app --key=domain) -path_url=$(ynh_app_setting_get --app=$app --key=path) -language=$(ynh_app_setting_get --app=$app --key=language) -admin=$(ynh_app_setting_get --app=$app --key=admin) -final_path=$(ynh_app_setting_get --app=$app --key=final_path) -fpm_footprint=$(ynh_app_setting_get --app=$app --key=fpm_footprint) -fpm_usage=$(ynh_app_setting_get --app=$app --key=fpm_usage) - -with_sftp=$(ynh_app_setting_get --app=$app --key=with_sftp) -password=$(ynh_app_setting_get --app=$app --key=password) - #================================================= # CHECK VERSION #================================================= @@ -34,20 +16,6 @@ ynh_script_progression --message="Checking version..." --weight=1 upgrade_type=$(ynh_check_app_version_changed) -#================================================= -# BACKUP BEFORE UPGRADE THEN ACTIVE TRAP -#================================================= -ynh_script_progression --message="Backing up the app before upgrading (may take a while)..." --weight=4 - -# Backup the current version of the app -ynh_backup_before_upgrade -ynh_clean_setup () { - # Restore it if the upgrade fails - ynh_restore_upgradebackup -} -# Exit if an error occurs during the execution of the script -ynh_abort_if_errors - #================================================= # STANDARD UPGRADE STEPS #================================================= @@ -55,31 +23,6 @@ ynh_abort_if_errors #================================================= ynh_script_progression --message="Ensuring downward compatibility..." --weight=1 -# If final_path doesn't exist, create it -if [ -z "$final_path" ]; then - final_path=/var/www/$app - ynh_app_setting_set --app=$app --key=final_path --value=$final_path -fi - -# Cleaning legacy permissions -if ynh_legacy_permissions_exists; then - ynh_legacy_permissions_delete_all - - ynh_app_setting_delete --app=$app --key=is_public -fi - -# Giving admin permission to the specified used -if ! ynh_permission_exists --permission="admin" -then - ynh_permission_create --permission="admin" --allowed="$admin" -fi - -# Creating user permission -if ! ynh_permission_exists --permission="user" -then - ynh_permission_create --permission="user" -fi - # If fpm_footprint doesn't exist, create it if [ -z "$fpm_footprint" ]; then fpm_footprint=medium @@ -95,22 +38,14 @@ fi # If with_sftp or password don't exist, create them if [ -z "$with_sftp" ] || [ -z "$password" ]; then ynh_app_setting_set --app=$app --key=with_sftp --value="false" - ynh_app_setting_set --app=$app --key=password --value=$(ynh_string_random) + ynh_app_setting_set --app=$app --key=password --value=$(ynh_string_random) fi # Delete existing ini configuration file (backward compatibility) -if [ -f /etc/php/$YNH_PHP_VERSION/fpm/conf.d/20-$app.ini ]; then - ynh_secure_remove --file=/etc/php/$YNH_PHP_VERSION/fpm/conf.d/20-$app.ini +if [ -f /etc/php/$phpversion/fpm/conf.d/20-$app.ini ]; then + ynh_secure_remove --file=/etc/php/$phpversion/fpm/conf.d/20-$app.ini fi -#================================================= -# CREATE DEDICATED USER -#================================================= -ynh_script_progression --message="Making sure dedicated system user exists..." --weight=3 - -# Create a dedicated user (if not existing) -ynh_system_user_create --username=$app --home_dir="$final_path" - #================================================= # DOWNLOAD, CHECK AND UNPACK SOURCE #================================================= @@ -120,23 +55,16 @@ then ynh_script_progression --message="Upgrading source files..." --weight=2 # Download, check integrity, uncompress and patch the source from app.src - ynh_setup_source --dest_dir="$final_path" --source_id="app-upgrade" - ynh_setup_source --dest_dir="$final_path/user/plugins/login-ldap" --source_id="ldap" + ynh_setup_source --dest_dir="$install_dir" --source_id="app-upgrade" + ynh_setup_source --dest_dir="$install_dir/user/plugins/login-ldap" --source_id="ldap" fi # Set permissions on app files -chown -R $app:www-data "$final_path" -find "$final_path" -type f -exec chmod 640 {} \; -find "$final_path/bin" -type f -exec chmod 750 {} \; -find "$final_path" -type d -exec chmod 750 {} \; -find "$final_path" -type d -exec chmod +s {} \; - -#================================================= -# UPGRADE DEPENDENCIES -#================================================= -ynh_script_progression --message="Upgrading dependencies..." --weight=1 - -ynh_install_app_dependencies $pkg_dependencies +chown -R $app:www-data "$install_dir" +find "$install_dir" -type f -exec chmod 640 {} \; +find "$install_dir/bin" -type f -exec chmod 750 {} \; +find "$install_dir" -type d -exec chmod 750 {} \; +find "$install_dir" -type d -exec chmod +s {} \; #================================================= # PHP-FPM CONFIGURATION @@ -145,7 +73,6 @@ ynh_script_progression --message="Upgrading PHP-FPM configuration..." --weight=1 # Create a dedicated PHP-FPM config ynh_add_fpm_config --usage=$fpm_usage --footprint=$fpm_footprint -phpversion=$(ynh_app_setting_get --app=$app --key=phpversion) #================================================= # NGINX CONFIGURATION @@ -162,20 +89,20 @@ ynh_add_nginx_config #================================================= ynh_script_progression --message="Updating a configuration file..." --weight=3 -mkdir -p "$final_path/user/config/plugins/login-ldap" -touch "$final_path/user/accounts/admin.yaml" +mkdir -p "$install_dir/user/config/plugins/login-ldap" +touch "$install_dir/user/accounts/admin.yaml" -ynh_add_config --template="../conf/login-ldap.yaml" --destination="$final_path/user/config/plugins/login-ldap.yaml" -chown $app:$app "$final_path/user/config/plugins/login-ldap.yaml" -chmod 640 "$final_path/user/config/plugins/login-ldap.yaml" +ynh_add_config --template="../conf/login-ldap.yaml" --destination="$install_dir/user/config/plugins/login-ldap.yaml" +chown $app:$app "$install_dir/user/config/plugins/login-ldap.yaml" +chmod 640 "$install_dir/user/config/plugins/login-ldap.yaml" #================================================= # UPGRADE PLUGINS #================================================= ynh_script_progression --message="Updating all plugins..." --weight=1 -pushd "$final_path" - ynh_exec_warn_less yes N | ynh_exec_warn_less ynh_exec_as $app php${YNH_PHP_VERSION} bin/gpm update --all-yes --no-interaction || ynh_print_warn --message="Automatic plugin upgrade has failed, you can upgrade them from your Grav admin panel." +pushd "$install_dir" + ynh_exec_warn_less yes N | ynh_exec_warn_less ynh_exec_as $app php${phpversion} bin/gpm update --all-yes --no-interaction || ynh_print_warn --message="Automatic plugin upgrade has failed, you can upgrade them from your Grav admin panel." popd #================================================= @@ -183,18 +110,9 @@ popd #================================================ ynh_script_progression --message="Updating a cron task..." --weight=1 -echo "* * * * * $app php${YNH_PHP_VERSION} $final_path/bin/grav scheduler 1>> /dev/null 2>&1" > /etc/cron.d/$app +echo "* * * * * $app php${phpversion} $install_dir/bin/grav scheduler 1>> /dev/null 2>&1" > /etc/cron.d/$app chmod 644 /etc/cron.d/$app -#================================================= -# GENERIC FINALIZATION -#================================================= -# RELOAD NGINX -#================================================= -ynh_script_progression --message="Reloading NGINX web server..." --weight=1 - -ynh_systemd_action --service_name=nginx --action=reload - #================================================= # END OF SCRIPT #================================================= From 37d274ac93ac0fa3d584012151c07d4bcf288903 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Thu, 27 Apr 2023 23:27:16 +0200 Subject: [PATCH 02/21] Fix admin permission --- manifest.toml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/manifest.toml b/manifest.toml index 0f31c83..968c3d7 100644 --- a/manifest.toml +++ b/manifest.toml @@ -49,7 +49,9 @@ ram.runtime = "50M" choices = ["en_EN", "fr_FR"] default = "fr_FR" - [install.admin] + [install.init_admin_permission] + ask.en = "Select an administrator for the app" + ask.fr = "Sélectionnez un administrateur pour l'application" type = "user" [resources] @@ -75,6 +77,7 @@ ram.runtime = "50M" [resources.permissions] main.url = "/" + admin.show_tile = false [resources.apt] packages = "php7.4, php7.4-zip, php7.4-mbstring, php7.4-curl, php7.4-dom, php7.4-gd, php7.4-xml, php7.4-ldap" From db4ee605e012aea3c5bece37d79e6c2151d059e6 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Thu, 27 Apr 2023 23:28:39 +0200 Subject: [PATCH 03/21] Fix SFTP setting: init password upon install --- scripts/install | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/scripts/install b/scripts/install index 9e2d1fc..a41ae79 100644 --- a/scripts/install +++ b/scripts/install @@ -9,8 +9,9 @@ source _common.sh source /usr/share/yunohost/helpers -# Initialize the with_sftp setting for the config panel +# Initialize the SFTP setting for the config panel ynh_app_setting_set --app=$app --key=with_sftp --value="false" +ynh_app_setting_set --app=$app --key=password --value=$(ynh_string_random) #================================================= # DOWNLOAD, CHECK AND UNPACK SOURCE From c744b47ccf8a6cfe94a8ebec00c9e7af9f3f38f9 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Thu, 27 Apr 2023 23:33:32 +0200 Subject: [PATCH 04/21] Fix PHP-FPM settings: init variables upon install --- scripts/install | 3 +++ 1 file changed, 3 insertions(+) diff --git a/scripts/install b/scripts/install index a41ae79..007f88c 100644 --- a/scripts/install +++ b/scripts/install @@ -12,6 +12,9 @@ source /usr/share/yunohost/helpers # Initialize the SFTP setting for the config panel ynh_app_setting_set --app=$app --key=with_sftp --value="false" ynh_app_setting_set --app=$app --key=password --value=$(ynh_string_random) +ynh_app_setting_set --app=$app --key=fpm_footprint --value="medium" +ynh_app_setting_set --app=$app --key=fpm_free_footprint --value="0" +ynh_app_setting_set --app=$app --key=fpm_usage --value="medium" #================================================= # DOWNLOAD, CHECK AND UNPACK SOURCE From d9a90f4b99f47d052953f83f651ed6b2f4b96b7b Mon Sep 17 00:00:00 2001 From: tituspijean Date: Thu, 27 Apr 2023 23:36:59 +0200 Subject: [PATCH 05/21] check_process to tests.toml --- check_process | 46 ---------------------------------------------- tests.toml | 5 +++++ 2 files changed, 5 insertions(+), 46 deletions(-) delete mode 100644 check_process create mode 100644 tests.toml diff --git a/check_process b/check_process deleted file mode 100644 index 290566d..0000000 --- a/check_process +++ /dev/null @@ -1,46 +0,0 @@ -;; Test name -# Comment ignored - ; pre-install - #echo -n "Here your commands to execute in the container" - #echo ", before each installation of the app." - ; Manifest - domain="domain.tld" - path="/path" - is_public=1 - language="fr_FR" - admin="john" - ; Actions - action_argument=arg1|arg2 - is_public=1|0 - ; Config_panel - main.categorie.config_example=arg1|arg2 - main.overwrite_files.overwrite_phpfpm=1|0 - main.php_fpm_config.footprint=low|medium|high|specific - main.php_fpm_config.free_footprint=20 - main.php_fpm_config.usage=low|medium|high - ; Checks - pkg_linter=1 - setup_sub_dir=1 - setup_root=1 - setup_nourl=0 - setup_private=1 - setup_public=1 - upgrade=1 -# upgrade=1 from_commit=7d16d0560c588ad4adcde5b44ae4329f9e40f7c7 - upgrade=1 from_commit=412306ac0a7c3f6f02aff162b65eb4b1f4484b2a - backup_restore=1 - multi_instance=1 - port_already_use=0 (66) - change_url=1 - actions=0 - config_panel=0 -;;; Options -Email=tituspijean@outlook.com -Notification=none -;;; Upgrade options -# ; commit=7d16d0560c588ad4adcde5b44ae4329f9e40f7c7 -# name=v1.7.17 -# manifest_arg=domain=DOMAIN&path=PATH&admin=USER&language=fr_FR&is_public=1& - ; commit=412306ac0a7c3f6f02aff162b65eb4b1f4484b2a - name=v1.7.21 - manifest_arg=domain=DOMAIN&path=PATH&admin=USER&language=fr_FR&is_public=1& diff --git a/tests.toml b/tests.toml new file mode 100644 index 0000000..2fd0265 --- /dev/null +++ b/tests.toml @@ -0,0 +1,5 @@ +test_format = 1.0 + +[default] + + test_upgrade_from.412306ac0a7c3f6f02aff162b65eb4b1f4484b2a.name = "Upgrade from v1.7.21" From bc0896e9a0320ccf948614d9fac77cca63074dae Mon Sep 17 00:00:00 2001 From: tituspijean Date: Thu, 27 Apr 2023 23:46:43 +0200 Subject: [PATCH 06/21] Fix user permission --- manifest.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/manifest.toml b/manifest.toml index 968c3d7..ac889b8 100644 --- a/manifest.toml +++ b/manifest.toml @@ -78,6 +78,7 @@ ram.runtime = "50M" [resources.permissions] main.url = "/" admin.show_tile = false + user.show_tile = false [resources.apt] packages = "php7.4, php7.4-zip, php7.4-mbstring, php7.4-curl, php7.4-dom, php7.4-gd, php7.4-xml, php7.4-ldap" From 6f65ab1b46bb0f70d33449e4c43b01c5807065a1 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Thu, 27 Apr 2023 23:53:52 +0200 Subject: [PATCH 07/21] Add documentation --- doc/{DISCLAIMER.md => ADMIN.md} | 5 +++-- doc/{DISCLAIMER_fr.md => ADMIN_fr.md} | 7 ++++--- doc/POST_INSTALL.md | 3 +++ manifest.toml | 4 ++-- 4 files changed, 12 insertions(+), 7 deletions(-) rename doc/{DISCLAIMER.md => ADMIN.md} (66%) rename doc/{DISCLAIMER_fr.md => ADMIN_fr.md} (59%) create mode 100644 doc/POST_INSTALL.md diff --git a/doc/DISCLAIMER.md b/doc/ADMIN.md similarity index 66% rename from doc/DISCLAIMER.md rename to doc/ADMIN.md index 6369cf6..af9fb1c 100644 --- a/doc/DISCLAIMER.md +++ b/doc/ADMIN.md @@ -1,9 +1,10 @@ -* You can access the administration panel at `yourdomain.tld/path/admin`. Users created within YunoHost can log in, provided their were given the appropriate permissions: +* You can access the administration panel at `__DOMAIN____PATH__/admin`. Users created within YunoHost can log in, provided their were given the appropriate permissions: * To make users administrators, give them the `grav.admin` permission. * To allow users to log in, without extended rights, give them the `grav.user` permission. * Grav offers an SSH or SFTP access, which can be enabled in its YunoHost admin configuration panel. * You can thus use its GPM command line binary. Refer to is documentation, but bear in mind you need to call it by specifying the PHP version used by the app: - `php7.3 bin/grav ...` or `php7.3 bin/gpm ...` + 1. `cd __INSTALL_DIR__` + 2. `sudo -u __APP__ php__PHPVERSION__ bin/grav ...` or `sudo -u __APP__ php__PHPVERSION__bin/gpm ...` * You can install plugins through the admin panel, or through the GPM. * If installing Grav at the root of a domain, bear in mind that paths starting by `/yunohost` are reserved. diff --git a/doc/DISCLAIMER_fr.md b/doc/ADMIN_fr.md similarity index 59% rename from doc/DISCLAIMER_fr.md rename to doc/ADMIN_fr.md index e21bd6b..b41bbf6 100644 --- a/doc/DISCLAIMER_fr.md +++ b/doc/ADMIN_fr.md @@ -1,9 +1,10 @@ -* Vous pouvez accéder au panneau d'adminstration à l'adresse `votredomaine.tld/votrechemin/admin`. Les utilisateurs créés dans YunoHost peuvent se connecter, à condition de leur avoir octroyé la permission adéquate: +* Vous pouvez accéder au panneau d'adminstration à l'adresse `__DOMAIN____PATH__/admin`. Les utilisateurs créés dans YunoHost peuvent se connecter, à condition de leur avoir octroyé la permission adéquate: * `grav.admin` pour qu'ils soient administrateur de Grav ; * `grav.user` pour qu'ils puissent se connecter, mais sans droit étendu. * Grav offre un accès par SSH ou SFTP, activable dans le panneau de configuration de l'application dans l'administration de YunoHost. * Vous pouvez ainsi utiliser sa ligne de commande GPM. Référez-vous à sa documentation, mais sachez que vous devrez préciser la version de PHP utilisée par l'app: - `php7.3 bin/grav ...` ou `php7.3 bin/gpm ...` + 1. `cd __INSTALL_DIR__` + 2. `sudo -u __APP__ php__PHPVERSION__ bin/grav ...` ou `sudo -u __APP__ php__PHPVERSION__ bin/gpm ...` * Vous pouvez installer les extensions soit via le panneau d'administration, soit via GPM. -* Si vous installez Grav à la racin d'un domaine, sachez que les chemins d'accès commançant par `/yunohost` sont réservés. +* Si vous installez Grav à la racine d'un domaine, sachez que les chemins d'accès commançant par `/yunohost` sont réservés. diff --git a/doc/POST_INSTALL.md b/doc/POST_INSTALL.md new file mode 100644 index 0000000..9b84539 --- /dev/null +++ b/doc/POST_INSTALL.md @@ -0,0 +1,3 @@ +Grav has been successfully installed! + +You can enable or disable its SFTP access, or tweak its PHP-FPM resources profile within its configuration panel in the webadmin. diff --git a/manifest.toml b/manifest.toml index ac889b8..2eebbcf 100644 --- a/manifest.toml +++ b/manifest.toml @@ -22,8 +22,8 @@ fund = "https://opencollective.com/grav" yunohost = ">= 11.1" architectures = "all" multi_instance = true -ldap = "true" -sso = "false" +ldap = true +sso = false disk = "50M" ram.build = "50M" ram.runtime = "50M" From 7698b7149e3d42be754d1b11068d921feeebc4b9 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Thu, 27 Apr 2023 23:57:09 +0200 Subject: [PATCH 08/21] Use extra_php-fpm.conf --- conf/extra_php-fpm.conf | 10 + conf/php-fpm.conf | 430 ---------------------------------------- 2 files changed, 10 insertions(+), 430 deletions(-) create mode 100644 conf/extra_php-fpm.conf delete mode 100644 conf/php-fpm.conf diff --git a/conf/extra_php-fpm.conf b/conf/extra_php-fpm.conf new file mode 100644 index 0000000..7937b47 --- /dev/null +++ b/conf/extra_php-fpm.conf @@ -0,0 +1,10 @@ +; Common values to change to increase file upload limit +php_admin_value[upload_max_filesize] = 50M +php_admin_value[post_max_size] = 50M +; php_admin_flag[mail.add_x_header] = Off + +; Other common parameters +; php_admin_value[max_execution_time] = 600 +; php_admin_value[max_input_time] = 300 +; php_admin_value[memory_limit] = 256M +; php_admin_flag[short_open_tag] = On diff --git a/conf/php-fpm.conf b/conf/php-fpm.conf deleted file mode 100644 index f3a0486..0000000 --- a/conf/php-fpm.conf +++ /dev/null @@ -1,430 +0,0 @@ -; Start a new pool named 'www'. -; the variable $pool can be used in any directive and will be replaced by the -; pool name ('www' here) -[__NAMETOCHANGE__] - -; Per pool prefix -; It only applies on the following directives: -; - 'access.log' -; - 'slowlog' -; - 'listen' (unixsocket) -; - 'chroot' -; - 'chdir' -; - 'php_values' -; - 'php_admin_values' -; When not set, the global prefix (or /usr) applies instead. -; Note: This directive can also be relative to the global prefix. -; Default Value: none -;prefix = /path/to/pools/$pool - -; Unix user/group of processes -; Note: The user is mandatory. If the group is not set, the default user's group -; will be used. -user = __USER__ -group = __USER__ - -; The address on which to accept FastCGI requests. -; Valid syntaxes are: -; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on -; a specific port; -; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on -; a specific port; -; 'port' - to listen on a TCP socket to all addresses -; (IPv6 and IPv4-mapped) on a specific port; -; '/path/to/unix/socket' - to listen on a unix socket. -; Note: This value is mandatory. -listen = /var/run/php/php__PHPVERSION__-fpm-__NAMETOCHANGE__.sock - -; Set listen(2) backlog. -; Default Value: 511 (-1 on FreeBSD and OpenBSD) -;listen.backlog = 511 - -; Set permissions for unix socket, if one is used. In Linux, read/write -; permissions must be set in order to allow connections from a web server. Many -; BSD-derived systems allow connections regardless of permissions. -; Default Values: user and group are set as the running user -; mode is set to 0660 -listen.owner = www-data -listen.group = www-data -;listen.mode = 0660 -; When POSIX Access Control Lists are supported you can set them using -; these options, value is a comma separated list of user/group names. -; When set, listen.owner and listen.group are ignored -;listen.acl_users = -;listen.acl_groups = - -; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect. -; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original -; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address -; must be separated by a comma. If this value is left blank, connections will be -; accepted from any ip address. -; Default Value: any -;listen.allowed_clients = 127.0.0.1 - -; Specify the nice(2) priority to apply to the pool processes (only if set) -; The value can vary from -19 (highest priority) to 20 (lower priority) -; Note: - It will only work if the FPM master process is launched as root -; - The pool processes will inherit the master process priority -; unless it specified otherwise -; Default Value: no set -; process.priority = -19 - -; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user -; or group is differrent than the master process user. It allows to create process -; core dump and ptrace the process for the pool user. -; Default Value: no -; process.dumpable = yes - -; Choose how the process manager will control the number of child processes. -; Possible Values: -; static - a fixed number (pm.max_children) of child processes; -; dynamic - the number of child processes are set dynamically based on the -; following directives. With this process management, there will be -; always at least 1 children. -; pm.max_children - the maximum number of children that can -; be alive at the same time. -; pm.start_servers - the number of children created on startup. -; pm.min_spare_servers - the minimum number of children in 'idle' -; state (waiting to process). If the number -; of 'idle' processes is less than this -; number then some children will be created. -; pm.max_spare_servers - the maximum number of children in 'idle' -; state (waiting to process). If the number -; of 'idle' processes is greater than this -; number then some children will be killed. -; ondemand - no children are created at startup. Children will be forked when -; new requests will connect. The following parameter are used: -; pm.max_children - the maximum number of children that -; can be alive at the same time. -; pm.process_idle_timeout - The number of seconds after which -; an idle process will be killed. -; Note: This value is mandatory. -pm = dynamic - -; The number of child processes to be created when pm is set to 'static' and the -; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'. -; This value sets the limit on the number of simultaneous requests that will be -; served. Equivalent to the ApacheMaxClients directive with mpm_prefork. -; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP -; CGI. The below defaults are based on a server without much resources. Don't -; forget to tweak pm.* to fit your needs. -; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand' -; Note: This value is mandatory. -pm.max_children = 10 - -; The number of child processes created on startup. -; Note: Used only when pm is set to 'dynamic' -; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2 -pm.start_servers = 2 - -; The desired minimum number of idle server processes. -; Note: Used only when pm is set to 'dynamic' -; Note: Mandatory when pm is set to 'dynamic' -pm.min_spare_servers = 1 - -; The desired maximum number of idle server processes. -; Note: Used only when pm is set to 'dynamic' -; Note: Mandatory when pm is set to 'dynamic' -pm.max_spare_servers = 3 - -; The number of seconds after which an idle process will be killed. -; Note: Used only when pm is set to 'ondemand' -; Default Value: 10s -;pm.process_idle_timeout = 10s; - -; The number of requests each child process should execute before respawning. -; This can be useful to work around memory leaks in 3rd party libraries. For -; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS. -; Default Value: 0 -pm.max_requests = 500 - -; The URI to view the FPM status page. If this value is not set, no URI will be -; recognized as a status page. It shows the following informations: -; pool - the name of the pool; -; process manager - static, dynamic or ondemand; -; start time - the date and time FPM has started; -; start since - number of seconds since FPM has started; -; accepted conn - the number of request accepted by the pool; -; listen queue - the number of request in the queue of pending -; connections (see backlog in listen(2)); -; max listen queue - the maximum number of requests in the queue -; of pending connections since FPM has started; -; listen queue len - the size of the socket queue of pending connections; -; idle processes - the number of idle processes; -; active processes - the number of active processes; -; total processes - the number of idle + active processes; -; max active processes - the maximum number of active processes since FPM -; has started; -; max children reached - number of times, the process limit has been reached, -; when pm tries to start more children (works only for -; pm 'dynamic' and 'ondemand'); -; Value are updated in real time. -; Example output: -; pool: www -; process manager: static -; start time: 01/Jul/2011:17:53:49 +0200 -; start since: 62636 -; accepted conn: 190460 -; listen queue: 0 -; max listen queue: 1 -; listen queue len: 42 -; idle processes: 4 -; active processes: 11 -; total processes: 15 -; max active processes: 12 -; max children reached: 0 -; -; By default the status page output is formatted as text/plain. Passing either -; 'html', 'xml' or 'json' in the query string will return the corresponding -; output syntax. Example: -; http://www.foo.bar/status -; http://www.foo.bar/status?json -; http://www.foo.bar/status?html -; http://www.foo.bar/status?xml -; -; By default the status page only outputs short status. Passing 'full' in the -; query string will also return status for each pool process. -; Example: -; http://www.foo.bar/status?full -; http://www.foo.bar/status?json&full -; http://www.foo.bar/status?html&full -; http://www.foo.bar/status?xml&full -; The Full status returns for each process: -; pid - the PID of the process; -; state - the state of the process (Idle, Running, ...); -; start time - the date and time the process has started; -; start since - the number of seconds since the process has started; -; requests - the number of requests the process has served; -; request duration - the duration in µs of the requests; -; request method - the request method (GET, POST, ...); -; request URI - the request URI with the query string; -; content length - the content length of the request (only with POST); -; user - the user (PHP_AUTH_USER) (or '-' if not set); -; script - the main script called (or '-' if not set); -; last request cpu - the %cpu the last request consumed -; it's always 0 if the process is not in Idle state -; because CPU calculation is done when the request -; processing has terminated; -; last request memory - the max amount of memory the last request consumed -; it's always 0 if the process is not in Idle state -; because memory calculation is done when the request -; processing has terminated; -; If the process is in Idle state, then informations are related to the -; last request the process has served. Otherwise informations are related to -; the current request being served. -; Example output: -; ************************ -; pid: 31330 -; state: Running -; start time: 01/Jul/2011:17:53:49 +0200 -; start since: 63087 -; requests: 12808 -; request duration: 1250261 -; request method: GET -; request URI: /test_mem.php?N=10000 -; content length: 0 -; user: - -; script: /home/fat/web/docs/php/test_mem.php -; last request cpu: 0.00 -; last request memory: 0 -; -; Note: There is a real-time FPM status monitoring sample web page available -; It's available in: /usr/share/php/7.0/fpm/status.html -; -; Note: The value must start with a leading slash (/). The value can be -; anything, but it may not be a good idea to use the .php extension or it -; may conflict with a real PHP file. -; Default Value: not set -;pm.status_path = /status - -; The ping URI to call the monitoring page of FPM. If this value is not set, no -; URI will be recognized as a ping page. This could be used to test from outside -; that FPM is alive and responding, or to -; - create a graph of FPM availability (rrd or such); -; - remove a server from a group if it is not responding (load balancing); -; - trigger alerts for the operating team (24/7). -; Note: The value must start with a leading slash (/). The value can be -; anything, but it may not be a good idea to use the .php extension or it -; may conflict with a real PHP file. -; Default Value: not set -;ping.path = /ping - -; This directive may be used to customize the response of a ping request. The -; response is formatted as text/plain with a 200 response code. -; Default Value: pong -;ping.response = pong - -; The access log file -; Default: not set -;access.log = log/$pool.access.log - -; The access log format. -; The following syntax is allowed -; %%: the '%' character -; %C: %CPU used by the request -; it can accept the following format: -; - %{user}C for user CPU only -; - %{system}C for system CPU only -; - %{total}C for user + system CPU (default) -; %d: time taken to serve the request -; it can accept the following format: -; - %{seconds}d (default) -; - %{miliseconds}d -; - %{mili}d -; - %{microseconds}d -; - %{micro}d -; %e: an environment variable (same as $_ENV or $_SERVER) -; it must be associated with embraces to specify the name of the env -; variable. Some exemples: -; - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e -; - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e -; %f: script filename -; %l: content-length of the request (for POST request only) -; %m: request method -; %M: peak of memory allocated by PHP -; it can accept the following format: -; - %{bytes}M (default) -; - %{kilobytes}M -; - %{kilo}M -; - %{megabytes}M -; - %{mega}M -; %n: pool name -; %o: output header -; it must be associated with embraces to specify the name of the header: -; - %{Content-Type}o -; - %{X-Powered-By}o -; - %{Transfert-Encoding}o -; - .... -; %p: PID of the child that serviced the request -; %P: PID of the parent of the child that serviced the request -; %q: the query string -; %Q: the '?' character if query string exists -; %r: the request URI (without the query string, see %q and %Q) -; %R: remote IP address -; %s: status (response code) -; %t: server time the request was received -; it can accept a strftime(3) format: -; %d/%b/%Y:%H:%M:%S %z (default) -; The strftime(3) format must be encapsuled in a %{}t tag -; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t -; %T: time the log has been written (the request has finished) -; it can accept a strftime(3) format: -; %d/%b/%Y:%H:%M:%S %z (default) -; The strftime(3) format must be encapsuled in a %{}t tag -; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t -; %u: remote user -; -; Default: "%R - %u %t \"%m %r\" %s" -;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%" - -; The log file for slow requests -; Default Value: not set -; Note: slowlog is mandatory if request_slowlog_timeout is set -slowlog = /var/log/nginx/__NAMETOCHANGE__.slow.log - -; The timeout for serving a single request after which a PHP backtrace will be -; dumped to the 'slowlog' file. A value of '0s' means 'off'. -; Available units: s(econds)(default), m(inutes), h(ours), or d(ays) -; Default Value: 0 -request_slowlog_timeout = 5s - -; The timeout for serving a single request after which the worker process will -; be killed. This option should be used when the 'max_execution_time' ini option -; does not stop script execution for some reason. A value of '0' means 'off'. -; Available units: s(econds)(default), m(inutes), h(ours), or d(ays) -; Default Value: 0 -request_terminate_timeout = 1d - -; Set open file descriptor rlimit. -; Default Value: system defined value -;rlimit_files = 1024 - -; Set max core size rlimit. -; Possible Values: 'unlimited' or an integer greater or equal to 0 -; Default Value: system defined value -;rlimit_core = 0 - -; Chroot to this directory at the start. This value must be defined as an -; absolute path. When this value is not set, chroot is not used. -; Note: you can prefix with '$prefix' to chroot to the pool prefix or one -; of its subdirectories. If the pool prefix is not set, the global prefix -; will be used instead. -; Note: chrooting is a great security feature and should be used whenever -; possible. However, all PHP paths will be relative to the chroot -; (error_log, sessions.save_path, ...). -; Default Value: not set -;chroot = - -; Chdir to this directory at the start. -; Note: relative path can be used. -; Default Value: current directory or / when chroot -chdir = __INSTALL_DIR__ - -; Redirect worker stdout and stderr into main error log. If not set, stdout and -; stderr will be redirected to /dev/null according to FastCGI specs. -; Note: on highloaded environement, this can cause some delay in the page -; process time (several ms). -; Default Value: no -catch_workers_output = yes - -; Clear environment in FPM workers -; Prevents arbitrary environment variables from reaching FPM worker processes -; by clearing the environment in workers before env vars specified in this -; pool configuration are added. -; Setting to "no" will make all environment variables available to PHP code -; via getenv(), $_ENV and $_SERVER. -; Default Value: yes -;clear_env = no - -; Limits the extensions of the main script FPM will allow to parse. This can -; prevent configuration mistakes on the web server side. You should only limit -; FPM to .php extensions to prevent malicious users to use other extensions to -; execute php code. -; Note: set an empty value to allow all extensions. -; Default Value: .php -;security.limit_extensions = .php .php3 .php4 .php5 .php7 - -; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from -; the current environment. -; Default Value: clean env -;env[HOSTNAME] = $HOSTNAME -;env[PATH] = /usr/local/bin:/usr/bin:/bin -;env[TMP] = /tmp -;env[TMPDIR] = /tmp -;env[TEMP] = /tmp - -; Additional php.ini defines, specific to this pool of workers. These settings -; overwrite the values previously defined in the php.ini. The directives are the -; same as the PHP SAPI: -; php_value/php_flag - you can set classic ini defines which can -; be overwritten from PHP call 'ini_set'. -; php_admin_value/php_admin_flag - these directives won't be overwritten by -; PHP call 'ini_set' -; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no. - -; Defining 'extension' will load the corresponding shared extension from -; extension_dir. Defining 'disable_functions' or 'disable_classes' will not -; overwrite previously defined php.ini values, but will append the new value -; instead. - -; Note: path INI options can be relative and will be expanded with the prefix -; (pool, global or /usr) - -; Default Value: nothing is defined by default except the values in php.ini and -; specified at startup with the -d argument -;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com -;php_flag[display_errors] = off -;php_admin_value[error_log] = /var/log/fpm-php.www.log -;php_admin_flag[log_errors] = on -;php_admin_value[memory_limit] = 32M - -; Common values to change to increase file upload limit -php_admin_value[upload_max_filesize] = 50M -php_admin_value[post_max_size] = 50M -; php_admin_flag[mail.add_x_header] = Off - -; Other common parameters -; php_admin_value[max_execution_time] = 600 -; php_admin_value[max_input_time] = 300 -; php_admin_value[memory_limit] = 256M -; php_admin_flag[short_open_tag] = On From 589ed868c5e736b6bc6aac416cae96f2fb09346b Mon Sep 17 00:00:00 2001 From: tituspijean Date: Thu, 27 Apr 2023 23:57:57 +0200 Subject: [PATCH 09/21] Fix tests.toml --- tests.toml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/tests.toml b/tests.toml index 2fd0265..e05f22d 100644 --- a/tests.toml +++ b/tests.toml @@ -2,4 +2,6 @@ test_format = 1.0 [default] + args.init_admin_permission = "package_checker" + test_upgrade_from.412306ac0a7c3f6f02aff162b65eb4b1f4484b2a.name = "Upgrade from v1.7.21" From edb88bfdc9f242fda3d0f21f61284d44e0adacd8 Mon Sep 17 00:00:00 2001 From: yunohost-bot Date: Thu, 27 Apr 2023 21:58:09 +0000 Subject: [PATCH 10/21] Auto-update README --- README.md | 12 ------------ README_fr.md | 12 ------------ 2 files changed, 24 deletions(-) diff --git a/README.md b/README.md index 3e0869b..70db227 100644 --- a/README.md +++ b/README.md @@ -27,18 +27,6 @@ Grav is a modern open source flat-file CMS. ![Screenshot of Grav](./doc/screenshots/grav.jpg) -## Disclaimers / important information - -* You can access the administration panel at `yourdomain.tld/path/admin`. Users created within YunoHost can log in, provided their were given the appropriate permissions: - * To make users administrators, give them the `grav.admin` permission. - * To allow users to log in, without extended rights, give them the `grav.user` permission. -* Grav offers an SSH or SFTP access, which can be enabled in its YunoHost admin configuration panel. - * You can thus use its GPM command line binary. - Refer to is documentation, but bear in mind you need to call it by specifying the PHP version used by the app: - `php7.3 bin/grav ...` or `php7.3 bin/gpm ...` -* You can install plugins through the admin panel, or through the GPM. -* If installing Grav at the root of a domain, bear in mind that paths starting by `/yunohost` are reserved. - ## Documentation and resources * Official app website: diff --git a/README_fr.md b/README_fr.md index 88c8006..39b86f5 100644 --- a/README_fr.md +++ b/README_fr.md @@ -27,18 +27,6 @@ Un CMS moderne basé sur des fichiers plats ![Capture d’écran de Grav](./doc/screenshots/grav.jpg) -## Avertissements / informations importantes - -* Vous pouvez accéder au panneau d'adminstration à l'adresse `votredomaine.tld/votrechemin/admin`. Les utilisateurs créés dans YunoHost peuvent se connecter, à condition de leur avoir octroyé la permission adéquate: - * `grav.admin` pour qu'ils soient administrateur de Grav ; - * `grav.user` pour qu'ils puissent se connecter, mais sans droit étendu. -* Grav offre un accès par SSH ou SFTP, activable dans le panneau de configuration de l'application dans l'administration de YunoHost. - * Vous pouvez ainsi utiliser sa ligne de commande GPM. - Référez-vous à sa documentation, mais sachez que vous devrez préciser la version de PHP utilisée par l'app: - `php7.3 bin/grav ...` ou `php7.3 bin/gpm ...` -* Vous pouvez installer les extensions soit via le panneau d'administration, soit via GPM. -* Si vous installez Grav à la racin d'un domaine, sachez que les chemins d'accès commançant par `/yunohost` sont réservés. - ## Documentations et ressources * Site officiel de l’app : From 0e100f185858f023d7ca371e0bf8ecd1200b31a7 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Sun, 30 Apr 2023 11:50:04 +0200 Subject: [PATCH 11/21] Fix tests.toml --- tests.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/tests.toml b/tests.toml index e05f22d..5a58b28 100644 --- a/tests.toml +++ b/tests.toml @@ -5,3 +5,4 @@ test_format = 1.0 args.init_admin_permission = "package_checker" test_upgrade_from.412306ac0a7c3f6f02aff162b65eb4b1f4484b2a.name = "Upgrade from v1.7.21" + test_upgrade_from.412306ac0a7c3f6f02aff162b65eb4b1f4484b2a.args.admin = "package_checker" From 9e67ce0db1dabe746584d4fadd8fa7939cbc510c Mon Sep 17 00:00:00 2001 From: tituspijean Date: Sun, 30 Apr 2023 14:41:30 +0200 Subject: [PATCH 12/21] Fix tests.toml --- tests.toml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests.toml b/tests.toml index 5a58b28..1e6bbb2 100644 --- a/tests.toml +++ b/tests.toml @@ -4,5 +4,5 @@ test_format = 1.0 args.init_admin_permission = "package_checker" - test_upgrade_from.412306ac0a7c3f6f02aff162b65eb4b1f4484b2a.name = "Upgrade from v1.7.21" - test_upgrade_from.412306ac0a7c3f6f02aff162b65eb4b1f4484b2a.args.admin = "package_checker" + test_upgrade_from.412306a.name = "v1.7.21" + test_upgrade_from.412306a.args.admin = "package_checker" From 26cad5301bcea3feed3ea7cb95516882eff19a9a Mon Sep 17 00:00:00 2001 From: tituspijean Date: Sun, 30 Apr 2023 16:04:06 +0200 Subject: [PATCH 13/21] Fix tests.toml --- tests.toml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests.toml b/tests.toml index 1e6bbb2..2777f91 100644 --- a/tests.toml +++ b/tests.toml @@ -2,7 +2,7 @@ test_format = 1.0 [default] - args.init_admin_permission = "package_checker" + args.init_admin_permission = "john" test_upgrade_from.412306a.name = "v1.7.21" - test_upgrade_from.412306a.args.admin = "package_checker" + test_upgrade_from.412306a.args.admin = "john" From b9a4600c849132dd0f3e299271f01ef3c05308a3 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Sun, 30 Apr 2023 16:20:42 +0200 Subject: [PATCH 14/21] Fix tests.toml --- tests.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests.toml b/tests.toml index 2777f91..490eba9 100644 --- a/tests.toml +++ b/tests.toml @@ -2,7 +2,7 @@ test_format = 1.0 [default] - args.init_admin_permission = "john" + args.init_admin_permission = "package_checker" test_upgrade_from.412306a.name = "v1.7.21" test_upgrade_from.412306a.args.admin = "john" From bb4eda0e65728576974e93b64ced36b62e7ad74d Mon Sep 17 00:00:00 2001 From: tituspijean Date: Sun, 30 Apr 2023 17:33:47 +0200 Subject: [PATCH 15/21] Fix tests.toml --- tests.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests.toml b/tests.toml index 490eba9..9cc72cd 100644 --- a/tests.toml +++ b/tests.toml @@ -5,4 +5,4 @@ test_format = 1.0 args.init_admin_permission = "package_checker" test_upgrade_from.412306a.name = "v1.7.21" - test_upgrade_from.412306a.args.admin = "john" + test_upgrade_from.412306a.install_args.admin = "package_checker" From 4997562b9c73e92f8711219f9f7b2e607db8b6e8 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Sun, 30 Apr 2023 18:05:48 +0200 Subject: [PATCH 16/21] Fix tests.toml --- tests.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/tests.toml b/tests.toml index 9cc72cd..e787c4a 100644 --- a/tests.toml +++ b/tests.toml @@ -6,3 +6,4 @@ test_format = 1.0 test_upgrade_from.412306a.name = "v1.7.21" test_upgrade_from.412306a.install_args.admin = "package_checker" + test_upgrade_from.412306a.install_args.domain = "domain.tld" From 91bf10cf0e2961e5e2ccb3ee45166e83d7a08417 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Sun, 30 Apr 2023 19:06:05 +0200 Subject: [PATCH 17/21] Fix downward compatibility --- scripts/upgrade | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/scripts/upgrade b/scripts/upgrade index 178a811..db91abb 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -24,19 +24,19 @@ upgrade_type=$(ynh_check_app_version_changed) ynh_script_progression --message="Ensuring downward compatibility..." --weight=1 # If fpm_footprint doesn't exist, create it -if [ -z "$fpm_footprint" ]; then +if [ -z "${fpm_footprint:-}" ]; then fpm_footprint=medium ynh_app_setting_set --app=$app --key=fpm_footprint --value=$fpm_footprint fi # If fpm_usage doesn't exist, create it -if [ -z "$fpm_usage" ]; then +if [ -z "${fpm_usage:-}" ]; then fpm_usage=medium ynh_app_setting_set --app=$app --key=fpm_usage --value=$fpm_usage fi # If with_sftp or password don't exist, create them -if [ -z "$with_sftp" ] || [ -z "$password" ]; then +if [ -z "${with_sftp:-}" ] || [ -z "${password:-}" ]; then ynh_app_setting_set --app=$app --key=with_sftp --value="false" ynh_app_setting_set --app=$app --key=password --value=$(ynh_string_random) fi From bc0f8d2271bcc322a9ddd973925e9eb4c8fa5767 Mon Sep 17 00:00:00 2001 From: yunohost-bot Date: Fri, 16 Jun 2023 06:09:00 +0000 Subject: [PATCH 18/21] Upgrade to v1.7.42.1 --- conf/app-upgrade.src | 4 ++-- conf/app.src | 4 ++-- manifest.json | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/conf/app-upgrade.src b/conf/app-upgrade.src index d6a71b2..aa67007 100644 --- a/conf/app-upgrade.src +++ b/conf/app-upgrade.src @@ -1,5 +1,5 @@ -SOURCE_URL=https://github.com/getgrav/grav/releases/download/1.7.41.1/grav-update-v1.7.41.1.zip -SOURCE_SUM=b664ec3a0da287f3c85dc6ddab68ce294603af4b4068d13388a47989379eeb61 +SOURCE_URL=https://github.com/getgrav/grav/releases/download/1.7.42.1/grav-update-v1.7.42.1.zip +SOURCE_SUM=29beadbd2f31b8faffa05f5d072ebf6ec56f71247538a6251a88fe15308d38b3 SOURCE_SUM_PRG=sha256sum SOURCE_FORMAT=zip SOURCE_IN_SUBDIR=true diff --git a/conf/app.src b/conf/app.src index ff46ec0..7905c85 100644 --- a/conf/app.src +++ b/conf/app.src @@ -1,5 +1,5 @@ -SOURCE_URL=https://github.com/getgrav/grav/releases/download/1.7.41.1/grav-admin-v1.7.41.1.zip -SOURCE_SUM=4d820a9fbc4c12d5a81c471a4c6dd2fa44ca36058ca634fc9bd08fd65c06acd8 +SOURCE_URL=https://github.com/getgrav/grav/releases/download/1.7.42.1/grav-admin-v1.7.42.1.zip +SOURCE_SUM=6aadb5f5cda5aeb8c8bf5cecaf06129bfc7226aaf49a21840bbd98600a69ef26 SOURCE_SUM_PRG=sha256sum SOURCE_FORMAT=zip SOURCE_IN_SUBDIR=true diff --git a/manifest.json b/manifest.json index dbf6336..532e06c 100644 --- a/manifest.json +++ b/manifest.json @@ -6,7 +6,7 @@ "en": "Modern open source flat-file CMS", "fr": "CMS moderne basé sur des fichiers plats" }, - "version": "1.7.41.1~ynh1", + "version": "1.7.42.1~ynh1", "url": "https://www.getgrav.org/", "upstream": { "license": "MIT", From 2601352771b006af82443b63a1851e10f2154673 Mon Sep 17 00:00:00 2001 From: yunohost-bot Date: Fri, 16 Jun 2023 06:09:09 +0000 Subject: [PATCH 19/21] Auto-update README --- README.md | 2 +- README_fr.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 30200f0..a469b8c 100644 --- a/README.md +++ b/README.md @@ -19,7 +19,7 @@ If you don't have YunoHost, please consult [the guide](https://yunohost.org/#/in Grav is a modern open source flat-file CMS. -**Shipped version:** 1.7.41.1~ynh1 +**Shipped version:** 1.7.42.1~ynh1 **Demo:** https://getgrav.org/downloads/themes diff --git a/README_fr.md b/README_fr.md index 07b9f19..9d9a5bb 100644 --- a/README_fr.md +++ b/README_fr.md @@ -19,7 +19,7 @@ Si vous n’avez pas YunoHost, regardez [ici](https://yunohost.org/#/install) po Un CMS moderne basé sur des fichiers plats -**Version incluse :** 1.7.41.1~ynh1 +**Version incluse :** 1.7.42.1~ynh1 **Démo :** https://getgrav.org/downloads/themes From e544bcc4ff590a8f5ff0808294056414e02acfd0 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Sat, 24 Jun 2023 18:21:57 +0200 Subject: [PATCH 20/21] Fix typo --- manifest.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifest.toml b/manifest.toml index 4ca85e6..5abb743 100644 --- a/manifest.toml +++ b/manifest.toml @@ -63,7 +63,7 @@ ram.runtime = "50M" [resources.sources.main] url = "https://github.com/getgrav/grav/releases/download/1.7.42.1/grav-admin-v1.7.42.1.zip" - sha256 = '6aadb5f5cda5aeb8c8bf5cecaf06129bfc7226aaf49a21840bbd98600a69ef26" + sha256 = "6aadb5f5cda5aeb8c8bf5cecaf06129bfc7226aaf49a21840bbd98600a69ef26" autoupdate.strategy = "latest_github_tag" [resources.sources.app-upgrade] From 5f91812654440161c3c88b20a85aaae9a3ec9898 Mon Sep 17 00:00:00 2001 From: tituspijean Date: Sat, 24 Jun 2023 18:32:28 +0200 Subject: [PATCH 21/21] Fix checksums --- manifest.toml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/manifest.toml b/manifest.toml index 5abb743..fa964d5 100644 --- a/manifest.toml +++ b/manifest.toml @@ -63,12 +63,12 @@ ram.runtime = "50M" [resources.sources.main] url = "https://github.com/getgrav/grav/releases/download/1.7.42.1/grav-admin-v1.7.42.1.zip" - sha256 = "6aadb5f5cda5aeb8c8bf5cecaf06129bfc7226aaf49a21840bbd98600a69ef26" + sha256 = "491ea48e91da4de3ab07b059e373355282a85d8e36a7b76200e11298a616c70d" autoupdate.strategy = "latest_github_tag" [resources.sources.app-upgrade] url = "https://github.com/getgrav/grav/releases/download/1.7.42.1/grav-update-v1.7.42.1.zip" - sha256 = "29beadbd2f31b8faffa05f5d072ebf6ec56f71247538a6251a88fe15308d38b3" + sha256 = "59875446e248c442e99651a093081a6fa6fe539a3cabe944ce2c5c69fe77900c" autoupdate.strategy = "latest_github_tag" [resources.system_user]