[Sugar-devel] Pootle SOS
Martin Abente
martin.abente.lahaye at gmail.com
Wed Jul 30 10:25:06 EDT 2014
Hey Matthew,
Thanks! Right now I am trying to figure out how to upgrade pootle packages,
but after I am done we look at that :)
On Wed, Jul 30, 2014 at 10:20 AM, Matthew Ciao <matthew at laptop.org.au>
wrote:
> Hi Martin,
>
> maybe if you have time you / we can also work out a minimal secure setup?
>
> Looks like newpootle needs a bit of firewalling to start with:
>
> sudo /sbin/iptables -L -nv
> Chain INPUT (policy ACCEPT 324 packets, 29890 bytes)
> pkts bytes target prot opt in out source
> destination
>
> Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
> pkts bytes target prot opt in out source
> destination
>
> Chain OUTPUT (policy ACCEPT 186 packets, 20370 bytes)
> pkts bytes target prot opt in out source
> destination
>
> Cheers
>
>
> On 30 July 2014 17:46, Matthew Ciao <matthew at laptop.org.au> wrote:
>
>> Thanks Bernie!
>>
>> Martin I enclose an apache vhost .conf file that should work out of the
>> box based on my reading/editing of the one in production at the moment.
>>
>> There are a few edits so if you intend to use it please remove my
>> comments! :D
>>
>> Cheers
>>
>>
>> On 30 July 2014 12:28, Bernie Innocenti <bernie at codewiz.org> wrote:
>>
>>> Try logging in as bashintosh at newpootle.sugarlabs.org
>>>
>>> You have root on newpootle, but please coordinate with Martin to avoid
>>> stepping on each other's toes :-)
>>>
>>> On 07/29/2014 06:42 PM, Matthew Ciao wrote:
>>> > Hi Martin,
>>> >
>>> > do you have any .htaccess files in your sites directories?
>>> >
>>> > If yes you need to review the AllowOverride directive in your config
>>> > files and depending on what is in .htaccess you may need to enable
>>> > modules such as mod_rewrite.
>>> >
>>> > Anyway the first deny directive you have there works for the main
>>> Apache
>>> > document-root (/) which I assume is /srv/www/ itself: check your
>>> > httpd.conf (or main config file under /etc/apache2/) and look for the
>>> > default document-root.
>>> >
>>> > Creating an exception as you did to allow access for /srv/www/ works
>>> but
>>> > that way you slow down Apache a bit because first it evaluates a deny
>>> > then an allow directive for the same document-root.
>>> >
>>> > If you post all the config files we can understand even better.. :)
>>> >
>>> > Cheers
>>> >
>>> > On Wednesday, 30 July 2014, Martin Abente
>>> > <martin.abente.lahaye at gmail.com
>>> > <javascript:_e(%7B%7D,'cvml','martin.abente.lahaye at gmail.com');>>
>>> wrote:
>>> >
>>> > Hello all,
>>> >
>>> > The instance is back, I had to made a few changes:
>>> >
>>> > 1. added ".conf" extension to the site configuration file
>>> > 2. temporarily removed caching directives, I still need to figure
>>> > what can be use to replace them.
>>> > 3. changed some permissions [1].
>>> >
>>> >
>>> > @matthew can you re-check the configuration file? I am not expert
>>> in
>>> > apache so my fixes could be more like hacks.
>>> >
>>> > Next step is trying to upgrade pootle version...
>>> >
>>> > Refs:
>>> > 1.
>>> >
>>> http://dabase.com/blog/AH01630:_client_denied_by_server_configuration/
>>> >
>>> >
>>> > On Mon, Jul 28, 2014 at 9:41 PM, Matthew Ciao
>>> > <matthew at laptop.org.au> wrote:
>>> >
>>> > Done!
>>> >
>>> > Sent it from my private email bashintosh at gmail dot com
>>> >
>>> > On 29 July 2014 10:43, Bernie Innocenti <bernie at codewiz.org>
>>> wrote:
>>> >
>>> > By the way, you don't even have a shell account yet:
>>> >
>>> > http://wiki.sugarlabs.org/go/Service/shell
>>> >
>>> > Please apply now, you can use me as your sponsor.
>>> >
>>> > On 07/28/2014 07:52 PM, Matthew Ciao wrote:
>>> > > As a quick suggestion, if you haven't done it already I
>>> > recommend to
>>> > > start debugging by looking at the Apache logs
>>> > (/var/log/apache2 on most
>>> > > Debian-based systems).
>>> > >
>>> > > A general health-check on Apache itself could also
>>> include:
>>> > >
>>> > > * verify the server is running (process)
>>> > > * verify the server is listening on the desired ports
>>> > (netstat, lsof)
>>> > > * check firewall rules (iptables being a good place to
>>> > start)
>>> > > * inspect vhosts configurations
>>> > >
>>> > > Lemme know if you need any help Martin,
>>> > >
>>> > > /Matthew/
>>> > >
>>> > >
>>> > > On 29 July 2014 01:27, Martin Abente
>>> > <martin.abente.lahaye at gmail.com
>>> > > <mailto:martin.abente.lahaye at gmail.com>> wrote:
>>> > >
>>> > > Ok!
>>> > >
>>> > >
>>> > > On Mon, Jul 28, 2014 at 11:25 AM, Bernie Innocenti
>>> > > <bernie at codewiz.org <mailto:bernie at codewiz.org>>
>>> wrote:
>>> > >
>>> > > Yes, I did it yesterday. The machine boots, but
>>> > the apache
>>> > > virtual host
>>> > > doesn't seem to work any more.
>>> > >
>>> > > I'll leave the rest to you!
>>> > >
>>> > >
>>> > > On 07/28/2014 10:53 AM, Martin Abente wrote:
>>> > > > Hey Bernie!
>>> > > >
>>> > > > Did you get the time to update the machine?
>>> > > >
>>> > > >
>>> > > > On Thu, Jul 24, 2014 at 7:56 PM, Matthew Ciao
>>> > > <matthew at laptop.org.au <mailto:
>>> matthew at laptop.org.au>
>>> > > > <mailto:matthew at laptop.org.au
>>> > <mailto:matthew at laptop.org.au>>>
>>> > > wrote:
>>> > > >
>>> > > > Guys please let me know if there's anything
>>> > I can do to help!
>>> > > >
>>> > > >
>>> > > > On 25 July 2014 04:01, Martin Abente
>>> > > <martin.abente.lahaye at gmail.com
>>> > > <mailto:martin.abente.lahaye at gmail.com>
>>> > > > <mailto:martin.abente.lahaye at gmail.com
>>> > > <mailto:martin.abente.lahaye at gmail.com>>> wrote:
>>> > > >
>>> > > > Hey Bernie!
>>> > > >
>>> > > > I (literally) just finished my first
>>> > round of tests
>>> > > setting up a
>>> > > > pootle 2.5.1.1 instance from scratch.
>>> > The results are
>>> > > promising:
>>> > > >
>>> > > > 1. Setting up a pootle instance from
>>> > scratch was very
>>> > > > straightforward.
>>> > > > 2. Creating a new project and
>>> > integrating it with git
>>> > > > versioning was also surprisingly
>>> > straightforward.
>>> > > In fact,
>>> > > > no custom bits were require to make
>>> > pootle import
>>> > > Sugar
>>> > > > project and start making commits to
>>> > the remote
>>> > > repository.
>>> > > >
>>> > > > Other premature comments:
>>> > > >
>>> > > > * pootle imported _almost_ all the
>>> > languages, but I
>>> > > had to
>>> > > > manually add languages like
>>> > "guarani". I still
>>> > > don't know
>>> > > > why, ideas?
>>> > > > * I still need to check the SL wiki
>>> to
>>> > have some
>>> > > ideas of how
>>> > > > it would be better to organize the
>>> > projects. IIRC, our
>>> > > > previous pootle instance followed
>>> > the same sugar
>>> > > modules
>>> > > > like sucrose, fructose, etc.
>>> > Suggestions?
>>> > > >
>>> > > >
>>> > > > I don't think I will have the time to
>>> > work on this
>>> > > during the
>>> > > > weeking (because of the wedding), but
>>> if
>>> > you could
>>> > > make sure the
>>> > > > server is ready, I can continue over
>>> the
>>> > week.
>>> > > >
>>> > > >
>>> > > > Bernie if you don't have time to work on
>>> > what Martin needs
>>> > > I can
>>> > > > step in, no problems at all.
>>> > > >
>>> > > > Cheers!
>>> > > >
>>> > > >
>>> > > >
>>> > > >
>>> > > > On Thu, Jul 24, 2014 at 1:03 PM, Bernie
>>> > Innocenti
>>> > > > <bernie at codewiz.org
>>> > <mailto:bernie at codewiz.org>
>>> > > <mailto:bernie at codewiz.org
>>> > <mailto:bernie at codewiz.org>>> wrote:
>>> > > >
>>> > > > Martin is taking Pootle, but if you
>>> > have time to
>>> > > help with
>>> > > > it, I think
>>> > > > it would be appreciated.
>>> > > >
>>> > > > I think I'll start the work on
>>> > Sunday. Martin,
>>> > > would you
>>> > > > have time?
>>> > > >
>>> > > >
>>> > > > On 07/21/2014 07:08 AM, Matthew
>>> Ciao
>>> > wrote:
>>> > > > > Hi folks,
>>> > > > >
>>> > > > > it looks like you're already in a
>>> > good position
>>> > > in terms
>>> > > > of help from
>>> > > > > rgs and/or icarito so I don't
>>> > think I would be
>>> > > very useful
>>> > > > at the meeting.
>>> > > > >
>>> > > > > This said, if all goes bad please
>>> > involve me in
>>> > > the Pootle
>>> > > > mission as I
>>> > > > > am more than keen to lend a
>>> hand! :)
>>> > > > >
>>> > > > > Best,
>>> > > > >
>>> > > > > Matthew
>>> > > > >
>>> > > > > On Jul 21, 2014 4:15 AM, "Bernie
>>> > Innocenti"
>>> > > > <bernie at codewiz.org
>>> > <mailto:bernie at codewiz.org>
>>> > > <mailto:bernie at codewiz.org
>>> > <mailto:bernie at codewiz.org>>
>>> > > > > <mailto:bernie at codewiz.org
>>> > > <mailto:bernie at codewiz.org> <mailto:
>>> bernie at codewiz.org
>>> > > <mailto:bernie at codewiz.org>>>>
>>> > > > wrote:
>>> > > > >
>>> > > > > +rgs, +icarito (both of which
>>> > expressed
>>> > > interest in
>>> > > > supporting Pootle)
>>> > > > >
>>> > > > >
>>> > > > > On 07/20/2014 01:36 PM,
>>> Martin
>>> > Abente wrote:
>>> > > > > > Hello everyone,
>>> > > > > >
>>> > > > > > What about investing some
>>> > minutes this
>>> > > week to talk
>>> > > > about Pootle's
>>> > > > > > status, what is missing and
>>> > how can we get
>>> > > it back
>>> > > > to life?
>>> > > > > >
>>> > > > > > I suggest this Wednesday 23
>>> > July, 13:00 UTC.
>>> > > > >
>>> > > > > It's a bit early for me, and
>>> > definitely too
>>> > > early for rgs.
>>> > > > > Can we do 15:00 UTC?
>>> > > > >
>>> > > > >
>>> > > > > In case I miss the meeting,
>>> > here's a full
>>> > > dump of my mind:
>>> > > > >
>>> > > > > - you, rgs and icarito
>>> > already have root to
>>> > > > newpootle.sugarlabs.org
>>> > <http://newpootle.sugarlabs.org>
>>> > > <http://newpootle.sugarlabs.org>
>>> > <http://newpootle.sugarlabs.org>
>>> > > > > <
>>> http://newpootle.sugarlabs.org>
>>> > > > >
>>> > > > > - full backups of the old
>>> > pootle machine are on
>>> > > > freedom, and all of you
>>> > > > > have root access there too
>>> > > > >
>>> > > > > - Sysadmin documentation is
>>> > in the usual
>>> > > place (the
>>> > > > wiki). There are
>>> > > > > several pages written by the
>>> > previous Pootle
>>> > > maintainers:
>>> > > > >
>>> > > > >
>>> > http://wiki.sugarlabs.org/go/Service/translate
>>> > > > >
>>> > http://wiki.sugarlabs.org/go/Service/Pootle
>>> > > > >
>>> > http://wiki.sugarlabs.org/go/Service/Pootle2.5
>>> > > > >
>>> > http://wiki.sugarlabs.org/go/Machine/pootle
>>> > > > >
>>> > > > > The documentation needs to
>>> be
>>> > consolidated
>>> > > into a
>>> > > > single page and
>>> > > > > updated. *PLEASE*, don't
>>> > neglect this step;
>>> > > it will
>>> > > > save a lot of time
>>> > > > > to future maintainers.
>>> > > > >
>>> > > > > - The newpootle machine is
>>> > still running
>>> > > Ubuntu 12.04
>>> > > > LTS. I strongly
>>> > > > > recommend upgrading it to
>>> > 14.04 (trusty) before
>>> > > > proceeding. It won't
>>> > > > > take more than 1h of work and
>>> > I can do this.
>>> > > > >
>>> > > > > - There's an outdated
>>> > instance of Pootle
>>> > > already
>>> > > > running on newpootle.
>>> > > > > It was setup by a previous
>>> > volunteer, but never
>>> > > > transitioned into
>>> > > > > production due to
>>> difficulties
>>> > with the git
>>> > > > integration (iirc, cjl might
>>> > > > > have more on this).
>>> > > > >
>>> > > > > - I strongly recommend
>>> > upgrading to the latest
>>> > > > release of Pootle before
>>> > > > > doing anything else.
>>> > > > >
>>> > > > > - Then, the database and
>>> data
>>> > from the
>>> > > backups needs
>>> > > > to be restored and
>>> > > > > probably converted to the
>>> > Pootle 2.5 format
>>> > > (good luck
>>> > > > with Django db
>>> > > > > migration!)
>>> > > > >
>>> > > > > - Finally, the part where
>>> all
>>> > past
>>> > > maintainers seem
>>> > > > to get stuck: make
>>> > > > > the Pootle <-> git
>>> integration
>>> > work. I don't
>>> > > know what
>>> > > > the actual
>>> > > > > problem is; pushing to git
>>> > should be a basic
>>> > > feature
>>> > > > of a translation
>>> > > > > system and I'm surprised this
>>> > can't be made
>>> > > to work
>>> > > > out of the box.
>>> > > > >
>>> > > > > - When everything works (and
>>> > please test it
>>> > > well,
>>> > > > Pootle likes to crash
>>> > > > > and burn under load), we can
>>> > change the DNS
>>> > > to point
>>> > > > the CNAME
>>> > > > > translate.sugarlabs.org
>>> > <http://translate.sugarlabs.org>
>>> > > <http://translate.sugarlabs.org>
>>> > > > <http://translate.sugarlabs.org>
>>> > > > <http://translate.sugarlabs.org>
>>> to
>>> > > > > newpootle. Follow the
>>> > Service/nameserver
>>> > > > > documentation page to do
>>> this,
>>> > or I can do
>>> > > it in 2
>>> > > > minutes.
>>> > > > >
>>> > > > > --
>>> > > > > _ // Bernie Innocenti
>>> > > > > \X/ http://codewiz.org
>>> > > > >
>>> > > >
>>> > > >
>>> > > > --
>>> > > > _ // Bernie Innocenti
>>> > > > \X/ http://codewiz.org
>>> > > >
>>> > > >
>>> > > >
>>> > > >
>>> > >
>>> > >
>>> > > --
>>> > > _ // Bernie Innocenti
>>> > > \X/ http://codewiz.org
>>> > >
>>> > >
>>> > >
>>> >
>>> >
>>> > --
>>> > _ // Bernie Innocenti
>>> > \X/ http://codewiz.org
>>> >
>>> >
>>> >
>>>
>>>
>>> --
>>> _ // Bernie Innocenti
>>> \X/ http://codewiz.org
>>>
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sugarlabs.org/archive/sugar-devel/attachments/20140730/ea223e24/attachment-0001.html>
More information about the Sugar-devel
mailing list