Baremetal installation script

[fnrcum]

Describe the bug

I have done the baremetal installation script on ubuntu behind haproxy reverse proxy. Things work fine in the most part but I can't figure out some things.

Encountered issues

In most docs there seems to be a marketplace in the top left for integrations and apps which I don't see In the docts it's stated that you can also install apps and integrations manually by adding them to the apps folder on the machine but for the life of me I can't find where these apps should go

Setup

• Ubuntu 23
• OCIS 6.3.0
• HAPROXY reverse proxy with CA signed certs
• Hairpin NAT for the openid auth

OCIS_URL=https://<MY DOMAIN>
OCIS_OIDC_ISSUER=https://<MY DOMAIN>
IDP_ISS=https://<MY DOMAIN>
PROXY_HTTP_ADDR=0.0.0.0:9200
PROXY_TLS=false
IDP_TLS=false

OCIS_INSECURE=true

OCIS_LOG_LEVEL=warn
OCIS_LOG_COLOR=true
OCIS_LOG_PRETTY=true

OCIS_CONFIG_DIR=/etc/ocis
OCIS_BASE_DATA_PATH=/var/lib/ocis

IDM_ADMIN_PASSWORD=secret

Additional context

Could anyone tell me exactly how you install extensions manually or if the marketplace part is also an extension i don't have installed?

[micbar]

@kulmann Could you help?

[kulmann]

Hey @fnrcum 👋

You're correct, we've built an app store app - it's in its early phase as of now. It has a few main goals:

1. Make it easier to discover available apps (that's what we have at the moment)
2. Encourage people to submit their apps and extensions to our app store (on it.. there are a few more third party apps which are not in the app store, yet)
3. Make installation an easy one-/few-clicks experience (not here, yet)

If you know where to download apps then the app store app doesn't bring you much value at the moment. Installation still involves download a zip file, placing it in a folder, extracting it, configuring it if needed, restarting ocis. That's described here: https://owncloud.dev/services/web/#web-apps

The app-store app is again an app itself and if you have a custom config.json you can just add the string app-store into the apps array. If you have a custom csp.yaml file you need to add 'https://raw.githubusercontent.com/owncloud/awesome-ocis/' to connect-src and img-src - if you don't have a custom csp.yaml the built-in default csp rules have those already.

Let me know if that helps.

[fnrcum]

Hey @fnrcum 👋

You're correct, we've built an app store app - it's in its early phase as of now. It has a few main goals:

1. Make it easier to discover available apps (that's what we have at the moment)
2. Encourage people to submit their apps and extensions to our app store (on it.. there are a few more third party apps which are not in the app store, yet)
3. Make installation an easy one-/few-clicks experience (not here, yet)

If you know where to download apps then the app store app doesn't bring you much value at the moment. Installation still involves download a zip file, placing it in a folder, extracting it, configuring it if needed, restarting ocis. That's described here: https://owncloud.dev/services/web/#web-apps

The app-store app is again an app itself and if you have a custom config.json you can just add the string app-store into the apps array. If you have a custom csp.yaml file you need to add 'https://raw.githubusercontent.com/owncloud/awesome-ocis/' to connect-src and img-src - if you don't have a custom csp.yaml the built-in default csp rules have those already.

Let me know if that helps.

This is my issue, the baremetal installation script was used. ./ocis init --config-path /etc/ocis and after that, this is the folder structure i have

root@cloud:/home/cloud# ls /etc/ocis/
ocis.env  ocis.yaml

root@cloud:/home/cloud# ls /var/lib/ocis
idm  idp  nats  proxy  search  storage  thumbnails

@kulmann This is based on the ocis.env

OCIS_URL=https://<domain>
OCIS_OIDC_ISSUER=https://<domain>
IDP_ISS=https://<domain>
PROXY_HTTP_ADDR=0.0.0.0:9200
PROXY_TLS=false
IDP_TLS=false

OCIS_INSECURE=true

OCIS_LOG_LEVEL=warn
OCIS_LOG_COLOR=true
OCIS_LOG_PRETTY=true

OCIS_CONFIG_DIR=/etc/ocis
OCIS_BASE_DATA_PATH=/var/lib/ocis

IDM_ADMIN_PASSWORD=secret

The ocis.yaml only contains essentially secrets and keys and nothing else so this is where I am having issues understanding where exactly these configurations are and where they need to go. I am 100% sure I'm either doing something wrong or fundamentally misunderstanding something

[kulmann]

You've mentioned a baremetal installation script - could you provide a link to that? 🙈 don't know what exactly you're talking about.

For the app store app: could you post the content of your config.json (redact URLs if you don't want them publicly exposed here). With ocis init there is no custom config.json being created, so I'm quite confused that you don't see the app store.

Regarding the apps folder: You can choose any folder on your disk as the apps folder. You can mkdir /etc/ocis/apps or whatever folder you want to use. Then make it available in oCIS via environment variable: WEB_ASSET_APPS_PATH: /etc/ocis/apps.

[fnrcum]

I got the OCIS from the git releases https://github.com/owncloud/ocis/releases/tag/v6.3.0

And followed the docs here https://doc.owncloud.com/ocis/4.0/depl-examples/bare-metal.html

As for the store, I have this App Store but it has only the 5 items in the screenshot so if this is what it was supposed to be then my bad, My assumption was that I could install extensions directly from it.

[kulmann]

I got the OCIS from the git releases https://github.com/owncloud/ocis/releases/tag/v6.3.0

And followed the docs here https://doc.owncloud.com/ocis/4.0/depl-examples/bare-metal.html

As for the store, I have this App Store but it has only the 5 items in the screenshot so if this is what it was supposed to be then my bad, My assumption was that I could install extensions directly from it.

In the future: yes, you're supposed to be able to install from there. and more apps will follow soon. For now: download and manual installation. It's supposed to improve discoverability as a first step.

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 10 days if no further activity occurs. Thank you for your contributions.