Install NextCloud 11 on Fedora 25 with SaltStack

Reid Cooper

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

The default zone for firewalld is public. If you change open a service or port in a different zone you have to tell firewalld to use that zone instead.

That is for CentOS. Default on Fedora is not public.

Reid Cooper

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

This is on Fedora, you said?

FATeknollogee

@reid-cooper Yes, this is on Fedora

FATeknollogee

Why is firewalld not using the "FedoraServer" zone as specified in the salt config ?

stacksofplates

@reid-cooper said in Install NextCloud 11 on Fedora 25 with SaltStack:

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

The default zone for firewalld is public. If you change open a service or port in a different zone you have to tell firewalld to use that zone instead.

That is for CentOS. Default on Fedora is not public.

On the server default is public. On the workstation it's FedoraWorkstation.

These are default and haven't been modified:

stacksofplates

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@reid-cooper said in Install NextCloud 11 on Fedora 25 with SaltStack:

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@scottalanmiller

Changing the name: from "FedoraServer" to "public"...like so:

results in this:

Now, I can log in.

What am I doing wrong?

The default zone for firewalld is public. If you change open a service or port in a different zone you have to tell firewalld to use that zone instead.

That is for CentOS. Default on Fedora is not public.

On the server default is public. On the workstation it's FedoraWorkstation.

These are default and haven't been modified:

I'm building one from the ISO to check. 99% of my stuff is built with virt-builder so it is possible they changed the default zone in the image. The normal cloud image doesn't have firewalld installed so I can't check on my OpenStack images.

stacksofplates

So looks like ISO has it as FedoraServer, some other images (like virt-builder) are public. It would be best to get the default zone and use that when you set the services. I have no idea how to do that with Salt. Here's how you would with Ansible in case anyone cares:

  tasks:
    - name: get default zone
      shell: "firewall-cmd --get-default-zone"
      register: zone
    
    - name: set firewall services
      firewalld:
        service: https
        permanent: true
        state: enabled
        zone: "{{ zone.stdout }}"

FATeknollogee

The default zone on my Fedora server install is "public"

stacksofplates

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

The default zone on my Fedora server install is "public"

Where did you install from?

FATeknollogee

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

The default zone on my Fedora server install is "public"

Where did you install from?

Netinstall ISO off the Fedora website: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-netinst-x86_64-26-1.5.iso

stacksofplates

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

The default zone on my Fedora server install is "public"

Where did you install from?

Netinstall ISO off the Fedora website: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-netinst-x86_64-26-1.5.iso

Ah ok. So the net install uses public. The ISO with defaults sets it to FedoraServer.

FATeknollogee

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

..The ISO with defaults sets it to FedoraServer.

Which ISO is that, this one? https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-dvd-x86_64-26-1.5.iso

Reid Cooper

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

The default zone on my Fedora server install is "public"

Where did you install from?

Netinstall ISO off the Fedora website: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-netinst-x86_64-26-1.5.iso

Ah ok. So the net install uses public. The ISO with defaults sets it to FedoraServer.

That's an odd difference for them to have introduced.

JaredBusch

@reid-cooper said in Install NextCloud 11 on Fedora 25 with SaltStack:

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

The default zone on my Fedora server install is "public"

Where did you install from?

Netinstall ISO off the Fedora website: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-netinst-x86_64-26-1.5.iso

Ah ok. So the net install uses public. The ISO with defaults sets it to FedoraServer.

That's an odd difference for them to have introduced.

CentOS has had similar issues in the past. this is not really a surprise to me.

FATeknollogee

Any ideas??

stacksofplates

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

Any ideas??

What do you mean? Either change the Salt file to match public or change your default zone on the server.

FATeknollogee

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

Any ideas??

What do you mean? Either change the Salt file to match public or change your default zone on the server.

I know I can do that, I'm trying to figure out why the salt file isn't working for me (just the firewall portion) since it worked for everyone else

stacksofplates

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:

Any ideas??

What do you mean? Either change the Salt file to match public or change your default zone on the server.

I know I can do that, I'm trying to figure out why the salt file isn't working for me (just the firewall portion) since it worked for everyone else

I thought we figured out that it was the incorrect zone? If you change the zone in the salt file to public does it work?

FATeknollogee

@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:

I thought we figured out that it was the incorrect zone? If you change the zone in the salt file to public does it work?

Yes that does work.
I'm just trying to understand @scottalanmiller intent in creating the "FedoraServer" zone?

@stacksofplates What ISO did you say used "FedoraServer" as it's default zone?
I should grab a copy of that & try the install!

FATeknollogee

Finally figured out what the "problem" is/was?

It all works as stated in post #1 so long as you use the DVD ISO: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-dvd-x86_64-26-1.5.iso
The default firewall zone with this ISO is "FedoraServer" (which is used in the salt config)

With the Net install ISO: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-netinst-x86_64-26-1.5.iso
the default firewall zone is "public"