Install NextCloud 11 on Fedora 25 with SaltStack
-
Why is firewalld not using the "FedoraServer" zone as specified in the salt config ?
-
@reid-cooper said in Install NextCloud 11 on Fedora 25 with SaltStack:
@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
Changing the name: from "FedoraServer" to "public"...like so:
results in this:
Now, I can log in.
What am I doing wrong?
The default zone for firewalld is public. If you change open a service or port in a different zone you have to tell firewalld to use that zone instead.
That is for CentOS. Default on Fedora is not public.
On the server default is public. On the workstation it's FedoraWorkstation.
These are default and haven't been modified:
-
@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:
@reid-cooper said in Install NextCloud 11 on Fedora 25 with SaltStack:
@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
Changing the name: from "FedoraServer" to "public"...like so:
results in this:
Now, I can log in.
What am I doing wrong?
The default zone for firewalld is public. If you change open a service or port in a different zone you have to tell firewalld to use that zone instead.
That is for CentOS. Default on Fedora is not public.
On the server default is public. On the workstation it's FedoraWorkstation.
These are default and haven't been modified:
I'm building one from the ISO to check. 99% of my stuff is built with virt-builder so it is possible they changed the default zone in the image. The normal cloud image doesn't have firewalld installed so I can't check on my OpenStack images.
-
So looks like ISO has it as FedoraServer, some other images (like virt-builder) are public. It would be best to get the default zone and use that when you set the services. I have no idea how to do that with Salt. Here's how you would with Ansible in case anyone cares:
tasks: - name: get default zone shell: "firewall-cmd --get-default-zone" register: zone - name: set firewall services firewalld: service: https permanent: true state: enabled zone: "{{ zone.stdout }}" -
The default zone on my Fedora server install is "public"
-
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
The default zone on my Fedora server install is "public"
Where did you install from?
-
@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
The default zone on my Fedora server install is "public"
Where did you install from?
Netinstall ISO off the Fedora website: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-netinst-x86_64-26-1.5.iso
-
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
The default zone on my Fedora server install is "public"
Where did you install from?
Netinstall ISO off the Fedora website: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-netinst-x86_64-26-1.5.iso
Ah ok. So the net install uses public. The ISO with defaults sets it to FedoraServer.
-
@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:
..The ISO with defaults sets it to FedoraServer.
Which ISO is that, this one? https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-dvd-x86_64-26-1.5.iso
-
@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
The default zone on my Fedora server install is "public"
Where did you install from?
Netinstall ISO off the Fedora website: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-netinst-x86_64-26-1.5.iso
Ah ok. So the net install uses public. The ISO with defaults sets it to FedoraServer.
That's an odd difference for them to have introduced.
-
@reid-cooper said in Install NextCloud 11 on Fedora 25 with SaltStack:
@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
The default zone on my Fedora server install is "public"
Where did you install from?
Netinstall ISO off the Fedora website: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-netinst-x86_64-26-1.5.iso
Ah ok. So the net install uses public. The ISO with defaults sets it to FedoraServer.
That's an odd difference for them to have introduced.
CentOS has had similar issues in the past. this is not really a surprise to me.
-
Any ideas??
-
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
Any ideas??
What do you mean? Either change the Salt file to match public or change your default zone on the server.
-
@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
Any ideas??
What do you mean? Either change the Salt file to match public or change your default zone on the server.
I know I can do that, I'm trying to figure out why the salt file isn't working for me (just the firewall portion) since it worked for everyone else
-
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:
@fateknollogee said in Install NextCloud 11 on Fedora 25 with SaltStack:
Any ideas??
What do you mean? Either change the Salt file to match public or change your default zone on the server.
I know I can do that, I'm trying to figure out why the salt file isn't working for me (just the firewall portion) since it worked for everyone else
I thought we figured out that it was the incorrect zone? If you change the zone in the salt file to public does it work?
-
@stacksofplates said in Install NextCloud 11 on Fedora 25 with SaltStack:
I thought we figured out that it was the incorrect zone? If you change the zone in the salt file to public does it work?
Yes that does work.
I'm just trying to understand @scottalanmiller intent in creating the "FedoraServer" zone?@stacksofplates What ISO did you say used "FedoraServer" as it's default zone?
I should grab a copy of that & try the install! -
Finally figured out what the "problem" is/was?
It all works as stated in post #1 so long as you use the DVD ISO: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-dvd-x86_64-26-1.5.iso
The default firewall zone with this ISO is "FedoraServer" (which is used in the salt config)With the Net install ISO: https://download.fedoraproject.org/pub/fedora/linux/releases/26/Server/x86_64/iso/Fedora-Server-netinst-x86_64-26-1.5.iso
the default firewall zone is "public" -
@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:
Why Fedora 25?
Fedora 25 gives us PHP 7.1 for the latest in features and performance with NextCloud 11. We also get the latest MariaDB and Redis platforms. This helps to speed the overall platform and makes for a snappy experience that gets maximum benefits from a singularly tested and integrated base. The only package that we download and add onto the tested Fedora system here is NextCloud itself. Everything else is fully integrated by the Fedora team.
And Salt 2017.7.2 breaks pkgrepo.managed which would make it harder to add repos with newer versions
Unfortunately I'm still doing everything on Ubuntu, which means I have to chase around trying to fulfill dependencies on newer versions that aren't in the default repos
-
@flaxking said in Install NextCloud 11 on Fedora 25 with SaltStack:
@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:
Why Fedora 25?
Fedora 25 gives us PHP 7.1 for the latest in features and performance with NextCloud 11. We also get the latest MariaDB and Redis platforms. This helps to speed the overall platform and makes for a snappy experience that gets maximum benefits from a singularly tested and integrated base. The only package that we download and add onto the tested Fedora system here is NextCloud itself. Everything else is fully integrated by the Fedora team.
And Salt 2017.7.2 breaks pkgrepo.managed which would make it harder to add repos with newer versions
Unfortunately I'm still doing everything on Ubuntu, which means I have to chase around trying to fulfill dependencies on newer versions that aren't in the default repos
Why stay on Ubuntu?
-
@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:
@flaxking said in Install NextCloud 11 on Fedora 25 with SaltStack:
@scottalanmiller said in Install NextCloud 11 on Fedora 25 with SaltStack:
Why Fedora 25?
Fedora 25 gives us PHP 7.1 for the latest in features and performance with NextCloud 11. We also get the latest MariaDB and Redis platforms. This helps to speed the overall platform and makes for a snappy experience that gets maximum benefits from a singularly tested and integrated base. The only package that we download and add onto the tested Fedora system here is NextCloud itself. Everything else is fully integrated by the Fedora team.
And Salt 2017.7.2 breaks pkgrepo.managed which would make it harder to add repos with newer versions
Unfortunately I'm still doing everything on Ubuntu, which means I have to chase around trying to fulfill dependencies on newer versions that aren't in the default repos
Why stay on Ubuntu?
Because I'm addicted to LXD. While I've heard you can install it on other OSes, I'm pretty sure I would run into some hiccups with things like the Salt LXD formula. So there would be some extra work ahead of me. Alternatively, I could try straight-up LXC or Docker, but that creates some learning prerequisites. Not that I don't like learning, it's just I have other things on the top of my learning priority list.
