Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issues with conifer bringup on fresh install (NixOS) #850

Open
deliciouslytyped opened this issue Mar 29, 2022 · 0 comments
Open

Issues with conifer bringup on fresh install (NixOS) #850

deliciouslytyped opened this issue Mar 29, 2022 · 0 comments

Comments

@deliciouslytyped
Copy link

deliciouslytyped commented Mar 29, 2022

I had several issues bringing up conifer with docker-compose on NixOS (a linux distribution) - but it was very simple otherwise. All of these issues were in one way or another permissions related. I'm not sure if this may be due to configuration differences in docker on NixOS and whatever the conifer project may be using (ubuntu? debian?). A friend mentioned it may be a lack of SELinux on NixOS.

I am also not familiar with docker, beyond what fiddling I did here.

I will fill out this issue when I have some more capacity, but off the top of my head:

  • for some reason directories that were volume roots, created in repo/data were created with root:root ownership. This is obviously not the correct solution, but I was able to temporarily work around this by setting the directories chown 777.
  • there are problems with https://github.com/webrecorder/pywb/blob/main/docker-entrypoint.sh#L15 :
    groupadd: GID '100' already exists
    groupmod: group 'archivist' does not exist
    
    This may have something to do with: for some reason the webrecorder/pywb (and possibly other images) have VOLUME_DIR set to /data despite the Dockerfile setting it to /webarchive, and I have no idea why.
    This issue causes several containers to fail to start.
    I worked around it temporarily by setting the uid:gid of /data to a nonexistent uid:gid pair and just set the perms so I could access everything.
  • node in whichever (app?) container wanted access to webrecorder/webrecorder/proxy-certs.pem, as well as webrecorder/webrecorder/static. So I just chmod ou+w the entire directory.

I probably forgot somthing, and would have to go through the process again, but other than these problems, everything went quite painlessly. Congratulations.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant