Nextcloud Hub 21 • Hacker News Board

Re: Nextcloud Hub 21

#151

Post by cyphar » Thu, Feb 25, 2021, 6:22 PM UTC

agilob wrote: post #146

cyphar wrote: post #142

Earlier quoted context omitted.

The issues with timeouts can be avoided if you use the command line upgrader: % php /var/www/nextcloud/updater/updater.phar

Yea, it didn't work as expected sudo -u nginx php updater/updater.phar Nextcloud Updater - version: v18.0.9-8-g27dac77 Current version is 18.0.14. PHP Fatal error: Uncaught Error: Call to undefined function NC\Updater\curl_init() in phar:///home/owncloud/updater/updater.phar/lib/Updater.php:455 Stack trace: #0 phar:///home/owncloud/updater/updater.phar/lib/Updater.php(119): NC\Updater\Updater->getUpdateServerResponse…

You're missing php-curl (or it's installed but the module is disabled). I'd double-check that you have all of the dependencies of NextCloud installed[1], because php-curl is one of the required dependencies.

[1]: https://docs.nextcloud.com/server/21/admin_manual/installati...

Re: Nextcloud Hub 21

#152

Post by rfoo » Fri, Feb 26, 2021, 6:31 AM UTC

nickthemagicman wrote: post #127

rfoo wrote: post #53

Earlier quoted context omitted.

> The point is with limited time one has to pick their battles Yeah, that's why I pay for a managed K8s instance for my toy projects but do my own sysadmin work on various self-hosted things. The former is not my hobby so I'd rather pay someone else to do it. This is an inherent limitation of our current tech stack, and unfortunately the cheapest mitigation we have is "take full system snapshot a.k.a. do your sysadmi…

Numerous pieces of software do LTS with no additional cost or supported via other avenues. It's literally just branching at one release and fixing bugs in that release for a few years, which also benefits upstream branches. That way people may lose new features but gain stability.

> It's literally just branching at one release and fixing bugs in that release for a few years

This takes engineering time, i.e. money. It may also benefit upstream branches, but again porting patch between branches takes time, especially after massive refactoring happened on latest branch.

Re: Nextcloud Hub 21

#153

Post by waynesonfire » Sat, Feb 27, 2021, 5:54 PM UTC

nucleardog wrote: post #149

cyphar wrote: post #141

Earlier quoted context omitted.

NextCloud also has a web upgrader accessible from the admin panel. It's almost certainly based on the same code. I don't know why they go about it in such a manual way. If you don't like the web installer, there's a command line version that does everything for you (upgrader.phar).

> I don't know why they go about it in such a manual way. Because I don't generally give the code permission to modify itself. Principle of least privilege and all that. Outside of this one specific situation (upgrades) it's not needed, the rest of the time it's just one more layer of security in the way of various forms of exploit. (Maybe it's just trauma from dealing with the 8,000 forms of wordpress exploits back…

Yep, wordpress too has taught me this lesson. I now understand why we have so much tooling to lock down processes.