fediversity/fediversity

Watch

Fork 10

Wire up passing credentials from FediPanel to the Mastodon configuration #189

New issue

Closed

opened 2025-02-24 11:32:04 +01:00 by kiara · 12 comments

kiara commented

2025-02-24 11:32:04 +01:00

Owner

As a Fediversity user,
I want to choose my initial user credentials,
so that I can log in to my Mastodon instance.

Test:

Given that I am in the panel,
when I am filling the deployment form,
then I should be able to specify my initial credentials such that I can log in to my deployed instance.

implementation notes

proper approach: use LDAP (#615)

**As** a Fediversity user, **I want** to choose my initial user credentials, **so that** I can log in to my Mastodon instance. Test: **Given** that I am in the panel, **when** I am filling the deployment form, **then** I should be able to specify my [initial credentials](https://git.fediversity.eu/Fediversity/Fediversity/pulls/215/files#diff-c959e516a3e7e73b06277e1352072cd290f6d96b) such that I can log in to my deployed instance. ### implementation notes - proper approach: use LDAP (#615)

kiara added a new dependency

2025-02-24 11:32:52 +01:00

#178 admin accounts provisioned for deployed services

kiara added a new dependency

2025-02-24 11:34:54 +01:00

#192 Write a test that validates Mastodon credentials are indeed valid

kiara added this to the Fediversity project

2025-03-23 09:43:12 +01:00

kiara commented

2025-03-23 09:46:40 +01:00

Author

Owner

c.f.:

https://wiki.nixos.org/wiki/Mastodon
our existing work on #190

c.f.: - https://wiki.nixos.org/wiki/Mastodon - our existing work on #190

kiara commented

2025-03-24 11:05:53 +01:00

Author

Owner

the manual command from the wiki seems not to work:

$ sudo -u mastodon mastodon-tootctl accounts create kiara --email=procolix.eu --confirmed --role=Owner
/nix/store/zndcqv9rzvcvsjlj2h1k6dv8j8hqbvpb-bundler-2.5.22/lib/ruby/gems/3.3.0/gems/bundler-2.5.22/lib/bundler/shared_helpers.rb:54:in `chdir': Permission denied @ dir_chdir0 - /home/kiara (Errno::EACCES)

(would this relate to ProtectHome in the Mastodon systemd services?)

fix: log in to the mastodon user by sudo su - mastodon -s $(which bash), then try the wiki commands without the sudo -u mastodon

the manual command from the wiki seems not to work: ``` $ sudo -u mastodon mastodon-tootctl accounts create kiara --email=procolix.eu --confirmed --role=Owner /nix/store/zndcqv9rzvcvsjlj2h1k6dv8j8hqbvpb-bundler-2.5.22/lib/ruby/gems/3.3.0/gems/bundler-2.5.22/lib/bundler/shared_helpers.rb:54:in `chdir': Permission denied @ dir_chdir0 - /home/kiara (Errno::EACCES) ``` (would this relate to [`ProtectHome`](https://github.com/NixOS/nixpkgs/pull/113190/files#r600594626) in the Mastodon systemd services?) fix: log in to the `mastodon` user by `sudo su - mastodon -s $(which bash)`, then try the wiki commands without the `sudo -u mastodon`

kiara commented

2025-03-24 11:08:33 +01:00

Author

Owner

would it work better to try this from nix as we did for pixelfed?

would it work better to try this from nix as we did [for pixelfed](https://git.fediversity.eu/Fediversity/Fediversity/pulls/215/files#diff-628622d89d4db7a9672cd2c2ced0ef67c42eae89)?

kiara commented

2025-03-24 11:50:45 +01:00

Author

Owner

this post presumes you create the account by the web interface, but by default ours seems to have registrations disabled, tho none of the env vars regulating registration seem set so far, nor in the module afaict. hm.

edit: allegedly the nix service does limit mastodon to single-user (why? can the related env var undo this?).

[this post](https://page.romeov.me/posts/setting-up-mastodon-with-nixos/#adding-your-user) presumes you create the account by the web interface, but by default [ours](https://mastodon.fediversity.net/) seems to have registrations disabled, tho none of the [env vars](https://docs.joinmastodon.org/admin/config/) regulating registration [seem set](https://git.fediversity.eu/Fediversity/Fediversity/src/commit/a5c310ad03f8805161b22c8d546b94b1fd41a47a/services/fediversity/mastodon/default.nix#L55-L79) so far, [nor in the module](https://github.com/NixOS/nixpkgs/blob/master/nixos/modules/services/web-apps/mastodon.nix) afaict. hm. edit: allegedly the nix service [does limit mastodon to single-user](https://www.reddit.com/r/NixOS/comments/16wnpum/comment/md8ex0s/) (why? can the related env var undo this?).

😕 1

fricklerhandwerk commented

2025-03-24 23:50:22 +01:00

Owner

@kiara wrote in Fediversity/Fediversity#189 (comment):

edit: allegedly the nix service does limit mastodon to single-user (why? can the related env var undo this?).

This is only explicitly enabled in the example from the wiki. I also can't find any indication that anything forces this on our end.

@kiara wrote in https://git.fediversity.eu/Fediversity/Fediversity/issues/189#issuecomment-5235: > edit: allegedly the nix service [does limit mastodon to single-user](https://www.reddit.com/r/NixOS/comments/16wnpum/comment/md8ex0s/) (why? can the related env var undo this?). This is only explicitly enabled in the [example from the wiki](https://wiki.nixos.org/wiki/Mastodon). I also can't find any indication that anything forces this on our end.

kiara commented

2025-03-25 08:48:33 +01:00

Author

Owner

to reproduce:

go to https://mastodon.fediversity.net/
press 'create account'
see message stating 'Creating an account ... is currently not possible'

to reproduce: 1. go to https://mastodon.fediversity.net/ 1. press 'create account' 1. see message stating 'Creating an account ... is currently not possible'

fricklerhandwerk commented

2025-03-26 18:31:04 +01:00

Owner

I could reproduce already, I just wanted to confirm that I don't see an obvious cause for this.

Niols commented

2025-03-27 10:09:02 +01:00

Owner

The command we have in Taeer's documentation is:

mastodon-tootctl accounts create test --email test@test.com --confirmed --approve

which differs only on the --role=Owner thing. I haven't tried it recently though.

The command we have in Taeer's documentation is: ``` mastodon-tootctl accounts create test --email test@test.com --confirmed --approve ``` which differs only on the `--role=Owner` thing. I haven't tried it recently though.

👍 1

Niols commented

2025-03-27 10:10:54 +01:00

Owner

Re single-user, a lot of services disable user creation by default, so maybe that is just what is happening here?

kiara commented

2025-03-27 12:42:33 +01:00

Author

Owner

@Niols wrote in Fediversity/Fediversity#189 (comment):

Re single-user, a lot of services disable user creation by default, so maybe that is just what is happening here?

i don't see this configured in nixpkgs or (as @fricklerhandwerk noted) on our end, but don't have a better explanation myself

@Niols wrote in https://git.fediversity.eu/Fediversity/Fediversity/issues/189#issuecomment-5295: > Re single-user, a lot of services disable user creation by default, so maybe that is just what is happening here? i don't see this configured in nixpkgs or (as @fricklerhandwerk noted) on our end, but don't have a better explanation myself

kiara removed this from the Fediversity project

2025-04-14 11:12:02 +02:00

kiara added the

type

user-story

label

2025-05-01 12:03:55 +02:00

kiara referenced this issue

2025-05-28 14:46:12 +02:00

initial focus on single application for development #327

kiara commented

2025-06-02 09:29:33 +02:00