Now that kepler 1.1 is out, I made a set of Sputnik rocks to go with
it.  This is based on the recent "Earth" code, with all the changes
that Jim and I did in spring.  This is a first stab at a release and
might have some minor quirks, but this should actually work better
than the last release ("Dish of the Day").

To install, you would need to first install Kepler 1.1 into some
directory.  I'll assume it's ~/sputnik/:

    mkdir ~/sputnik
    cd ~/sputnik
    export SPUTNIK=`pwd`
    wget http://luaforge.net/frs/download.php/3468/kepler-install-1.1-1
    bash kepler-install-1.1-1 --prefix=$SPUTNIK --without-readline

Then install Sputnik:

    ./bin/luarocks --from=http://sputnik.freewisdom.org/rocks/earth
install sputnik

Make a directory for storing the data:

    mkdir wiki-data
    chmod -R a+rw wiki-data

Create a sputnik.ws file in $SPUTNIK/kepler/htdocs/sputnik.ws:

    require"sputnik"

    return sputnik.new_wsapi_run_fn{
       VERSIUM_PARAMS = { '/home/yuri/sputnik/wiki-data/' },
       BASE_URL       = '/sputnik.ws',
    }

MAKE SURE TO REPLACE /home/yuri/wiki-data/ WITH THE RIGHT PATH.

Start Xavante:

    ./bin/xavante_start

Then access Sputnik at http://localhost:8080/sputnik.ws


We removed the old requirement of registration, so by default
anonymous users can edit any non-config pages.  Note that there is
some spam protection through honeypots and hashed fields.

If you want, however, you can introduce more control.

1.  You can add ReCaptcha:

    ./bin/luarocks --from=http://sputnik.freewisdom.org/rocks/earth
install recaptcha

Then go to recaptcha.net and get yourself a pair of API keys.  I'll
refer to them as PUBLIC and PRIVATE.  Then change the last function
call in sputnik.ws to:

    return sputnik.new_wsapi_run_fn{
       VERSIUM_PARAMS = { '/home/yuri/sputnik/wiki-data/' },
       BASE_URL       = '/sputnik.ws',
       CAPTCHA_MODULE = 'recaptcha',
       CAPTCHA_PARAMS = { PUBLIC, PRIVATE},
    }

REPLACING "PUBLIC" and "PRIVATE" with your recaptcha API keys.

This will do two things: anonymous users will be required to enter
captcha to edit and new users will be required to enter captcha to
register.

2. You can require email verification for new accounts:

    return sputnik.new_wsapi_run_fn{
       VERSIUM_PARAMS = { '/tmp/sputnik2/wiki-data/' },
       BASE_URL       = '/sputnik.ws',
       CAPTCHA_MODULE = 'recaptcha',
       CAPTCHA_PARAMS = { '6LdbBAIAAAAAAJnEResrcRMM8TMyilXbvpOoW0E0',
'6LdbBAIAAAAAAMbAygU7qCR3sfMkdcirOPbxT0OW'},
       REQUIRE_EMAIL_ACTIVATION = true,
       SMTP_SERVER    = "localhost",
       --SMTP_SERVER_PORT = "25",
       --SMTP_USERNAME  = "yuri",
       --SMTP_PASSWORD  = "pa$$w0rd",
    }

Note that for this to work you would need to have an SMTP server.

3. You can block anonymous users from editing any nodes.

Create an account called "Admin", log in with it, then edit @Root and
uncomment the two commented lines in "permissions".

Note that in general there is now a concept of "admin" users, who can
do different things and usually see a different edit form.  By
default, only "Admin" is an admin.  However, once you are logged in as
"Admin", you can make any user an admin by editing "_passwords" and
adding "is_admin='true'" to their record.

 - yuri

-- 
http://sputnik.freewisdom.org/

On Thu, Jun 12, 2008 at 7:00 AM, Yuri Takhteyev <yuri@sims.berkeley.edu> wrote:
> Now that kepler 1.1 is out, I made a set of Sputnik rocks to go with
> it.  This is based on the recent "Earth" code, with all the changes
> that Jim and I did in spring.  This is a first stab at a release and
> might have some minor quirks, but this should actually work better
> than the last release ("Dish of the Day").

Nice job! Good to see that Kepler 1.1 has already one use. :o)

What would you recommend concerning keplerproject.org's migration to
Earth? I'd wait for a final Earth release, but what about the current
wiki data itself?

Andr?

> What would you recommend concerning keplerproject.org's migration to
> Earth? I'd wait for a final Earth release, but what about the current
> wiki data itself?

The data format is the same for all 2008 releases.  In fact, you
should be able to upgrade between future versions of Sputnik with just
luarocks commands.  Earth does change the format of the _passwords
node, so you will need to flush the old users or convert the file.

As for timing of migration, it really depends on how much you want the
new features.  From the user point of view, the main new features are:

- New authentication options (which I described in the original email)
- Some protection again XSS attacks
- A richer permission system
- Simpler non-admin edit forms for non-admins
- Stricter security by default.  (E.g., non-admin users cannot even
see hashes of passwords now.)

The more important changes, however, are the ones facing developers /
power users:

- Using Kepler 1.1.
- Easier to add custom storage backends
- Easier to add your custom authentication system
- Overall cleaner and more extensible

We also have four additional storage backends in the works: sqlite3,
mysql, svn and git.  At least the first two should be out soon, but
not yet.

 - yuri

--
http://sputnik.freewisdom.org/

On Thu, Jun 12, 2008 at 3:46 PM, Yuri Takhteyev <yuri@sims.berkeley.edu> wrote:
> The data format is the same for all 2008 releases.  In fact, you
> should be able to upgrade between future versions of Sputnik with just
> luarocks commands.  Earth does change the format of the _passwords
> node, so you will need to flush the old users or convert the file.

But what if the current version (as ours) does not use LuaRocks yet?
Or were you talking about post Earth upgrades?

Andr?

> But what if the current version (as ours) does not use LuaRocks yet?
> Or were you talking about post Earth upgrades?

I believe keplerproject.org is running "Dish of the Day" (~ early
2008), which _does_ use LuaRocks.  It installs 2007.12.17 snapshot of
Kepler, then installs Luarocks 0.4.2, then installs Sputnik as a
collection of rocks.  It doesn't rely on luarocks to install actual
Kepler components, though.  I assume that one probably _could_ take
that installation of Kepler and just update all the rocks (both
Kepler's and Sputnik's), but I wouldn't recommend this.  Better start
with a fresh install of Kepler 1.1 to make sure that everyone is on
the same page.  So, yes, I did mean different "Earth" releases, and
possibly later.  Basically, as long as Kepler doesn't change, one
should be able to upgrade Sputnik with just LuaRocks.  Come Kepler
1.2, this can all change of course.

For the sake of completeness, LuaRocks.org I believe is running an
earlier version (from October or November), which does not include
LuaRocks at all.

BTW, I am trying to keep track of different Sputnik installations on
http://sputnik.freewisdom.org/en/Sightings.  If yours is on this list
and you end up upgrading, please update the page.

- yuri


-- 
http://sputnik.freewisdom.org/

On Thu, Jun 12, 2008 at 03:00:37AM -0700, Yuri Takhteyev wrote:
> Now that kepler 1.1 is out, I made a set of Sputnik rocks to go with
> it.  This is based on the recent "Earth" code, with all the changes

As you may expect, I want to package it for Debian, but I'd like to have
a singe "tarball", since I cannot add libraries anymore before the
freeze and thus I plan to package sputnik and related rocks as a single
package. Is there a git branch/tag somewhere I can pull and archive as a
tarball? I'm currently tracking mainline that has moved along (last
commit talks about an attempt to use a git backend that I believe is
not part of _earth_)

cheers
-- 
Enrico Tassi

> tarball? I'm currently tracking mainline that has moved along (last
> commit talks about an attempt to use a git backend that I believe is
> not part of _earth_)

I haven't made any tags yet since I isn't really done.  And yes,
versium-git (git backend for versium) is part of "earth".  Same for
versium-sqlite3, versium-mysql and versium-svn.  When is a different
question...

Assuming that debian train is about to leave, I would suggest that
just take the following rocks from mainline:

    colors
    xssfilter
    versium
    saci
    sputnik
    recaptcha

Note that the first five of those are the minimum set of rocks you
need to run anything.  recaptcha is optional, but it's working and is
worth including.  Other rocks are all optional, so not including them
simply means there will be fewer options.

If it would help you, I can make a tag tomorrow, though it won't have
any particular meaning, since "earth" is not yet done.

Thanks for your help.

  - yuri

-- 
http://sputnik.freewisdom.org/

Dear Friends,
   Starting to migrate our old sputnik-based wiki to Kepler 1.1, Rocks and
all the new fancy stuff, I ran into some problems and hopefully I can get
some help here.

   The host is an Ubuntu 7.10 VM and I got the installation instructions
from http://sputnik.freewisdom.org/en/Installation.
After wgetting the script, I ran it with

*sudo sh sputnik_install_2008_03_14.sh

*(running without su privileges I get a lot of errors)

   Everything seems to go fine and I have no errors on the build script.
However, when I try to start Xavante with:

*dado@Ubuntu-7:~/sputnik/bin$ ./lua5.1 xavante_start*

.... I get the following error msg:

*./lua5.1: xavante_start:59: attempt to index field 'stdout' (a nil value)
stack traceback:
        xavante_start:59: in main chunk
        [C]: ?
*

Thanks for the help and for Sputnik !! :)

Dado

On Sun, Jun 22, 2008 at 3:58 PM, Dado Sutter <dadosutter@gmail.com> wrote:
>    Everything seems to go fine and I have no errors on the build script.
> However, when I try to start Xavante with:
>
> dado@Ubuntu-7:~/sputnik/bin$ ./lua5.1 xavante_start
>
> .... I get the following error msg:
>
> ./lua5.1: xavante_start:59: attempt to index field 'stdout' (a nil value)
> stack traceback:
>         xavante_start:59: in main chunk
>         [C]: ?

Try running Xavante with sudo too. This may be related to an access
problem on the logs directory.

Andr?

>
>
>
> Try running Xavante with sudo too. This may be related to an access
> problem on the logs directory.
>
> Andr?


Tried that Andr?.
   But it didn't help too much :(

dado@Ubuntu-7:~/sputnik/bin$ sudo ./lua5.1 xavante_start
[sudo] password for dado:
./lua5.1: /home/dado/sputnik/share/lua/5.1/xavante/httpd.lua:357: address
already in use
stack traceback:
        [C]: in function 'assert'
        /home/dado/sputnik/share/lua/5.1/xavante/httpd.lua:357: in function
'register'
        /home/dado/sputnik/share/lua/5.1/xavante.lua:85: in function 'HTTP'
        /home/dado/sputnik/etc/kepler/1.1/xavante/config.lua:53: in function
'err'
        xavante_start:64: in main chunk
        [C]: ?
dado@Ubuntu-7:~/sputnik/bin$

As instructed by Jim, I'll try to follow the instructions on the original
post of this thread. Not as easy as the original site's installation page
but maybe doable :)

Thanks Andr? !

Dado

On Sun, Jun 22, 2008 at 9:27 PM, Dado Sutter <dado@pobox.com> wrote:
> dado@Ubuntu-7:~/sputnik/bin$ sudo ./lua5.1 xavante_start
> [sudo] password for dado:
> ./lua5.1: /home/dado/sputnik/share/lua/5.1/xavante/httpd.lua:357: address
> already in use

Are you running something (Tomcat?) on 8080? You'd have to change
Xavante to use another port.

Andr?

Dado,

I would say instead "try installing Sputnik not as root".  However,
you are installing an ancient version of Sputnik.  Try a new one.  I
just updated http://sputnik.freewisdom.org/en/Installation with
instructions.

(See also another email to the list.)

  - yuri

On Sun, Jun 22, 2008 at 5:27 PM, Dado Sutter <dado@pobox.com> wrote:
>>
>>
>> Try running Xavante with sudo too. This may be related to an access
>> problem on the logs directory.
>>
>> Andr?
>
> Tried that Andr?.
>    But it didn't help too much :(
>
> dado@Ubuntu-7:~/sputnik/bin$ sudo ./lua5.1 xavante_start
> [sudo] password for dado:
> ./lua5.1: /home/dado/sputnik/share/lua/5.1/xavante/httpd.lua:357: address
> already in use
> stack traceback:
>         [C]: in function 'assert'
>         /home/dado/sputnik/share/lua/5.1/xavante/httpd.lua:357: in function
> 'register'
>         /home/dado/sputnik/share/lua/5.1/xavante.lua:85: in function 'HTTP'
>         /home/dado/sputnik/etc/kepler/1.1/xavante/config.lua:53: in function
> 'err'
>         xavante_start:64: in main chunk
>         [C]: ?
> dado@Ubuntu-7:~/sputnik/bin$
>
> As instructed by Jim, I'll try to follow the instructions on the original
> post of this thread. Not as easy as the original site's installation page
> but maybe doable :)
>
> Thanks Andr? !
>
> Dado
>
>
>
> _______________________________________________
> Sputnik-list mailing list
> Sputnik-list@lists.luaforge.net
> http://lists.luaforge.net/cgi-bin/mailman/listinfo/sputnik-list
>
>



-- 
http://sputnik.freewisdom.org/

> Are you running something (Tomcat?) on 8080? You'd have to change
> Xavante to use another port.


Nope,
   No service is using 8080 (and in fact no other port)


> Andr?


Tks !

Dado




>
>
> _______________________________________________
> Sputnik-list mailing list
> Sputnik-list@lists.luaforge.net
> http://lists.luaforge.net/cgi-bin/mailman/listinfo/sputnik-list
>

Great !
   Thank you Yuri. I'll try that asap.

Greetingsssssss
Dado



On Mon, Jun 23, 2008 at 6:05 AM, Yuri Takhteyev <yuri@sims.berkeley.edu>
wrote:

> Dado,
>
> I would say instead "try installing Sputnik not as root".  However,
> you are installing an ancient version of Sputnik.  Try a new one.  I
> just updated http://sputnik.freewisdom.org/en/Installation with
> instructions.
>
> (See also another email to the list.)
>
>  - yuri
>
> On Sun, Jun 22, 2008 at 5:27 PM, Dado Sutter <dado@pobox.com> wrote:
> >>
> >>
> >> Try running Xavante with sudo too. This may be related to an access
> >> problem on the logs directory.
> >>
> >> Andr?
> >
> > Tried that Andr?.
> >    But it didn't help too much :(
> >
> > dado@Ubuntu-7:~/sputnik/bin$ sudo ./lua5.1 xavante_start
> > [sudo] password for dado:
> > ./lua5.1: /home/dado/sputnik/share/lua/5.1/xavante/httpd.lua:357: address
> > already in use
> > stack traceback:
> >         [C]: in function 'assert'
> >         /home/dado/sputnik/share/lua/5.1/xavante/httpd.lua:357: in
> function
> > 'register'
> >         /home/dado/sputnik/share/lua/5.1/xavante.lua:85: in function
> 'HTTP'
> >         /home/dado/sputnik/etc/kepler/1.1/xavante/config.lua:53: in
> function
> > 'err'
> >         xavante_start:64: in main chunk
> >         [C]: ?
> > dado@Ubuntu-7:~/sputnik/bin$
> >
> > As instructed by Jim, I'll try to follow the instructions on the original
> > post of this thread. Not as easy as the original site's installation page
> > but maybe doable :)
> >
> > Thanks Andr? !
> >
> > Dado
> >
> >
> >
> > _______________________________________________
> > Sputnik-list mailing list
> > Sputnik-list@lists.luaforge.net
> > http://lists.luaforge.net/cgi-bin/mailman/listinfo/sputnik-list
> >
> >
>
>
>
> --
> http://sputnik.freewisdom.org/
>
> _______________________________________________
> Sputnik-list mailing list
> Sputnik-list@lists.luaforge.net
> http://lists.luaforge.net/cgi-bin/mailman/listinfo/sputnik-list
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.luaforge.net/pipermail/sputnik-list/attachments/20080623/c93ca2d3/attachment.html