Error collabora online ion ubuntu 16.1

ℹ️ Support 📄 Collabora
1

Hello

I installed latest nextcloud on centos 7 and its working fine
then i have ubuntu 16.1 running on this local IP address 192.168.50.219

hers my steps:

  1. sudo apt update - sucessfull
  2. sudo apt install docker.io - suceesfull
  3. systemctl status docker

● docker.service - Docker Application Container Engine
Loaded: loaded (/lib/systemd/system/docker.service; enabled; vendor preset: enabled)
Active: active (running) since Fri 2017-01-20 10:48:13 PHT; 1h 55min ago
Docs: https://docs.docker.com
Main PID: 1431 (dockerd)
Tasks: 33
Memory: 70.5M
CPU: 7.703s
CGroup: /system.slice/docker.service
├─1431 /usr/bin/dockerd -H fd://
├─1907 containerd -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --shim containerd-shim --metrics-interval=0 --start-timeout 2m --state-dir /va
├─2384 /usr/bin/docker-proxy -proto tcp -host-ip 127.0.0.1 -host-port 9980 -container-ip 172.17.0.2 -container-port 9980
└─7522 /usr/bin/docker-proxy -proto tcp -host-ip 192.168.50.219 -host-port 9980 -container-ip 172.17.0.3 -container-port 9980

  1. sudo systemctl start docker - successfull
  2. sudo systemctl enable docker - sucessfull
    6.sudo docker pull collabora/code
    Using default tag: latest
    latest: Pulling from collabora/code
    Digest: sha256:7f68893581bff3537d7c2b7e62a8813181da9ab45b94e64ff838b3dff4f893f8
    Status: Image is up to date for collabora/code:latest

7.sudo docker run -t -d -p 127.0.0.1:9980:9980 -e ‘domain=office\.tailinsubic\.com’ --restart always --cap-add MKNOD collabora/code - sucessfull

office.tailinsubic.com is my localdomain only point to 192.168.50.219

  1. sudo netstat -lnpt

Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:5355 0.0.0.0:* LISTEN 1434/systemd-resolv
tcp 0 0 127.0.1.1:53 0.0.0.0:* LISTEN 1640/dnsmasq
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN 1434/systemd-resolv
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1433/sshd
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 969/cupsd
tcp 0 0 192.168.50.219:9980 0.0.0.0:* LISTEN 7522/docker-proxy
tcp 0 0 127.0.0.1:9980 0.0.0.0:* LISTEN 2384/docker-proxy
tcp6 0 0 :::5355 :::* LISTEN 1434/systemd-resolv
tcp6 0 0 :::22 :::* LISTEN 1433/sshd
tcp6 0 0 ::1:631 :::* LISTEN 969/cupsd

  1. sudo apt install apache2 - suceesfull

– Subject: Unit apache2.service has begun start-up
– Defined-By: systemd
– Support: http://www.ubuntu.com/support

– Unit apache2.service has begun starting up.
Jan 20 12:48:54 office.tailinsubic.com apache2[12331]: * Starting Apache httpd web server apache2
Jan 20 12:48:55 office.tailinsubic.com apache2[12331]: *
Jan 20 12:48:55 office.tailinsubic.com systemd[1]: Started LSB: Apache2 web server.
– Subject: Unit apache2.service has finished start-up
– Defined-By: systemd
– Support: http://www.ubuntu.com/support

– Unit apache2.service has finished starting up.

– The start-up result is done.
Jan 20 12:48:55 office.tailinsubic.com sudo[12316]: pam_unix(sudo:session): session closed for user root

i can able to visit my localdomain without using https

  1. sudo nano /etc/apache2/sites-available/office.tailinsubic.com.conf
    then add and save

<VirtualHost *:80>
ServerName office.tailinsubic.com

  1. sudo a2ensite office.tailinsubic.com.conf

Enabling site office.tailinsubic.com.
To activate the new configuration, you need to run:
service apache2 reload

when i restart my apache2

sudo service apache2 reload
ubuntu@office:/etc/apache2/sites-enabled$ journalctl -xe
Jan 20 12:52:23 office.tailinsubic.com sudo[12461]: pam_unix(sudo:session): session closed for user root
Jan 20 12:52:25 office.tailinsubic.com sudo[12493]: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/sites-enabled ; USER=root ; COMMAND=/usr/sbin/a2ensite office.tailinsubic.com.
Jan 20 12:52:25 office.tailinsubic.com sudo[12493]: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0)
Jan 20 12:52:25 office.tailinsubic.com sudo[12493]: pam_unix(sudo:session): session closed for user root
Jan 20 12:52:52 office.tailinsubic.com polkitd(authority=local)[1262]: Registered Authentication Agent for unix-process:12532:752235 (system bus name :1.8220 [/usr/bin/pk
Jan 20 12:52:54 office.tailinsubic.com polkitd(authority=local)[1262]: Operator of unix-process:12532:752235 successfully authenticated as unix-user:ubuntu to gain ONE-SH
Jan 20 12:52:54 office.tailinsubic.com systemd[1]: Reloading LSB: Apache2 web server.
– Subject: Unit apache2.service has begun reloading its configuration
– Defined-By: systemd
– Support: http://www.ubuntu.com/support

– Unit apache2.service has begun reloading its configuration
Jan 20 12:52:54 office.tailinsubic.com apache2[12545]: * Reloading Apache httpd web server apache2
Jan 20 12:52:55 office.tailinsubic.com apache2[12545]: *
Jan 20 12:52:55 office.tailinsubic.com systemd[1]: Reloaded LSB: Apache2 web server.
– Subject: Unit apache2.service has finished reloading its configuration
– Defined-By: systemd
– Support: http://www.ubuntu.com/support

– Unit apache2.service has finished reloading its configuration

– The result is done.
Jan 20 12:52:55 office.tailinsubic.com polkitd(authority=local)[1262]: Unregistered Authentication Agent for unix-process:12532:752235 (system bus name :1.8220, object pa
Jan 20 12:53:10 office.tailinsubic.com sudo[12620]: ubuntu : TTY=pts/0 ; PWD=/etc/apache2/sites-enabled ; USER=root ; COMMAND=/usr/sbin/service apache2 reload
Jan 20 12:53:10 office.tailinsubic.com sudo[12620]: pam_unix(sudo:session): session opened for user root by ubuntu(uid=0)
Jan 20 12:53:10 office.tailinsubic.com systemd[1]: Reloading LSB: Apache2 web server.
– Subject: Unit apache2.service has begun reloading its configuration
– Defined-By: systemd
– Support: http://www.ubuntu.com/support

– Unit apache2.service has begun reloading its configuration
Jan 20 12:53:10 office.tailinsubic.com apache2[12639]: * Reloading Apache httpd web server apache2
Jan 20 12:53:10 office.tailinsubic.com apache2[12639]: *
Jan 20 12:53:10 office.tailinsubic.com systemd[1]: Reloaded LSB: Apache2 web server.
– Subject: Unit apache2.service has finished reloading its configuration
– Defined-By: systemd
– Support: http://www.ubuntu.com/support

– Unit apache2.service has finished reloading its configuration

– The result is done.
Jan 20 12:53:10 office.tailinsubic.com sudo[12620]: pam_unix(sudo:session): session closed for user root

theres an orange highlighted to his message
Unregistered Authentication Agent for unix-process:12532:752235 (system bus name :1.8220, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_PH.UTF-

but i still able to visit my localdomain prompting Apache2 Ubuntu Default Page

  1. sudo apt install letsencrypt python-letsencrypt-apache

Reading package lists… Done
Building dependency tree
Reading state information… Done
Package python-letsencrypt-apache is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source
However the following packages replace it:
python-certbot-apache

E: Package ‘python-letsencrypt-apache’ has no installation candidate

so install one by one

sudo apt-get install letsencrypt - sucessfull
sudo apt-get install python-letsencrypt-apache - error due to obsoleted so i changed to python-certbot-apache

Reading package lists… Done
Building dependency tree
Reading state information… Done
Package python-letsencrypt-apache is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source
However the following packages replace it:
python-certbot-apache

E: Package ‘python-letsencrypt-apache’ has no installation candidate

sudo apt-get install python-certbot-apache - sucessfull

  1. sudo letsencrypt --apache --agree-tos --email office@tailinsubic.com -d office.tailinsubic.com
    theres an error message

Failed authorization procedure. office.tailinsubic.com (tls-sni-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: DNS problem: NXDOMAIN looking up A for office.tailinsubic.com

IMPORTANT NOTES:

  • The following errors were reported by the server:

    Domain: office.tailinsubic.com
    Type: connection
    Detail: DNS problem: NXDOMAIN looking up A for
    office.tailinsubic.com

    To fix these errors, please make sure that your domain name was
    entered correctly and the DNS A record(s) for that domain
    contain(s) the right IP address. Additionally, please check that
    your computer has a publicly routable IP address and that no
    firewalls are preventing the server from communicating with the
    client. If you’re using the webroot plugin, you should also verify
    that you are serving files from the webroot path you provided.

i have afull access of internet connection to 192.168.50.219 and i point to our local domain server
if i ping office.tailinsubic.com i get 192.168.50.219

Im stuck here.

2

@rsumook
To get a SSL cert for any domain you need to own the domain. And use the DNS settings of your registrant to point it to your server.

Let’s Encrypt check every request against Internet Domain registrans it doesn’t matter it you changed settings to locally resolve office.tailinsubic.com to your server.

3

Hi

do you mean i need a public IP address from our ISP and register the domain name point to our public IP

example:

123.123.123.123 registered domaine office.tailinsubic.com

something like that.

Please advise

thanks

4

Yeah, you got it.
If you wanna use Let’s Encrypt yeah, but anyway that’s for any host domain.

You might not need a static IP, you could use a dynamic IP, but you need to buy the domain and the SSL cert (or get a free one from Let’s Encrypt).

5

Hello Ark74

please guide me again

i bought new domain name tailinsubic-nextcloud.com is this qualified domain name for any host domain

Im not familiar in dynamic IP, but can i use Static IP, my setup in ubuntu 16.10 32bit i assigned 192.168.50.219 with internet connection, so i will replace the 192.168.50.219 into Public IP Address if like this i can able to get certificate from Lets Encrypt is this right?

please advise

thanks

6

All right. Let’s go some steps back, if i may.

Please check this video out:


It will be really instructive.

Every internet connection has one Public (Static/Dynamic) IP which you can’t really modify. That is managed by your ISP.

Then inside your house or your office, your router creates a NAT network, this splits multiple IPs for your network inside your house/office mostly handled by DHCP (or yourself by hand).

From outside that network it will seem that all the traffic comes from the Public IP, but inside your house/office the traffic comes from one computer only (or many devices). Locally you’ll have multiples IP addresses within a range, it could be
192.168.0.X / 10.0.1.X / etc

Those IPs (the local ones) are the ones that we can setup to talk from inside our network. If we wanna reach certain computer from outside (the internet), then we can open ports at our router for certain local IP o set our server IP to a DMZ zone (be careful with this one).

Then when let’s say i type tailinsubic-nextcloud.com the signal reach your router and the router say something like:
- Oh! It seems you would like to talk to 192.168.50.219 not to me the router, here you go! -

And it redirects the traffic to your server inside your (NAT) network.

Now, if you grasp the video up there, then you’ll realize that you need to set DNS with your domain registrant so it points to your Public IP in the first place.
As for right now, if i ping tailinsubic-nextcloud.com it will send no where.
It might be because of DNS propagation (the time it takes to spreed a change on the domain name to point the new IP).

Visit the site checkip.dyndns.com and you’ll know your public IP (the one you need to configure with GoDaddy/1n1/Dynadot or wherever domain registrant you purchased from).

DNS propagation could take from 5 minutes up to 48 hours. Check it out here: