Setting up a Lino production server¶
Here is a set of conventions we suggest to use as a site maintainer when setting up a Lino production server.
Configure the domain name¶
If your customers want to access their Lino from outside of their intranet, then you need to setup a domain name. See How to get a public domain name.
Configure the default umask¶
All maintainers must have a umask 002 or 007 (not 022 or 077 as is the default value).
Edit the file /etc/bash.bashrc
(site-wide for all users):
# nano /etc/bash.bashrc
And add the following line at the end:
umask 002
The umask
command is used to mask (disable) certain file permissions from
any new file created by a given user. See The umask command for more detailed
information.
To activate the new umask
or for yourself, hit Ctrl+D to end this session
and start a new session
Set up a master environment¶
If you are the first site maintainer on this server, you must set up the master environment:
$ sudo su
# apt-get install pip virtualenv git
# mkdir -p /usr/local/lino/shared/env
# cd /usr/local/lino/shared/env
# chown root:www-data .
# chmod g+ws .
# virtualenv -p python3 master
# . /usr/local/lino/shared/env/master/bin/activate
Edit your /root/.bashrc
file and add the following line at the end so
that the master environment is activated also in future root sessions on this
server:
# . /usr/local/lino/shared/env/master/bin/activate
Install the wheel python package, wheel is an installation tools for the pip packages, there are many other installation tools, but most pip packages uses wheel to install the package into your python environment, some pip packages might fail to install if wheel is NOT already installed:
# pip install wheel
Install getlino
into the master environment:
# pip install getlino
Run getlino configure
as root:
# getlino configure --no-clone --appy --web-server nginx --https
The --web-server
option can be either nginx
or apache
. Your choice.
You might want to provide some extra arguments, for example, some database
related arguments are –db-engine, –db-host, –db-port, –db-user,
–db-password, to see all the available options see: getlino configure
.
The --https
option causes getlino configure
to (1) install certbot
and (2) have it request a new certificate for every getlino startsite
.
When at least one Lino site of a server uses lino_xl.lib.appypod
,
then the server must have a LibreOffice service running so that the users of
your site can print documents using the appypdf, appydoc or appyrtf methods (the
appyodt method does not require a LO service). You say this using the
getlino configure --appy
option. For background information see
Running a LibreOffice server.
For details see the documentation about getlino.
Activate the master environment¶
For every new maintainer of a production site, add the following line to your
.bashrc
in order to have the master environment activated each
time you connect to the server:
. /usr/local/lino/shared/env/master/bin/activate
- master environment¶
A virtualenv to be used as default virtualenv for all site maintainers on this production server. It mainly contains getlino. It is usually located in
/usr/local/lino/shared/env
.
Check /etc/aliases
¶
Every production server should be able to send emails to its maintainers, e.g. to notify them when a cron job fails.
# apt install sendmail
# nano /etc/aliases # add your email address
# newaliases
Install your first site¶
You will do the following for every new site on your server:
$ sudo su
# getlino startsite APP_NAME SITE_NAME
Where:
APP_NAME
is one of the Lino applications known by getlino (noi, cosi, avanti, voga…)SITE_NAME
is a unique internal name of your site on this server.
For example:
# getlino startsite cosi first
On the other hand if your applications is not listed in the applications known by getlino or if you’d like to install/deploy django application you can define a filename.ini file (use the example template here ). Where appname, prjname, git_repo and settings_module are mandatory options in the getlino section. Everything else is optional. P.S> If you are deploying a django (non-lino) you must specify use_django_settings as True.
Then run the command:
# getlino startsite --ini-file filename.ini
And then point your browser to http://first.localhost
Some useful additions to your shell¶
We suggest that you add the following to your system-wide
/etc/bash.bashrc
:
alias ll='ls -al'
alias a='. env/bin/activate'
function pywhich() {
python -c "import $1; print($1.__file__)"
}
# find another name if your team also uses golang
function go() {
for BASE in /usr/local/lino/lino_local
do
if [ -d $BASE/$1 ] ; then
cd $BASE/$1;
return;
fi
done
echo Oops: no project $1
return -1
}
Test whether it works¶
Close and reopen your terminal to activate them.
Quickly go to a project directory and activate its Python environment:
$ go prj1
$ a
You can always try the following admin commands (they don’t modify the database, so they won’t break anything):
$ pm status
$ pm show users.AllUsers
More options¶
If you want to log every bash command, then add the
following to your system-wide /etc/bash.bashrc
# copied from http://backdrift.org/logging-bash-history-to-syslog-using-traps
function log2syslog
{
declare COMMAND
COMMAND=$(fc -ln -0)
logger -p local1.notice -t bash -i -- "${USER}:${COMMAND}"
}
trap log2syslog DEBUG
You may want to activate a hourly health check:
$ sudo ln -s /usr/local/bin/healthcheck.sh /etc/cron.hourly/