Community
Chat Logs
Saturday, February 28, 2026
- phalethhi
- phalethstill getting the same error when trying to start nevet https://paste.debian.net/plainh/dab58abd
- phalethpostgres is reachable from the app server https://paste.debian.net/plainh/0108da55 and I'm not sure if I should try postgres 17.9
- phalethit's very difficult to debug startup of this application since it leaves no clue if it can or cannot read environment variables on startup
- phalethafk
- phalethlooks like I should update gitea once gitea 1.25.5 is out and figure out how to build prometheus from source https://go.dev/blog/allocation-optimizations
- nevetAllocating on the Stack - The Go Programming Language
- phalethalso shame on google for not doing these optimizations much much earlier
- bluephaleth: yes, that's the error I got
- bluedreamreal: any idea how we can debug this?
- blueFeb 28 06:45:48 nevet java[55]: SQL State : 08001
- bluephaleth: are you sure the nevet container can see the app one, they're on the same network?
- blueCaused by: java.net.UnknownHostException: postgres:bfK7kP2fcyO7oUxN@192.168.1.105
- phalethoh it leaks password
- bot<discord:blue> yes
- phalethyeah, the nevet app can reach the db container, see the second paste
- blueoh, this is from the nevet app?
- phalethI think env vars are not being read
- phalethyeah, it's java
- blueare the env vars available in the container
- blue?
- phalethor is nevet not java? I don't know what this is then, was supposed to deploy the java app
- blueyes, nevet is kotlin, which is java
- phalethenv vars are set by systemd
- bluecan you do echo $DB_URL in the container?
- blueactually, I think I can enter the container myself and check
- bluece332a-nevet-srv
- blue?
- phalethno you cannot, cause env vars are set only for the systemd process that manages the kotlin or whatever app
- bluenevet.service?
- phalethwhich apps can normally read just fine, but not this one
- phalethyeah
- blueman I can't even use ping from inside the container
- bluethose images are really reduced :P
- phalethapt update
- phalethapt install iputils-ping
- bluethx
- phalethnp
- bluehm, looks fine indeed
- blueyup:
- blueroot@nevet:/etc/systemd/system# systemctl show nevet --property=Environment
- blueEnvironment=
- phalethanyway, normally applications should be self-discoverable, they should tell what you need to configure and error out if something is missing, but this is again some stuff hacked together that only runs on the developers machine
- phaleththe systemd property is called EnvironmentFile
- blueyes
- blueFeb 28 12:21:19 nevet java[892]: Build: ${git.commit.id.abbrev} (${git.branch}) ${git.build.time}
- bluebtw this line is also suspicious
- phalethI used a zip copy of the code to build the app
- bluephaleth: looks better, I removed username/password from the connection string, it kills java
- blueinstead, it loads them from the env vars
- bluenow there's some oauth2 issue
- blueFeb 28 12:24:37 nevet java[945]: Caused by: java.lang.IllegalStateException: Client id of registration 'google' must not be empty.
- blueHMMMMMM
- bluedreamreal: is this a hard requirement?
- phalethok, cool, I had no idea that was the problem and why I have to specify the credentials second time
- blueat least we're getting somewhere. but I think now we need dreamreal's help, and it's shabbat, he might be slow to respond
- blueit's actually better this way, phaleth. the password doesn't get leaked
- phalethyeah, I'll reset the password
- blueI'd still prefer if the jdbc connection string supported that, but it's ok
- blueapparently this is the officially documented for postgres jdbc: jdbc:postgresql://[REDACTED:url-credentials]@host:port/database
- blueah, sorry, I mean this:
- phalethI'd prefer jdbc making any sense in it's error messages
- bluejdbc:postgresql://host:port/database
- bluetrue
- phalethok
- blueapparently what also works are params
- bluejdbc:postgresql://host:port/database
- bluewith ?user=...&password=...
- phalethok, it run migrations
- blueit did?
- blueI can't tell, it's borked because there's no google client id
- bluebtw phaleth: https://github.com/primate-run/primate/issues/251
- nevetProposal: Add `AppFacade#env(key: string)` · Issue #251 · primate-run/primate
- phalethhere's the almost full log https://api.pastecode.io/anon/raw-snippet/rwoe5ynj?raw=inline&ticket=329e0fa6-7403-4e9a-adb3-d78889e19cb5
- nevetUntitled (rwoe5ynj) - PasteCode.io
- bluephaleth: meanwhile, could you change the deployment to come from https://gitea.repopack.app/blue/bytecode.news
- bluebecause this contains the primate app in apps/primate
- bluefor which we also need a container
- phalethyeah, I can try
- bluenice log, yes I get the same google error
- blueapparently it needsa GOOGLE_CLIENT_ID and _SECRET
- bluehttps://gitea.repopack.app/blue/bytecode.news/src/branch/master/.env.default
- bluethis isn't documented here yet
- bluephaleth: https://gitea.repopack.app/blue/bytecode.news/src/branch/master/docs/deployment.md
- blue`Nevet supports "Sign in with Google" and "Sign in with GitHub" via OIDC / OAuth2. Both are optional and independent -`
- bluehm
- bluemaybe this is a bug
- blueit should work without the GOOGLE_CLIENT_ID, but maybe the env variable has to be set? dunno
- blueyeah, I don't think it's optional
- bluespring picks it up automatically, and tries to configure it, hits empty string or missing property, dies
- phaleth"If `GOOGLE_CLIENT_ID` and `GITHUB_CLIENT_ID` are both empty, OIDC endpoints are not registered and the app runs OTP-only."
- blueyeah, that's simply not true in this case. or maybe we need to include those two env vars but set them to empty
- blueshould I try that?
- phalethnot sure if whatever reads those properties is that dumb, but null and empty is something different for sure
- phalethI mean env vars
- blueyeah, it's spring, and spring is a truckload of magic that no one understands
- blueI'm gonna try empty vars. but empty vars should be virtually the same as non-existent
- bluenope, still dying
- blueOMG
- bluechatgpt is telling me I need to "Move the Google registration into a profile:"
- bluebut then I'll need to rebuild the container
- phalethI can rebuild the container
- phalethbut I don't follow what chatccp is saying
- dreamrealYou should be able to put trash values in there, and I'm going to try to figure out how to make those things optional - it shouldn't be that hard to do - but the UI shoudl expect OIDC to be present, is the problem
- dreamrealbut you shouldn't have to rebuild a container to provide values to it, we need to be able to externalize them and put them in .env and docker just imports them
- phalethagreed
- phalethblue: I assume you can just rebase https://gitea.repopack.app/blue/bytecode.news ?
- bluephaleth: yes, once dreamreal fixes this google nonsense
- blueI don't know if I can just delete it from application.yml and it would work
- phalethok
- phalethlet's try getting the code from gitea then
- blueyes, it has the primate app under apps/primate, too
- blueI'm gonna sync my gh fork, then pull down stuff onto gitea
- blueomg
- phaleththere's a CLI called tea
- blueMerge branch 'jottinger:main' into master
- bluedid I tell you how much I hate GH?
- blueinstead of rebasing my branch, it does this nonsense
- bluemy fork*
- phalethall of these cli's are garbage
- phalethglab on top
- blueit's not a cli
- blueI went to gh, hit 'sync' fork
- phalethgh is github cli
- blueoh man
- bluegithub is such a garbage website
- blueoh man and I asked chatgpt and it spews total nonsense
- blueit claims rebase rewrites history. no it wouldn't, it wouldn't rewrite the upstream history, that's the poitn
- bluenvm, I'll do it myself
- bluegithub ui is nonsense
- phalethyeah, and I'll just download tar over https during the build, cannot be bothered figuring out something else
- bluephaleth: done
- bluegitea is rebased against the latest commmit + two primate app commits
- bluehttps://gitea.repopack.app/blue/bytecode.news
- blueonce he pushes out a fix, I can easily rebase again and push out to gitea
- bluewe need `ce332a-nevet-app` for primate, right?
- phalethfor primate?
- phalethno clue
- phalethI'll deploy the kotlin thing to that container
- blueyou want to put them in the same container?
- phalethoh, you always call everything app
- bluethe nevet java thingy is -srv
- phalethand that container name does not exist obviously, but I get it
- phalethyeah
- blueI was thinking you'd add -app for the primate app
- blueso specifically, for the code under apps/primate
- phalethyeah
- phalethI mean nah
- dreamrealokay, found it: creating an issue and I'm going to create a runtime profile so you can enable/disable OIDC with an invocation flag
- phalethlook at: sudo machinectl list
- phalethif everthing was an app that'd be a disaster
- bluece332a-nevet-db container systemd-nspawn debian 13 192.168.1.105…
- bluece332a-nevet-srv container systemd-nspawn debian 13 192.168.1.107…
- phalethit already is in other ways
- blueI was thinking you'd add ce332a-nevet-app for the primate app
- phalethI will add another container for primate, sure, but not gonna label it with -app
- bluesure, call it whatever you like
- dreamrealI'm gonna have a PR for this in a few minutes
- dreamrealSPRING_ACTIVE_PROFILES=oidc java -jar app-1.0.jar # this will require OIDC, ignore it otherwise
- phalethok
- dreamrealmain has been updated
- bluephaleth: it's on gitea
- dreamrealso: the *configuration* hasn't changed in .env but it won't try to use OIDC unless that profile is activated
- dreamrealI've got another issue for the UI to be able to introspect whether OIDC is enabled or not, but I haven't written anything for it yet
- blueah sorry dreamreal, I accidently pushed to upstream/master, let me delete it
- dreamrealhttps://github.com/jottinger/bytecode.news/issues/128
- phalethI will just put SPRING_ACTIVE_PROFILES=oidc into the env file
- dreamrealphaleth: do that ONLY IF YOU WANT OIDC enabled
- dreamrealif you don't, yeet it
- dreamrealthe default profile will not use OIDC
- phalethok, I'll get rid of it then
- dreamrealOIDC means configuring the google oauth tokens and setting up the github stuff
- blueok, I deleted it again
- dreamrealfor developers, that shouldn't be necessary unless they're specifically testing that path
- bluedreamreal: it's best if you changed my role on the original repo to readonly
- blueI'll keep accidently pushing master otherwise, but I don't need to
- phalethor just migrate github -> gitea, main -> master
- dreamrealyou're gonna love this, blue: github doesn't let me set it to readonly :D
- blueyeah that's what I did, but I accidently did `git push origin` and it pushed it to his repo
- dreamrealNot for a private repo, maybe
- blueor well, git push upstream, that was dumb
- phalethhmm, could set the main branch as protected or whatever github calls that
- blueI have upstream = his repo (jottinger/bytecode.news), origin (gitea) and then github (same fork, on github)
- dreamrealphaleth: doing that now
- blueI don't think I need github at all, but once I start sending him PRs, I don't know if I can do it from gitea
- dreamrealoh, damn you github
- dreamrealwon't apply to the repo because it's private
- dreamrealit might be good enough that it's time to move it, actually
- phalethheh
- dreamrealblue: what do you think? Nevet's exceeded the prior version enough to become IT?
- phalethI have no problem giving your access to our gitea
- dreamrealdear god no
- dreamrealI'm swimming in access as it is
- bluephaleth, he means moving it to a public github repo, I think. but why move it, dreamreal, why not just open up the repo?
- blueif you move it you lose all the issues
- dreamrealI was just gonna rename it and open it
- blueor do you mean with 'move', change from private to public?
- blueoh, gotcha
- dreamrealbut maybe opening it is enough
- phalethah, ok
- bluewell this limitation is ridiculous anyway
- dreamrealeverything is ridiculous, that's why we laugh
- blueno I mean, the way github cripples its features when your repo is private
- blueunder the guise of promoting FOSS. but it's exactly the opposite, they want you to pay
- blueprivate & public should get the same treatment, and premium features should cost either way
- blueanyway
- bluedon't open it up on my behalf
- blueI'll try to set up git to prevent me from accidently pushing master to upstream
- dreamrealso: any opinion on it being streampack vs bytecode.news?
- dreamrealdoeth the speaky-speaky things now, losers, or forever hold thy peace
- blueI don't have a specific opinion. but currently you're using three names and it's confusing, pick one and stick to it. if you already got the domain, then bytecode it is
- dreamrealwe're jews, names are transitory, be a jew :D
- blueya well
- dreamrealphaleth: any opinion? We have one vote for bytecode.news
- phalethsay it three times and you'll see
- dreamrealfor some reason it counts
- bluelol
- phalethreact-router react-router react-router, doesn't catch on
- dreamrealI have more votes than anyone else, so I win no matter what, but I'd like to hear from the el gallery anyway
- dreamrealbytecode.news three times isn't catchy either but that's fine
- blueI told him bytenews is better, but he won't listen
- dreamrealI actually like nevet but nevet's a specific instance, not THE PROJECT
- blueI'd personally get the domain bytenews.dev :P
- dreamrealphaleth: any opinion?
- dreamrealblue: I may have already gotten it
- dreamrealI don't remember
- phalethnevet should have ended with h, then it'd be cool like phaleth
- phalethwasted opportunity there
- dreamrealphaleth: only dorks' names end in h
- phalethheh
- * dreamreal used to use "Epesh" as a nick for YEARS
- dreamrealand in some communities Epesh is still remembered
- dreamrealblue: my hebrew is very very strong, as you see: mistranslit of efes
- blueyes I noticed. you also seemed to remember nevet means stream
- dreamrealI know, I know
- dreamrealI forget the first name we came up with
- dreamrealbut I like nevet
- bluethankfully, I'm here to correct you
- dreamrealI also like alit but I know a really cute lady named alit and that would be unseemly
- dreamrealI figured you deserved a chance to be right for once
- blueyeah that's a girl's name, nevet's a boy
- dreamrealmmm alit. If I'd been single I'd have seen her as a missed opportunity. Wonderful lady, though. Flighty, red hair, lithe... and a missile launch technician in the IDF :D
- blueyeah you don't wanna mess with that
- dreamrealnow a yoga instructor in sfarad
- bluehahahaha
- dreamrealoh if I'd been single I'd DEFINITELY have wanted to mess with that
- dreamrealI was not, plus I'm a professional, so there's no effin' way but biologically hell to the yes
- bluewell yeah, that's the problem isn't it
- dreamrealnot a problem. I love alit as a friend. There's no temptation there; she's just a hell of a person and I respect that.
- dreamrealphaleth: fine, you have no opinion
- dreamrealdealer's choice wins: I have voted as well
- blue heh
- phalethyeah, I'd say thanks for asking for an opinion, but I can't give any on something I have no clue about
- bluelol
- phalethbtw, before you open up the github repo to the world consider the following
- phalethsetup the copy of the repo somewhere else, and use the github repo as a mirror and continue using github only for issues and abandon PRs
- phalethand of couse setup an action/pipeline/whatever to push to github automatically
- phalethPRs on github can be disabled, not sure that's a paid feature
- blueit's been recently added, not paid
- dreamrealI don't want them disabled, I want them demanded
- dreamrealphaleth: that's certainly an option but no
- phalethyeah, right, the point of a mirror is to be read-only except for the action/pipeline from the other repo
- bluephaleth, did the oauth problem get solved?
- phalethnot yet, trying to find a place where to generate token in gitea
- dreamrealwhich oauth problem are you trying to solve?
- dreamrealand bytecode.news is now a public repo
- phalethoh, ok, what's the github url?
- dreamrealgithub.com/jottinger/bytecode.news
- phalethI think blue will want his stuff to be there, so I'll search for how to get the token from gitea
- phalethprivate access token I mean
- blueya
- phalethah, so it's under Settings -> Applications
- bluecool
- phalethlooks good now https://quickpaste.net/iWAoGlr/plain
- bluegood
- bluenow we need the primate app, no?
- bluecan you expose it under nevet.repopack.app?
- phalethsits at the top https://images4.imagebam.com/1a/5a/bf/ME1AZS3Y_o.png
- phalethtry if it's reachable at nevet.repopack.app
- phalethI actually have absolutely zero clue how to test that app
- phalethcurl maybe
- bluelet me add an index app
- phalethI guess it's not listening on port 80
- bluenope, it'd be the normal primate port at 6161
- bluedone
- phalethok, it's listening on 8080 but should I open that to the interwebz you mean?
- bluehttps://gitea.repopack.app/blue/bytecode.news/commit/9cbc244b72d5b46b0bf7a7c0fd465484d7ea9eb2
- bluethe java app is listening on 8080
- bluebut you only need to open the primate app
- phaleththe one which I didn't deploy yet
- blueyes
- bluethe primate app will send requests to the nevet api, internally, on the network
- bluebut only it will be exposed outside
- phalethok, makes sense
- blueso my ideal setup is, I have a script or something to pull & redeploy the nevet primate app / nevet itself, think we can do that?
- phalethno package-lock.json again, ok
- blueyes
- blueI don't do package-lock.jsons :P
- phalethI'll push the documentation once you tell me it works
- phalethand then you can automate, but hold on
- bluek
- phalethblue: https://quickpaste.net/fGq-nFg
- nevetQuickpaste
- phalethNode.js v25.7.0
- bluesweet
- dreamrealGah
- dreamrealurl list
- dreamrealurl ignore list
- nevetIgnored hosts include: x.com, twitter.com, paste.debian.net, pastebin.com, bpa.st, dpaste.com, and pastebin.org
- dreamrealurl ignore add quickpaste.net
- nevetAdded quickpaste.net to ignored hosts.
- blueFeb 28 15:08:48 nevet-primate node[75]: Error: Cannot find module '/app/build/server.js'
- bluewhat's that?
- bluenevet-prmt, is that the machine, phaleth?
- phalethwell I have no clue how to start it
- phalethyeah
- phalethit builds, prolly outputs a build dir
- phalethserver.js is what I'd expect
- blueyes
- bluehm
- phalethah, the build subdir got omitted
- blueyes
- bluethough even if I run `node server.ts`, it fails
- bluehm hm hm
- phalethserver.ts?
- phaleththink that will work on node, I guess it should
- blueserver.js
- bluesorry
- phalethok, well, let me rebuild
- blueso locally it works for me `node build/server.js`
- blueso when I'm automatically, I'm gonna overlay a .env file onto the build,
- bluewhen I'm automating it*
- bluethis is actually something I haven't explored yet, because .env files aren't usually baked into a build
- blueI'll just copy it into `build` after `npm run build` runs, in the Containerfile, I think
- phalethok, blue, it fails on some sort of assert https://quickpaste.net/7PWeP6l
- blueyeah that's what I can see locally
- blueor well, if I try to run it within the image
- bluemaybe a package.json is necessary
- bluelet me stub it
- phalethok, I gotta go out, I'll just push the documentation to gitea for you to see what I've done
- bluealrighty
- bluewelp, got it running on 6161
- bluenow I just need to adapt the haproxy config and reload the haproxy containre, no?
- blueah, you already have it
- bluesweet
- phalethcheck the provision repo the last commit - 0ac59c2a890370a11d1a246b6bff4072518228c4
- bluebefore you go, do you have any idea why nevet.repopack.app isn't working?
- bluethe app is running in the container at port 6161
- bluealso, thanks for the docs, I'll automate it into a script so I can easily redeploy
- phalethit's still repeatedly crashing with that error
- phalethneed to rebuild and restart as per instructions
- blueFeb 28 15:25:57 nevet-primate systemd[1]: Started nevet-primate.service - Primate Nevet Site.
- blueFeb 28 15:25:57 nevet-primate node[4114]: » app url http://localhost:6161
- bluethat's inside the ocntainer though
- bluehm, maybe localhost is false
- phalethtry this
- phalethjournalctl -n 150 -f -u nevet-primate
- blueya
- blueit contains old entries
- blueoh
- blueyou mean it keeps crashing?
- phalethyeah
- phalethif you are not sure then wipe out the container and try again
- bluethe last two lines though are
- blueFeb 28 15:25:57 nevet-primate systemd[1]: Started nevet-primate.service - Primate Nevet Site.
- blueFeb 28 15:25:57 nevet-primate node[4114]: » app url http://localhost:6161
- phalethweird
- phalethlet me ditch it
- blueif you recreate the container, you'll have the same problem
- blueyou need to copy over the original package.json, outside of build
- bluethis is a primate bug
- blueor an rcompat bug, doesn't matter, but you need a package.json somewhere because it uses that to find paths
- phalethI'm rebuilding with --no-cache
- phalethoh, ok
- blueoki, but make sure you copy `package.json` from the repo onto /app
- phalethinto /app and not /app/build?
- blueyes
- phalethweird
- blueit's something I need to fix, I don't know why it does on a production build where everything is self-contained
- bluewhy it does that*
- blueyou did everything right, it's a primate problem, but I can't fix it in primate quickly
- blueso for now copying the original package.json will solve it
- bluedreamreal: is there a reason java container is costing us 700mb of RAM?
- phalethit's running
- bluebut nevet.repopack.app is still not working?
- phalethit does
- blueweird, I get 503
- bluehttps://nevet.repopack.app is working for you?
- phaleth» app url http://localhost:6161
- phalethgotta configure it to listen to any address
- blueok, that would be 0.0.0.0
- phalethfrom the VM I get:
- phaleth$ curl -IL 192.168.1.108:6161
- phalethcurl: (7) Failed to connect to 192.168.1.108 port 6161 after 0 ms: Could not connect to server
- phalethanyway, you can do it blue, it's the same old same old, primate issues from now on :D
- bluealright
- bluelet me figure out how I can rebuild the machine
- blueheh, you're using an auth header
- bluesweet
- blueMerge pull request #136 from jottinger/feature/128-feature-discovery-endpoint
