BigBlueButton 2.2-beta-5

[Fred Dixon]

Hi Everyone,

We released a BigBlueButton 2.2 in beta-5 that fixes two small bugs we saw in capture of events for recordings.

   https://github.com/bigbluebutton/bigbluebutton/releases/tag/2.2-beta-5 

To install/upgrade to BigBlueButton 2.2-beta-2, see

  http://docs.bigbluebutton.org/2.2/install.html

To try out this latest release, visit

  https://test.bigbluebutton.org/

Let us know if you see any issues in this update.  

Regards,.... Fred

--

BigBlueButton Developer

http://bigbluebutton.org/

@bigbluebutton

[German Acevedo]

Hi,

I tried to update my test server to beta-5 but finished with the an error telling me to run: npm audit fix to fix it. After running this command I got the following errors reported:

root@conferencias-falcorp-net:/# npm audit fix

npm ERR! code EAUDITNOPJSON

npm ERR! audit No package.json found: Cannot audit a project without a package.json

npm ERR! A complete log of this run can be found in:

npm ERR!     /root/.npm/_logs/2019-04-12T03_39_49_998Z-debug.log

root@conferencias-falcorp-net:/#

I moved to /usr/lib/node_modules/npm and executed again the command and I had to run it with --force option to try to make it work. I had to run it several times an ended with this:

root@conferencias-falcorp-net:/usr/lib/node_modules/npm# npm audit fix --force

npm WARN using --force I sure hope you know what you are doing.

npm WARN marke...@0.4.2 requires a peer of marked@^0.5.2 but none is installed. You must install peer dependencies yourself.

up to date in 14.138s

fixed 0 of 3 vulnerabilities in 6580 scanned packages

  3 vulnerabilities required manual review and could not be updated

root@conferencias-falcorp-net:/usr/lib/node_modules/npm#

After this I tried to upgrade again and it finished reporting the following:

root@conferencias-falcorp-net:/usr/lib/node_modules/npm# apt-get dist-upgrade

Reading package lists... Done

Building dependency tree

Reading state information... Done

Calculating upgrade... Done

0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

1 not fully installed or removed.

After this operation, 0 B of additional disk space will be used.

Do you want to continue? [Y/n] Y

Setting up bbb-config (1:2.2.0-69) ...

......

sed: -e expression #1, char 57: unknown option to `s'

dpkg: error processing package bbb-config (--configure):

 subprocess installed post-installation script returned error exit status 1

Errors were encountered while processing:

 bbb-config

E: Sub-process /usr/bin/dpkg returned an error code (1)

Then I executed bbb-conf --clean and bbb-conf --check with the following results:

  root@conferencias-falcorp-net:/# bbb-conf --check

BigBlueButton Server 2.2.0-beta5 (877)

                    Kernel version: 4.4.0-145-generic

                      Distribution: Ubuntu 16.04.6 LTS (64-bit)

                            Memory: 8161 MB

                         CPU cores: 8

/usr/share/bbb-web/WEB-INF/classes/bigbluebutton.properties (bbb-web)

       bigbluebutton.web.serverURL: https://conferencias.falcorp.net

                defaultGuestPolicy: ALWAYS_ACCEPT

                 svgImagesRequired: true

/etc/nginx/sites-available/bigbluebutton (nginx)

                       server name: conferencias.falcorp.net

                              port: 80, [::]:80

                              port: 443 ssl

                    bbb-client dir: /var/www/bigbluebutton

/var/www/bigbluebutton/client/conf/config.xml (bbb-client)

                Port test (tunnel): rtmp://conferencias.falcorp.net

                              red5: conferencias.falcorp.net

              useWebrtcIfAvailable: true

/opt/freeswitch/etc/freeswitch/vars.xml (FreeSWITCH)

                       local_ip_v4: 195.154.164.184

                   external_rtp_ip: stun:stun.freeswitch.org

                   external_sip_ip: stun:stun.freeswitch.org

/opt/freeswitch/etc/freeswitch/sip_profiles/external.xml (FreeSWITCH)

                        ext-rtp-ip: $${local_ip_v4}

                        ext-sip-ip: $${local_ip_v4}

                        ws-binding: :5066

                       wss-binding: 195.154.164.184:7443

/usr/local/bigbluebutton/core/scripts/bigbluebutton.yml (record and playback)

                     playback_host: conferencias.falcorp.net

                 playback_protocol: https

                            ffmpeg: 4.1.1-0york1~16.04

/etc/bigbluebutton/nginx/sip.nginx (sip.nginx)

                        proxy_pass: 195.154.164.184

/usr/local/bigbluebutton/bbb-webrtc-sfu/config/default.yml (Kurento SFU)

                        kurento.ip: 195.154.164.184

                       kurento.url: ws://conferencias.falcorp.net:8888/kurento

                    localIpAddress: 195.154.164.184

               recordScreenSharing: true

                     recordWebcams: true

                  codec_video_main: H264

               codec_video_content: H264

/usr/share/meteor/bundle/programs/server/assets/app/config/settings.yml (HTML5 client)

                             build: 378

                        kurentoUrl: wss://conferencias.falcorp.net/bbb-webrtc-sfu

                  enableListenOnly: true

** Potential problems described below **

# Warning: API URL IPs do not match host:

#

#                                IP from ifconfig: 195.154.164.184

#  /var/lib/tomcat7/demo/bbb_api_conf.jsp: conferencias.falcorp.net

# Warning: The API demos are installed and accessible from:

#

#    https://conferencias.falcorp.net

#

# and

#

#    https://conferencias.falcorp.net/demo/demo1.jsp

#

# These API demos allow anyone to access your server without authentication

# to create/manage meetings and recordings. They are for testing purposes only.

# If you are running a production system, remove them by running:

#

#    apt-get purge bbb-demo

# Error: Detected that /usr/share/bbb-apps-akka/conf/application.conf has the default

# configuration values.  To update, run

#

#    bbb-conf --setip conferencias.falcorp.net

 I followed the instructions and executed bbb-conf --setip conferencias.falcorp.net

It finished without any errors and the bbb restarted and worked fine, but if I run again bbb-conf --check I still get the following at the end:

** Potential problems described below **

# Warning: API URL IPs do not match host:

#

#                                IP from ifconfig: 195.154.164.184

#  /var/lib/tomcat7/demo/bbb_api_conf.jsp: conferencias.falcorp.net

# Warning: The API demos are installed and accessible from:

#

#    https://conferencias.falcorp.net

#

# and

#

#    https://conferencias.falcorp.net/demo/demo1.jsp

#

# These API demos allow anyone to access your server without authentication

# to create/manage meetings and recordings. They are for testing purposes only.

# If you are running a production system, remove them by running:

#

#    apt-get purge bbb-demo

# Error: Detected that /usr/share/bbb-apps-akka/conf/application.conf has the default

# configuration values.  To update, run

#

#    bbb-conf --setip conferencias.falcorp.net

#

 I have rebooted the server and executed again apt-get update and apt-get dist-upgrade and get the following:

root@conferencias-falcorp-net:/# apt-get dist-upgrade

Reading package lists... Done

Building dependency tree

Reading state information... Done

Calculating upgrade... Done

0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

1 not fully installed or removed.

After this operation, 0 B of additional disk space will be used.

Do you want to continue? [Y/n] Y

Setting up bbb-config (1:2.2.0-69) ...

......

sed: -e expression #1, char 57: unknown option to `s'

dpkg: error processing package bbb-config (--configure):

 subprocess installed post-installation script returned error exit status 1

Errors were encountered while processing:

 bbb-config

E: Sub-process /usr/bin/dpkg returned an error code (1)

root@conferencias-falcorp-net:/#

This is the content of /root/.npm/_logs/2019-04-12T03_39_49_998Z-debug.log:

0 info it worked if it ends with ok

1 verbose cli [ '/usr/bin/node', '/usr/bin/npm', 'audit', 'fix' ]

2 info using n...@6.4.1

3 info using no...@v8.15.1

4 verbose npm-session 0e8be0dd763becfd

5 verbose stack Error: No package.json found: Cannot audit a project without a package.json

5 verbose stack     at Bluebird.all.spread (/usr/lib/node_modules/npm/lib/audit.js:143:19)

5 verbose stack     at tryCatcher (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/util.js:16:23)

5 verbose stack     at Promise._settlePromiseFromHandler (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/promise.js:509:35)

5 verbose stack     at Promise._settlePromise (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/promise.js:569:18)

5 verbose stack     at Promise._settlePromise0 (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/promise.js:614:10)

5 verbose stack     at Promise._settlePromises (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/promise.js:693:18)

5 verbose stack     at Promise._fulfill (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/promise.js:638:18)

5 verbose stack     at PromiseArray._resolve (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/promise_array.js:126:19)

5 verbose stack     at PromiseArray._promiseFulfilled (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/promise_array.js:144:14)

5 verbose stack     at PromiseArray._iterate (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/promise_array.js:114:31)

5 verbose stack     at PromiseArray.init [as _init] (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/promise_array.js:78:10)

5 verbose stack     at Promise._settlePromise (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/promise.js:566:21)

5 verbose stack     at Promise._settlePromise0 (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/promise.js:614:10)

5 verbose stack     at Promise._settlePromises (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/promise.js:693:18)

5 verbose stack     at Promise._fulfill (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/promise.js:638:18)

5 verbose stack     at PromiseArray._resolve (/usr/lib/node_modules/npm/node_modules/bluebird/js/release/promise_array.js:126:19)

6 verbose cwd /

7 verbose Linux 4.4.0-145-generic

8 verbose argv "/usr/bin/node" "/usr/bin/npm" "audit" "fix"

9 verbose node v8.15.1

10 verbose npm  v6.4.1

11 error code EAUDITNOPJSON

12 error audit No package.json found: Cannot audit a project without a package.json

13 verbose exit [ 1, true ]

Any ideas on how to solve these errors (even when BigBlueButton is working fine)?

Regards,

German Acevedo 

[Anatoliy Vinogradov]

When upgrading to beta-4 and beta-5, we get errors at the update stage. 

ya...@1.3.2 /usr/share/meteor/bundle/programs/server/npm/node_mo

{

"npm": "6.4.1",

"ares": "1.10.1-DEV",

"cldr": "32.0",

"http_parser": "2.8.0",

"icu": "60.1",

"modules": "57",

"napi": "3",

"nghttp2": "1.33.0",

"node": "8.15.1",

"openssl": "1.0.2r",

"tz": "2017c",

"unicode": "10.0",

"uv": "1.23.2",

"v8": "6.2.414.75",

"zlib": "1.2.11"

}

audited 319 packages in 4.514s

found 1 high severity vulnerability

run `npm audit fix` to fix them, or `npm audit` for details

пятница, 12 апреля 2019 г., 2:48:25 UTC+3 пользователь Fred Dixon написал:

[Alex Ejov]

I noticed that with youtube when you broadcast a video, the recording of this video is not recorded in the recording

пятница, 12 апреля 2019 г., 2:48:25 UTC+3 пользователь Fred Dixon написал:

Hi Everyone,

[Fred Dixon]

Hi Alex,

> I noticed that with youtube when you broadcast a video, the recording of this video is not recorded in the recording

Correct -- you'll see a message in the Share YouTube dialog box that says

  Note: Shared YouTube videos will not appear in the recording

We have an open issue for this

  https://github.com/bigbluebutton/bigbluebutton/issues/7018

Regards,... Fred

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-...@googlegroups.com.
To post to this group, send email to bigblueb...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-dev.
For more options, visit https://groups.google.com/d/optout.

[Fred Dixon]

Hi German,

> npm audit fix to fix it.

It looks like this warning just appeared.  Currently, we are running a post-install step on the installation of bbb-html5

   echo "Updating Node packages for bbb-html5 (this may take a moment)"

   su - meteor -c "cd /usr/share/meteor/bundle/programs/server; npm install"

Which scans and downloads the latest packages, and it looks like npm has detected a vulnerability in one of the packages.  Looking back through our previous test builds, it looks like this occurred within the last 24 hours. 

I just did an update of a test server and did not run npm audit.  It looks like everything loaded and ran fine

> I moved to /usr/lib/node_modules/npm and executed again the command and I had to run it with --force option to try to make it work

This is what probably broke your setup.  Recommend you move the file back and try restarting BigBlueButton.

We're looking in to the underlying cause for the vulnerability message printed by 'npm audit'.  Thanks for pointing this out.

Regards,... Fred

[Fred Dixon]

Hi German,

Digging deeper into this.  By running

  cd /usr/share/meteor/bundle/programs/server; npm install

we get a more detailed description of the issue

  https://nodesecurity.io/advisories/803

We traced it back to this issue in node-sass

  https://github.com/sass/node-sass/issues/2625

It like the node-sass team is aware of the issue (at the time of this writing, the above issue is 17 hour old) and they are working on a fix now.  The npm audit message would be appearing for any project depending on this module.  Judging from the activity in #2625 it shouldn't be very long before they release a fix.

As soon as the updated version of node-sass hits the npm repository, we'll update the package lock 

  https://github.com/bigbluebutton/bigbluebutton/blob/master/bigbluebutton-html5/package.json#L42

and rebuild bbb-html5 and release beta-6.  

Regards,... Fred

[German Acevedo]

Thanks Fred, I'll be waiting for beta-6!

You received this message because you are subscribed to a topic in the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/bigbluebutton-dev/UHbOjEqFoCE/unsubscribe.
To unsubscribe from this group and all its topics, send an email to bigbluebutton-...@googlegroups.com.