lab10

Unfortunately the script fails.

root@sandstorm:~# bash sandstorm-installer.sh
Sandstorm makes it easy to run web apps on your own server. You can have:

1. A typical install, to use Sandstorm (press enter to accept this default)
2. A development server, for working on Sandstorm itself or localhost-based app development

How are you going to use this Sandstorm install? [1]
We're going to:

• Install Sandstorm in /opt/sandstorm
• Automatically keep Sandstorm up-to-date
• Configure auto-renewing HTTPS if you use a subdomain of sandcats.io
• Create a service user (sandstorm) that owns Sandstorm's files
• Configure Sandstorm to start on system boot (with sysvinit)

Rest assured that Sandstorm itself won't run as root.
OK to continue? [yes]
Found existing sandstorm.conf. Using it.
As a Sandstorm user, you are invited to use a free Internet hostname as a subdomain of sandcats.io,
a service operated by the Sandstorm development team.

Sandcats.io protects your privacy and is subject to terms of use. By using it,
you agree to the terms of service & privacy policy available here:
https://sandcats.io/terms https://sandcats.io/privacy

Choose your desired Sandcats subdomain (alphanumeric, max 20 characters).
Type the word none to skip this step, or help for help.
What *.sandcats.io subdomain would you like? [] d10r
We need your email on file so we can help you recover your domain if you lose access. No spam.
Enter your email address: [] 1@d10r.net
Registering your domain.
This hostname is already in use. Type help if you need to recover access, or
pick a new one.
Choose your desired Sandcats subdomain (alphanumeric, max 20 characters).
Type the word none to skip this step, or help for help.
What *.sandcats.io subdomain would you like? [] help
Sandcats.io is a free dynamic DNS service run by the Sandstorm development team.

You can:

• Read more about it at:
  https://github.com/sandstorm-io/sandstorm/wiki/Sandcats-dynamic-DNS

• Recover access to a domain you once registered with sandcats

• Just press enter to go to the previous question.
  What Sandcats subdomain do you want to recover? [none] d10r
  
  OK. We will send a recovery token to the email address on file. Type no to abort.
  OK to continue? [yes]
  OK! Sent a recovery token to your email.
  Please enter the token that we sent to you by email. [] CkTFxa45yJzr6sr3Gk4zY7TjWTz56z4LPD2ckSN8
  OK! You have recovered your domain. Next we will update your IP address.
  Update successful.
  Congratulations! You're all configured to use d10r.sandcats.io.
  Your credentials to use it are in /opt/sandstorm/var/sandcats; consider making a backup.
  Now we're going to auto-configure HTTPS for your server.

• This will take about 30 seconds, and needs no input from you.

• Thanks to GlobalSign for their help making this happen.

Generating certificate request...
Requesting certificate (BE PATIENT)...
Successfully auto-configured HTTPS!

Config written to /opt/sandstorm/sandstorm.conf.
Finding latest build for dev channel...
Downloading: https://dl.sandstorm.io/sandstorm-180.tar.xz
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 27.0M 100 27.0M 0 0 31.3M 0 --:--:-- --:--:-- --:--:-- 31.4M
GPG signature is valid.
Sandstorm is not running.
System start/stop links for /etc/init.d/sandstorm already exist.
Sandstorm started. PID = 2186
Your server is coming online. Waiting up to 90 seconds.............................................................................................*** INSTALLATION FAILED ***

Your server never started listening.

You can report bugs at: http://github.com/sandstorm-io/sandstorm

This is quite likely related to an incompatibility with the underlying LXC container. See https://github.com/sandstorm-io/sandstorm/issues/1156.

After adding to @h1:/etc/pve/lxc/101.conf@ (config file for the sandstorm CT) the lines

# See https://forum.proxmox.com/threads/i-would-like-to-see-an-appliance-for-sandstorm-io.24773/
lxc.aa_profile = unconfined
lxc.mount.entry = /dev/fuse dev/fuse none bind,create=file 0 0

and restarting the CT, it started working.

Now the SSl config.
See sandstorm.d10r.net, d10r.sandcats.io and s.d10r.net and figure out...