Streisand: How can I custom choose which service that I want to install

[ookangzheng]

I using budgetvm ,openvz, ubuntu16.04
I get the error during shadowsocks part

I also wanna do a custom Install, for example: I dont need shadowsocks and wireguard how can I uncheck them ?

Thanks

[sjug]

Oh you need Wireguard as it's the future, and awesome.

However I have the same general question. Would it be possible to put toggles in to not install _everything_?

Also seeing the same error ironically..

TASK [shadowsocks : Add the Shadowsocks-libev repository] **********************
An exception occurred during task execution. To see the full traceback, use -vvv. The error was: apt.cache.FetchFailedException: W:The repository 'http://shadowsocks.org/ubuntu trusty Release' does not have a Release file., W:Data from such a repository can't be authenticated and is therefore potentially dangerous to use., W:See apt-secure(8) manpage for repository creation and user configuration details., E:Failed to fetch http://shadowsocks.org/ubuntu/dists/trusty/main/binary-amd64/Packages  404  Not Found [IP: XX.XX.XX.XX 80], E:Some index files failed to download. They have been ignored, or old ones used instead.
fatal: [XX.XX.XX.XX]: FAILED! => {"changed": false, "failed": true, "module_stderr": "Traceback (most recent call last):\n  File \"/tmp/ansible_yCtsjs/ansible_module_apt_repository.py\", line 538, in <module>\n    main()\n  File \"/tmp/ansible_yCtsjs/ansible_module_apt_repository.py\", line 527, in main\n    cache.update()\n  File \"/usr/lib/python2.7/dist-packages/apt/cache.py\", line 454, in update\n    raise FetchFailedException(e)\napt.cache.FetchFailedException: W:The repository 'http://shadowsocks.org/ubuntu trusty Release' does not have a Release file., W:Data from such a repository can't be authenticated and is therefore potentially dangerous to use., W:See apt-secure(8) manpage for repository creation and user configuration details., E:Failed to fetch http://shadowsocks.org/ubuntu/dists/trusty/main/binary-amd64/Packages  404  Not Found [IP: XX.XX.XX.XX 80], E:Some index files failed to download. They have been ignored, or old ones used instead.\n", "module_stdout": "", "msg": "MODULE FAILURE"}

The repo is dead, so I'm not sure how everyone isn't having this error.

[sjug]

Shadowsocks is no longer compatible with ubuntu 16.04. I tried compiling as they suggest as well, but libsodium in 16.04 is not new enough.
Need to be ubuntu 16.10 with libsodium 1.0.10 at least

[ookangzheng]

Yesterday I tried successful, for exp
I delete the

1. streisand.yml -> roles: -> delete shadowsocks options
2. ufw -> tasks -> main.yml -> delete shadowsocks part
3. streisand-mirror -> tasks folder-> delete shadowsocks.yml file && vars folder -> delete shadowsocks.yml files too
4. In streisand-mirror -> main.yml (download and verify ) delete the shadowsocks option
5. then in current dir/template -> mirror-index.md.j2 file -> delete shadowsocks part
   Done~

[ookangzheng]

@sjug, It support centos 5,6,7 Debian, Ubuntu 12+
b4 i use streisand, I use openvpn and shadowsocks as usual. I use this script ( author from china)
https://teddysun.com/486.html

just paste the code and install it (remember open the firewall port)

wget --no-check-certificate https://raw.githubusercontent.com/teddysun/shadowsocks_install/master/shadowsocks-all.sh chmod +x shadowsocks-all.sh ./shadowsocks-all.sh 2>&1 | tee shadowsocks-all.log

[alimakki]

you can work around the shadowsocks portion by editing the shadowsocks playbooks/shadowsocks/tasks/main.yml file manually and harcoding trusty as such:

name: Add the Shadowsocks-libev repository
apt_repository:
repo: 'deb https://shadowsocks.org/{{ ansible_distribution|lower }} trusty main'
state: present

[quinncomendant]

Yes, it would be great to be able to exclude services that won't be used. This can be during the interactive setup session, or via command line args, --disable-shadowsocks, --disable-tor, etc.

[andreagrax]

I agree .
I tried to fiddle about this , but is seems that there are many cross references between the various roles .
It's also mentioned in another issue https://github.com/jlund/streisand/issues/23

[quinncomendant]

BTW, I don't mean to say adding a feature to exclude services is an acceptable solution to the errors people are getting here. That also needs to get fixed. I noticed this is happening to me now too (The repository 'http://shadowsocks.org/ubuntu trusty Release' does not have a Release file).

[sjug]

@quinncomendant I've been working on a PR to fix the issue but it's definitely unraveled the whole nest. Shadowsocks no longer supports Ubuntu 16.04, even building from source. Like I said yesterday above.

There are a few potential solutions:
1) Not using shadowsocks-libev (try python/go implementation), which I don't think is ideal but may be simplest.
2) Pinning to an old version of shadowsocks that still supports 16.04
3) Upgrading to 16.10 and getting shadowsocks from the mainline repo. I have tried this solution but there are a ton of other issues that arise. For example the OpenVPN repo is the upstream one, which _only_ supports 16.04 and carries OpenVPN 2.4. Where the mainline repo for 16.10 only has the current 2.3 release. Among many others.

[macuser666]

I get the same error
Streisand server deployment fails whilst trying to install Shadowsocks

[dlin303]

@sjug Can you elaborate a little more about how to do option 2?

[sjug]

@dlin303 For option 2, we would need to find out what the last version of shadowsocks was which supports the 16.04 version of libsodium (1.0.8) then use the binaries.

Hopefully @jlund returns soon so he can merge in the PRs to fix this blocker.

It does look like the long term solution will need to be upgrading the base image to 16.10.

[jlund]

A fix for the Shadowsocks repository issue has been merged, and work on role selection (e.g. being able to reliably comment out services that you do not want or need) is already in progress. I hope to have it finished this weekend.

[jlund]

BTW there won't be any need to move to a non-LTS release of Ubuntu for the sake of Shadowsocks.

[hosaka]

I wish I found this thread before deploying all the defaults! Looking forward to selective install. All I would like to try using is wireguard, so commenting out the majority of the roles shouldn't be a problem in streisand.yml?

[bbickerton]

Any word on how the role selection is going? Trying to do some planning and an updated time estimate would be helpful. Thanks!

[tiliarou]

so in the end, if we are on 16.10, will openvpn and shadowsock work as of today streisand git master ?

[cpu]

There are several open issues of varying age/concentration on modularization to date. I've started on a concerted effort to implement first-party support and recommend interested parties follow https://github.com/jlund/streisand/issues/746. I'm going to close this issue as a duplicate of 746 in the short term. Thanks!