From raeburn at msu.edu  Tue Aug  6 12:40:35 2024
From: raeburn at msu.edu (Raeburn, Stuart)
Date: Tue, 6 Aug 2024 16:40:35 +0000
Subject: [LON-CAPA-admin] CentOS 9-Stream install
In-Reply-To: <CH0PR12MB5138E719A1247E77B57FF131B6FC2@CH0PR12MB5138.namprd12.prod.outlook.com>
References: <72E68AA3-78A8-4ADA-94FA-869E792DC3F0@johnabbott.qc.ca>
 <CH0PR12MB5138C6A82CC6C12D886A75FCB6F5A@CH0PR12MB5138.namprd12.prod.outlook.com>
 <8B86FAF3-69B4-4577-9CEE-6D936FBD9249@johnabbott.qc.ca>
 <CAMNR8_NzMHffTO6toLFRPkR_mfjyR_Hkj0qyCbVBcW=2W6Mfeg@mail.gmail.com>
 <CH0PR12MB5138E719A1247E77B57FF131B6FC2@CH0PR12MB5138.namprd12.prod.outlook.com>
Message-ID: <BL1PR12MB5141EAE5E9BFBEBBB37D204BB6BF2@BL1PR12MB5141.namprd12.prod.outlook.com>

Following up on my response from the end of May ...

Debian is an officially supported Linux distro for LON-CAPA version 2.11.5.

I have added a directory at install.loncapa.org/debian/ which contains loncapa-prerequisites-1-35 deb packages for Debian 10 (buster),  11 (bullseye) and 12 (bookworm), and deb packages for dependencies unavailable from standard repos.

I have also add links to installation instructions for those three Debian versions to the install.loncapa.org web page.

CentOS-Stream 9, RHEL9, Oracle Linux 9, AlmaLinux 9, Rocky Linux 9, Ubuntu 22LTS and 24 LTS, and Fedora 39 and 40 are the other new distro versions supported by 2.11.5.

Stuart Raeburn
LON-CAPA Academic Consortium

________________________________________
From: Raeburn, Stuart <raeburn at msu.edu>
Sent: Friday, May 31, 2024 3:21 PM
To: list about administration and system updating
Cc: Donald Teed
Subject: Re: [LON-CAPA-admin] CentOS 9-Stream install

Donald,

Past practice has been to add Linux distros to the list of supported platforms for LON-CAPA in response to requests from the user community.  Debian is no different, and I will look into reviving support for it.

A LON-CAPA repository at install.loncapa.org was created to provide packages for Debian 5 and 6 in 2011, and the release notes for LON-CAPA 2.10.0 and 2.10.1 (2011) listed both Ubuntu and Debian as supported distros.  By the time 2.11.0 was released, Debian ceased to be listed as a supported distro for LON-CAPA, as Canonical's Ubuntu LTS was preferred, and as far as I know no one in the use community had decided to use Debian.

As regards Rocky and Alma, their response to Red Hat's June 2023 announcement that *public* source releases would become restricted to CentOS Stream has differed.

AlmaLinux OS moved to CentOS Stream as source, so AlmaLinux is no longer a 1:1 clone of RHEL, but a binary compatible distribution.  As a result AlmaLinux can potentially develop and apply security patches/bug fixes ahead of RHEL.

Oracle, CIQ (the company behind Rocky Linux) and SUSE founded a trade association -- openELA.  Rocky Linux has claimed that they will continue to provide a 1:1 clone of RHEL despite the changes to RHEL source availability announced by Red Hat in 2023.

Also, CIQ has announced the availability of a CIQ Bridge subscription (fees apply) to provide critical security patches for CentOS 7 through 06/2027.  SuSE also offers critical security packages (fees apply) for CentOS 7 with its SUSE Liberty Linux Lite product through 06/2028.

Red Hat itself offers critical security packages to its RHEL7 customers via  Extended Life Cycle Support (ELS) until 6/2028.

Stuart Raeburn
LON-CAPA Academic Consortium
________________________________________
From: LON-CAPA-admin <lon-capa-admin-bounces at mail.lon-capa.org> on behalf of Donald Teed via LON-CAPA-admin <lon-capa-admin at mail.lon-capa.org>
Sent: Thursday, May 30, 2024 8:17 AM
To: loncapa_admin; list about administration and system updating
Subject: Re: [LON-CAPA-admin] CentOS 9-Stream install


Hi,

I notice Debian was once a platform supported, but very long ago (Debian 5.0)
In my opinion, Rocky and Alma will no longer be very close to Redhat as they used to be.
The developers have admitted in blogs that they will need to resort to reverse engineering things
which they will no longer be able to copy from Redhat's package management.  If one
is interested in quick turnaround on zero day Linux OS exploits and the benefits
of a mass of developers and users able to help with QA, then Debian provides a
better path going forward.  We could look at Ubuntu, but I'd rather reduce the number
of Linux distros we have in use on campus.  So this is a request that
perhaps Debian be considered another supported platform.

Regards,

--Donald Teed

On Sat, Sep 16, 2023 at 9:56?AM loncapa_admin via LON-CAPA-admin <lon-capa-admin at mail.lon-capa.org<mailto:lon-capa-admin at mail.lon-capa.org>> wrote:
Thank you, Stuart,

Cheers,
Michael

> On Sep 15, 2023, at 20:49, Raeburn, Stuart via LON-CAPA-admin <lon-capa-admin at mail.lon-capa.org<mailto:lon-capa-admin at mail.lon-capa.org>> wrote:
>
> Hello,
>
> Yes, CentOS Stream 9 will be one of the Linux distros supported for LON-CAPA 2.12.0, and a testing repo has been in place at install.loncapa.org/msu/testing<http://install.loncapa.org/msu/testing> for a few months to facilitate release candidate testing for 2.12.0.  (The same is true for: RHEL/Oracle Linux/AlmaLinux/Rocky Linux 9, and Ubuntu 22 LTS).
>
> Stuart Raeburn
> LON-CAPA Academic Consortium
>
> ________________________________________
> From: LON-CAPA-admin <lon-capa-admin-bounces at mail.lon-capa.org<mailto:lon-capa-admin-bounces at mail.lon-capa.org>> on behalf of Michael Dugdale via LON-CAPA-admin <lon-capa-admin at mail.lon-capa.org<mailto:lon-capa-admin at mail.lon-capa.org>>
> Sent: Friday, September 15, 2023 7:20 PM
> To: list about administration and system updating
> Subject: [LON-CAPA-admin] CentOS 9-Stream install
>
> Hello,
>
> With CentOS 7 and CentOS Stream 8 going EOL next year, are there any plans for providing a LON-CAPA repo for CentOS 9-Stream systems?
>
> Cheers,
> Michael
>
>
> Michael Dugdale
> Physics Department,
> John Abbott College,
> 21275 Lakeshore Road,
> Sainte-Anne-de-Bellevue, QC  H9X 3L9
> Canada
> (514) 457-6610 Ext. 5?888
> michael.dugdale at johnabbott.qc.ca<mailto:michael.dugdale at johnabbott.qc.ca>
>
> Co-director, SALTISE
> https://www.saltise.ca<https://urldefense.com/v3/__https://www.saltise.ca__;!!HXCxUKc!1PvtOV44-TrukI2mxQQTfVHas4qwdEFICQkloQ_Nzkexi2_LmB_Ol7M-_a0WZ-svRKl69AvvB34WvOy6gddnW2pghNmTXQ$>
>
> _______________________________________________
> LON-CAPA-admin mailing list
> LON-CAPA-admin at mail.lon-capa.org<mailto:LON-CAPA-admin at mail.lon-capa.org>
> http://mail.lon-capa.org/mailman/listinfo/lon-capa-admin

_______________________________________________
LON-CAPA-admin mailing list
LON-CAPA-admin at mail.lon-capa.org<mailto:LON-CAPA-admin at mail.lon-capa.org>
http://mail.lon-capa.org/mailman/listinfo/lon-capa-admin

From raeburn at msu.edu  Tue Aug  6 12:57:05 2024
From: raeburn at msu.edu (Raeburn, Stuart)
Date: Tue, 6 Aug 2024 16:57:05 +0000
Subject: [LON-CAPA-admin] LON-CAPA version 2.11.5
Message-ID: <BL1PR12MB514144AC5C79EC52E9736D0BB6BF2@BL1PR12MB5141.namprd12.prod.outlook.com>

New Version 2.11.5 released.

Update of 2.11.4 (and older) installations to 2.11.5 is recommended.
Changes from 2.11.4:


Student Interface
- Dashes in text pasted into textbox(es) for numericalresponse item(s) replaced 
  with standard ascii minus, i.e., - .
- When feedback on correctness is disabled and status is post-due date but 
  pre-answer date, "Answer submitted" is not shown in the Course Contents
  listing for the resource unless a submission has been made.
- In list of matches in course search, if matched item is a folder set link
  to display listing of folder contents.
- Hint to browsers to not autofill password field on proctor check-in page.


Course Management
- For course creation requests which are processed automatically, a progress 
  indicator is shown to the requester while the course is being created.
- For "official" courses, co-ownership is set automatically on course creation
  for Course Coordinator roles assigned to verified instructor(s) of record 
  (except requester/owner).
- Course Settings > Grading can be used to hide: "Awarded Total Points",
  "Max Possible To Date" and "Total Points In Course" in a student's view
  of grades.  If hiding is enabled it can be set to apply to all users,
  or just to users in specific section(s).
- Archive file (.zip, .tar etc.) can be uploaded to top level of Main or
  Supplemental Content, and contents can be extracted by a Course Coordinator.
- Stop long parameter names overflowing category box in "Select Parameters
  to View" table row.


Communication
- Correct randomization in effect for the student now shown when a Course 
  Coordinator displays a student's view of a problem within a feedback message
  in course context where encrypturl is in effect for student.


Grading
- If a problem has one or more parts with hand-graded item(s), i.e., those 
  for which "regrader" has been stored, LON-CAPA will display two dates/times 
  as the first items in the "Submissions" box, in cases where the date/time graded 
  is later than the date/time submitted:
  (a) Date Submitted
  (b) Date Graded
- In Assessment Chart align " / maximum" in total (rightmost) column for students
  with and without scores for selected folder(s), and 2 decimal places for maximum
  for consistency with total scores.


Printouts
- Text (black) used for elements, subscripts, and charges in rendering a molecule
  in organicstructure now visible by superposition on a filled white box instead 
  of a filled black box.
- PDFs created via LON-CAPA's "Print" link/icon will now correctly render resources
  which are already pdf files on servers/VMs with ghostscript 9.09 or later.
- "Table of contents" items included in a folder are no longer offered for
  selection when choosing resources to print.
- Tables now print when "Allow problems to be split over pages" is set to yes.


Authoring
- Common copyright/distribution options available when publishing a directory 
  now include "public".
- turnoffeditor" parameter previously available for formularesponse and
  mathresponse is now also available for customreponse, but default for
  formula and math is "no", whereas default for custom is "yes".
- In the listing of the contents of a directory, an "Edit" link is now included
  below the filename for .txt, .css and .js files
- The "Print" icon/link is omitted from the Functions menu when viewing mime
  types which lack an implementation for rendering for the tex target (PDF).
- "Options" item in Functions menu provides access to change CodeMirror 
  activation setting when Authoring Space is accessed in course context.
- Draw Image tag which generates an image programmatically is included in
  colorful editor insert lists. Rotation attribute available for text tag 
  in Draw Image, will apply when font attribute is set to a freetype font.
- Permitted R libraries expanded to include FactoMineR and mdatools.
- Lock set during publication of a directory is removed after publication is
  complete in all cases (including when no files needed to be published).


Third-party modules
- Update Geogebra to version 5.2.843
- Update JSME to 2024-04-29 version
- Update CKeditor to version 4.22.1
- Update jquery to 3.7.1; jquery-ui to 1.13.3
- Update MathJax to 2.7.9

Note: this update to Geogebra discontinues support for IE11.

Other bug fixes
- More information is provided to privileged users if a map could not be loaded
  during course initialization because the file was missing.
- Create "empty" sequence file when copying an empty folder from Supplemental
  to Main Content using the Course Editor, if original sequence file is absent
  to avoid "Map not found" warning on Course Initialization.
- In course context, "switch server to resource's home server" opens new tab
  when editing published resource, and ca role is loaded,  when user's domain
  (by default) disallows session hosting of domain's users in resource's domain.
- Fix a regression introduced in the course catalog in 2.11.4 for domains where 
  the instcode_format() routine in localenroll.pm had not yet been customized,
  whereby "No official courses to display" would be shown above a listing of 
  official courses, and "Show more details" link for a course would be inactive.
- When use of People > Users > "Add/modify user" results in a section change for 
  an existing student role, logging the expiration for the old section role 
  now correctly records the context as "user management" and not "selfenroll".
- When using "Edit Resource Parameters - Table Mode" no parameter setting
  table is displayed after "Update Display" pushed if User textbox contains
  a username or ID for a user not in the course.
- For user with a role of instructor in a course, display Edit link/icon in 
  the Functions menu for a published resource in a course, if user can edit it.
- TeXheight attribute (height in mm) in <img> tag will scale an image in a printout 
  when TeXwidth attribute is absent.
- Support height attribute in <displaystudentphoto /> tag when rendering student
  photo in a LON-CAPA resource for the web.
- When using "Edit Resource Parameters - Overview Mode", any instances of the 
  Time-Limit parameter for which nothing has previously been set now have blank 
  selected in the Days, Hours, Minutes & Seconds select boxes, instead of 0.
- When Course Editor > Content Utilities > Check/Set Resource Versions is
  used to display information about resources in a course, a correct version
  (i.e., 1) will now be shown for resources published only once, i.e.,
  those without (numbered) previous versions in Resource Space.
- The "undo" button's functionality has been reinstated for LON-CAPA's editor
  for HTML files, following a regression in LON-CAPA 2.10.1.
- Show correct role name for currently selected ad hoc helpdesk role in course.
- Avoid endless redirects to current host when login page redirects are in effect
  and request was for an encrypted URL in a LON-CAPA session which has expired.
- Prevent name information in classlists being deleted when a Domain Coordinator
  uses a file upload to make bulk change(s) to studentIDs if the csv file used
  lacks column(s) containing name information for users.
- Allow Domain Coordinator to copy source XML for resources published source open.
- Use value(s) from any responseparam tags present in template itself when grading
  submissions to example templates, so "Numerical Response with Custom Units"
  example works as expected when "Example" link is used on "Creating a new 
  problem resource" page.
- Inclusion of a "Table of Contents" item in a folder no longer causes the folder 
  containing it to be displayed as open, when displaying Contents.
- Changes to Settings with "multiple" selected in Course Editor now supported
  for resources with no assigned title.


Internals
- Use cached names and cache user's "About Me" page availability to speed up 
  display of discussion posts.
- When displaying help files online (which use TtH) prevent inclusion of
  script tag for MathJax.js immediately after body tag.
- Include resource identifier (symb) when checking access permission for resources 
  in a composite page to eliminate ambiguity for resources with multiple instances.
- Nightly automated update of user information can include format checking of 
  student/employee IDs to prevent LON-CAPA being populated with invalid data from
  institutional sources.
- httpd: Unit::[symbol] = scale * (scale,symbol,exponent) * (scale,symbol,exponent)
  type entries are no longer written to /var/log/messages when an Apache 2.4 child 
  process is stopped. 


Supported Linux Distributions
- Fedora 39 and 40 added
- Ubuntu 22 and 24 added
- Debian 10, 11, and 12 added
- CentOS 9 stream added
- Red Hat 9, Oracle Linux 9, AlmaLinux 9, and Rocky Linux 9 added


Specific enhancement requests/bugs addressed: (see http://bugs.loncapa.org)
2689, 2832, 4627, 4928, 5071, 5219, 5854, 5893, 5899, 6598, 6680, 6698, 
6777, 6823, 6929, 6938, 6966, 6969, 6976, 6978, 6981, 6982, 6991


Installation Notes:
 
To use this release you need to have version 1-35 of LONCAPA-prerequisites
installed.

To install this update:

1) You will need to be running RHEL 7, 8 or 9; Oracle Linux 7, 8 or 9;
SLES 12 or 15; AlmaLinux 8 or 9, Rocky Linux 8 or 9, Ubuntu LTS 16, 18, 20, 22 or 24
Debian 10, 11 or 12; CentOS Stream 9; or Fedora 39 or 40. 

(CentOS/Scientific Linux 7, SLES 11, Ubuntu LTS 14, Fedora 35-38,
and CentOS Stream 8 should continue to work, but are deprecated).

You will need to be root to use the commands listed at steps 1(a) - 1(d) and
2 to 11 below. On Ubuntu LTS servers either prepend sudo for each command, or
use sudo -i.

To accompany the earlier 2.11.3 release, the GPG key for LON-CAPA's repositories
was updated to reflect modern standards.  If you are updating from LON-CAPA 2.11.2
or earlier, and have not already updated the GPG key, it is recommended to clear
cached packages previously downloaded from the LON-CAPA repository for your Linux
distro, before removing the old GPG key and importing the new one.

(a) You can display the currently installed LON-CAPA package signing GPG key 
as follows:

(i) CentOS/RHEL/Scientific Linux/Fedora/SLES
rpm -q gpg-pubkey --qf '%{VERSION}\t%{SUMMARY}\n' |grep LON

For CentOS/RHEL/Scientific Linux/Fedora/SLES the GPG key used in 2020 and earlier is:
155cf773    MSU LON-CAPA group (LON-CAPA installer) <lon-capa at lon-capa.org>

For CentOS/RHEL/Scientific Linux/Fedora/SLES the GPG key used in 2021 and beyond is:
c11f2266    LONCAPA Academic Consortium (Package signing) <certificate at loncapa.org>

(ii) Ubuntu
sudo apt-key list

For Ubuntu the GPG key used in 2020 and earlier is:
155CF773    MSU LON-CAPA group (LON-CAPA installer) <lon-capa at lon-capa.org>

For Ubuntu the GPG key used in 2021 and beyond is:
BF2CDADF    MSU LON-CAPA group (LON-CAPA installer) <loncapa at loncapa.org>


(b) If you have a pre-2021 key clear the cache and import the new GPG key as follows:

(i) CentOS
yum clean all --disablerepo="*" --enablerepo=loncapa-updates-basearch --enablerepo=loncapa-updates-noarch
rpm -e gpg-pubkey-155cf773-431738a8
rpm --import 'http://install.loncapa.org/versions/centos/RPM-GPG-KEY-loncapa'

(ii) RHEL
yum clean all --disablerepo="*" --enablerepo=loncapa-updates-basearch --enablerepo=loncapa-updates-noarch
rpm -e gpg-pubkey-155cf773-431738a8
rpm --import 'http://install.loncapa.org/versions/redhat/RPM-GPG-KEY-loncapa'

(iii) SLES
zypper refresh 'LON-CAPA'

(iv) Ubuntu
sudo apt-key del 155CF773
sudo apt-get clean
wget -O ~/APT-GPG-KEY-loncapa.asc 'https://install.loncapa.org/versions/ubuntu/APT-GPG-KEY-loncapa.asc'
sudo apt-key add ~/APT-GPG-KEY-loncapa.asc

(v) Fedora
yum clean all --disablerepo="*" --enablerepo=loncapa-updates-basearch --enablerepo=loncapa-updates-noarch
rpm -e gpg-pubkey-155cf773-431738a8
rpm --import 'http://install.loncapa.org/versions/fedora/RPM-GPG-KEY-loncapa'


(c) After you have imported the new key for 2021 (and beyond)

(i) CentOS/RHEL/Fedora/SLES/
rpm -q gpg-pubkey --qf '%{VERSION}\t%{SUMMARY}\n' |grep LON

will now report:
c11f2266   LONCAPA Academic Consortium (Package signing) <certificate at loncapa.org>

(ii) Ubuntu 20 and older
sudo apt-key list

will now report:
BF2CDADF    MSU LON-CAPA group (LON-CAPA installer) <loncapa at loncapa.org>


(d) The EPEL repository is used by LON-CAPA for CentOS/RHEL/Oracle/Alma/Rocky Linux
and epel-release is a dependency in LONCAPA-prerequisites 1-35 for those distros. 

On CentOS/RHEL 7 to add the repo you can use:
wget 'https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm'
yum install epel-release-latest-7.noarch.rpm

Note: if you are still running CentOS 7 (EOL was June 30 2024),
you should change the baseurl in /etc/yum.repos.d/epel.repo to point at:

https://archives.fedoraproject.org/pub/archive/epel/7/$basearch

and change the baseurl for enabled entries in /etc/yum.repos.d/CentOS-Base.repo 
to point at: http://vault.centos.org/7.9.2009/os/$basearch/, 
http://vault.centos.org/7.9.2009/updates/$basearch/ etc.

That said, you should update to a newer version and/or distro as soon as you can.

If you are still running RHEL 7 (and have a subscription to the Extended Life Cycle Support
(ELS) Add-On, you should also change the baseurl in /etc/yum.repos.d/epel.repo, 
as described above.

If you previously used EPEL but disabled it, by setting enabled=0 for [epel] in
/etc/yum.repos.d/epel.repo, use a text editor to change that to enabled=1.


(e) For Debian 10 - 12 and Ubuntu 22 and 24 apt-key list is no longer in use.
Instead you will import the LON-CAPA repos key into /etc/apt/keyrings and
reference the key in the repo entry in /etc/apt/sources.list.d/loncapa.list
See the installation instructions on the install.loncapa.ogrg site for 
Debian and the latest Ubuntu versions.
 

2) Update LONCAPA-prerequisites to 1-35

(a) CentOS/RHEL/Oracle Linux/Rocky Linux/AlmaLinux 8 and 9

dnf update

(b) CentOS/RHEL/Scientific Linux/Oracle Linux 7 (or older)

yum update

Use:

yum repolist enabled 

to display currently enabled repos (which should include epel).

(c) SLES

To refresh the LON-CAPA repository use:  zypper refresh -fdb
To update LONCAPA-prerequisites use: 
zypper install LONCAPA-prerequisites

(d) Ubuntu 

sudo apt-get update
sudo apt-get upgrade
sudo apt-get install loncapa-prerequisites

(e) Debian

apt-get update
apt-get upgrade

(f) Fedora

dnf update

On all distributions, it is recommended that you check that you have
the correct version of LONCAPA-prerequisites installed before proceeding.

(i) CentOS/RHEL/Oracle Linux/Rocky Linux/AlmaLinux/Fedora/SLES
rpm -q LONCAPA-prerequisites

should report:
LONCAPA-prerequisites-1-35.X
(where X is a distro identifier e.g., rhel9.noarch)

(ii) Ubuntu
sudo dpkg -l loncapa-prerequisites

should report
ii loncapa-prerequisites 1.35-X
(where X is a version number which depends on Ubuntu distro)

Note: LONCAPA-prerequisites 1-26 for RHEL/CentOS 7 replaced the
dependency on R with a dependency on R-core.  Accordingly, for
those distros, after updating to 1-35, from 1-25
or earlier you can use:

yum remove R R-core-devel R-devel R-java R-java-devel libMath-devel

and you can also use yum to remove java-1.8.0-openjdk and/or 
java-1.7.0-openjdk (which are R-java dependencies), unless you have
modified a standard LON-CAPA installation with packages which
themselves require java.


3) Download the new LON-CAPA tarball:
wget 'http://install.lon-capa.org/versions/loncapa-2.11.5.tar.gz'

and confirm its integrity by comparison with the checksum available
at http://install.lon-capa.org/checksums/2.11.5.txt, by running

sha256sum loncapa-2.11.5.tar.gz

against the downloaded tarball.

Note: the 2.11.5.txt file has been signed, and to verify the integrity
of the two checksums included in that file (one for loncapa-2.11.5.tar.gz
and one for install.tar, used to prepare a new server/VM for LON-CAPA 
installation, then you can use: gpg --verify 2.11.5.txt to check the
file after you have imported the LON-CAPA Release Manager public key 
(available on request) into your keyring).


4) untar the tarball:
tar xzvf loncapa-2.11.5.tar.gz


5) stop the LON-CAPA system services

RHEL/CentOS/Rocky Linux/AlmaLinux 8 & 9, Oracle Linux 7 - 9,
Ubuntu 18 - 24, SLES15, Debian 10 - 12, Fedora

/home/httpd/perl/loncontrol stop

Other distros/versions:
/etc/init.d/loncontrol stop


6) stop the web server:

RHEL/Oracle Linux/Rocky Linux/AlmaLinux/CentOS 7 (and newer)
systemctl stop httpd

Fedora
service httpd stop

SLES15/Debian, Ubuntu 18 and newer
systemctl stop apache2

SLES12
service apache2 stop

Ubuntu 16 and older
/etc/init.d/apache2 stop


7) Run the UPDATE script as root
(Note: you will be asked to confirm that you wish to remove files
installed by older versions of LON-CAPA which are no longer used by 2.11.5).

cd loncapa-2.11.5
./UPDATE


8) If you are updating a LON-CAPA library server from LON-CAPA version
2.10.1 or earlier, you will need to run a script to migrate Authoring 
Spaces in domain(s) hosted on the server from their old locations in:
/home/ to their new locations in /home/httpd/html/priv

To do this use the command:
perl /home/httpd/perl/debug/move_construction_spaces.pl move

Note: You can perform a dry-run, which will show what would happen, but will
not actually move anything, by omitting the "move" argument.


9) If your Apache web server has been configured to use SSL, and you have
included rewrite rules to rewrite all requests to http://<yourserver>/
to https://<yourserver>/ it is recommended you modify your rewrite rule to
(a) allow internal HEAD requests to /cgi-bin/mimetex.cgi to be served
http://, in order to support vertical alignment of mimetex images
(one of the options for rendering Math content); (b) allow requests
for certain URLs (external resource, annotations, and syllabus)
to be served http:// under certain conditions.

Starting with LON-CAPA 2.10, a config file containing rewrite
rules -- loncapa_rewrite.conf -- is added to /etc/httpd/conf
(CentOS, Red Hat, Scientific Linux, Oracle Linux, Rocky Linux,
AlmaLinux, Fedora) or /etc/apache2 (SLES, Ubuntu, Debian).
By default, rewrites are set to off (using RewriteEngine off).

If you already have you own rewrite rules in place for http -> https
you should either transfer them to loncapa_rewrite.conf, after
completing the LON-CAPA update, or leave your existing file in place 
and comment out the entries in loncapa_rewrite.conf. Otherwise, if you are 
using SSL with Apache, and would like requests to http://<yourserver>/
to be rewritten to https://<yourserver>/, you should copy
rewrites/loncapa_rewrite_on.conf to loncapa_rewrite.conf to enable this.
The rules included in that config file do not rewrite internal
requests (i.e., from 127.0.0.1) to https://, so vertical alignment
of mimetex images is supported. In 2.11 there are also rules to exclude
certain URLs from rewrites to https:// to avoid issues with 
mixed active content.

The 2.11.3 release included updates to rewrites/loncapa_rewrite_on.conf 
and rewrites/loncapa_rewrite_off.conf.  If you are updating from 2.11.2
or earlier and have customized loncapa_rewrite.conf then you should 
edit that file to incorporate the changes, which include addition of
this condition in a couple of places:

RewriteCond %{QUERY_STRING} (^|&(amp;|))usehttp=1($|&)

If you have not customized the file, then to enable rewrites, copy 
rewrites/loncapa_rewrite_on.conf to loncapa_rewrite.conf 
or copy rewrites/loncapa_rewrite_off.conf to loncapa_rewrite.conf 
to disable rewrites.

If your Apache configuration includes Strict-Transport-Security 
with max-age > 0, then http to https rewrites will apply for all URLs, 
so vertical alignment of mimetex images will not be supported, and 
browsers will block mixed active content for external resources and/or 
an external syllabus that uses http within an iframe on an https page.

Once you have the rules for ^/adm/wrapper/ext/(?!https:) and
^/public/.*/syllabus$ in place in loncapa_rewrite.conf, unless you use
Strict-Transport-Security you should also add the following to your 
<VirtualHost *:443> </VirtualHost> block, (the "*" might be:
 _default_ or an IP address or *):

<IfModule mod_rewrite.c>
  RewriteEngine on
  RewriteCond %{HTTPS} =on
  RewriteCond %{REQUEST_URI} ^/adm/wrapper/ext/(?!https:\/\/)
  RewriteCond %{QUERY_STRING} (^|&(|amp;))usehttp=1($|&)
  RewriteRule ^/adm/wrapper/ext/(?!https:\/\/) http://%{HTTP_HOST}%{REQUEST_URI} [R,L,NE]
  RewriteCond %{REMOTE_ADDR} 127.0.0.1
  RewriteRule (.*) - [L]
  RewriteCond %{REMOTE_ADDR} <Server IP>
  RewriteRule (.*) - [L]
  RewriteCond %{REQUEST_URI} ^/public/.*/syllabus$
  RewriteCond %{QUERY_STRING} (^|&(|amp;))usehttp=1($|&)
  RewriteRule ^/public/.*/syllabus$ http://%{HTTP_HOST}%{REQUEST_URI} [R,L,NE]
</IfModule>

replacing <Server IP> with the IP address of the server itself.

Note: this is only needed if you are using SSL (i.e., requests to
https://<yourserver>/ are supported) and you want to rewrite external
requests to http://<yourserver>/ to always use https://<yourserver>/
(with the exceptions noted above).


10) Note about /home/httpd/lib/perl/localenroll.pm
When you use UPDATE to update an existing LON-CAPA installation to a newer
version, the customizable localenroll.pm file is not overwritten.  This
is the file which must be customized to support integration of LON-CAPA
with institutional data sources (e.g., for automated update of course
rosters or user information). Whenever new routines are included in
localenroll.pm these will appear in localenroll-std.pm, which is updated
when a new LON-CAPA version is installed.

If you have previously customized localenroll.pm it is recommended that
you compare the contents of localenroll.pm and localenroll-std.pm after
an update to see if there are new subroutines (which exist as stubs in
localenroll-std.pm) which can be copied to your custom localenroll.pm,
and later customized, should you wish to use that functionality.

Recent additions to localenroll.pm included: (a) instsec_reformat(), used
to eliminate ambiguity in extraction of institutional section from
institutional course section, as used for automated enrollment, and when
compiling information shown for official courses in the course catalog,
(b) validate_crosslist_access(), used to check whether an official
course with the institutional code can have access to enrollment data
from a cross-listed institutional section code, given a co-owner, (c)
unamemap_rules() and unamemap_check() used to support authentication of
an alternate username, e.g., username entered in log-in page was email
address (userid at example.tld) instead of just userid, (d) export_grades(),
which can be customized to push grade information for placement tests to 
some other gradebook, LCMS, or administrative system external to LON-CAPA.


11) restart the LON-CAPA system services:

RHEL/CentOS/Rocky/AlmaLinux 8 & 9, Oracle Linux 7 - 9, SLES 15,
Debian 10 - 12, Fedora (and newer)
/home/httpd/perl/loncontrol start

Ubuntu 18 - 24
sudo /home/httpd/perl/loncontrol start  

Other distros/versions
/etc/init.d/loncontrol start


12) restart the webserver:

RHEL/Oracle/Rocky/AlmaLinux/CentOS 7 (and newer)
systemctl start httpd

Fedora 17 (and newer)
service httpd start

SLES15/Debian
systemctl start apache2

Ubuntu 18 (and newer)
sudo systemctl start apache2

Ubuntu 16 (and older)
sudo /etc/init.d/apache2 start

SLES12
service apache2 start


13) It is recommended that loncron is run
(as the www user) after installation/update is complete.
(On Ubuntu LTS servers, first do: sudo -i )

su www
/home/httpd/perl/loncron

This will write to files in /home/httpd/lonTabs used to
store information about LON-CAPA versions on other servers in
the cluster to which the server belongs.  It may take some
minutes to complete as the script will contact other servers
in the LON-CAPA network sequentially.


14) It is also recommended that you check disk usage for courses
and Authoring Spaces, as 2.11 introduced default quotas of 0.5 GB
for each course (content uploaded directly via Course Editor) and
the same for each author.

For courses, log-in as Domain Coordinator and use:
Main Menu -> Status of domain servers -> Display quotas and usage for
Course/Community Content.

For Authoring Spaces, log-in as Domain Coordinator and use:
Main Menu -> Create users or modify the roles and privileges of users
->  Manage Users, and select Author in the "Role" dropdown, then
press the "Display List of Users" button.

The 0.5 GB default quota for Authoring Spaces in domain can be replaced via:
Main Menu -> Set domain configuration -> Blogs, personal web pages,
webDAV/quotas, portfolios

The 0.5 GB default quota for Courses can be replaced via:
Main Menu -> Set domain configuration -> Course/Community defaults

Quotas for individual authors can be set via:
Main Menu -> Create users or modify the roles and privileges of users
-> Add/Modify a User

Quotas for individual courses can be set via:
Main Menu -> View or modify a course or community
then search/select the course and use:
"View/Modify quotas for group portfolio files, and for uploaded content".


----NOTES
1) Defects reports, and enhancements requests can be entered at
         http://bugs.lon-capa.org
2) Mailing lists can be joined and left at http://mail.lon-capa.org
3) Installation/update support is available from helpdesk at loncapa.org

Stuart Raeburn
LON-CAPA Academic Consortium