meta-ticket: tracking progress/strategy for running Martus in Qubes

[mfc]

The secure human rights information collection tool Martus requires openjdk 1.8 and the javafx package (packaged for Debian as openjfx).

Currently Fedora 23 comes with openjdk version 1.8.0_72 but running Martus java -jar martus.jar fails because it doesn't have the javafx, which is unclear to me how to install.

Currently Debian 8 comes with openjdk version 1.7.0_95 which is insufficient to run Martus.

Current potential solutions I see are:

• change Debian 8 template to unstable or testing and install newer version of openjdk
• figure out where javafx lives in dnf / rpm land and install it in a Fedora 23 template
• install openjfx and openjdk-8-jre via Debian backports -- SUCCESS
• install Oracle's proprietary java implementation in a new Debian template -- would like to avoid
• run Martus' Windows version within a Windows 7 qube (requires a Windows 7 license and installing W7 within Qubes) -- would like to avoid

These issues were first reported and discussed with Martus developers at the Internet Freedom Festival.

[adrelanos]

Can you ask the Martus developers please to get their application into the official Debian repositories? That would make integration so much easier!

There is also Debian Anonymity Tools Team (and perhaps other Debian Developers) that might be interested and willing to help. They could try to get in touch with them.

[adrelanos]

Can you ask the Martus developers please to get their application into the official Debian repositories? That would make integration so much easier!

There is also Debian Anonymity Tools Team (and perhaps other Debian Developers) that might be interested and willing to help. They could try to get in touch with them.

[mfc]

Yes, this has been highlighted to them. Also them packaging it and serving it from their own repo as an intermediary step. They may need help with that process so that's useful link for them.

[mfc]

Yes, this has been highlighted to them. Also them packaging it and serving it from their own repo as an intermediary step. They may need help with that process so that's useful link for them.

[mfc]

successfully change Debian 8 template to unstable and install newer version of openjdk

this fails because Debian 8 testing version of openjdk-8-jre also does not come with javafx: Caused by: java.lang.ClassNotFoundException: javafx.fxml.Initializable

installing openjfx for javafx functionality brings in a bunch of competing dependencies that takes down the template making it unusable.

[mfc]

successfully change Debian 8 template to unstable and install newer version of openjdk

this fails because Debian 8 testing version of openjdk-8-jre also does not come with javafx: Caused by: java.lang.ClassNotFoundException: javafx.fxml.Initializable

installing openjfx for javafx functionality brings in a bunch of competing dependencies that takes down the template making it unusable.

[mfc]

figure out where javafx lives in dnf / rpm land and install it in a Fedora 23 template

javafx is not build for Fedora yet: https://bugzilla.redhat.com/show_bug.cgi?id=1145303

[mfc]

figure out where javafx lives in dnf / rpm land and install it in a Fedora 23 template

javafx is not build for Fedora yet: https://bugzilla.redhat.com/show_bug.cgi?id=1145303

[mfc]

install openjfx and openjdk-8-jre via Debian backports

!! Works !!

1. create a Debian 8 martus template using the Qubes VM Manager or running qvm-clone debian-8 debian-8-martus in dom0
2. add backports to the sources for the new template by opening a terminal in the new template, run sudo vi /etc/apt/sources.list and add: deb http://http.debian.net/debian jessie-backports main (if you are new to vi text editing, type i to be able to edit, and when done editing press ESC then type :x and press ENTER)
3. update source list: sudo apt-get update
4. install openjdk and openjfx from backports: sudo apt-get -t jessie-backports install openjdk-8-jre openjfx
5. You may need to install unzip to be able to unzip Martus after you download it: sudo apt-get install unzip
6. create new qube/appvm based on your debian-8-martus template with whatever color and networking you want (sys-whonix probably preferred) using the Qubes VM Manager or running qvm-create -t debian-8-martus -l blue martus and qvm-prefs -s martus netvm sys-whonix in dom0
7. download the latest Martus version from https://martus.org
8. unzip the Martus package unzip Martus-5.1.1.zip
9. cd into new folder cd Martus-5.1.1
10. run Martus: java -jar martus.jar

[mfc]

install openjfx and openjdk-8-jre via Debian backports

!! Works !!

1. create a Debian 8 martus template using the Qubes VM Manager or running qvm-clone debian-8 debian-8-martus in dom0
2. add backports to the sources for the new template by opening a terminal in the new template, run sudo vi /etc/apt/sources.list and add: deb http://http.debian.net/debian jessie-backports main (if you are new to vi text editing, type i to be able to edit, and when done editing press ESC then type :x and press ENTER)
3. update source list: sudo apt-get update
4. install openjdk and openjfx from backports: sudo apt-get -t jessie-backports install openjdk-8-jre openjfx
5. You may need to install unzip to be able to unzip Martus after you download it: sudo apt-get install unzip
6. create new qube/appvm based on your debian-8-martus template with whatever color and networking you want (sys-whonix probably preferred) using the Qubes VM Manager or running qvm-create -t debian-8-martus -l blue martus and qvm-prefs -s martus netvm sys-whonix in dom0
7. download the latest Martus version from https://martus.org
8. unzip the Martus package unzip Martus-5.1.1.zip
9. cd into new folder cd Martus-5.1.1
10. run Martus: java -jar martus.jar

[mfc]

let's get the instructions into a doc

[mfc]

let's get the instructions into a doc

[marmarek]

Looks like a perfect case for VM managing using Salt: #1541
Lets not get better be an enemy of good and still include above steps in documentation. But I'll use this as an example configuration and will report back when finished.

[marmarek]

Looks like a perfect case for VM managing using Salt: #1541
Lets not get better be an enemy of good and still include above steps in documentation. But I'll use this as an example configuration and will report back when finished.

[andrewdavidwong]

Doc page created. Please edit as appropriate.

[andrewdavidwong]

Doc page created. Please edit as appropriate.

[mfc]

Looks perfect, thanks axon. you can add it to the website docs.

@marmarek sounds good! maybe we can close this ticket and when you are creating examples for salt configuration we can put it there?

[mfc]

Looks perfect, thanks axon. you can add it to the website docs.

@marmarek sounds good! maybe we can close this ticket and when you are creating examples for salt configuration we can put it there?

[marmarek]

Yes, that's ok.

[marmarek]

Yes, that's ok.