{"id":1724,"date":"2014-08-13T06:08:09","date_gmt":"2014-08-13T11:08:09","guid":{"rendered":"http:\/\/www.migrate2cloud.com\/blog\/?p=1724"},"modified":"2016-03-21T02:41:53","modified_gmt":"2016-03-21T07:41:53","slug":"its-phab-that-makes-your-life-easier","status":"publish","type":"post","link":"https:\/\/www.migrate2cloud.com\/blog\/its-phab-that-makes-your-life-easier\/","title":{"rendered":"It\u2019s Phab! That makes your life easier"},"content":{"rendered":"

We have been using plenty of different tools for tracking bugs\/product management\/project management\/to do lists\/code review; such as ClearCase, ClearQuest, Bugzilla, Github, Asana, Pivotal Tracker, Google Drive etc. We found Phabricator as a \u201cToo Good To Be True\u201d software engineering web application platform originally developed at Facebook. It has code review, wiki, repository browsing,tickets and a lot more to make Phab more fabulous.<\/p>\n

Phabricator is an open source collaboration of web applications which help software companies to build better software. It is a suite of applications. Following are the most important tools in phabricator :
\nManiphest – Bug tracker\/task management tracker
\nDiffusion- source code browser
\nDifferential – code review tool that allows developers to easily submit reviews to one another via command line tool when they check in code using Git or Subversion
\nPhriction – wiki tool<\/p>\n

How to setup and configure the code review and project management tool – Phabricator<\/h2>\n

Installation<\/strong><\/p>\n

Server – 4GB Digital ocean droplet
\nOS – Ubuntu 14.04<\/p>\n

1. Install dependencies <\/strong><\/p>\n

apt-get install mysql-server apache2 dpkg-dev php5 php5-mysql php5-gd php5-dev php5-curl php-apc php5-cli php5-json<\/p>\n

2. Get code<\/strong><\/p>\n

#cd \/var\/www\/codereview<\/p>\n

git clone https:\/\/github.com\/phacility\/libphutil.git<\/p>\n

git clone https:\/\/github.com\/phacility\/arcanist.git<\/p>\n

git clone https:\/\/github.com\/phacility\/arcanist.git<\/p>\n

3. Configure virtual host entry<\/strong><\/p>\n

#add below lines<\/p>\n

#######################################################################<\/p>\n

DocumentRoot \/var\/www\/codereview\/webroot
\nRewriteEngine on
\nRewriteRule ^\/rsrc\/(.*) – [L,QSA]
\nRewriteRule ^\/favicon.ico – [L,QSA]
\nRewriteRule ^(.*)$ \/index.php?__path__=$1 [B,L,QSA]
\nOrder allow,deny
\nallow from all
\n#######################################################################
\n4. Enable the virtual host entry for phabricator.<\/p>\n

# a2ensite phabricator.conf
\n# service apache2 reload<\/p>\n

5. Configure the MySQL database configuration for phabricator<\/p>\n

– create database
\n# \/var\/www\/codereview\/phabricator\/bin\/config set mysql.user mysql_username
\n# \/var\/www\/codereview\/phabricator\/bin\/config get mysql.pass mysql_password
\n# \/var\/www\/codereview\/phabricator\/bin\/config get mysql.host mysql_host
\n# \/var\/www\/codereview\/phabricator\/bin\/config storage upgrade
\n-tweak mysql<\/p>\n

Open \/etc\/mysql\/my.cnf and add the following line under [mysqld] section:<\/p>\n

sql-mode = STRICT_ALL_TABLES<\/p>\n

#service mysql restart<\/p>\n

Set the Base URI of Phabricator install<\/strong><\/p>\n

# \/var\/www\/codereview\/phabricator\/bin\/config set phabricator.base-uri<\/p>\n

(eg: phabricator.your-domain.com)<\/p>\n

Configure Outbound Email – External SMTP (Google Apps)<\/strong><\/p>\n

Set the following configuration keys using \/var\/www\/codereview\/phabricator\/bin\/config set value<\/p>\n

– metamta.mail-adapter -> PhabricatorMailImplementationPHPMailerAdapter
\n– phpmailer.mailer -> smtp
\n– phpmailer.smtp-host -> smtp.gmail.com
\n– phpmailer.smtp-port -> 465
\n– phpmailer.smtp-user -> Your Google apps mail id
\n– phpmailer.smtp-password -> set to your password used for authentication
\n– phpmailer.smtp-protocol -> ssl<\/p>\n

Start the phabricator daemons<\/strong><\/p>\n

You can start all the phabricator deamons using the script
\n# \/var\/www\/codereview\/phabricator\/bin\/phd start
\nTo start daemons at the boot time, add this entry to the file \/etc\/rc.local<\/p>\n

\/var\/www\/codereview\/phabricator\/bin\/phd start<\/p>\n

Diffusion repository hosting with git<\/h2>\n

1. Install git <\/strong><\/p>\n

#apt-get install git<\/p>\n

2. Create a local repository directory:<\/strong><\/p>\n

#mkdir -p \/data\/repo<\/p>\n

3. Edit the repository.default-local-path key to the new local repository directory.<\/strong><\/p>\n

Go to the Config -> Repositories -> repository.default-local-path<\/p>\n

4. Configure System user accounts<\/strong><\/p>\n

Phabricator uses as many as three user accounts. These are system user accounts on the machine Phabricator runs on, not Phabricator user accounts.<\/p>\n

* daemon-user – The user the daemons run as<\/p>\n

We will configure the root user to run the daemons<\/p>\n

* www-user – The user the web server run as<\/p>\n

We will use www-data to be the web user<\/p>\n

* vcs-user – The user that users will connect over SSH as<\/p>\n

We will configure git user to the vcs-user<\/p>\n

To enable SSH access to repositories, edit \/etc\/sudoers file using visudo to contain:<\/p>\n

#includedir \/etc\/sudoers.d
\ngit ALL=(root) SETENV: NOPASSWD: \/usr\/bin\/git-upload-pack, \/usr\/bin\/git-receive-pack, \/usr\/bin\/git<\/p>\n

Since we are going to enable SSH access to the repository, ensure the following holds good.<\/p>\n

– Open \/etc\/shadow and find the line for vcs-user, git.<\/p>\n

The second field (which is the password field) must not be set to !!. This value will prevent login. If it is set to !!, edit it and set it to NP (“no password”) instead.<\/p>\n

– Open \/etc\/passwd and find the line for the vcs-user, git.
\nThe last field (which is the login shell) must be set to a real shell. If it is set to something like \/bin\/false, then sshd will not be able to execute commands. Instead, you should set it to a real shell, like \/bin\/sh.<\/p>\n

– Use phd.user as our daemon user;
\n# \/var\/www\/phab\/phabricator\/bin\/config phd.user root
\n# \/var\/www\/phab\/phabricator\/bin\/config set diffusion.ssh-user git<\/p>\n

5. Configuring SSH<\/strong><\/p>\n

We will move the normal sshd daemon to another port, say 222. We will use this port to get a normal login shell. We will run highly restrictive sshd on port 22 managed by Phabricator.<\/p>\n

Move Normal SSHD<\/p>\n

– make a backup of sshd_config before making any changes.<\/p>\n

#cp \/etc\/ssh\/sshd_config \/etc\/ssh\/sshd_config.backup<\/p>\n

– Update \/etc\/ssh\/sshd_config, change the port to some othert port like 222.<\/p>\n

Port 222<\/p>\n

– Restart sshd and verify that you are able to connect to the new port<\/p>\n

ssh -p 222 user@host<\/p>\n

Configure and start Phabricator SSHD<\/p>\n

We now configure and start a second SSHD instance which will run on port 22. This instance will use special locked down configuration that uses Phabricator to handle the authentication and command execution.<\/p>\n

– Create a phabricator-ssh-hook.sh file<\/p>\n

– Create a sshd_phabricator config file<\/p>\n

– Start a copy of sshd using the new configuration<\/p>\n

Create phabricator-ssh-hook.sh: Copy the template in phabricator\/resources\/sshd\/ phabricator-ssh-hook.sh to somewhere like \/usr\/lib\/phabricator-ssh-hook.sh and edit it to have the correct settings<\/p>\n

##############################################################<\/p>\n

#!\/bin\/sh<\/p>\n

# NOTE: Replace this with the username that you expect users to connect with.
\nVCSUSER=”git”<\/p>\n

# NOTE: Replace this with the path to your Phabricator directory.
\nROOT=”\/var\/www\/codereview\/phabricator”<\/p>\n

if [ “$1” != “$VCSUSER” ];
\nthen
\nexit 1
\nfi<\/p>\n

exec “$ROOT\/bin\/ssh-auth” $@
\n##############################################################<\/p>\n

Make it owned by root and restrict editing;<\/p>\n

#sudo chown root \/usr\/lib\/phabricator-ssh-hook.sh
\n#chmod 755 \/usr\/lib\/phabricator-ssh-hook.sh<\/p>\n

Create sshd_config for Phabricator: Copy the template in \/phabricator\/sshd\/sshd_config.phabricator.example to somewhere like \/etc\/ssh\/sshd_config.phabricator<\/p>\n

Start Phabricator SSHD<\/strong><\/p>\n

#sudo \/usr\/sbin\/sshd -f \/etc\/ssh\/sshd_config.phabricator<\/p>\n

Note:-
\nAdd this entry to the \/etc\/rc.local to start the daemon on startup.<\/p>\n

If you did everything correctly, you should be able to run this;<\/p>\n

#echo {} | ssh git@phabricator.your-company.com conduit conduit.ping<\/p>\n

and get a response like this;<\/p>\n

{“result”:”phab-server”,”error_code”:null,”error_info”:null}<\/p>\n

You should now be able to access your instance over ssh on port 222 for normal login and administrative purposes. Phabricator SSHD runs on port 22 to handle authentication and command execution.<\/p>\n

6. To create a git repository<\/strong><\/p>\n

Go to Diffusion -> New Repository -> Create a New Hosted Repository<\/p>\n

Upgrade Phabricator<\/h2>\n

Since phabricator is under development, you should update frequently. To update phabricator:<\/p>\n

– Stop the web server
\n– Run git pull in libphutil\/, arcanist\/, and phabricator.
\n– Run phabricator\/bin\/storage upgrade.
\n– Restart the web server.
\nAlso you can use a script similar to this one to automate the process:
\nhttp:\/\/www.phabricator.com\/rsrc\/install\/update_phabricator.sh<\/p>\n","protected":false},"excerpt":{"rendered":"

We have been using plenty of different tools for tracking bugs\/product management\/project management\/to do lists\/code review; such as ClearCase, ClearQuest, Bugzilla, Github, Asana, Pivotal Tracker, Google Drive etc. We found Phabricator as a \u201cToo Good To Be True\u201d software engineering web application platform originally developed at Facebook. It has code review, wiki, repository browsing,tickets and […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[3],"tags":[203,202,212,210,211,143,205,108,206,201,120,195,134,209,200,196,198,199,197,207,208,194,77,136,213,151,204,214],"class_list":["post-1724","post","type-post","status-publish","format-standard","hentry","category-cloud-computing","tag-code-review-tool","tag-command-line-tool","tag-company-facebook","tag-company-github","tag-company-google","tag-company-mysql-ab","tag-digital-ocean","tag-git","tag-gitphabricator-your-company-com","tag-important-tools","tag-mysql-2","tag-phabricator","tag-php","tag-port","tag-project-management-tool","tag-rational-clearquest","tag-search-engines","tag-server-database-software","tag-social-media-networking","tag-software","tag-software-engineering-web-application-platform","tag-software-review","tag-ssl","tag-technologyinternet","tag-ubuntu","tag-web-applications","tag-web-server","tag-web-user"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t