Add Powerbox proxy

Author: ocdtrekkie

.gitignore

@@ -1,3 +1,5 @@
 
 *.spk
 
+# Copied during build
+includes/powerbox-http-proxy.js

.sandstorm/go-version

@@ -0,0 +1 @@
+go1.25.4

.sandstorm/launcher.sh

@@ -57,6 +57,17 @@ if [ ! -e /var/.db-created ]; then
     touch /var/.db-created
 fi
 
+# Start our powerbox proxy server, and wait for it to write the cert:
+export DB_TYPE=mysql
+export DB_URI="root@unix(/var/run/mysqld/mysqld.sock)/app"
+export CA_CERT_PATH=/var/ca-spoof-cert.pem
+rm -f $CA_CERT_PATH
+/opt/powerbox-http-proxy/powerbox-http-proxy &
+wait_for "root cert" "$CA_CERT_PATH"
+
+export http_proxy=http://127.0.0.1:$POWERBOX_PROXY_PORT
+export https_proxy=http://127.0.0.1:$POWERBOX_PROXY_PORT
+
 wait_for php-fpm8.2 /var/run/php/php8.2-fpm.sock
 
 # Start nginx.

.sandstorm/sandstorm-files.list

@@ -79,6 +79,8 @@ etc/php/8.2/mods-available/xmlreader.ini
 etc/php/8.2/mods-available/xmlwriter.ini
 etc/php/8.2/mods-available/xsl.ini
 etc/services
+etc/ssl/certs
+etc/ssl/certs/ca-certificates.crt
 etc/ssl/openssl.cnf
 lib
 lib64
@@ -107,6 +109,8 @@ opt/app/includes/global.php
 opt/app/includes/global_req_login.php
 opt/app/includes/header.php
 opt/app/includes/include_lconfig.php
+opt/app/includes/include_proxycontext.php
+opt/app/includes/powerbox-http-proxy.js
 opt/app/includes/variables.php
 opt/app/index.php
 opt/app/install_into_db.sql
@@ -138,6 +142,7 @@ opt/app/styles/xrflight/images/footer.png
 opt/app/styles/xrflight/style.css
 opt/app/viewrecord.php
 opt/app/xrfinfo.php
+opt/powerbox-http-proxy/powerbox-http-proxy
 proc/cpuinfo
 sandstorm-http-bridge
 sandstorm-http-bridge-config
@@ -155,7 +160,7 @@ usr/bin/touch
 usr/lib/locale/C.utf8/LC_CTYPE
 usr/lib/mysql/plugin/authentication_oci_client.so
 usr/lib/mysql/plugin/component_reference_cache.so
-usr/lib/mysql/private/libprotobuf-lite.so.3.19.4
+usr/lib/mysql/private/libprotobuf-lite.so.24.4.0
 usr/lib/php/20220829/calendar.so
 usr/lib/php/20220829/ctype.so
 usr/lib/php/20220829/curl.so
@@ -185,6 +190,8 @@ usr/lib/php/20220829/xml.so
 usr/lib/php/20220829/xmlreader.so
 usr/lib/php/20220829/xmlwriter.so
 usr/lib/php/20220829/xsl.so
+usr/lib/ssl/cert.pem
+usr/lib/ssl/certs
 usr/lib/ssl/openssl.cnf
 usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache
 usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2
@@ -350,6 +357,7 @@ usr/share/zoneinfo/Arctic/Longyearbyen
 usr/share/zoneinfo/Asia
 usr/share/zoneinfo/Asia/Ashkhabad
 usr/share/zoneinfo/Asia/Calcutta
+usr/share/zoneinfo/Asia/Choibalsan
 usr/share/zoneinfo/Asia/Chongqing
 usr/share/zoneinfo/Asia/Chungking
 usr/share/zoneinfo/Asia/Dacca

.sandstorm/sandstorm-pkgdef.capnp

@@ -226,6 +226,8 @@ const myCommand :Spk.Manifest.Command = (
     # Note that this defines the *entire* environment seen by your app.
     (key = "PATH", value = "/usr/local/bin:/usr/bin:/bin"),
     (key = "SANDSTORM", value = "1"),
+    (key = "POWERBOX_WEBSOCKET_PORT", value = "3000"),
+    (key = "POWERBOX_PROXY_PORT", value = "4000"),
     # Export SANDSTORM=1 into the environment, so that apps running within Sandstorm
     # can detect if $SANDSTORM="1" at runtime, switching UI and/or backend to use
     # the app's Sandstorm-specific integration code.

.sandstorm/service-config/nginx.conf

@@ -81,5 +81,12 @@ http {
 			# PHP only, required if PHP was built with --enable-force-cgi-redirect
 			fastcgi_param  REDIRECT_STATUS    200;
 		}
+                location /_sandstorm/websocket {
+                        proxy_pass http://127.0.0.1:3000;
+                        proxy_http_version 1.1;
+                        proxy_set_header Upgrade $http_upgrade;
+                        proxy_set_header Connection "Upgrade";
+                        proxy_set_header Host $host;
+                }
 	}
 }

.sandstorm/setup.sh

@@ -8,8 +8,7 @@ set -euo pipefail
 export DEBIAN_FRONTEND=noninteractive
 
 echo -e "deb http://repo.mysql.com/apt/debian/ bookworm mysql-8.0\ndeb-src http://repo.mysql.com/apt/debian/ bookworm mysql-8.0" > /etc/apt/sources.list.d/mysql.list
-wget -O /tmp/RPM-GPG-KEY-mysql https://repo.mysql.com/RPM-GPG-KEY-mysql-2023
-apt-key add /tmp/RPM-GPG-KEY-mysql
+apt-key adv --keyserver hkps://keyserver.ubuntu.com --recv-keys B7B3B788A8D3785C
 
 apt-get update
 apt-get install -y nginx php-fpm php-mysql php-cli php-curl git php-dev mysql-server
@@ -55,4 +54,24 @@ innodb_log_file_size = 1048576
 tmpdir = /var/tmp
 # Set the main data file to grow by 1MB at a time, rather than 8MB at a time.
 innodb_autoextend_increment = 1
-EOF
+EOF
+
+# The version of golang in the debian repositories tends to be incredibly
+# out of date; let's get ourselves a newer version from upstream:
+if [ -e /opt/app/.sandstorm/go-version ]; then
+    # Get the same version we've used before
+    curl -L "https://go.dev/dl/$(cat '/opt/app/.sandstorm/go-version').linux-amd64.tar.gz" -o go.tar.gz
+else
+    # Get the newest version for a new project
+    curl -L "https://go.dev/dl/$(curl 'https://go.dev/VERSION?m=text' | head -n 1).linux-amd64.tar.gz" -o go.tar.gz
+fi
+tar -C /usr/local -xzf go.tar.gz
+rm go.tar.gz
+echo 'export PATH=/usr/local/go/bin:$PATH' > /etc/profile.d/go.sh
+
+# Get the same version next time
+/usr/local/go/bin/go version | cut -d ' ' -f 3 > /opt/app/.sandstorm/go-version
+
+cd /opt && git clone https://github.com/sandstorm-org/powerbox-http-proxy
+cd /opt/powerbox-http-proxy && /usr/local/go/bin/go build
+cp /opt/powerbox-http-proxy/powerbox-http-proxy.js /opt/app/includes/powerbox-http-proxy.js

includes/header.php

@@ -4,6 +4,7 @@
 else {$xrf_style = $xrf_mystylepref;}
 if (isset($xrf_page_subtitle)) { $xrf_title_nugget = " - "; } else { $xrf_page_subtitle = ""; $xrf_title_nugget = ""; }
 echo "<html><head><title>$xrf_site_name Library$xrf_title_nugget$xrf_page_subtitle</title>
+<script src=\"includes\powerbox-http-proxy.js\"></script>
 <link rel=\"stylesheet\" type=\"text/css\" href=\"styles/$xrf_style/style.css\" />
 <link rel=\"stylesheet\" type=\"text/css\" href=\"styles/print/style.css\" media=\"print\" />
 </head><body>";

includes/include_proxycontext.php

@@ -0,0 +1,13 @@
+<?php
+
+$xrf_proxyopts = array(
+    'http' => array(
+        'proxy'  => 'tcp://127.0.0.1:4000',
+        'ignore_errors' => true,
+    ),
+);
+$xrf_proxycontext  = stream_context_create($xrf_proxyopts);
+
+// $proxyrequest = file_get_contents("https://sandstorm.io", false, $xrf_proxycontext);
+
+?>

modules/library/acpm_addbook.php

@@ -2,6 +2,7 @@
 require("ismodule.php");
 require("modules/$modfolder/functions_lib.php");
 require("modules/$modfolder/include_lconfig.php");
+require("includes/include_proxycontext.php");
 $do = $_GET['do'] ?? '';
 if ($do == "add")
 {
@@ -105,7 +106,7 @@
 		$sourcetags = xrf_mysql_result($sourcedataresult,0,"tags");
 	} elseif ($copyfrom != "" && $xrfl_locgov_enable == 1) {
 		// import from library of congress
-		$marcxml = simplexml_load_file("https://lccn.loc.gov/$copyfrom/marcxml");
+		$marcxml = simplexml_load_file(file_get_contents("https://lccn.loc.gov/$copyfrom/marcxml",false,$xrf_proxycontext));
 		foreach($marcxml as $datafield) {
 			if ($datafield['tag'] == "245") {
 				// title