Difference between revisions of "Educaship Jitsi"

From CNM Wiki
Jump to: navigation, search
(→‎Software instances)
(→‎See also)
 
(69 intermediate revisions by 2 users not shown)
Line 1: Line 1:
−
[[CNM Jitsi]] (hereinafter, the ''Soft'') is a [[CNM stable app]] built with [[Jitsi]]. At this moment, it is unclear where and how this app will be finally installed since its HA and storage solutions haven't been designed yet.
+
[[Educaship Jitsi]] (formerly known as [[CNM Talkware]]; hereinafter, the ''Soft'') is a [[CNM stable app]] built with [[Jitsi]]. The ''Soft'' is the [[CNM app]] that is configured to power [[CNM Talk]], [[TalkHandsOn]], or [[TalkNext]] [[CNMCyber service|service]] of [[CNMCyber]]. The ''App'' is based on [[commercial off-the-shelf]] ([[COTS]]) [[webconferencing software]], [[Jitsi]]. The ''App'' is a part of [[Opplet]].  
  
−
Development of the ''Soft'' occurs under the [[Jitsi for CNM Cloud]] project.
+
 
 +
==Challenges==
 +
Guys, we are looking for one or more Jitsi experts to resolve one or more of the challenges that are best described below. Screening question: Have you found the description of the challenges? May you resolve one or more of them? Which one or ones?
 +
 
 +
===Impared===
 +
: Video quality impaired. The bridge channel has been disconnected and thus video quality is limited to its lowest setting.
 +
 
 +
===Load balancer===
 +
# We are looking for solutions to implement a load balancer in CNM Jitsi instances. We are considering several approaches and want to find the best one: 1) put the Jibri on separate bare metals, 2) put the Jitsi Videobridge on separate bare metals, 3) put the Jitsi Meet on separate bare metals, 4) your suggestion. Now all the apps/elements of the Jitsi that were installed along with the Jitsi meet are installed on the same bare metal.
 +
# What is the best host to put the balancer to make it work as best as possible: [[Docker]], [[Hetzner]], [[DigitalOcean]], or [[Contabo]]? Maybe keep one balancer as is, on [[Educaship Proxmox]], and another on another host?
 +
: At the moment, we use the [[high availability]] (or HA) feature on [[CNM Bureau Farm]] that is powered by [[Educaship Proxmox]]. Its HA allows for migrating the instance between several computing servers in cases of emergency. For instance, if the bare-metal server that hosts the instance at the moment fails, HA shall automatically move the instance to another server without any interruption. In plain English, the videoconference participants will not notice any change in the instance when the instance's computer fails.
 +
 
 +
===Hosting===
 +
:# How is it better to be hosted? Are CPU, RAM, and SSD important? Which is more important than others?
 +
:# Dockers, other containers, or full application?
 +
:# Jibri vs Jitsi-Meet hosting
 +
 
 +
===LDAP integration===
 +
: We have authorization from LDAP. But it would be good if the login of a registered user was automatically displayed as a name in the conference.
 +
 
 +
===Live streaming===
 +
: Can we integrate Jitsi with [[YouTube]], [[OBS Studio]], and/or [[AVideo]] for streaming? And how? We want to add the button "Start Live Stream" to our Jitsi instances. Enable live streaming functionality on the ''Soft'' platform.
 +
 
 +
===Guided tour===
 +
: We use the [[CNMCyber Guided Tours]] format and need someone to organize an event that would present the ''Soft''. The event should feature:
 +
:# A speaker and/or presenter who would demonstrate a separate, so-called experiential, instance of the ''Soft'', while following its description. The participants shall follow the presentation, try the ''Soft'' instance on their own, ask questions, and get the speaker/presenter answers.
 +
:# Recording that would be published online by the team.
 +
 
 +
===Subtitles===
 +
: We want to add the possibility of simultaneous translation, i.e. subtitles, during conferences to Jitsi's instances. Is this realistic? Do you have any suggestions?
  
 
==Product specification==
 
==Product specification==
 
: The [[product specification|''Product'' specifications]] are:
 
: The [[product specification|''Product'' specifications]] are:
−
:* CNM Jitsi has LDAP authentication and is hosted on a [[CNM ProxmoxVE|Proxmox cluster]] that ensures its high stability that distinguishes CNM Jitsi from [[Jitsi]].
 
−
:* Jitsi Gateway to SIP (jigasi) - server-side application that allows regular SIP clients to join Jitsi Meet conferences -- not used
 
  
−
 
+
: What distinguishes Educaship Jitsi from [[Jitsi]]:
−
===Hosting===
+
# Educaship Jitsi has '''[[LDAP]] authentication'''. To do this, we made a change to the configuration file, where we disabled internal authorization and enabled LDAP. More about how we have connected LDAP authentication see [[#LDAP authentication|below]].
−
:CNM Jitsi is installed on the [[CNM EndUser Farm]] on the [[CNM ProxmoxVE|Proxmox cluster]], CNM Jitsi is a unique installation that is the first experience of the CNM EndUser Farm property - [[high availability]]. CNM Jitsi can migrate from one machine to another one that were added to Proxmox cluster. These machines are hosted by Hetzer. Read more about high availability: [[CNM EndUser Farm]], [[CNM ProxmoxVE]].
+
# Educaship Jitsi instances are installed on [[CNM Bureau Farm]] that features '''[[high availability]]''' (or [[high availability|HA]]) powered by [[Educaship Proxmox]].
 +
# Educaship Jitsi '''does not use the Jigasi''' (Jitsi Gateway to SIP) - server-side application that allows regular SIP clients to join Jitsi Meet conferences. More about standard Jitsi structure - [[Jitsi#Jitsi_structure|Jitsi]].
  
 
===Software instances===
 
===Software instances===
 
: The software instance that powers core, hands-on training, and experiential systems.
 
: The software instance that powers core, hands-on training, and experiential systems.
−
:* [[CNM Talk]] core Jitsi --
+
:* Core Jitsi -- [[CNM Talk]]
−
:* [[Kryvi app|Kryvi]] Jitsi:
+
:* [[HOTCOE app|HOTCOE]] Jitsi -- [[TalkHandsOn]]
−
:* [[Inplz app|Inplz]] Jitsi -- https://jitsi.hotcoe.com/
+
:* [[Inplz app|Inplz]] Jitsi -- [[TalkNext (bskol)]], [[TalkNext (hotcoe)]], [[TalkNext (employableu)]], [[TalkNext]]
 +
 
 +
===Version===
 +
:The current version of the CNM Jitsi instances is 2.0.8615, which was updated on 2023/05/18.
  
 
===Security===
 
===Security===
−
: For security, we use [[Fail2ban]] because it operates by monitoring log files (e.g. /var/log/auth.log, /var/log/apache/access.log, etc.) for selected entries and running scripts based on them. Most commonly this is used to block selected IP addresses that may belong to hosts that are trying to breach the system's security. It can ban any host IP address that makes too many login attempts or performs any other unwanted action within a time frame defined by the administrator. Includes support for both IPv4 and IPv6.
+
:In order to achieve the safety of our instances we don't use the standard login - admin, don't use the standard user and we disabled user registration directly on instances by switching the [[LDAP]] registration to [[Opplet]]. How to enable LDAP authentication, read [[Educaship Jitsi#LDAP authentication|here]].
−
:Calls use the P2P mode, which is end-to-end encrypted via DTLS-SRTP between the two participants for encrypted communication (secure communication). Group calls also use DTLS-SRTP encryption, but rely on the Jitsi Videobridge (JVB) as video router, where packets are decrypted temporarily. All data is transmitted only through our server, and comprehensive TLS encryption provides protection against interception and unauthorized eavesdropping.
 
−
 
 
−
====Malware protection====
 
−
: Previously, [[CNM Cloud]] developers struggled with the viruses, so an effective anti-virus strategy must be found -- what was the solution?
 
  
 
==Standing operating procedures==
 
==Standing operating procedures==
Line 29: Line 56:
  
 
===Monitoring process===
 
===Monitoring process===
−
: Monitoring is done in [[Nagios]] Snapshots are made by hand, not on CNM Jitsi. Read more: [[CNM Nagios]].
+
: Monitoring is done by using [[Educaship Nagios]], not on CNM Jitsi. Read more: [[Educaship Nagios]].
  
 
===Backup===
 
===Backup===
−
:Usually the main backup is done on the farm, not on CNM Jitsi. So you can read more about backup on [[CNM EndUser Farm]].
+
: Usually, the main backup is done on the farm, not on CNM Jitsi. So you can read more about backup on [[CNM Bureau Farm]].
  
 
===Snapshot===
 
===Snapshot===
−
:  
+
: Snapshots are made by hand on the farm, not on CNM Jitsi. Read more: [[CNM Bureau Farm]].
  
−
===Versions and patch===
+
===System installation===
 +
: How to install & Configure Jitsi on Ubuntu:
 +
: Log in to your server as the non-root, sudo-enabled user before starting
 +
* '''Pre-Instalation'''
 +
:apt update -y && apt upgrade -y
 +
:apt install lsb-release -y
 +
:apt install gnupg -y
 +
:apt install curl -y
 +
:apt install ufw -y
  
−
===System recovery===
+
:Now you will change the system’s hostname to match the domain name you intend to use for your Jitsi Meet instance. You will also locally resolve that hostname to your server’s public IP. Jitsi Meet uses both settings when it installs and generates its configuration files. First, set the system’s hostname to the domain name that you will use for your Jitsi instance. The following command will set the current hostname and modify the /etc/hostname that holds the system’s hostname between reboots:
−
: How to install & Configure Jitsi: https://drive.google.com/file/d/14ynvD3wqliwynQr7TrBf6B-slxqmsDnn/view?usp=sharing
+
 
 +
:hostnamectl set-hostname talk.cnmcyber.com
 +
:nano /etc/hosts
 +
:{|
 +
|127.0.0.1
 +
|localhost
 +
|-
 +
|::1
 +
|localhost ip6-localhost ip6-loopback
 +
|-
 +
|ff02::1
 +
|ip6-allnodes
 +
|-
 +
|ff02::2
 +
|ip6-allrouters
 +
|}
 +
:<nowiki>#</nowiki>- --- BEGIN PVE ---
 +
:2a01:4f8:fff0:53::2 talk.cnmcyber.com jitsi
 +
:<nowiki>#</nowiki> --- END PVE --
 +
 
 +
:ufw allow 80/tcp
 +
:ufw allow 443/tcp
 +
:ufw allow 10000/udp ==> For General Network Audio/Video Meetings
 +
:ufw allow 22/tcp
 +
:ufw allow 3478/udp ==> For querying the stun server (coturn, optional, needs config.js change to enable it).
 +
:ufw allow 5349/tcp ==> For fallback network video/audio communications over TCP (when UDP is blocked for example), served by coturn.
 +
:ufw enable
 +
:ufw status
 +
 
 +
:Save and close the file. Your server now has the hostname and IP address setting Jitsi requires when installed.
 +
 
 +
*'''Install Nginx'''
 +
:<nowiki>#</nowiki> apt-get install nginx -y
 +
:<nowiki>#</nowiki> systemctl start nginx
 +
:<nowiki>#</nowiki> systemctl enable nginx
 +
:<nowiki>#</nowiki> nginx -v
 +
:<nowiki>#</nowiki> ufw allow 'Nginx Full'
 +
 
 +
*'''Installation Jitsi'''
 +
:apt install -y openjdk-8-jre-headless
 +
:java -version
 +
:echo "JAVA_HOME=$(readlink -f /usr/bin/java | sed "s:bin/java::")" | sudo tee -a
 +
:/etc/profile
 +
:source /etc/profile
 +
:apt install -y nginx
 +
:systemctl start nginx.service
 +
:systemctl enable nginx.service
 +
:wget -qO - https:*****.gpg.key | sudo apt-key add -
 +
:echo "deb https://download.jitsi.org stable/" | sudo tee -a
 +
:/etc/apt/sources.list.d/jitsi-stable.list
 +
:apt update
 +
:apt install -y jitsi-meet
 +
 
 +
*'''Install SSL Let's Encrypt'''
 +
:/usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh
 +
:Enter your email and press [ENTER]: ***
 +
*'''Create a Password Authenticate Users to a Meeting'''
 +
:'''Create a guest domain'''
 +
:cd /etc/prosody/conf.avail/
 +
:nano talk.cnmcyber.com.cfg.lua
 +
:------------------------------------------
 +
:VirtualHost "talk.cnmcyber.com"
 +
:::...
 +
:::authentication = "anonymous" //change anonymous to internal_plain
 +
:::...
 +
 
 +
:add above VirtualHost section, insert a new VirtualHost section.
 +
:------------------------------------------
 +
:VirtualHost "guest.talk.cnmcyber.com"
 +
:::authentication = "anonymous"
 +
:::c2s_require_encryption = false
 +
:::modules_enabled = {
 +
::::"bosh";
 +
::::"pubsub";
 +
::::"ping";
 +
::::"speakerstats";
 +
::::"turncredentials";
 +
::::"conference_duration";
 +
:::}
 +
:------------------------------------------
 +
:exit
 +
 
 +
:'''Install Module Storage_memory'''
 +
:<nowiki>#</nowiki>enables a temporary memory storage for persistent information, including #user
 +
:session data
 +
:apt install -y mercurial
 +
 
 +
:mkdir ~/temp && cd ~/temp
 +
 
 +
:hg clone ' https://hg.prosody.im/prosody-modules/ ' prosody-modules
 +
 
 +
:cp prosody-modules/mod_storage_memory/*.lua /usr/lib/prosody/modules/.
 +
 
 +
:'''Create a Jitsi Anonymous Domain'''
 +
:nano /etc/jitsi/meet/talk.cnmcyber.com-config.js
 +
:------------------------------------------
 +
:var config = {
 +
::...
 +
::hosts: {
 +
:::::...
 +
:::::domain: 'talk.cnmcyber.com',
 +
:::::anonymousdomain: '***',
 +
:::::...
 +
::::},
 +
::::...
 +
:}
 +
:------------------------------------------
 +
:Configure Jicofo
 +
:nano /etc/jitsi/jicofo/sip-communicator.properties
 +
:-------------------------------------------
 +
:Add a new line with the following configuration.
 +
:org.jitsi.jicofo.auth.URL=XMPP:talk.cnmcyber.com
 +
 
 +
:'''Create Jitsi admin users'''
 +
:prosodyctl register adminjitsi talk.cnmcyber.com *****
 +
:prosodyctl register administrator talk.cnmcyber.com *****
 +
:prosodyctl register jitsi1 talk.cnmcyber.com *****
 +
:prosodyctl register jitsitalk talk.cnmcyber.com *****
 +
:prosodyctl register jitsimeet talk.cnmcyber.com *****
 +
:systemctl restart {prosody,jicofo,jitsi-videobridge2,nginx}
  
 
===Customization===
 
===Customization===
 
:To customize certain elements of Jitsi, you should:
 
:To customize certain elements of Jitsi, you should:
−
# open the server where Jiti is installed in Terminal;
+
# open the server where Jitsi is installed in Terminal;
 
# open the Midnight Commander by using the command root@jitsi:/home/jitsi# mc;
 
# open the Midnight Commander by using the command root@jitsi:/home/jitsi# mc;
 
# open catalog /usr (click /.. -> /.. -> /usr);
 
# open catalog /usr (click /.. -> /.. -> /usr);
 
# open catalog /share -> /jitsi-meet
 
# open catalog /share -> /jitsi-meet
 
:[[File:Customize_Jitsi.png|400px]]
 
:[[File:Customize_Jitsi.png|400px]]
−
:Here you can select the element you want to change. Press F4 to edit.
+
:Here you can select the file or folder you want to change. Press F4 to edit:
 +
# In the '''interface_config.js''' file you can change:
 +
## ''company name'' to CNMCyber as the value of APP_NAME variable;
 +
## ''default participant's name'', if a user does not enter his/her name, as the value of DEFAULT_REMOTE_DISPLAY_NAME variable;
 +
## ''direction to another website'' when someone clicks on the logo by adding cnmcyber.com as the value of 'BRAND_WATERMARK_LINK' parameter;
 +
#  In the '''images''' folder you can change:
 +
## ''favicon''; you should add an image to the repository and rename it as favicon.ico and then add the desired icon to jitsi-meet/images folder with .ico extension. You can also change it in jitsi-meet/favicon.ico file.
 +
## ''logo''; you should convert a desired logo into a .svg file and rename it as watermark.svg. Then add that .svg file into jitsi-meet/images/images folder. You also don't have to change the name of the new logo, but in this case, you should change the name of the logo file in DEFAULT_LOGO_URL and DEFAULT_WELCOME_PAGE_LOGO_URL parameters.
 +
## ''homepage background image'' by adding the desired image to jitsi-meet/images folder. You can also customize the homepage background image with your company image in variables.scss file [jitsi-meet/css/_variables.scss].
 +
#  In the '''main.json, main-enGB.json''' and '''title.html''' files ([jitsi-meet/lang/main.json], [jitsi-meet/lang/main-enGB.json], [jitsi-meet/title.html]) you can change:
 +
## ''title'' and ''description'' by opening the main.json file and searching for "appDescription", "headerTitle", "headerSubtitle", "title".Then make the necessary changes in each of the three files.
 +
 
 +
===LDAP authentication===
 +
[[File:Sasl.png|right|250px]]
 +
: To connect LDAP authentication you should connect an application called Sasl. To set up Sasl authentication you should:
 +
# open the server where Jitsi is installed in Terminal;
 +
# open the Midnight Commander by using the command root@jitsi:/home/jitsi# mc;
 +
# open catalog /etc -> /saslauthd.conf file.
 +
: The file looks like this:
 +
: [[File:Sasl-file.png]]
 +
: In this file, we specify the server, the administrator's login and password, and the database. We use a separate server for LDAP.
 +
:After that we can change the authentication mechanism. To do this:
 +
# in catalog /etc select /sasl folder -> /xmpp.conf file:
 +
:[[File:Xmpp.conf.png]]
 +
:Here we change the method to saslauthd.conf (how it shows in the picture). And after that make sure to restart the service and restart the Prosody bt using the command jitsi@jitsi:/ect/sasl$ systemctl restart prosody in Terminal.
 +
 
 +
===Version===
 +
:You can find information about new updates at https://hub.docker.com/
  
 
==Hands-on assignments==
 
==Hands-on assignments==
Line 55: Line 236:
  
 
==Presentations==
 
==Presentations==
−
: Presentations that present the software to its new users in multimedia, video, just audio, and/or just graphic formats.
+
: CNM WordPress was presented at a series of events called [[CNMCyber Guided Tours]] and [[CNM Technology Board]]:
 +
*[[Guided Tour of CNM Jitsi 2023-3-29]]
 +
*[[Guided Tour of CNM Jitsi 2023-4-5]]
 +
*[[CNM Tech Board 2023-04-12]]
 +
*[[CNM Tech Board 2023-04-19]]
  
 
==User group==
 
==User group==
 
: CNM Social user group has not yet been created; the group may organize software-related events and produce newsletters.
 
: CNM Social user group has not yet been created; the group may organize software-related events and produce newsletters.
 +
 +
==Architecture==
 +
: The ''App'' is a [[BigBlueButton]] instance that is run on the [[CNM Farms]] on a separate server.
 +
 +
===Server requirements===
 +
::The minimum server requirements for installing BigBlueButton 1.1 are:
 +
::#Ubuntu 16.04 64-bit OS;
 +
::#4 GB of memory with swap enabled (8 GB of memory is better);
 +
::#Quad-core 2.6 GHZ CPU (or faster);
 +
::#TCP ports 80, 443, and 1935 are accessible;
 +
::#TCP port 7443 is accessible if you intend to configure [[SSL]] (recommended), otherwise port 5066 is Accessible;
 +
::#UDP ports 16384 - 32768 are accessible;
 +
::#Port 80 is not in use by another application.
 +
 +
::Additional requirements are:
 +
::*500G of free disk space (or more) for recordings;
 +
::*100 Mbits / Sec bandwidth (symmetrical);
 +
::*Dedicated (bare metal) hardware (not virtualized)
 +
 +
==Availability==
 +
{|class="wikitable" width=100% style="text-align:center;"
 +
|rowspan="2"|[[CNM app]]||style="background-color:#e6e6e6;" colspan="8"|Available to:
 +
|-
 +
!Everyone!!Everyone registered!!Customer!!Student!!Partner or Vendor!!Employee!!Developer!!Admin
 +
|-
 +
!The ''App''
 +
|No||Yes||Yes||Yes||Yes||Yes||Yes||Yes
 +
|}
 +
 +
==Scripting==
 +
Jitsi is an open-source video conferencing platform, and there are several AI-powered scripting tools that can work with Jitsi. Here are a few options:
 +
 +
    Jitsi-SDK: Jitsi provides its own SDK for building custom video conferencing applications. You can use this SDK to integrate AI-powered scripting tools like Google Cloud's Dialogflow or Microsoft Bot Framework.
 +
    Botkit: Botkit is an open-source platform for building chatbots and other conversational interfaces. It supports Jitsi and can be used to build AI-powered chatbots for video conferencing.
 +
    Rasa: Rasa is an open-source conversational AI platform that can be integrated with Jitsi for building AI-powered video conferencing applications.
 +
    Microsoft Power Automate (formerly Microsoft Flow): This is a cloud-based automation platform that can be used to automate tasks and workflows across different applications, including Jitsi.
 +
    Automation Anywhere: This is a robotic process automation (RPA) tool that can be used to automate tasks and workflows across different applications, including Jitsi.
 +
 +
These are just a few examples of AI-powered scripting tools that can work with Jitsi. The choice of tool will depend on your specific requirements and the complexity of the automation tasks you want to perform.
 +
Note: Some of these tools may require programming knowledge and expertise in AI and machine learning.
  
 
==See also==
 
==See also==
 
*https://blog.mi.hdm-stuttgart.de/index.php/2021/03/11/how-to-scale-jitsi-meet/
 
*https://blog.mi.hdm-stuttgart.de/index.php/2021/03/11/how-to-scale-jitsi-meet/
 +
*https://www.digitalocean.com/community/tutorials/how-to-install-jitsi-meet-on-ubuntu-22-04
 +
 +
===Development===
 +
: Development of the ''Soft'' occurs under the [[Jitsi for CNM Cloud]] project.
  
 
===Related lectios===
 
===Related lectios===
−
: Lectios that provide CNM learners with knowledge about the deployed software.
+
:* [[CNM Apps]].  
  
−
[[Category:CNM COTS products]]
+
[[Category:CNM COTS products]][[Category: CNM Cyber Orientation]][[Category: Articles]]

Latest revision as of 16:05, 16 May 2024

Educaship Jitsi (formerly known as CNM Talkware; hereinafter, the Soft) is a CNM stable app built with Jitsi. The Soft is the CNM app that is configured to power CNM Talk, TalkHandsOn, or TalkNext service of CNMCyber. The App is based on commercial off-the-shelf (COTS) webconferencing software, Jitsi. The App is a part of Opplet.


Challenges

Guys, we are looking for one or more Jitsi experts to resolve one or more of the challenges that are best described below. Screening question: Have you found the description of the challenges? May you resolve one or more of them? Which one or ones?

Impared

Video quality impaired. The bridge channel has been disconnected and thus video quality is limited to its lowest setting.

Load balancer

  1. We are looking for solutions to implement a load balancer in CNM Jitsi instances. We are considering several approaches and want to find the best one: 1) put the Jibri on separate bare metals, 2) put the Jitsi Videobridge on separate bare metals, 3) put the Jitsi Meet on separate bare metals, 4) your suggestion. Now all the apps/elements of the Jitsi that were installed along with the Jitsi meet are installed on the same bare metal.
  2. What is the best host to put the balancer to make it work as best as possible: Docker, Hetzner, DigitalOcean, or Contabo? Maybe keep one balancer as is, on Educaship Proxmox, and another on another host?
At the moment, we use the high availability (or HA) feature on CNM Bureau Farm that is powered by Educaship Proxmox. Its HA allows for migrating the instance between several computing servers in cases of emergency. For instance, if the bare-metal server that hosts the instance at the moment fails, HA shall automatically move the instance to another server without any interruption. In plain English, the videoconference participants will not notice any change in the instance when the instance's computer fails.

Hosting

  1. How is it better to be hosted? Are CPU, RAM, and SSD important? Which is more important than others?
  2. Dockers, other containers, or full application?
  3. Jibri vs Jitsi-Meet hosting

LDAP integration

We have authorization from LDAP. But it would be good if the login of a registered user was automatically displayed as a name in the conference.

Live streaming

Can we integrate Jitsi with YouTube, OBS Studio, and/or AVideo for streaming? And how? We want to add the button "Start Live Stream" to our Jitsi instances. Enable live streaming functionality on the Soft platform.

Guided tour

We use the CNMCyber Guided Tours format and need someone to organize an event that would present the Soft. The event should feature:
  1. A speaker and/or presenter who would demonstrate a separate, so-called experiential, instance of the Soft, while following its description. The participants shall follow the presentation, try the Soft instance on their own, ask questions, and get the speaker/presenter answers.
  2. Recording that would be published online by the team.

Subtitles

We want to add the possibility of simultaneous translation, i.e. subtitles, during conferences to Jitsi's instances. Is this realistic? Do you have any suggestions?

Product specification

The Product specifications are:
What distinguishes Educaship Jitsi from Jitsi:
  1. Educaship Jitsi has LDAP authentication. To do this, we made a change to the configuration file, where we disabled internal authorization and enabled LDAP. More about how we have connected LDAP authentication see below.
  2. Educaship Jitsi instances are installed on CNM Bureau Farm that features high availability (or HA) powered by Educaship Proxmox.
  3. Educaship Jitsi does not use the Jigasi (Jitsi Gateway to SIP) - server-side application that allows regular SIP clients to join Jitsi Meet conferences. More about standard Jitsi structure - Jitsi.

Software instances

The software instance that powers core, hands-on training, and experiential systems.

Version

The current version of the CNM Jitsi instances is 2.0.8615, which was updated on 2023/05/18.

Security

In order to achieve the safety of our instances we don't use the standard login - admin, don't use the standard user and we disabled user registration directly on instances by switching the LDAP registration to Opplet. How to enable LDAP authentication, read here.

Standing operating procedures

Standing operating procedure

Monitoring process

Monitoring is done by using Educaship Nagios, not on CNM Jitsi. Read more: Educaship Nagios.

Backup

Usually, the main backup is done on the farm, not on CNM Jitsi. So you can read more about backup on CNM Bureau Farm.

Snapshot

Snapshots are made by hand on the farm, not on CNM Jitsi. Read more: CNM Bureau Farm.

System installation

How to install & Configure Jitsi on Ubuntu:
Log in to your server as the non-root, sudo-enabled user before starting
  • Pre-Instalation
apt update -y && apt upgrade -y
apt install lsb-release -y
apt install gnupg -y
apt install curl -y
apt install ufw -y
Now you will change the system’s hostname to match the domain name you intend to use for your Jitsi Meet instance. You will also locally resolve that hostname to your server’s public IP. Jitsi Meet uses both settings when it installs and generates its configuration files. First, set the system’s hostname to the domain name that you will use for your Jitsi instance. The following command will set the current hostname and modify the /etc/hostname that holds the system’s hostname between reboots:
hostnamectl set-hostname talk.cnmcyber.com
nano /etc/hosts
127.0.0.1 localhost
::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
#- --- BEGIN PVE ---
2a01:4f8:fff0:53::2 talk.cnmcyber.com jitsi
# --- END PVE --
ufw allow 80/tcp
ufw allow 443/tcp
ufw allow 10000/udp ==> For General Network Audio/Video Meetings
ufw allow 22/tcp
ufw allow 3478/udp ==> For querying the stun server (coturn, optional, needs config.js change to enable it).
ufw allow 5349/tcp ==> For fallback network video/audio communications over TCP (when UDP is blocked for example), served by coturn.
ufw enable
ufw status
Save and close the file. Your server now has the hostname and IP address setting Jitsi requires when installed.
  • Install Nginx
# apt-get install nginx -y
# systemctl start nginx
# systemctl enable nginx
# nginx -v
# ufw allow 'Nginx Full'
  • Installation Jitsi
apt install -y openjdk-8-jre-headless
java -version
echo "JAVA_HOME=$(readlink -f /usr/bin/java | sed "s:bin/java::")" | sudo tee -a
/etc/profile
source /etc/profile
apt install -y nginx
systemctl start nginx.service
systemctl enable nginx.service
wget -qO - https:*****.gpg.key | sudo apt-key add -
echo "deb https://download.jitsi.org stable/" | sudo tee -a
/etc/apt/sources.list.d/jitsi-stable.list
apt update
apt install -y jitsi-meet
  • Install SSL Let's Encrypt
/usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh
Enter your email and press [ENTER]: ***
  • Create a Password Authenticate Users to a Meeting
Create a guest domain
cd /etc/prosody/conf.avail/
nano talk.cnmcyber.com.cfg.lua
------------------------------------------
VirtualHost "talk.cnmcyber.com"
...
authentication = "anonymous" //change anonymous to internal_plain
...
add above VirtualHost section, insert a new VirtualHost section.
------------------------------------------
VirtualHost "guest.talk.cnmcyber.com"
authentication = "anonymous"
c2s_require_encryption = false
modules_enabled = {
"bosh";
"pubsub";
"ping";
"speakerstats";
"turncredentials";
"conference_duration";
}
------------------------------------------
exit
Install Module Storage_memory
#enables a temporary memory storage for persistent information, including #user
session data
apt install -y mercurial
mkdir ~/temp && cd ~/temp
hg clone ' https://hg.prosody.im/prosody-modules/ ' prosody-modules
cp prosody-modules/mod_storage_memory/*.lua /usr/lib/prosody/modules/.
Create a Jitsi Anonymous Domain
nano /etc/jitsi/meet/talk.cnmcyber.com-config.js
------------------------------------------
var config = {
...
hosts: {
...
domain: 'talk.cnmcyber.com',
anonymousdomain: '***',
...
},
...
}
------------------------------------------
Configure Jicofo
nano /etc/jitsi/jicofo/sip-communicator.properties
-------------------------------------------
Add a new line with the following configuration.
org.jitsi.jicofo.auth.URL=XMPP:talk.cnmcyber.com
Create Jitsi admin users
prosodyctl register adminjitsi talk.cnmcyber.com *****
prosodyctl register administrator talk.cnmcyber.com *****
prosodyctl register jitsi1 talk.cnmcyber.com *****
prosodyctl register jitsitalk talk.cnmcyber.com *****
prosodyctl register jitsimeet talk.cnmcyber.com *****
systemctl restart {prosody,jicofo,jitsi-videobridge2,nginx}

Customization

To customize certain elements of Jitsi, you should:
  1. open the server where Jitsi is installed in Terminal;
  2. open the Midnight Commander by using the command root@jitsi:/home/jitsi# mc;
  3. open catalog /usr (click /.. -> /.. -> /usr);
  4. open catalog /share -> /jitsi-meet
Customize Jitsi.png
Here you can select the file or folder you want to change. Press F4 to edit:
  1. In the interface_config.js file you can change:
    1. company name to CNMCyber as the value of APP_NAME variable;
    2. default participant's name, if a user does not enter his/her name, as the value of DEFAULT_REMOTE_DISPLAY_NAME variable;
    3. direction to another website when someone clicks on the logo by adding cnmcyber.com as the value of 'BRAND_WATERMARK_LINK' parameter;
  2. In the images folder you can change:
    1. favicon; you should add an image to the repository and rename it as favicon.ico and then add the desired icon to jitsi-meet/images folder with .ico extension. You can also change it in jitsi-meet/favicon.ico file.
    2. logo; you should convert a desired logo into a .svg file and rename it as watermark.svg. Then add that .svg file into jitsi-meet/images/images folder. You also don't have to change the name of the new logo, but in this case, you should change the name of the logo file in DEFAULT_LOGO_URL and DEFAULT_WELCOME_PAGE_LOGO_URL parameters.
    3. homepage background image by adding the desired image to jitsi-meet/images folder. You can also customize the homepage background image with your company image in variables.scss file [jitsi-meet/css/_variables.scss].
  3. In the main.json, main-enGB.json and title.html files ([jitsi-meet/lang/main.json], [jitsi-meet/lang/main-enGB.json], [jitsi-meet/title.html]) you can change:
    1. title and description by opening the main.json file and searching for "appDescription", "headerTitle", "headerSubtitle", "title".Then make the necessary changes in each of the three files.

LDAP authentication

Sasl.png
To connect LDAP authentication you should connect an application called Sasl. To set up Sasl authentication you should:
  1. open the server where Jitsi is installed in Terminal;
  2. open the Midnight Commander by using the command root@jitsi:/home/jitsi# mc;
  3. open catalog /etc -> /saslauthd.conf file.
The file looks like this:
Sasl-file.png
In this file, we specify the server, the administrator's login and password, and the database. We use a separate server for LDAP.
After that we can change the authentication mechanism. To do this:
  1. in catalog /etc select /sasl folder -> /xmpp.conf file:
Xmpp.conf.png
Here we change the method to saslauthd.conf (how it shows in the picture). And after that make sure to restart the service and restart the Prosody bt using the command jitsi@jitsi:/ect/sasl$ systemctl restart prosody in Terminal.

Version

You can find information about new updates at https://hub.docker.com/

Hands-on assignments

Hands-on assignments that CNM learners can use to get accustomed to the software while using its hands-on training systems and applications.

Presentations

CNM WordPress was presented at a series of events called CNMCyber Guided Tours and CNM Technology Board:

User group

CNM Social user group has not yet been created; the group may organize software-related events and produce newsletters.

Architecture

The App is a BigBlueButton instance that is run on the CNM Farms on a separate server.

Server requirements

The minimum server requirements for installing BigBlueButton 1.1 are:
  1. Ubuntu 16.04 64-bit OS;
  2. 4 GB of memory with swap enabled (8 GB of memory is better);
  3. Quad-core 2.6 GHZ CPU (or faster);
  4. TCP ports 80, 443, and 1935 are accessible;
  5. TCP port 7443 is accessible if you intend to configure SSL (recommended), otherwise port 5066 is Accessible;
  6. UDP ports 16384 - 32768 are accessible;
  7. Port 80 is not in use by another application.
Additional requirements are:
  • 500G of free disk space (or more) for recordings;
  • 100 Mbits / Sec bandwidth (symmetrical);
  • Dedicated (bare metal) hardware (not virtualized)

Availability

CNM app Available to:
Everyone Everyone registered Customer Student Partner or Vendor Employee Developer Admin
The App No Yes Yes Yes Yes Yes Yes Yes

Scripting

Jitsi is an open-source video conferencing platform, and there are several AI-powered scripting tools that can work with Jitsi. Here are a few options: 

   Jitsi-SDK: Jitsi provides its own SDK for building custom video conferencing applications. You can use this SDK to integrate AI-powered scripting tools like Google Cloud's Dialogflow or Microsoft Bot Framework.
   Botkit: Botkit is an open-source platform for building chatbots and other conversational interfaces. It supports Jitsi and can be used to build AI-powered chatbots for video conferencing.
   Rasa: Rasa is an open-source conversational AI platform that can be integrated with Jitsi for building AI-powered video conferencing applications.
   Microsoft Power Automate (formerly Microsoft Flow): This is a cloud-based automation platform that can be used to automate tasks and workflows across different applications, including Jitsi.
   Automation Anywhere: This is a robotic process automation (RPA) tool that can be used to automate tasks and workflows across different applications, including Jitsi.

These are just a few examples of AI-powered scripting tools that can work with Jitsi. The choice of tool will depend on your specific requirements and the complexity of the automation tasks you want to perform. Note: Some of these tools may require programming knowledge and expertise in AI and machine learning.

See also

Development

Development of the Soft occurs under the Jitsi for CNM Cloud project.

Related lectios

Retrieved from "https://pravka.bskol.com/w/index.php?title=Educaship_Jitsi&oldid=135712"