# Building binary **URL:** \ **Category:** Help\ **Created:** [March 15, 2020, 10:45pm UTC](https://vaultwarden.discourse.group/t/building-binary/33 "2020-03-15T22:45:16Z")\ **Posts on this page:** 18\ **Page:** 1
**Author:** ![aponsin](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@aponsin](https://vaultwarden.discourse.group/u/aponsin)\ **Post date:** [March 15, 2020, 10:45pm UTC](https://vaultwarden.discourse.group/t/building-binary/33/1 "2020-03-15T22:45:16Z")
Hello, You will find below the steps carried out as root on a CentOS 7 server: # Install Rust ```bash curl https://sh.rustup.rs -sSf | bash > 2 > x86_64-unknown-linux-gnu > nightly > minimal > y > 1 echo 'export PATH="$HOME/.cargo/bin:$PATH"' >> ~/.bashrc source ~/.bashrc ``` # Install Node.js and npm ```bash curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.35.3/install.sh | bash source ~/.bashrc nvm list-remote (checking out the latest version, here v12.16.1) nvm install v12.16.1 ``` # Install CentOS dependencies ```bash yum -y install vim wget openssl-devel httpd yum -y groupinstall 'Development Tools' ``` # Download repositories ```bash git clone https://github.com/dani-garcia/bitwarden_rs.git /opt/bitwarden git clone https://github.com/bitwarden/web.git /opt/web ``` # Compile the back-end ```bash cd /opt/bitwarden/ cargo run --features sqlite --release ``` # Compile the front-end Check the latest version of the file downloaded [here](https://github.com/dani-garcia/bw_web_builds/tree/master/patches). ```bash cd /opt/web/ wget https://raw.githubusercontent.com/dani-garcia/bw_web_builds/master/patches/v2.12.0.patch git apply v2.12.0.patch npm run sub:init npm install npm run dist ``` # Create the .env file ```bash cp /opt/bitwarden/.env.template /opt/bitwarden/.env ``` # Enable the administration interface Uncomment `ADMIN_TOKEN` variable in `/opt/bitwarden/.env` # Set the web vault folder ```bash sed -i 's/# WEB_VAULT_FOLDER=web-vault/WEB_VAULT_FOLDER=\/opt\/web\/build/' /opt/bitwarden/.env ``` # Change the Rocket IP address ```bash sed -i 's/# ROCKET_ADDRESS=0.0.0.0/ROCKET_ADDRESS=127.0.0.1/' /opt/bitwarden/.env ``` # Enable WebSocket notifications ```bash sed -i 's/# WEBSOCKET_ENABLED=false/WEBSOCKET_ENABLED=true/' /opt/bitwarden/.env ``` # Change the WebSocket IP address ```bash sed -i 's/# WEBSOCKET_ADDRESS=0.0.0.0/WEBSOCKET_ADDRESS=127.0.0.1/' /opt/bitwarden/.env ``` # Rights modification The `apache` group and the `apache` user are the permissions that must be applied to folders and files if you want httpd (Apache2 on CentOS) to be able to access them. ```bash chown -R apache:apache /opt/bitwarden/ ``` # Creation of the VirtualHost (reverse proxy) ```bash vim /etc/httpd/conf.d/vhost.conf ``` Copy the content below into the `vhost.conf` file. Please note that at the moment I don’t configure access to the web vault in HTTPS. ```auto #SSLEngine on ServerName localhost #SSLCertificateFile ${SSLCERTIFICATE} #SSLCertificateKeyFile ${SSLKEY} #SSLCACertificateFile ${SSLCA} #${SSLCHAIN} ErrorLog /var/log/httpd/bitwarden-error.log CustomLog /var/log/httpd/bitwarden-access.log combined RewriteEngine On RewriteCond %{HTTP:Upgrade} =websocket [NC] RewriteRule /notifications/hub(.*) ws://127.0.0.1:3012/$1 [P,L] ProxyPass / http://127.0.0.1:8000/ ProxyPreserveHost On ProxyRequests Off RequestHeader set X-Real-IP %{REMOTE_ADDR}s ``` # Log files creation ```bash touch /var/log/httpd/bitwarden-error.log touch /var/log/httpd/bitwarden-access.log ``` # Enable and start HTTPD service ```bash systemctl enable --now httpd.service ``` # Allow Apache2 to connect to network ```auto setsebool -P httpd_can_network_connect on ``` # Allow HTTP port ```bash firewall-cmd --add-port=80/tcp --permanent firewall-cmd --reload ``` # Launch the app ```bash cd /opt/bitwarden cargo run --release --features sqlite ``` Go to [http://10.0.0.3](http://10.0.0.3) (server IP address): - create the users - access the administration interface - log in with the token that is attached to the `ADMIN_TOKEN` variable - on the `General settings` ribbon, uncheck `Allow new signups` - hit `Save` button # Disable administration interface ```auto sed -i '/admin_token/d' /opt/bitwarden/data/config.json ``` Comment `ADMIN_TOKEN` variable in `/opt/bitwarden/.env`. # Create a service ```auto vim /etc/systemd/system/bitwarden.service ``` Copy the content below into the `bitwarden.service` file. ```auto [Unit] Description=Bitwarden Server (Rust Edition) Documentation=https://github.com/dani-garcia/bitwarden_rs # Only sqlite After=network.target [Service] # The user/group bitwarden_rs is run under. the working directory (see below) should allow write and read access to this user/group User=apache Group=apache # The location of the .env file for configuration EnvironmentFile=/opt/bitwarden/.env # The location of the compiled binary ExecStart=/opt/bitwarden/target/release/bitwarden_rs # Set reasonable connection and process limits LimitNOFILE=1048576 LimitNPROC=64 # Only allow writes to the following directory and set it to the working directory (user and password data are stored here) WorkingDirectory=/opt/bitwarden # Allow bitwarden_rs to bind ports in the range of 0-1024 AmbientCapabilities=CAP_NET_BIND_SERVICE [Install] WantedBy=multi-user.target ``` # Restart systemct daemon ```auto systemctl daemon-reload ``` # Start bitwarden service ```auto systemctl start bitwarden.service ``` At the moment I have this error: ```auto Mar 15 15:03:30 bitwarden polkitd[866]: Unregistered Authentication Agent for unix-process:25045:279698 (system bus name :1.49, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) (disconnected from bus) Mar 15 15:03:30 bitwarden bitwarden_rs[25051]: /--------------------------------------------------------------------\ Mar 15 15:03:30 bitwarden bitwarden_rs[25051]: | Starting Bitwarden_RS | Mar 15 15:03:30 bitwarden bitwarden_rs[25051]: | Version 1.14-7d9c7017 | Mar 15 15:03:30 bitwarden bitwarden_rs[25051]: |--------------------------------------------------------------------| Mar 15 15:03:30 bitwarden bitwarden_rs[25051]: | This is an *unofficial* Bitwarden implementation, DO NOT use the | Mar 15 15:03:30 bitwarden bitwarden_rs[25051]: | official channels to report bugs/features, regardless of client. | Mar 15 15:03:30 bitwarden bitwarden_rs[25051]: | Report URL: https://github.com/dani-garcia/bitwarden_rs/issues/new | Mar 15 15:03:30 bitwarden bitwarden_rs[25051]: \--------------------------------------------------------------------/ Mar 15 15:03:30 bitwarden bitwarden_rs[25051]: Logger failed to initialize: attempted to set a logger after the logging system was already initialized Mar 15 15:03:30 bitwarden bitwarden_rs[25051]: [2020-03-15 15:03:30][rocket::config::error][ERROR] environment variable ROCKET_ADDRESS=127.0.0.1 # Enable this to test mobile app could not be parsed Mar 15 15:03:30 bitwarden systemd[1]: bitwarden.service: main process exited, code=exited, status=1/FAILURE Mar 15 15:03:30 bitwarden systemd[1]: Unit bitwarden.service entered failed state. Mar 15 15:03:30 bitwarden systemd[1]: bitwarden.service failed. ``` Please note that SELinux is enabled (I want to leave it enabled for security reasons) it is not impossible that the “error” comes from SELinux, how can I fix it? ---
**Author:** ![dani](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/dani/32/2_2.png) [@dani](https://vaultwarden.discourse.group/u/dani)\ **Post date:** [March 16, 2020, 5:25pm UTC](https://vaultwarden.discourse.group/t/building-binary/33/2 "2020-03-16T17:25:45Z")
So far all that makes sense to me! Small tip, but you might prefer to set: `WEB_VAULT_FOLDER=/opt/web/build` to avoid having to copy the built files, but it should work great your way! ---
**Author:** ![aponsin](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@aponsin](https://vaultwarden.discourse.group/u/aponsin)\ **Post date:** [March 16, 2020, 7:35pm UTC](https://vaultwarden.discourse.group/t/building-binary/33/3 "2020-03-16T19:35:33Z")
@dani When do I modify this variable (`WEB_VAULT_FOLDER`)? Before compiling Bitwarden\_RS API? What is the method to disable the administration interface? In fact I activated the interface (by uncommenting `ADMIN_TOKEN`) to disable the registration of new users and I commented `ADMIN_TOKEN` again. After reloading the `.env` file (`source /opt/bitwarden/.env`) and relaunching the app, the administration interface is still visible… Thank you for your feedback. ---
**Author:** ![dani](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/dani/32/2_2.png) [@dani](https://vaultwarden.discourse.group/u/dani)\ **Post date:** [March 16, 2020, 8:06pm UTC](https://vaultwarden.discourse.group/t/building-binary/33/4 "2020-03-16T20:06:45Z")
If you make changes to the config from the admin interface, those changes will be saved to the config.json file in the data folder, which at that point would take precedence over the .env variables, so to disable it, delete or edit the config.json file. The `WEB_VAULT_FOLDER` variable is only read during runtime so no need to recompile ---
**Author:** ![aponsin](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@aponsin](https://vaultwarden.discourse.group/u/aponsin)\ **Post date:** [March 16, 2020, 10:43pm UTC](https://vaultwarden.discourse.group/t/building-binary/33/5 "2020-03-16T22:43:39Z")
@dani Indeed it works! Can you consider my request at the end of my original post (concerning the creation of a service), I have an error and I don’t know how to fix it. I’m not sure about the value of WorkingDirectory… Thank you for your feedback. ---
**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\ **Post date:** [March 16, 2020, 10:53pm UTC](https://vaultwarden.discourse.group/t/building-binary/33/6 "2020-03-16T22:53:32Z")
Hello aponsin, I think something goes wrong with the sed replace for the rocket\_address. According too the error message it is trying to bind to `127.0.0.1 # Enable this to test mobile app could not be parsed` so something went wrong there. ---
**Author:** ![aponsin](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@aponsin](https://vaultwarden.discourse.group/u/aponsin)\ **Post date:** [March 16, 2020, 11:08pm UTC](https://vaultwarden.discourse.group/t/building-binary/33/7 "2020-03-16T23:08:30Z")
Hi @BlackDex, Hum I don’t think it’s related to the use of localhost (`127.0.0.1`) because if I look at my `.env` file: ```auto cat /opt/bitwarden/.env | grep "ROCKET_ADDRESS" ``` I have this: ```auto ROCKET_ADDRESS=127.0.0.1 # Enable this to test mobile app ``` So I think the message displayed is extracted from the configuration file? Just a guess… By the way if I replace this IP address by 0.0.0.0, I get the same error when I do `journalctl -xe` but with the IP address 0.0.0.0… Thank you for your feedback. ---
**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\ **Post date:** [March 18, 2020, 10:59am UTC](https://vaultwarden.discourse.group/t/building-binary/33/8 "2020-03-18T10:59:15Z")
@aponsin, please try to change the sed command to the following. ```auto sed -i 's/# ROCKET_ADDRESS=0\.0\.0\.0.*/ROCKET_ADDRESS=127.0.0.1/' /opt/bitwarden/.env ``` That will remove the `# Comment` on the end, and makes sure only the IP is there. ---
**Author:** ![aponsin](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@aponsin](https://vaultwarden.discourse.group/u/aponsin)\ **Post date:** [March 19, 2020, 2:14pm UTC](https://vaultwarden.discourse.group/t/building-binary/33/9 "2020-03-19T14:14:00Z")
Hi @BlackDex, You’re not far from genius! It works! Thank you very much for your help! I can no longer update the original article to write the modification that solves the problem… Have a great day! ---
**Author:** ![aponsin](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@aponsin](https://vaultwarden.discourse.group/u/aponsin)\ **Post date:** [March 20, 2020, 11:31am UTC](https://vaultwarden.discourse.group/t/building-binary/33/11 "2020-03-20T11:31:57Z")
Hi @Spa, I did not perform the installation on a CentOS 8 server, is it possible for you to do this installation on CentOS7? Maybe, can you provide us the log file located at `/root/.npm/_logs/2020-03-20T10_02_48_902Z-debug.log` ? ---
**Author:** ![aponsin](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@aponsin](https://vaultwarden.discourse.group/u/aponsin)\ **Post date:** [March 20, 2020, 8:44pm UTC](https://vaultwarden.discourse.group/t/building-binary/33/14 "2020-03-20T20:44:02Z")
@Spa, Yes, that’s what I was going to propose, and by the same time you’ re going to need the `openssl-devel` package. Keep me posted. ---
**Author:** ![Spa](https://avatars.discourse-cdn.com/v4/letter/s/ebca7d/32.png) [@Spa](https://vaultwarden.discourse.group/u/Spa)\ **Post date:** [March 21, 2020, 11:15am UTC](https://vaultwarden.discourse.group/t/building-binary/33/16 "2020-03-21T11:15:12Z")
Hi, how can i enable https and add letsencrypt certs? thanks ---
**Author:** ![aponsin](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@aponsin](https://vaultwarden.discourse.group/u/aponsin)\ **Post date:** [March 21, 2020, 2:13pm UTC](https://vaultwarden.discourse.group/t/building-binary/33/17 "2020-03-21T14:13:20Z")
Hi @Spa, It’s very strange, you follow the code snippets I give? Especially to install the nightly version of Rust and Node.js? ---
**Author:** ![Spa](https://avatars.discourse-cdn.com/v4/letter/s/ebca7d/32.png) [@Spa](https://vaultwarden.discourse.group/u/Spa)\ **Post date:** [March 21, 2020, 2:55pm UTC](https://vaultwarden.discourse.group/t/building-binary/33/18 "2020-03-21T14:55:31Z")
now it’s working… needs npm audit fix then upograde more ram than 1gb and 1gb swap Compiling well and now i can use bw vault page on my 127.0.0.1 address Now i’mtrying to enable https and apply lets encrypt cert ---
**Author:** ![Spa](https://avatars.discourse-cdn.com/v4/letter/s/ebca7d/32.png) [@Spa](https://vaultwarden.discourse.group/u/Spa)\ **Post date:** [April 13, 2020, 4:56pm UTC](https://vaultwarden.discourse.group/t/building-binary/33/19 "2020-04-13T16:56:23Z")
Hi it’s works now but i’m a issues when i generate service [bw@Bitwarden bin]# systemctl status bitwarden.service ● bitwarden.service - Bitwarden Server (Rust Edition) Loaded: loaded (/etc/systemd/system/bitwarden.service; disabled; vendor preset: disabled) Active: failed (Result: exit-code) since Mon 2020-04-13 16:49:39 UTC; 2min 50s ago Docs: [https://github.com/dani-garcia/bitwarden\_rs](https://github.com/dani-garcia/bitwarden_rs) Process: 637 ExecStart=/opt/bitwarden/target/release/bitwarden\_rs (code=exited, status=203/EXEC) Main PID: 637 (code=exited, status=203/EXEC) Can how i fix it? Thanks ---
**Author:** ![aponsin](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@aponsin](https://vaultwarden.discourse.group/u/aponsin)\ **Post date:** [April 16, 2020, 9:21am UTC](https://vaultwarden.discourse.group/t/building-binary/33/20 "2020-04-16T09:21:12Z")
Hi @Spa, Can you please post your bitwarden.service file? ---
**Author:** ![Spa](https://avatars.discourse-cdn.com/v4/letter/s/ebca7d/32.png) [@Spa](https://vaultwarden.discourse.group/u/Spa)\ **Post date:** [April 28, 2020, 6:12pm UTC](https://vaultwarden.discourse.group/t/building-binary/33/21 "2020-04-28T18:12:19Z")
Hi i copied the file into guide ```auto [Unit] Description=Bitwarden Server (Rust Edition) Documentation=https://github.com/dani-garcia/bitwarden_rs # Only sqlite After=network.target [Service] # The user/group bitwarden_rs is run under. the working directory (see below) should allow write and read access to this user/group User=apache Group=apache # The location of the .env file for configuration EnvironmentFile=/opt/bitwarden/.env # The location of the compiled binary ExecStart=/opt/bitwarden/target/release/bitwarden_rs # Set reasonable connection and process limits LimitNOFILE=1048576 LimitNPROC=64 # Only allow writes to the following directory and set it to the working directory (user and password data are stored here) WorkingDirectory=/opt/bitwarden # Allow bitwarden_rs to bind ports in the range of 0-1024 AmbientCapabilities=CAP_NET_BIND_SERVICE [Install] WantedBy=multi-user.target ``` ---
**Author:** ![tjyang2001](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/tjyang2001/32/282_2.png) [@tjyang2001](https://vaultwarden.discourse.group/u/tjyang2001)\ **Post date:** [March 25, 2021, 5:30pm UTC](https://vaultwarden.discourse.group/t/building-binary/33/22 "2021-03-25T17:30:51Z")
Here is rpm spec files from MrMEEE , [GitHub - MrMEEE/bitwarden\_rs\_rpm](https://github.com/MrMEEE/bitwarden_rs_rpm) Should we move forward to make bitwarden\_rs a formal pkg in Fedora EPEL repo ?