Composer issue: PluginBlockedException

i’m getting an unexpected error on installation.

It looks like i have all requirements in october doc.

Tho’ i’m not sure about ZipArchive. I see a lot of “zip” in my php info:
gsce.bayviewboom.org/phpinfo.php

I installed composer globally , rather than locally. Is it required to install composer locally, instead of globally?

I have this in my composer.json:

“allow-plugins”: {
“kylekatarnls/update-helper”: true
}

I didn’t create a db for october yet, but i think that’s unrelated to this error.

Here’s what i get:

$ composer create-project october/october .

PHP Warning: Module ‘fileinfo’ already loaded in Unknown on line 0

  • I assume that warning can be safely ignored

Creating a “october/october” project at “./”

Installing october/october (v1.0.476)

  • Installing october/october (v1.0.476): Extracting archive

Created project in /home/booma/october/.

Loading composer repositories with package information

Updating dependencies

Lock file operations: 99 installs, 0 updates, 0 removals

  • Locking composer/installers (v1.12.0)

  • Locking dnoegel/php-xdg-base-dir (v0.1.1)

  • Locking doctrine/annotations (1.14.3)

  • Locking doctrine/cache (1.13.0)

  • Locking doctrine/collections (1.8.0)

  • Locking doctrine/common (v2.7.3)

  • Locking doctrine/dbal (v2.5.13)

  • Locking doctrine/deprecations (1.1.3)

  • Locking doctrine/inflector (1.4.4)

  • Locking doctrine/instantiator (1.5.0)

  • Locking doctrine/lexer (1.2.3)

  • Locking egulias/email-validator (2.1.25)

  • Locking erusev/parsedown (1.7.4)

  • Locking erusev/parsedown-extra (0.8.1)

  • Locking fzaninotto/faker (v1.9.2)

  • Locking jakub-onderka/php-console-color (v0.2)

  • Locking jakub-onderka/php-console-highlighter (v0.4)

  • Locking jenssegers/date (v3.5.0)

  • Locking kriswallsmith/assetic (v1.4.0)

  • Locking kylekatarnls/update-helper (1.2.1)

  • Locking laravel/framework (v5.5.50)

  • Locking laravel/tinker (v1.0.10)

  • Locking leafo/scssphp (v0.8.4)

  • Locking league/csv (8.2.3)

  • Locking league/flysystem (1.0.70)

  • Locking linkorb/jsmin-php (1.0.0)

  • Locking meyfa/phpunit-assert-gd (v1.1.0)

  • Locking monolog/monolog (1.27.1)

  • Locking mtdowling/cron-expression (v1.2.3)

  • Locking myclabs/deep-copy (1.10.2)

  • Locking nesbot/carbon (1.39.1)

  • Locking nikic/php-parser (v4.19.1)

  • Locking october/backend (v1.0.476)

  • Locking october/cms (v1.0.476)

  • Locking october/rain (v1.0.476)

  • Locking october/system (v1.0.476)

  • Locking paragonie/random_compat (v9.99.100)

  • Locking phar-io/manifest (1.0.1)

  • Locking phar-io/version (1.0.1)

  • Locking php-parallel-lint/php-parallel-lint (v1.4.0)

  • Locking phpdocumentor/reflection-common (2.1.0)

  • Locking phpdocumentor/reflection-docblock (4.3.4)

  • Locking phpdocumentor/type-resolver (1.0.1)

  • Locking phpspec/prophecy (v1.10.3)

  • Locking phpunit/php-code-coverage (5.3.2)

  • Locking phpunit/php-file-iterator (1.4.5)

  • Locking phpunit/php-text-template (1.2.1)

  • Locking phpunit/php-timer (1.0.9)

  • Locking phpunit/php-token-stream (2.0.2)

  • Locking phpunit/phpunit (6.5.14)

  • Locking phpunit/phpunit-mock-objects (5.0.10)

  • Locking phpunit/phpunit-selenium (1.3.3)

  • Locking psr/cache (1.0.1)

  • Locking psr/container (1.0.0)

  • Locking psr/log (1.1.4)

  • Locking psr/simple-cache (1.0.1)

  • Locking psy/psysh (v0.9.12)

  • Locking ramsey/uuid (3.9.7)

  • Locking sebastian/code-unit-reverse-lookup (1.0.3)

  • Locking sebastian/comparator (2.1.3)

  • Locking sebastian/diff (2.0.1)

  • Locking sebastian/environment (3.1.0)

  • Locking sebastian/exporter (3.1.5)

  • Locking sebastian/global-state (2.0.0)

  • Locking sebastian/object-enumerator (3.0.5)

  • Locking sebastian/object-reflector (1.1.3)

  • Locking sebastian/recursion-context (3.0.2)

  • Locking sebastian/resource-operations (1.0.0)

  • Locking sebastian/version (2.0.1)

  • Locking squizlabs/php_codesniffer (3.10.1)

  • Locking swiftmailer/swiftmailer (v6.3.0)

  • Locking symfony/console (v3.4.47)

  • Locking symfony/css-selector (v4.4.44)

  • Locking symfony/debug (v3.4.47)

  • Locking symfony/event-dispatcher (v4.4.44)

  • Locking symfony/event-dispatcher-contracts (v1.10.0)

  • Locking symfony/finder (v3.4.47)

  • Locking symfony/http-foundation (v3.4.47)

  • Locking symfony/http-kernel (v3.4.49)

  • Locking symfony/polyfill-ctype (v1.29.0)

  • Locking symfony/polyfill-iconv (v1.29.0)

  • Locking symfony/polyfill-intl-idn (v1.29.0)

  • Locking symfony/polyfill-intl-normalizer (v1.29.0)

  • Locking symfony/polyfill-mbstring (v1.29.0)

  • Locking symfony/polyfill-php56 (v1.20.0)

  • Locking symfony/polyfill-php70 (v1.20.0)

  • Locking symfony/polyfill-php72 (v1.29.0)

  • Locking symfony/polyfill-php80 (v1.29.0)

  • Locking symfony/process (v3.4.47)

  • Locking symfony/routing (v3.4.47)

  • Locking symfony/translation (v4.3.11)

  • Locking symfony/translation-contracts (v1.10.0)

  • Locking symfony/var-dumper (v3.4.47)

  • Locking symfony/yaml (v3.4.47)

  • Locking theseer/tokenizer (1.1.3)

  • Locking tijsverkoyen/css-to-inline-styles (v2.2.7)

  • Locking twig/twig (v2.16.0)

  • Locking vlucas/phpdotenv (v2.6.9)

  • Locking webmozart/assert (1.9.1)

Writing lock file

Installing dependencies from lock file (including require-dev)

Package operations: 99 installs, 0 updates, 0 removals

0 [>---------------------------] 0 [>---------------------------]

Hint: To allow running the config command recommended below before dependencies are installed, run create-project with --no-install.

You can then cd into /home/booma/october, configure allow-plugins, and finally run a composer install to complete the process.

[Composer\Plugin\PluginBlockedException]

kylekatarnls/update-helper contains a Composer plugin which is blocked by your allow-plugins config. You may add it to the list if you consider it safe.

You can run “composer config --no-plugins allow-plugins.kylekatarnls/update-helper [true|false]” to enable it (true) or disable it explicitly and suppress this exception (false)

See Config - Composer

create-project [-s|–stability STABILITY] [–prefer-source] [–prefer-dist] [–prefer-install PREFER-INSTALL] [–repository REPOSITORY] [–repository-url REPOSITORY-URL] [–add-repository] [–dev] [–no-dev] [–no-custom-installers] [–no-scripts] [–no-progress] [–no-secure-http] [–keep-vcs] [–remove-vcs] [–no-install] [–ignore-platform-req IGNORE-PLATFORM-REQ] [–ignore-platform-reqs] [–ask] [–] [] [] []

Thx!

Hi @johnaweiss

Try running the command it suggests

composer config --no-plugins allow-plugins.kylekatarnls/update-helper true

This should target the location where composer is getting called from (either globally or locally). Then the warning should disappear.

But also, I noticed it is requesting October CMS v1. So it could be a good idea to update PHP to at least version 8.0 to get the latest version.

$ composer config --no-plugins allow-plugins.kylekatarnls/update-helper true

PHP Warning: Module ‘fileinfo’ already loaded in Unknown on line 0

[RuntimeException]
File “./composer.json” cannot be found in the current directory

config [-g|–global] [-e|–editor] [-a|–auth] [–unset] [-l|–list] [-f|–file FILE] [–absolute] [-j|–json] [-m|–merge] [–append] [–source] [–] [] []…

Sounds like october requires a local installation of composer, not global.

I attempted the composer “local” install.
Now the october install gives me “directory not empty” error.

Just cannot seem to install october. Would love to try it. oh well!

Try specifying a directory

composer create-project october/october myoctober