Unable to install icecast

I’m unable to install icecast on my machine, it fails always with the following error message:

/var/cache/private/pamac/libigloo/PKGBUILD: Zeile 16: ./configure: Keine Berechtigung (no permission)

I used the following command for the installation:

pamac build icecast

I did not find another way on the net.

I removed all the content of /var/cache/, but without success.

Mod edit: Improved formatting: Replaced single quotes with backticks `. :wink:

That’s not where your Pamac cache should be. It’s /var/tmp/pamac-build-<username>/ by default.

Are you sure you didn’t run that command with sudo? Never do that.

Either way, I’ve just built libigloo (icecast dependency) in a clean chroot with no issues.

The problem seems to be permission related, but did you try to build it manually or with other aur helper?

sudo pacman -Syu
yay -S icecast

Tank you with 100 time pressing enter, I was able to compile and install it, but I was not able to install a relying with nginx as reverse proxy since the radio station is using https:// and icecast is unable to handle that. I found on the net a proposed configuration for nginx and icecast, but this wasn’t working:

nginxstream {
    upstream remote_stream {
        server ://example.com; # Remote HTTPS host and port
    }

    server {
        listen 8080; # Local unencrypted port Icecast will connect to
        proxy_pass remote_stream;
    }
}

Step 2: Configure Icecast to Relay the Stream
Once your proxy is running, edit your icecast.xml file (located in /etc/icecast2/icecast.xml or /usr/local/etc/icecast.xml). Define the relay to point to your local Nginx proxy ports:

xml
<relay>
    <server>127.0.0.1</server>
    <port>8080</port>
    <mount>/remote_mount_point</mount>
    <local-mount>/your_local_mount</local-mount>
    <on-demand>0</on-demand>
    <relay-shoutcast-metadata>0</relay-shoutcast-metadata>
</relay>`

The address to the radio stream is as follows:(https://stream.radio1.ch/128k)

1 Like

It works!

Thank you for your answer. But what works? On my computer no success at all. I used journalctl -f in the hope to get get some error messages, that can help, but there were none.
One more thing is the confusion about the name of the nginx configuration file, some sites propose this name here:

/etc/nginx/sites-enabled/reverse-proxy.conf

some with this name:

/etc/nginx/sites-available/stream-proxy.conf

Can you please post me the whole configuration (files) you have done to get it to work?

My configuration files are here:

(stream-proxy.conf)

stream {
    upstream remote_stream {
        server https://stream.radio1.ch/128k; # Remote HTTPS host and port
    }

    server {
        listen 8080; # Local unencrypted port Icecast will connect to
        proxy_pass remote_stream;
    }
}

(icecast.xml)

<?xml version="1.0"?>
<icecast>
    <!-- IMPORTANT!
         Especially for inexperienced users:
         Start out by ONLY changing all passwords and restarting Icecast.
         For detailed setup instructions please refer to the documentation.
         It's also available here: http://icecast.org/docs/
    -->

    <!-- location and admin are two strings that are e.g. visible
         on the server info page of the icecast web interface -->
    <location>Earth</location>
    <!-- If you are listing streams on a YP, this MUST be a working email! -->
    <admin>icemaster@localhost</admin>
    <!-- This is the hostname other people will use to connect to your server.
         It affects mainly the urls generated by Icecast for playlists and YP
         listings. You MUST configure it properly for YP listings to work!
         This is NOT your homepage address, it's the hostname for THIS server.
    -->
    <hostname>localhost</hostname>

    <limits>
        <!-- Global maximum number of clients.
             This includes all kinds of clients, not only listeners.
        -->
        <clients>100</clients>
        <sources>2</sources>
        <queue-size>524288</queue-size>
        <client-timeout>30</client-timeout>
        <header-timeout>15</header-timeout>
        <source-timeout>10</source-timeout>
        <!-- This sets the burst size in [bytes]. This is the amount the
             the server sends to a listener that connects to a stream.
             This allows for a significantly reducing in startup time.
             Most people won't need to change from the default 64k.
             Applies to all mountpoints.
        -->
        <burst-size>65535</burst-size>
    </limits>

    <authentication>
        <!-- Sources log in with username 'source' -->
        <source-password>hackme</source-password>
        <!-- Relays log in with username 'relay' -->
        <relay-password>hackme</relay-password>

        <!-- Admin logs in with the username given below -->
        <admin-user>admin</admin-user>
        <admin-password>hackme</admin-password>
    </authentication>

    <!-- set the mountpoint for a shoutcast source to use, the default if not
         specified is to have none.
    <shoutcast-mount>/live.nsv</shoutcast-mount>
    -->

    <!-- Uncommenting this enables publishing to the streaming directory at:
         https://dir.xiph.org/
         Please read the Icecast documentation about publishing to directories
         very carefully, as it is not enough to just uncomment this.
    -->
    <!--
    <yp-directory url="https://dir.xiph.org/cgi-bin/yp-cgi">
        <option name="timeout" value="15" />
    </yp-directory>
    -->

    <!-- You may have multiple <listen-socket> elements -->
    <listen-socket>
        <port>8000</port>
        <!-- <bind-address>127.0.0.1</bind-address> -->
        <!-- <shoutcast-mount>/stream</shoutcast-mount> -->
    </listen-socket>
    <!--
    <listen-socket>
        <port>8080</port>
    </listen-socket>
    -->
    <!--
    <listen-socket>
        <port>8443</port>
        <tls>auto_no_plain</tls>
    </listen-socket>
    -->
    <relay>
        <server>127.0.0.1</server>
        <port>8080</port>
        <mount>/128k</mount>
        <local-mount>/stream</local-mount>
        <on-demand>0</on-demand>
        <relay-shoutcast-metadata>1</relay-shoutcast-metadata>
    </relay>

    <!-- Global header settings
         Headers defined here will be returned for every HTTP request to Icecast.

         The ACAO header makes Icecast public content/API by default
         This will make streams easier embeddable (some HTML5 functionality needs it).
         Also it allows direct access to e.g. /status-json.xsl from other sites.
         If you don't want this, comment out the following line or read up on CORS.
    -->
    <http-headers>
        <header type="cors" name="Access-Control-Allow-Origin" />
        <header type="cors" name="Access-Control-Allow-Headers" />
        <header type="cors" name="Access-Control-Expose-Headers" />
    </http-headers>


    <!-- Relaying
         You don't need this if you only have one server.
         Please refer to the documentation for a detailed explanation.
    -->
    <!--
    <master-server>127.0.0.1</master-server>
    <master-server-port>8001</master-server-port>
    <master-update-interval>120</master-update-interval>
    <master-password>hackme</master-password>
    -->

    <!-- Setting this makes all relays on-demand unless overridden, this is
         useful for master relays which do not have <relay> definitions here.
         The default is false -->
    <!--<relays-on-demand>true</relays-on-demand>-->

    <!-- Basic relay with one upstream server -->
    <!--
    <relay>
        <local-mount>/different.ogg</local-mount>
        <on-demand>false</on-demand>

        <upstream type="normal">
            <uri>http://localhost:8080/example.ogg</uri>
            <relay-shoutcast-metadata>false</relay-shoutcast-metadata>
        </upstream>
    </relay>
    -->

    <!-- Relay with multiple upstream servers and default settings -->
    <!--
    <relay>
        <local-mount>/different.ogg</local-mount>
        <on-demand>false</on-demand>

        <upstream type="normal">
            <server>master0.example.org</server>
        </upstream>
        <upstream type="normal">
            <server>master1.example.org</server>
        </upstream>
        <upstream type="normal">
            <server>master2.example.org</server>
            <port>8080</port>
        </upstream>
        <upstream type="default">
            <port>8000</port>
            <mount>/example.ogg</mount>
        </upstream>
    </relay>
    -->

    <!-- Mountpoints
         Only define <mount> sections if you want to use advanced options,
         like alternative usernames or passwords
         All <mount> sections below are disabled by default,
         to activate them remove the comment markers around them and reload.
    -->

    <!-- Default settings for all mounts that don't have a specific <mount type="normal">.
    -->
    <!--
    <mount type="default">
        <public>false</public>
        <intro>/server-wide-intro.ogg</intro>
        <max-listener-duration>3600</max-listener-duration>
        <authentication>
            <role type="url" match-method="source,put" allow-web="*" allow-admin="*">
                <option name="client_add" value="http://auth.example.org/stream_start.php"/>
            </role>
            <role type="anonymous" match-method="source,put" deny-all="*" />
        </authentication>
        <http-headers>
                <header name="foo" value="bar" />
        </http-headers>
    </mount>
    -->

    <!-- Normal mounts -->
    <!--
    <mount type="normal">
        <mount-name>/example-complex.ogg</mount-name>

        <max-listeners>1</max-listeners>
        <dump-file>/tmp/dump-example1.ogg</dump-file>
        <burst-size>65536</burst-size>
        <fallback-mount>/example2.ogg</fallback-mount>
        <fallback-override>true</fallback-override>
        <fallback-when-full>true</fallback-when-full>
        <intro>/example_intro.ogg</intro>
        <hidden>true</hidden>
        <public>true</public>
        <authentication>
            <role type="htpasswd" connections-per-user="1">
                <option name="filename" value="myauth" />
            </role>
            <role type="static" allow-method="source,put,get,post,options" deny-web="*" allow-admin="*">
                <option name="username" value="othersource" />
                <option name="passwod" value="hackmemore" />
            </role>
            <role type="anonymous" deny-all="*" />
        </authentication>
        <http-headers>
                <header type="cors" name="Access-Control-Allow-Origin" value="http://webplayer.example.org" />
                <header name="baz" value="quux" />
        </http-headers>

        <event-bindings>
            <event type="exec" trigger="source-connect">
                <option name="executable" value="/home/icecast/bin/stream-start" />
            </event>
            <event type="exec" trigger="source-disconnect">
                <option name="executable" value="/home/icecast/bin/stream-stop" />
            </event>
        </event-bindings>
    </mount>
    -->

    <!--
    <mount type="normal">
        <mount-name>/auth_example.ogg</mount-name>
        <authentication>
            <role type="url" match-method="get,post,head,options" allow-web="*" deny-admin="*" may-alter="send_error,redirect">
                <option name="client_add"       value="http://myauthserver.net/notify_listener.php"/>
                <option name="client_remove"    value="http://myauthserver.net/notify_listener.php"/>
                <option name="action_add"       value="listener_add"/>
                <option name="action_remove"    value="listener_remove"/>
                <option name="headers"          value="app-pragma,cdn-token"/>
                <option name="header_prefix"    value="ClientHeader."/>
            </role>
            <role type="anonymous" match-method="get,post,head,options" deny-all="*" />
        </authentication>
        <event-bindings>
            <event type="url" trigger="source-connect">
                <option name="url" value="http://myauthserver.net/notify_mount.php" />
                <option name="action" value="mount_add" />
            </event>
            <event type="url" trigger="source-disconnect">
                <option name="url" value="http://myauthserver.net/notify_mount.php" />
                <option name="action" value="mount_remove" />
            </event>
        </event-bindings>
    </mount>
    -->

    <!-- Relays can also go into a <mount type="normal"> section -->
    <!--
    <mount type="normal">
        <mount-name>/relay_example.ogg</mount-name>
        <relay>
            <upstream type="normal">
                <uri>http://master0.example.org:8000/example.ogg</uri>
            </upstream>
        </relay>
    </mount>
    -->

    <paths>
        <!-- basedir is only used if chroot is enabled -->
        <basedir>/usr/share/icecast</basedir>

        <!-- Note that if <chroot> is turned on below, these paths must all
             be relative to the new root, not the original root -->
        <logdir>/var/log/icecast</logdir>
        <webroot>/usr/share/icecast/web</webroot>
        <adminroot>/usr/share/icecast/admin</adminroot>
        <reportxmldb>/usr/share/icecast/report-db.xml</reportxmldb>
        <!-- <pidfile>/usr/share/icecast/icecast.pid</pidfile> -->

        <!-- Aliases: treat requests for 'source' path as being for 'dest' path
             May be made specific to a port or bound address using the "port"
             and "bind-address" attributes.
          -->
        <!--
        <alias source="/foo" destination="/bar"/>
        -->
        <!-- Aliases: can also be used for simple redirections as well,
             this example will redirect all requests for http://server:port/ to
             the status page
        -->
        <alias source="/" destination="/status.xsl"/>
    </paths>

    <logging>
        <accesslog>access.log</accesslog>
        <errorlog>error.log</errorlog>
        <!-- <playlistlog>playlist.log</playlistlog> -->
        <loglevel>information</loglevel> <!-- "debug", "information", "warning", or "error" -->
        <logsize>10000</logsize> <!-- Max size of a logfile -->
        <!-- If logarchive is enabled (1), then when logsize is reached
             the logfile will be moved to [error|access|playlist].log.DATESTAMP,
             otherwise it will be moved to [error|access|playlist].log.old.
             Default is non-archive mode (i.e. overwrite)
        -->
        <!-- <logarchive>true</logarchive> -->
    </logging>

    <security>
        <chroot>false</chroot>
        <!--
        <changeowner>
            <user>nobody</user>
            <group>nogroup</group>
        </changeowner>
        -->

        <tls-context>
            <!-- The certificate file containng public and optionally private key.
                Must be PEM encoded.
                <tls-certificate>/usr/share/icecast/icecast.pem</tls-certificate>
            -->
            <!-- The private key if not contained in <tls-certificate>.
                Must be PEM encoded.
                <tls-key>/usr/share/icecast/icecast.key</tls-key>
            -->
        </tls-context>

        <!-- It is generally helpful to set a PRNG seed, what seed to set depends on your OS. -->
        <!-- Useful on all operating systems is a seed file for Icecast to update.
             This should be at some location that is (semi-)permanent such as /var/lib or /var/cache
             A size of 1024 [byte] is suggested.
             The file can be shared with trusted applications (other instances of Icecast).
             But should be protected against read and write access by untrusted applications.
        <prng-seed type="read-write" size="1024">/path/to/storage/icecast.prng-seed</prng-seed>
        -->
        <!-- A profile includes common sources of entropy therefore provides a good way to
             seed the PRNG.
             Currently defined profiles are: bsd, linux.
             The bsd profile expects /dev/urandom to be readable.
             The linux profile includes the bsd profile but adds linux specific interfaces (such as /proc).
        <prng-seed type="profile">linux</prng-seed>
        -->
        <!-- If your OS provides a urandom style device and there is no profile for your OS you can
             provide a custom device name.
             The size parameter defines how many bytes are read per (re)seeding. The optimal setting
             depends on the quality of your device, a general good default is 32 [byte].
        <prng-seed type="device" size="32">/dev/urandom</prng-seed>
        -->
        <!-- If none of above is available on your OS you can add a static seed.
             This is by far not as secure as the above.
             The value should be at least 64 characters long if from [a-zA-Z0-9].
             You MUST keep this parameter secret. It MUST NOT be shared with other instances.
             You SHOULD change this parameter often.
        <prng-seed type="static">U4V5etZF...</prng-seed>
        -->

    </security>
</icecast>

One more question: is it possible to post here text files (mostly configuration files) as attachment?

For a better understanding, here what I like to do:
I hear often web radio, a swiss german sender, I use Strawberry as music player because I can have in this player a playlist to which when they on the radio something that I don’t want to hear. Later I switch back to radio. When I used the web stream from the sender (https://stream.radio1.ch/128k), I have to hear one minute of ads because the connection between my computer is newly established. As this is annoying, I was searching for another solution. I found one with the vlc-server (Videolan) which streams this radio station the whole day, i can connect to this stream at any time without ads. When I don’t use this stream, it just streams to nowhere. The only problem I have, is that vlc is not forwarding the metadata (ID3-Tags) to the stream, which means, that I don’t see title and artist in the Strawberry playlist, when I use the VLC-Player, it is the same. FFMPEG offers a similar streaming server functionality, but the problem is here the same. Here my command for using cvlc as streaming server:

cvlc https://stream.radio1.ch/128k --sout='#std{access=http,mux=mp3,dst=:8080/stream.mp3}' --sout-all --sout-keep --http-reconnect --meta-title='Relayed Radio'

So far I know, respectively found out in the internet, passing metadata is officially not supported by vlc. FFMPEG has so far I know the same problem, the bigger problem with FFMPEG is, that http output is not possible, the support only udp and some other protocols that Strawberry cannot handle. VLC can do it, but is very good video player, but for my demand not useful als (completely integrated) music player.
Thanks for your help.

I meant https://stream.radio1.ch/128k works, i can listen to it. I thought this is your site/station which you stream (because icecast is a server). I have misunderstood it seems.

My times of streaming amateur radio are 20 years over..i did it with some winamp plugin at that time.

P.s. now on manjaro, as a client, i use audacious, on stations that support it it shows the names of the songs.

I like the “Advanced Radio Player” widget on the panel. Simple and does the job.

When I steam directly into VLC or Strawberry, I see the ID3-infos. The reason that I want to do it with a relay is to avoid this annoying ads (1 minute of washing powder and other useless things) after each reconnect (because I’ve switched back for a while to my personal playlist when they played junk like Falco, Fanta4, etc, etc… that make me angry…)

One solution that also not work I found this morning. I use FFMPEG to feed Icecast, since Icecast is not able to deal with https. In the command line I see all meta information, but these information were not passed to the media player (Strawberry, shows all information when I use the direct link to the radio station “http://stream.radio1.ch/128k”). Here the command:

[type or paste code here](http://stream.radio1.ch/128k)

And here the information I see in the Konsole window:

Input #0, mp3, from 'http://stream.radio1.ch/128k':
  Metadata:
    icy-br          : 128
    icy-pub         : 1
    icy-description : Radio 1
    icy-audio-info  : bitrate=128
    icy-url         : http://radio-in.netconnect.ch/128k
    icy-genre       : Pop / Rock
    icy-name        : Radio 1
    StreamTitle     : Your Body Is A Wonderland (2002) - John Mayer
  Duration: N/A, start: 0.000000, bitrate: 128 kb/s
  Stream #0:0: Audio: mp3 (mp3float), 44100 Hz, stereo, fltp, 128 kb/s
Stream mapping:
  Stream #0:0 -> #0:0 (copy)

Then i am sorry i have no experience with audio ads in the streams. I know for spotify there are a lot of solutions of that problem (me personally i use premium because i want to use offline) but for online radios i have no idea.

Aaaah, nö nö nö. One can have his own musical taste and preferences, but Falco was “halb Mensch, halb Koks”. About 40 kilos of Cocaine has to be worth something. :stuck_out_tongue_winking_eye:
For me personally the other half (the singing one) was more important but hey, to each his own.

About Falco: Da war nicht nur Koks sondern auch Feuerwasser…

Icecast and Ezstream are in my opion almost impossible to configure, especially that ezstream needs a patch to work with mp3 (this means compile by hand). Is there any useful (and less complicated) alternative for making a web radio relay server. Not something bloated which can be used for configuring a complete multimedia server (audio, movies, pictures, etc.), something lightweight, that just does what it should. And it should be OSS, not commercial with a half version for free and a full version for USD 50.–.

Thanks in advance.