Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
@ibm-functions/shell-local-plugin
Advanced tools
An IBM Cloud Functions Shell plugin that lets users run and debug actions locally in a docker container
An IBM Cloud Functions Shell plugin that lets users run and debug actions in a local docker container. It requires Docker to be pre-installed to your machine.
First, make sure you have the latest Shell and Docker.
$ npm update -g @ibm-functions/shell
$ docker
Usage: docker COMMAND
.......
Install the plugin using Shell's plugin install
command (if you are in the Shell app, remove fsh
).
[fsh] plugin install shell-local-plugin
After installing the plugin, enter
[fsh] local
to see usage.
The plugin might need to download the Docker image for your action runtime for the first time you use it. This takes about 20 seconds but is a one-time thing.
The plugin will start a container when it is first called, and close that container when you close Shell.
This means that if you are using fsh local play/debug
from the terminal (headless mode), the container will be created when the Shell app window appears and removed when the Shell app window is closed. Starting a container takes time. You can avoid this by calling fsh local play/debug
from the terminal for the first time and keep that Shell app window opened and enter more local
commands in there.
Run an action or activation in a local docker container, and open Chrome DevTool in the sidecar for live debugging. Provide input with -p
. Return the output data.
[fsh] local debug action_name_or_activation_id [-p name value]
Run an action or activation in a local docker container. Provide input with -p
. Return the output data and execution time. This feature is useful to test how long your action runs in a docker container vs. openwhisk.
[fsh] local play action_name_or_activation_id [-p name value]
If you see an error like
Error: (HTTP code 500) server error - driver failed programming external connectivity on endpoint shell-local (21466e1d857f1d1132266a786a1498c0a5cab73a6843f7578faeb9a336451d2b): Bind for 0.0.0.0:8080 failed: port is already allocated
This is becuase some other programs occupy the ports that Shell's docker container is trying to use (port 8080 for sending docker API, and port 5858 for connecting to the debugger). To solve this, first try
docker ps -a
from the terminal. If you see a container that is using port 0.0.0.0:8080 and/or port 0.0.0.0:5858, close that container using docker kill containerName
and docker rm containerName
. Then restart Shell and run local debug
or local play
again.
If the error still exists, use
lsof -i -P -n | grep LISTEN
to see who are using the ports, and close them.
local debug
only works for nodejs actions.
The plugin cannot debug/play a sequence; you can select child action activations and debug/play them one by one.
The port numbers our Shell docker container uses are fixed (8080 and 5858). I might extend the plugin to allow specifying custom ports.
FAQs
An IBM Cloud Functions Shell plugin that lets users run and debug actions locally in a docker container
The npm package @ibm-functions/shell-local-plugin receives a total of 7 weekly downloads. As such, @ibm-functions/shell-local-plugin popularity was classified as not popular.
We found that @ibm-functions/shell-local-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.