
Security News
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.
dockeridoo
Advanced tools


The "easiest" way to run docker images as cli tools.
I wanted to create an simple tool to run as a cli tool. The main problem was, that I ran my tool on ARM architecture and wanted to run it on x86 as well. The cross compilation was quite straight forward, with the docker cli:
docker buildx build --platform linux/amd64,linux/arm64 ...
The main problem was, that I wanted other people to use my tool and the default way to run a docker image requires the following steps:
This is quite a lot of steps for a simple cli tool. Thats why I created this tool to run docker images with as little friction as possible.
# npm
npm i -g dockeridoo
dodoo [image name]
# for example
dodoo fa7k/create-cards
Dockerfile:
FROM alpine:3.19 # choose a base image (preferably small)
# do whatever you want here
# These 2 lines are important to make the image work with Dockeridoo.
# The directory you started Dockeridoo will be supplied as the volume /workdir
# This way files from the host system can be accessed inside the container
VOLUME /workdir
WORKDIR /workdir
ENTRYPOINT ["your_cli_tool.sh"]
If you want your cli tool to be compatible across achitectures, you can use the following command to build your image:
docker buildx build --platform linux/amd64,linux/arm64 -t your_image_name .
Hint: make sure your base image was also built for multiple architectures 😉
FAQs

The npm package dockeridoo receives a total of 10 weekly downloads. As such, dockeridoo popularity was classified as not popular.
We found that dockeridoo demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

Research
Five malicious NuGet packages impersonate Chinese .NET libraries to deploy a stealer targeting browser credentials, crypto wallets, SSH keys, and local files.

Security News
pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.