Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
This CLI tool sets up the Hawkular Services together with couple of servers to monitor.
Simple CLI tool that spawns linked docker containers with Hawkular and some monitored stuff.
This simple CLI tool helps you with starting the hawkular-services together with some monitored WildFly servers. Internally, it uses the docker-compose tool and exposes the service on localhost:8080
.
$ sudo npm install hawkinit -g
$ hawkinit
Choose the versions of hawkular-services
, Cassandra and instrumented WildFly server you want to start, number of containers or if you want to run WF in standalone mode or in a managed domain. For the domain mode couple of scenarios are prepared. Once every question is answered, you should start seeing the logs from particular containers. Congrats, your hawkular-service is up and running on http://localhost:8080
.
For more help:
$ hawkinit -h
The hawkinit
assumes the docker
and docker-compose
to be installed, Docker version should be higher than 1.12.0
and also the user that runs the command should be in the docker
group.
sudo usermod -a -G docker `whoami`
Add yourself to that group for current session (or logout and log in).
newgrp docker
Make sure the docker deamon is up and running.
sudo systemctl enable docker --now
Make sure the /tmp/opt/data
is created and owned by user with UID = 1000
.
Running following command as non-root (as user with UID=1000
) should work.
mkdir -p /tmp/opt/data/ && sudo chown -R $UID:$UID /tmp/opt/data/
On Fedora 24 the Docker that is in the default yum repo is obsolete, so remove it and install the docker-engine package from the yum.dockerproject.org repo.
sudo dnf remove docker
and follow these instructions https://docs.docker.com/engine/installation/linux/fedora/
sudo apt-get install docker.io docker-compose
Hawkinit is a regular npm package so all is needed is
sudo npm update hawkinit -g
If you run the hawkinit, it says something like:
Later, you can find your hawkular-services listening on http://localhost:8080
Running 'docker-compose up --force-recreate' in directory: /tmp/tmp-11573k3ujXFLACh9z
If you navigate to /tmp/tmp-11573k3ujXFLACh9z
, you can run docker-dompose up
to start it again. This is not a standard use-case, though. Any other docker-compose
command works just fine. So for instance you may want to see only the Cassandra logs by docker-compose logs -f myCassandra
or inspecting the Hawkular Services container by docker-compose exec hawkular /bin/bash
, etc. Also, nothing protects you from editing the docker-compose.yaml
file that was created in that tmp directory.
FAQs
This CLI tool sets up the Hawkular Services together with couple of servers to monitor.
The npm package hawkinit receives a total of 1 weekly downloads. As such, hawkinit popularity was classified as not popular.
We found that hawkinit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.