
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
pm2 virtual-host and deploy cli
$ npm install pm2 bouncy pierrot --global
Can use $ sudo pierrot vhost if define one or more apps in ./pierrot.yml.
apps:
homepage:
repo: https://github.com/59naga/berabou.me.git
from: 59naga.localhost
to: 59798
Start the virtual host using 80 port.
$ sudo pierrot vhost
#[PM2] Spawning PM2 daemon
#[PM2] PM2 Successfully daemonized
#process name not found
#┌──────────┬────┬──────┬───────┬────────┬─────────┬────────┬─────────────┬──────────┐
#│ App name │ id │ mode │ pid │ status │ restart │ uptime │ memory │ watching │
#├──────────┼────┼──────┼───────┼────────┼─────────┼────────┼─────────────┼──────────┤
#│ VHOST │ 0 │ fork │ 85314 │ online │ 0 │ 0s │ 29.520 MB │ disabled │
#└──────────┴────┴──────┴───────┴────────┴─────────┴────────┴─────────────┴──────────┘
#
#successfully `vhost`.
#
# Please fix:
#
# $ sudo chmod -R 777 ~/.pm2
#
# See: https://github.com/Unitech/PM2/issues/837
#
$ sudo chmod -R 777 ~/.pm2
Deploy the app in local.
$ pierrot apps
? apps homepage
? task initialize
? really Yes
# apps: git clone https://github.com/59naga/berabou.me.git homepage
# apps/homepage: npm install --production
# apps/homepage: delete and start pm2 process
# process name not found
#
# homepage was successfully the `initialize`
#
# ┌──────────┬────┬──────┬───────┬────────┬─────────┬────────┬─────────────┬──────────┐
# │ App name │ id │ mode │ pid │ status │ restart │ uptime │ memory │ watching │
# ├──────────┼────┼──────┼───────┼────────┼─────────┼────────┼─────────────┼──────────┤
# │ VHOST │ 0 │ fork │ 85314 │ online │ 0 │ 3m │ 29.520 MB │ disabled │
# │ homepage │ 1 │ fork │ 85830 │ online │ 0 │ 0s │ 34.074 MB │ disabled │
# └──────────┴────┴──────┴───────┴────────┴─────────┴────────┴─────────────┴──────────┘
Becomes...
$ tree
# .
# ├── node_modules
# ├── package.json
# ├── pierrot.yml
# └── apps
# └── homepage
# ├── node_modules
# ├── package.json
# └── ...
And be available the http://59naga.localhost if Add 127.0.0.1 59naga.localhost to /etc/hosts.
Always set the production to process.env.NODE_ENV.
reloadcd apps/name && git pull).pm2 reload <apps...>)updatecd apps/name && git pull).npm install --production)pm2 reload <apps...>)deleteAndStartpm2 delete <apps...>)pm2 start <apps...>)initializeapps/repo. (eg rm -rf <apps/name>)apps/repo as apps/name. (eg git clone apps/repoValue apps/name)cd apps/name && npm install --production)pierrot.yml. (eg pm2 start <apps...>)302 redirectVHOST sends the Location header in the 302 if specify app/to as string.
oldSite:
from: oldsite.example.com
to: renewal.example.com
pm2 reload VHOST
# ...
curl oldsite.example.com/foo/bar?baz --head
# HTTP/1.1 302 Found
# Location: http://renewal.example.com/foo/bar?baz
# Date: Mon, 02 Nov 2015 03:36:34 GMT
# Connection: keep-alive
httpsDefine key and cert fields to ./pierrot.yml.
Becomes add the port 443(secure mode) at pierrot vhost.
key: /path/to/private.key
cert: /path/to/public.cert
apps:
homepage:
repo: https://github.com/59naga/berabou.me.git
from: 59naga.localhost
to: 59798
$ sudo pierrot vhost
$ pm2 logs VHOST
# PIERROT_VHOST listening at http://localhost:80/
# PIERROT_VHOST listening at http://localhost:443/
FAQs
pm2 bouncy plugin
The npm package pierrot receives a total of 3 weekly downloads. As such, pierrot popularity was classified as not popular.
We found that pierrot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.