Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Read this in English.
~/.ssh
和 ~/.gitconfig
1. 安装dockerlab
用pip安装dockerlab:
pip install dockerlab
或者从源码安装最新版本:
pip install git+https://github.com/hughplay/dockerlab.git
2. 设置dockerlab项目
创建一个新的dockerlab项目:
dockerlab new <project_name>
或者为现有项目初始化一个dockerlab环境:
dockerlab init .
这将设置一些文件和目录,其结构如下:
.
├── docker/
│ ├── Dockerfile
│ └── misc/
├── docker-compose.yml
├── docker.py
├── Makefile
└── .gitignore
3. 自定义工作环境
通常情况下,只需要修改docker/Dockerfile
文件来自定义自己的工作环境。可能关心的文件:
docker/Dockerfile
: 用于构建docker镜像的dockerfile。docker-compose.yml
: 用于构建docker容器的docker-compose文件。docker.py
: 用于构建和启动容器的python脚本。Makefile
: 基于make的便捷命令定义。dockerlab准备了几个模板和预构建的docker镜像。可以通过运行以下命令将默认的docker/Dockerfile
替换为需要的模板:
dockerlab use <template_name>
可用的模板可以通过 dockerlab ls
列出,每个模板的详细信息可以在dockerlab/templates找到。
默认情况下,生成的docker/Dockerfile
将使用预构建的docker镜像(如果存在)。也可以通过运行以下命令获取完整的dockerfile:
dockerlab use <template_name> --full
4. 构建和启动容器
make init
当你第一次执行上述命令时,它将要求你输入与容器相关的信息,并将它们存储在.env
中。提示和输出示例如下:
# prompts
Give a project name [dockerlab]: dockerlab
Code root to be mounted at /project [.]:
Data root to be mounted at /data [data]:
`/home/hongxin/code/dockerlab/data` does not exist in your machine. Create? [yes]:
Log root to be mounted at /log [log]:
`/home/hongxin/code/dockerlab/log` does not exist in your machine. Create? [yes]:
directory to be mounted to hongxin [./docker/misc/container_home]:
`/home/hongxin/code/dockerlab/container_home` does not exist in your machine. Create? [yes]:
# output
Your setting (.env):
UID: 1000
GID: 1000
USER_NAME: hongxin
PROJECT: dockerlab
CODE_ROOT: .
DATA_ROOT: /home/hongxin/code/dockerlab/data
LOG_ROOT: /home/hongxin/code/dockerlab/log
CONTAINER_HOME: /home/hongxin/code/dockerlab/container_home
COMPOSE_PROJECT_NAME: dockerlab_hongxin
5. 进入容器开启旅程
make in
docker build \
-f dockerlab/templates/workspace_protein/Dockerfile \
-t deepbase/dockerlab:workspace_protein \
.
Dockerlab使用MIT许可证。
FAQs
Build a docker container as your workspace.
We found that dockerlab demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.