
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Rails generators, Rake tasks, and support modules to run dependencies in Docker containers.
Originally written as a drop-in replacement for solr_wrapper
and fcrepo_wrapper
to ease development and testing of Samvera applications, but with an eye toward adding support for additional services.
Docker::Stack
depends on Docker for container virtualization. Before using this gem to start or manage support services, please download and install the Docker Community Edition.
Add this line to your application's Gemfile:
gem 'docker-stack'
And then execute:
$ bundle
Or install it yourself as:
$ gem install docker-stack
From your application root, run:
$ rails generate docker:stack:install
This creates the Docker configuration files for the development and test environments, and adds lib/tasks/docker.rake
to provide the Docker-related rake tasks to your application.
Then run the service generator for each support service your application needs:
$ rails generate docker:stack:service:fedora
$ rails generate docker:stack:service:solr
This will create the Docker service definitions for Fedora and Solr and drop the appropriate configuration files to point to them in the config
directory. The Solr generator also creates a solr
directory containing default core configuration files.
To do all of the above with one command, you can run:
$ rails generate docker:stack:install --services fedora,solr
Docker::Stack
defines a bunch of rake tasks to control the Docker services (and sometimes do other things). These are defined in your application in lib/tasks/docker.rake
, and can be customized according to your application's needs. The following descriptions apply to the default tasks installed by the docker:stack:install
generator.
Every docker:dev
task is also available as a docker:test
task. The gem forwards different ports to the host in development and test modes, so both stacks can be running at once. The only difference between the two is that the test stack cleans up after itself automatically when it terminates, while the development stack keeps its data around.
$ rake docker:dev:up
The required Docker machine images will be downloaded and registered the first time you run this command. Subsequent runs will be much faster.
$ rake docker:dev:daemon
Even if they're running in the foreground in another tab!
$ rake docker:dev:down
$ rake docker:dev:status
$ rake docker:dev:clean
$ rake docker:dev:logs
Similar to tail -f
on a file.
Add a SERVICES
variable to display only specific services' logs (e.g., rake docker:dev:logs SERVICES=fedora
)
$ rake docker:dev:reset
AKA "The Nuclear Option." Removes all containers, data, and machine images associated with this stack. This will result in Docker images being re-downloaded and initialized the next time you spin things up.
$ rake docker:spec
db:setup
taskspec
or rspec
or matching the value of the SPEC_TASK
environment variableBug reports and pull requests are welcome on GitHub at https://github.com/mbklein/docker-stack.
The gem is available as open source under the terms of the Apache 2.0 License.
FAQs
Unknown package
We found that docker-stack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.