Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Visage is a web interface for viewing collectd statistics.
It also provides a JSON interface onto collectd
's RRD data,
giving you an easy way to mash up the data.
collectd
RRDsHere, have a graph:
Or check out a live demo.
N.B: Visage must be deployed on a machine where collectd
stores its stats in RRD.
On Ubuntu, to install dependencies run:
sudo apt-get install -y build-essential librrd-ruby ruby ruby-dev rubygems collectd
Then install the app with:
gem install visage-app
Visage uses yajl-ruby to work with JSON, which requires Ruby >= 1.8.6. CentOS/RHEL 5 ship with Ruby 1.8.5, so you will need to use Ruby Enterprise Edition.
Endpoint provide packages for REE and a Yum repository to ease installation.
Follow the above instructions for installing REE, and then run:
sudo yum install -y librrd-dev ruby rubygems collectd
gem install librrd
Then install the app with:
gem install visage-app
On CentOS 6, to install dependencies run:
sudo yum install -y ruby-RRDtool ruby ruby-devel rubygems collectd
Then install the app with:
gem install visage-app
Visage is not supported on Mac OS X, as RRDtool is a pain in the arse on that platform. It's highly recommended you use Vagrant to fire up an Ubuntu box to run Visage.
You can try out Visage quickly with:
visage-app start
Then paste the URL from the output into your browser.
If you get a command not found
when running the above command (RubyGems likely
isn't on your PATH), try this instead:
$(dirname $(dirname $(gem which visage-app)))/bin/visage-app start
Visage can be deployed on Apache with Passenger:
sudo apt-get install libapache2-mod-passenger
Visage can attempt to generate an Apache vhost config for use with Passenger:
visage-app genapache
<VirtualHost *>
ServerName ubuntu.localdomain
ServerAdmin root@ubuntu.localdomain
DocumentRoot /home/user/.gem/ruby/1.8/gems/visage-app-0.1.0/lib/visage-app/public
<Directory "/home/user/.gem/ruby/1.8/gems/visage-app-0.1.0/lib/visage-app/public">
Options FollowSymLinks Indexes
AllowOverride None
Order allow,deny
Allow from all
</Directory>
</VirtualHost>
Copypasta this into your system's Apache config structure and tune to taste.
To do this on Debian/Ubuntu:
sudo -s
visage-app genapache > /etc/apache2/sites-available/visage
a2ensite visage
a2dissite default
service apache2 reload
Then head to your Apache instance and Visage will be up and running.
Visage looks for two environment variables when starting up:
CONFIG_PATH
, an entry on the configuration file search pathRRDDIR
, the location of collectd's RRDsVisage has a configuration search path which can be used for overriding
individual files. By default it has one entry: $VISAGE_ROOT/lib/visage/config/
.
You can set the CONFIG_PATH
environment variable to add another directory to
the config load path. This directory will be searched when loading up
configuration files:
CONFIG_PATH=/var/lib/visage visage-app start
This is especially useful when you want to deploy + run Visage from an installed gem with Passenger. e.g.
<VirtualHost *:80>
ServerName monitoring.example.org
ServerAdmin me@example.org
SetEnv CONFIG_PATH /var/lib/visage
SetEnv RRDDIR /opt/collectd/var/lib/collectd
DocumentRoot /var/lib/gems/1.8/gems/visage-app-0.3.0/lib/visage/public
<Directory />
Options FollowSymLinks
AllowOverride None
</Directory>
LogFormat "%h %l %u %t \"%r\" %>s %b" common
CustomLog /var/log/apache2/access.log common
</VirtualHost>
Also to keep in mind when deploying with Passenger, the CONFIG_PATH
directory
and its files need to have the correct ownership:
chown nobody:nogroup -R /var/lib/visage
Check out the code with:
git clone git://github.com/auxesis/visage.git
Install the development dependencies with:
gem install bundler
bundle install
Run all cucumber features:
rake features
And run the app with:
shotgun lib/visage-app/config.ru
To create and install a new gem from the current source tree:
rake install
git commit
everything.rake build
rake push
Visage is MIT licensed.
Visage is distributed with Highcharts. Torstein Hønsi has kindly granted permission to distribute Highcharts under the GPLv2 as part of Visage.
If you ever need an excellent JavaScript charting library, please consider purchasing a commercial license for Highcharts.
FAQs
Unknown package
We found that visage-app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.