docked-node
Easily run your node app in a docker image (with npm installs).
Ever worried about the security of the npm ecosystem? The danger is real.
A dependency you install from npm may contain malicious code that can run with your application. When you run your app locally with node, that code may have full access to your local environment variables, filesystem, etc.
Even just installing a script via npm can have dangerous side effects. Straight from the horse's mouth (source):
it is possible for a maliciously-written npm package, when installed, to execute a script.
Things are even more dangerous with the prevalence of npx, which encourages immediate execution of unknown code on your local machine. docked-node also supports running npx inside the container (see below).
Solution
Runs your node app inside an automatically-built Docker image that installs your npm dependencies.
No need for a custom Dockerfile in your project - one will be generated for you at runtime.
To run the main script in your package.json:
$ docked-node
Building docker image...
Sending build context to Docker daemon 8.704kB
Step 1/6 : FROM node
---> f9cd651d1eb3
Step 2/6 : WORKDIR /app
---> Using cache
---> 3a73e7f353f3
Step 3/6 : COPY . .
---> 08b5fb086f42
Step 4/6 : RUN npm install
---> Running in a39e6485e678
npm WARN [email protected] No description
npm WARN [email protected] No repository field.
added 50 packages from 62 contributors and audited 65 packages in 3.566s
found 0 vulnerabilities
Removing intermediate container a39e6485e678
---> 8364057ca695
Step 5/6 : COPY . .
---> 6e3caf16d10d
Step 6/6 : CMD node .
---> Running in e8f7cc115bb3
Removing intermediate container e8f7cc115bb3
---> 34c6f9f39dfc
Successfully built 34c6f9f39dfc
Running node inside docker container sha256:34c6f9f39dfcfc8543f80426fc88ed16220e59102d3e7b27e839fbffbb899908...
hello from your node scriptIt spits out messages and the docker build output to stderr so that your script's stdout is not affected.
You can define a custom pre-script which will run after install but before executing node
via a DOCKED_NODE_PRE environment variable:
$ DOCKED_NODE_PRE="npm run build" docked-nodeDue to Docker's caching, npm install will only happen when your package.json file changes,
and your custom pre-script will only run when its source or the project files change.
Non-main scripts
To run a script other than main, specify the path:
$ docked-node other.js
Building docker image...
Sending build context to Docker daemon 8.704kB
Step 1/8 : FROM node
---> f9cd651d1eb3
Step 2/8 : WORKDIR /app
---> Using cache
---> 3a73e7f353f3
Step 3/8 : COPY package.json .
---> Using cache
---> 16629c2e9d13
Step 4/8 : RUN npm install
---> Using cache
---> ee840247f109
Step 5/8 : RUN mv node_modules /
---> Using cache
---> 4ff93bf5f7db
Step 6/8 : COPY . .
---> Using cache
---> 65fe2fc3f87d
Step 7/8 : RUN npm run build || true
---> Using cache
---> d0cea558683e
Step 8/8 : CMD node .
---> Using cache
---> 9da0b876ca10
Successfully built 9da0b876ca10
Running node inside docker container sha256:9da0b876ca10beb921db58781b4af8ef6b7c4d44a38d69d184bb393bb409bbed...
hey there from another node scriptnpx
We'll mount local files into the container then run npx:
$ docked-node npx cowsay moo
Building docker image...
Sending build context to Docker daemon 834.6kB
Step 1/7 : FROM node
---> f9cd651d1eb3
Step 2/7 : WORKDIR /app
---> Using cache
---> 3a73e7f353f3
Step 3/7 : COPY package.json .
---> Using cache
---> a07e756d7b4b
Step 4/7 : RUN npm install
---> Using cache
---> 7b5a0dc2a62e
Step 5/7 : RUN mv node_modules /
---> Using cache
---> 4ffee8a6a167
Step 6/7 : COPY . .
---> Using cache
---> b6f9cf2e881d
Step 7/7 : CMD node .
---> Using cache
---> 05d0c86bbb12
Successfully built 05d0c86bbb12
Running node inside docker container sha256:05d0c86bbb128ed7419e752af7c15ec356c40b8753d6f2c0418283e2e9412b70...
npx: installed 10 in 2.291s
_____
< moo >
-----
\ ^__^
\ (oo)\_______
(__)\ )\/\
||----w |
|| ||.dockerignore
You can still use a custom .dockerignore
to control which file changes should cause a re-build.
Custom Docker image
To use a custom Docker base image (default node latest),
you can set environment variable DOCKED_NODE_IMAGE:
$ DOCKED_NODE_IMAGE="node:8" docked-node$ DOCKED_NODE_IMAGE="node:alpine" docked-nodeInstall
For zsh, in your .zshrc:
export FPATH="path/to/docked-node/zfuncs:$FPATH"
autoload docked-nodeFor bash, in your .bashrc:
source "path/to/docked-node/bash.sh"
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent