tesla_lee (tesla_lee)

[求助] Capistrano Rails 6.0 ，yarn install 到 [4/4] Building fresh packages... 这一步总是很慢

tesla_lee — Fri, 27 Dec 2019 13:47:54 +0800

奔溃了，每次都是在这个地方执行很久，取消几次重新发布后，可能又正常额，就在刚才，等了一个小时也没有继续往下执行，下面是相关的日志。

** Execute deploy:updated
** Invoke deploy:compile_assets (first_time)
** Invoke deploy:set_rails_env
** Execute deploy:compile_assets
** Invoke deploy:assets:precompile (first_time)
** Execute deploy:assets:precompile
00:13 deploy:assets:precompile
      01 RBENV_ROOT=$HOME/.rbenv RBENV_VERSION=2.6.5 $HOME/.rbenv/bin/rbenv exec bundle exec rake assets:precompile
      01 yarn install v1.9.4
      01 [1/4] Resolving packages...
      01 [2/4] Fetching packages...
      01 (node:2881) [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from()…
      01 info fsevents@1.2.9: The platform "linux" is incompatible with this module.
      01 info "fsevents@1.2.9" is an optional dependency and failed compatibility check. Excluding it from installation.
      01 [3/4] Linking dependencies...
      01 warning " > webpack-dev-server@3.9.0" has unmet peer dependency "webpack@^4.0.0".
      01 warning "webpack-dev-server > webpack-dev-middleware@3.7.2" has unmet peer dependency "webpack@^4.0.0".
      01 [4/4] Building fresh packages...
      01 Done in 170.88s.
      01 yarn install v1.9.4
      01 [1/4] Resolving packages...
      01 [2/4] Fetching packages...
      01 (node:2965) [DEP0005] DeprecationWarning: Buffer() is deprecated due to security and usability issues. Please use the Buffer.alloc(), Buffer.allocUnsafe(), or Buffer.from()…
      01 info fsevents@1.2.9: The platform "linux" is incompatible with this module.
      01 info "fsevents@1.2.9" is an optional dependency and failed compatibility check. Excluding it from installation.
      01 [3/4] Linking dependencies...
      01 warning " > webpack-dev-server@3.9.0" has unmet peer dependency "webpack@^4.0.0".
      01 warning "webpack-dev-server > webpack-dev-middleware@3.7.2" has unmet peer dependency "webpack@^4.0.0".
      01 [4/4] Building fresh packages...

在 RubyGems 中发现多个漏洞 [ Multiple vulnerabilities in RubyGems ]。

tesla_lee — Wed, 30 Aug 2017 15:42:20 +0800

以下是官方播客文章：原文链接

There are multiple vulnerabilities in RubyGems bundled by Ruby. It is reported at the official blog of RubyGems.

Details

The following vulnerabilities have been reported.

a DNS request hijacking vulnerability
an ANSI escape sequence vulnerability
a DoS vulernerability in the query command
a vulnerability in the gem installer that allowed a malicious gem to overwrite arbitrary files

It is strongly recommended for Ruby users to take one of the following workarounds as soon as possible.

Affected Versions

Ruby 2.2 series: 2.2.7 and earlier
Ruby 2.3 series: 2.3.4 and earlier
Ruby 2.4 series: 2.4.1 and earlier
prior to trunk revision 59672

Workarounds

At this moment, there are no Ruby releases including the fix for RubyGems. But you can upgrade RubyGems to the latest version. RubyGems 2.6.13 or later includes the fix for the vulnerabilities.

gem update --system

If you can’t upgrade RubyGems, you can apply the following patches as a workaround.

for Ruby 2.2.7
for Ruby 2.3.4
for Ruby 2.4.1: need 2 patches. Apply sequentially as follows:
1. RubyGems 2.6.11 to 2.6.12
2. RubyGems 2.6.12 to 2.6.13

About the trunk, update to the latest revision.

Credits

This report is based on the official blog of RubyGems.

History

Originally published at 2017-08-29 12:00:00 UTC

RedisStore Cache 从 Rails 3.2.17 升级到 Rails 4.0.13 后，读取错误的问题

tesla_lee — Tue, 07 Jul 2015 10:58:51 +0800

打扰大家了，现在遇到了下面这个问题，不知道如何解决。

概要

在 Rails 3.2.17 中创建的 RedisCache 不能在 Rails 4.0.13 中正确读取

背景

根据 Rails 官方升级指导，将项目从 Rails3.2.17 升级到 Rails 4.0.13，Ruby 版本保持 2.0.0-p247 没有改变。

原来项目使用 RedisStore 做 Cache，在 Blog 代码中使用 Cache 如下

class Blog
  ...
  def self.hidden_ids
    hidden_ids = Rails.cache.fetch(["hidden_ids blog"], expires_in: 1.week) do 
      hidden_ids = Blog.where(hidden:true).pluck(:id)
      hidden_ids << 0 unless hidden_ids.include?(0)
    end
    hidden_ids
  end
  ...
end

以上代码会保存一个数组[1,2,3,4,5,6,7]保存到 Redis 中。 Redis 中的日志显示如下： "setex" "hidden_ids blog" "604800" "\x04\bo: ActiveSupport::Cache::Entry\t:\x10@compressedF:\x10@expires_inf\x0c6.048e5:\x10@created_atf\x161436236658.032523:\x0b@value\"6\x04\b[\x11i\x01\x88i\x02-\x01i\x02\x7f\x01i\x02\xa6\x03i\x02\xb8\x05i\x02\xb6\x06i\x02\xe1\x06i\x02\xe8\x06i\x02\xea\x06i\x02\xfa\x06i\x02\xfb\x06i\x00"

问题

在升级到 Rails 4.0.13 中之后，如果执行Blog.hidden_ids 结果变成了 "\x04\b[\x11i\x01\x88i\x02-\x01i\x02\x7F\x01i\x02\xA6\x03i\x02\xB8\x05i\x02\xB6\x06i\x02\xE1\x06i\x02\xE8\x06i\x02\xEA\x06i\x02\xFA\x06i\x02\xFB\x06i\x00" 而不是 Rails 3.2.17 版本中的 [136, 301, 383, 934, 1464, 1718, 1761, 1768, 1770, 1786, 1787, 0]

调查的结果

在 Rails 3.2.17 版本中，ActiveSupport::Cache::Entry 代码的 line 561@value = Marshal.dump(value)
而在 Rails 4.0.13 版本中，ActiveSupport::Cache::Entry 代码的line 581@value = value
在 Rails 4.0.13 版本中，ActiveSupport::Cache::Entry 的line 666发现方法convert_version_4beta1_entry!，不知道是不是用来处理兼容的。
在查看 3.2 到 4.0 的更新日志中，只是提到了 ActiveSupport::Cache::Entry 的优化，但是具体没有提修改了什么地方

疑问

是否升级后一定要清除 Cache?
如果不清楚，这个问题有没有办法解决？