Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use custom Meteor 1.6.1.1 build of Node 8.11.1. #2

Merged
merged 2 commits into from
Apr 5, 2018

Conversation

benjamn
Copy link
Contributor

@benjamn benjamn commented Apr 4, 2018

The official Node 8.11.1 still suffers from the segmentation fault problem reported in nodejs/node#19274, because 8.11.0 was a security release that did not include the necessary patch, and 8.11.1 was a release without any additional commits.

To fix the problem in development, Meteor 1.6.1.1 comes with a custom build of Node 8.11.1 with one additional commit. However, Galaxy does not use this custom build of Node 8.11.1, but instead uses the official build, which can lead to segmentation faults in production.

Node 8.10.0 and 8.11.0 also suffer from the segmentation fault problem that was fixed by this custom build, but no version of Meteor has (or will) ever ship with either of those versions of Node, so 8.11.1 is the only Node version we need to worry about.

Issues that should be fixed once this change is deployed:
meteor/meteor#9797
https://meteor.zendesk.com/agent/tickets/12197
https://meteor.zendesk.com/agent/tickets/12195
https://meteor.zendesk.com/agent/tickets/12216
https://meteor.zendesk.com/agent/tickets/12218

Node 8.10.0 and 8.11.0 also suffer from the segmentation fault problem
that was fixed by this custom build, but no version of Meteor has (or
will) ever ship with either of those versions of Node, so 8.11.1 is the
only Node version we need to worry about.

Issues that should be fixed once this change is deployed:
meteor/meteor#9797
https://meteor.zendesk.com/agent/tickets/12197
https://meteor.zendesk.com/agent/tickets/12195
https://meteor.zendesk.com/agent/tickets/12216
https://meteor.zendesk.com/agent/tickets/12218
@benjamn benjamn self-assigned this Apr 4, 2018
@benjamn benjamn requested review from glasser and abernix April 4, 2018 23:55
curl -sSLO "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-x64.tar.gz" \
&& tar -xzf "node-v$NODE_VERSION-linux-x64.tar.gz" -C / \
&& rm "node-v$NODE_VERSION-linux-x64.tar.gz"
if [ "$NODE_VERSION" == "8.11.1" ]
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe we should preinstall this one into the base image (by adding an install_node.sh invocation to the Dockerfile)? Esp since this isn't coming from a CDN. Hopefully we won't be triggering the npm bug described in the Dockerfile.

@glasser glasser merged commit 66f8010 into master Apr 5, 2018
@glasser glasser deleted the custom-node-8.11.1-with-v8-patch branch April 5, 2018 05:04
kentonv added a commit to sandstorm-io/sandstorm that referenced this pull request Apr 16, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants