3 ms·

Welp, there goes Rubygems and NPM global modules.

• zurn 9y ago
  Always wall off your dev/admin machine and all the credentials therein. Sandbox NPM type things using a VM or at least a non-root container.
• chocolateboy 9y ago
  Neither requires root: * https://github.com/creationix/nvm https://github.com/creationix/nvm * http://kazhack.org/?post/2014/12/11/npm-install-g-without-sudo http://kazhack.org/?post/2014/12/11/npm-install-g-without-su... * http://kazhack.org/?post/2014/12/12/pip-gem-install-without-sudo http://kazhack.org/?post/2014/12/12/pip-gem-install-without-...
  • astrodust 9y ago
    You can do it without root if you take precautions, but the default is to use root.
    • chocolateboy 9y ago
      Depends on the system. The default on Arch Linux is local gem installs: $ cat /etc/gemrc # --user-install is used to install to $HOME/.gem/ by default since we want to separate # pacman installed gems and gem installed gems gem: --user-install
      • astrodust 9y ago
        That's a nice touch and some good work on the part of the package maintainer. Most (Ubuntu, RedHat, etc.) do not, they just expect you to sudo everything.
• deleted 9y ago
  [deleted]