VirtualBoxを使ってExpressアプリを動かしてみる - AlmaLinux

sudo dnf -y update

sudo dnf -y install epel-release

sudo dnf -y install git

# インストールされたかバージョンで確認
git -v

git clone https://github.com/beginnerP765/exapp.git

sudo dnf list installd | grep firewalld

sudo dnf -y install firewalld

sudo dnf -y install httpd

sudo systemctl enable httpd
sudo systemctl start httpd

sudo firewall-cmd --permanent --add-service=http --zone=public
sudo firewall-cmd --reload

sudo vi /etc/httpd/conf.d/exproxy.conf

/etc/httpd/conf.d/exproxy.conf

<VirtualHost *:80>
    ProxyPass / http://localhost:4000/
    ProxyPassReverse / http://localhost:4000/
</VirtualHost>

sudo systemctl restart httpd

npm start

sudo setsebool -P httpd_can_network_connect on

npm install -g pm2

/home/user/exapp/pm2myapp.json

{
    "name": "myapp",
    "script": "./bin/www",

    "env": {
        "NODE_ENV": "development"
    },

    "env_production": {
        "NODE_ENV": "production"
    }
}

# envを指定しない場合には、設定ファイル内のenvが利用されます。
pm2 start pm2myapp.json

# --envオプションの指定方法は、env_xxx の「 xxx 」の部分を指定します。「 env_production 」を利用したい場合は、以下のようにします。
pm2 start pm2myapp.json --env production

/home/user/exapp のディレクトリに移動して実行

pm2 start pm2myapp.json --env production

pm2 startup

[PM2] Init System found: systemd
[PM2] To setup the Startup Script, copy/paste the following command:
sudo env PATH=$PATH:/home/user/.nvm/versions/node/v20.15.0/bin /home/user/.nvm/versions/node/v20.15.0/lib/node_modules/pm2/bin/pm2 startup systemd -u user --hp /home/user

pm2 save

sudo systemctl list-unit-files -t service

sudo less /var/log/messages

sudo sealert -a /var/log/audit/audit.log

my-PM2v605God.te

module my-PM2v605God 1.0;

require {
	type init_t;
	type user_home_t;
	class sock_file { create unlink };
	class file { ioctl write };
}

#============= init_t ==============

#!!!! This avc is allowed in the current policy
#!!!! This av rule may have been overridden by an extended permission av rule
allow init_t user_home_t:file { ioctl write };

#!!!! This avc is allowed in the current policy
allow init_t user_home_t:sock_file unlink;
allow init_t user_home_t:sock_file create;

my-pm2.te

module my-pm2 1.0;

require {
	type init_t;
	type user_home_t;
	class file { execute execute_no_trans open read };
}

#============= init_t ==============

#!!!! This avc is allowed in the current policy
allow init_t user_home_t:file { execute open read };
allow init_t user_home_t:file execute_no_trans;

my-node.te

module my-node 1.0;

require {
	type user_home_t;
	type init_t;
	class file { append create map };
	class sock_file write;
	class process execmem;
}

#============= init_t ==============

#!!!! This avc is allowed in the current policy
allow init_t self:process execmem;

#!!!! This avc is allowed in the current policy
allow init_t user_home_t:file map;
allow init_t user_home_t:file { append create };

#!!!! This avc is allowed in the current policy
allow init_t user_home_t:sock_file write;

# my-PM2v605God.te のコンパイル
# モジュールのコンパイル
checkmodule -M -m -o my-PM2v605God.mod my-PM2v605God.te

# ポリシーパッケージの作成
semodule_package -o my-PM2v605God.pp -m my-PM2v605God.mod

# カーネルへのモジュール読み込み
sudo semodule -i my-PM2v605God.pp

# ------------------------------------------------------------------------
# my-pm2.te のコンパイル
checkmodule -M -m -o my-pm2.mod my-pm2.te
semodule_package -o my-pm2.pp -m my-pm2.mod
sudo semodule -i my-pm2.pp

# ------------------------------------------------------------------------
# my-node.te のコンパイル
checkmodule -M -m -o my-node.mod my-node.te
semodule_package -o my-node.pp -m my-node.mod
sudo semodule -i my-node.pp