冒险使用Forever + Sudo来保持节点应用的运行？

Question

Is it risky to keep a node.js application running as sudo using forever.js? What potential problems are there? If this is ill-advised what is a better alternative?

Answer 1

Running an app via sudo is indeed highly risky. Your app will have full root privileges meaning the number of possible attacks and severity of possible attacks is significantly higher than if you ran your application as a dedicated user for this application. I strongly recommend following the industry best practices here and running your application as a normal non-root user.

As to forever this category of software is generally called "process supervision" and there are many non-risky options available. I personally use the process supervision system built into my deployment OS, which is currently upstart or systemd , but I think forever is one of several alternatives that are perfectly fine. I recommend Process Supervision: Solved Problem as a good overview of process supervision with some good insights.