search

NBISweden / predictprotein-webserver-topcons2

web-server implementation for topcons2
MIT License
1 stars 0 forks source link

Fix vulnerabilities #69

Open nanjiangshu opened 2 years ago

nanjiangshu commented 2 years ago

Some packages, such as lxml are out dated and ranked as severe vulnerable. However, upgrading to the latest version will bring in breaking changes since it requires the change of Django and Spyne.

It may require a major change to the code base in order to fix all these vulnerabilities.

nanjiangshu commented 1 year ago

The problem is that on the production server pcons1.scilifelab.se, lxml version later than 4.2.5 is not working.

The solution could be containerize the servers (topcons2, proq3, scampi2, boctopus2)

Known blockers for containerization.

  1. How to submit jobs to the same queue (slurm or something else) from multiple containers
  2. May need to use another production server since the port 80 and 443 on pcons1 are also used by +10 other web servers

OS info for the production server 

$ lsb_release -a
LSB Version:    :core-4.1-amd64:core-4.1-noarch:cxx-4.1-amd64:cxx-4.1-noarch:desktop-4.1-amd64:desktop-4.1-noarch:languages-4.1-amd64:languages-4.1-noarch:printing-4.1-amd64:printing-4.1-noarch
Distributor ID: CentOSStream
Description:    CentOS Stream release 8
Release:        8
Codename:       n/a