Modified version of a clean install of Ghost - an independent technology for modern publishing, memberships, subscriptions and newsletters.
MIT License
TL;DR: clone. run ./setup
Normally to get Ghost up and running you would would simply use the ghost-cli
as per official guidance. However, it seems some people have run into problems getting up and running, due to permissions or whatever surrounding Node Version Manager (NVM), amongst other weird situations.
For this project I did the very same thing, but made some minor adjustments to streamline things, and since a friend asked me for help, I provided the eventuality of this initial setup. Later on, I decided to reinitialise the project (to purge the git objects) and publish it for people to use if they wish - you should be able to clone it, run the commands and be up and running without any further messing about.
yarn berry
current
symlink changed from full path to relative.[!IMPORTANT] The following on your system would be handy before getting started;
- Node Version Manager (NVM) (not required)
- Node 18 (LTS / Hydrogen)
- Node Package Manager 10 (NPM, bundled with Node)
- Yarn (just having yarn installed should be enough)
Reduced the amount of stuff you'll need to do - simply run:
./setup
[!CAUTION] Something I picked up on pretty much from the get go...
- CRITICAL (1)
- HIGH (9)
- Prototype Pollution in lodash
- Knex.js has a limited SQL injection vulnerability
- Luxon Inefficient Regular Expression Complexity vulnerability
- decode-uri-component vulnerable to Denial of Service (DoS)
- Moment.js vulnerable to Inefficient Regular Expression Complexity
- Crash in HeaderParser in dicer
- Path Traversal: 'dir/../../filename' in moment.locale
- Inefficient Regular Expression Complexity in nth-check
- Regular Expression Denial of Service in trim
- MODERARATE (18)
- LOW (2)
System:
OS: Linux 6.1 Debian GNU/Linux 12 (bookworm) 12 (bookworm)
CPU: (24) x64 AMD Ryzen 9 5900X 12-Core Processor
Binaries:
Node: 18.19.0 - ~/.nvm/versions/node/v18.19.0/bin/node
Yarn: 4.1.0 - ~/.nvm/versions/node/v18.19.0/bin/yarn
npm: 10.4.0 - ~/.nvm/versions/node/v18.19.0/bin/npm
❯ which ghost
/home/<user>/.nvm/versions/node/v18.19.0/bin/ghost
❯ npm root -g
/home/<user>/.nvm/versions/node/v18.19.0/lib/node_modules
ghost install local
ghost stop
ghost start
Running in development mode ✖ Checking system Node.js version - found v18.19.0 ℹ Ensuring user is not logged in as ghost user [skipped] ℹ Checking if logged in user is directory owner [skipped] ✔ Checking current folder permissions ✔ Validating config ✔ Checking memory availability ✔ Checking binary dependencies One or more errors occurred. 1) SystemError Message: The directory /home/<user>/ is not readable by other users on the system. This can cause issues with the CLI, you must either make this directory readable by others or install node and Ghost-CLI in another location. Debug Information: OS: Debian GNU/Linux, v12 Node Version: v18.19.0 Ghost Version: 5.79.0 Ghost-CLI Version: 1.25.3 Environment: development Command: 'ghost start' Try running ghost doctor to check your system for known issues. You can always refer to https://ghost.org/docs/ghost-cli/ for troubleshooting
[!TIP] Suggested in #711, to start ghost server with the following option;
ghost start --no-setup-linux-user
This is a project to end a bad habit of dumping my findings, ideas, and thoughts into a platform that is not really suitable for sharing & cataloguing such material efficiently.
I chose Ghost because of its simplicity, setup, the fact it is open-source, and it's branding which resonated with me. Historically, I am not a fond of Wordpress or other "free" self-serve blogging platforms like Tumlr, Wix, Blogger, or even Twitter - I wanted something that I could build upon, manage and own myself, at as little cost as possible.
Humorously, it was also another excuse for me to create yet another (private) repository to play around with.
I do not own any of this code. The rightful owner is the Ghost Foundation. I only share this project for educational, research, and support purposes. Should the Ghost Foundation request the termination of this repository, I will comply.
[^1]: Docs / FAQ / Using nvm: Using nvm with local and production installs https://ghost.org/docs/faq/using-nvm/