How can I allow node to listen to ports below 1024 on Ubuntu 18.04?
I can use any PORT above 1023 with server.listen(PORT) in an nvm-installed node. How can I use system ports (e.g. below 1024) with a non-privileged user?
On our Ubuntu 16.04 servers I used to do this:
sudo setcap CAP_NET_BIND_SERVICE=+eip `readlink -f `which node``
However, we've upgraded to Ubuntu 18.04 and it doesn't seem to work anymore. I'm seeing the following error:
Error listen EACCES 0.0.0.0:925
This happens with all ports below 1024, so it's not just a one-off case of port being already in use.
Why wouldn't this work (anymore)? I must be missing something, or things have changed since Ubuntu 18.04.
node.js server port listen
asked Nov 23 '18 at 10:30
RedsandroRedsandro
5,15574677
add a comment |
I can use any PORT above 1023 with server.listen(PORT) in an nvm-installed node. How can I use system ports (e.g. below 1024) with a non-privileged user?
On our Ubuntu 16.04 servers I used to do this:
sudo setcap CAP_NET_BIND_SERVICE=+eip `readlink -f `which node``
However, we've upgraded to Ubuntu 18.04 and it doesn't seem to work anymore. I'm seeing the following error:
Error listen EACCES 0.0.0.0:925
This happens with all ports below 1024, so it's not just a one-off case of port being already in use.
Why wouldn't this work (anymore)? I must be missing something, or things have changed since Ubuntu 18.04.
node.js server port listen
asked Nov 23 '18 at 10:30
RedsandroRedsandro
5,15574677
stackoverflow.com/questions/10182798/…
– Abhishek Mani
Nov 23 '18 at 10:48
@AbhishekMani I know this. It's not what I am asking. Note howCAP_NET_BIND_SERVICEis mentioned in the comments.
– Redsandro
Nov 23 '18 at 12:26
Not to be a negative Norton, but these are reserved system ports. They are blocked for a reason. What is it that you need to do that actually requires a system port?
– unflores
Nov 23 '18 at 12:55
@unflores I don't want to seem ungrateful for you trying to think with me, but discussing rationale will steer us away from the question. It is, for all intents and purposes, irrelevant.
– Redsandro
Nov 23 '18 at 13:22
add a comment |
I can use any PORT above 1023 with server.listen(PORT) in an nvm-installed node. How can I use system ports (e.g. below 1024) with a non-privileged user?
On our Ubuntu 16.04 servers I used to do this:
sudo setcap CAP_NET_BIND_SERVICE=+eip `readlink -f `which node``
However, we've upgraded to Ubuntu 18.04 and it doesn't seem to work anymore. I'm seeing the following error:
Error listen EACCES 0.0.0.0:925
This happens with all ports below 1024, so it's not just a one-off case of port being already in use.
Why wouldn't this work (anymore)? I must be missing something, or things have changed since Ubuntu 18.04.
node.js server port listen
asked Nov 23 '18 at 10:30
RedsandroRedsandro
5,15574677
I can use any PORT above 1023 with server.listen(PORT) in an nvm-installed node. How can I use system ports (e.g. below 1024) with a non-privileged user?
On our Ubuntu 16.04 servers I used to do this:
sudo setcap CAP_NET_BIND_SERVICE=+eip `readlink -f `which node``
However, we've upgraded to Ubuntu 18.04 and it doesn't seem to work anymore. I'm seeing the following error:
Error listen EACCES 0.0.0.0:925
This happens with all ports below 1024, so it's not just a one-off case of port being already in use.
Why wouldn't this work (anymore)? I must be missing something, or things have changed since Ubuntu 18.04.
node.js server port listen
node.js server port listen
asked Nov 23 '18 at 10:30
RedsandroRedsandro
5,15574677
asked Nov 23 '18 at 10:30
RedsandroRedsandro
5,15574677
edited Nov 23 '18 at 13:30
Redsandro
asked Nov 23 '18 at 10:30
RedsandroRedsandro
5,15574677
asked Nov 23 '18 at 10:30
RedsandroRedsandro
5,15574677
asked Nov 23 '18 at 10:30
RedsandroRedsandro
5,15574677
5,15574677
stackoverflow.com/questions/10182798/…
– Abhishek Mani
Nov 23 '18 at 10:48
@AbhishekMani I know this. It's not what I am asking. Note howCAP_NET_BIND_SERVICEis mentioned in the comments.
– Redsandro
Nov 23 '18 at 12:26
Not to be a negative Norton, but these are reserved system ports. They are blocked for a reason. What is it that you need to do that actually requires a system port?
– unflores
Nov 23 '18 at 12:55
@unflores I don't want to seem ungrateful for you trying to think with me, but discussing rationale will steer us away from the question. It is, for all intents and purposes, irrelevant.
– Redsandro
Nov 23 '18 at 13:22
add a comment |
stackoverflow.com/questions/10182798/…
– Abhishek Mani
Nov 23 '18 at 10:48
@AbhishekMani I know this. It's not what I am asking. Note howCAP_NET_BIND_SERVICEis mentioned in the comments.
– Redsandro
Nov 23 '18 at 12:26
Not to be a negative Norton, but these are reserved system ports. They are blocked for a reason. What is it that you need to do that actually requires a system port?
– unflores
Nov 23 '18 at 12:55
@unflores I don't want to seem ungrateful for you trying to think with me, but discussing rationale will steer us away from the question. It is, for all intents and purposes, irrelevant.
– Redsandro
Nov 23 '18 at 13:22
stackoverflow.com/questions/10182798/…
– Abhishek Mani
Nov 23 '18 at 10:48
stackoverflow.com/questions/10182798/…
– Abhishek Mani
Nov 23 '18 at 10:48
@AbhishekMani I know this. It's not what I am asking. Note how
CAP_NET_BIND_SERVICE is mentioned in the comments.– Redsandro
Nov 23 '18 at 12:26
@AbhishekMani I know this. It's not what I am asking. Note how
CAP_NET_BIND_SERVICE is mentioned in the comments.– Redsandro
Nov 23 '18 at 12:26
Not to be a negative Norton, but these are reserved system ports. They are blocked for a reason. What is it that you need to do that actually requires a system port?
– unflores
Nov 23 '18 at 12:55
Not to be a negative Norton, but these are reserved system ports. They are blocked for a reason. What is it that you need to do that actually requires a system port?
– unflores
Nov 23 '18 at 12:55
@unflores I don't want to seem ungrateful for you trying to think with me, but discussing rationale will steer us away from the question. It is, for all intents and purposes, irrelevant.
– Redsandro
Nov 23 '18 at 13:22
@unflores I don't want to seem ungrateful for you trying to think with me, but discussing rationale will steer us away from the question. It is, for all intents and purposes, irrelevant.
– Redsandro
Nov 23 '18 at 13:22
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53444965%2fhow-can-i-allow-node-to-listen-to-ports-below-1024-on-ubuntu-18-04%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53444965%2fhow-can-i-allow-node-to-listen-to-ports-below-1024-on-ubuntu-18-04%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
stackoverflow.com/questions/10182798/…
– Abhishek Mani
Nov 23 '18 at 10:48
@AbhishekMani I know this. It's not what I am asking. Note how
CAP_NET_BIND_SERVICEis mentioned in the comments.– Redsandro
Nov 23 '18 at 12:26
Not to be a negative Norton, but these are reserved system ports. They are blocked for a reason. What is it that you need to do that actually requires a system port?
– unflores
Nov 23 '18 at 12:55
@unflores I don't want to seem ungrateful for you trying to think with me, but discussing rationale will steer us away from the question. It is, for all intents and purposes, irrelevant.
– Redsandro
Nov 23 '18 at 13:22