@whyour/qinglong 2.20.2-3 → 2.21.0-10

package/static/build/api/env.js

@@ -10,6 +10,7 @@ const multer_1 = __importDefault(require("multer"));
 const typedi_1 = require("typedi");
 const config_1 = __importDefault(require("../config"));
 const util_1 = require("../config/util");
+const i18n_1 = require("../shared/i18n");
 const env_1 = __importDefault(require("../services/env"));
 const route = (0, express_1.Router)();
 const storage = multer_1.default.diskStorage({
@@ -21,6 +22,10 @@ const storage = multer_1.default.diskStorage({
     },
 });
 const upload = (0, multer_1.default)({ storage: storage });
+const labelSchema = celebrate_1.Joi.array()
+    .items(celebrate_1.Joi.string().trim().required())
+    .min(1)
+    .required();
 exports.default = (app) => {
     app.use('/envs', route);
     route.get('/', async (req, res, next) => {
@@ -42,6 +47,7 @@ exports.default = (app) => {
                 .required()
                 .pattern(/^[a-zA-Z_][0-9a-zA-Z_]*$/),
             remarks: celebrate_1.Joi.string().optional().allow(''),
+            labels: celebrate_1.Joi.array().items(celebrate_1.Joi.string().trim()).optional().allow(null),
         })),
     }), async (req, res, next) => {
         var _a;
@@ -49,7 +55,7 @@ exports.default = (app) => {
         try {
             const envService = typedi_1.Container.get(env_1.default);
             if (!((_a = req.body) === null || _a === void 0 ? void 0 : _a.length)) {
-                return res.send({ code: 400, message: '参数不正确' });
+                return res.send({ code: 400, message: (0, i18n_1.t)('参数不正确') });
             }
             const data = await envService.create(req.body);
             return res.send({ code: 200, data });
@@ -64,6 +70,7 @@ exports.default = (app) => {
             name: celebrate_1.Joi.string().required(),
             remarks: celebrate_1.Joi.string().optional().allow('').allow(null),
             id: celebrate_1.Joi.number().required(),
+            labels: celebrate_1.Joi.array().items(celebrate_1.Joi.string().trim()).optional().allow(null),
         }),
     }), async (req, res, next) => {
         const logger = typedi_1.Container.get('logger');
@@ -190,6 +197,36 @@ exports.default = (app) => {
             return next(e);
         }
     });
+    route.post('/labels', (0, celebrate_1.celebrate)({
+        body: celebrate_1.Joi.object({
+            ids: celebrate_1.Joi.array().items(celebrate_1.Joi.number().required()).min(1).required(),
+            labels: labelSchema,
+        }),
+    }), async (req, res, next) => {
+        try {
+            const envService = typedi_1.Container.get(env_1.default);
+            const data = await envService.addLabels(req.body.ids, req.body.labels);
+            return res.send({ code: 200, data });
+        }
+        catch (e) {
+            return next(e);
+        }
+    });
+    route.delete('/labels', (0, celebrate_1.celebrate)({
+        body: celebrate_1.Joi.object({
+            ids: celebrate_1.Joi.array().items(celebrate_1.Joi.number().required()).min(1).required(),
+            labels: labelSchema,
+        }),
+    }), async (req, res, next) => {
+        try {
+            const envService = typedi_1.Container.get(env_1.default);
+            const data = await envService.removeLabels(req.body.ids, req.body.labels);
+            return res.send({ code: 200, data });
+        }
+        catch (e) {
+            return next(e);
+        }
+    });
     route.post('/upload', upload.single('env'), async (req, res, next) => {
         const logger = typedi_1.Container.get('logger');
         try {
@@ -204,13 +241,14 @@ exports.default = (app) => {
                     name: x.name,
                     value: x.value,
                     remarks: x.remarks,
+                    labels: x.labels,
                 })));
                 return res.send({ code: 200, data: result });
             }
             else {
                 return res.send({
                     code: 400,
-                    message: '每条数据 name 或者 value 字段不能为空，参考导出文件格式',
+                    message: (0, i18n_1.t)('每条数据 name 或者 value 字段不能为空，参考导出文件格式'),
                 });
             }
         }

package/static/build/api/index.js

@@ -15,6 +15,7 @@ const dependence_1 = __importDefault(require("./dependence"));
 const system_1 = __importDefault(require("./system"));
 const subscription_1 = __importDefault(require("./subscription"));
 const update_1 = __importDefault(require("./update"));
+const dashboard_1 = __importDefault(require("./dashboard"));
 const health_1 = __importDefault(require("./health"));
 exports.default = () => {
     const app = (0, express_1.Router)();
@@ -29,6 +30,7 @@ exports.default = () => {
     (0, system_1.default)(app);
     (0, subscription_1.default)(app);
     (0, update_1.default)(app);
+    (0, dashboard_1.default)(app);
     (0, health_1.default)(app);
     return app;
 };

package/static/build/api/log.js

@@ -7,8 +7,10 @@ const celebrate_1 = require("celebrate");
 const express_1 = require("express");
 const typedi_1 = require("typedi");
 const config_1 = __importDefault(require("../config"));
+const i18n_1 = require("../shared/i18n");
 const util_1 = require("../config/util");
 const log_1 = __importDefault(require("../services/log"));
+const runningInstance_1 = require("../data/runningInstance");
 const route = (0, express_1.Router)();
 const blacklist = ['.tmp'];
 exports.default = (app) => {
@@ -34,11 +36,19 @@ exports.default = (app) => {
             if (!finalPath || blacklist.includes(req.query.path)) {
                 return res.send({
                     code: 403,
-                    message: '暂无权限',
+                    message: (0, i18n_1.t)('暂无权限'),
                 });
             }
+            const logPath = `${req.query.path}/${req.query.file}`;
+            const runningInstance = await runningInstance_1.RunningInstanceModel.findOne({
+                where: { log_path: logPath, status: runningInstance_1.InstanceStatus.running },
+            });
             const content = await (0, util_1.getFileContentByName)(finalPath);
-            res.send({ code: 200, data: (0, util_1.removeAnsi)(content) });
+            res.send({
+                code: 200,
+                data: (0, util_1.removeAnsi)(content),
+                logStatus: runningInstance ? 'running' : undefined,
+            });
         }
         catch (e) {
             return next(e);
@@ -51,7 +61,7 @@ exports.default = (app) => {
             if (!finalPath || blacklist.includes(req.query.path)) {
                 return res.send({
                     code: 403,
-                    message: '暂无权限',
+                    message: (0, i18n_1.t)('暂无权限'),
                 });
             }
             const content = await (0, util_1.getFileContentByName)(finalPath);
@@ -75,7 +85,7 @@ exports.default = (app) => {
             if (!finalPath || blacklist.includes(path)) {
                 return res.send({
                     code: 403,
-                    message: '暂无权限',
+                    message: (0, i18n_1.t)('暂无权限'),
                 });
             }
             await (0, util_1.rmPath)(finalPath);
@@ -98,7 +108,7 @@ exports.default = (app) => {
             if (!filePath) {
                 return res.send({
                     code: 403,
-                    message: '暂无权限',
+                    message: (0, i18n_1.t)('暂无权限'),
                 });
             }
             return res.download(filePath, filename, (err) => {

package/static/build/api/script.js

@@ -32,11 +32,16 @@ const typedi_1 = require("typedi");
 const config_1 = __importDefault(require("../config"));
 const fs = __importStar(require("fs/promises"));
 const celebrate_1 = require("celebrate");
-const path_1 = require("path");
+const path_1 = __importStar(require("path"));
 const script_1 = __importDefault(require("../services/script"));
+const i18n_1 = require("../shared/i18n");
 const multer_1 = __importDefault(require("multer"));
 const utils_1 = require("../shared/utils");
 const route = (0, express_1.Router)();
+function isPathAllowed(targetPath) {
+    const resolved = path_1.default.resolve(targetPath);
+    return config_1.default.writePathList.some((x) => resolved.startsWith(x));
+}
 const storage = multer_1.default.diskStorage({
     destination: function (req, file, cb) {
         cb(null, config_1.default.scriptPath);
@@ -145,23 +150,34 @@ exports.default = (app) => {
             if (config_1.default.writePathList.every((x) => !path.startsWith(x))) {
                 return res.send({
                     code: 403,
-                    message: '暂无权限',
+                    message: (0, i18n_1.t)('暂无权限'),
                 });
             }
             if (req.file) {
-                await fs.rename(req.file.path, (0, path_1.join)(path, filename));
+                const uploadPath = (0, path_1.join)(path, filename);
+                if (!isPathAllowed(uploadPath)) {
+                    return res.send({ code: 403, message: (0, i18n_1.t)('暂无权限') });
+                }
+                await fs.rename(req.file.path, uploadPath);
                 return res.send({ code: 200 });
             }
             if (directory) {
-                await fs.mkdir((0, path_1.join)(path, directory), { recursive: true });
+                const dirPath = (0, path_1.join)(path, directory);
+                if (!isPathAllowed(dirPath)) {
+                    return res.send({ code: 403, message: (0, i18n_1.t)('暂无权限') });
+                }
+                await fs.mkdir(dirPath, { recursive: true });
                 return res.send({ code: 200 });
             }
             if (!originFilename) {
                 originFilename = filename;
             }
-            const originFilePath = (0, path_1.join)(path, `${originFilename.replace(/\//g, '')}`);
+            const originFilePath = (0, path_1.join)(path, originFilename);
+            const filePath = (0, path_1.join)(path, filename);
+            if (!isPathAllowed(filePath) || !isPathAllowed(originFilePath)) {
+                return res.send({ code: 403, message: (0, i18n_1.t)('暂无权限') });
+            }
             await fs.mkdir(path, { recursive: true });
-            const filePath = (0, path_1.join)(path, `${filename.replace(/\//g, '')}`);
             const fileExists = await (0, util_1.fileExist)(filePath);
             if (fileExists) {
                 await fs.copyFile(originFilePath, (0, path_1.join)(config_1.default.bakPath, originFilename.replace(/\//g, '')));
@@ -190,7 +206,7 @@ exports.default = (app) => {
             if (!filePath) {
                 return res.send({
                     code: 403,
-                    message: '暂无权限',
+                    message: (0, i18n_1.t)('暂无权限'),
                 });
             }
             await (0, utils_1.writeFileWithLock)(filePath, content);
@@ -217,7 +233,7 @@ exports.default = (app) => {
             if (!filePath) {
                 return res.send({
                     code: 403,
-                    message: '暂无权限',
+                    message: (0, i18n_1.t)('暂无权限'),
                 });
             }
             await (0, util_1.rmPath)(filePath);
@@ -243,7 +259,7 @@ exports.default = (app) => {
             if (!filePath) {
                 return res.send({
                     code: 403,
-                    message: '暂无权限',
+                    message: (0, i18n_1.t)('暂无权限'),
                 });
             }
             return res.download(filePath, filename, (err) => {
@@ -271,6 +287,9 @@ exports.default = (app) => {
             }
             const { name, ext } = (0, path_1.parse)(filename);
             const filePath = (0, path_1.join)(config_1.default.scriptPath, path, `${name}.swap${ext}`);
+            if (!isPathAllowed(filePath)) {
+                return res.send({ code: 403, message: (0, i18n_1.t)('暂无权限') });
+            }
             await (0, utils_1.writeFileWithLock)(filePath, content || '');
             const scriptService = typedi_1.Container.get(script_1.default);
             const result = await scriptService.runScript(filePath);
@@ -294,6 +313,9 @@ exports.default = (app) => {
             }
             const { name, ext } = (0, path_1.parse)(filename);
             const filePath = (0, path_1.join)(config_1.default.scriptPath, path, `${name}.swap${ext}`);
+            if (!isPathAllowed(filePath)) {
+                return res.send({ code: 403, message: (0, i18n_1.t)('暂无权限') });
+            }
             const logPath = (0, path_1.join)(config_1.default.logPath, path, `${name}.swap`);
             const scriptService = typedi_1.Container.get(script_1.default);
             const result = await scriptService.stopScript(filePath, pid);
@@ -320,6 +342,9 @@ exports.default = (app) => {
             }
             const filePath = (0, path_1.join)(config_1.default.scriptPath, path, filename);
             const newPath = (0, path_1.join)(config_1.default.scriptPath, path, newFilename);
+            if (!isPathAllowed(filePath) || !isPathAllowed(newPath)) {
+                return res.send({ code: 403, message: (0, i18n_1.t)('暂无权限') });
+            }
             await fs.rename(filePath, newPath);
             res.send({ code: 200 });
         }

package/static/build/api/system.js

@@ -9,6 +9,8 @@ const config_1 = __importDefault(require("../config"));
 const system_1 = __importDefault(require("../services/system"));
 const celebrate_1 = require("celebrate");
 const user_1 = __importDefault(require("../services/user"));
+const i18n_1 = require("../shared/i18n");
+const auth_1 = require("../shared/auth");
 const util_1 = require("../config/util");
 const dayjs_1 = __importDefault(require("dayjs"));
 const multer_1 = __importDefault(require("multer"));
@@ -31,12 +33,7 @@ exports.default = (app) => {
             const userService = typedi_1.Container.get(user_1.default);
             const authInfo = await userService.getAuthInfo();
             const { version, changeLog, changeLogLink, publishTime } = await (0, util_1.parseVersion)(config_1.default.versionFile);
-            let isInitialized = true;
-            if (Object.keys(authInfo).length === 2 &&
-                authInfo.username === 'admin' &&
-                authInfo.password === 'admin') {
-                isInitialized = false;
-            }
+            const isInitialized = !(0, auth_1.isDefaultAuthInfo)(authInfo);
             res.send({
                 code: 200,
                 data: {
@@ -315,8 +312,11 @@ exports.default = (app) => {
     }), async (req, res, next) => {
         try {
             const userService = typedi_1.Container.get(user_1.default);
-            await userService.resetAuthInfo(req.body);
-            res.send({ code: 200, message: '更新成功' });
+            const result = await userService.resetAuthInfo(req.body);
+            if (result) {
+                return res.send(result);
+            }
+            res.send({ code: 200, message: (0, i18n_1.t)('更新成功') });
         }
         catch (e) {
             return next(e);
@@ -336,6 +336,20 @@ exports.default = (app) => {
             return next(e);
         }
     });
+    route.put('/config/lang', (0, celebrate_1.celebrate)({
+        body: celebrate_1.Joi.object({
+            lang: celebrate_1.Joi.string().allow('').allow(null),
+        }),
+    }), async (req, res, next) => {
+        try {
+            const systemService = typedi_1.Container.get(system_1.default);
+            const result = await systemService.updateLanguage(req.body);
+            res.send(result);
+        }
+        catch (e) {
+            return next(e);
+        }
+    });
     route.put('/config/global-ssh-key', (0, celebrate_1.celebrate)({
         body: celebrate_1.Joi.object({
             globalSshKey: celebrate_1.Joi.string().allow('').allow(null),

package/static/build/api/user.js

@@ -12,6 +12,7 @@ const path_1 = __importDefault(require("path"));
 const uuid_1 = require("uuid");
 const express_rate_limit_1 = __importDefault(require("express-rate-limit"));
 const config_1 = __importDefault(require("../config"));
+const i18n_1 = require("../shared/i18n");
 const util_1 = require("../config/util");
 const route = (0, express_1.Router)();
 const storage = multer_1.default.diskStorage({
@@ -66,11 +67,11 @@ exports.default = (app) => {
     }), async (req, res, next) => {
         try {
             if ((0, util_1.isDemoEnv)()) {
-                return res.send({ code: 450, message: '未知错误' });
+                return res.send({ code: 450, message: (0, i18n_1.t)('未知错误') });
             }
             const userService = typedi_1.Container.get(user_1.default);
             await userService.updateUsernameAndPassword(req.body);
-            res.send({ code: 200, message: '更新成功' });
+            res.send({ code: 200, message: (0, i18n_1.t)('更新成功') });
         }
         catch (e) {
             return next(e);
@@ -121,11 +122,11 @@ exports.default = (app) => {
             return next(e);
         }
     });
-    route.put('/two-factor/deactive', async (req, res, next) => {
+    route.put('/two-factor/deactivate', async (req, res, next) => {
         const logger = typedi_1.Container.get('logger');
         try {
             const userService = typedi_1.Container.get(user_1.default);
-            const data = await userService.deactiveTwoFactor();
+            const data = await userService.deactivateTwoFactor();
             res.send({ code: 200, data });
         }
         catch (e) {
@@ -192,7 +193,7 @@ exports.default = (app) => {
         try {
             const userService = typedi_1.Container.get(user_1.default);
             await userService.updateUsernameAndPassword(req.body);
-            res.send({ code: 200, message: '更新成功' });
+            res.send({ code: 200, message: (0, i18n_1.t)('更新成功') });
         }
         catch (e) {
             return next(e);

package/static/build/app.js

@@ -72,37 +72,37 @@ class Application {
         // Wait for gRPC worker to signal it's ready before starting HTTP worker
         this.waitForWorkerReady(grpcWorker, 30000)
             .then(() => {
-            logger_1.default.info('✌️ gRPC worker is ready, starting HTTP worker');
+            logger_1.default.info('[boot] gRPC worker is ready, starting HTTP worker');
             this.httpWorker = this.forkWorker('http');
         })
             .catch((error) => {
-            logger_1.default.error('✌️ Failed to wait for gRPC worker:', error);
+            logger_1.default.error('[boot] Failed to wait for gRPC worker:', error);
             process.exit(1);
         });
         cluster_1.default.on('exit', (worker, code, signal) => {
             const metadata = this.workerMetadataMap.get(worker.id);
             if (metadata) {
                 if (!this.isShuttingDown) {
-                    logger_1.default.error(`✌️ ${metadata.serviceType} worker ${worker.process.pid} died (${signal || code}). Restarting...`);
+                    logger_1.default.error(`${metadata.serviceType} worker ${worker.process.pid} died (${signal || code}). Restarting...`);
                     // If gRPC worker died, restart it and wait for it to be ready
                     if (metadata.serviceType === 'grpc') {
                         const newGrpcWorker = this.forkWorker('grpc');
                         this.waitForWorkerReady(newGrpcWorker, 30000)
                             .then(() => {
-                            logger_1.default.info('✌️ gRPC worker restarted and ready');
+                            logger_1.default.info('gRPC worker restarted and ready');
                             // Re-register cron jobs by notifying the HTTP worker
                             if (this.httpWorker) {
                                 try {
                                     this.httpWorker.send('reregister-crons');
-                                    logger_1.default.info('✌️ Sent reregister-crons message to HTTP worker');
+                                    logger_1.default.info('Sent reregister-crons message to HTTP worker');
                                 }
                                 catch (error) {
-                                    logger_1.default.error('✌️ Failed to send reregister-crons message:', error);
+                                    logger_1.default.error('Failed to send reregister-crons message:', error);
                                 }
                             }
                         })
                             .catch((error) => {
-                            logger_1.default.error('✌️ Failed to restart gRPC worker:', error);
+                            logger_1.default.error('Failed to restart gRPC worker:', error);
                             process.exit(1);
                         });
                     }
@@ -110,7 +110,7 @@ class Application {
                         // For HTTP worker, just restart it
                         const newWorker = this.forkWorker(metadata.serviceType);
                         this.httpWorker = newWorker;
-                        logger_1.default.info(`✌️ Restarted ${metadata.serviceType} worker (PID: ${newWorker.process.pid})`);
+                        logger_1.default.info(`Restarted ${metadata.serviceType} worker (PID: ${newWorker.process.pid})`);
                     }
                 }
                 this.workerMetadataMap.delete(worker.id);
@@ -168,14 +168,14 @@ class Application {
                 if (worker) {
                     const exitPromise = new Promise((resolve) => {
                         worker.once('exit', () => {
-                            logger_1.default.info(`✌️ Worker ${worker.process.pid} exited`);
+                            logger_1.default.info(`Worker ${worker.process.pid} exited`);
                             resolve();
                         });
                         try {
                             worker.send('shutdown');
                         }
                         catch (error) {
-                            logger_1.default.warn(`✌️ Failed to send shutdown to worker ${worker.process.pid}:`, error);
+                            logger_1.default.warn(`Failed to send shutdown to worker ${worker.process.pid}:`, error);
                         }
                     });
                     workerPromises.push(exitPromise);
@@ -186,7 +186,7 @@ class Application {
                     Promise.all(workerPromises),
                     new Promise((resolve) => {
                         setTimeout(() => {
-                            logger_1.default.warn('✌️ Worker shutdown timeout reached');
+                            logger_1.default.warn('Worker shutdown timeout reached');
                             resolve();
                         }, 10000);
                     }),
@@ -194,7 +194,7 @@ class Application {
                 process.exit(0);
             }
             catch (error) {
-                logger_1.default.error('✌️ Error during worker shutdown:', error);
+                logger_1.default.error('Error during worker shutdown:', error);
                 process.exit(1);
             }
         };
@@ -205,10 +205,10 @@ class Application {
         var _a;
         const serviceType = process.env.SERVICE_TYPE;
         if (!serviceType || !['http', 'grpc'].includes(serviceType)) {
-            logger_1.default.error('✌️ Invalid SERVICE_TYPE:', serviceType);
+            logger_1.default.error('[boot] Invalid SERVICE_TYPE:', serviceType);
             process.exit(1);
         }
-        logger_1.default.info(`✌️ ${serviceType} worker started (PID: ${process.pid})`);
+        logger_1.default.info(`[boot] ${serviceType} worker started (PID: ${process.pid})`);
         try {
             if (serviceType === 'http') {
                 await this.startHttpService();
@@ -219,11 +219,14 @@ class Application {
             (_a = process.send) === null || _a === void 0 ? void 0 : _a.call(process, 'ready');
         }
         catch (error) {
-            logger_1.default.error(`✌️ ${serviceType} worker failed:`, error);
+            logger_1.default.error(`[boot] ${serviceType} worker failed:`, error);
             process.exit(1);
         }
     }
     async startHttpService() {
+        // 在导入任何 gRPC 客户端模块之前初始化 mTLS 证书
+        const { initGrpcCerts } = await Promise.resolve().then(() => __importStar(require('./config/grpcCerts')));
+        await initGrpcCerts();
         this.setupMiddlewares();
         const { HttpServerService } = await Promise.resolve().then(() => __importStar(require('./services/http')));
         this.httpServerService = typedi_1.Container.get(HttpServerService);
@@ -248,14 +251,14 @@ class Application {
             else if (msg === 'reregister-crons' && serviceType === 'http') {
                 // Re-register cron jobs when gRPC worker restarts
                 try {
-                    logger_1.default.info('✌️ Received reregister-crons message, re-registering cron jobs...');
+                    logger_1.default.info('[boot] Received reregister-crons message, re-registering cron jobs...');
                     const CronService = (await Promise.resolve().then(() => __importStar(require('./services/cron')))).default;
                     const cronService = typedi_1.Container.get(CronService);
                     await cronService.autosave_crontab();
-                    logger_1.default.info('✌️ Cron jobs re-registered successfully');
+                    logger_1.default.info('[boot] Cron jobs re-registered successfully');
                 }
                 catch (error) {
-                    logger_1.default.error('✌️ Failed to re-register cron jobs:', error);
+                    logger_1.default.error('[boot] Failed to re-register cron jobs:', error);
                 }
             }
         });
@@ -278,7 +281,7 @@ class Application {
             process.exit(0);
         }
         catch (error) {
-            logger_1.default.error(`✌️ [${serviceType}] Error during shutdown:`, error);
+            logger_1.default.error(`[${serviceType}] Error during shutdown:`, error);
             process.exit(1);
         }
     }

package/static/build/config/const.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LINUX_DEPENDENCE_COMMAND = exports.NotificationModeStringMap = exports.PYTHON_INSTALL_DIR = exports.SAMPLE_FILES = exports.QL_PREFIX = exports.TASK_PREFIX = exports.QL_COMMAND = exports.TASK_COMMAND = exports.LOG_END_SYMBOL = void 0;
+const container_1 = require("./container");
 exports.LOG_END_SYMBOL = '　　　　　';
 exports.TASK_COMMAND = 'task';
 exports.QL_COMMAND = 'ql';
@@ -46,20 +47,21 @@ exports.NotificationModeStringMap = {
     18: 'chronocat',
     19: 'ntfy',
     20: 'wxPusherBot',
+    21: 'wxPusherSpt',
 };
 exports.LINUX_DEPENDENCE_COMMAND = {
     Debian: {
-        install: 'apt-get install -y',
-        uninstall: 'apt-get remove -y',
-        info: 'dpkg-query -s',
+        install: (0, container_1.maybeSudo)('apt-get install -y'),
+        uninstall: (0, container_1.maybeSudo)('apt-get remove -y'),
+        info: (0, container_1.maybeSudo)('dpkg-query -s'),
         check(info) {
             return info.includes('install ok installed');
         },
     },
     Ubuntu: {
-        install: 'apt-get install -y',
-        uninstall: 'apt-get remove -y',
-        info: 'dpkg-query -s',
+        install: (0, container_1.maybeSudo)('apt-get install -y'),
+        uninstall: (0, container_1.maybeSudo)('apt-get remove -y'),
+        info: (0, container_1.maybeSudo)('dpkg-query -s'),
         check(info) {
             return info.includes('install ok installed');
         },

package/static/build/config/container.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.maybeSudo = exports.isInContainer = void 0;
+function isInContainer() {
+    return process.env.QL_CONTAINER === 'true';
+}
+exports.isInContainer = isInContainer;
+function maybeSudo(cmd) {
+    return isInContainer() ? `sudo ${cmd}` : cmd;
+}
+exports.maybeSudo = maybeSudo;
+//# sourceMappingURL=container.js.map