NodeJS breakpoint won't stop with capabilities set

[clarkttfu]

Config

OS (VmWare Fusion virtual machine)
Debian 4.19.98-1 (2020-01-26) x86_64 GNU/Linux
Nodejs 12.14.1 / 12.19.0 / 14.15.0

Problem

1. setup capability: sudo setcap cap_net_admin+iep $(which node)
2. launch debug session and break point stops
3. quit vscode and kill the remote vscode-server process then start vscode remote dev session
4. launch debug session and break point do not stop

product_json.txt

FYI:
https://man7.org/linux/man-pages/man7/capabilities.7.html

[clarkttfu]

As I can recall, it was good in June, 2020

[connor4312]

I'm not familiar at all with Linux capabilities. Just trying to reproduce this using the instructions you gave, I'm no longer able to execute node. Can you provide more detailed steps to help me repro?

$ sudo setcap cap_net_admin+iep $(which node)
$ ls -l $(which node)
-rwxrwxrwx 1 root staff 73617512 Jul 29  2020 /usr/local/bin/node
$ node --version
bash: /usr/local/bin/node: Operation not permitted
$ sudo node --version
sudo: unable to execute /usr/local/bin/node: Operation not permitted

[clarkttfu]

Hi, thanks for the update!

I think the problem is that you used the global node executable, which usually is installed by root...
I use nvm to install and use node executable inside ~/.nvm.

With nvm, you can install and manage different versions of node for yourself, without affecting other users on the same host. But to set capability, sudo is required to execute setcap.

More info about capability:

For Debian you may need package libpam-cap and add a line (before the line none *) like below into /etc/security/capability.conf

cap_sys_admin,cap_net_admin            your_user_name_here

[connor4312]

Thanks, I was originally using a container to repro on windows but it looks like setcap is broken (at least this capability) there.

This looks like it's actually a bug in Node.js, I've opened nodejs/node#37588

As a workaround you can launch your programs directly in the terminal using --inspect and then attach to them.

[clarkttfu]

This looks like it's actually a bug in Node.js

Thanks for the update, but would you please share some detail here?

[connor4312]

What detail do you have questions about?