Linux Dash – Simple web-based server monitoring

It looks like a cool project and the interface pretty well done too. Good job.<p>Is there something particular you want to specifically mention that has happened since you last shared the app five months ago? - <a href="https://news.ycombinator.com/item?id=7125153" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=7125153</a><p>Anyways, as this is shared here on a developer oriented forum, it would be fitting to speak of the actual implementation too. Taking quick look at the source, it seems to have some security issues ranging from XSS to potential CE. These seem to arise from common bad practices.<p>I would advice going through the source code and making sure all values you echo as JSON are properly encoded and that you don&#x27;t use anything as-is in a shell command.<p>Few examples:<p>- <a href="https://github.com/afaqurk/linux-dash/blob/7bd5dcb637f815702bcd40e9058fd6604d62df4c/sh/where.php#L15" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;afaqurk&#x2F;linux-dash&#x2F;blob&#x2F;7bd5dcb637f815702...</a> - <a href="https://github.com/afaqurk/linux-dash/blob/7bd5dcb637f815702bcd40e9058fd6604d62df4c/sh/ip.php#L18" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;afaqurk&#x2F;linux-dash&#x2F;blob&#x2F;7bd5dcb637f815702...</a> - <a href="https://github.com/afaqurk/linux-dash/blob/7bd5dcb637f815702bcd40e9058fd6604d62df4c/sh/ip.php#L31" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;afaqurk&#x2F;linux-dash&#x2F;blob&#x2F;7bd5dcb637f815702...</a>

This has really come a long way since I last used it however I wish it didn&#x27;t have the php dependency (not so much php, but php+apache&#x2F;nginx).<p>IMO something self contained like a static (go) binary or another language that could host its own servers (node, java, etc) would be much better

Take a look at Amonone - <a href="https://github.com/martinrusev/amonone" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;martinrusev&#x2F;amonone</a> It is a lightweight monitoring tool written in Python with charts for all system(cpu,disk,network,etc) and process metrics(cpu&#x2F;memory). Plus it has alerting with email&#x2F;sms notifications.

Redhat is pushing their new &quot;cockpit&quot;[1] project very hard for their new &quot;Project Atomic&quot;[2] initiative.<p>[1] <a href="http://cockpit-project.org/" rel="nofollow">http:&#x2F;&#x2F;cockpit-project.org&#x2F;</a> [2] <a href="http://www.projectatomic.io/" rel="nofollow">http:&#x2F;&#x2F;www.projectatomic.io&#x2F;</a>

Also check out Cockpit [0] for a similar, pre-dating project.<p>[0] <a href="http://cockpit-project.org" rel="nofollow">http:&#x2F;&#x2F;cockpit-project.org</a>

I been using this one -&gt; <a href="https://github.com/abimaelmartell/system_monitor" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;abimaelmartell&#x2F;system_monitor</a><p>I tried yours, but i was to buggy when i tried it, also insecure. I saw some exec($COOKIE).<p>Hope you improved it. I will give a second try!

Do you have plans to break apart the monitoring and reporting, so that one monitoring node could monitor the statistics of multiple servers? Something like www.scoutapp.com (proprietary) or Cacti (open source). That would be really cool. I&#x27;m growing a network of 100&#x27;s of servers, and not about to pay scoutapp $10 per server... so something equivalently nice looking, but open source, would be awesome.

Awesome. Can you make it work on a mobile? I can only assume its the viewport meta tag with user-scalable=no.<p>The design isn&#x27;t exactly setup for mobile so you may as well make it work like a real webpage.

Not a great idea to just leave your phpinfo() out there in the open.

It reports 300KB&#x2F;s upload and 5.9MB&#x2F;s download speed for my server, but I&#x27;m pretty sure it&#x27;s symmetrical...

Is it possible to use this to send metrics to Graphite for example?

what does this offer that command line tools and status line indicators do not?