How can I connect to a REPL session running on a remote server that I can access, for example via SSH?
6 Answers
This might be obvious to network specialists but took me a while to find out so documenting it here.
On the remote server, when launching your REPL application instead of just lein repl
force binding to a port:
lein repl :start :port 40000
On your machine, connect to the remote server the normal way (for example via ssh). Then connect to your application this way:
lein repl :connect localhost:40000
That's it!
Well, that's simple. Briefly, there are some steps to be done:
- the
nrepl
package should be a part of the production build, but not just a dev dependency; - When your app starts, it also spawns a repl session in a separate thread on a certain port;
- your server either exposes that port or you tunnel it through SSH.
Now the details:
1) Add these deps into the primary :dependencies
vector:
:dependencies [[org.clojure/clojure "1.9.0"]
;; for remote debugging
[cider/cider-nrepl "0.17.0"]
[org.clojure/tools.nrepl "0.2.13"]
You need cider-nrepl
in case you work with Emacs/Cider. Otherwise, you may omit that.
2) Add a separate namespace to wrap nrepl server:
(ns project.nrepl
(:require [clojure.tools.nrepl.server
:refer (start-server stop-server)]))
(defn nrepl-handler []
(require 'cider.nrepl)
(ns-resolve 'cider.nrepl 'cider-nrepl-handler))
(defonce __server (atom nil))
(def set-server! (partial reset! __server))
(def port 7888)
(defn start
[]
(when-not @__server
(set-server!
(start-server :port port :handler (nrepl-handler)))))
(defn stop
[]
(when-let [server @__server]
(stop-server server)
(set-server! nil)))
(defn init
[]
(start))
In your core module, just call (project.nrepl/init)
. Now your app allows connecting to it through nrepl.
3) On remote server, you may expose the TCP 7888 port to the outer world which is insecure. At least the port should be restricted from certain IP addresses, e.g. your office. The better option would be to forward it through SSH as follows:
ssh -L 7888:<remote-host>:7888 <user>@<remote-host>
Now, open Emacs, call M-x cider-connect RET localhost 7888
and it's done: you are connected to the remote app.
BTW, you can easily connect from one REPL/clojure app to other REPL (for example to compare eval results between dev and UAT) like this
=> (require '[clojure.tools.nrepl :as repl])
nil
=> (with-open [conn (repl/connect :port 59258)]
(-> (repl/client conn 1000) ; message receive timeout required
(repl/message {:op "eval" :code "(+ 2 3)"})
repl/response-values))
[5]
more here https://nrepl.org/nrepl/usage/clients.html#_talking_to_an_nrepl_endpoint_programmatically
Secure way to connect to remote clojure repl
- start repl on localhost on remote machine
$ clj "-J-Dclojure.server.repl={:port 5555 :accept clojure.core.server/repl}"
- create ssh tunnel on local machine
$ ssh -L :5555:localhost:5555 remoteuser@remotehost -p 22 -N -v
- start repl on local machine and connect to remote repl via ssh:
$ clj -Sdeps '{:deps {vlaaad/remote-repl {:mvn/version "1.1"}}}'
Downloading: vlaaad/remote-repl/1.1/remote-repl-1.1.pom from clojars <br>
Downloading: vlaaad/remote-repl/1.1/remote-repl-1.1.jar from clojars <br>Clojure 1.10.1 <br>
(require '[vlaaad.remote-repl :as rr])<br>
user=> (rr/repl :port 5555)
- or start repl on local machine and immediately drop into a remote repl
clj -Sdeps '{:deps {vlaaad/remote-repl {:mvn/version "1.1"}}}' -m vlaaad.remote-repl :port 5555