Skip to Content

So you’ve taken the dive into micro-services enterprise development, you’ve joined the church of the twelve-factor app and now you’ve got your SAP Cloud Foundry Cloud Platform account and are ready to burn away the cloud.  You’re on the right path by following all the best practices and are using the multi-target application architecture to coordinate it all and have divided your monolithic enterprise app into a reasonable number of application modules.  You crank up your trusty WebIDE and build and wait and deploy and wait and test and see an issue and start all over again.

If you’ve got your application deployed into Cloud Foundry and you’re focusing your efforts on a couple of NodeJS modules, there is a much faster way.  Use the cf ssh command to edit the already deployed files in CloudFoundry in order to quickly figure out what changes need to be made and then incorporate them back into your project.

Currently the WebIDE will only support fully deployment of your whole application.  Remember that each application module is in it’s own right a web server plus other logic for doing it’s work.  So if you have four application modules and an app-router, you have to pull the dependencies for 5 web servers, build the mtar, deploy and test.  If you’re only working on one module, that’s a lot of building and copying and running for nothing.  Now you can take matters into your own hands and clone (you are using Git right) your project into a local directory and use cf push to deploy one module at a time but then you have to manage the attributes of how it gets pushed and any binding that may be required for the module to access the services it needs.

When working with NodeJS modules in development (not production) the trick is to launch your NodeJS module with a module called nodemon instead of node as you normally would.  Nodemon watches for file changes an reloads the server when it sees that something has changed.

I’m going to demonstrate how to set all of this up using the HANA WebIDE found in HANA Express edition.  The basic nuts and bolts can also be performed on your local workstation with the CF CLI and MTA plugin.

The core of the technique I’m using here can be found at this cloud foundry docs page:

I’m using a HANA Express (HXE) system that is hosted on AWS, but you should be able to do the same thing with HXE installed in a VM on your local workstation.  I’ve can run it on my 16GB Macbook Pro under VMWare Fusion with 12GB, but it pretty much uses every bit of 12GB so this is for utilizing the tools and not doing large data-set testing.

I’m going to use the HXE administrative user in these examples.  You can use a different user, but since the files that drive the WebIDE are already owned by the hxeadm user, it makes for a simpler setup.

Make sure you can ssh into your HXE server and become the hxeadm user.

su - hxeadm

Return to the root user and double check that you have the cf cli tool available and that it’s the current version.  Here are the links to the installer and the MTA plugin that’s needed.

CF CLI CloudFoundry CLI
CF CLI MTA Plugin CloudFoundry CLI Plugin Page

If you need help installing the plugin, look here:

cf install-plugin /tmp/cf-cli-mta-plugin-1.0.2-linux.bin

Note that the plugin is installed for each user so if you change users, you’ll need to install the plugin again for that user.

Double check that your cf cli version is what you expect and you’re not picking up an older version that might be lurking in your path.

cf --version

Also check that the plugins got installed correctly.

cf plugins

We need to make sure the hxeadm user is prepared for ssh connections.


ls -al ~/.ssh
If no files are seen, then generate new id files.
Generating public/private rsa key pair.
 Enter file in which to save the key (/usr/sap/HXE/home/.ssh/id_rsa): (blank for default)
 Enter passphrase (empty for no passphrase): (blank for no passphrase)
 Enter same passphrase again: (leave blank again)
 Your identification has been saved in /usr/sap/HXE/home/.ssh/id_rsa.
 Your public key has been saved in /usr/sap/HXE/home/.ssh/
 The key fingerprint is:


The WebIDE creates a directory on the server for each user that contains their projects in their workspace.  Since the name of the directory is system generated, it’s best to discover it.  Log into the WebIDE web interface and create a sample MTA project with a unique project name that will stand out.  In this case we’ll use abcxyz.

Since this is a HANA Express installation, we know that the xs files are located in

/hana/shared/HXE/xs/ so change into that directory.

cd /hana/shared/HXE/xs/

Now let’s look for that mta.yaml file starting at this directory.

find . -name mta.yaml -print

We see the long directory name with abcxyz in it.  This is our workspace directory.  Make a note of it.

Change into it so that we can grab it’s full path.  You’ll have to modify the specifics for your situation.

cd ./controller_data/fss/625dcf6b-27d8-4323-b3cc-eff7bf02a40c/7a/0d/85/workspaceusr8phhempsj98re/

Copy that full path into your clipboard.  Then change back to the home directory of the hxeadm user.

cd /usr/sap/HXE/HDB00/

Now to make things easier, create a symbolic link to your workspace in the hxeadm home directory.

You will of course need to change the system generated values with the ones on your system.

ln -s /hana/shared/HXE/xs/controller_data/fss/625dcf6b-27d8-4323-b3cc-eff7bf02a40c/7a/0d/85/workspaceusr8phhempsj98re workspace

Change into it and look at the files.  Should be the same as what you see in the WebIDE interface.

Go ahead and delete this abcxyz project.  It’s served it’s purpose for us.

rm -rf abcxyz

Now for grins, go back to the WebIDE web interface in your browser.  Notice that it seems like the project is still there.  It’s not. It’s just that we’re modifying the underlying files directly on the server.  To put things back in sync with the WebIDE, perform a refresh from the Workspace level.

It should disappear.


From here we’re going to work with an existing simple NodeJS application called scp2cf.  Clone the following project into your server.

This is a basic multi-target application with a single NodeJS module called monme and a supporting script.  There is also a tmp folder with will be used to hold some temporary files in a bit.

The only difference between this sample NodeJS application and the default one is that I’ve included a dependency for a module called nodemon and I’ve replace node in the start command with nodemon.  This allows the server.js (or any other file that your server relies on) to be modified and automatically reloaded when a change is detected.



Build your project by right-clicking on the project level and selecting Build.  This creates a .mtar file in the


Deploy your .mtar to Cloud Foundry by right-clicking on it and picking Deploy > To Cloud Foundry.

Enter your Cloud Foundry API endpoint URL: and hit tab.

You have to wait for a while for the system to get your orgs and spaces.  If needed you’ll be asked to authenticate.  This is the SAP-ID username and SAP-ID password.

Watch the console for any issues during deploy.  If it fails you can use the following cf commands.

cf mta-ops
cf deploy -i ### -a monitor
cf dmol

You may find that you have to abort a failed deploy and cf undeploy it and try again.

Check your running apps.

cf a

OK, now that we know our app is running, let’s figure out how to ssh into it’s container.

Check that the space in CF is enabled for SSH.

cf space-ssh-allowed

If it’s not then have your space’s Manager enable it for your.

cf allow-space-ssh

Find your app’s url by displaying it’s details.  routes:

cf app monme

Open your application in a browser and check that it’s working.

You should see this:

If you wanted to make a change, you’d have to go back to the WebIDE, edit the file, rebuild the mtar file, redeploy it, hope nothing bad happened, and then test it again.  This can take a significant amount of time and as your multi-target application get larger, the time gets longer.

But there is a better way.  You can ssh into your application module’s container and manipulate the files directly after they are deployed.  To do this continue on.  You’ll need to get ssh’d into your server and start using the cf cli.

Check that the application is enabled for SSH

cf ssh-enabled monme

If it’s not then enable it.

cf enable-ssh monme

IMPORTANT!!! You won’t be able to ssh into your application until to restage it.

cf restage monme

Now.  Test that you can connect to the application with the cf ssh command.

cf ssh monme

You should get a prompt that starts with vcap@.  If you do you’ve ssh’d into your application.

You can perform a limited set of linux commands like, ls, pwd, cat, cd, and vi etc.

You’ll find your application files in the app directory.

cd app

Since vi is available, you can use it to edit the server.js file and save it.  Once you do so, NodeJS will be reloaded and you can browse to your application’s URL and see the change.


Type exit to return to your system.


This is a great time saver when you want to jump in and tweek a few files to make sure that things are working as you expect or experiment while using the live cloud foundry environment.  You’ll want to have a ssh window open with the cf logs command running to keep an eye on what’s happening.  Keep in mind that you’re changing files on the live cloud foundry environment.  If you don’t make the same changes back in your WebIDE, they will be lost.  In fact if you do something that causes the application to fail, the system will restart it with the last staged files and your latest changes will be lost.  If you’d rather continue working on the file within the WebIDE, then there are things you can do to help facilitate this automatically.


The cf ssh command is great, but what if you want to use the normal scp command to send modified files into cloud foundry?  There is a way to do this but it’s a bit more complicated.

Let’s ssh into the application container again but this time use the ssh command.

First we need to know your applicaiton’s guid.

cf app monme --guid

I’ll continue to use mine in this example, but you’ll need to use yours.

Ask your cloud foundry system for a special one-time-use password code for sshing in.

cf ssh-code

Now put the guid into this form of the ssh command. Alter the guid and cf region to match yours.

ssh -p 2222 cf:8aa9f796-e53e-4564-b4e3-597e82d7c2e7/

When prompted for the password, use the string that cf ssh-code returned.

> cf ssh-code
> ssh -p 2222 cf:8aa9f796-e53e-4564-b4e3-597e82d7c2e7/'s password: CWgTh2ZmZH

If this works for you, then you’re ready to try the scp version of the command.

In order to facilitate this automatically, I’m using a linux program called expect and wrapping the details into a shell script called  This script will need to read and write files to a local folder, so I’ve included one called tmp.  Also, for reasons I’ll show shortly, I need to invoke this script from within the module’s source directory so there are several relative path specifiers involved.

Change into the workspace folder as described above.

cd workspace

Change into the project mta_scp2cf.

cd mta_scp2cf

The script expects the guid of your application module to be in the file tmp/guid so do this.

cf app monme --guid > tmp/guid

Change into the monme module directory.

cd monme

Run the script from the parent directory like this.  Specifying the file you want to copy to into your app running in cloud foundry.  Notice I’m chaining 2 commands together with a “;”.

cf ssh-code > ../tmp/code ; ../ server.js

If you get permission denied, you’ll need to change the script’s permissions.

chmod 755 ../

Re-run the command.

cf ssh-code > ../tmp/code ; ../ server.js

If all goes well, you should see scp’s progress bar and that the file is 100% transmitted.  If you don’t then go over the steps above and verify each one and troubleshoot.

Now go into the WebIDE and change the file server.js.  I added “I’m changed.”. and save it.

No go back to your ssh window and re-run the last command.


And reload your browser.

Now you can edit files in the WebIDE and see the results pretty quickly.

One last thing.  You can take advantage of a linux command called inotifywait to automate this for you!  I won’t get into the details, but if you run have inotify installed on your linux system you can paste this script into your ssh console and then all you have to do is to edit your files in the WebIDE and save them, then go reload the browser to test!  Pretty handy.

inotifywait -re modify -m --exclude '/\..+' . |
while read -r directory events filename; do
echo "Events: $events" 
echo "RelPath: $relpath"
NOW=$(date +%s)
printf "%s\n" "$NOW"
DIFF=$(($NOW - $LAST))
if [[ $DIFF -gt 10 ]]; then cf ssh-code > ../tmp/code ; ../ $relpath; else echo "Skip"; fi    


Again, I’m doing this on a linux machine.  MacOS and Windows has similar mechanisms if you want to use your local workstation and the cf cli tools.

Another note is that while the cf ssh command should would with any language, each language and web server handles how it’s re-loaded differently so you’ll need to modify things for java or python or PHP accordingly but the same principal applies.

I hope this saves someone out there a ton of time.

To report this post you need to login first.

Be the first to leave a comment

You must be Logged on to comment or reply to a post.

Leave a Reply