3 ms·
How do you ensure that your compiler and libs are clean though?
by okl 4y ago
How do you ensure that your compiler and libs are clean though?
- codesniperjoe 4y agoThe compiler (go) is part of a static read-only (compressed/in-memory) RootFS. Build on a air-gap build server, touching only signed/verified/reviewed code from git-offline mirror snaps. Go has no libs, all static. The resulting runtime only binaries are totally uniq/randomized and dependency free, straight from (signed) source code.