4 ms·
Yeah but there I can still update vulnerable libraries independently, to be a statically linked system just means that if there is a bug in libpng then I have t
by lnxg33k1 3y ago
Yeah but there I can still update vulnerable libraries independently, to be a statically linked system just means that if there is a bug in libpng then I have to recompile everything?
- bzzzt 3y agoYes, although it very much depends on how big 'everything' is if that's a problem.
- greyw 3y agoIn most cases relinking is enough.
- Shorel 3y agoI was under the impression only Gentoo users recompile everything. In a statically linked system, your dependency manager will update more packages. And if your program is written in C/C++/Go/Rust, then yes, it will be recompiled.
- lnxg33k1 3y agoI use Gentoo, so I am not against rebuild everything, but afaik unless you have static-libs USE flag for something, it's dynamically linked so relinking on rebuilding the dependency is enough, with static-libs the dependent package is also rebuilt
- colonwqbang 3y agoNot recompile I guess, but you need to relink everything. Oasis seems to have a good way of doing that, with the whole system being built in a single tree by an efficient build tool (my recollection from last time it was posted). A dynamic executable needs to relink every time it's run, which also takes time.
- nordsieck 3y ago> if there is a bug in libpng then I have to recompile everything? You say that as if it's such a burden. But it's really not. I'm somewhat sympathetic to the space argument, but a package manager/docker registry means that updating software is very easy. And it happens all the time for other reasons today anyhow.