3 ms·
3? You think you underestimate the number of libraries your software uses.
by BadBadJellyBean 3y ago
3? You think you underestimate the number of libraries your software uses.
- lrvick 3y agoI actually full source bootstrapped a Linux distribution from zero recently. Most distros have a lot of dependencies you do not need. In this case you only actually need curl, openssl, and busybox. Those depend on at least a small libc implementation and a kernel but those are certainly already present. Coreutils or busybox is probably already installed too. Still, I will grant the requirement of musl and a linux kernel since we are being pedantic or maybe talking about an embedded linux use case, so 5 deps total to boot from metal and get a cert. To be fair I would never actually ship openssl or busybox in a real embedded project. Would probably write a simple standalone binary using the standard library of Go or something.
- BadBadJellyBean 3y agoHow is that in any way realistic? Most people don't bootstrap Linux systems. And just because it is pre-installed doesn't make it safe. Most software on a modern Linux distribution is dynamically linked to several libraries which might depend on other libraries.