3 ms·
When you install a package with `apt-get`, that package can potentially change your system in any way it pleases. Running `go get` will download and compile cod
by yepguy 13y ago
When you install a package with `apt-get`, that package can potentially change your system in any way it pleases. Running `go get` will download and compile code, but there is no security risk until you run or use that code without checking it first.
- reidrac 13y agoYou're comparing things that are different. When you install a package with apt-get: - it comes from a repository that has been signed by the distributor. - the package has been tested and has a good level of integration with the system (ie different distributions may package things differently). - depending on the distribution, there may be a commitment to API/ABI stability (ie. Debian backports security fixes most of the time). That said... running "go get" is very convenient if you control the code repository where you're fetching the code, but it's not a good idea when using 3rd party software that is in active development. EDIT: formatting
- mineo 13y agoIf you don't trust your package manager & distribution supplied packages (read: your whole operating system), the security risk between an 'apt-get' and 'go get' is most likely not the most important thing to worry about.