Nix and NixOS
Paul Meyer
Go in the Nix ecosystem: vulnerability scanning and experiments towards a next-gen builder
Saturday 12:15-12:35
|
K.3.601
After looking at the current way Go code is packaged in nixpkgs using buildGoModule, disadvantages are pointed out with a focus on security (backed by data from govulncheck-nixpkgs project) and performance. Out-of-tree alternatives are presented with a focus on the new and promising approach of gobuild.nix, which implements a hook-based builder with module-level caching.