[go-nuts] Is this really true? (Go 'unable to reliably change their UID once started for goroutines' ?)

2020-12-16 Thread Russtopia
The experimental 'Project Gemini' [https://gemini.circumlunar.space/] has a few servers written in Go, and one in particular [ https://tildegit.org/solderpunk/molly-brown] makes this claim: It is very important to be aware that programs written in Go are unable to > reliably change their UID once

[go-nuts] Re: Is this really true? (Go 'unable to reliably change their UID once started for goroutines' ?)

2020-12-16 Thread Russtopia
My bad ... I see too late that someone already filed an issue with the molly-brown project about this. https://tildegit.org/solderpunk/molly-brown/issues/16 On Wed, 16 Dec 2020 at 00:49, Russtopia wrote: > The experimental 'Project Gemini' [https://gemini.circumlunar.space/] has > a few server

Re: [go-nuts] Re: Interfaces holding integers and memory allocations

2020-12-16 Thread Arnaud Delobelle
Hi Ben, that's an interesting idea. I considered it at the start but didn't go for it in the end (I can't remember why exactly, probably because that would make it quite a big struct for Lua). There is a possibility that I could adapt it a bit and have something like type Value struct { scal

Re: [go-nuts] Re: Is this really true? (Go 'unable to reliably change their UID once started for goroutines' ?)

2020-12-16 Thread 'Axel Wagner' via golang-nuts
Even pre go1.16, while it's true that Setuid/Setgid don't work reliably in a multi-threaded program, I don't think the conclusions they draw are correct. You can still start CGI processes as a different user: https://golang.org/pkg/os/exec/#Cmd.SysProcAttr Also, while I'm not totally sure, I think

Re: [go-nuts] Re: Interfaces holding integers and memory allocations

2020-12-16 Thread Arnaud Delobelle
(sorry about the code formatting gone wrong, I replied in gmail it it seems to have removed all indentation!) On Wednesday, 16 December 2020 at 10:15:07 UTC Arnaud Delobelle wrote: > Hi Ben, that's an interesting idea. I considered it at the start but > didn't go for it in the end (I can't remem

Re: [go-nuts] Re: Interfaces holding integers and memory allocations

2020-12-16 Thread 'Axel Wagner' via golang-nuts
FWIW, not that you *should* do it, but you *could* enact your original plan using unsafe: https://play.golang.org/p/W9Ntzxif_ol I don't think it's advisable though - among other things, the compiler might well conclude that `i` doesn't change in this code and eliminate the repeated loads at some po

[go-nuts] Re: Interfaces holding integers and memory allocations

2020-12-16 Thread Arnaud Delobelle
Ah interesting, I guess that could mean I would need to switch to using reflect.Value as the "value" type in the Lua runtime. I am unclear about the performance consequences, but I guess I could try to measure that. Also, looking at the implementation of reflect, its seems like the Value type

Re: [go-nuts] Re: Is this really true? (Go 'unable to reliably change their UID once started for goroutines' ?)

2020-12-16 Thread Kevin Chadwick
>> It is very important to be aware that programs written in Go are unable to >> reliably change their UID once started, due to how goroutines are implemented >> on unix systems. As an unavoidable consequence of this, CGI processes started >> by Molly Brown are run as the same user as the server pr

Re: [go-nuts] equal func in type?

2020-12-16 Thread 'Axel Wagner' via golang-nuts
On Wed, Dec 16, 2020 at 7:34 AM xie cui wrote: > https://github.com/golang/go/blob/master/src/reflect/type.go#L315 > is this equal func generate by compiler, > Yes, or by `reflect`. > so where can i find the code generate this func? > >From what I can tell: https://github.com/golang/go/blob/

Re: [go-nuts] what is the scene to use mapaccess1_fat and mapaccess2_fat?

2020-12-16 Thread 'Axel Wagner' via golang-nuts
A little bit of guesswork, again (I'm not working on the compiler) https://github.com/golang/go/blob/75e16f5127eb6affb4b473c93565a8d29a802e51/src/cmd/compile/internal/gc/walk.go#L1094 `mapaccess1` is obviously for map index expressions of the form `m[key]`, while `mapaccess2` is for assignments li

[go-nuts] Re: get decibel level from audio stream or file

2020-12-16 Thread ccahoon
I believe https://github.com/mdlayher/waveform does what you're hoping to do, and uses it to generate waveform images. Matt Aimonetti, a co-founder of Splice, has several audio-related libraries at https://github.com/go-audio, and a great non-Go-specific article about generating waveform data

Re: [go-nuts] What are debian:buster-slim advantages vs alpine ones?

2020-12-16 Thread ksbh...@gmail.com
https://hub.docker.com/r/bitnami/minideb/ is a good alternative. Regards – Bhaskar On Tuesday, December 15, 2020 at 9:03:29 PM UTC-5 amits...@gmail.com wrote: > > > On Wed, 16 Dec 2020, 12:38 pm Constantine Vassilev, > wrote: > >> All examples in Google Cloud Run for building >> Golang Docker

[go-nuts] How to set the "godebug" environment variable from the go file?

2020-12-16 Thread Sean
hi all, i have a project I have to work with CGo. I want to disable some controls as they are not good enough right now. It works when I write "set godebug=cgocheck=0" on Windows in console. However, this is a GUI program. Console should not open. I tried this with "os.Setenv". I define it in "

Re: [go-nuts] Re: get decibel level from audio stream or file

2020-12-16 Thread Jeff Mangan
Thanks I'll check them out, and I was thinking further, I don't really need the decibels, I think I can do what I need by just getting the volume of the recording (how recording software has the graph that goes up and down), or maybe that is the decibel, not sure yet. On Wed, Dec 16, 2020 at 9:43

[go-nuts] Re: How to set the "godebug" environment variable from the go file?

2020-12-16 Thread jake...@gmail.com
Could you explain in more detail why you want to always run with cgocheck=0. That seems ill advised at first glance. I'm not sure what that has to do with "I want to disable some controls." On Wednesday, December 16, 2020 at 11:50:04 AM UTC-5 Sean wrote: > hi all, > i have a project I have to w

Re: [go-nuts] What are debian:buster-slim advantages vs alpine ones?

2020-12-16 Thread Constantine Vassilev
What about the size of images? For pure Golang project what are the advantages of glibc? For a project I have to present pro and cons before the team to decide. On Tuesday, December 15, 2020 at 6:03:29 PM UTC-8 amits...@gmail.com wrote: > > > On Wed, 16 Dec 2020, 12:38 pm Constantine Vassilev,

Re: [go-nuts] How to set the "godebug" environment variable from the go file?

2020-12-16 Thread Ian Lance Taylor
On Wed, Dec 16, 2020 at 8:49 AM Sean wrote: > > hi all, > i have a project I have to work with CGo. I want to disable some > controls as they are not good enough right now. > It works when I write "set godebug=cgocheck=0" on Windows in console. > However, this is a GUI program. Console should not

Re: [go-nuts] Re: Is this really true? (Go 'unable to reliably change their UID once started for goroutines' ?)

2020-12-16 Thread Ian Lance Taylor
On Wed, Dec 16, 2020 at 5:11 AM Kevin Chadwick wrote: > > >> It is very important to be aware that programs written in Go are unable to > >> reliably change their UID once started, due to how goroutines are > >> implemented > >> on unix systems. As an unavoidable consequence of this, CGI processe

[go-nuts] [security] Vulnerability in golang.org/x/crypto/ssh

2020-12-16 Thread Roland Shoemaker
Hello gophers, Version v0.0.0-20201216223049-8b5274cf687f of golang.org/x/crypto fixes a vulnerability in the golang.org/x/crypto/ssh package which allowed clients to cause a panic in SSH servers. An attacker can craft an authentication request message for the “gssapi-with-mic” method which will