Как незаметная indirect-зависимость в Go дописала ручку в ваш HTTP-сервер

Аккуратный Go-сервис на net/http с единственной ручкой /time. Обновляем одну библиотеку через go get, не трогая свой код. После рестарта в сервисе появляется ручка /__injected, которая отдаёт строки из памяти процесса. Мы её не регистрировали — а пакет, который это сделал, формально даже не используется. Разбираю шаг за шагом, как такое возможно: модель зависимостей Go и коварство //indirect, тихий вход через init(), сканирование кучи и unsafe. Pointer для поиска ServeMux в работающем сервере. И, конечно, как от этого защищаться — от аудита зависимостей до seccomp и read-only ФС. Весь код — в репозитории, «вредонос» написан в учебных целях. Запускать только в песочнице. Разобрать «вредоноса»

https://habr.com/ru/articles/1048732/

#init #gomod #dependencies

Как незаметная indirect-зависимость в Go дописала ручку в ваш HTTP-сервер

Как незаметная indirect-зависимость в Go дописала ручку в ваш HTTP-сервер Все примеры из статьи лежат в репозитории github.com/korableg/init-injection-example . Код «вредоноса» написан в учебных целях...

Хабр

🚨 NEWS: Git per principianti: init, add, commit, push, pull spiegati con esempi veri

Ecco i punti chiave in breve:
💡 Hai un progetto che cambia ogni giorno. HTML, CSS, PHP, magari un database. Ogni modifica è un rischio: un fix ne rompe un altro, torni indietro a memoria, i file si accumulano in cartelle tipo...

🚀 LINK: https://meteoraweb.com/analisi-dei-dati-e-metriche/git-per-principianti-init-add-commit-push-pull-spiegati-con-esempi-veri

#git #init #add #commit #push

Init vs SystemD

This subject was highlighted in an interesting manner by the author.
The article is also very informative. You will learn a few to a lot of things about both systems.

From my perspective the author seems to have forgotten one important thing.

He stated himself that Init follows the UNIX, not Linux, principle of doing one thing good.

The UNIX principle is way older than Linux itself, which makes me think that the author has not been around long enough, to know how interesting of a monstrosity systemD has become.

Regardless whether you like Init or systemD, you have to know that they have totally different concepts with similar final goals but in different manners.

The philosophies coding styles, modus operandi & configuration, differ so wildly from one to another, that you should not compare them, AT ALL

Never compare systemD with Init!

Realize one thing, if you do not want to see systemD, ever you have to migrate to one of the more advanced Open Source environments.

You shall be safe in freeBSD, openBSD, netBSD, ghostBSD, Open Indiana, Tribblix, Illumos, or any of the others which have been around much longer than Linus Torvalds was even an ID {idea} in the balls of his father.
You can even go for Open DOS, sinds that's single tasking no Init is needed

You should also not forget that you can always, write & program your own Init system or modify the current Init system itself, if you are stuck on a Linux flavor.

Stop bitching about which system is better.

They are totally different.

Live with one of them or write your own

Init is Open Source
systemD is Open Source

Use the power, choose or fork your favourite

Sources:

https://en.wikipedia.org/wiki/Systemd

https://en.wikipedia.org/wiki/Init

https://linuxtldr.com/init-vs-systemd/

#Init #systemD #Linux #POST #freeBSD #openBSD #netBSD #ghostBSD #programming #sh #C #Lang

Which init system should I choose?

I am installing [Artix Linux](https://wiki.artixlinux.org/) after three years of Arch goodness. The supported init systems are openrc, runit, s6 an…

@codewizard #Systemd will conform to #Ageverification demands, contrary to #init based systems. #Pid1

Se vienen cositas nuevas en el canal!

Jugando con script de inicio en systemd, SysV Init, y Runit, respondiendo dudas de alumnos de los cursos :-)

A editar!

No olviden suscribirse para enterarse del lanzamiento! 🔔

https://www.youtube.com/juncotic

#gnu #linux #systemd #runit #sysvinit #sysv #init #rclocal #arch #debian #devuan #antix

Okay, I heard that runit init system is pretty fast. But was not ready for it...

Void Linux + Sway + TUIGreet. From decrypting LUKS to login screen (according to dmesg) - 0.8 seconds.
From pushing the button to login screen (excluding GRUB menu and typing in LUKS password) - just about 7 seconds.

Wild. Just wild.

#linux #void #voidlinux #runit #init #funny #testing #homelab #laptop

So, I rescued a 12-year-old Macbook Pro, given up by its owner because Apple had orphaned it from security updates, and also it was suffering from Apple High-Qwality Spicy Pillow Syndrome.

I replaced the battery and installed Linux on it.

And I gotta say, this was the most satisfying thing I've done with a keyboard in years:

# apt-get purge systemd libnss-systemd

#Devuan Excalibur installed/upgraded from Debian Trixie like a champ. Now I don't have to deal with extraneous horseshit when Lennart adds systemd-mountd, systemd-sshd, systemd-bourne-shell, systemd-emacs, etc, etc...

Thanks to @landley for the post that finally convinced me to give Devuan a go. I'd been thinking about it for years, but didn't feel like setting aside a bunch of debugging time which I assumed would be needed.

Now to figure out how to switch to s6 from runit. ( @ska )

#Debian #systemd #UnixPhilosophy #runit #s6 #init #Unix #Linux

A Giant Leap Towards an AI-Native OS: AgenticInit
#linux #pid1 #init It's #ai init

https://os.ewe.moe/blog/202604-april-fool

eweOS | A Giant Leap Towards an AI-Native OS: AgenticInit

Announces a Revolutionary Paradigm Shift, Fully Replacing init system with an LLM-Driven PID 1 to Forge a Non-Deterministic, Emotionally Intelligent Operating System!

eweOS