Clarify arch is the builder and pull go ver from runtime#2
Clarify arch is the builder and pull go ver from runtime#2mtardy merged 1 commit intoquarkslab:masterfrom
Conversation
|
Thanks 😊! Good idea to clarify and remove the injection of the Go version since the string was already injected in the binary at build time by the compiler! I saw you wanted to create a nix package, if you need a release with some changes tell me! |
|
As a note this is how you could build a container using nix (once kdigger hits the right channels)
build it with: load the resulting tar.gz image: running: there's also nixery.dev which is very cool, you can just create a pod with |
|
Thanks a lot for taking the time :)!! I will surely try when your merge request in NixOS/nixpkgs is merged and add these instructions to the readme! It would be truly awesome that |
|
kdigger is in unstable now and will make it to stable some time soon https://search.nixos.org/packages?channel=unstable&query=kdigger λ kdigger --help
zsh: command not found: kdigger
# stable cli
λ nix-shell -p kdigger
[nix-shell:~]$ kdigger --help
kdigger is an extensible CLI tool to dig around when you are in a Kubernetes
cluster. For that you can use multiples buckets. Buckets are plugins that can
scan specific aspects of a cluster or bring expertise to automate the Kubernetes
pentest process.
Usage:
kdigger [command]
# ...
-w, --width int Width for the human output (default 140)
Use "kdigger [command] --help" for more information about a command.
[nix-shell:~]$
exit
# unstable new cli
λ nix shell nixpkgs#kdigger
[nix-shell:~]$ kdigger --help
kdigger is an extensible CLI tool to dig around when you are in a Kubernetes
cluster. For that you can use multiples buckets. Buckets are plugins that can
scan specific aspects of a cluster or bring expertise to automate the Kubernetes
pentest process.
Usage:
kdigger [command]
# ...
-w, --width int Width for the human output (default 140)
Use "kdigger [command] --help" for more information about a command.Also nixery was updated but its still not on the commit with kdigger on it just yet https://nixery.dev/#which-revision-of-nixpkgs-is-used-for-the-builds |
|
Thanks again @06kellyjac, being able to build images like this is amazing for POC and stuff: |
|
Glad you like it :D |
https://cs.opensource.google/go/go/+/refs/tags/go1.18.3:src/runtime/extern.go;l=251-266
uname -mstill needs to be injected by the build hostmake it clear the arch is the builder's arch, not the current system's arch