
Security News
Feross on TBPN: Socket's Series C and the State of Software Supply Chain Security
Feross Aboukhadijeh joins TBPN to discuss Socket's $60M Series C, 500%+ ARR growth, AI's impact on open source, and the rise in supply chain attacks.
github.com/supraboy981322/ssh-remote-compilers
Advanced tools
For some reason, binaries that I compile on my PC (x86 NixOS) don't run on any other x86 Linux machine, but binaries compiled on other machines run fine on both it and any other x86 Linux machine. So in order to have portable binaries, I must compile on a separate machine. I was doing it semi-manually over SSH, but I got tired of writing the following command (for example)
cd ..; tar -cf - src/* | ssh super@dev 'set -e; mkdir -p /tmp/foo; cd /tmp/foo; tar -xf -; cd src; go build -o out.bin .;cat out.bin; cd /tmp; rm -r foo' > foo; cd src
This project is a server and client that does this automatically
[!NOTE] The client isn't written yet, but you can still use it with the SSH command
The user you connect as is the compiler the server will use.
For example, go@your-server will use the Go compiler.
The final binary is dumped to the stdout of your connection, so make sure to pipe it to a file.
Whatever commands passed when connecting to the server are passed as arguments to the compiler.
For example, in order to compile a Go project from directory, you must pipe a tarball of the project directory to the SSH connection and pass . to the server as a command.
(replace your-server with the address for your SSH server and foo with your binary name)
tar -cf - . | ssh go@your-server -p 7845 . > foo
Also, just as a warning, if you pass an argument to the server that sets the output file, you will recieve an empty binary. This is because the server sets the output file name to a random string internally, and your arguments are appended after the (for example) -o er89jht84wt.bin argument.
Finally, It should be noted that, until the client is written, you'll still have to make it executable, you can just add sudo chmod a+x foo to the end of the chain for this.
Once the client is written, usage is likely going to be more like this:
rC go -o foo .
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Feross Aboukhadijeh joins TBPN to discuss Socket's $60M Series C, 500%+ ARR growth, AI's impact on open source, and the rise in supply chain attacks.

Security News
OSV withdrew 157 OSV malware reports after automated false positives incorrectly flagged trusted npm and PyPI packages, sending bad records into tools that rely on OSV data.

Research
/Security News
TrapDoor crypto stealer hits 36 malicious packages across npm, PyPI, and Crates.io, targeting crypto, DeFi, AI, and security developers.