logoalt Hacker News

rlpbtoday at 2:20 PM3 repliesview on HN

Imagine a fully statically linked version of Debian. What happens when there’s a security update in a commonly used library? Am I supposed to redownload a rebuild of basically the entire distro every time this happens, or else what?


Replies

electrolytoday at 2:40 PM

Steel-manning the idea, perhaps they would ship object files (.o/.a) and the apt-get equivalent would link the system? I believe this arrangement was common in the days before dynamic linking. You don't have to redownload everything, but you do have to relink everything.

show 3 replies
paddim8today at 5:31 PM

Then you update those dependencies. Not very difficult with a package manager. And most dependencies aren't used by a ton of programs in a single system anyway. It is not a big deal in practice.

show 1 reply
throwaway2046today at 4:13 PM

Libraries already break their ABI so often that continuously rebuilding/relinking everything is inevitable.

show 1 reply