home.social

#boltdb — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #boltdb, aggregated by home.social.

fetched live
  1. #Podman v6 is out! Particularly interesting to me: Modernised #networking (easier rootless #containers), a #REST API for #Quadlets (easier fleet management), enhanced podman machine (#applehv support, hopefully incl. #inotify support).

    Make sure you're using #sqlite as a #database backend before upgrading. Upgrade to 5.8 first to migrate from #boltdb. 6.0 has dropped boltdb support, so everything will be gone if you don't migrate first.

    blog.podman.io/2026/07/introdu

    docs.podman.io/en/latest/_stat

    #linux

  2. #Podman v6 is out! Particularly interesting to me: Modernised #networking (easier rootless #containers), a #REST API for #Quadlets (easier fleet management), enhanced podman machine (#applehv support, hopefully incl. #inotify support).

    Make sure you're using #sqlite as a #database backend before upgrading. Upgrade to 5.8 first to migrate from #boltdb. 6.0 has dropped boltdb support, so everything will be gone if you don't migrate first.

    blog.podman.io/2026/07/introdu

    docs.podman.io/en/latest/_stat

    #linux

  3. #BoltDB is a Go rewrite of #LMDB (mostly; it has a lot more limitations). It's no longer maintained. Since 2021 some forks had a backdoor giving remote command access to machines.

    snyk.io/blog/go-malicious-pack

    All of this is inconceivable for LMDB, since it has no other dependencies. Also, the thought of an embedded DB engine having access to any networking APIs at all is just mindboggling.

    The Go build system, and its automatic pulling of dependencies from github, is ludicrous.

    #golang

  4. #BoltDB is a Go rewrite of #LMDB (mostly; it has a lot more limitations). It's no longer maintained. Since 2021 some forks had a backdoor giving remote command access to machines.

    snyk.io/blog/go-malicious-pack

    All of this is inconceivable for LMDB, since it has no other dependencies. Also, the thought of an embedded DB engine having access to any networking APIs at all is just mindboggling.

    The Go build system, and its automatic pulling of dependencies from github, is ludicrous.

    #golang

  5. #Go Supply Chain Attack: Malicious Package Exploits Go Module Proxy Caching for Persistence - a backdoored typosquat of #BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years. socket.dev/blog/malicious-pack

  6. replaced an in-memory map in a Golang project with BoltDB. Pretty simple transition, surprisingly.