Sandboxing Subprocesses with Landlock in Go 1.28
Learn how Go 1.28 applies Linux Landlock rules to subprocesses with os/exec, using an example that blocks directory creation.
Learn how Go 1.28 applies Linux Landlock rules to subprocesses with os/exec, using an example that blocks directory creation.
I benchmarked Go 1.28 HTTP/2 parking with 5,000 idle connections. Across three runs, the same server binary used 85-93 MiB less RSS with parking enabled.
I can usually look at a piece of code and understand what it does. The harder question is why it was written that way.