ssh-audit
ssh-audit copied to clipboard
Experiment with Codon compiler
Codon (https://github.com/exaloop/codon) aims to be "a high-performance and zero-overhead" Python compiler. Currently, we use PyInstaller (https://pyinstaller.org/) to create Windows builds, which adds noticeable sluggishness, as well as occasional anti-virus false positives. Additionally, Codon could enable us to ship much smaller Docker packages, since the entire Python interpreter & libraries wouldn't need to be included.
We should experiment with Codon to see if:
- Windows EXEs can be built with it, and
- What kind of changes to the ssh-audit codebase would be needed to successfully compile it.
Note that this is only a research task to determine if Codon support makes sense and/or is possible.
As of this writing, it does not appear that Windows executables can be generated. Furthermore, Codon doesn't seem to be able to understand the module structure we use. Nor does the documentation give any hints on how to resolve these errors.
Seems like Codon is not yet ready for this project to use. Perhaps in a year it can be revisited.