invalid operation: signed shift count 8 (untyped int constant) requires go1.13 or later

[thediveo]

Trying to use nftables in a Go workspace causes the following warning/error (for instance, when working with VSCode and the official go add-on):

invalid operation: signed shift count 8 (untyped int constant) requires go1.13 or later

Is there something blocking upgrading the go.mod to 1.17 or 1.18?

[stapelberg]

No blockers that I know of. Bumped the go.mod version to 1.17, so this should be fixed

[gustavo-iniguez-goya]

Depending on go >= 1.16 version will add glibc >= 2.32 as dependency, which is not available on older distros (due to pthread_sigmask)

On our case, we're compiling with go1.15 to workaround this problem (we don't offer a compilation/package of opensnitch per distribution). For now we'll use nftables@76ed01e

[stapelberg]

Could opensnatch be built without cgo, to produce a statically linked binary without glibc dependencies?

Go 1.15 is quite old at this point. I see much better performance in Go 1.18.

[gustavo-iniguez-goya]

No at this point, we depend on libnetfilter_queue. For now it's not a problem, unless there's an important bug fix that we'd have to apply. In such case I'll offer 2 packages, for old distros and new distros.

Just wanted to point out tht this problem exist