pkgsrc-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: www/grafana downloading executables (plugins) at runtime



> Unfortunately it's a similar, if not worse, story on illumos.  The grafana
> package as shipped is effectively useless because it disables sqlite.
Sorry, I don't understand why you would need SQLite in Grafana.

> Likewise, I had to compile the influxdb datasource from source
Well, the good news in this is that there /is/ a source somewhere.
I was getting afraid they would close-source the datasource code, 
so effectively close-source Grafana (and offer their cloud services).

> It's all pretty terrible.
It's completely crazy.

> I don't know how many CVEs grafana 11.x has at this point,
It can't be worse than arbitrary RCE by a third party.

> but it would be nice to bring it back for users who just want something 
> that actually works.
Well, fortunately, this is pkgSRC, so I can bring it back for myself at 
any time from CVS, but does anyone know what the last version without 
this RCE was?


Home | Main Index | Thread Index | Old Index