SNOW-2916860: v1.18.1 telemetry collection question

[horgh]

Hi!

I see v1.18.1 added telemetry collection with #1629. Would you be able to tell me more about it?

It looks like you're now loading binary blobs and requiring cgo. Is the source for the blobs available somewhere?

I am mostly concerned that security wise this seems not ideal - cgo and the binary blobs in particular. I am hesitant to update as a result.

Thank you!

[sfc-gh-dszmolka]

hi @horgh thanks for raising this and for your patience during the holiday period - happy new year on the same note :)

To answer the question: for now, we use this shared library for extended platform telemetry to identify and prepare testing platform for native rust extensions.

The source code is already publicly available and very recently the dev team now published some build instructions too, alongside the repo at https://github.com/snowflakedb/universal-driver/tree/main/sf_mini_core, so hopefully this can address the (fully reasonable) security concerns to some level.

[horgh]

Thank you for the info and the link to the code. That helps!

As a user of the library, I am not a fan of needing cgo. However I can understand it could be beneficial in terms of maintenance.

I realized after posting this that we are already building with cgo disabled, which still seems to be compatible. I imagine that could change in the future though if some functionality moves into rust.

Anyway I think you've answered my questions, so thank you. And thank you for maintaining this package!