Live data from Hacker News

Clojure Hosted on Go

github.com

21–28 of 28 posts

Re: Clojure Hosted on Go

#24
post #20

From what I can gather from the site it has no security or sandboxing features. Or am I missing something? I'm asking because I'm thinking about R7RS Wile scheme[1] as an embedded language, which has some basic security features. But it's heavily vibe-coded and that puts me off a bit, so I'm looking for other Lisp or Scheme dialects in Go. [1] https://github.com/aalpar/wile

A Go executable is self-contained. You can put it in a Docker container with very little overhead. That would give you some sandboxing at least.

I'm creating cross-platform GUI applications in Go. Besides that, there are numerous reasons why an extension/scripting language might need various security and sandboxing features on a server, too.

Re: Clojure Hosted on Go

#26

From what I can gather from the site it has no security or sandboxing features. Or am I missing something? I'm asking because I'm thinking about R7RS Wile scheme[1] as an embedded language, which has some basic security features. But it's heavily vibe-coded and that puts me off a bit, so I'm looking for other Lisp or Scheme dialects in Go. [1] https://github.com/aalpar/wile

Sandboxing in Wile is based on "A Security Kernel Based on the Lambda-Calculus" by Jonathan A. Rees (https://dspace.mit.edu/entities/publication/ef87c5a4-aae4-41...). This 2020 HN comment recommends it as the best paper the user read that year: https://news.ycombinator.com/item?id=25354770. The report itself is from 1996. Sounds worth reading.

My current choice of Go interpreter for untrusted code is Starlark in Go (https://github.com/google/starlark-go/). Since Starlark is a dialect of Python, it's occurred to me it might be fun to put a Hy-like (https://hylang.org/) layer on top.

Re: Clojure Hosted on Go

#27
post #12

I believe this is the most promising Clojure hosted on Go, as their has been a few recently, this is the only one with full proper interop.

https://github.com/nooga/let-go has been making huge leaps in terms of perf and interop since its launch.

Has something changed since you last told me:

> I think Gloat/Glojure has the best hosted runtime story because of its AOT to Go src pipeline - you can grab anything Go at compile time. OTOH let-go can roundtrip any Go value including structs, functions and channels but it does not allow pulling arbitrary go libs without wrapping them up first - they'd need to be built into the runtime for this.

Re: Clojure Hosted on Go

#28
post #17

There’s also typed fp on Go: https://lisette.run/ The Go runtime, toolchain, and ecosystem are great- it makes sense to target it.

Looks like a nice language. They market it as a Rust-like looks more like an ML to me.

Rust itself, at least the early incarnations, was pretty strongly influenced by ML. The first rustcs, before it became self-hosted, were written in Ocaml.
Post reply on HN