增加 golang 杂谈

Author: eddycjy

golang/2018-03-01-如此，用dep获取私有库.md

@@ -0,0 +1,77 @@
+# 如此，用dep获取私有库
+
+## 介绍
+`dep`是一个依赖管理工具。它需要1.9或更新的`Golang`版本才能编译
+
+`dep`已经能够在生产环节安全使用，但还在官方的试验阶段，也就是还不在`go tool`中。但我想是迟早的事 :=)
+
+指南和参考资料，请参阅[文档](https://golang.github.io/dep/)
+
+
+## 获取私有库
+我们常用的`git`方式有两种，第一种是通过`ssh`，第二种是`https`
+
+本文中我们以`gitlab.com`为案例，创建一个`private`的私有仓库
+
+### 通过`ssh`方式
+
+首先我们需要在本机上生成`ssh-key`，若没有生成过可右拐[传送门](https://segmentfault.com/a/1190000013450267)
+
+得到需要使用的`ssh-key`后，我们打开我们的`gitlab.com`，复制粘贴入我们的`Settings` -> `SSH Keys`中
+
+![image](https://sfault-image.b0.upaiyun.com/105/328/1053288135-5a96d458e9145)
+
+添加成功后，我们直接在`Gopkg.toml`里配置好我们的参数
+```
+[[constraint]]
+  branch = "master"
+  name = "gitlab.com/eddycjy/test"
+  source = "[email protected]:EDDYCJY/test.git"
+```
+
+在拉取资源前，要注意假设你是第一次用该`ssh-key`拉取，需要先手动用`git clone`拉取一遍，同意`ECDSA key fingerprint`：
+```
+$ git clone [email protected]:EDDYCJY/test.git
+Cloning into 'test'...
+The authenticity of host 'gitlab.com (52.167.219.168)' can't be established.
+ECDSA key fingerprint is xxxxxxxxxxxxx.
+Are you sure you want to continue connecting (yes/no)? yes
+...
+```
+
+接下来，我们在项目下**直接执行`dep ensure`就可以拉取**下来了！
+
+#### 问题
+
+1. 假设你是第一次，又没有执行上面那一步（`ECDSA key fingerprint`），会一直卡住
+
+2. 正确的反馈应当是执行完命令后没有错误，但如果出现该错误提示，那说明该存储仓库没有被纳入`dep`中（例：`gitee`）
+```
+$ dep ensure
+
+The following issues were found in Gopkg.toml:
+
+unable to deduce repository and source type for "xxxx": unable to read metadata: go-import metadata not found
+
+ProjectRoot name validation failed
+```
+
+
+### 通过`https`方式
+
+我们直接在`Gopkg.toml`里配置好我们的参数
+```
+[[constraint]]
+  branch = "master"
+  name = "gitlab.com/eddycjy/test"
+  source = "https://{username}:{password}@gitlab.com"
+```
+
+主要是修改`source`的配置项，`username`填写在`gitlab`的用户名，`password`为密码
+
+最后回到项目下**执行`dep ensure`拉取资源**就可以了
+
+## 最后
+
+`dep`目前还是官方试验阶段，还可能存在变数，多加注意
+

golang/2018-03-06-Go依赖管理工具dep.md

@@ -0,0 +1,152 @@
+# Go依赖管理工具
+>Go dependency management tool 
+## 环境要求
+- Golang >= 1.9
+- Dep
+
+## 目前版本：
+```
+dep:
+ version     : devel
+ build date  : 
+ git hash    : 
+ go version  : go1.10
+ go compiler : gc
+ platform    : linux/amd64
+```
+`Latest release`为`v0.4.1`
+
+## 安装
+```
+go get -u github.com/golang/dep/cmd/dep
+```
+若`$GOPATH/bin`不在`PATH`下，则需要将生成的`dep`文件从`$GOPATH/bin`移动至`$GOBIAN`下
+
+## 验证
+```
+$ dep
+Dep is a tool for managing dependencies for Go projects
+
+Usage: "dep [command]"
+
+Commands:
+
+  init     Set up a new Go project, or migrate an existing one
+  status   Report the status of the project's dependencies
+  ensure   Ensure a dependency is safely vendored in the project
+  prune    Pruning is now performed automatically by dep ensure.
+  version  Show the dep version information
+
+Examples:
+  dep init                               set up a new project
+  dep ensure                             install the project's dependencies
+  dep ensure -update                     update the locked versions of all dependencies
+  dep ensure -add github.com/pkg/errors  add a dependency to the project
+
+Use "dep help [command]" for more information about a command.
+
+```
+
+## 初始化
+在项目根目录执行初始化命令，`dep`在初始化时会分析应用程序所需要的所有依赖包，得出依赖包清单
+
+并生成`vendor`目录，`Gopkg.toml`、`Gopkg.lock`文件
+
+![image](https://golang.github.io/dep/docs/assets/func-toggles.png)
+
+### 默认初始化
+```
+$ dep init -v
+```
+直接从对应网络资源处下载
+
+### 优先从$GOPATH初始化
+```
+$ dep init -gopath -v
+```
+该命令会先从`$GOPATH`查找既有的依赖包，若不存在则从对应网络资源处下载
+
+### Gopkg.toml
+
+该文件由`dep init`生成，包含管理`dep`行为的规则声明
+
+```
+required = ["github.com/user/thing/cmd/thing"]
+
+ignored = [
+  "github.com/user/project/pkgX",
+  "bitbucket.org/user/project/pkgA/pkgY"
+]
+
+[metadata]
+key1 = "value that convey data to other systems"
+system1-data = "value that is used by a system"
+system2-data = "value that is used by another system"
+
+[[constraint]]
+  # Required: the root import path of the project being constrained.
+  name = "github.com/user/project"
+  # Recommended: the version constraint to enforce for the project.
+  # Note that only one of "branch", "version" or "revision" can be specified.
+  version = "1.0.0"
+  branch = "master"
+  revision = "abc123"
+
+  # Optional: an alternate location (URL or import path) for the project's source.
+  source = "https://github.com/myfork/package.git"
+
+  # Optional: metadata about the constraint or override that could be used by other independent systems
+  [metadata]
+  key1 = "value that convey data to other systems"
+  system1-data = "value that is used by a system"
+  system2-data = "value that is used by another system"
+```
+
+### Gopkg.lock
+
+该文件由`dep ensure`和`dep init`生成，包含一个项目依赖关系图的传递完整快照，表示为一系列`[[project]]`节
+
+```
+# This file is autogenerated, do not edit; changes may be undone by the next 'dep ensure'.
+
+[[projects]]
+  branch = "master"
+  name = "github.com/golang/protobuf"
+  packages = [
+    "jsonpb",
+    "proto",
+    "protoc-gen-go/descriptor",
+    "ptypes",
+    "ptypes/any",
+    "ptypes/duration",
+    "ptypes/struct",
+    "ptypes/timestamp"
+  ]
+  revision = "bbd03ef6da3a115852eaf24c8a1c46aeb39aa175"
+```
+
+## 常用命令
+
+### dep ensure
+从项目中的`Gopkg.toml`和`Gopkg.lock`中分析关系图，并获取所需的依赖包
+
+用于确保本地的关系图、锁、依赖包清单完全一致
+
+### dep ensure -add
+
+```
+# 引入该依赖包的最新版本
+dep ensure -add github.com/pkg/foo
+
+# 引入具有特定约束（指定版本）的依赖包
+dep ensure -add github.com/pkg/foo@^1.0.1
+```
+
+### dep ensure -update
+将`Gopkg.lock`中的约定依赖项更新为`Gopkg.toml`允许的最新版本
+
+## 最后
+
+目前`dep`还在官方试验阶段，但已表示生产可安全使用
+
+如果出现什么问题，大家可以一起留个言讨论讨论