Build with CGO_ENABLED=0

[silverwind]

Feature Description

We should aim to build with CGO_ENABLED=0, which brings benefits:

• The resulting binary is statically linked and can run inside docker from: scratch images, which is ideal for security and image size because it only has the binary in the container, nothing else.
• xgo can be removed because without CGO, go can cross-compile everything itself.
• When CGO is enabled, go will switch to a suboptimal and toolchain and afaik also produce suboptimal binaries.

What are the remaining dependencies here? Just sqlite, or is there more?

[wxiaoguang]

The only blocker is sqlite.

• Pure Go SQLite #20614

(actually, I have somewhat objection for using that CCGO based sqlite package in Gitea)

I do not need sqlite, so I can perfectly cross compile Gitea on my macOS and deploy it to my Linux servers.

[silverwind]

There is https://github.com/glebarez/go-sqlite, not sure how stable it is though, but I guess if it survives a few runs in our CI, it should be good enough for a spin.

[wxiaoguang]

Are we willing to take the risk of a complex essential core library getting unmaintained (some unfixable bugs)?

[lunny]

There are two build tags SQLite and pam. Both are optional for build from source. So we are discussing the official release.

Since Gitea with SQLite are welcome by many individuals users. I don't think we should provide the official binaries without SQLite support.

[lunny]

There is https://github.com/glebarez/go-sqlite, not sure how stable it is though, but I guess if it survives a few runs in our CI, it should be good enough for a spin.

It's the same as our PR

[silverwind]

Are we willing to take the risk of a complex essential core library getting unmaintained?

SQLite is popular enough to ensure there will always be some kind of pure-go solution around.

[wxiaoguang]

The problem is, SQLite is popular doesn't mean its pure-go solution is popular (actually, most people do not need the pure-go solution).

Git is much more popular than sqlite, but gogit is far from complete.

[silverwind]

Git is also much more complicated than SQLite I assume. Probably by a factor of 10.