Golang开发Go依赖管理工具dep安装验证实现过程_Golang

Go依赖管理工具

Go dependency management tool

环境要求

Golang >= 1.9Dep

目前版本

				?

									dep:

									 version     : devel

									 build date  : 

									 git hash    : 

									 go version  : go1.10

									 go compiler : gc

									 platform    : linux/amd64

Latest release为v0.4.1

安装

				?

									go get -u github.com/golang/dep/cmd/dep

若$GOPATH/bin不在PATH下，则需要将生成的dep文件从$GOPATH/bin移动至$GOBIAN下

验证

				?

									$ dep

									Dep is a tool for managing dependencies for Go projects

									Usage: "dep [command]" 

									Commands: 

									  init     Set up a new Go project, or migrate an existing one

									  status   Report the status of the project's dependencies

									  ensure   Ensure a dependency is safely vendored in the project

									  prune    Pruning is now performed automatically by dep ensure.

									  version  Show the dep version information

									Examples:

									  dep init                               set up a new project

									  dep ensure                             install the project's dependencies

									  dep ensure -update                     update the locked versions of all dependencies

									  dep ensure -add github.com/pkg/errors  add a dependency to the project 

									Use "dep help [command]" for more information about a command.

初始化

在项目根目录执行初始化命令，dep在初始化时会分析应用程序所需要的所有依赖包，得出依赖包清单

并生成vendor目录，Gopkg.toml、Gopkg.lock文件

默认初始化

				?

									$ dep init -v

直接从对应网络资源处下载

优先从$GOPATH初始化

				?

									$ dep init -gopath -v

该命令会先从$GOPATH查找既有的依赖包，若不存在则从对应网络资源处下载

Gopkg.toml

该文件由dep init生成，包含管理dep行为的规则声明

				?

									required = ["github.com/user/thing/cmd/thing"] 

									ignored = [

									  "github.com/user/project/pkgX",

									  "bitbucket.org/user/project/pkgA/pkgY"

									] 

									[metadata]

									key1 = "value that convey data to other systems"

									system1-data = "value that is used by a system"

									system2-data = "value that is used by another system" 

									[[constraint]]

									  # Required: the root import path of the project being constrained.

									  name = "github.com/user/project"

									  # Recommended: the version constraint to enforce for the project.

									  # Note that only one of "branch", "version" or "revision" can be specified.

									  version = "1.0.0"

									  branch = "master"

									  revision = "abc123" 

									  # Optional: an alternate location (URL or import path) for the project's source.

									  source = https://github.com/myfork/package.git 

									  # Optional: metadata about the constraint or override that could be used by other independent systems

									  [metadata]

									  key1 = "value that convey data to other systems"

									  system1-data = "value that is used by a system"

									  system2-data = "value that is used by another system"

Gopkg.lock

该文件由dep ensure和dep init生成，包含一个项目依赖关系图的传递完整快照，表示为一系列[[project]]节

				?

									# This file is autogenerated, do not edit; changes may be undone by the next 'dep ensure'.

									[[projects]]

									  branch = "master"

									  name = "github.com/golang/protobuf"

									  packages = [

									    "jsonpb",

									    "proto",

									    "protoc-gen-go/descriptor",

									    "ptypes",

									    "ptypes/any",

									    "ptypes/duration",

									    "ptypes/struct",

									    "ptypes/timestamp"

									  ]

									  revision = "bbd03ef6da3a115852eaf24c8a1c46aeb39aa175"

常用命令

dep ensure

从项目中的Gopkg.toml和Gopkg.lock中分析关系图，并获取所需的依赖包

用于确保本地的关系图、锁、依赖包清单完全一致

dep ensure -add

				?

									# 引入该依赖包的最新版本

									dep ensure -add github.com/pkg/foo

									# 引入具有特定约束（指定版本）的依赖包

									dep ensure -add github.com/pkg/foo@^1.0.1