Proposal: Switch from go-ora to godror for better encryption support

[hermandi21]

Component(s)

receiver/x

Describe the issue you're reporting

Currently, the project uses go-ora
for Oracle connections. While convenient because it does not require the Oracle Client, it comes with some limitations regarding encryption:

go-ora supports TLS (TCPS), but does not fully support Oracle Native Network Encryption (NNE) or configuration via sqlnet.ora.

godror (the official Go driver) uses the Oracle Client and therefore supports all Oracle network encryption features (NNE, SSL/TLS, checksums, sqlnet.ora policies, etc.).

In environments with compliance or security requirements (e.g. SQLNET.ENCRYPTION=REQUIRED), go-ora may not be sufficient.

Tip

_{React with 👍 to help prioritize this issue. Please use comments to provide useful context, avoiding +1 or me too, to help us triage it. Learn more here.}

[github-actions]

Pinging code owners:

• receiver/x: @mx-psi @dmathieu

See Adding Labels via Comments if you do not have permissions to add labels yourself.

[github-actions]

Pinging code owners for receiver/sqlquery: @dmitryax @crobert-1. See Adding Labels via Comments if you do not have permissions to add labels yourself. For example, comment '/label priority:p2 -needs-triaged' to set the priority and remove the needs-triaged label.

[github-actions]

Pinging code owners for receiver/oracledb: @dmitryax @crobert-1 @atoulme. See Adding Labels via Comments if you do not have permissions to add labels yourself. For example, comment '/label priority:p2 -needs-triaged' to set the priority and remove the needs-triaged label.

[crobert-1]

Hello @hermandi21, thanks for filing this issue!

From documentation of the godror driver:

C compiler with CGO_ENABLED=1 - so cross-compilation is hard

However, the collector is built and distributed with CGO disabled (here's some more information about our requirements with CGO.)

To be able to add support for the driver it would need to be able to compile successfully in a no-op mode with CGO disabled, but that's not currently the case. I imported the package (without any usages) and got lots of compilation errors.

/Users/crobert/go/pkg/mod/github.com/godror/godror@v0.49.3/orahlp.go:563:19: undefined: VersionInfo
/Users/crobert/go/pkg/mod/github.com/godror/godror@v0.49.3/orahlp.go:564:19: undefined: VersionInfo
/Users/crobert/go/pkg/mod/github.com/godror/godror@v0.49.3/orahlp.go:565:10: undefined: StartupMode
/Users/crobert/go/pkg/mod/github.com/godror/godror@v0.49.3/orahlp.go:566:11: undefined: ShutdownMode
/Users/crobert/go/pkg/mod/github.com/godror/godror@v0.49.3/orahlp.go:568:31: undefined: Event
/Users/crobert/go/pkg/mod/github.com/godror/godror@v0.49.3/orahlp.go:568:42: undefined: SubscriptionOption
/Users/crobert/go/pkg/mod/github.com/godror/godror@v0.49.3/orahlp.go:568:64: undefined: Subscription
/Users/crobert/go/pkg/mod/github.com/godror/godror@v0.49.3/orahlp.go:569:31: undefined: ObjectType
/Users/crobert/go/pkg/mod/github.com/godror/godror@v0.49.3/orahlp.go:570:59: undefined: Data
/Users/crobert/go/pkg/mod/github.com/godror/godror@v0.49.3/orahlp.go:571:28: undefined: DirectLob
/Users/crobert/go/pkg/mod/github.com/godror/godror@v0.49.3/orahlp.go:571:28: too many errors
make: *** [otelcontribcol] Error 1

We'd be happy to support a new driver if it'd be helpful, but this is a blocker at this time. Please let me know if I've misunderstood anything, or if you have any other questions about this.