4 ms·
"Nobody in their sane mine should curl a script into bash to install a product" This, so much this. I was actually extremely excited over a similar product "f
by panhandlr 11y ago
"Nobody in their sane mine should curl a script into bash to install a product"
This, so much this.
I was actually extremely excited over a similar product "flynn"... but they have also lost their mind when it comes to installation: https://flynn.io/docs/installation https://flynn.io/docs/installation
> sudo bash < <(curl -fsSL https://dl.flynn.io/install-flynn https://dl.flynn.io/install-flynn)
Seriously?
How is that any easier than just providing a package for any given distro?
I mean, for fucks sake, just give me the URL to a tarball with a fucking Makefile in it. I can handle the rest, thank you very much.
The security concerns alone should force any sane system engineer to never pipe curl to sudo'ed bash process.
- icebraining 11y agoWould a zip with a Makefile do? Here: https://github.com/flynn/flynn/archive/master.zip https://github.com/flynn/flynn/archive/master.zip They have the source on Github, you're never forced to pipe curl to bash, it's just the default. Not a great default, admittedly, but hardly deserving all the hate. How about contributing a PR with a script that produces OS packages, instead of complaining that the free cake doesn't come with a cherry on top?
- pekk 11y agoI guess people are upset that this is the "officially sanctioned" way of installing the tool.