Hacker News new | ask | show | jobs
by panhandlr 4033 days ago
"Nobody in their sane mine should curl a script into bash to install a product"

This, so much this.

I was actually extremely excited over a similar product "flynn"... but they have also lost their mind when it comes to installation: https://flynn.io/docs/installation

> sudo bash < <(curl -fsSL https://dl.flynn.io/install-flynn)

Seriously?

How is that any easier than just providing a package for any given distro?

I mean, for fucks sake, just give me the URL to a tarball with a fucking Makefile in it. I can handle the rest, thank you very much.

The security concerns alone should force any sane system engineer to never pipe curl to sudo'ed bash process.

1 comments

Would a zip with a Makefile do? Here: https://github.com/flynn/flynn/archive/master.zip

They have the source on Github, you're never forced to pipe curl to bash, it's just the default. Not a great default, admittedly, but hardly deserving all the hate.

How about contributing a PR with a script that produces OS packages, instead of complaining that the free cake doesn't come with a cherry on top?

I guess people are upset that this is the "officially sanctioned" way of installing the tool.