Re:The sad state of sysadmin in the age of containers (2015)
by yori on Monday December 09, 2019 @08:05AM
(#21742218)
What difference does it make if you run `make install` or `curl | bash`? In both cases, you are running code you have not audited yourself. Or are you the kind who inspects every Makefile and installer script before installing? If not, why is one better than the other?
[ Parent
| on HN ]
Re:The sad state of sysadmin in the age of containers (2015)
by sudosysgen on Monday December 09, 2019 @08:43AM
(#21742520)
Because at least with make install you can have some trust in the delivery method, ie encrypted git or whatever. If you use just plain http....
Re:The sad state of sysadmin in the age of containers (2015)
by yori on Monday December 09, 2019 @10:42AM
(#21743521)
So wget https://example.com/installer.tar.gz; tar -xvzf installer.tar.gz; cd installer; make install is okay for you?
But curl https://example.com/installer.sh | bash is not? Why?
Re:The sad state of sysadmin in the age of containers (2015)
by sudosysgen on Monday December 09, 2019 @11:32AM
(#21743949)
I'm fine with the second too as long as the host is trustworthy and it's always https. Most of the time it isn't.