News for hackers. Stuff that matters.

A comment on Show HN: Aviary.sh – A tiny Bash alternative to Ansible. Parent comment

Re:Show HN: Aviary.sh – A tiny Bash alternative to Ansible by lukevp on Friday June 26, 2020 @12:42AM (#23648791)
What’s the problem with running a script this way? Several major tools install like this (docker, netdata...) here’s a take on this that was posted to HN a while back: https://www.arp242.net/curl-to-sh.html
[ Parent | on HN ]
Re:Show HN: Aviary.sh – A tiny Bash alternative to Ansible by effie on Friday June 26, 2020 @04:25AM (#23649877)
The problem is that this way, you're giving total control of your machine to a script that curl will download from a website, before you check the script.

A better way to try a new software is to download the sources, check them, build/install/run them under a low user with lowest required access to your system. Even better, do this in a virtual machine.

[ Parent | on HN ]