News for hackers. Stuff that matters.

A comment on Ask HN: So you moved off Heroku, where did you go?. Parent comment

Re:Ask HN: So you moved off Heroku, where did you go? by joshmanders on Tuesday October 04, 2022 @05:01PM (#33086811)
As an FYI - The bash script downloads it and then runs bash on the file created on your local system, there's no way to determine if the user is downloading and piping directly into bash or if they're just downloading the file, so change the script before executing from

    wget -q https://get.coollabs.io/coolify/install.sh -O install.sh; sudo bash ./install.sh
to

    wget -q https://get.coollabs.io/coolify/install.sh -O install.sh; cat install.sh
Once the script is locally on your file system there is no way to change the contents.
[ Parent | on HN ]
Re:Ask HN: So you moved off Heroku, where did you go? by adamckay on Tuesday October 04, 2022 @05:59PM (#33087644)
Yep. My response was specific to your comment of reading in browser which is not a guarantee of what's downloaded.
[ Parent | on HN ]
Re:Ask HN: So you moved off Heroku, where did you go? by joshmanders on Tuesday October 04, 2022 @07:36PM (#33088707)
My apologizes, I interpreted it as a "yeah but they can change it so you can't trust it!!!1!" response.
[ Parent | on HN ]