The biggest issue I have with curl|bash is this: curl|bash has no advantage over the "Download and run this installer program" plan. That is, itself, a plan t

The biggest issue I have with curl|bash is this: curl|bash has no advantage over the "Download and run this installer program" plan. That is, itself, a plan that should go away. Further, it has the disadvantage that the user gets less transparency and control. When I download and run an installer, I can do whatever I want in between: check a signature, run a malware scanner, copy it into an offline VM, copy it to multiple systems to save bandwidth, apply a (possibly binary) patch, the list goes on. While I can do this anyway with the curl|bash idiom (by using a temp file instead of a pipe), it makes it less straightforward. Teaching users to do things this way will have the net effect of discouraging those other things. I think Sandstorm is great, but when someone is insisting on an install method that is worse than one that needs to go away, there is a problem.