3 ms·
(1) you can easily see and just not use it (2) is incorrect, see https://rvm.io https://rvm.io -- it verifies the script (3) you can do within the script, thoug
by seanp2k2 10y ago
(1) you can easily see and just not use it
(2) is incorrect, see https://rvm.io https://rvm.io -- it verifies the script
(3) you can do within the script, though you'd have to handle different package managers
(4) is true for packages as well. You can put whatever you'd like in an RPM or deb including e.g. A post-install hook to sudo rm -rf --no-preserve-root /
Making packages is hard if you want to support many distros. Maybe we should adopt the Go model and just ship binaries.
- Rapzid 10y agoUnderneath the curl|bash method, which is what is being discussed I believe, there is a link to a "more secure installation.": https://rvm.io/rvm/security https://rvm.io/rvm/security . These instructions have you download and verify a signed installer.