5 ms·
> Not knowing what the script is going to do. Yep, this is why i hate piping curl to sh. Much prefer how e.g. go does this: Tells you to just run tar -C
by lawl 7y ago
> Not knowing what the script is going to do.
Yep, this is why i hate piping curl to sh. Much prefer how e.g. go does this:
Tells you to just run
tar -C /usr/local -xzf go1.13.4.linux-amd64.tar.gz
It's not that I don't trust the installer script to not install malware. But I don't trust the installer script to not crap all over my system.
- lokedhs 7y agoTry using Qubes OS. It will allow you to run such scripts without having to worry about your system being screwed up. Note that Qubes have some drawbacks, the main one being that it doesn't support GPU's, so not everybody are in the position to use it.
- lawl 7y agoI really like Qubes and have been running it for a while. What I'd love is to have something like qubes but a bit more lightweight. Using containers instead of full blown VMs. Basically trading some isolation guarantees and security for more usability.
- lokedhs 7y agoI think Silverblue might be what you want. It's still in beta though, but if you're OK with that you might want to try it.