3 ms·
I understand that it’s better to have less dependencies. And I understand that a pipe to bash thing can do more than a naive user would think. But the header o
by rmetzler 6y ago
I understand that it’s better to have less dependencies. And I understand that a pipe to bash thing can do more than a naive user would think. But the header of get.docker.com doesn’t pipe directly to bash anymore. You can inspect the downloaded shell script or compare hashes.
- byteknight 6y agoThe problem is where do we automate the pulling of the hash to verify against? I do not know of a source.