3 ms·
Always amaze me to see the new trend of DevOps that will be happily following such a tutorial, wget and running random code from the internet in production...
by greatgib 5y ago
Always amaze me to see the new trend of DevOps that will be happily following such a tutorial, wget and running random code from the internet in production...
- jrockway 5y agoI don't think this is production, this is for running your tests. Your code in the "tests haven't run yet" state probably leak all the secrets they have access to and destroy the machine they're running on, so you don't let them have any secrets and create a new machine each time. "curl | bash" here just injects potential flakiness (as does "npm install" when npm dies, etc.) Obviously a lot of people treat their CI system as their CD system, and do things like letting tests have highly privileged access to their production k8s cluster. That's a terrible idea even if you aren't installing software with "curl | bash". So overall, I don't think this is worth a HN comment to complain about. People are going to install software in non-auditable non-reproducible ways.
- jen20 5y agoIt always amazes me that people seem to think this is a _new_ trend.