4 ms·
we have package managers in this day and age, lol.
by riffic 3y ago
we have package managers in this day and age, lol.
- jampekka 3y agoSadly most of them kinda suck, especially for packagers.
- jazzyjackson 3y agodo package managers make promises that they only distribute code that's been audited to not pwn you? I'm not sure I see the difference if I decided I'm going to run someone's software whether I install it with sudo apt install vs sudo curl | bash
- n_plus_1_acc 3y agoYou are already trusting the maintainers of your distro by running Software they compiled, if you installed anything via the package manager. So it's about the number of people.
- jazzyjackson 3y agook, so, I think i am trusting fewer people if I just run the bash script provided by the people whose software i want to run
- sofixa 3y agoThis only applies to software distributed by your distro. For something as novel as Ollama, I severely doubt it's made it into anything other than the most bleeding edge(Arch and co). You'll have to wait a few years to get it into mainline Debian, Ubuntu, Fedora, etc. and of course it will be at a set version.
- n_plus_1_acc 3y agoDebian considers this a feature. Choose a distro that fits your needs.
- rekado 3y agoWith reproducible builds you get to challenge the binaries provided by your distribution. See <https://guix.gnu.org/manual/devel/en/html_node/Invoking-guix-challenge.html https://guix.gnu.org/manual/devel/en/html_node/Invoking-guix...> for an example.
- jazzyjackson 3y agothats really cool, thanks for the link
- e12e 3y agoWell, there's things like: https://www.debian.org/doc/debian-policy/ch-archive.html#the-main-archive-area https://www.debian.org/doc/debian-policy/ch-archive.html#the... The whole thing, actually: https://www.debian.org/doc/debian-policy/index.html https://www.debian.org/doc/debian-policy/index.html
- deleted 3y ago[deleted]