4 ms·

> Security is imperative > Install with sudo curl bash

by mynewaccount00 1y ago

theandrewbailey 1y ago
It's the Linux equivalent of downloading and running random binaries in Windows.
- voidUpdate 1y ago
  *running as administrator
  - magackame 1y ago
    Gonna steal all your files, passwords and crypto as a regular user anyway?
tonyhart7 1y ago
lmao
hacker_homie 1y ago
This is kinda funny, but what is a better alternative for new projects on Linux?
- gregoriol 1y ago
  Why not the usual package repositories and distribution by the official ones?
  - jraph 1y ago
    That's a slow process and you need someone to do the packaging, either yourself or a volunteer, and this for each distro. Which is not trivial to master and requires time. The "new" qualifier in the parent comment is key here. Open build service [1] / openSUSE Build Service [2] might help a bit there though, providing a tool to automate packaging for different distributions. [1] https://openbuildservice.org/ https://openbuildservice.org/ [2] https://build.opensuse.org/ https://build.opensuse.org/
  - PufPufPuf 1y ago
    Most Linux distributions won't package an unknown project. Chicken and egg problem. You could create your own PPA but that is basically the same as sudo curl bash in terms of security.
- arccy 1y ago
  it's a rust project which tries to claim the ability to build static binaries, you should be able to just download the server binary.
  - natrys 1y ago
    Yes it seems the binaries are here: https://ferron.sh/download https://ferron.sh/download I will say that though, it's probably not rational to be okay with blindly running some opaque binary from a website, but then flip out when it comes to running an install script from the same people and domain behind the same software. At least from security PoV I don't see how there should be any difference, but it's true that install scripts can be opinionated and litter your system by putting files in unwanted places so nevertheless there are strong arguments outside of security.
- deleted 1y ago
  [deleted]
jagged-chisel 1y ago
How’s that worse than downloading a random installer?

> Security is imperative > Install with sudo curl bash

theandrewbailey 1y ago

It's the Linux equivalent of downloading and running random binaries in Windows.

voidUpdate 1y ago
*running as administrator
- magackame 1y ago
  Gonna steal all your files, passwords and crypto as a regular user anyway?

tonyhart7 1y ago

lmao

hacker_homie 1y ago

This is kinda funny, but what is a better alternative for new projects on Linux?

gregoriol 1y ago
Why not the usual package repositories and distribution by the official ones?
- jraph 1y ago
  That's a slow process and you need someone to do the packaging, either yourself or a volunteer, and this for each distro. Which is not trivial to master and requires time. The "new" qualifier in the parent comment is key here. Open build service [1] / openSUSE Build Service [2] might help a bit there though, providing a tool to automate packaging for different distributions. [1] https://openbuildservice.org/ https://openbuildservice.org/ [2] https://build.opensuse.org/ https://build.opensuse.org/
- PufPufPuf 1y ago
  Most Linux distributions won't package an unknown project. Chicken and egg problem. You could create your own PPA but that is basically the same as sudo curl bash in terms of security.
arccy 1y ago
it's a rust project which tries to claim the ability to build static binaries, you should be able to just download the server binary.
- natrys 1y ago
  Yes it seems the binaries are here: https://ferron.sh/download https://ferron.sh/download I will say that though, it's probably not rational to be okay with blindly running some opaque binary from a website, but then flip out when it comes to running an install script from the same people and domain behind the same software. At least from security PoV I don't see how there should be any difference, but it's true that install scripts can be opinionated and litter your system by putting files in unwanted places so nevertheless there are strong arguments outside of security.
deleted 1y ago
[deleted]

jagged-chisel 1y ago

How’s that worse than downloading a random installer?