4 ms·

They do offer other installation methods already. Installation via package managers (Debian/Ubuntu), using repo provided by ferron https://ferron.sh/docs/inst

They do offer other installation methods already. Installation via package managers (Debian/Ubuntu), using repo provided by ferron https://ferron.sh/docs/installation/debian https://ferron.sh/docs/installation/debian Installation as a Docker container https://ferron.sh/docs/installation/docker https://ferron.sh/docs/installation/docker And more.

Etheryte 1y ago
That's true, but that's not what's front and center. Curl-sudo-bash is the first thing you see on the site, all the other options are close to the bottom of the page. Defaults matter and people tend to use whatever is the first option presented to them unless they have a good reason to do otherwise.
- olalonde 1y ago
  > using repo provided by ferron This poses a similar security risk to executing the "curl-sudo-bash".
  - QuantumNomad_ 1y ago
    Yeah I point that out too in a sibling comment. My personal opinion is that curl pipe to bash is not much worse than any other third-party binary installation method. (Third-party meaning from a source other than the package repo of your distro, or other than brew, or other than some kind of official App Store like thing on your platform.) If this project isn’t already available in the official package repos of various distros, it will eventually be. And for those more cautious among us you will probably want to wait until that point in time. For me personally I wouldn’t have any big concerns about the curl pipe bash install method on some of my servers. On my personal laptop (macOS), I’d probably rather build it from source (which is also a method available since it’s open source).
  - dorianniemiec 1y ago
    Yeah, it can be risky if Ferron servers get somehow compromised... The best bet would be using official distro repositories... But for now, I'm providing the .deb packages, so that people can easily install Ferron on Debian and alike.

Etheryte 1y ago

That's true, but that's not what's front and center. Curl-sudo-bash is the first thing you see on the site, all the other options are close to the bottom of the page. Defaults matter and people tend to use whatever is the first option presented to them unless they have a good reason to do otherwise.

olalonde 1y ago
> using repo provided by ferron This poses a similar security risk to executing the "curl-sudo-bash".
- QuantumNomad_ 1y ago
  Yeah I point that out too in a sibling comment. My personal opinion is that curl pipe to bash is not much worse than any other third-party binary installation method. (Third-party meaning from a source other than the package repo of your distro, or other than brew, or other than some kind of official App Store like thing on your platform.) If this project isn’t already available in the official package repos of various distros, it will eventually be. And for those more cautious among us you will probably want to wait until that point in time. For me personally I wouldn’t have any big concerns about the curl pipe bash install method on some of my servers. On my personal laptop (macOS), I’d probably rather build it from source (which is also a method available since it’s open source).
- dorianniemiec 1y ago
  Yeah, it can be risky if Ferron servers get somehow compromised... The best bet would be using official distro repositories... But for now, I'm providing the .deb packages, so that people can easily install Ferron on Debian and alike.