3 ms·
> using repo provided by ferron This poses a similar security risk to executing the "curl-sudo-bash".
by olalonde 1y ago
> using repo provided by ferron
This poses a similar security risk to executing the "curl-sudo-bash".
- QuantumNomad_ 1y agoYeah I point that out too in a sibling comment. My personal opinion is that curl pipe to bash is not much worse than any other third-party binary installation method. (Third-party meaning from a source other than the package repo of your distro, or other than brew, or other than some kind of official App Store like thing on your platform.) If this project isn’t already available in the official package repos of various distros, it will eventually be. And for those more cautious among us you will probably want to wait until that point in time. For me personally I wouldn’t have any big concerns about the curl pipe bash install method on some of my servers. On my personal laptop (macOS), I’d probably rather build it from source (which is also a method available since it’s open source).
- dorianniemiec 1y agoYeah, it can be risky if Ferron servers get somehow compromised... The best bet would be using official distro repositories... But for now, I'm providing the .deb packages, so that people can easily install Ferron on Debian and alike.