3 ms·
How do you install new stuff on your machine without super user rights ? Do you have a specific user to run apt-get ?
by gelnior 13y ago
How do you install new stuff on your machine without super user rights ? Do you have a specific user to run apt-get ?
- ihsw 13y agoI think it might have to do with http vs https.
- colanderman 13y agoapt-get doesn't run unsigned, unvetted shell scripts downloaded over unprotected channels.
- gelnior 13y agoAbout the signing part, we definitely have to improve that. Thank you for mentioning. About the channel, the (real) install script is based on Fabric and use SSH. So you can refer directly to this: http://cozy.io/host/install.html http://cozy.io/host/install.html
- afreak 13y agoYou also should be using HTTPS for these sort of situations. Not that what you are suggesting is good in the first place.
- pgeorgi 13y agoSigned packages have at least two advantages: 1. they can be signed 2. they can be analyzed (also at a later date if you keep them around) to figure out if any "mis-feature" was added after the fact or came from upstream. Those scripts typically download all kinds of other things during the installation.
- gelnior 13y agoThank you for your feedback, we'll fix that. I open an issue about it.