When considering installing OSS binaries, which do you prefer?
- curl https://url | sh45.5%
- git clone url; cp bin18.7%
- build from source anyway10.6%
- Run away screaming25.2%
123 votesFinal results
Conversation
But what will that download button do? Auto-detect platform from user-agent and offer most-likely binary? Does it feel safer?
Replying to
I strongly dislike piping curl into shell. It's unlikely I know, but what if connection closes 8 chars into "rm -rf /tmp/foo"?
2
Replying to
is that any different to downloading and running binaries?
1
Show replies
Replying to
there's one answer missing: "I'm on windows"
1
Replying to
on windows it's paste this powershell command into cmd.exe that downloads and runs the real script.
Replying to
So are we running away screaming from the potential security vulnerabilities, or from having to compile ourselves? :P
1
Replying to
Updated poll, which do you prefer for installing OSS binaries?
- homebrew / dpkg / rpm83.8%
- download executable4.3%
- download installer10.7%
- git repo /w binary inside1.3%
234 votesFinal results
8
4
3
Show replies
Replying to
Mac: Homebrew over any of those.
Linux: git clone, but will consider packagecloud.io or such for somethings.
1
1
