Hot take: If we added a "--install" option to #curl, we could optimize many a "| sh -" pipeline away.
Finally a truly universal installer.
Hot take: If we added a "--install" option to #curl, we could optimize many a "| sh -" pipeline away.
Finally a truly universal installer.
If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.online/users/larsmb/statuses/116017796592641161 on your instance and quote it. (Note that quoting is not supported in Mastodon.)
RE: https://mastodon.online/@larsmb/116017796592641161
The funny thing is... if curl added checksum calculation that was pipe-able like so:
$ curl --check-sha256 abcdef... https://... | sh -
...that may actually be useful in a "check that a checksum has provenance, if yes then " | sh -" a script with that checksum otherwise abort. You can verify Sigstore provenance of a SHA256 checksum, for example, prior to running a script. Maybe it would be useful in other ways, too?