[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#859199: ITP: dh-curl-sudo-bash -- debhelper tools for automated non-packaging



[2017-03-31 15:48] Adam Borowski <kilobyte@angband.pl>
>
> part       text/plain                 975
> On Sat, Apr 01, 2017 at 12:00:35AM +1100, Stuart Prescott wrote:
> > * Package name    : dh-curl-sudo-bash
> >   Upstream Author : Lars Wirzenius <liw@liw.fi> and Stuart Prescott <stuart@debian.org>
> > * URL             : http://deb.li/U67E
> >   Description     : debhelper tools for automated non-packaging
> >
> > The dh-curl-sudo-bash package provides a build-system method for debhelper
> > that automates the non-packaging of programs for which the preferred form of
> > distribution is the sequence
> >
> >     "curl http://example.com/setup.sh | sudo bash -"


> I think you should also convert all https URLs to http, to make sure the
> download works over restrictive firewalls and when the user's connection is
> poorly MitMed.  It would also avoid unexpected FTBFS when a certificate
> expires.

Wait a minute. Is it a joke? Are we going to provide tools to download
code over HTTP and execute it?

-- 
X-Web-Site: https://sinsekvu.github.io | Note that I process my email in batch,
Accept-Languages: eo,ru,en             | at most once every 24 hours. If matter
Accept: text/plain, text/x-diff        | is urgent, you have my phone number.

Attachment: pgpTQ9oJsuTOW.pgp
Description: PGP signature


Reply to: