Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> curl https://sh.rustup.rs -sSf | sh

hard pass :)



> hard pass

Why? You're willing to run some random open source project, but you're not willing to run the official Rust installation script?


I feel the same way, I am just not willing to pipe curl into a shell blindly.

Even if this specific instance of curl'ing into sh is safe, or if I download and then run it, it's still extremely poor practice and gives me serious doubts about the developers and their security practices in general.

I also do not like when every project decides to poorly reimplement the package manager. If every software used it's own package manager my system would be a complete mess with dozens of different package managers fighting each other and it would be a total nightmare to update the system or manage non-trivial dependency chains when installing something new.

Rust is one of my favorite languages but this is definitely my least favorite aspect of it all. It really feels like the developers "optimized" for systems with no package manager.


Out of curiosity, what would be an acceptable way for the developers to provide a quick way for users to get up and running?

A get started guide with all the required commands easily copy-pastable? (A popular option these days) Something else?

I don’t mean to be critical, I’m simply curious.


You could always download it first and eyeball it before running it.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: