Web lists-archives.com

Re: Bug#859199: ITP: dh-curl-sudo-bash -- debhelper tools for automated non-packaging




[2017-03-31 15:48] Adam Borowski <kilobyte@xxxxxxxxxx>
>
> part       text/plain                 975
> On Sat, Apr 01, 2017 at 12:00:35AM +1100, Stuart Prescott wrote:
> > * Package name    : dh-curl-sudo-bash
> >   Upstream Author : Lars Wirzenius <liw@xxxxxx> and Stuart Prescott <stuart@xxxxxxxxxx>
> > * URL             : http://deb.li/U67E
> >   Description     : debhelper tools for automated non-packaging
> >
> > The dh-curl-sudo-bash package provides a build-system method for debhelper
> > that automates the non-packaging of programs for which the preferred form of
> > distribution is the sequence
> >
> >     "curl http://example.com/setup.sh | sudo bash -"


> I think you should also convert all https URLs to http, to make sure the
> download works over restrictive firewalls and when the user's connection is
> poorly MitMed.  It would also avoid unexpected FTBFS when a certificate
> expires.

Wait a minute. Is it a joke? Are we going to provide tools to download
code over HTTP and execute it?

-- 
X-Web-Site: https://sinsekvu.github.io | Note that I process my email in batch,
Accept-Languages: eo,ru,en             | at most once every 24 hours. If matter
Accept: text/plain, text/x-diff        | is urgent, you have my phone number.

Attachment: pgpFsEMjEq0cw.pgp
Description: PGP signature