| ▲ | balder1991 a day ago |
| Even assuming it’s not malicious, the script can mess up your environment configuration. |
|
| ▲ | maccard 17 hours ago | parent | next [-] |
| So can a random deb, or npm package, or pip wheel? You’re either ok with executing unverified code or not - piping wget into bash doesn’t change that |
| |
| ▲ | dubi_steinkek 14 hours ago | parent [-] | | Maybe they can with postinstall scripts, but they usually don't. For the most part, installing packaged software simply extracts an archive to the filesystem, and you can uninstall using the standard method (apt remove, uv tool remove, ...). Scripts are way less standardized. In this case it's not an argument about security, but about convenience and not messing up your system. |
|
|
| ▲ | exe34 a day ago | parent | prev [-] |
| I'm so thankful for nixos for making it hard for me to give in to that temptation. you always think "oh just this once". but with nixos I either have to do it right or not bother. |
| |
| ▲ | hombre_fatal a day ago | parent [-] | | NixOS gives you a place to configure things in a reproducible way, but it doesn’t require you do it. | | |
| ▲ | tombert a day ago | parent | next [-] | | It sort of does actually, at least if you don't have nix-ld enabled. A lot of programs simply won't start if they're not static-linked, and so a lot of the time if you download a third-party script, or try to install it when the `curl somesite.blah | sh`, it actually will not work. Moreover, it also is likely that it won't be properly linked in your path unless you do it thr right way. | |
| ▲ | exe34 a day ago | parent | prev [-] | | $ ./Downloads/tmp/xpack-riscv-none-elf-gcc-15.2.0-1/bin/riscv-none-elf-cpp
Could not start dynamically linked executable: ./Downloads/tmp/xpack-riscv-none-elf-gcc-15.2.0-1/bin/riscv-none-elf-cpp
NixOS cannot run dynamically linked executables intended for generic
linux environments out of the box. For more information, see:
https://nix.dev/permalink/stub-ld You have to go out of your way to make something like that run in an fhs env. By that point, you've had enough time to think, even with ADHD. |
|
|
