> Reminds me of this question - why did the USSR collapse? You can describe dozens of influences which acted all at the same time, but there isn't a one paragraph summary answer.
Decisions made in greed caught up with people in power
also you're getting at least some of crowd safety in it. If you're using Debian Testing or a rolling distro your package was probably tested by a bunch of people already.
If you're using stable/LTS branch, there were far more eyes on it too
And packages are signed, can't just hijack web domain to inject code
If you download and run an MSI, or deb,(which probably requests root, and runs arbitrary scripts you can't easily examine) then you're not paying attention and nothing matters
I'm not holding it as a best practice, and I don't see how that was interpreted from my comment. I think installation through a copy/pasted script is terrible business.
But it was held as something exceptional, when here in reality a number of extremely widely used products, frameworks and tools provide installation through a curled shell script command.
Another example is CUDA on Linux. Installed via some copy/pasted scripts from a webpage.
While true, then I'd just skip installing these products and find another way. And if this is the only way and the product is important (say, brew), make an exception.
biggest flaw of jenkins is that by default it runs on builder env, as it was made pre-container era. But I do like integration with viewing tests and benchmarks directly in the project, stuff that most CI/CD systems lack
well, redis is a bit of a junk bin of random barely related tools. It's just very likely that any project of non-trivial complexity will need at least some of them and I wouldn't necessarily advocate for trying jerry-rigging most of them in postgresql like the author of article, for example why would anyone want wasting their SQL DB server performance on KV lookups?
On flipside, restore from plain postgresql dump is much, much faster than plain mysql backup. There are alternative strategies for mysql but that's extra work
reply