>> But without even considering that, "curl-pipe-bash" will cause your >> sysadmin to blow a fuse or heartbreak in most companies / environments. >> And for very good reasons. > > That is not very different from a "make install" of a downloaded tarball, > though. :)
The fact that when you build from a source tarball you actually have a chance to verify it's contents and tarballs can be signed. Webpages that are piped straight into an interpreter cannot be signed. _______________________________________________ nix-dev mailing list [email protected] http://lists.science.uu.nl/mailman/listinfo/nix-dev
