From @kevinsimper on Thu Aug 18 2016 18:57:00 GMT+0000 (UTC)
I know a lot of people don’t like one-line installers because of their insecure nature of not understanding what it does, but a one-line is just nicer when trying out ipfs, when you just want to do it quickly!
Would it be an idea to make a one-line installer?
Here is for Mac:
curl https://dist.ipfs.io/go-ipfs/v0.4.2/go-ipfs_v0.4.2_darwin-amd64.tar.gz >> /tmp/ipfs.tar.gz && tar zxf /tmp/ipfs.tar.gz && mv /tmp/go-ipfs/ipfs /usr/local/bin/ipfs && chmod +x /usr/local/bin/ipfs && ipfs version
From @dignifiedquire on Tue Aug 30 2016 16:14:54 GMT+0000 (UTC)
@RichardLitt what do you mean by “our dists change so much”? The installation process hasn’t changed since I know IPFS and the version doesn’t change that often
From @RichardLitt on Tue Aug 30 2016 17:42:06 GMT+0000 (UTC)
Hmm. Cool.
Another concern: What is the purpose of a one-liner? Experienced devs still need to read the whole thing, or take it on trust that we have it done correctly. Inexperienced devs don’t get to learn what the install process is.
From @kevinsimper on Tue Aug 30 2016 17:47:58 GMT+0000 (UTC)
Beginners will find a way to install it the easiest way and better provide a command that does it all in one command, instead of now where each command is on its own line
From @jbenet on Tue Aug 30 2016 18:26:17 GMT+0000 (UTC)
Strongly against this. one line commands like that are terrible security practice. they teach users not to think about what they are doing, and to copy paste things from the internet into their command line. we take security seriously. If we list commands to run, they must be clear.
I do think a single one-line install is useful. but do it securely.
ideally use something like hashpipe, but it’s 99% unlikely to be pre-existing, so this makes the problem worse.
use brew, apt, or whatever is standard in various distros. but now you have another problem-- making sure they have a pkg mgr and doing it for their system.
i really like how mosh does it: https://mosh.org/#getting i think it’s one of the easiest and clearest install procedures i’ve ever seen. they deal with the complexity of platform by just having something for every install path.
From @RichardLitt on Tue Aug 30 2016 18:37:42 GMT+0000 (UTC)
Thank you, @jbenet. That’s great feedback. I agree with teaching users not to think; that’s what I was getting at with the experienced // inexperienced comment above.
From @kevinsimper on Wed Aug 31 2016 07:33:11 GMT+0000 (UTC)
@jbenet Hashpipe looks awesome, but wouldn’t it be a dependency that you have to install first?
Strongly against this. one line commands like that are terrible security practice.
I agree, but somebody will write it on stackoverflow and then people will write “how to install ipfs 1 line”. But what is the problem of stringing the commands that are on the installation page now? It is not like you curl a bash script!
It can even be written like this and still be a easy way to install.
Strongly against this. one line commands like that are terrible security
practice.
I agree, but somebody will write it on stackoverflow and then people will
write “how to install ipfs 1 line”. But what is the problem of stringing
the commands that are on the installation page now? It is not like you
curl a bash script!
It can even be written like this and still be a easy way to install.
