Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Silence curl for macOS Catalina acid test #2148

Closed
weiliddat opened this issue Jun 3, 2020 · 3 comments
Closed

Silence curl for macOS Catalina acid test #2148

weiliddat opened this issue Jun 3, 2020 · 3 comments

Comments

@weiliddat
Copy link
Contributor

  • Node Version: N/A
  • Platform: macOS Catalina
  • Compiler: N/A
  • Module: N/A

This is a really small request to add the -s argument for the macOS Catalina acid test to reduce noise

curl -sL https://github.com/nodejs/node-gyp/raw/master/macOS_Catalina_acid_test.sh | bash

Output of the original

$ curl -L https://github.com/nodejs/node-gyp/raw/master/macOS_Catalina_acid_test.sh | bash
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   150  100   150    0     0   1293      0 --:--:-- --:--:-- --:--:--  1282
100   495  100   495    0     0   1265      0 --:--:-- --:--:-- --:--:--  1265
Command Line Tools version: 11.5.0.0.1.1588476445

Output of the silenced version

$ curl -sL https://github.com/nodejs/node-gyp/raw/master/macOS_Catalina_acid_test.sh | bash
Command Line Tools version: 11.5.0.0.1.1588476445
@rvagg
Copy link
Member

rvagg commented Jun 4, 2020

Yeah, I did think about asking for that when the PR was merged but I always prefer more verbosity for things like curl|bash that make some people uncomfortable. Although a set -x in the script would probably do a more helpful job on that!

Open a PR against the instructions to add the s if you like, I'll +1 it.

@weiliddat
Copy link
Contributor Author

Yeah I get that too. set -x would help, or maybe just a echo "Disclaimer about this being downloaded from the Internet"?

@rvagg
Copy link
Member

rvagg commented Jun 5, 2020

Nah, I don't think that's necessary. I'm personally not concerned about the security of this curl|bash because (a) we control it and (b) it's over https from a trusted site. It's just that a lot of programmers have been programmed to think curl|bash is inherently evil and is an indicator of bad security attitudes. But there's really nothing to be done about that other than be firm when people show up with criticism.
For now let's go with the s in the curl

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants