1
0
Fork 0
mirror of synced 2024-12-21 22:21:08 -05:00

Add disclaimer about curl-pipe safety

This commit is contained in:
Tim Byrne 2017-02-08 20:38:51 -08:00
parent 63836c5e40
commit d8d13ce47e
No known key found for this signature in database
GPG key ID: 14DB4FC2465A4B12

View file

@ -1,10 +1,24 @@
#!/bin/bash
# envoke with:
# curl -fsSL 'https://tinyurl.com/yadm-bootstrap' | bash [-s -- REPO_URL [YADM_RELEASE]]
# or
#
# This script can be "curl-piped" into bash to bootstrap a dotfiles repo when
# yadm is not locally installed. Read below for instructions.
#
# DISCLAIMER: In general, I would advise against piping someone's code directly
# from the Internet into an interpreter (like Bash). You should
# probably review any code like this prior to executing it. I leave
# it to you to decide if this is risky behavior or not. The main
# reason this script exists is because I find it to be a pragmatic
# way to bootstrap my dotfiles, and install yadm in one step
# (allowing the yadm project to be a submodule of my dotfiles
# repo).
#
# Invoke with:
#
# curl -fsSL 'https://tinyurl.com/yadm-bootstrap' | bash
#
# OR
#
# curl -fsSL 'https://github.com/TheLocehiliosan/yadm/raw/master/bootstrap' | bash [-s -- REPO_URL [YADM_RELEASE]]
YADM_REPO="https://github.com/TheLocehiliosan/yadm"