• 👍Maximum Derek👍@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    11
    ·
    edit-2
    17 hours ago

    I never fully trust a shell script and usually end up reading any I have to use first, so I know what they do. And after so many years dpkg holds no mysteries for me and Discover will install .debs if I double click while in KDE.

    • everett@lemmy.ml
      link
      fedilink
      arrow-up
      9
      ·
      16 hours ago

      It’s worth knowing that .deb files can contain setup scripts that get run as root when installed, so you should trust them too.

      • 👍Maximum Derek👍@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        6
        ·
        edit-2
        4 hours ago

        Yeah. They all come with risks, but I psychologically struggle to run shell scripts unless I know what’s in them. And the same brain dysfunction makes my automatically distrust a script that doesn’t set pipefail.

        • everett@lemmy.ml
          link
          fedilink
          arrow-up
          4
          ·
          16 hours ago

          That definitely makes sense. Also, the scripts in a .deb should be incredibly short and readable, if you choose to check them out.