Friends sometimes let friends curl to shell
Every now and then (actually quite often), people complain on twitter they’re afraid of our simple bash installer for Nix package manager: $ bash <(curl https://nixos.org/nix/install) Example (from today): There are popular blog posts discouraging use of it. Ask yourself a question, how would package manager install itself? Via another package manager? If we assume nixos.org is not compromised (which is really hard to detect), using TLS to secure connection and with our simple trick to prevent partial download execution (you haven’t read the script yet, right?), what can really go wrong?