Your favourite Linux packaging format isn’t as secure as you think…
www.youtube.com
Head to https://squarespace.com/thelinuxexperiment to save 10% off your first purchase of a website or domain using code thelinuxexperimentGrab a brand new l...
      • Eager Eagle@lemmy.worldEnglish
        61·
        4 months ago

        I non-ironically like this approach for package managers (cargo, gvm, conda, poetry, etc), because I eventually have problems when installing a manager with another manager.

        • Laser@feddit.org
          1·
          4 months ago

          It’s your system mate, do whatever you want with it :) I’d prefer it if libraries for these systems could be installed similar to C libraries through the system package manager but I guess that train has left the station

          • someacnt_@lemmy.world
            1·
            4 months ago

            This is not desirable, as requirements for dev environment differs from that of released apps. You often want sandboxing individual projects, which the package manager need not have to do.

    • Julian@lemm.eeEnglish
      10·
      4 months ago

      Had to install a VPN for work, and if you didn’t have a rhel-based distros you had to use a bash install script, and the installed executable had embedded bash and sh scripts. Needless to say I ran that thing in a docker container.

      • Telorand@reddthat.com
        2·
        4 months ago

        How did you get it to work? I can’t seem to figure out how to get my container VPN to connect with the host (and the containerized systemd daemon.service just crashes).

        • Julian@lemm.eeEnglish
          2·
          4 months ago

          For me it had to be run with --privileged and --network=host

          For some reason I also had to do “ip r add {remote IP}/{mask} via {the public IP assigned by the vpn}”. A friend who knows more about networking found that out for me though, so I’m not entirely sure about it.

          • Virkkunen@fedia.io
            5·
            4 months ago

            Wouldn’t running it on privileged mode cancel out whichever safety measures of running that script in a container?

            • Julian@lemm.eeEnglish
              3·
              4 months ago

              Somewhat, but it’s not a virus. It’s contained to it’s own file system unless it does something really stupid, and I can easily remove the while whole thing. But the reason i needed it privileged is because it loads the ppp kernel module, so if you know a way to do that without privileged mode, lmk.

      • warmaster@lemmy.world
        3·
        4 months ago

        _AUTOEXEC.BAT.RAR

        ^password ^is: ^123

        Instructions: when windows prompts you, click on install anyways.