this post was submitted on 31 Aug 2025
113 points (99.1% liked)

Selfhosted

51049 readers
2108 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

I only discovered this recently, and it's very handy.

Piping scripts directly to bash is a security risk. You can always download the scripts, inspect them and run locally if you so choose.

you are viewing a single comment's thread
view the rest of the comments
[–] Burghler@sh.itjust.works 20 points 1 day ago (2 children)

Heellll no, the scripts are publically available to read over if you're sketched out. They save you so much time to actually get to using the service. 98% of my homelab is from these same helper scripts too.

RIP tteck

[–] non_burglar@lemmy.world 3 points 1 day ago* (last edited 1 day ago) (1 children)

Have you ever looked at what was once ttek scripts? They're a spaghetti of calls to other scripts. It's not pretty. And not intuitive to audit.

[–] Burghler@sh.itjust.works 4 points 1 day ago

Wtf you're my opposite D:

I did and had a decent time with ctrl shift F'ing around. Took a moment since bash isn't my strong suit.

[–] atzanteol@sh.itjust.works 2 points 1 day ago (1 children)

You can install with package managers and include with it a helper script to setup the service. No big deal.

But can you spot the difference between http://myservice.com/script.sh and http://myserv1ce.com/script.sh if you use a font that doesn't make it clear? If you get people used to just copy/pasting/running scripts then there's a risk they'll run something entirely different by accident.

There's no good reason to install things this way.

[–] Burghler@sh.itjust.works 1 points 1 day ago (1 children)

But this is a trusted source with years of credibility. Why would any sensible competent tech user copy paste from other places because this one worked.

You'll be pissed when you hear about Linux game server manager then. It's all helper scripts over https

[–] atzanteol@sh.itjust.works 2 points 15 hours ago

Why would any sensible competent tech user copy paste from other places because this one worked.

Because sites like this and people like you are normalizing the practice. I have seen numerous curl | sh commands pasted on lemmy telling people "how easy it is to install blank".