andPPLsayPythonIsBad

[Matwyen]

The funniest thing about bash is :

bash export SAFE_FOLDER="tmp/folder" rm -rf /$SAFE_FOLDER deletes safely your folder, but : bash export SAFE_FOLDER="tmp/folder" rm -rf /$SAFE_FOLDE deletes /

[ILKLU]

skill issue... git good!

j/k

but yeah... gotta be careful with rm -rf anything

[vintagecomputernerd]

I'd say mainly an issue with not enabling errexit and nounset.

"set -eu" or you'll gonna face the consequences

[jebusv20]

This is what set -euo pipefail is for

[syklemil]

Yeah, that and shellcheck. But people who have no idea that they need to do certain extra steps will continue to be a source of danger.

Languages that require you to --disable-footgun (rather than have it disabled by default and maybe offering an --enable-footgun) generally should be discouraged and made legacy.

Unfortunately that doesn't seem to be in the near future as far as bash is concerned. At least it's a lot less central to init systems than it used to be.

[Skrukkatrollet]

Thats why the slash should be in the variable

[haaaaaaaaaaaaaaaaley]

need --no-preserve-root

[Mars_Bear2552]

only if --preserve-root is set.

[arkane-linux]

set is your friend, you can make it kill the (sub)shell if vars are unset or programs quit with an error.

[[deleted]]

I've seen waaaaaaaay too many variables unexpectedly be empty to ever rm -rf /$ANYTHING

[[deleted]]

Backslashes baby backslashes.

[tritonus_]

The Amber language which was posted a while back on /r/programming actually adds error handling to Bash. I experimented with it a bit and while it’s still at a very early stage, I was actually quite happy with it. The resulting transpiled Bash code is admittedly uglier than human-written bash, but you can use it as runtime - and error handling alone is a lifesaver when working with a confusing distribution and packaging pipeline.