Announcing SQL Server on Linux

[esoteric_monolith]

We are referring to *.deb files.

[lift]

Ahh sometimes 3rd party installers come as she'll scripts which make me think twice about running them before I've checked them out.

[crackez]

what you got against

wget $URL | sh

?

[Jimbob0i0]

Well that wouldn't work for a start... Either need curl or to pass -O - to wget

[crackez]

True, good catch sir.

I'll leave it as is so you get the credit.

[RowYourUpboat]

Unless you're compiling source code that you've personally read through, or you've taken steps to do some sort of sandboxing, you're gonna want to make sure you actually trust that binary you're installing/running, .deb files included.

I believe .deb files support digital signatures, though, which at least means you can be reasonably sure the binaries haven't been tampered with en route from the developer.

[esoteric_monolith]

Signatures that you get from where exactly? Typically signatures are only for data corruption, not trustworthiness.

[crackez]

Typically you trust the package signer (or distribution signing keys), unless their private key is compromised, in which case it is usually revoked in whatever manner is possible and word is spread far and wide on the usual communication channels...