Offline Scripts #3869
Replies: 4 comments
-
So are you suggesting that you'd like to run the script once, which will store the code locally on your device, and then you'll just continue to use that locally stored code instead and never touch the Tteck repo afterwards? |
Beta Was this translation helpful? Give feedback.
-
@oOStroudyOo I can see the confusion. I would like to be able to
Right now in step 3. https://github.com/raw/tteck/Proxmox/main/misc/build.func is pulled using curl even if the script is running from a checked out repository (Step 1.) |
Beta Was this translation helpful? Give feedback.
-
I think the best way to go for you is to deploy your own Forgejo LXC or Gitea LXC and make a “local” copy of the repository that way. I also do get your security concern. |
Beta Was this translation helpful? Give feedback.
-
@Mellowlynx yes setting up my own repo is an option, but ideally it could be incorporated into the helper scripts relatively easily. Basically check if the sourced script exists locally, and if not, use curl. Something like this:
|
Beta Was this translation helpful? Give feedback.
-
The last time I checked, scripts pull code automatically from the github repo. So even if you checkout the entire repo, you will still be pulling scripts from the github repo. The cron updater, for example, pulls new code every time it runs.
Having the scripts be able to run "offline" (by that I mean not executing bash scripts pulled dynamically from the internet) would be a useful feature. This way updated scripts can be easily audited.
I am not suggesting @tteck, who does such a incredible job, would inject anything malicious. But given how widely these scripts are deployed this repo is likely a target by malicious actors.
Beta Was this translation helpful? Give feedback.
All reactions