Live data from Hacker News

Homebrew 1.1.0

brew.sh

81–90 of 216 posts

Re: Homebrew 1.1.0

#81
post #65

Homebrew maintainers are doing a fantastic job, made my life as a developer so much easier! I wanna use this opportunity to "publicly" thank them!

Ditto. I install almost everything via brew and brew cask, and store the list of packages in git. It makes setting up a new machine a breeze. Thanks for all your hard work!

This is a cool idea! How does one go about doing this though? Is there a flag to output a text file with the names of installed versioned packages?

Re: Homebrew 1.1.0

#82
post #64

I have very mixed feelings about homebrew. When it works, it is awesome, but when it doesn't it can be a serious nightmare. In particular, homebrew refuses to run under sudo. Instead, to instal in /usr/local it wants me to recursively chown /usr/local to myself, which is a Really Bad Idea (tm). I have mostly stopped using it for this reason. I understand that running a program that runs third-party scripts under sudo…

Isn't it desirable to run builds as not-root? If you're concerned about safety, you could maybe "freeze" your homebrew install by chowning /usr/local back to root in between brew invocations.

> Isn't it desirable to run builds as not-root?

Absolutely. That's why the canonical gnu installation separates "make" from "make install". But homebrew could do the same thing (and maybe it does now -- I need to go back and revisit this because apparently this issue has been resolved.)

Re: Homebrew 1.1.0

#83
post #65

Earlier quoted context omitted.

Ditto. I install almost everything via brew and brew cask, and store the list of packages in git. It makes setting up a new machine a breeze. Thanks for all your hard work!

This is a cool idea! How does one go about doing this though? Is there a flag to output a text file with the names of installed versioned packages?

Here's one example: https://github.com/geerlingguy/mac-dev-playbook

Makes it a lot simpler to do a clean OS install every upgrade, and to make sure all three of my Macs are perfectly in sync!

Re: Homebrew 1.1.0

#84

Homebrew maintainers are doing a fantastic job, made my life as a developer so much easier! I wanna use this opportunity to "publicly" thank them!

I don't like 'me too's, but Homebrew has been absolutely invaluable to me. The icing on the cake is that I can just install my own software in /usr/local/Cellar// or make my own tap and enjoy many of the benefits of Homebrew.

Thanks Homebrew maintainers, you make macOS rock even more!

Re: Homebrew 1.1.0

#85
post #23

Earlier quoted context omitted.

> Disable running Homebrew as the root user (e.g. sudo brew) why? Just curious, because I always use macports with sudo.

We don't drop privileges when building (as we're not designed to run as root) and the macOS sandbox has issues with the root user so unfortunately you're giving every package you install root access to write to (almost) anywhere on your system. This is bad so we've stopped it.

> We don't drop privileges when building

So why did you choose to disable running as root altogether rather than dropping privileges when building?

Re: Homebrew 1.1.0

#87
post #85

Earlier quoted context omitted.

We don't drop privileges when building (as we're not designed to run as root) and the macOS sandbox has issues with the root user so unfortunately you're giving every package you install root access to write to (almost) anywhere on your system. This is bad so we've stopped it.

> We don't drop privileges when building So why did you choose to disable running as root altogether rather than dropping privileges when building?

Using the root user like this is used by a tiny minority of our users. The deprecation notice noted we'd happily accept a PR that implemented the privilege dropping but one never came. In a world where Homebrew is run by a full-time, paid staff we'd likely have implemented it but there's too much other, more important stuff that needs done by our understaffed team.

Re: Homebrew 1.1.0

#88

Earlier quoted context omitted.

> best-practices Wat? How is fundamentally broken dependency management and forcing installed global binaries to be user-owned "best practices"?

Can you rephrase your objection in a less patronising and more constructive way?

There was a similar comment by the same author on the top-voted comment on the last Homebrew release issue too: https://news.ycombinator.com/item?id=12548454

Re: Homebrew 1.1.0

#89

Will I need a dongle to use it on my latest macbook? And if so, has the price of it also been cut to a reasonable 19.95?

Yeah, OK. We get it. You don't like something quasi-related to this post. So you're going to get a jab in wherever you can. Good job on you. Enjoy the rest of your week.

Sorry dude, thought this was a place for technology geeks to talk about the things we like and dislike about technology, perhaps even occasionally criticize the platforms we enjoy by making nonsensical hardware-vs-software comparisons that might be recognized by some as humor. The world needs to smile more.

Re: Homebrew 1.1.0

#90
post #79

Earlier quoted context omitted.

Ah, that is very good to know! Thank you! I will take a fresh look at homebrew. :-)

To perhaps save you some effort: we still ask you to chown e.g. `/usr/local/bin` which may or may not make it unacceptable to you.

That's not quite as bad as all of /usr/local, but still not great. Why "e.g."? What else is there? And why not just use /usr/local/homebrew or even better, a path determined by an environment variable? I don't mind giving you a user-owned directory to install things in. I mind very much being required to change system default security settings.
Post reply on HN