Show HN: Curl lama.sh – sh to start a web server anywhere • Hacker News Board

Show HN: Curl lama.sh – sh to start a web server anywhere

#1

Post by csweichel » Wed, Jun 19, 2019, 12:15 PM UTC

Show HN: Curl lama.sh – sh to start a web server anywhere
lama.sh

Re: Show HN: Curl lama.sh – sh to start a web server anywhere

#2

Post by cujic9 » Wed, Jun 19, 2019, 2:58 PM UTC

So, this just downloads a web server written in Go and runs it? Why isn't this more explicit?

Re: Show HN: Curl lama.sh – sh to start a web server anywhere

#3

Post by csweichel » Thu, Jun 20, 2019, 5:33 AM UTC

cujic9 wrote: post #2

So, this just downloads a web server written in Go and runs it? Why isn't this more explicit?

That's exactly right.

However, it does the downloading/starting in a really convenient manner. I wanted something I could just quickly type into a terminal without having to browse some GitHub release page.

Re: Show HN: Curl lama.sh – sh to start a web server anywhere

#4

Post by caspervonb » Thu, Jun 20, 2019, 1:03 PM UTC

When are you dropping a cryptominer into it? ;-)

Re: Show HN: Curl lama.sh – sh to start a web server anywhere

#5

Post by caspervonb » Thu, Jun 20, 2019, 1:06 PM UTC

Fair warning to users, you should never ever pipe something from the web directly into a shell.

I'm sure the author here has good intentions but, this is aimed at beginners (I'll assume, doubt anyone reasonably experienced would humor this) and teaching them a terrible idea.

Re: Show HN: Curl lama.sh – sh to start a web server anywhere

#6

Post by OceanKing » Thu, Jun 20, 2019, 5:09 PM UTC

Why not `python3 -m http.server`?

Re: Show HN: Curl lama.sh – sh to start a web server anywhere

#7

Post by csweichel » Thu, Jun 20, 2019, 7:52 PM UTC

OceanKing wrote: post #6

Why not `python3 -m http.server`?

Just in case you don't have Python :)

I got a tad fed up with having to remember the line for Python, Node and Ruby. This one works as long as you have bash and curl.

Re: Show HN: Curl lama.sh – sh to start a web server anywhere

#8

Post by csweichel » Thu, Jun 20, 2019, 8:00 PM UTC

caspervonb wrote: post #5

Fair warning to users, you should never ever pipe something from the web directly into a shell. I'm sure the author here has good intentions but, this is aimed at beginners (I'll assume, doubt anyone reasonably experienced would humor this) and teaching them a terrible idea.

Not sure this statements holds in this general form - it's a very good idea to be cautious what you execute, but curl | sh is not much different from running npx for example. It's difficult to know know what will actually be executed on your machine, but at least shell scripts can be inspected/audited (as compared to packages with 100 dependencies).

That said, prior to piping anything to a shell it's advisable to inspect what is about to be executed. That's why the lama.sh script is super simple, as is the code of the web server it downloads and executes.

Re: Show HN: Curl lama.sh – sh to start a web server anywhere

#9

Post by csweichel » Thu, Jun 20, 2019, 8:04 PM UTC

caspervonb wrote: post #4

When are you dropping a cryptominer into it? ;-)

no plans.

(but then, what else should I say :D)