What does HackerNews think of rustup?

The Rust toolchain installer

Language: Rust

#93 in Hacktoberfest
You may want to reword as "licensed under either GPLv3 or Polyform Non-commercial 1.0 at your option" or some such, like most rust-lang projects do; ex: https://github.com/rust-lang/rustup

Then give guidance on why one might choose one license over the other.

Any software you choose to run could not respect your desires and leave a mess. This is not a random shell script. It's the officially recommended way to install Rust [0], vetted and maintained by the community. You're free to audit the script before running it, or even check out the source [1]. If this doesn't satisfy you, check out the other installation methods [2].

Edit: I realize you're not speaking specifically about rustup, but what I said can and should apply to anything you choose to install this way.

0: https://www.rust-lang.org/tools/install#rustup

1: https://github.com/rust-lang/rustup

2: https://forge.rust-lang.org/infra/other-installation-methods...

> Why didn't the author sign it?

Discussed here: https://github.com/rust-lang/rustup.rs/issues/1568

It boils down to that the authors have not gotten around to it and are not experts on Authenticode. Apparently the macOS binary is also not signed, so at least Windows isn't being singled out.

To validate your binary you can use the SHA256 checksum that someone posted in the issue two days ago.

Incidentally the copy/rename process can run into issues on Windows due to Windows Defender holding a lock on the file which can prevent it being renamed. This is an issue for the Rust updater utility:

https://github.com/rust-lang/rustup.rs/issues/1436

Note that there is an open issue to perform the self-update before the update: [0]. Could be a good first patch for someone looking to contribute :)

[0] https://github.com/rust-lang/rustup.rs/issues/1838

The reqwest backend (which uses native-tls and thus schannel and thus the Windows cert store) is the default on Windows, so it shouldn't be using curl. https://github.com/rust-lang/rustup.rs/commit/6389676b6bf211...

If you must use an older rustup, set `$env:RUSTUP_USE_REQWEST` (or `$env:RUSTUP_USE_HYPER` for an even older rustup) to `1`