Comments (6)
This comes up often for me with scripts which are globally installed.
For instance, we deploy a phar automatically to /usr/bin/myscript which is used by users across the system. Most of the users use the phar, but only one should be allowed to update it. In the event of a failure when an unprivileged user uses the phar, she should be able to see if the phar is up to date, and request that the administrator update it.
Ideally, we would be able to institute a check when users run other commands, which would use phar-updater to check if the latest version is in use. Then, when a user ran myscript some:command
, they would be warned that "myscript" is not up-to-date. Currently, that would throw an error and prevent all unprivileged users from running any command.
Additionally, we have scripts that do integrity checks on systems. These scripts should not be able to write to the system, but it would be nice if they could check if globally-installed phar files are up-to-date and report that to system administrators.
from phar-updater.
What would be a use case for this?
from phar-updater.
I have added this in PR #21
from phar-updater.
In the event of a failure when an unprivileged user uses the phar, she should be able to see if the phar is up to date, and request that the administrator update it.
That's what I imagined myself. But on the other hand isn't it's administrator job to ensure all stuff is up to date and not forward that task on regular user 😄
Then, when a user ran myscript some:command, they would be warned that "myscript" is not up-to-date. Currently, that would throw an error and prevent all unprivileged users from running any command.
I'd like that, but again this could be an option because displaying your app is out of date
message to user that can't really update it adds more confusion. In your case I admit it can be useful.
Can you please also attach an exception trace?
from phar-updater.
I've been AWOL for a while, but I'll doing a round of PR reviews eventually. I see no harm in this change myself if it's useful.
from phar-updater.
Hi,
what is the status of this? I came across the issue using a third-party application that includes phar-updater. If someone could give me some pointers, I would be willing to help solving this issue.
Best, Tobias
from phar-updater.
Related Issues (20)
- github strategy is using the wrong api for packagist HOT 17
- Manifest file -based strategy HOT 1
- Obey HTTP_PROXY environment variables HOT 1
- SHA-1 is no longer secure HOT 1
- HHVM errors with PharException HOT 2
- Composer split VersionParser into Semver
- Calls to getNewVersion() can double Packagist requests
- Update README for SHA256 strategy
- Document or resolve git metadata when attached to versions HOT 1
- Remove humbug_get_contents HOT 1
- Check rollback unnecessary message
- PHAR signatures: Implement method to migrate private keys used for signing releases?
- humbug_get_contents() is deprecated HOT 3
- Check post-update that temp pubkey is deleted
- Unsigned PHAR testing
- Simplify usage
- Security check fail with "padraic/humbug_get_contents" old version 1.0.4 HOT 6
- always wondered - why is privkey.pem included in repo? HOT 2
- Current project status HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from phar-updater.