Shell Dep Download ✦ Plus & Reliable

| Problem | Solution | |---------|----------| | SSL certificate errors | Add -k to curl (insecure) or install ca-certificates | | Redirects not followed | Use -L flag in curl | | Slow downloads | Add --limit-rate to throttle | | Disk full | Check with df -h before download |

# Instead of 'npm install' using pre-built binaries:
curl -L https://github.com/nodejs/node-gyp/archive/refs/tags/v9.4.0.tar.gz
# Manual download to avoid registry rate limits

Always combine shell dep download with lockfiles: shell dep download

These lockfiles freeze exact versions, so your download script fetches deterministic dependencies. | Problem | Solution | |---------|----------| | SSL

curl -s https://example.com/file.tar.gz.sig | gpg --verify

Sometimes you need to perform a shell dep download on an internet-connected machine and then transfer everything to a secure, offline system. Always combine shell dep download with lockfiles:

This method is powerful but dangerous. Never pipe from curl directly into sh (e.g., curl http://bad.site/install.sh | sh). That is a shell anti-pattern.