Checksum.sh verify every install script
The pattern of downloading and executing installation scripts without verifying them has bothered me for a while. I started messing around with a way to verify the checksum of scripts before I execute them. I've found it a really useful tool for installing things like Rust or Deno. It's written entirely as a shell script, and it's easy to read and understand what's happening. I hope it may be useful to someone else!
Checksum.sh verify every install script launched on October 28, 2022 with 119 votes, #296 of 3,153 launches that month and more than 90% of that year's launches. The site was still online in September 2026, 3 years on.
In plain words
Checksum.sh is a shell script tool that verifies the checksum of installation scripts before executing them. Designed for developers who install tools like Rust or Deno, it addresses security concerns around downloading and running scripts from the internet without verification. The tool is written as readable shell script, making it straightforward to understand its operation and implement into existing workflows.
written from the facts on this page · September 2026
From the sources
Verify every install script. Checksum.sh is a simple way to download, review, and verify install scripts.
Checksum.sh is a simple way to download, review, and verify install scripts. If the checksum is OK the script will be printed to stdout, which can be piped to sh or elsewhere. If the checksum doesn’t match it produces an error and nothing is piped. View the code on GitHub . checksum https://sh.rustup.rs 8327fa6ce106d2a387fdd02cb95c3607193c2edb | sh In contrast to Rust’s usual installation which doesn’t verify the checksum: curl --proto '=https' --tlsv1 .2 -sSf https://sh.rustup.rs | sh Install Option 1: Define the checksum function directly Paste the following into your command line to define the checksum function. function checksum () { local s s = $( curl -fsSL " $1 " ) local h if command…from checksum.sh
Does a similar job
all alternatives →
Critic.sh – Simple testing framework for Bash2020 · github.com · ▲79Dead simple testing framework for Bash with coverage reporting - Checksum/critic.sh
Run unknown shell script with a line-by-line confirmation prompt2021 · gist.github.com · ▲158Run a shell script with bash, line-by-line, prompted on each command. Useful for running unknown scripts or debugging. Not a secure substitute for understanding a script beforehand. - LICENSE
My shell script for HTTP/HTTPS troubleshooting and profiling2019 · github.com · ▲155My simple Swiss Army knife for http/https troubleshooting and profiling. - trimstray/htrace.sh
- SCSHA1 Checksum Large Files with HTML5 Typed Arrays and Web Workers2011 · antimatter15.github.com · ▲47
Using Rust to write shell-script like tasks2020 · github.com · ▲231Common rust command-line macros and utilities, to write shell-script like tasks in a clean, natural and rusty way - rust-shell-script/rust_cmd_lib
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 27d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 25d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 22d ago · openbot.run
Talanoa▲340Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 20d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 27d ago · corespeed.io
Source: Show HN post ↗
Launched alongside, October 2022
the whole month →- I3
Hey HN, I 3d scanned the interior of the Great Pyramid / Khufu's pyramid for the Giza Project this summer and just finished the guided version to share. Would love feedback and/or problems you encounter. I used both a Leica BLK 360 and Matterport Pro 2 to do the scanning and the Matterport SDK for the web viewer. Matterport's web display with Three.js has been the most accessible to a wide audience in the past (previous iterations are in Unity and Unreal, but difficult to download over slower connections). I've been interviewing social studies teachers around the 6th grade level to…
Dev tools · 2022 · giza.mused.org
Last time I posted this it didn't garner much interest. There have been lots of improvements and fixes since the last release. Quick list of features: - Workspaces - Tabs - Nested Folders - Lots of context menus - Response history - Plugins - Runs fully in the browser and runs offline if necessary - Chrome and Firefox extension to bypass CORS restrictions - Desktop builds for all platforms - GraphQL support - Import collections exported from Postman and Insomnia - Simple user friendly interface I built this because I love Insomnia but wanted a portable version that I could run in the…
Dev tools · 2022 · restfox.dev
Micro SaaS HQ▲672Profitable Micro SaaS ideas, supportive community
Life & fun · 2022 · microsaashq.com
APIs are a little like the open road—always waiting, full of opportunity, but hardly utilized. So here’s America, composed of several APIs that paint a vivid, real-time picture of a good old-fashioned road trip. Get local classifieds and photos. Tune into local radio stations. Talk wit other drivers. And more. Exploring the country by car was an invaluable experience for me during my time in the states. I’ve since moved to Barcelona, and find myself missing the territory. This is my attempt at recreating the magic.
Life & fun · 2022 · 4m3ric4.com