Hallo i have struggle to deploy frappe on production, and i find this github
https://github.com/flexcomng/erpnext_quick_install/blob/main/erpnext_install.sh
It’s depends on which OS user using.
In general, I’d only use a random script from the internet if I understand in detail what it does and what it’s limitations are.
There are plenty of step-by-step guides on this forum that explain every command.
If you don’t like to get your hands dirty, there’s Frappe Cloud with (almost) one-click hosting.
You mean, we shouldn’t use that randomly scripted operating system Linux started by a random CS student Linus, as seen by the obviously trustable, respectable and well established Microsoft, started by another random guy in his parents random garage?
Don’t forget that humans are beings of wavering intent and capabilities, as attested for by all cultures of Wisdom.
Trust is a very deep question intimately linked to many kinds of qualities and everybody’s metaphysical roots, which can not be resolved by any simple morale.
We as a community, and as a mankind, created many cultural, ideological, religious and technical systems which nobody can fully understand.
Bug trackers are filled, and so are vulnerability databases. Outages can happen everywhere. Nobody is safe from random bugs hitting them, if self-created or otherwise, even after many years of effort and experience.
All is a matter of efforts, as you rightly imply, but nobody is totally up to the task, because we all depend on each other in so many ways, and even more ways we can think of.
@rmeyer I am (pleasantly) surprised that you would categorize a resource developed for ERPNext by the community as random. Every custom app, custom script, custom function, posted in this forum, so long as it wasn’t developed/published by frappe could be categorized as random, going by your categorization. But just like frappe itself, every resource published here is open source so i believe anyone is free to delve into the source codes to find any encumberances if such exists.
I developed the install script after seeing multiple versions of manual step-by-step guides leading to series of issues. It was originally done for my personal use but after seeing many threads by community members complaining about issues with installing, i released it for anyone to use.
On a final note, if a resource is beneficial, let people use it. If you have questions, ask and it would be answered. But do not introduce a subtle caveat emptor simply because of your personal ideology.
@whytrno If you wish to use the install script but have questions, feel free to ask and i’ll answer them. you can also pm the over 150 community members who have forked the repo for their thoughts, the contributors who have made the script better and the scores of users who clone the repo daily for experimentation or production installs.
@flexy2ky I didn’t mean to imply that you wouldn’t be trustworthy. I meant that if someone is not convinced that the source is trustworthy and cannot judge the code by himself, then it’s probably a bad idea to run it. And yes, this applies to all software out there.
@Peer comparing the world’s most popular operating systems with a community install script doesn’t seem like a fitting analogy to me. Yes, trust is good and needed, but if you don’t trust and don’t understand it yet (my interpretation of the question), then I’d say it’s better to find a trusted provider, e.g. Frappe, who can run things for you and who you can hold liable if anything goes wrong.
@rmeyer, I see your point.
I also appreciate your response for several reasons.
I even found it great because you set a very high standard for yourself (and recommend it), and it also implies to work from a high level of trust into yourself, which is great.
Maybe a bit unrealistic, because nobody understands everything in these complex systems, but still, your reply implies constant and hard work which you obviously provide in different ways to the frappe community, and hard, clean, just work usually pays off in more than one way, and it shows and shines.
To me the self-trust also seems very fitting to the general endeavor of the whole Frappe project, as far as I understand its values and culture, and to the results I see in the people representing it (I followed the two Livestreams from beginning to end, which was very touching, and also very, very interesting).
I just found the “random” somewhat disparaging and not taking enough care of the specifics at hand, and @revant_one, as he so often does to the benefit of everybody, gave the available specifics which provided the insights needed for the original questions, and which he could do much better than me.
I also didn’t miss that you applied it to “script” rather then its originator(s), but still, talking like this can hurt sensibilities.
@flexy2ky replied with good mood and great information, which I also find great in it’s own right.
As far as I am concerned, overall, this thread is a testimony to the power of communication, frank interactions, and great spirits devoted to each other, and beyond.
It makes me looking forward to stronger collaboration for the benefit of all and the happy fruits of honest and engaging exchange in due time as we all advance from the places we’re at, as individual members of this community, each with one’s own specific knowledge, insights, needs and capabilities.
We are all evolving, and just seeing that play out together is fulfilling and giving hope. The social aspects are an important foundation to lots of good work. The world needs to change, and so do we, and doing that, the hope spreads.
While i take no offence from your opinion/comments about the install script as i want to believe it came from an honest concern for security which is understandable, the wider context, as you have expatiated on above, lends more credence to my response. Going by your submission, Frappe by itself could be classified as untrustworthy because in as much as it is open source, one requires the expertise and a team of engineers to ply through the source code to establish the trust you talk about.
Frappe has thousands of users today but it started with one person using it without knowing Frappe as an organization. If as you say “Trust frappe because they built the underlying software”, isn’t that contradictory in and of itself? The OP might be new to the community, found frappe online and decided to try it out. Faced difficulties installing using the myriad step-by-step guides out there and found a script which (puportedly) installs the software with minimal effort. Trust, therefore, in this sense, is implied not earned at the first instance. Every software out there, free or paid for, requires an implied trust from end users in order to attempt their use.
I do not encourage anyone to throw just about any software into their computer because it is promoted as good for their use case. However, i do think that a software, whether good or bad, can only be judged by end users who actually use the software and experience its efficiency. Earned trust comes from their feedback, otherwise all other trust levels are implied.
@whytrno The answer to your question is this:
It’s probably safe, but there are no guarantees. Before running any 3rd party script from a person you don’t know and trust…it’s wise to review the script. If you don’t have the skill or know-how to review it, then asking others for advice or help.
@revant_one has already vouched for the author. So that’s good. That still doesn’t guarantee the script works correctly for you. But it’s a helpful sign.
Good luck!
The rest of you:
Please do not hijack someone else’s thread with your pseudo-debates about semantics, choices of words, or quasi-philosophical concepts. This website is for Frappe-specific discussion. Take this kind of chat to a private conversation, or go hang out on Reddit.
Closing this topic.