Free Pterodactyl Daemon v0.6.10 Upgrade Script

[1337]

Hello,

Recently, the Pterodactyl team has announced a fairly critical security vulnerability (https://blog.pterodactyl.io/pterodactyl-security-announcement-january-31st-2019/) and I made a script to automate the patch's rollout to numerous clients without much manual intervention. Since it's not much work and directly concerns a serious security flaw, I've decided to make it publicly available for all to use. The script and instructions on how to use it are located within the repository: https://git.deploys.io/davids-public-scripts/pterodactyl-security-upgrade-0.6.10

***NOTE: Only works for upgrades from 0.6.x, not backwords compatible with 0.5.x or lower!***

P.S - I'm not liable if stuff breaks, script is provided as-is and without any form of warranty. Use it at your own risk.

Contact me on discord, david#0101 if you have any problems or questions.

 

[LamerGamerYT]

Thanks for providing this script to the community.

 

[Severingcastle8]

Thanks 1337 ! Very helpful and nice of you to release it to the community!

 

[Ajdin]

All this script does is add some extra 'echo' commands to make it look a bit fancier. It doesn't execute any extra checks or anything like that.

If people are capable of downloading and running your script, they would definitely be capable of updating their daemon. The daemon upgrade is more noob friendly than your script because it has less commands and they don't need to replicate an entire repo for 2 commands.

 

[1337]

All this script does is add some extra 'echo' commands to make it look a bit fancier. It doesn't execute any extra checks or anything like that.

If people are capable of downloading and running your script, they would definitely be capable of updating their daemon. The daemon upgrade is more noob friendly than your script because it has less commands and they don't need to replicate an entire repo for 2 commands.

It's meant for speeding it up across large deployments, automation > manual labor.

 

[Ajdin]

It's meant for speeding it up across large deployments, automation > manual labor.

How is it speeding things up? There's several conflicts with your thought process.

1. The script does't make things easier. You need to clone the repo, give the script permission and THEN execute the script. You even added another dependency (git) instead of making the process easier.
2. People with large deployments usually also have the skilled people to maintain such large deployments. You could literally copy the 2 commands in ptero's upgrade tutorial, stick them in a bash file and it would have the same result.
3. Also "automation > Manual labor", what? How is this automation? Again, you're making the process more complicated. If people care about automation that much they would for example have a jenkins setup which allows them to push tasks or script to the server instead of manually logging in and doing it. The script still requires you to login, download the script and execute it. How is it automation?

 

[1337]

How is it speeding things up? There's several conflicts with your thought process.

1. The script does't make things easier. You need to clone the repo, give the script permission and THEN execute the script. You even added another dependency (git) instead of making the process easier.
2. People with large deployments usually also have the skilled people to maintain such large deployments. You could literally copy the 2 commands in ptero's upgrade tutorial, stick them in a bash file and it would have the same result.
3. Also "automation > Manual labor", what? How is this automation? Again, you're making the process more complicated. If people care about automation that much they would for example have a jenkins setup which allows them to push tasks or script to the server instead of manually logging in and doing it. The script still requires you to login, download the script and execute it. How is it automation?

Alright keyboard warrior, calm down. I made this script to help the community and released it for free because people said it'd be helpful. Just because you don't see its purpose doesn't mean there isn't one. Absolutely no reason to write up 3 paragraphs bashing on someone for releasing something that might be helpful, as an adult I'm sure you could've spent your time doing something better.