Support to install with PHIVE

[filips123]

Add support to install Box with PHIVE.

[theofidry]

It should already be possible, you need to give the full URL. Adding an alias would make it easier but it requires to sign the PHAR which I'm not sure to want to do yet.

[filips123]

It doesn't work because of PHIVE bug with pre-release suffixes in version constraints. See phar-io/phive#145 for details.
Also, installation without signed PHAR currently doesn't work. See phar-io/phive#149 for details.

[filips123]

Bug with pre-release suffixes in version constraints is now fixed, but installation without signed PHAR still
doesn't work (phar-io/phive#134).

You should sign the PHAR, if not earlier, when a stable box 3.0 version comes on.

$ sudo phive install -g https://github.com/humbug/box/releases/download/3.0.0-beta.4/box.phar
Phive 0.11.0 - Copyright (C) 2015-2018 by Arne Blankerts, Sebastian Heuer and Contributors
Downloading https://github.com/humbug/box/releases/download/3.0.0-beta.4/box.phar
[ERROR]    Failed to download load https://github.com/humbug/box/releases/download/3.0.0-beta.4/box.phar.asc: HTTP Code 404

[theofidry]

You should sign the PHAR, if not earlier, when a stable box 3.0 version comes on.

As things stand right now I'm not leaning towards signing my PHARs and more on the contrary remove the OpenSSL signature. I'm still waiting on a conservation or two with a couple more people more knowledgeable than me about security to make up my mind, but for now I only see downsides to signing a PHAR.

In any case PHIVE should work without signed PHAR IMO which is the direction taken from what I see in the issue you linked (phar-io/phive#134).

[szepeviktor]

@theofidry After 2 years phive works :)

phive install --force-accept-unsigned https://github.com/humbug/box/releases/download/3.8.4/box.phar

Please reconsider

• publishing a GPG key
• upload signature to GitHub releases
• send a PR to phive to add an alias: box

What an easy way! phive install box