mirror of
https://github.com/chatmail/core.git
synced 2026-09-22 13:01:21 +03:00
docs: always suggest using --locked with "cargo install"
Otherwise the lockfile is completely ignored as <https://doc.rust-lang.org/cargo/commands/cargo-install.html#dealing-with-the-lockfile> says "By default, the Cargo.lock file that is included with the package will be ignored." Mostly a reaction to <https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/>
This commit is contained in:
@@ -11,7 +11,7 @@ Rename the downloaded binary to `deltachat-rpc-server` and add it to your `PATH`
|
||||
To install from source run:
|
||||
|
||||
```sh
|
||||
cargo install --git https://github.com/chatmail/core/ deltachat-rpc-server
|
||||
cargo install --locked --git https://github.com/chatmail/core/ deltachat-rpc-server
|
||||
```
|
||||
|
||||
The `deltachat-rpc-server` executable will be installed into `$HOME/.cargo/bin` that should be available
|
||||
|
||||
Reference in New Issue
Block a user