#! /usr/bin/bash

set -euo pipefail
IFS=$'\n\t'

tmpfile="$(mktemp)"
curl --fail --proto '=https' --show-error --silent --tlsv1.2 --output "${tmpfile}" https://sh.rustup.rs && \
    sh "${tmpfile}" --no-modify-path -y && \
    chmod o-rwx ~/.cargo/bin/*
    rm "${tmpfile}" && \
    rustup component add llvm-tools