Not sure how much I like the

curl -fsSL <https://get.pulumi.com> | sh

since I wanted to lock down the Pulumi version, but I think there's perf differences between curling the tarball directory and having the script do it for you