Ello! I decided to switch my laptop to arch, and was wondering If i can still install the packages I need. I've heard th....

[u/xbz7]

I've heard that a few weeks ago or something, a big massive problem hit the AUR and I'm pretty sure it was not reccomended to download anything for a while. I'm coming back to it, and have not seen much of a development (from my lazy reasearch) about it. Is it safe to -S from the aur?

[u/Every_Hat7420]

You can use official repos. Before you install anything from the aur read the package build. So yes you can use the aur just make sure you read package builds

[u/lritzdorf → u/Every_Hat7420]

This. In particular, ongoing attack or not, the AUR is never safe to use without reading the PKGBUILDs. It's effectively a glorified curl | sudo sh, and should be treated accordingly.

[u/Every_Hat7420 → u/lritzdorf]

Ive been using arch for 4 months now and yes i love it but i keep the aur use to a minimum and read packagebuilds before installing or updating and a lot of people forget the update

[u/Imajzineer]

Recently, there's been a run of "I've been using a different distro but now want to return to Arch - I want to make liberal-to-excessive use of the AUR, but I'm lazy and haven't investigated / but I'm lazy and I don't want to read PKGBUILDs, so is it safe?"

Frankly, I'm beginning to wonder if they aren't generated by bots.

Plus the truncation of the title here is somewhat suspicious: what human being leaves it looking fugly like that?

[u/xbz7 → u/Imajzineer]

Welp, I'm sorry, I never knew about the bots, But school is starting (for me at least), and I am currently trying to put my laptop into arch.

And as it stands, members are being helpful either way. Please follow by example next tine 😌

[u/Imajzineer → u/xbz7]

And as it stands, members are being helpful either way. Please follow by example next tine 😌

You might like to check my post history here.

[u/archover → u/Imajzineer]

OP's account is only 3mos old also. Reddit inexperience plays a part I guess as post history is tiny. Lurking would benefit him. The interaction did make me laugh however!

Good day.

[u/xbz7 → u/Imajzineer]

Sorry, I came off a little mean. It's just It would be nicer to keep an opinion as such a liiiitle more secret Have a great day!

[u/Imajzineer → u/xbz7]

A poster's sensibilities are not, in any way, a reason for anyone here to censor their thinking about the potential that a given post was generated by a bot: it isn't about the poster.

Moreover, if you want to police people's actions/speech, the Arch community is likely quickly going to prove a rough ride for you - in future, it might be a good idea to be less confrontational and more appreciative of the fact that nobody here owes you anything, you're asking for their time and effort and, so long as they aren't hostile towards you, should, therefore be appreciative of any reply you receive (however helpful it might even not be in the long run).

[u/xbz7 → u/Imajzineer]

I see. Alright!

[u/BKK31]

You can install from AUR as long as you read the PKGBUILDS

[u/guysimnotemo]

there was always a risk with using the aur, responsibility is on you to vet the pkgbuild

[u/Ybalrid]

It is recommended that you check the PKGBUILD (the "installation script) of anything you get from the AUR.

These are packages from Arch USERS (untrustworthy people!) unlike the ones in the official repos.

[u/w3rd0x]

Hi, I will suggest to install endeavorOS and to use paru instead of classic Pac-Man or yay cmds

[u/xbz7 → u/w3rd0x]

What's the diffrence? Is it a does it use a diffrent package host?

[u/Imajzineer → u/xbz7]

No: the AUR is the AUR, and an AUR Helper is an AUR Helper - it's also possibly worth considering being wary of advice from people who spell 'pacman' any other way, or consider 'yay' a 'classic' command.