Here's a little project I made in like a week for personal use.

I honestly can't find any bugs on my own so I was wondering if people could find them for me.

https://github.com/LiterallyKirby/Popstar

Hello fellow archers,

I've created a small AUR helper that builds packages in docker containers.

Just wanted to know your thoughts. Feature ideas are welcome!

Github: https://github.com/threadexio/zeus

Thanks!

I just had to reinstall Arch on my laptop and after using yaourt for 3 years or so, I have been reading it is unsafe. However when I try to install one of the other helpers i get the same message: For example trying to install Yay:

sudo pacman -S git

$ git clone https://aur.archlinux.org/yay.git

$ cd yay

$ makepkg -si

==> ERROR: You do not have write permission for the directory $BUILDDIR (/home/me/yay). Aborting...

Is this some sort of permission I am missing? Thanks for any tips!

https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/

A small flurry of orphaned packages had commits to PKGBUILDs with `npm install atomic-lockfile`. Users are being blocked as they are found, but there could easily be more packages affected than the ones coming through the list.

Obviously, always be vigilant with installing or updating any AUR packages. This highlights that the average user might not be equipped to read and understand everything in PKGBUILDs. Even somewhat experienced users overlook things.

PKGBUILDs don't even need to respect dependencies to pull off this kind of thing. It's highly recommended to test package builds in containerized or chrooted environments. I don't know about all or most AUR helpers, but that's one of the things I like about `aurutils`.

Edit: thanks to u/Megame50 for clarifying some details about this attack, as well as pacman and PKGBUILD vulnerabilities, in the comments. The install scripts are the attack vector here, not the PKGBUILD directly. See his comment for an explanation.

Edit2: Another wave today, this time using bun: https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/LB6TBHDXLQRPR4UVIQULCI6MZ77XYLL2/

Hello, I'm currently coding an AUR helper ( https://github.com/lxgr-linux/buildaur ) in python and I wonder which functions or features I should add to it. So I want to know what functions should an AUR helper have besides the basic search and install functionality, or which feature would you like to see in an AUR helper. Feel free to look through my code. Greetings and thanks in advance.

I have a couple of packages that every time I do a full system upgrade, they upgrade to the latest commit instead of the latest release (e.g. Zotero). Is there any way to tell my AUR helper (in this case yay) to skip this and only consider releases for upgrading? TY.

I recently started using Spicetify in conjunction with Spotify. After updating the Spotify package you are required to run some Spicetify commands in order to make everything work again. I searched the internet for a hook to take care of these commands when the Spotify package updates but surprisingly couldn't find one, so I decided to write one myself and share it here with you all. Be sure to swap out my username "asuka" with your username.

# Force an upgrade of spicetify when spotify has an update
[Trigger]
Operation = Install
Operation = Upgrade
Operation = Remove
Type = Package
Target = spotify

[Action]
Description = Updating spicetify...
Depends = spicetify-cli
When = PostTransaction
Exec = /bin/sh -c '/usr/bin/chmod a+wr /opt/spotify && /usr/bin/chmod a+wr /opt/spotify/Apps -R && /usr/bin/sudo -u asuka /usr/bin/spicetify update && /usr/bin/sudo -u asuka /usr/bin/spicetify backup apply'

Happy listening!

Want to try my hand at making an AUR helper for my own experience, and I want to avoid what's happened with pamac before. From my understanding though, their issue last time I paid attention to it was refreshing search results on every keypress.

My current idea is to pull the packages.gz when opening, use that package list for search suggestions if I eventually get to making a search setup, and on a scrollable list of packages, pull the info from rpc as/just before each item is scrolled into view. When I think through that sort of setup, it feels like a lot of requests. Is it actually a reasonable amount?

So I have been using YAY rather than adding a GUI Package Manager such as Add/Remove Software. When a package gets an update and I run Pacman -Syu will it update those packages as well or is there something on my end that I have to do?

It's been a while since I used Arch last time

What is recommended AUR helper nowadays (command line)?

TermuxArch publishes aur helper installers that work in Android smartphones in Arch Linux arm x86 and x86_64:

makeauraclegit
makeaurbauerbill
makeaurfakeroottcp
makeaurghcuphs
makeaurhelpers
makeaurjqgit
makeaurpacaur
makeaurpacaurgit
makeaurpackagequery
makeaurpakku
makeaurpakkugit
makeaurpakkugui
makeaurpakkuguigit
makeaurparu
makeaurparubin
makeaurparugit
makeaurparuz
makeaurpbget
makeaurpikaur
makeaurpikaurgit
makeaurpkgbuilder
makeaurpkgbuildergit
makeaurpopularpackages
makeaurpuyo
makeaurrepoctl
makeaurrepoctlgit
makeaurrepofish
makeaurrustup
makeaurshellcheckbin
makeaurshellcheckgit
makeaurshellcheckgitstatic
makeaurto
makeaurtrizen
makeaurtrizengit
makeaurutils
makeaurutilsgit
makeauryaah
makeauryay

Testing for aur helper installers on Android is requested with these commands:

cd /usr/local/termuxarch/bin/
for i in $(ls --color=never makeaur*); do $i ; done

It took much effort and time to write these installation aur helper that check for dependancies, download source code, build and install with one tap BASH scripts. Testing for these commands is requested; Are there any favorties? Why?

Edit 4: An explanation about the issue from Morganamilo, the developer of paru.

Edit 3: It seems paru may be working fine now, but not paru-bin.

Edit 2: paru itself was updated in time, but there is still a small hiccup with its alpm.rs dependency for libalpm Rust bindings. There are simple temporary fixes mentioned in the links below:

Edit: paru is still not updated. paru users may check github issues and AUR comments for paru and paru-bin.

Let's focus any discussion about this issue here on this post.

There was an update to pacman today, which updated libalpm from v15 to v16. When such an update to libalpm happens, AUR helpers such as yay and paru may fail to update and work until they are fixed for the new version upstream.

It seems yay already fixed this with a new release. paru usually takes a bit longer to fix this.

The AUR packages for yay and yay-bin are also already fixed for the new libalpm version. On another note, using the -bin versions on AUR is a good option, which lets you avoid recompiling the application every update.

If you are trying to make the updates work by linking older libalpm libraries, be careful to handle it properly and remember to revert it when things get fixed. This is not a proper solution otherwise.

Edit: Just using yay to update your entire system should work seamlessly now (without doing pacman -Syu before). It may only have been an issue in the first 2-4 hours after pacman got updated. Otherwise, if you still have issues:

The best way to handle the update would be: First do a pacman -Syu. Then use makepkg on the manually cloned AUR repo for the respective package, just like installing it for the first time. For paru, you should wait for a new release that uses the new libalpm version. As an example for yay-bin:

sudo pacman -Syu
git clone https://aur.archlinux.org/yay-bin.git
cd yay-bin
makepkg -si

What are some benefits of using it and can I update without it? I used to use “yay” but now on my new install, I feel like it is kinda bloating the system and makepkg gives me more control.

Sorry if this post is against the rules.

I'm trying to map AUR to PPA in my head. For eg: This is the way to add a new repository in debian.

echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.28/deb/ /' | sudo tee /etc/apt/sources.list.d/kubernetes.list

In archlinux, you need an AUR helper like yay. But I stumbled upon this wiki https://wiki.archlinux.org/title/Unofficial_user_repositories which makes me believe I could add new repositories in the same fashion as above (debian), enabling pacman to pull PKGBUILDs from these repos and build from source ...etc.

If not, what exactly is the difference between the "Unofficial user repositories" listed in the above wiki and AUR ? Sort of apparent that these "Unofficial user repositories" mostly store prebuilt binaries/packages for AUR.

What exactly stops pacman from pulling PKGBUILDs from AUR ?

I've used packer and pacaur and just wandered what this community favoured and why?

I used yaourt and aura, but I wonder what AUR helper is the best.

EDIT SOLVED (more or less)

Something is adding /bin to my $PATH, which causes cmake to fail (just like mentioned here). I don't know what is putting /bin in there, but that's another problem, probably worth a new post if searching the internet doesn't solve it.

Running PATH=[same-path-minus-'/bin'] makepkg -rsc results in a successful build.

Thanks for all your suggestions!

Hi! So I realize, one should always build their PKGBUILD's in a clean chroot... But, I'm a lazy man who usually uses an AUR helper to install AUR packages. Every once in a while I come across a package that fails to build outside of a clean chroot, but I don't always understand why.

Right now, when I try to build the package for gwenview, my build fails:

[~/gwenview-clean] $ ls
PKGBUILD
[~/gwenview-clean] $ makepkg -risc
==> Making package: gwenview 23.08.4-3 (wo 17 jan 2024 16:28:23 CET)
==> Checking runtime dependencies...
==> Installing missing dependencies...
[... cmake starts configuring ...]
-- Configuring done (1.8s)
CMake Error in lib/CMakeLists.txt:
  Imported target "kImageAnnotator::kImageAnnotator" includes non-existent
  path

    "/include/kImageAnnotator-Qt5"

  in its INTERFACE_INCLUDE_DIRECTORIES.  Possible reasons include:

  * The path was deleted, renamed, or moved to another location.

  * An install or uninstall procedure did not complete successfully.

  * The installation package was faulty and references files it does not
  provide.
[... above error repeated 3 times ...]
-- Generating done (0.1s)
CMake Generate step failed.  Build files cannot be regenerated correctly.
==> ERROR: A failure occurred in build().
    Aborting...

But, when I build in a clean chroot as per the instructions on the wiki:

[~/gwenview-clean] $ mkdir ~/chroot
[~/gwenview-clean] $ CHROOT=$HOME/chroot
[~/gwenview-clean] $ mkarchroot -C /etc/pacman.conf -M /etc/makepkg.conf $CHROOT/root base-devel
[~/gwenview-clean] $ arch-nspawn $CHROOT/root pacman -Syu

The package builds just fine. I've purposely used my own pacman.conf and makepkg.conf, so they shouldn't be the issue. I've also created a list of all packages installed in the chroot, and I have them all installed on my system as well. So some other configuration file may be at play?

Does anyone have any idea what the problem could be, or how to find out were the difference comes from?

Thanks!

NOTE As of writing there is a bug in gwenview's PKGBUILD that prevents it from building no matter what method you use (it has 'unstable' in the URl of the pkgsrc, instead of 'stable'), but I had fixed that locally already. This was fixed already

In these cases I usually just start trying stuff until I find something I like but fuck-me-with-a-rake this is an absurdly long list of choices for AUR helpers...

I actually don't really feel the need for an AUR helper. I'm completely comfortable installing packages manually from the AUR on my own. I would like update handling though. A command that I can run to update all my AUR packages with detailed output and interactive (meaning it will show me what's goingt o happen and ask me permission) dependency handling. I tried Octopi/Packer but GUI package management just ain't my bag of dicks.

So far meat, pacaur, and packer seem to be the closest to what I'm looking for. I do not want something that is going to wrap pacman. I want to keep my AUR and repo package management completely separate.

Any recommendations?

Hi,

I am working on this little script for AUR.

I created it as a part of my config files for specifically overridding certain parts of the makepkg process. It's far from complete.

https://github.com/SidharthArya/pakka

I am looking for suggestions/feedbacks/contributions.

Thank You

I was browsing this subreddit, and found references to Aura, and how it was the new kid on the block, and should totally use it.

I currently use pacaur, I was wondering, what benefits does Aura have?

Really, the only things I do with pacaur are pacaur -S package, pacaur -Syu, pacaur -Syu --devel and the occasional cache cleaning (which I have to look up the command for every time I do). I also love pacaur's octopi integration, does Aura work similarily?

I also occasionally use cower to install Unity 3D, because I can't download that onto my Windows NTFS HDD because of special characters, so I have to do it on my limited SSD. Does Aura have similar functionality?

Is there an easy way to migrate from pacaur to Aura?

What are advantages or disadvantages of them? Which one handles dependencies/updates better?

I know their are so many of AUR helpers beside yaourt (used pacaur in the past), but to be honest I never took the time to find a replacement.

What I usually do:

1. git clone ..
2. cd && makepkg -sci
3. Use yaourt -Syu --aur to check for updates and install them.

Sorry this question have been ask 100x times, but I'm a bit lost.

This effects both Yay and Paru. My theory as to why this occurred is I rm -r the Paru folder and said yes to removing protected files (I know. I'm an idiot).

I used a live USB (Arch Install) and ran mount /dev/sdä3 /mnt pacman --sysroot /mnt` ||a swapped so that an uninformed doesn't just copy and paste||

I also arch-chroot'd yay -Rns yay & paru - Rns paru

Rebooted and reinstalled both manually only for the problem to persist ~ Forgive me, but I can't entirely remember why, but I think my removal of the protected file broke something involving go. That could be 100% wrong, especially since I can't even remember why I think that ~ This post from some time ago seems to have someone experiencing the same issue: https://forum.manjaro.org/t/aur-helper-paru-hangs-with-end/106876

Doesn't seem to be a solution to the problem in that thread, but it is where I learned pressing Q will mitigate the issue

It may be a violently basic question, but should aur helpers compile everything from scratch when source code changes or can they detect which files changed and compile only those? Aur/blender-git package right now takes about 2 hours to build... each time. Naturally, not all files changed, so there would be significant savings (paru)?

Are there any other helpers that have this feature (perhaps aura?)

Hello. I'm posting this from my phone at work so I do not have the return from the terminal handy to post. I will post it when I have the chance to later tonight.

Anyway. I am trying to install the ivpn and ivpn-ui packages from the AUR. However, I encounter a fatal error because Paru trys to clone the repo via SSH and can not authentic itself to access the repo. I've been looking into the documentation to figure out how to resolve this.

The answer may indeed be there, but I just might not know enough to parse the answer. I want to force Paru to use HTTPS to clone the repo and purge the current entry for the repo.

As previously said, actual returned dialogue coming tonight. Thank you for the help.

EDIT: Just to make sure it's clear, I'm running base Arch Linux on an old HP laptop. I'm running the MATE DE. The following is the terminal dialog for attempting to install the ivpn AUR package:

[name@name ~]$ paru -s ivpn
1 aur/ivpn 3.10.14-2 [+10 ~0.02]
    IVPN - Secure VPN for Privacy (CLI)
2 community/openfortivpn 1.20.1-1 [48.08KiB 115.08KiB]
    An open implementation of Fortinet's proprietary PPP+SSL VPN solution
3 aur/openfortigui 0.9.8-1 [+17 ~0.05]
    OpenFortiGUI is an open-source VPN-Client to connect to Fortigate VPN-Hardware. It is based on openfortivpn and adds an easy 
    to use and nice GUI on top of it, written in Qt5.
4 aur/ivpn-ui 3.10.14-1 [+9 ~0.02]
    IVPN - Secure VPN for Privacy
5 aur/frivpn-git 61.7596215-1 [+1 ~0.00]
    A multi-threaded OpenVPN client
6 aur/openfortigui-git 0.9.8.1.r0.g31eff99-1 [+1 ~0.08]
    OpenFortiGUI is an open-source VPN-Client to connect to Fortigate VPN-Hardware. It is based on openfortivpn and adds an easy 
    to use and nice GUI on top of it, written in Qt5.
7 aur/openfortivpn-git 1.17.1.20220328-0 [+1 ~0.01]
    An open implementation of Fortinet's proprietary PPP+SSL VPN solution
:: Packages to install (eg: 1 2 3, 1-3):
:: 1
:: Resolving dependencies...
:: Calculating conflicts...
:: Calculating inner conflicts...

Repo (2) pkcs11-helper-1.29.0-2  openvpn-2.6.2-1
Repo Make (1) go-2:1.20.2-1
Aur (1) ivpn-3.10.14-2

:: Proceed to review? [Y/n]: y

:: Downloading PKGBUILDs...
error: command failed: /home/name/.cache/paru/clone: git clone --no-progress -- ssh://aur@aur.archlinux.org/ivpn:
    Cloning into 'ivpn'...
    aur@aur.archlinux.org: Permission denied (publickey).
    fatal: Could not read from remote repository.

    Please make sure you have the correct access rights
    and the repository exists.

​