this post was submitted on 14 Aug 2026
376 points (97.7% liked)

linuxmemes

32473 readers
1341 users here now

Hint: :q!


Sister communities:


Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack users for any reason. This includes using blanket terms, like "every user of thing".
  • Don't get baited into back-and-forth insults. We are not animals.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry of any kind will not be tolerated. This is an LGBTQ+-friendly community -- if that is a problem for you, you should leave.
  • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn, no politics, no trolling or ragebaiting.
  • Don't come looking for advice, this is not the right community.
  • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, <loves / tolerates / hates> systemd, and wants to interject for a moment. You can stop now.
  • 5. πŸ‡¬πŸ‡§ Language/язык/Sprache
  • This is primarily an English-speaking community. πŸ‡¬πŸ‡§πŸ‡¦πŸ‡ΊπŸ‡ΊπŸ‡Έ
  • Comments written in other languages are allowed.
  • The substance of a post should be comprehensible for people who only speak English.
  • Titles and post bodies written in other languages will be allowed, but only as long as the above rule is observed.
  • 6. (NEW!) Regarding public figuresWe all have our opinions, and certain public figures can be divisive. Keep in mind that this is a community for memes and light-hearted fun, not for airing grievances or leveling accusations.
  • Keep discussions polite and free of disparagement.
  • We are never in possession of all of the facts. Defamatory comments will not be tolerated.
  • Discussions that get too heated will be locked and offending comments removed.
  • Β 

    Please report posts and comments that break these rules!


    Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't remove France.

    founded 3 years ago
    MODERATORS
     

    TranscriptImage of a man pointing a gun at his own foot.

    Caption: Installing an AUR package without reading it's PKGBUILD.

    you are viewing a single comment's thread
    view the rest of the comments
    [–] NaibofTabr@infosec.pub 128 points 1 day ago (3 children)
    [–] Jesus_666@lemmy.world 29 points 1 day ago (2 children)

    If you want a bunch of stuff that's not in core or extra and you don't want to intensely babysit the AUR, you could try Chaotic-AUR. It hosts prebuilt packages for a bunch of AUR packages which are actively maintained by the Chaotic team.

    I consider it to be more secure than the AUR proper since they actually care for their packages and review nontrivial changes. For instance, the recent takeover attacks didn't hit Chaotic-AUR builds since the changed packages didn't make it past the review.

    It's still an unofficial third-party repository and closer to the AUR than to extra but I consider it a major step up.

    [–] NotSteve_@lemmy.ca 5 points 1 day ago

    I just recently reinstalled since I didn't feel comfortable with how many AUR packages I had and ive been using ChaoticAUR exclusively now. Can confirm that its a great repo

    [–] Zachariah@lemmy.world 14 points 1 day ago (5 children)

    Yes, but is it good, neutral, or evil?

    It is colorful socks

    IT'S MAHVEL BABY!

    [–] MonkderVierte@lemmy.zip 1 points 1 day ago

    I don't think Arch is right for you.

    [–] Azzu@leminal.space 17 points 1 day ago* (last edited 1 day ago) (3 children)

    I mean how often do you install AUR packages? Usually takes like a minute or so to skim through PKGbuild and the pkg comments and look for obvious issues. And most updates are just a sha hash and version change, taking like 5s to check.

    [–] HereIAm@lemmy.world 12 points 1 day ago

    But wasn't the latest AUR attack from a dependancy in the pkgbuild? Going out of your way to review all the dependencies as well is not really possible by just skimming through the script.

    [–] basxto@discuss.tchncs.de 6 points 1 day ago* (last edited 1 day ago) (1 children)

    I need a better wrapper that shows me diffs since last build. I’m too lazy for this

    Also pulling in release messages from git etc would be nice

    [–] NaibofTabr@infosec.pub 1 points 1 day ago

    Rarely, to be sure. I tried Arch for a bit, but I need a computer that I can actually use to get shit done, that isn't a constant project itself. Even Qubes doesn't require as much effort to keep operational.