Live data from Hacker News

Show HN: Homebrew 6.0.0

brew.sh

131–140 of 380 posts

Re: Show HN: Homebrew 6.0.0

#131

Earlier quoted context omitted.

> quite annoying It's also quite stable, which you'd think more people would prize given the recent and on-going supply chain attacks.

Given the recent dramatic uptick in vulnerability discoveries, it's also prone to being quite insecure...

LTS still typically get security updates. That's what the support in long term support means.

Re: Show HN: Homebrew 6.0.0

#132

Earlier quoted context omitted.

The concept of a "userspace package manager" is something I would expect Linux to have figured out twenty years ago. It's ridiculous that the usual situation for non-root users is "you can't install XY but feel free to build from source". Homebrew, Mise and Nix are filling that hole now. (Flatpak is more oriented towards GUI apps, and Snap... exists.)

At the very least, Linux package managers should have some concept of different layers of packages. For example, there might be layers for “system” (core components), “environment” (display manager, DE, etc), and “user”, each of which are maintained fully separately so they can’t ever step on each others’ toes and break things. Yes, it means there will be some redundancy but for all the trouble and complexity it’s sa…

Most "immutable" distro flavors do something like this. Back when I ran Aurora, it was rpm-ostree for the core system packages and homebrew in a devbox container for the rest. One incentive for maintaining the layer separation was that rpm-ostree was slow.

I've since moved my desktop box to NixOS, where everything is just flakes, but my mac runs circles around it so it's just there for Steam nowadays.

Re: Show HN: Homebrew 6.0.0

#133
I don't understand how the tap trust improves security at all. If I'm installing something from a third-party tap, instead of running tap + install, I now run tap + trust + install? How does this protect me against compromised taps?

Re: Show HN: Homebrew 6.0.0

#134

Well, I might as well ask my tech support question here :) I just ran the upgrade to 6.0.0, and it downloaded so many things concurrently that it killed my wifi (old router). Is there a way to cap bandwidth or maximum concurrent connections? (this is something I have to do in many download heavy apps, e.g., steam)

I don't think homebrew allows throttling bandwidth but it does let you set maximum concurrent downloads though. I believe the default is twice number of cores; you must have quite a few :) Set this to your preference:

HOMEBREW_DOWNLOAD_CONCURRENCY

Re: Show HN: Homebrew 6.0.0

#135
I love using Homebrew but I wish there was more support for pinning. I recently setup a new remote VM and tried to use a Brewfile for my setup. Turns out I cannot pin Neovim and so had to force upgrade my setup to 0.12.

Forced upgrades are not nice.

Re: Show HN: Homebrew 6.0.0

#136
post #95

Earlier quoted context omitted.

> Most Linux package managers cannot separate user-installed packages from system packages. And because of pinning versions to LTS releases on certain Linux distributions many times those packages stay out of date for years. Which is quite annoying.

> quite annoying It's also quite stable, which you'd think more people would prize given the recent and on-going supply chain attacks.

Stable as in unchanging, sure.

Stable can also mean "you get to keep all the bugs present in this version for the next 4+ years"

Re: Show HN: Homebrew 6.0.0

#138

I recently switched back to Homebrew from Nix, and the three big factors in that switch are: - Brew seems to have better support for the packages it has, compared to Nix where it seems a percentage of packages are not as well maintained, - Better Mac support; some Nix packages have features disabled on macOS, I think just because the maintainers of this packages don’t have a Mac for testing, - Better UX. Obviously I…

I use nix-darwin and also manage my homebrew packages with it. Maybe you can take a look at that.

May I ask for what do you use it at work? I have a few places I think nix might suit but I can’t really put my finger on it.

Re: Show HN: Homebrew 6.0.0

#139

I have switched my full OS-level dev env to https://mise.jdx.dev/ from Homebrew+pipx+npm, initially as an experiment but found out that it actually works amazingly well. Many things get installed directly from GitHub releases or a corresponding package manager (uv, pnpm, go get ...), zero glue code to "repackage", zero version lag. You can install any arbitrary version of a package, even multiple ones at once, and dy…

I did the same but with Nix.

Me too, but it definitely doesn't qualify as "zero glue code."

Re: Show HN: Homebrew 6.0.0

#140
Thank you. It is just funny and interesting to note people seeing Homebrew as their choice of default package manager on linux! It shows that people clearly care about the technically better solution which has a very good UX over the native choices that linux distros made over years, be it apt or yum or something else.

I install homebrew as a first thing on my corporate amazon linux too as many system packages are lacking, and I couldn't get neovim in a different way.

Post reply on HN