AURpocalypse now: a look at the recent AUR attacks
1–10 of 104 posts
Re: AURpocalypse now: a look at the recent AUR attacks
#2Who still uses Arch btw after this?
Re: AURpocalypse now: a look at the recent AUR attacks
#3Who still uses Arch btw after this?
Is there another distro that has an equivalent of the AUR with handling you think is preferable?
Re: AURpocalypse now: a look at the recent AUR attacks
#4Who still uses Arch btw after this?
I still do, I just don't touch AURs anymore.
Re: AURpocalypse now: a look at the recent AUR attacks
#5I'll note that OpenSuse also has Packman which a shitton of people enable (for codecs), has also 'one namespace only' an looser policies than the main distro.
I do not think this something you can escape by switching distro.
Re: AURpocalypse now: a look at the recent AUR attacks
#6Who still uses Arch btw after this?
If you want something from the AUR, just don't be lazy, read the pkgbuild.
Re: AURpocalypse now: a look at the recent AUR attacks
#7Who still uses Arch btw after this?
I do, I'm just choosy about aur packages I use
Re: AURpocalypse now: a look at the recent AUR attacks
#8Who still uses Arch btw after this?
Is there another distro that has an equivalent of the AUR with handling you think is preferable?
AUR is fast and loose and doesn't do much "handling" by design, so it's hard to find any equivalent repo. But there's always a tradeoff between fresh (nixpkgs unstable, might be the closest) and tested (Debian).
Re: AURpocalypse now: a look at the recent AUR attacks
#9Who still uses Arch btw after this?
Is there another distro that has an equivalent of the AUR with handling you think is preferable?
Gentoo
But let's hope we get this solved, like peer review model, vouch, or something
It is very good to be able to find build/install files for everything
Re: AURpocalypse now: a look at the recent AUR attacks
#10Earlier quoted context omitted.
Is there another distro that has an equivalent of the AUR with handling you think is preferable?
AUR is fast and loose and doesn't do much "handling" by design, so it's hard to find any equivalent repo. But there's always a tradeoff between fresh (nixpkgs unstable, might be the closest) and tested (Debian).
AUR isn't just the testing repo of Arch; it's explicitly just an open spot where anybody can put up "here's a PKGBUILD for folks". I don't see how it's like either the Nix or Debian examples.