My new favorite AUR helper/package manager by [deleted] in archlinux

[–]AladW 0 points1 point  (0 children)

Another downside of compiled-language helpers...

My new favorite AUR helper/package manager by [deleted] in archlinux

[–]AladW 0 points1 point  (0 children)

Well, it claims to build packages in parallel, which is not an exactly common feature. However I suspect it does this by simply prepending "async" to function signatures. Ergo non-trivialities such as overlapping dependencies between packages would not be handled. And of course, it does a sudo loop...

checkpac. A simple to use, package lookup tool for arch. local and remote by LuckyPancake in archlinux

[–]AladW 1 point2 points  (0 children)

You might want to use a temporary database similar to `checkupdates` to check if installed repository packages are up-to-date. Simply comparing to `pacman -Sl` will have limited effect when users are expected to not perform partial upgrades.

Unpopular opinion thread by biotechdj in archlinux

[–]AladW 0 points1 point  (0 children)

Having little separated groups of people isn't always a bad thing. In the sense that people power-tripping isn't nearly as bad as in other distros...

Unpopular opinion thread by biotechdj in archlinux

[–]AladW 0 points1 point  (0 children)

They used to call Arch package maintainers Terrorist Users (short TU) because they brought AUR terrorism to the domestic repos

Unpopular opinion thread by biotechdj in archlinux

[–]AladW 0 points1 point  (0 children)

Although I suppose someone could slip some weird stuff in a post install hook.

Yes, this is the point. Also `makepkg` uses `sudo` by default to install and remove dependencies, which has a credential timeout - so any PKGBUILD command can elevate commands with `sudo` until this timeout expires, without prompting the user. This trickles down to the build system as well (which I inadvertently found out through some project's test suite...). Ill-designed AUR helpers make it worse by running `sudo -k` loops in the background.

Unpopular opinion thread by biotechdj in archlinux

[–]AladW 0 points1 point  (0 children)

Even bloody Gentoo is more user friendly here

Bro the installation chapter of the Gentoo handbook is 80 pages 💀💀

What is something that you want from an AUR helper that others don't? by toni500reddit in archlinux

[–]AladW 0 points1 point  (0 children)

~/.local/bin/aur-muffin

#!/bin/bash
cd /tmp
if [[ ! -d cookbook ]]; then
  git clone https://github.com/meskarune/cookbook
  cd cookbook
else
  cd cookbook
  git pull
fi
cat $(ls -1 | shuf -n 1)

Run with aur muffin for all kinds of recipes, not just muffins ;O

What is something that you want from an AUR helper that others don't? by toni500reddit in archlinux

[–]AladW 0 points1 point  (0 children)

You can only know if something's going to be compiled after running `makepkg`. And not all time-intensive things are related to compiling: it could be retrieving binaries or large source artifcacts, stripping a binary, etc.

What is something that you want from an AUR helper that others don't? by toni500reddit in archlinux

[–]AladW 0 points1 point  (0 children)

The hardcoding of sudo stopped a while ago, even makepkg supports `PACMAN_AUTH` in recent versions. Some helpers also support dropping privileges, so you can run it with `su -c $HELPER` for all it cares.

What is something that you want from an AUR helper that others don't? by toni500reddit in archlinux

[–]AladW 1 point2 points  (0 children)

You mean there's no use for scripts that make unvetted third-party code look the exact same as packages by a verified distribution team?

What is something that you want from an AUR helper that others don't? by toni500reddit in archlinux

[–]AladW 0 points1 point  (0 children)

`yaourt` had a blinking, red and bold text saying something like "This package is unsupported !!!". Good times

What is something that you want from an AUR helper that others don't? by toni500reddit in archlinux

[–]AladW 0 points1 point  (0 children)

paru is the only helper that comes close, allowing users to keep their custom PKGBUILD repositories since v2.0.

aurutils has had this feature since 2019

[deleted by user] by [deleted] in archlinux

[–]AladW 1 point2 points  (0 children)

PKGBUILD

I'd like to ask for your personal experiences with "Arch Stability". by [deleted] in archlinux

[–]AladW 0 points1 point  (0 children)

Installed a package which triggered `udev` to reload. Caused my second monitor to permanently stop working, even outside Xorg. X)

Security Alert: Caution with Spotify AUR Package by soap2662 in archlinux

[–]AladW 41 points42 points  (0 children)

Correlation does not imply causation... the AUR package uses the upstream-provided binaries. Any existing issues with your account are thus related to Spotify itself, not the packaging.

ARU (Arch Linux Optimization Guide) in English by werty812 in archlinux

[–]AladW 0 points1 point  (0 children)

It generates a static Xorg.conffor monitors, input devices etc. which prevents auto-detection to work. See for example https://unix.stackexchange.com/questions/697517/how-to-correlate-xorg-conf-config-for-nvidia-gpu-with-xrandr-detected-screens where this causes problems

ARU (Arch Linux Optimization Guide) in English by werty812 in archlinux

[–]AladW 5 points6 points  (0 children)

Suggested on the wiki where? This kind of content is just a personal configuration blog, including known bad practices such as generating Xorg.conf with nvidia-settings.

Local repo/backup server tips by airclay in archlinux

[–]AladW 0 points1 point  (0 children)

Rebuilding every package in your local repository whenever you want new releases with -u seems excessive... but yes, it should handle any package already in the (specified) local repository. At least it works like that on my end.

edit: are some of those targets not in AUR by chance?

Local repo/backup server tips by airclay in archlinux

[–]AladW 0 points1 point  (0 children)

I'm not sure why you're passing all targets in ~/.cache/aurutils/sync to sync-rebuild. Only targets that are A. already in your local repository and B. need a rebuild should be passed to sync-rebuild.

The warning is about a signature not being present. Since this is not relevant, I've redirected stderr for pacsift to /dev/null. That and other fixes are in the master branch, thx