DEV Community

Discussion on: Arch Linux: Stop recommending people to use makepkg for the AUR

 
bdelphin profile image
Baptiste Delphin

Corey, you're completely wrong. A lot of people manually clone AUR repos and use makepkg -si to install them, including myself.
That's even the only way listed on this Arch Wiki page : wiki.archlinux.org/index.php/Arch_...

Back to the subject, I was aware of the potential risk of malicious code hidden in AUR repos, but I'm discovering with your article that a Helper can avoid such risk ! But how can an AUR helper tell if something is malicious or not ?

Thread Thread
 
coreydrewbruce profile image
corey Bruce

No no one really bothers with it because they just use there package manager or AUR helper, if the code was "malicious" for example there isn't much chance of that happening as even tho anyone can submit they will be viewed and checked, of course you can still manually makepkg if you want but no one does this regulually or even had to anymore thanks to package managers and helpers

Thread Thread
 
det87 profile image
Det

Never gone to #archlinux, have you?

Thread Thread
 
coreydrewbruce profile image
corey Bruce

I use Arch Linux with a bunch of others who also do and never in my time using Linux or Arch in general have I ever relied on downloading pkgfiles and building manually as a main way to get packages, if I install a package it's always with my package manager. I've manually downloaded the pkgbuild file and built the package once but I never rely on doing that

Thread Thread
 
det87 profile image
Det • Edited

Right. And probably none-of-you have gone to #archlinux. :D

I didn't use to cower (now auracle) && makepkg either (I used Arch for good 5+ years), but back then the IRC weenies were against AUR helpers, because noobs would come with their super simple problems that they could've fixed themselves had they learned about the build process.

Thread Thread
 
coreydrewbruce profile image
corey Bruce

Actually we have also nothing wrong with using a AUR helper even if we already know how to do it manually, why add more steps to do a simple task when a AUR helper to simplify things, it's the same process only automated.

Thread Thread
 
det87 profile image
Det • Edited

No you're not understanding what I said. I prefer AUR helpers, but as a maintainer I also didn't like it when random user's helper didn't work (or there was some super simple problem with the PKGBUILD), and they would then blindly copy paste those error messages to ping my mailbox each time.

Doesn't matter to users (Arch's overly complex as-is), but kinda does to maintainers and those who wanna help out in the forums, IRC, etc.

Thread Thread
 
coreydrewbruce profile image
corey Bruce

Yeah I know I'm just saying that AUR helpers are good 😋

Yep that's the toxic Arch users but I intend to change that and help users in a positive way instead of saying "read the fucking wiki" and acting arrogant.

Yes Arch is and can be complexed but just like Linux in general it doesn't have to be :)