this post was submitted on 26 Apr 2024
834 points (97.6% liked)

Open Source

36802 readers
154 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 130 points 1 year ago (3 children)

Ignore them. Send a pull request with the full source of Arch Linux.

[–] [email protected] 53 points 1 year ago* (last edited 1 year ago) (1 children)

Nah, just a giant compiled binary blob. That's what all the cool hackers do these days.

[–] [email protected] 6 points 1 year ago

I’ll try a supply chain attack! That’s a good trick!

[–] [email protected] 9 points 1 year ago (1 children)

dumb question maybe, but where is the full source of arch Linux? My understanding is that its just vanilla Linux that uses the pacman package manager.

Am I wrong in saying the pacman is the Arch source? Or is there more going on in the tar ball?

[–] [email protected] 8 points 1 year ago (1 children)
[–] [email protected] 1 points 1 year ago (1 children)

Cheers! It looks like this is then the PKGBUILD

https://gitlab.archlinux.org/archlinux/packaging/packages/base/-/blob/main/PKGBUILD?ref_type=heads

In which case, there are no packages defined there which are Arch specific except pacman. So... pacman is the Arch source, right?

[–] [email protected] 7 points 1 year ago* (last edited 1 year ago) (1 children)

A lot of these packages have Arch-specific modifications. For example, filesystem doesn't even have a non-Arch upstream as it defines the filesystem layout. That PKGBUILD and everything it depends on is the Arch source. Distributions are defined by which packages they include.

[–] [email protected] 3 points 1 year ago

ah, thanks for the clarification!

[–] [email protected] 6 points 1 year ago (1 children)
[–] [email protected] 16 points 1 year ago (2 children)

There is even a sentence in README.md that makes it explicit:

The source files in this repo are for historical reference and will be kept static, so please don’t send Pull Requests suggesting any modifications to the source files […]

[–] [email protected] 8 points 1 year ago

Somebody fork it then?

[–] [email protected] 5 points 1 year ago