130
What Linux distro surprised you the most? (slrpnk.net)
submitted 2 years ago by to c/linux@lemmy.ml
152 comments fedilink hide all child comments
 

During the first impressions of said distro, what feature surprised you the most?

you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 2 years ago (1 child)

Arch Linux. Many people said it is unstable and hard to setup. It turns out very stable as long as I update it frequently and AUR makes installing software easier. Even easier than ppa-based ubuntu as it will destroy your dependency if you are not careful. Lol.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (2 children)

    Isn't installing from the AUR equivalent to installing from a PPA, in terms of security and trust?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 10 points 2 years ago (2 children)

    Almost. But with one key difference. PPAs are precompiled binaries where you cannot inspect the source - you have to trust the maintainer of the PPA. AUR is a repository of source packages which you can download and inspect yourself (or hope others have done this). This makes AUR more community focused than PPAs I feel. AUR is also a central repo managed by people that dont own the vast majority of the packages hosted on it and where packages can be taken down if found malicious. PPAs are lots of separate repositories all managed by different people that generally maintain all the packages for their PPA.

    Though in both cases anyone can upload anything to them, so they are not 100% trustworthy. But I do think the way AUR works puts them ahead of PPAs.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 3 points 2 years ago (1 child)

    there is one more thing - unless you are using something like chaotic aur, or a very popular package, please pay attention to PKGBUILDS. These are essentially bash scripts which can (depending on your package manager) will run with highest permissions. They can do anything

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 2 years ago

    They also may not compile stuff from source, they can download and install binaries and some AUR packages do exactly that.

    There's zero guarantee when using AUR. It's not supported by Arch for a reason.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 2 years ago

    Also you can't just install these packages, you have to import the keyrings of any packages that access the kernel. That requires you to go to the website, check out the owner of the key, see their contributions and decide for yourself if you trust it

  • permalink
  • fedilink
  • source
  • parent