270
Arch Linux's AUR Sees More Than 400 Packages Compromised With Malware (www.phoronix.com)
submitted 4 months ago by to c/linux@lemmy.ml
77 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 9 points 4 months ago (9 children)

Whelp...I've REALLY loved EndeavourOS for my laptop, especially because I felt I could mess around with stuff, but maybe this is my call to use something like Fedora or a OpenSUSE variant (I love Tumbleweed dearly).

Nothing against the incredible Arch, but I'm deffos that user who does

> yay 
> "Build files exist. Do clean build? N"  
> "View changes? N".

ENTER.

I want to learn, but also I'm a bit of a danger to myself if this malware threat is this broad.

  • permalink
  • fedilink
  • source
  • hideshow 9 child comments
    •
  • [–] 4 points 4 months ago* (2 children)

    Have you heard about the recent fuckups of fedora? fedora is a shitshow.

    If you just yolo with yay anyway, you will get compromised on any system you use, ni matter the OS or distro, my dude.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 4 months ago*

    Have you heard about the recent fuckups of fedora? fedora is a shitshow.

    Oh really? I guess I haven't. 😬

    Yeah it was late here so I think I was poorly mushing two separate thoughts together there. I meant I was thinking of moving to a distro that isn't as bleeding-edge for the laptop I'm not updating every single day...But also I should find something that still has a nice large software variety so I stay off AUR.

    OpenSUSE has the "Open Build System" which I've used for like one package. So that's pretty neat.

    This is really tough because I have two gamers in the family using Nvidia cards I want to help move off of Windows, but I don't want them running into having to roll back as often as I have or fiddle too much, but I feel like Mint is a little too far behind.

    So I was considering the KDE spin of Fedora for them...But yeah, the answer isn't so easy anymore lol.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 4 points 4 months ago (5 children)

    Opensuse is great, been daily driving it for 1.5 years with no issues (issues were solved by booting an old snapshot and rolling back, updating again 2d later)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 2 points 4 months ago (4 children)

    OpenSuSE also comes in two flavours, Leap (a stable release) and Tumbleweed (which is rolling release and sligthly less bleeding edge than Arch).

    You can even run Opensuse stable, and in a VM on top Tumbleweed to have a system where you can safely try out new stuff.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 4 months ago (3 children)

    There's also Slowroll which is Tumbleweed but like 1 week behind in updates for a stable experience, and there's some immutable flavour that I forgot the name of.

    I'm using Tumbleweed, the one issue of rolling release (things occasionally breaking) is not an issue since OpenSuse natively supports snapshots (and automatically makes a snapshot before and after every update).

    Something breaks? Reboot -> Boot from read-only snapshot -> selecting the one from before the update -> in terminal: snapper rollback -> done. Update again 2d later.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 4 months ago (2 children)

    I’m using Tumbleweed, the one issue of rolling release (things occasionally breaking) [...]

    My 5 cents is the risk of breaking is overblown in many cases. Of course, you don't want important servers to break. But I am running Debian since 15 years and in fact, for me it broke more often than Arch, for example because of GNOME issues, or NVidia issues. And well that's a biased sample because I use Debian for a larger proportion of time. I think for desktop users, it matters more to have a backup system.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 4 months ago (1 child)

    Yes, the only thing that ever breaks for me are my nvidia drivers (specifically if there arent new drivers for a new kernel yet). Sometimes I don't roll back and just keep it, but often I'm using local AI for uni stuff so I roll back to fix them.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •