1
13

I am using Bitwarden on my smartphone. I want to use it on CachyOS.

Bitwarden Officially supports Flatpak, Snap, Appimage, .deb, .rpm.

I don't like Flatpak because for every single update, I also have to update Gnome Locale x2, KDE Locale x2 (at least 2 GBs)

Appimage is fine but I have to manually update.

Then, I looked on CachyOS Repo. There is a Bitwarden. Probably built over Arch Extra repos ?

Usually, I just install from CachyOS repo. But, Since I am downloading Bitwarden ( password manager ), I am bit skeptical. Whether this is recommended?

Can anybody help me?

2
8
Help with AUR Update (lemmy.dbzer0.com)

I was updating my CachyOS system. Copied the AUR diff and (still learning linux, so..) asked Claude if it can find anything malicious with the context of Arch AUR malware attack.

Package in question is librtmp0

Claude said librtmp0's Maintainer changed from "Maxime Gauduin" → "Damglador". And that I should watch out. It also said that something is fishy about version bump.

What I asked

with the context of recent arch aur malware incident, check if the following are malicious.


Aur (4) Old Version New Version Make Only
aur/lib32-gstreamer 1.28.4-1 1.28.5-1 No
aur/lib32-gst-plugins-base-libs 1.28.4-1 1.28.5-1 No
aur/lib32-libpng12 1.2.59-3 1.2.59-4 No
aur/librtmp0 2.4-7 2.6-1 No

:: Proceed to review? [Y/n]: 

:: Downloading PKGBUILDs...
(1/1) lib32-gstreamer-1.28.5-1 (lib32-gstreamer lib [-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------]
Paging with less. Press 'q' to quit or 'h' for help.

:: lib32-gstreamer:
PKGBUILD | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/PKGBUILD b/PKGBUILD
index 5d61e88..72db7e0 100644
***
a/PKGBUILD
+++ b/PKGBUILD
@@ -9,7 +9,7 @@ pkgname=(
lib32-gst-plugins-base
lib32-gst-plugins-good
)
-pkgver=1.28.4
+pkgver=1.28.5
pkgrel=1
pkgdesc="Multimedia graph framework (32-bit)"
url="https://gstreamer.freedesktop.org/"
@@ -81,7 +81,7 @@ source=(
"git+https://gitlab.freedesktop.org/gstreamer/gstreamer.git?signed#tag=%24pkgver"
0001-HACK-meson-Disable-broken-tests.patch
)
-b2sums=('3a8a3d89bfc9be8b2b1cbd24b6e7e1dbea25c4619045dd97df4631b94ad5d59d9ac54ffc54eccdec10b0195aee87e0dadd8f560e5cdc499dee99b033d141f7e9'
+b2sums=('af4c921e40f58cd61d62dfc1420dfd4d9c0b678f8c17f9504b5f3b6fdbdbd81139a9e5c4397453795ab9fd57f6212f3eee672fc27ad37a4c2f241560dec5c1cd'
'f6c0042f2d171d93f3aadc5fed50fa4a83a901371ce914cb44d614ac0510e0c5c2e10334a9011acad80f86ab08d7a953cce8d331660bca49bbfcaabbce9bee6b')
validpgpkeys=(
D637032E45B8C6585B9456565D2EEE6F6F349D7C # Tim Müller 

:: librtmp0:
PKGBUILD | 7 ++++---
1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/PKGBUILD b/PKGBUILD
index bd5f514..1016d72 100644
***
a/PKGBUILD
+++ b/PKGBUILD
@@ -1,4 +1,5 @@
-# Maintainer: Maxime Gauduin 
+# Maintainer: Damglador 
+# Contributor: Maxime Gauduin 
# Contributor: Bartłomiej Piotrowski 
# Contributor: xduugu 
# Contributor: Elis Hughes 
@@ -6,8 +7,8 @@
# Contributor: Arthur Skowronek 

pkgname=librtmp0
-pkgver=2.4
-pkgrel=7
+pkgver=2.6
+pkgrel=1
pkgdesc='Toolkit for RTMP streams'
arch=('x86_64')
url='https://rtmpdump.mplayerhq.hu/'

:: lib32-libpng12:
LICENSE:
Copyright Arch Linux Contributors

Permission to use, copy, modify, and/or distribute this software for
any purpose with or without fee is hereby granted.

THE SOFTWARE IS PROVIDED “AS IS” AND THE AUTHOR DISCLAIMS ALL
WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE
FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY
DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN
AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

PKGBUILD:
# Maintainer: Maxime Gauduin 
# Contributor: Arthur Zamarin 
# Contributor: trya 
# Contributor: Jan de Groot 
# Contributor: dorphell 
# Contributor: Travis Willard 
# Contributor: Douglas Soares de Andrade 

pkgname=lib32-libpng12
pkgver=1.2.59
pkgrel=4
pkgdesc='A collection of routines used to create PNG format graphics files'
arch=('x86_64')
url='http://www.libpng.org/pub/png/libpng.html'
license=('custom')
depends=('lib32-glibc' 'lib32-zlib' 'lib32-gcc-libs')
makedepends=('gcc-multilib')
source=("https://sourceforge.net/projects/libpng/files/libpng-$%7Bpkgver%7D.tar.xz"{,.asc}
"https://sourceforge.net/projects/libpng-apng/files/libpng12/$%7Bpkgver%7D/libpng-$%7Bpkgver%7D-apng.patch.gz")
validpgpkeys=('8048643BA2C840F4F92A195FF54984BFA16C640F') # Glenn Randers-Pehrson
sha256sums=('b4635f15b8adccc8ad0934eea485ef59cc4cae24d0f0300a9a941e51974ffcc7'
'SKIP'
'281fd5f0165762967a18302dca217de3212be4a3437f95805be44f1ac9db1a5d')

prepare() {
cd libpng-${pkgver}

patch -Np1 -i ../libpng-${pkgver}-apng.patch

libtoolize --force --copy
aclocal
autoconf
automake --add-missing
}

build() {
cd libpng-${pkgver}

export CC='gcc -m32'
export PKG_CONFIG_PATH='/usr/lib32/pkgconfig'

./configure \
--prefix='/usr' \
--libdir='/usr/lib32'
make
}

package() {
cd libpng-${pkgver}

make DESTDIR="${pkgdir}" install
rm -rf "${pkgdir}"/usr/{bin,include,lib32/{libpng.{a,so},pkgconfig},share}

install -Dm 644 LICENSE -t "${pkgdir}"/usr/share/licenses/lib32-libpng12/
}

# vim: ts=2 sw=2 et:

REUSE.toml:
version = 1

[[annotations]]
path = [
"PKGBUILD",
"README.md",
"keys/**",
".SRCINFO",
".nvchecker.toml",
"*.install",
"*.sysusers",
"*.tmpfiles",
"*.logrotate",
"*.pam",
"*.service",
"*.socket",
"*.timer",
"*.desktop",
"*.hook",
]
SPDX-FileCopyrightText = "Arch Linux contributors"
SPDX-License-Identifier = "0BSD"

(END)

What I got

Assessment of These AUR Packages

Based on the recent "Atomic Arch" malware campaign from June 2026, I can provide you with an analysis:

Package Status Risk Level Notes
lib32-gstreamer Safe Low Simple version bump (1.28.4 → 1.28.5), b2sum hash updated cleanly. No new dependencies.
lib32-gst-plugins-base-libs Safe Low Version bump only, same pattern as gstreamer.
lib32-libpng12 Safe Low Minor pkgrel bump (3 → 4). Full PKGBUILD shown—no malicious npm packages or suspicious install hooks.
librtmp0 ⚠️ Requires Review Medium Maintainer changed from "Maxime Gauduin" → "Damglador". This is exactly the attack pattern used in Atomic Arch (package adoption by new maintainers). Full PKGBUILD content not shown in your diff.

Key Findings

The "Atomic Arch" Campaign Context

The June 2026 incident targeted orphaned AUR packages through maintainer takeovers. Attackers adopted abandoned packages and injected malicious npm dependencies (atomic-lockfile, js-digest, lockfile-js) that steal credentials, SSH keys, GitHub tokens, and developer environment secrets. Over 1,500 packages were ultimately compromised across multiple waves.

What to Look For

The malware signatures included:

  • New npm dependencies added to depends() or install hooks (e.g., npm install atomic-lockfile)
  • Preinstall hooks like "preinstall": "./lib/install-deps.mjs" in npm packages
  • Maintainer changes on previously stable packages (potential adoption by attackers)

Your Packages

Safe packages: The three gstreamer and libpng packages show only version bumps and hash updates—no new dependencies, no npm installs, no suspicious hooks. These are routine upstream updates.

Flagged package: librtmp0 shows a maintainer change, which aligns with the Atomic Arch attack vector. However, the diff you provided doesn't show the complete PKGBUILD or new dependencies. You need to verify:

  1. Whether the version bump to 2.6 and the maintainer change are legitimate
  2. Whether any new depends() or install hooks were added (not visible in your diff)
  3. Check the full PKGBUILD for npm install commands or suspicious scripts

Recommendation

Proceed cautiously. Install the first three packages if your normal update cycle includes them. For librtmp0, run a full PKGBUILD review before proceeding—look at the complete file for any added dependencies or install hooks. Cross-reference with the AUR malware check tools to confirm whether librtmp0 appears on any known-compromised lists.

So, I am seeking your help. Should I proceed with the update?

3
13
submitted 2 weeks ago* (last edited 4 days ago) by Monkey@piefed.social to c/linux4noobs@programming.dev

I installed some updates and after a restart the network manager thing in the taskbar said NetworkManager wasnt running so i tried to run it in terminal and it said i didnt have permission so i ran it with sudo and it worked. How do I get it to automatically start?

(I also posted this here: https://piefed.social/c/linuxquestions@lemmy.zip/p/2244268/networkmanager-on-kubuntu-doesn-t-run-on-startup)

UPDATE:
fixed with sudo apt install --reinstall network-manager

4
22
submitted 3 weeks ago* (last edited 3 weeks ago) by Zidane@lemmy.ca to c/linux4noobs@programming.dev

I do not wish for it to be magnified. I hit some combination of super, alt, Ctrl, shift, maybe z? I have checked like twenty Linux keyboard shortcut websites and checked my actual keyboard shortcuts on my computer to no avail.

CachyOS 7.1.3-2

5
21
submitted 1 month ago* (last edited 1 month ago) by ludrol@programming.dev to c/linux4noobs@programming.dev

Any linux wizards know why when my sound sources go to background and CPU is under heavy load the audio crackles?

apps tested: minecraft, vlc(flatpak), spotify(flatpak), other fltapaks
crackles on both bluetooth and minijack headphones,
disabling microphone, easyeffects, gpu screen recorder ( gsr-default_output) didn't help

I use blender to put the load on CPU but it also happens when compiling or gaming

I have increased stuff in cat /etc/pipewire/pipewire.conf

[…]
## Properties for the DSP configuration.
    default.clock.rate          = 192000
    #default.clock.allowed-rates = [ 48000 ]
    default.clock.quantum       = 1024
    default.clock.min-quantum   = 32
    default.clock.max-quantum   = 4096
[…]
pw-top -b
S   ID  QUANT   RATE    WAIT    BUSY   W/Q   B/Q  ERR FORMAT           NAME 
S   29      0      0   
***
   
***
 
***
 
***
    0                  Dummy-Driver
S   30      0      0   
***
   
***
 
***
 
***
    0                  Freewheel-Driver
S   45      0      0   
***
   
***
 
***
 
***
    0                  Midi-Bridge
S   48      0      0   
***
   
***
 
***
 
***
    0                  bluez_midi.server
R   52   2048 192000  10,6ms  69,7us  0,99  0,01  453    S32LE 2 48000 alsa_output.pci-0000_06_00.6.analog-stereo
R  213    900  48000 229,0us  69,1us  0,02  0,01    0    F32LE 2 48000  + Firefox
R  219      0      0  13,0us  41,1us  0,00  0,00    0    F32P 2 192000  + easyeffects_sink
R  217      0      0    +++   17,0us  +++   0,00  428                   + ee_soe_output_level
R  174      0      0   9,3ms  34,3us  0,88  0,00  5416                   + ee_soe_spectrum
R  206    512  48000 300,5us  54,3us  0,03  0,01    0    F32LE 2 48000  + java
R  186    900  48000 359,5us  56,2us  0,03  0,01    0    F32LE 2 48000  + Firefox
R  242    900  48000 417,2us  52,4us  0,04  0,00    0    F32LE 2 48000  + Firefox
R  129    960  48000 152,1us  74,5us  0,01  0,01    0    S16LE 2 48000  + gsr-default_output
R  116   1920  48000 472,4us  62,5us  0,04  0,01    0    F32LE 2 48000  + VLC media player (LibVLC 3.0.23)
I   53   4096 192000   8,9us   3,3us  0,00  0,00  109   S32LE 2 192000 alsa_input.pci-0000_06_00.6.analog-stereo
S   68      0      0   
***
   
***
 
***
 
***
    0                  v4l2_input.pci-0000_06_00.3-usb-0_3_1.0
I  191      0      0   0,0us   0,0us  ???   ???     0    F32LE 2 48000 Firefox
I  216      0      0   0,0us   0,0us  ???   ???     0    F32LE 2 48000 Firefox
I  220      0      0   0,0us   0,0us  ???   ???     0    F32LE 2 48000 Firefox
S  244      0      0   
***
   
***
 
***
 
***
    0                  Blender
I  205      0      0   0,0us   0,0us  ???   ???     0    F32LE 2 44100 spotify
R  249   2048 192000  10,7ms  35,5us  1,00  0,00  1339    S16LE 1 48000 alsa_input.usb-145f_Trust_GXT_242_Microphone-00.mono-fallback
R  120      0      0  12,2us  13,5us  0,00  0,00    7    F32P 2 192000  + easyeffects_source
R  145      0      0   6,2us   8,2us  0,00  0,00   90                   + ee_sie_output_level
R  230      0      0   5,7us   7,6us  0,00  0,00  118                   + ee_sie_spectrum
R  144    960  48000  18,9us  49,7us  0,00  0,00    0    S16LE 2 48000  + gsr-default_input
R  257      0      0 122,2us    +++   0,01  +++   1101                   + ee_sie_rnnoise
R  106      0      0  44,8us 139,8us  0,00  0,01  236                   + ee_sie_stereo_tools
R   84      0      0   
***
   8,6us 
***
  0,00  235                   + ee_sie_crossfeed
R  158      0      0   5,3us   7,8us  0,00  0,00   30                   + ee_sie_reverb
R  171      0      0   5,2us   8,9us  0,00  0,00    4                   + ee_sie_equalizer
S  172      0      0   
***
   
***
 
***
 
***
    0                  plasmashell
S  119      0      0   
***
   
***
 
***
 
***
    0                  plasmashell
S  233      0      0   
***
   
***
 
***
 
***
    0                  ee_test_signals
S  193      0      0   
***
   
***
 
***
 
***
    0                  plasmashell
I  175      0      0   0,0us   0,0us  ???   ???     0    F32LE 2 48000 plasmashell

I know to little to dig into the scheduler stuff. systemctl status rtkit-daemon prints about pipewire sucess at priority 20.

I am on KDE/linux (bazzite based on fedora atomic44)

--------------
OS: Bazzite x86_64
Host: 82JU (Legion 5 15ACH6H)
Kernel: Linux 7.1.3-ogc3.4.fc44.x86_64
Uptime: 4 hours, 46 mins
Packages: 2 (appimage), 4 (brew), 1 (brew-cask), 173 (flatpak), 3014 (rpm)
Shell: bash 5.3.9
Display (BOE08E8): 1920x1080 in 16", 120 Hz [Built-in]
DE: KDE Plasma 6.7.2
WM: KWin (Wayland)
WM Theme: leaf-dark-color
Theme: Fusion (LeafDark) [Qt], Vapor [GTK2/3]
Icons: breeze-dark [Qt], breeze-dark [GTK3/4]
Font: Noto Sans (10pt) [Qt], Noto Sans (10pt) [GTK3/4]
Cursor: Teto (30px)
Terminal: konsole 26.4.3
CPU: AMD Ryzen 5 5600H (12) @ 4.28 GHz
GPU 1: NVIDIA GeForce RTX 3060 Mobile / Max-Q [Discrete]
GPU 2: AMD Radeon Vega Series / Radeon Vega Mobile Series [Integrated]
Memory: 12.05 GiB / 13.49 GiB (89%)
Swap: 16.62 GiB / 35.59 GiB (47%)
Disk (/): 49.00 MiB / 49.00 MiB (100%) - overlay [Read-only]
Disk (/etc): 845.89 GiB / 929.93 GiB (91%) - btrfs
Local IP (tun0): 10.96.0.42/16
Battery (L20M4PC0): 100% [AC Connected]
Locale: pl_PL.UTF-8
6
8

theres no "disable during full screen" option in Night Light itself, brightness and gamma applet was a nice workaround for a while but stopped working last week, it increases gamma levels to 100% but doesn't disable the night light anymore; the gnome extension caffeine sounded perfect but after installing I cant open settings/config/manual, there's just a tray icon that doesn't seem to do anything.

any ideas?

7
10

So at the moment I know that an official unixporn server on discord does exist, but first I don't wanna use discord and second, they want me to verify myself via phone number before I'll be able to chat, and that's like a bit of BS. So what I'm actually looking for instead is preferably an xmpp room or an IRC chat Thanks to all of you in advance

8
8

9
3

I have a CachyOS computer at home and I really enjoy it, but I'm worried by the trend of Ubuntu and Fedora adding AI recently. I've seen the admins on the Forum admit that they DO NOT oppose AI. I'm a bit worried about the future and I think I would like to learn about options for switching to Arch.

If it's more trouble than it's worth then I acknowledge it would be preeeetttyyy eaaasy to just install Arch on a cleared off drive and move all my work over, I basically did exactly that when I left Windows, but the downside is I'm not sure how hard it will be to recreate my workflow without some of the CachyOS packages.

10
55

I'm intent on getting rid of Ubuntu since their embrace of AI, and would prefer to avoid any other distro based on Ubuntu, since that's just kicking the can down the road.

But a thorough search of the web for various versions of "Linux with no AI" only returns results that recommend AI infused distros and articles touting how great AI will be for Linux, or how to fix Linux using AI. 🤮

Can anyone recommend a distro that has proudly announced their refusal to ever consider adding #AIslop to their distro?

11
9
12
11
13
8

Hi,

I bought a Lenovo M910q (i5-6500T, 16Gib RAM, Intel Mesa graphics) to play with Proxmox, but I'm dying on the first level!

After installing Proxmox from Ventoy using either the default settings or the ones from someone's guide , I get kernel panics on the first boot. As a test, I've just installed Debian on it from Ventoy with the default settings, and it seems to work fine.

I ran the Processor, Memory, and SSD checks from the Intel BIOS without any flags.

Any guesses what I've done wrong here?

14
16
submitted 1 month ago* (last edited 1 month ago) by KokusnussRitter@discuss.tchncs.de to c/linux4noobs@programming.dev

Linux Mint Cinnamon 22.1// Logitech G433 with on-wire microphone

Yesterday my headset-mic just felt like not picking up sound properly anymore. I do not recall doing anything that could cause this, like updates etc. I can scream directly into my micorphone and nothing. Yet, when I tap on it it suddenly records sound perfectly?

I tried

  • rebooting
  • installing system updates
  • reinstalling pipewire packages
  • replugging my headset
  • checking and increasing sound levels of the mic using wpctl wpctl get-volume 50 Volume: 10.00 wpctl set-volume 50 100 wpctl set-volume 50 10000

I am at my wits end here. Do you have any ideas how to solve this?

15
8
automatic bind mount/unmount (discuss.tchncs.de)
submitted 1 month ago* (last edited 1 month ago) by linuxPIPEpower@discuss.tchncs.de to c/linux4noobs@programming.dev

I have bind mounts configured in my /etc/fstab. The source (i.e. where the files physically exist) is on a removable USB drive.

Right now it works but I have to mount/unmount everything individually when I plug/unplug the drive. I would like to be able to have the bind mounts follow the state of of the USB drive automatically.

Is there a way?

Edit here is relevant section of fstab:

/dev/mapper/external-crypt	/mount/external		auto	nosuid,nodev,nofail,x-systemd.device-timeout=5	0 0
/mount/external/realfolder	/home/user/folder	none	bind,nofail	0 0

So when I run sudo mount "/mount/external" I want sudo mount /home/user/folder to be implied; likewise for umount.

16
13

I've spent hours on MX fluxbox, but wasn't able to make the brightness and the time adjustments permanent.

I boot it from my live USB stick by the way.

17
7
submitted 1 month ago* (last edited 1 month ago) by supersquirrel@sopuli.xyz to c/linux4noobs@programming.dev

What do you think of this framing of linux distributions? Accurate? Horrible?

cross-posted from: https://mander.xyz/post/53932495

18
4
submitted 2 months ago* (last edited 2 months ago) by TheViking@nord.pub to c/linux4noobs@programming.dev

I simply opened the power shell on my windows computer and gave the command wsl --install.

19
5
20
1
What is it saying ? (thelemmy.club)

When l typed in a command for kolourpaint, this came up.

21
14

I'm totally new on GitHub, and don't know how to make good use of it. How do l make use of this link https://docs.github.com/en/authentication/connecting-to-github-with-ssh/testing-your-ssh-connection?platform=windows ??

My purpose is to try out my SSH key.

22
29

I am working on windows 10 currently. I was wondering if MX Linux could be installed directly from online. Thanks for taking the time to reply.

23
18

Perhaps I missed the setting, but I want blank username/password fields instead of selecting from available users if that makes any sense. On KDE Plasma if that matters.

Thank you!

24
22
submitted 2 months ago* (last edited 2 months ago) by schipelblorp@sh.itjust.works to c/linux4noobs@programming.dev

Hi, y'all. Running Linux Mint and I have the puzzle presented above.

From what I gather, I'm using rename (1p) which makes mention of Perl and in the man page it says it will also run as file-rename. I'm not sure if this is the right rename utility for the common argument

s/old_pattern/new_pattern/

but any time I try to run anything (including -n), I just get an angle bracket > and have to ctrl-c out.

I'd also need some details on how the wildcards work, which seems to be lacking in the documentation.

Edit: Instructions unclear. I have a bunch of episodes that are very wordy. I'm moving them onto DVD and truncated on my player the directory will look like:

Star Trek The Next Gene....
Star Trek The Next Gene....
Star Trek The Next Gene....
Star Trek The Next Gene....
Star Trek The Next Gene....

so I want to take (sample episode)

Star Trek The Next Generation Season 1 Episode 1 - Encounter at Far Point

and

  • Replace 'Star Trek The Next Generation Season ' with 'S0'

  • Replace 'Episode ' with 'E0' or 'E' depending on digits

  • Keep episode title as is.

So it looks like

S01E01 - Encounter at Farpoint.mkv

25
27

Imagine a young explorer who's just heard that word, "git". But it actually means an entire world. How is this young explorer supposed to dive into this mysterious world with just a machine in hand ?

He's got vs code though !! And he's also got fish and zsh on WSL !

view more: next ›

linux4noobs

4360 readers
1 users here now

linux4noobs


Noob Friendly, Expert Enabling

Whether you're a seasoned pro or the noobiest of noobs, you've found the right place for Linux support and information. With a dedication to supporting free and open source software, this community aims to ensure Linux fits your needs and works for you. From troubleshooting to tutorials, practical tips, news and more, all aspects of Linux are warmly welcomed. Join a community of like-minded enthusiasts and professionals driving Linux's ongoing evolution.


Seeking Support?

Community Rules

founded 3 years ago
MODERATORS