I agree Same here
1 Like
I still use it for one package (mailspring). Same maintainer.
2 Likes
You will probably get away with that,because you know the package and can keep an eye on it.
There may be an alternative like getting it from the original developer, or getting source code from github and compiling it yourself.
2 Likes
I went ahead and got a flatpak version going.
Good move. That is safer. Flatpak is a reasonably trustworthy source.
2 Likes
I love the concept of AUR. Itās very similar to Slackbuilds. Itās a shame when people do something malicious instead of trying to contribute to a community. Unfortunately, it makes the community feel unsafe. It can prevent people from working and building together. Iāve read suggestions that there are those who consider some kind of trust system or trust ratings would improve situations like these. Canāt say Iāve been impressed with any trust implementations Iāve seen to date. Free Software is open for a reason. We can read the code and the scripts we run. I think the safest solution is to look through the code before running something on your system. Itās one of the reasons I prefer simple, low dependency software that does one thing well. Large pieces of software with hundreds of dependencies are not a highly achievable target for auditing purposes especially if you want to know exactly whatās running on your system. However, if a program or script is small, clean and low dependency without requiring a bunch of languages or unreadable binary files, it is easier for one person to audit and understand. I think we need to do that for ourselves not just rely on some anonymous upstream source to tell us what we install is safe to run.
3 Likes
That is fine for users who have sufficient knowledge to read scripts or code, and is also a good argument for writing clean code.
but
what are less knowledgable users to do?.. Their only safe option is avoidance.
Personally, I really enjoy looking at well written code or scripts. Apart from safety checking, you learn from the work of others.
but
I have no idea if it would be possible to put together a system entirely from such code. Maybe CLI only ā¦ DEās are riddled with dependencies and often use C++ which I regard as unreadable.
2 Likes
2 posts were merged into an existing topic: Building a system from simple components
2 posts were split to a new topic: Building a system from simple components
I dont get itā¦ the last 2 replies were moved to a new topic, but copies are still here? Two other replies involving Howard were also moved
Please, reply to those 2 in the new topic
1 Like
At present, there is nothing I want/need on Garuda Mokka Linux that I canāt get from the standard Garuda repositories which includes Chaotic AUR. Packages in the Chaotic AUR are ones from the Arch AUR and vetted the same as any other Garuda repository. This may be one reason for my initial statement (above). When I first began to use Garuda Linux, I was a OneDrive user, so I searched the Internet for a OneDrive client for GNU/Linux and found one on GitHub, and learned that itās available from the Arch AUR when viewing the Install Guide so I used the installation command provided in that guide.
I no longer use One Drive due to Microsoftās incessant nagging that I do so as well as the fact that they limit free data storage to 5GB. Currently, i use mega.nz due to their zero knowledge end-to-end encryption, 20 GB storage with their free plan, and the fact that Iām never pestered to try/use any newly available feature.
My recommendation is the same as it has always been, since the packages in the AUR are community submitted without any vetting, avoid using them if at all possible, and if you find that you canāt find a app either in your distributionās official repositories or on flatpack, then proceed with the up most caution or find an alternative.
Ernie
3 Likes
Agree with Ernieāmega.nz is a very acceptable remote storage location, for the reasons he stated. I have no opinion on the AUR since I wouldnāt use it, nor would I use Arch.
3 Likes
May I ask why? Iām very happy with Garuda Mokka Linux, and itās an Arch derivative.
Ernie
2 Likes
Iām most familiar with bash and apt packaging systems. Some of the Arch users seem to sneer at non-Arch users, and I like to sneer back at them.
2 Likes
Well, unfortunately, such behavior from a very few ruins the reputations of the many because Iāve found only friendship and willingness to help from the Garuda community. I suppose thatās how the Apple community got itās uppity reputation back in the early Mac days, and even though Iām not detecting that attitude from that community today, Iām still averse to purchasing Apple products because of that communities apparent early attitude/my impression from them.
I hope you donāt see me as holding that attitude,
Ernie
2 Likes
Or me for that matter 
No , you two are very fair minded.
Choosing a particular Linux distro does not make someone superior to other users, even if a few Arch users think it does.
There are other distros more difficult than Arch ā¦ Slackware, Gentoo, some BSDāsā¦ but their users do not think they are above others.
2 Likes
And if you ask me, thatās the way the overarching GNU/Linux community functions best as a whole. For one, I have little patience for self-involved people who seem to believe that their way is the only right/best way. In my experience, such attitudes result from insecurity and act as facades to cover up those insecurities. Sad, actually ā¦
Ernie
3 Likes
I donāt use either Arch or AUR - or Ubuntu PPAā¦
Iāve been stung in the arse before when resorting to using a PPA (maybe 10 years ago?)
Theyāre shit and not curated by Canonicalā¦ Donāt use them! such an obvious attack vector too!
4 Likes
Iām with you, Ernie. Snobbery of any kind has no place in the land of FOSS. If any attitude is welcome, itās probably the sympathy we have for Windows/Apple devotees.
3 Likes