You are not logged in.
Pages: 1
Hi, I'm a CS student, and I finally got rid of Windows 5 days ago. For years I stayed on Windows just because I thought gaming on a linux distro wasn't a thing, but I was just totally wrong. Steam + Proton = no monopoly anymore for Windows.
My only experiences before I installed Arch were on VMs using Kali and Ubuntu, so I'm really a big noob.
I chose Arch because I wanted a rolling distro, and also because I heard that's the hardest one. I need to learn fast, so it's perfect for me.
What are your advices to maximize stability ? Check every week for updates ? Avoid AUR packages when possible ?
How can I check if an AUR package is safe to use ? I saw last month that malwares were hidden in some AUR packages – for example I'm using Zen browser, how can I be sure that the AUR is safe ?
Offline
AUR
Look at the source code and build scripts.
https://aur.archlinux.org/packages/zen-browser
https://github.com/zen-browser
Look at the PKGBUILD.
https://aur.archlinux.org/cgit/aur.git/ … en-browser
You can always get the source tree, decompress it into an empty directory, look it over, then make a local PKGBUILD for the local tree. Use makepkg to make a package. Install it with pacman.
I would not install a binary from the AUR if you paid me.
Offline
Ok
Thx for your reply
Offline
use pacman and avoid helpers like yay
read the arch wiki and man pages instead of watching idiots on youtube
always triple check scripts/commands before running them
try to use simple lightweight software if you can and avoid big dependency heavy ones to minimize breakage
always backup important data to 3 places (not really arch specific but so many people dont do this)
Offline
Thanks for your answer... Finally I reinstalled Arch just to be sure to have a clean start. And I only had 5 days of work to backup and 5-10 passwords to change.
I think the AUR packages I installed were clean tho :
yay
proton-ge-custom-bin
zen-browser-bin
vscodium-bin
nordvpn-bin
Offline
The problem with yay is that it does a very good job of obfuscating the fact that AUR packages are AUR packages. It makes them appear to be just like something in the official repos.
I recommend not using yay. I use auracle to help manage my foreign packages, but I always read the PKGBUILDs before I use them, and always build them using makepkg (or https://wiki.archlinux.org/title/Develo … n_chroot#)
Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
The shortest way to ruin a country is to give power to demagogues.— Dionysius of Halicarnassus
---
How to Ask Questions the Smart Way
Offline
personal i don't see any "wrong" with using any aur helper - when you suffer through Linux From Scratch you'll learn to appreciate a powerful package manager
to me thier best pro is the ability to resolve recursive aur dependencies:
aur package A needs aur package B which needs aur package C
without deep knowledge of the aur and a helper you end up where i gave up on LFS: you have to figure out and keep track of all those dependencies yourself - and unless you want to torture yourself that's something noone should be forced to endure
Last edited by cryptearth (2026-07-03 15:38:05)
Offline
auracle helps with that. But, you are right, it does not solve it completely.
But remember, Pacman is the package manager -- Yay is naught but a front end.
And everyone you try LFS at least once -- and really attempt to understand what the commands do
Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
The shortest way to ruin a country is to give power to demagogues.— Dionysius of Halicarnassus
---
How to Ask Questions the Smart Way
Offline
https://github.com/aurutils/aurutils/bl … -depends.1
AUR helpers are, as any tool, great as long as they serve you to fulfill the task and you're in control of what they're doing.
You'd also not hand a chainsaw to a child, right?
Would *you* use one w/o understanding how it works and what it does?
(First time you had the chain failing on you will btw. be the beginning of you inspecting it every single fucking time before you use it - and I don't mean the tension, you're doing that anyway, right?)
Offline
Pages: 1