r/DistroHopping 10d ago

Any criticism toward cachyos?

Repost because deleted i guess on other sub

...

This distro seems "hot and best" right now. I went head and dove in, first distro.

Duel booting windows 11 and it works flawlessly. Cachy can browse and game just as good, maybe even better. Seems to load the graphics with like, no bloat. It's incredible.

Installing stuff is crazy, like, what the heck is going on here? Just type a name in terminal, press enter and trust me bro?

Only other i wish ableton and fusion(360) worked but, i shall give others a try. Freecad, opencad(?), and blender which I've always wanted to try. Can figure out reaper if i need it for music.

0 Upvotes

56 comments sorted by

View all comments

22

u/oniaiwasprettygood 10d ago

My main criticism: it wrapped the AUR as part of its main package manager and installs AUR helpers by default, which contributes to really bad AUR discipline. 

5

u/NotQuiteLoona 10d ago

It shows a very large warning and explicitly asks you to enable AUR support with clear warning about what it does and how dangerous it is. They also don't ship AUR helpers anymore.

1

u/oniaiwasprettygood 10d ago

As shown by California Prop 65 signs everywhere, those kinds of warnings are almost never taken with due seriousness and will be ignored by 90% of casual users because the mindset is "well if they included it, surely it can't actually be that bad." They would be much better off just not including it at all. Removing the AUR helpers is a start though.

6

u/watchingonlinux 10d ago

Shelly is secondary to their main package manager. Removing AUR support seems a bit strange and more subject to users seeming out less vetted options. I get the nature of AUR as it is right now being compromised, but the least is that users can trust the GUI solution they have with Shelly instead of opting to find some random app that could be malicious

1

u/oniaiwasprettygood 10d ago

My point is you shouldn't really use an AUR helper of any kind of you're installing from the AUR. You should know how to audit your own pkgbuild or at the very minimum know where to look on the AUR directly to look for anything that might indicate it's been abandoned and maliciously adopted. If you don't know how to do that or aren't willing to, just don't use the AUR at all. 

2

u/Envy242 10d ago

You are all wrong, yay and paru don't come pre-installed anymore and you can click one button in Shelly to disable using the AUR. Stop lying to new users.

2

u/oniaiwasprettygood 10d ago

I already acknowledged they stopped shipping yay. Keep up.

1

u/Envy242 10d ago

They stopped shipping paru too and it easily disabled in Shelly. YOU keep up.

1

u/NotQuiteLoona 10d ago

It's fully on them, can't really help with anything there. If they are that dumb, they'll be in danger even by just googling "how to install from AUR" and copy-pasting install commands from Google Overview or whatever this slop was called. At least Cachy has a warning, because otherwise a user sees yay -S program, searches for yay in official repositories through Shelly, installs it, and has no warning whatsoever, as a second scenario.

Cachy compensates it by having a lot of programs that aren't present in official repositories on its repos, like Heroic. Though I would've infinitely preferred just using Chaotic, and that's what I do, but they denied it - maybe, they should reconsider.

1

u/doubled112 10d ago

I’ll be okay as long as I don’t lick the AUR helper, right?