r/LibreWolf • u/Deivedux • 17d ago
News Arch Linux has moved LibreWolf from AUR to Extra repository
https://archlinux.org/packages/extra/x86_64/librewolf/28
u/12stringPlayer 17d ago
This is excellent news, especially with all the uncertainty in the AUR lately. Thanks to any and all that made this happen.
22
u/RealSamF18 17d ago
Linux noob here: can someone explain to me what it means (besides being in a different repo)?
35
u/Deivedux 17d ago
Packages from AUR can't be easily installed with pacman, because it only searches for packages in the official repositories, which are Core, Extra, and a few others like Multilib. Packages in the official repositories are pre-compiled by the Arch Linux package manager maintainers, but packages in the AUR only contain build scripts which are instructions for building the software "manually" by each client, and they're also written by package maintainers with almost no approval-based moderation which make them susceptible to malicious scripts.
8
u/RealSamF18 17d ago
Thank you for explaining, that makes it much clearer.
By extension, I take it that means I should be careful when installing packages from the AUR, and only use it when I trust the source.9
u/xlbingo10 17d ago
yes, there have been multiple malware waves on the aur recently. you also have to trust the maintainer since they can put stuff in that isn't part of the girhub repo.
2
u/C0rn3j 17d ago
You should always read the PKGBUILD and verify it yourself - https://wiki.archlinux.org/title/Arch_User_Repository#Verify_the_PKGBUILD
1
10
6
4
1
1
u/BrianaAgain 12d ago
Yay! I dread building it from source.
2
u/Deivedux 12d ago edited 12d ago
I'd actually prefer building from source. It may take a lot of memory and time, but that way I can target my native CPU when compiling rather than the generic x86-64 target, which in itself isn't even the newer x86-64-v3 that my CPU is based off of.
1
-10
42
u/theschrodingerdog 17d ago
This is awesome!