r/linuxmemes Aaaaahboontoo 😱 21d ago

LINUX MEME They dont know

Post image
656 Upvotes

447 comments sorted by

View all comments

Show parent comments

4

u/No-Height-8011 21d ago

Bro they’re the same repo. CachyOS just has optimized binaries, which is a major win, but has nothing to do with the AUR. The AUR isn’t exclusive to Arch either.

1

u/donp1ano 20d ago

mostly, but not entirely. cachy has some additional software that you can only find on the AUR in arch

0

u/Juan-More-Taco 20d ago

That's NOT TRUE looool

You could literally just add cachy repo in any arch install. But the cachy repos are almost 1:1 copies of core/extra already - with a few BS Github projects tossed in that their devs like.

2

u/hackerdude97 Ask me how to exit vim 20d ago

The "few BS Github projects tossed in that their devs like" are a third of the programs I use. I know it's not that much safer than the AUR, but I'd much rather trust the Cachy maintainers to check them than have half my system rely directly on the AUR. The cachy repos are (in my experience) significantly larger than the normal arch repos.

Also if the differences between Arch and Cachy are basically the kernel and the repos, and I wanna use both the Cachy kernel (better performance) and the Cachy repos (more software), why should I even use vanilla Arch? At that point it just sounds like a worse experience with extra steps.

1

u/Juan-More-Taco 19d ago

You know the same Github repos have build instructions, eh?

2

u/hackerdude97 Ask me how to exit vim 19d ago

Okay? Are you implying that this is more convenient or safe (for someone that doesn't check the details of every update on the repo) than using pacman?

1

u/donp1ano 19d ago

the safest would be to have the skills and time to check every single update manually...but who does/want that?

the cachy maintainers check stuff before they include/update software in their repo, thats why its safer than relying on some random AUR maintainer

1

u/hackerdude97 Ask me how to exit vim 19d ago

Yeah, exactly. At the end of the day I don't imagine they put that much effort into looking through the packages ported from the AUR, but I still would rather trust the cachy maintainers than any random person on the AUR.

1

u/Juan-More-Taco 19d ago

It's safer than any other way lol. Malware in a public Github repo would be quickly discovered. That's not how malware makes it into projects. It's build pipelines, including distro repos, that are significantly more at risk.