AresydatchJun 15
Arch Linux 

AUR registration disabled

https://lists.archlinux.org/archives/list/[email protected]/thread/4JRS73YVTE7JUYHHE3ZDUIHXYHXZ3YQQ/

#ArchLinux #Linux #AUR

AUR registration disabled - Aur-general - lists.archlinux.org

Jun 15 at 8:21amWeb
Show threadDaniel MeyerJun 15
@archlinux well, that sounds good.
Show threadTECC   🇵🇹🐐Jun 15
@archlinux Thanks! I hope some of the very best tools find a way in the arch repository, because I lost trust in AUR...
Show threadmocchatek  ​Jun 15
@73CC @archlinux
You weren't supposed to fully trust the AUR from the beginning anyways. Anyone can submit and maintain packages
Show threadZło To 🏴‍☠️Jun 15

@mocchatek @73CC @archlinux

realistically the problem is only with abandoned packages. compare it with with debian where they're semi-automatically scheduled for removal

Show threadTECC   🇵🇹🐐Jun 15
@mattesilver @mocchatek @archlinux I understand, but the trust is gone 🤔 luckely, none of my AUR programms were infected.
Show threadZło To 🏴‍☠️Jun 15

@73CC

so what do you do instead? "curl | bash"?

Show threadTECC   🇵🇹🐐Jun 15

@mattesilver Nope, never. Though I was not affected by the AUR hack, I have lost trust in it. I had nothing critical from the AUR that I urgently needed, so I removed all AUR packages. Currently, I only use what is available in the official Arch repositories.

If I ever need something from the AUR, I will download the PKGBUILD manually, review it, makepkg --verifysource, and build it with makepkg.

Show threadRobin CandauJun 15

@73CC
@mattesilver

> I have lost trust in it [...]

The AUR shouldn't be (blindly) trusted anyway, so good :)

> If I ever need something from the AUR [...]

You're basically describing the normal / expected and officially documented way to install packages from the AUR (https://wiki.archlinux.org/title/Arch_User_Repository#Installing_and_upgrading_packages). AUR helpers (or any other way to interact with the AUR) always have been discouraged and unsupported.

Arch User Repository - ArchWiki

Show threadxyhhx Jun 15
@Antiz @73CC @mattesilver there is room for healthy aur helpers, but they pretty much help by making users do their due diligence easier. in any case, yes, verify that shit
Show threadxyhhx Jun 15
@73CC @mattesilver @mocchatek @archlinux you were never supposed to "trust" the aur, that's the point
Show threadxyhhx Jun 15
@mattesilver @mocchatek @73CC @archlinux no realistically that is not the only problem lol
Show threadPetar Benke 🐧Jun 15
@archlinux Thank you for all your hard work
Show threadSupernovJun 15
@archlinux thanks for all the work!