Skip to main content ↑ ↓
Topic: Chaotic-AUR automated building repo for AUR packages (Read 1851 times) previous topic - next topic
0 Members and 1 Guest are viewing this topic.

Chaotic-AUR automated building repo for AUR packages

i started using Chaotic-AUR on one of my machines, because it is convenient.
It provides a lot of prebuilt packages.

Do someone  know if this repo is safe?
Or how to find out?

Chaotic-AUR automated building repo for AUR packages
https://aur.chaotic.cx/

Re: Chaotic-AUR automated building repo for AUR packages

Reply #1 –
Generally speaking, if you worry about safety it is better to build programs from source. Even then, you can't be sure if it is safe if you don't spend the time to check the source code or don't trust the distributor.

With AUR in general, "anything goes". That's why it is not officially supported. There are rally nasty packages in AUR, made as a "proof of concept", which can gain root access if the user just skips inspecting the PKGBUILD by just mechanically pressing Enter.

Re: Chaotic-AUR automated building repo for AUR packages

Reply #2 –
What @strajder said. I could use chaotic-aur or archlinuxcn unofficial repos for my grandmother's Artix, but not for the PC I store my gpg and ssh keys on.

Re: Chaotic-AUR automated building repo for AUR packages

Reply #3 –
Huh... you are not very nice to your grandma @nous‍  and you understimate grandmas I think :D ;)
 

Re: Chaotic-AUR automated building repo for AUR packages

Reply #5 –
It should be proper retro green.

Re: Chaotic-AUR automated building repo for AUR packages

Reply #6 –
Quote from: nous – on
What @strajder said. I could use chaotic-aur or archlinuxcn unofficial repos for my grandmother's Artix, but not for the PC I store my gpg and ssh keys on.

Okay, I can see that...
asking the question is answering it already  :D

Re: Chaotic-AUR automated building repo for AUR packages

Reply #7 –
This reminds me one thing:

Is there a similar tool like debsums in Arch?
it checks the MD5 sums of installed Debian packages, tells you altered or missing files from the original packages.

Re: Chaotic-AUR automated building repo for AUR packages

Reply #8 –
Answering to myself:
Code: [Select]
$ sudo pacman -Qk |grep -v "0 missing files"
warning: artix-branding-base: /etc/local.d/0PS1.start (No such file or directory)
warning: artix-branding-base: /etc/local.d/mkinitcpio.start (No such file or directory)
artix-branding-base: 18 total files, 2 missing files
warning: kgpg: /etc/xdg/autostart/org.kde.kgpg.desktop (No such file or directory)
kgpg: 381 total files, 1 missing file
warning: wps-office: /usr/lib/office6/wpscloudsvr (No such file or directory)
wps-office: 3900 total files, 1 missing file


What are the warnings in "warning: artix-branding-base"??

wpscloudsvr is a local server launched by WPS office suite. I deleted it
Btw now I switched to Onlyoffice which is good enough for my usage.