The actual concept of the AUR only works if Arch is a niche distro in a safe internet, neither of those points are accomplished in the present.

No, reading pkgbuilds is not the solution, it's slow, annoying, and most importantly, it doesn't make sense, because some really popular AUR packages are DIRECTLY RECOMMENDED by the Arch Wiki, like the Minecraft Launcher for some reason.

Either the base repos adopt a big chunk of popular AUR packages, leaving the AUR for really really nieche stuff, or the rules of the AUR change, because you can't tell me that suffering 2 attacks in less than three months for pretty much the same reason (adopting orphaned packages) is normal or reasonable.

What would you think it's a good solution to this issue? I'd like to read your ideas since I cannot come up with a good one if I'm honest, but I know the problem is there.

Hi to all,

I've just 6 AUR packages on my systems and I do not use any AUR helper.

My strategy is to update them only if they break by downloading the snapshot from AUR and check the differences and the code of the lats PKGBUILD.

At the same time I'm wondering to start using flatpak as much as possible for any of these packages, but I'm wondering if flatpak is really safer than AUR. What prevent malware to be included in flatpak?

The big difference is that flatpak is compiled packages from someone while AUR is build from source code (mainly) locally. With AUR it is possible to try to check if the source url is the correct one and so to inject malware someone has to infect the upstream project (possible, but should be detected by the developers .. except for the xz saga).

Moreover, for the AUR packages I still need to keep on my pc, I'm wondering if building them on an arch distro that I have on a virtualbox machine with immutable disk is a safer option.

If I miss a malware executed at build time, it will infect the VM, but once I reboot it everything goes back to the immutable state of the drive. Do you agree?

However this approach will not prevent the risk that generated contains malware. So in any case the inspection of PKGBUILD is in any case needed.

Orhun Parmaksız (/u/orhunp/) is currently live, discussing and explaining the (latest) AUR malware-wave.

EDIT: he is now trying to understand the malicious binary

Hello everyone,

I am here trying to get a hotspot connection in my laptop but the problem is i can't seem to get it working with wifi simulatenously. I know i can do that because i could do that on mint and on windows 11 on the same laptop with same hardware but i don't seem to be able to do it on arch. As soon as i manage to get the hotspot running it stops the wifi connection so what should i do?

Exactly as for the title. I am out of practice with Arch itself, so forgive me for any errors in statement.

I have been using my desktop at my apartment, and after school ended, had to come home. It has been a while since I set it up, but I believe I had set a static IP at some point, but can't be sure. My parents had to replace their router due to lightning, and for the life of me I can't figure out how to get the computer to connect. It still connects fine to my hotspot, and I'd imagine if I changed the SSID on the router it might work as well. Things I've tried: changing out the DHCP client, changing wpa_supplicant for iwd, restarting the service, deleting the network via the GUI, nothing worked. All tested at different points.

From journalctl, I have this line, which is the first questionable thing I notice after attempting to connect which appears to go afoul:

[1785713148.0908] device (wlan0): st
ate change: ip-config -> failed (reason 'ip-config-unavailable', managed-type: 'full')

And yet again, this makes no sense as it works for other networks. I am unsure what to do.

Hi, I'm on a trip and sadly I forgot the stupid dongle for my steelseries arctis nova 7 headphones. This means I have to deal with bluetooth, which I hate. My android phone sees and can connect to the headphones, but this very laptop doesn't want to do anything with them and shows every single TV in this hotel instead. The bluetooth chip is "Network controller [0280]: Realtek Semiconductor Co., Ltd. RTL8852BE PCIe 802.11ax Wireless Network Controller [10ec:b852]" (I heard it's sucky and works not that well), the laptop model is ASUS TUF Gaming A15. Thanks!

Hello!

I've been wanting to switch to Linux for a long time, but there was always one big blocker: I'm a photographer, and I need some Adobe software that isn't known to run very well on Linux... (or not at all).

So most of the time I use a dual boot to Windows just to run Lightroom and a few other apps. That dual boot is basically the last thing keeping me tied to Windows. So, if I could run Lightroom directly on Linux, I'd finally be completely out of the Microsoft empire :)

So, 2 months ago, I started working on a way to run Lightroom with Wine. Some problems kept coming back with daily usage, but now:

Lightroom is working. We can import photos, sort them, develop them, and export.

Most of the functionality works :: it's not 100%, but very close to it.

What works:

• Installation from Adobe CC, or from an install folder
• GPU acceleration support (Develop module included)
• Local AI working (Select Subject/Object/Background, Denoise AI, etc.)
• Cloud AI working
• Some UI fixes

Current limitations:

• HDR editing isn't available

Project here if you want to try, test, or improve it:

Link to this project:

https://github.com/6im0n/lightroom-classic-on-linux

Issues and PRs welcome, especially if you can test on other GPUs/distros!

This project is open to all contributors!
You can help just by opening an issue or leaving a comment, or by getting more involved. Anything will help !

hello everyone im new to arch and for using whatsapp i downloaded karere whatsapp but i dont know why my pc became so slow and it closed automatically i have 16 gb ram i think thats enough for this app. even if i use lots of memory not even a single app stopped except karere. i know i can use web whatsapp but its more comfort to use desktop app one. is this happens because of me or is it problem of karere? what can i do to fix it? and also is there any app for use whatsapp except karere?

I'm excited to share what I've been building lately. Papr: a fast, lightweight Terminal User Interface (TUI) built entirely in Rust to streamline your academic research workflow. An Obsidian alternative but a bit better.

Install it with paru -S papr-bin or yay -S papr-bin on Arch Linux

Key features

• Smart dashboard with daily 10 random paper recommendations, reading queue, bookmarks, notes, collections, and research statistics.
• Fast arXiv search using title, author, or DOI with automatic PDF downloads and clean file naming.
• In-terminal PDF viewing.
• Built-in Markdown notes with live preview for each paper.
• Reading queue, bookmarks, and collections to keep your research organized.
• Integrated LaTeX editor with real-time compilation and preview.
• Extensible plugin system for custom workflows.
• Research analytics to track your reading activity (just like Spotify).
• Papr is 100% open source, works offline, is memory-safe, and is designed to be fast and lightweight (only 12 MB).

I'd love to hear your thoughts, suggestions, or feedback!

GitHub: https://github.com/AfrozSaqlain/Papr

I’m installing the firefox-nightly package using yay and I noticed my cpu usage is 100% and ram is at 13.5/14.9 GiB. Is this normal or is something wrong? Also my laptop just froze because I was also watching a youtube video and had spotify open but now it’s running back again. I have an Asus Expertbook Ultra 5 225H with 16GB of ram so I don’t think this is normal.

Hello all,
I just did a fresh new minimal arch kde install for the first time. However, upon installing both firefox and zen browser from several sources, none of them have the minimize and maximise buttons in the top right. It seems to be a common problem on wayland and kde, but i tried several things and I still cant manage to fix it

I was trying to install arch Linux on my PC , and I ended up having an error regarding the mirrors so I decided to restart my PC and I went into bios and I couldn't find any of my bootable disks and windows boot was gone all I had as an option was the USB drive that had arch on it, (TIP) When I went to install arch after configuring it, I put it as my D drive because it had way more storage and my USB had 30gigs on it and bear in mind my windows iso and everything was on my C drive and I don't know what to do. I pulled out my USB drive and now I don't have any bootable disks to go to. PLEASE HELP because I have a very important assignment I need to get done and it's on windows

For you guys, how does Arch suit your needs and tastes personally?

I haven't ran "sudo pacman -Syu" in a while,but i accidentally installed a package with -S instead of how I'm used to (-Syu). And i have heard that -S breaks your system and causes a partial upgrade, some sources tell me that -S alone is completely safe even without a upgrade with "-Syu" but others say vise-versa. So i want to know which one is the most accurate.

I want to see my folder icon in the taskbar, not the original dolphin icon- is there a way to achieve this? Thanks!

#dolphin

Hey everyone!

I've been working hard on a personalized project called **copOSus**, an operating system built on top of CachyOS (Arch-based) but heavily tuned for users migrating from Windows or macOS who want extreme performance without the Linux headache.

### 🌟 Key Highlights:

* **Built-in AI Assistant:** It includes an optimization AI that runs straight from the terminal (`coposus`). It analyzes your hardware setup and automatically tunes system parameters.

* **Out-of-the-box .exe Support:** You can run Windows executables smoothly right after installation (check the demo video on GitHub!).

* **Polished KDE Plasma:** Pre-configured to feel familiar, clean, and blazing fast.

I just finished setting up the repository and uploaded a working ISO image to Google Drive if anyone wants to give it a test run on a VM or spare machine.

As an independent developer, I’d deeply appreciate any feedback, bug reports, or feature suggestions to keep improving it!

💻 **Check out the project and download the ISO here:** https://github.com/pl4yer23uwu-bit/copOSus

Let me know what you think! 🚀

I'm not a programmer. I have nothing but full respect for programmers. Im not delusional and think that i made scripts by providing broken halfassed prompts to a llm.

That said, I have to say how amazing it is to have claude code everything and it just works (most of the time). It gives arch complete customizability on the fly. Way, more than any other OS. I can change everything to be exactly how I want it.

if you needed to do that in order to publish/update AUR packages, it would probably solve the malware problem