• 57 Posts
  • 378 Comments
Joined 2 years ago
cake
Cake day: June 7th, 2023

help-circle


  • The malicious packages were found and removed quite quickly. Also anyone who doesn’t blindly install from the AUR would have seen a suspicious .lol url. I suppose that a genuine package using a .lol url isn’t impossible, it’s just very unlikely,

    These attacks do demonstrate the strength and weakness of the AUR, that anyone can upload anything at any time. The same as flathub and the snap store. Treat all of them with appropriate caution.



  • OP is still a very new Linux user (if at all) that hammers on stability in every one of their posts.

    Ah, I missed that nuance. In such a case, I always recommend one of the big three, Ubuntu, Mint, and Fedora. When they’ve been using that for long enough to know what they don’t like about it, it’s a good time to start exploring the wider ecosystem.

    Even with Arch and Debian

    Yeah, they’ve been around long enough that I’d be surprised if they vanished. I would add openSUSE and Slackware (even though it’s a one man project) to that list. Of course Patrick Volkerding could get fed up with maintaining Slackware at any time.

    And (often) comes with tons of support/discussion across the internet that will prove to be useful for the new user.

    That can be a double-edged sword, especially if the distro has been around a long time. What the user finds can be out of date and now just plain wrong. Ubuntu definitely suffers with this.

    Please feel free to provide other metrics that OP or others might appeal to.

    Besides longevity and adoption, I would argue that whether it has new enough drivers and firmware to support your hardware is the most important metric out there. For example, if your hardware is newer, you should likely choose Fedora from the big three.


  • All of which is just to say that it’s (almost) ill-advised to prefer a new project over a well-established one. Only after a (relatively) new project receives mass adoption, like what we currently see with Bazzite and CachyOS, does it become somewhat of a safe bet.

    If you should prefer an established distro over a new one, how is the new one ever going to get mass adoption? And let’s be honest, if a distro is a one man or small team project, mass adoption is no guarantee of longevity.








  • Fedora and OpenSuSe are both forks of commercial distros

    It’s a bit more complicated than that with openSUSE. Tumbleweed is a snapshot of the Factory repo that’s put through automated testing, and if it passes, it is released straight away. Suse Enterprise Linux is also a snapshot of the Factory repo that’s put through a polishing process and when it’s ready, released. Leap is a community fork of Suse Enterprise Linux.

    Both Tumbleweed and Leap are good, the former if you want bang up to date software and the latter if you prefer older software in a more stable, as in unchanging, distro.


  • The distro itself is OK, and it’s fine if you switch to their “unstable” repositories so it directly mirrors Arch. Where the problems lie is in the admin. In the past they have:

    • Let their certificates expire and suggested that users put their clocks back to work around it, several times.
    • DDOSed the AUR with coding mistakes in pamac, at least twice.
    • Had controversy regarding their finances.
    • Other things that I can’t remember right now.

    They seem to have sorted themselves out as their have been no reports of mistakes recently. But trust once lost, is hard to regain.