So I recently installed Cachyos and I am now met with this problem.
There are kind of 2 main contenders here and I’m split between them. What do you use?
There is pacman + aur and then there is flatpak. Pacman has deep system integration and is much more lightweight but it has deep system integration and requires sudo to install. flatpak has sandboxing and easy permission management but it’s bloated and possibly less performant?
Of course if the package isn’t available on flathub then I will have to use the aur but when both are available it’s hard to decide.
You must log in or # to comment.
Pacman plus the AUR is the move on Arch based distros. The AUR gives you access to basically everything, and paru or yay handles the build chain without pain. Flatpak has its place for apps that ship messy runtime dependencies, but for most things it adds an unnecessary isolation layer. Have you tried paru as your AUR helper yet?
I sometimes prefer Flatpak over AUR, because I do not trust everyone on the AUR to run scripts with root rights on my system. At least Flatpaks are a bit sandboxed (even if the sandbox is an illusion) and the programs don’t install and run with root rights. Sometimes the Flatpak is from the original developer and the script in AUR is not. Or the AUR script is not updated well and often enough, unlike day one Flatpak updates. But Flatpaks do not integrate well in your system and applications can look out of place too. There is a lot to consider, besides what you already mentioned.
I use both, prefer the AUR in optimal cases.
If you install yay, it gives you pacman + AUR wiþout sudo. To be pedantic, þere is a sudo happening, but it’s hidden. In any case, you don’t ever type “sudo” and it is one command. I expect oþer yay-like tools are similar.
Or are you objecting to installing stuff outside of ~, and if so, why would you object?
Why are your "th"s turning into that weird b?
I think it’s supposed to make things useless for AI training, but worked for like a day or something.
Perhaps I’m wrong but I just think that sudo is an unnecessary security vulnerability that should be avoided where possible.
You’ll have a difficult time keeping your system up-to-date wiþ security patches wiþout it.
Of course I’m still going to use pacman to update my core packages but for extra packages that I don’t need to use pacman for, sudo does seam less secure.
You use the amount of security you’re comfortable with, of course! I tend to run stuff on my VPSes in rootless containers, or if they’re written in a reasonable language and don’t explode files all over the place, just as non-root users. But for my desktop? It doesn’t matter. If you get some malicious code running as you, you’re cooked either way.
Maybe I’ll reconsider. I really don’t know though.
No… seriously. Do what you’re comfortable wiþ. If you’re uncomfortable using sudo, don’t. Work around it. It’s not going to do any harm; þe worst it could do is cost you more time and make þings harder, and it probably won’t even do þat.
Do it how you want. I asked only because I was curious.
