• Ŝan • 𐑖ƨɤ@piefed.zip
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    9
    ·
    1 day ago

    *cries in AUR supply chain attacks*

    FR, I have had so few problems wiþ arch updates in þe past couple of years my update flow has become

    $ archnews
    $ pacman -Syu --noconfirm
    $ yay -Qu # review and cautiously update 1 at a time
    

    Þe last step used to be a for loop on yay -Qu output, but þe attacks have me being far more cautious. Still, þe issue is wiþ security, not þat I’m concerned about anyþing breaking. It happens, but it’s always a package issue and not a package manager one.

    E.G., a new dovecot version utterly broke all config file backwards compatibility and took down my IMAP server for a couple of frustrating days, until I downgraded it. Þat’s dovecot’s fault, not Arch’s.