Don't make this mistake when downloading from the AUR... (Arch User Repository)

Do you use the AUR? If you use Arch Linux, of course you do. But if you've been downloading and installing packages indiscriminately from the Arch User Repository, it might be time to actually take a look at what you're downloading and running. Didn't anyone ever tell you not to run random scripts from strangers online?
🌐 My website: ericmurphy.xyz
💸 Support the Channel: ericmurphy.xyz/donate
🎥 Watch my videos on Odysee: odysee.com/@ericnmurphy
💻 My GitHub: github.com/ericmurphyxyz
0:00 The problem with downloading from the AUR
2:07 Uhh, what's a PKGBUILD?
4:12 Reading the PKGBUILD with an AUR helper
6:01 How safe is the AUR, really?
7:07 Reading through diffs on updates
8:03 What to look out for in PKGBUILDs
9:44 Best practices with the AUR
10:22 My recommendations
10:48 Doesn't everyone already know this?
11:33 Conclusion

[@masterofegg8950]

Love how that Reddit post basically amounts to the classic “can’t exit vim” meme lol

[@EricMurphyxyz]

It was actually can't exit less, but close enough haha

[@l30n.marin3r0]

I just turn the laptop off and turn it on again, that's how I exit vim, love it!

[@andbenn]

This is very very very wise advice. AUR is often over-hyped as a benefit of the distro and Arch-based distros, yet is a decent risk. Be careful!

[@LordTrashcanRulez]

The benefits greatly outweigh the very rare malicious program. That's like saying pirating is overhyped because you can get a virus

[@anonymouscommentator]

​@@LordTrashcanRulezpirating is overhyped and it can get you a virus yes

[@jesse7631]

Excellent and informative video about the AUR. Thank you Eric!

[@Skelterbane69]

I see the AUR as a last resort.
If it ain't in some regular repo, or as a flatpak, I only get it from the AUR if I NEED the program.

[@chrismcpherson7582]

Why is that?

[@Skelterbane69]

@@chrismcpherson7582 Idk, I feel they're just way less stable and a hassle to deal with

[@9Lights]

Thanks a lot! I learnt how AUR's work. Keep doing useful videos. Good luck

[@EricMurphyxyz]

Thanks, glad you found it useful!

[@HoboHero]

Two different Erics in one video 😄
Great vid as always, thanks!

[@EricMurphyxyz]

Haha, had to rerecord a part of the video during editing

[@dpi3]

this was very helpful!

[@r0yce]

That last guy thought showing pkgbuild was a bug lmao. Bro would get destroyed on the arch forum. That was sooo funny and cringe at the same time.

[@plazmax]

superb 👌

[@jesse7631]

Eric, whenever I've used Arch, I installed Paru as my AUR helper and ViFM as the file manager it would use to show the files in the package. Is that what you're using here?

[@EricMurphyxyz]

Close, except I'm using lf as my file manager. That's a good setup.

[@tims1979]

I've found that I prefer to just manage AUR packages manually. I can see on the AUR page what kind of rating a package has.

[@l30n.marin3r0]

How do you go about that? This is my first day on Arch.
There isn't really a straight answer about how to go about not using an AUR helper. The reason I finally decided to get into Arch is because I'm sick of my computer having shit I never use or never care about (I don't understand why distros make such a big fuss about: Look! Our ICONS ARE VERY PRETTY!) and I got sway while using Lubuntu and ran Inkscape only to find out that it looks fantastic in wayland, actual straight lines, no graphic glitches while moving objects around but couldn't use gimp because reasons, couldn't use the dmenu because of those very same reasons, got fed up, installed arch and even got Ardour8, Lubuntu only has Ardour6, OBS Studio looks great too.
Anyway, If you could reply about not using a aur helper, it would be great, thanks!

[@bocimino463]

Nobody is talking about the water dumped on this chad at 2:52.

[@lucasliberato9]

what window manager is that?

[@EricMurphyxyz]

bspwm

[@lucasliberato9]

@@EricMurphyxyz tyvm!

[@n0tjak]

this is why i use paru and not yay - it can install packages from the repos if it finds them

[@user-zn3zx6fk7u]

yes

[@guilty_mulburry5903]

reminds me of when I asked people for a pirated game on Newgrounds forums when I was like 12 lmao
"why doesn't this work all it does is open CMD!"

[@EricMurphyxyz]

Oh no 💀

[@omerfarooqsyed7693]

talk about removing home file, I recently did rm -rf /* instead of rm -rf ./* and oh boy, did I screw myself sideways then.

[@user-zn3zx6fk7u]

"I prefer to use a terminal" be like:

[@EricMurphyxyz]

rm -rf commands are scary, I always have to triple check to make sure I'm not deleting all my files

[@Rood67]

Great information. Completely useless for a noob trying to jump from Windows after all the changes micro$oft is throwing out. They watch a video and hear some distro is good, and they install and try running the cool stuff they see in other videos.
For me, I need Pulse Secure VPN for work, that isn’t in pacman. Fortunately, I know enough to look at the pkgbuild, but I don’t know chmod codes for the -Dm755 or 644 etc…. Some of the other script command that are #bash?? I don’t know well either.
So saying to look at it is great, nut useless as the example at the end demonstrates.

[@gogereaver349]

these days mostly flarpaks.

[@danduby8416]

When I had Arch, I never bothered with the AUR, just like I never bothered with the forums. If not in Pacman, who needs it.

[@rafaburdzy449]

1;47 that is just crazy ``rm -rf /^ should be obvious that rm is remove that is just unbelievable that steam would to such a mistake. Your video is very important for spreading awareness thanks DO USE THIS COMMEND `` rm-rf /^