• ImgurRefugee114@reddthat.comEnglish
        2·
        2 days ago

        Well I use sudo-rs, and my CI does that for me :p

        But tbh it’s rare I run rebuild directly anymore. Most of my machines are set up for automatic rebuilds from my remote. Otherwise I use shell app shortcuts that cache the URI to disk so I only need to pass my flake remote or local folderpath once, then all subsequent cmds use it; nup to update the flake lock, nboot or nswitch, and hswitch for home-manager.

        (most of my machines use HM nixos module but my main uses standalone for easier tweaking; switching between module and sa is a one-line host change in my config)

        I also have ns and nr scripts for aliasing nix shell and run using the flake’s lock. e.g. nr u.yt-dlp runs the yt-dlp program from the unstable nixpkgs my host is pinned to; s. for stable. If I need a specific revision then I fall back to the regular nix command.

        Using shell apps as cross-shell shortcuts/commands has really changed how I use my terminal.

    • katiecakes@lemmy.blahaj.zoneOPEnglish
      41·
      2 days ago

      Sorry! I should have put it in the description, it’s a Linux joke about updating Arch Linux, specifically, and that a lot of (definitely not all) trans women use it.

      But funnily enough, as the comments show, everyone uses even more obscure distributions.

      • 2hundredpancakes@lemmy.blahaj.zoneEnglish
        12·
        2 days ago

        You’re fine, thanks for explaining! Sometimes I feel like I’m the only transfemme who doesn’t know computers… changing OS on my desktop or phone is scary even though it looks more and more like the smart move these days 😅

      • Fiona@lemmy.blahaj.zoneEnglish
        7·
        2 days ago

        Not even distributions necessarily, just different package-managers that also have support for the AUR. (paru is in fact developed by one of the maintainers of pacman itself, which is one of the reasons for why I’m going with it)

        But yeah, Arch requires regular system-updates, that you should kinda do daily, except at some point you get lazy and stop doing them…

          • rapchee@lemmy.worldEnglish
            3·
            2 days ago

            when you update, you also get some news, and sometimes it says critical stuff in there, like new driver version doesn’t support certain devices any more, or configuration needs to be redone or something like this

          • arudesalad@piefed.caEnglish
            3·
            2 days ago

            Yes but because arch ships updates very close to when app devs release updates there are sometimes (very rarely in my experience) breaking changes that the user needs to fix manually (arch devs always tell users how to but it means automating updates can cause problems)

    • Baŝto@discuss.tchncs.deEnglish
      6·
      2 days ago

      -Sy synchronizes the local package database with the online repository

      -Su updates all packages that have updates; downloads and installs the packages

  • atopi@piefed.blahaj.zoneEnglish
    8·
    2 days ago

    When i used cachyos, i forgot to update for over a year (i had been using cachy browser)

    I switched to nixos before coming out to a friend though

  • Rei@lemmy.blahaj.zoneEnglish
    12·
    2 days ago

    I feel so attacked. This is absolutely inaccurate!

    I ran my pacman update this morning like every morning.

  • gusgalarnyk@lemmy.worldEnglish
    9·
    2 days ago

    I got flamed on a discord for showing my runtime as like 9 days or something since my last sudo pacman. What is the conventional wisdom for upgrade scheduling? I typically do like once a week but I don’t mind if it ends up being once a month. Is that bad?

    I was tempted to switch to Nix but the reviews I’ve seen said it’s a lot more work than Arch and there’s less compatibility (although i find arch to not really be time intensive but I do have compatibility issues still here and there).

    • katiecakes@lemmy.blahaj.zoneOPEnglish
      7·
      2 days ago

      Nah people are over zealous these days. I do it on Fridays or when I remember, whatever happens first. And I’ve been running arch or other rolling release distros for well over 15 years.

      These days prompt injection or supply chain attacks are way more likely to pwn you than running 1week old software. (My own thoughts, idk if this is good praxis either.)

      But flaming is bad and you shouldn’t get that response regardless. Sorry ❤️

    • arudesalad@piefed.caEnglish
      2·
      2 days ago

      I’ve had 3 firmware updates in a row, I didn’t have any problems but it must have been a bad week for users with less common hardware…

  • FatherPeanut@pawb.socialEnglish
    6·
    2 days ago

    I’ve been doing my updates routinely, but man, I’ll be damned if I let any of my AUR packages update yet. Ever since the last big ‘hack’ happened to the AUR, I’ve been fearing it like mad. It may only be four packages, but mmmmmm I’ve got my concerns.

    • exu@feditown.comEnglish
      7·
      2 days ago
      1. Remove the AUR packages you don’t need (pacman -Qm to check)
      2. read the diffs for the remaining packages
      • FatherPeanut@pawb.socialEnglish
        2·
        2 days ago

        I suppose I should give the full story. I have checked them a few times, and two of which had their maintainers altered. Under the recent AUR attack, I believe that’s been a requirement for malicious alterations to seep in, yet I don’t entirely know what the malicious alterations look like in code. Three of the four packages ship default with CachyOS, with the stray one being added by myself. Conveniently enough, the one I added myself is the one I trust the most and actually feel confident enough in my auditing of.

        As for removing unnecessary packages, yeah that’s a fair point. Much as I like Cachy for being an easy-to-use Arch based distro, it does bring a handful of bloat with it. Suppose I’ve just been afraid I’d be removing a dependency.

        • exu@feditown.comEnglish
          1·
          2 days ago

          If you use the usual pacman -Rns you can’t accidentally remove a dependency. Pacman will warn you about that

          For the last attacks, packages just has additional commands running some JS installer. The best way of being sure is reading and understanding the full PKGBUILD and then checking the diffs. In most cases only the version and SHA sums should change on an update.