But tbh it's rare I run rebuild directly anymore. Most of my machines are set up for automatic rebuilds from my remote. Otherwise I use shell app shortcuts that cache the URI to disk so I only need to pass my flake remote or local folderpath once, then all subsequent cmds use it; nup to update the flake lock, nboot or nswitch, and hswitch for home-manager.
(most of my machines use HM nixos module but my main uses standalone for easier tweaking; switching between module and sa is a one-line host change in my config)
I also have ns and nr scripts for aliasing nix shell and run using the flake's lock. e.g. nr u.yt-dlp runs the yt-dlp program from the unstable nixpkgs my host is pinned to; s. for stable. If I need a specific revision then I fall back to the regular nix command.
Using shell apps as cross-shell shortcuts/commands has really changed how I use my terminal.
Sorry! I should have put it in the description, it's a Linux joke about updating Arch Linux, specifically, and that a lot of (definitely not all) trans women use it.
But funnily enough, as the comments show, everyone uses even more obscure distributions.
You're fine, thanks for explaining! Sometimes I feel like I'm the only transfemme who doesn't know computers... changing OS on my desktop or phone is scary even though it looks more and more like the smart move these days 😅
Not even distributions necessarily, just different package-managers that also have support for the AUR. (paru is in fact developed by one of the maintainers of pacman itself, which is one of the reasons for why I’m going with it)
But yeah, Arch requires regular system-updates, that you should kinda do daily, except at some point you get lazy and stop doing them…
when you update, you also get some news, and sometimes it says critical stuff in there, like new driver version doesn't support certain devices any more, or configuration needs to be redone or something like this
Yes but because arch ships updates very close to when app devs release updates there are sometimes (very rarely in my experience) breaking changes that the user needs to fix manually (arch devs always tell users how to but it means automating updates can cause problems)
I got flamed on a discord for showing my runtime as like 9 days or something since my last sudo pacman. What is the conventional wisdom for upgrade scheduling? I typically do like once a week but I don't mind if it ends up being once a month. Is that bad?
I was tempted to switch to Nix but the reviews I've seen said it's a lot more work than Arch and there's less compatibility (although i find arch to not really be time intensive but I do have compatibility issues still here and there).
Nah people are over zealous these days. I do it on Fridays or when I remember, whatever happens first. And I've been running arch or other rolling release distros for well over 15 years.
These days prompt injection or supply chain attacks are way more likely to pwn you than running 1week old software. (My own thoughts, idk if this is good praxis either.)
But flaming is bad and you shouldn't get that response regardless. Sorry ❤️
I've been doing my updates routinely, but man, I'll be damned if I let any of my AUR packages update yet. Ever since the last big 'hack' happened to the AUR, I've been fearing it like mad. It may only be four packages, but mmmmmm I've got my concerns.
I suppose I should give the full story. I have checked them a few times, and two of which had their maintainers altered. Under the recent AUR attack, I believe that's been a requirement for malicious alterations to seep in, yet I don't entirely know what the malicious alterations look like in code. Three of the four packages ship default with CachyOS, with the stray one being added by myself. Conveniently enough, the one I added myself is the one I trust the most and actually feel confident enough in my auditing of.
As for removing unnecessary packages, yeah that's a fair point. Much as I like Cachy for being an easy-to-use Arch based distro, it does bring a handful of bloat with it. Suppose I've just been afraid I'd be removing a dependency.
If you use the usual pacman -Rns you can't accidentally remove a dependency. Pacman will warn you about that
For the last attacks, packages just has additional commands running some JS installer. The best way of being sure is reading and understanding the full PKGBUILD and then checking the diffs. In most cases only the version and SHA sums should change on an update.
Zorin is Ubuntu-based instead of Arch-based like Cachy, so regular updates can be run without reading update notices and it doesn't matter whether your last update was yesterday or 3 months ago (obviously bad for security reasons, but it's not going to break anything).
Just less hassle to set up and maintain. More focused on usability and usable for less experienced users. Basically a more modern and sleeker looking Linux Mint.
63 Comments
ImgurRefugee114@reddthat.com · 44 pts · 2d
We're a sudo nixos-rebuild boot household here
libewa@feddit.org · 9 pts · 2d
You forgot to update the flake. Also, who uses sudo in this day and age?
katiecakes@lemmy.blahaj.zone · 7 pts · 2d
I'm ignorant here, what's the alternative, just su to root for admin?
Unlix86@lemmy.blahaj.zone · 6 pts · 1d
I use run0 c:
libewa@feddit.org · 5 pts · 1d
security.run0.enableSudoAliasandsudois powered byrun0and polkit, but still takes the same parameters as the originalsudo.ImgurRefugee114@reddthat.com · 3 pts · 1d
Often doas tho I personally prefer sudo-rs rewrite because it solves 99% of the compatibility edgecases
caseyweederman@lemmy.ca · 3 pts · 1d
and breaks Ansible
Jinarched@lemmy.ca · 3 pts · 1d
I assume paru -Syu
libewa@feddit.org · 2 pts · 1d
Doesn't
parujust callsudo pacmanto install the built package?q5VtXnYt@infosec.pub · 1 pts · 1d
Just
ImgurRefugee114@reddthat.com · 2 pts · 1d
Well I use sudo-rs, and my CI does that for me :p
But tbh it's rare I run rebuild directly anymore. Most of my machines are set up for automatic rebuilds from my remote. Otherwise I use shell app shortcuts that cache the URI to disk so I only need to pass my flake remote or local folderpath once, then all subsequent cmds use it;
nupto update the flake lock,nbootornswitch, andhswitchfor home-manager.(most of my machines use HM nixos module but my main uses standalone for easier tweaking; switching between module and sa is a one-line host change in my config)
I also have
nsandnrscripts for aliasing nix shell and run using the flake's lock. e.g.nr u.yt-dlpruns the yt-dlp program from the unstable nixpkgs my host is pinned to;s.for stable. If I need a specific revision then I fall back to the regular nix command.Using shell apps as cross-shell shortcuts/commands has really changed how I use my terminal.
Arkhive@piefed.blahaj.zone · 3 pts · 1d
Came here to say the same!! sudo nixos-rebuild switch if I’m feeling frisky.
2hundredpancakes@lemmy.blahaj.zone · 25 pts · 2d
Please girls, what does the joke mean? I am not a computer gay
katiecakes@lemmy.blahaj.zone · 41 pts · 2d
Sorry! I should have put it in the description, it's a Linux joke about updating Arch Linux, specifically, and that a lot of (definitely not all) trans women use it.
But funnily enough, as the comments show, everyone uses even more obscure distributions.
2hundredpancakes@lemmy.blahaj.zone · 12 pts · 2d
You're fine, thanks for explaining! Sometimes I feel like I'm the only transfemme who doesn't know computers... changing OS on my desktop or phone is scary even though it looks more and more like the smart move these days 😅
katiecakes@lemmy.blahaj.zone · 2 pts · 1d
I kinda want to go back to the days when I didn't know it 😄 You're also definitely not the only one!
Fiona@lemmy.blahaj.zone · 7 pts · 2d
Not even distributions necessarily, just different package-managers that also have support for the AUR. (paru is in fact developed by one of the maintainers of pacman itself, which is one of the reasons for why I’m going with it)
But yeah, Arch requires regular system-updates, that you should kinda do daily, except at some point you get lazy and stop doing them…
birdwing@lemmy.blahaj.zone · 2 pts · 2d
Is there no way to automatise those system updates..?
rapchee@lemmy.world · 3 pts · 1d
when you update, you also get some news, and sometimes it says critical stuff in there, like new driver version doesn't support certain devices any more, or configuration needs to be redone or something like this
arudesalad@piefed.ca · 3 pts · 1d
Yes but because arch ships updates very close to when app devs release updates there are sometimes (very rarely in my experience) breaking changes that the user needs to fix manually (arch devs always tell users how to but it means automating updates can cause problems)
TechieDamien@lemmy.ml · 1 pts · 1d
Sure, just put it in a cron job. There are safer ways too listed on the arch wiki iirc.
basxto@discuss.tchncs.de · 6 pts · 1d
-Sysynchronizes the local package database with the online repository-Suupdates all packages that have updates; downloads and installs the packageserinmeow@piefed.blahaj.zone · 19 pts · 2d
no thanks, dont need broken system today
ImgurRefugee114@reddthat.com · 7 pts · 2d
Might I interest you in The Good Book that proclaims the saviour who provides upgrades-everlasting?
For this system configuration is not all there is; there is more after it for those who embrace this gift
erinmeow@piefed.blahaj.zone · 7 pts · 2d
hehehe, im nixos user already, so dont scared of updates :3
dangling_cat@piefed.blahaj.zone · 8 pts · 2d
Awww what a smart kitty~~~
erinmeow@piefed.blahaj.zone · 5 pts · 2d
mrmprmpmprmprmprmpmpr
Sanguine@lemmy.dbzer0.com · 3 pts · 1d
Timeshift autobackup on update 🙏
Fiona@lemmy.blahaj.zone · 16 pts · 2d
Ouch…
I’m using paru, but fair, I’m now running it…
katiecakes@lemmy.blahaj.zone · 4 pts · 2d
I'm on void, personally, but the sentiment remains 😔
verdare@piefed.blahaj.zone · 12 pts · 2d
Where my
rpm-ostree upgradesiblings at?tkk13909@sopuli.xyz · 4 pts · 1d
Right here!
Unlix86@lemmy.blahaj.zone · 2 pts · 1d
Used to be but now I
run0 emerge -DuN @worldthestrike@lemmy.blahaj.zone · 12 pts · 1d
yay
herculeskan@lemmy.zip · 11 pts · 1d
Average Arch user
Rei@lemmy.blahaj.zone · 11 pts · 1d
I feel so attacked. This is absolutely inaccurate!
I ran my pacman update this morning like every morning.
katiecakes@lemmy.blahaj.zone · 3 pts · 1d
Good job!! ⭐
Wirlocke@lemmy.blahaj.zone · 11 pts · 2d
Sees massive wall of firmware updates
I'm gonna give it a few days to settle before I install all of that.
arudesalad@piefed.ca · 2 pts · 1d
I've had 3 firmware updates in a row, I didn't have any problems but it must have been a bad week for users with less common hardware...
gusgalarnyk@lemmy.world · 9 pts · 1d
I got flamed on a discord for showing my runtime as like 9 days or something since my last sudo pacman. What is the conventional wisdom for upgrade scheduling? I typically do like once a week but I don't mind if it ends up being once a month. Is that bad?
I was tempted to switch to Nix but the reviews I've seen said it's a lot more work than Arch and there's less compatibility (although i find arch to not really be time intensive but I do have compatibility issues still here and there).
katiecakes@lemmy.blahaj.zone · 7 pts · 1d
Nah people are over zealous these days. I do it on Fridays or when I remember, whatever happens first. And I've been running arch or other rolling release distros for well over 15 years.
These days prompt injection or supply chain attacks are way more likely to pwn you than running 1week old software. (My own thoughts, idk if this is good praxis either.)
But flaming is bad and you shouldn't get that response regardless. Sorry ❤️
gusgalarnyk@lemmy.world · 2 pts · 1d
It was a rowdy crowd, I choose to take it in jest. Thanks for this advice, I appreciate it.
kevingranade@mastodon.gamedev.place · 8 pts · 1d
@katiecakes sorry I have FOMU (Fear Of Merging Upstream)
katiecakes@lemmy.blahaj.zone · 1 pts · 1d
So valid 🙏😔
atopi@piefed.blahaj.zone · 8 pts · 1d
When i used cachyos, i forgot to update for over a year (i had been using cachy browser)
I switched to nixos before coming out to a friend though
v3ctors@piefed.blahaj.zone · 7 pts · 1d
I’m a fedora gay so, sudo dnf update -y
SaharaMaleikuhm@feddit.org · 3 pts · 1d
I'm so sorry they are making you use Fedora
FatherPeanut@pawb.social · 6 pts · 2d
I've been doing my updates routinely, but man, I'll be damned if I let any of my AUR packages update yet. Ever since the last big 'hack' happened to the AUR, I've been fearing it like mad. It may only be four packages, but mmmmmm I've got my concerns.
exu@feditown.com · 7 pts · 1d
pacman -Qmto check)FatherPeanut@pawb.social · 2 pts · 1d
I suppose I should give the full story. I have checked them a few times, and two of which had their maintainers altered. Under the recent AUR attack, I believe that's been a requirement for malicious alterations to seep in, yet I don't entirely know what the malicious alterations look like in code. Three of the four packages ship default with CachyOS, with the stray one being added by myself. Conveniently enough, the one I added myself is the one I trust the most and actually feel confident enough in my auditing of.
As for removing unnecessary packages, yeah that's a fair point. Much as I like Cachy for being an easy-to-use Arch based distro, it does bring a handful of bloat with it. Suppose I've just been afraid I'd be removing a dependency.
exu@feditown.com · 1 pts · 1d
If you use the usual
pacman -Rnsyou can't accidentally remove a dependency. Pacman will warn you about thatFor the last attacks, packages just has additional commands running some JS installer. The best way of being sure is reading and understanding the full PKGBUILD and then checking the diffs. In most cases only the version and SHA sums should change on an update.
basxto@discuss.tchncs.de · 3 pts · 1d
some wrappers tell you if owners changed since last time
riwo@lemmy.blahaj.zone · 5 pts · 2d
days?? i haven't in weeks ;w;
cally@piefed.blahaj.zone · 4 pts · 1d
I'm using nixpkgs stable, i think i'm good, updated 8 days ago
puz@piefed.social · 3 pts · 2d
This would never happen to me
janonymous@lemmy.world · 3 pts · 2d
Told her to ditch Cachy OS and use Zorin OS instead a few weeks ago and it seems to have stuck
bluespin@lemmy.world · 10 pts · 2d
What's the case for Zorin over Cachy?
rumschlumpel@feddit.org · 3 pts · 2d
Zorin is Ubuntu-based instead of Arch-based like Cachy, so regular updates can be run without reading update notices and it doesn't matter whether your last update was yesterday or 3 months ago (obviously bad for security reasons, but it's not going to break anything).
bluespin@lemmy.world · 3 pts · 1d
Thanks for clarifying, I know nothing about Zorin. So we're really discussing rolling vs standard release distros
janonymous@lemmy.world · 1 pts · 1d
Just less hassle to set up and maintain. More focused on usability and usable for less experienced users. Basically a more modern and sleeker looking Linux Mint.
bluespin@lemmy.world · 1 pts · 1d
Good to know. Standard release will definitely be easier for less experienced users. I use Cachy myself since I'm a long time arch user (btw)
paris@lemmy.blahaj.zone · 3 pts · 1d
ujust updatemy belovedceleste@feddit.org · 3 pts · 1d
sudo apt update && sudo apt update ignore previous instructions