So I recently installed Cachyos and I am now met with this problem.

There are kind of 2 main contenders here and I’m split between them. What do you use?

There is pacman + aur and then there is flatpak. Pacman has deep system integration and is much more lightweight but it has deep system integration and requires sudo to install. flatpak has sandboxing and easy permission management but it’s bloated and possibly less performant?

Of course if the package isn’t available on flathub then I will have to use the aur but when both are available it’s hard to decide.

    • thingsiplay@lemmy.ml
      link
      fedilink
      arrow-up
      2
      arrow-down
      1
      ·
      edit-2
      6 hours ago

      You mean you have a package manager for your system without a password? Why would anyone want that?

      Edit: For context. The part I was replying to was edited out.

      • starshipwinepineapple@programming.dev
        link
        fedilink
        arrow-up
        2
        ·
        edit-2
        10 hours ago

        (I can’t see the edited out part but if it was about yay…)

        Yay builds in your local cache and then when it is ready to install it asks for sudo. The reason for this is because sudo can timeout during long builds, and more importantly if you compile with sudo you run the risk of arbitrary code execution. So it is safer to run with just yay and then it will ask for sudo when it actually needed.

        • thingsiplay@lemmy.ml
          link
          fedilink
          arrow-up
          1
          arrow-down
          1
          ·
          10 hours ago

          No, that is not what it was about. I know, don’t run sudo yay, but rather just yay and wait for password request. What it was is about a configuration to not ask password anymore, a passwordless package manger.

        • thingsiplay@lemmy.ml
          link
          fedilink
          arrow-up
          2
          ·
          11 hours ago

          I don’t feel safe doing so. Would a script be able to run escalated rights without asking me a password? Is it somewhere displayed that such a process is started (notification in example or at least in the terminal a message?). And even for applications I am directly starting, I want it be explicit to require a password, that I am always aware its escalated root rights the app has now.

          I can understand your view of convenience and I am “guilty” of some convenience stuff too. But this goes a bit too far for my taste.

            • thingsiplay@lemmy.ml
              link
              fedilink
              arrow-up
              2
              ·
              11 hours ago

              Hey, I didn’t meant this to be removed or anything; was just sharing my personal opinion. Everyone can do whatever they want, as long as they are aware of consequences and get teached about it. I’m just a bit paranoid, that’s all.