32
submitted 13 hours ago by pineapple@lemmy.ml to c/linux@lemmy.ml

So I recently installed Cachyos and I am now met with this problem.

There are kind of 2 main contenders here and I'm split between them. What do you use?

There is pacman + aur and then there is flatpak. Pacman has deep system integration and is much more lightweight but it has deep system integration and requires sudo to install. flatpak has sandboxing and easy permission management but it's bloated and possibly less performant?

Of course if the package isn't available on flathub then I will have to use the aur but when both are available it's hard to decide.

you are viewing a single comment's thread
view the rest of the comments
[-] thingsiplay@lemmy.ml 1 points 3 hours ago

You mean you have a package manager for your system without a password? Why would anyone want that?

[-] starshipwinepineapple@programming.dev 1 points 2 hours ago* (last edited 2 hours ago)

(I can't see the edited out part but if it was about yay...)

Yay builds in your local cache and then when it is ready to install it asks for sudo. The reason for this is because sudo can timeout during long builds, and more importantly if you compile with sudo you run the risk of arbitrary code execution. So it is safer to run with just yay and then it will ask for sudo when it actually needed.

[-] thingsiplay@lemmy.ml 2 points 1 hour ago

No, that is not what it was about. I know, don't run sudo yay, but rather just yay and wait for password request. What it was is about a configuration to not ask password anymore, a passwordless package manger.

[-] MonkderVierte@lemmy.zip 1 points 2 hours ago* (last edited 2 hours ago)

Convenience. It asks the kernel if you're logged in and if you're allowed to escalate. So, secure enough for a single-user system.

https://github.com/illiliti/ssu

[-] thingsiplay@lemmy.ml 2 points 2 hours ago

I don't feel safe doing so. Would a script be able to run escalated rights without asking me a password? Is it somewhere displayed that such a process is started (notification in example or at least in the terminal a message?). And even for applications I am directly starting, I want it be explicit to require a password, that I am always aware its escalated root rights the app has now.

I can understand your view of convenience and I am "guilty" of some convenience stuff too. But this goes a bit too far for my taste.

[-] MonkderVierte@lemmy.zip 2 points 2 hours ago

Okok, i've removed the ssu config part.

[-] thingsiplay@lemmy.ml 2 points 2 hours ago

Hey, I didn't meant this to be removed or anything; was just sharing my personal opinion. Everyone can do whatever they want, as long as they are aware of consequences and get teached about it. I'm just a bit paranoid, that's all.

this post was submitted on 08 Apr 2026
32 points (94.4% liked)

Linux

63789 readers
272 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 6 years ago
MODERATORS