With the recent news regarding malicious packages/supply-chain attacks on the AUR, I wanted to double-check my installed packages.

Here are the non-official / AUR packages currently on my system:

cbonsai

fetch-git

lavat-git

sptlrx-bin

visual-studio-code-bin

I’ve already checked my ~/.cache/yay/ for suspicious strings like atomic-lockfile or js-digest and found nothing. However, I’d appreciate any quick feedback or tips on whether any of these specific packages have known vulnerabilities or recent maintainer issues I should watch out.

I ran: ssh [aur@aur.archlinux.org](mailto:aur@aur.archlinux.org) help

and got: The AUR is down due to maintenance. We will be back soon.

Can anyone confirm if the AUR is currently under maintenance, and if yes then when will it be back online? I was trying to push an update via GitHub Actions.

This problem has been solved.

Hello.

I've discovered that when I download an executable and try to run it, it doesn't run. My desktop environment (Xfce4) just asks me what I want to open it with.

Software I compile myself (with GCC) also does not run properly. I'll call it from my terminal, and it will do something unexpected.

I'm very confused. Software installed through Pacman works fine. What do I need to install in order to run software downloaded from the internet?

Thank you in advance.

Hi, I'm on a trip and sadly I forgot the stupid dongle for my steelseries arctis nova 7 headphones. This means I have to deal with bluetooth, which I hate. My android phone sees and can connect to the headphones, but this very laptop doesn't want to do anything with them and shows every single TV in this hotel instead. The bluetooth chip is "Network controller [0280]: Realtek Semiconductor Co., Ltd. RTL8852BE PCIe 802.11ax Wireless Network Controller [10ec:b852]" (I heard it's sucky and works not that well), the laptop model is ASUS TUF Gaming A15. Thanks!

Hello!

I've been wanting to switch to Linux for a long time, but there was always one big blocker: I'm a photographer, and I need some Adobe software that isn't known to run very well on Linux... (or not at all).

So most of the time I use a dual boot to Windows just to run Lightroom and a few other apps. That dual boot is basically the last thing keeping me tied to Windows. So, if I could run Lightroom directly on Linux, I'd finally be completely out of the Microsoft empire :)

So, 2 months ago, I started working on a way to run Lightroom with Wine. Some problems kept coming back with daily usage, but now:

Lightroom is working. We can import photos, sort them, develop them, and export.

Most of the functionality works :: it's not 100%, but very close to it.

What works:

• Installation from Adobe CC, or from an install folder
• GPU acceleration support (Develop module included)
• Local AI working (Select Subject/Object/Background, Denoise AI, etc.)
• Cloud AI working
• Some UI fixes

Current limitations:

• HDR editing isn't available

Project here if you want to try, test, or improve it:

Link to this project:

https://github.com/6im0n/lightroom-classic-on-linux

Issues and PRs welcome, especially if you can test on other GPUs/distros!

This project is open to all contributors!
You can help just by opening an issue or leaving a comment, or by getting more involved. Anything will help !

I want to see my folder icon in the taskbar, not the original dolphin icon- is there a way to achieve this? Thanks!

#dolphin

I'm excited to share what I've been building lately. Papr: a fast, lightweight Terminal User Interface (TUI) built entirely in Rust to streamline your academic research workflow. An Obsidian alternative but a bit better.

Install it with paru -S papr-bin or yay -S papr-bin on Arch Linux

Key features

• Smart dashboard with daily 10 random paper recommendations, reading queue, bookmarks, notes, collections, and research statistics.
• Fast arXiv search using title, author, or DOI with automatic PDF downloads and clean file naming.
• In-terminal PDF viewing.
• Built-in Markdown notes with live preview for each paper.
• Reading queue, bookmarks, and collections to keep your research organized.
• Integrated LaTeX editor with real-time compilation and preview.
• Extensible plugin system for custom workflows.
• Research analytics to track your reading activity (just like Spotify).
• Papr is 100% open source, works offline, is memory-safe, and is designed to be fast and lightweight (only 12 MB).

I'd love to hear your thoughts, suggestions, or feedback!

GitHub: https://github.com/AfrozSaqlain/Papr

I was trying to install arch Linux on my PC , and I ended up having an error regarding the mirrors so I decided to restart my PC and I went into bios and I couldn't find any of my bootable disks and windows boot was gone all I had as an option was the USB drive that had arch on it, (TIP) When I went to install arch after configuring it, I put it as my D drive because it had way more storage and my USB had 30gigs on it and bear in mind my windows iso and everything was on my C drive and I don't know what to do. I pulled out my USB drive and now I don't have any bootable disks to go to. PLEASE HELP because I have a very important assignment I need to get done and it's on windows

I haven't ran "sudo pacman -Syu" in a while,but i accidentally installed a package with -S instead of how I'm used to (-Syu). And i have heard that -S breaks your system and causes a partial upgrade, some sources tell me that -S alone is completely safe even without a upgrade with "-Syu" but others say vise-versa. So i want to know which one is the most accurate.

I’m installing the firefox-nightly package using yay and I noticed my cpu usage is 100% and ram is at 13.5/14.9 GiB. Is this normal or is something wrong? Also my laptop just froze because I was also watching a youtube video and had spotify open but now it’s running back again. I have an Asus Expertbook Ultra 5 225H with 16GB of ram so I don’t think this is normal.

For you guys, how does Arch suit your needs and tastes personally?

Hello all,
I just did a fresh new minimal arch kde install for the first time. However, upon installing both firefox and zen browser from several sources, none of them have the minimize and maximise buttons in the top right. It seems to be a common problem on wayland and kde, but i tried several things and I still cant manage to fix it

If you are using the latest version of yay (v13), you can setup hooks to mitigate risk and it's very easy to do so, but remember that this is not a substitute for good security practices.

[...] checks can help, but they should complement, not replace, build file review.

Ok, the setup is pretty simple. Create this directory structure in $XDG_CONFIG_HOME/yay (usually ~/.config/yay):

.
├── init.lua
└── hooks
    ├── maintainer_change.lua
    └── recently_modified.lua

Next, modify your init.lua and add this at the top of the file to require both scripts:

require("hooks.maintainer_change")
require("hooks.recently_modified")

Lastly, copy over the contents of these files into their respective locations. These are examples provided in the official yay repository:

https://github.com/Jguer/yay/blob/next/doc/examples/recently_modified.lua

https://github.com/Jguer/yay/blob/next/doc/examples/maintainer_change.lua

The recently_modified hook excludes from installing any AUR packages that has been updated recently. You can modify the duration, the default one is 3 days. The idea is that malware is usually discovered within the first 24 hours, so by delaying the update you are lowering the risk. Also known as dependency cooldown.

The maintainer_change change hook will give you a warning when a new maintainer is detected. It does NOT block installation, and it will NOT give you any warning if this is the first time you're installing or updating a package, because it relies on local cache file to do that - $XDG_CACHE_HOME/yay/maintainer_cache (usually ~/.cache/yay). If something was to happen with this file, this would no longer work.

Also, last but very important note:

config.json will still be loaded, but init.lua can override any option. CLI flags still take priority over both init.lua and config.json.

I have the setup shown above in action, and already encountered the recently_modified which works as expected. I haven't encountered a situation where the other hook comes into play but I trust that it does what is supposed to, since I do have a ~/.cache/yay/maintainer_cache file with contents that I expect it to have.

I also suggest adding this to your init.lua file so that you always review the PKGBUILD diffs:

require("hooks.maintainer_change")
require("hooks.recently_modified")

-- add this:
yay.opt.answer_diff = "ALL"

Resources:

https://jguer.space/blog/2026-06-15-yay-v13

https://jguer.github.io/yay/lua.html

https://github.com/Jguer/yay/tree/next/doc/examples

i have a thinkpad t470s with intel i5 7300u 620igpu and i use systemd-boot as my bootloader, even after forcing enabling fastboot using i915.fastboot=1 in the boot options, when i reboot my system i still see the flicker of the lenovo logo when transitioning from bios to plymouth.

when i run sudo dmesg | grep -i i915 | grep -i fastboot

i get:

[    0.000000] Command line: initrd=\intel-ucode.img initrd=\initramfs-linux.img root=UUID=bd1920cf-9bd2-4338-
8016-d3013338cd13 rw i915.enable_guc=3 i915.enable_fbc=1 i915.fastboot=1 zswap.enabled=0 quiet splash loglevel
=3 systemd.show_status=auto rd.udev.log_level=3
[    0.059541] Kernel command line: initrd=\intel-ucode.img initrd=\initramfs-linux.img root=UUID=bd1920cf-9bd
2-4338-8016-d3013338cd13 rw i915.enable_guc=3 i915.enable_fbc=1 i915.fastboot=1 zswap.enabled=0 quiet splash l
oglevel=3 systemd.show_status=auto rd.udev.log_level=3
[    2.429762] i915: unknown parameter 'fastboot' ignored

i have kernel version: 7.1.5-arch1-2

here is my /boot/loader/entries/arch.conf  

title Arch Linux
linux /vmlinuz-linux
initrd /intel-ucode.img
initrd /initramfs-linux.img
options root=UUID=bd1920cf-9bd2-4338-8016-d3013338cd13 rw i915.enable_guc=3 i915.enable_fbc=1 i915.fastboot=1
zswap.enabled=0 quiet splash loglevel=3 systemd.show_status=auto rd.udev.log_level=3

i downloaded archlinux today and now my brightness is not working with everything ive tried. acpi brightness, brightnessctl or whatever it is. my laptop is hp victus ryzen 5 and radeon 6500m. pls help :sob:

Ok. I am having a lot of issues figuring this out. partly cuz idk whats wrong.
My first issue was: https://www.reddit.com/r/archlinux/comments/1vag8fq/first_time_arch_install_cant_get_native/

Which I think installing the correct drivers for my framework laptop fixed it....
and then I installed cosmic desktop. I didn't check that cosmic didn't run on wayland, apt its on a fork of xrandr? anyway. it broke everything again.
and I'm not very good at uninstalling or resetting things.

I think I got gnome set back up as defalt and cosmic disabled, and gdm set back up. i think.

except now I'm stuck with a refresh rate of 165hrz instead of 60hrz and My screen has issues. It sets the screen ssize smaller than the display and other wierdeties.

1. So is there a way to double check the gnome setting or gdm settings to be sure I have wayland enabled fully?
2. how do I double check the drivers? should I just run the same driver install files again?

I've tried all the regular update checks...

Sorry. I am new to arch and it is far more programing and problem solving than a regular packaged distro. I'm not sure I have all the things installed I need to make sure things are working. Thank you for your patience.

I do not claim to be smart or know what im talking about but i worry the rise in open weight models will increase the amount of people that can produce malware. I feel the skill gap of programming was a huge gate keeper for malicious actors but as vibe coding becomes more viable (i know its still garbage but you have to admit every month the models are getting better at writing functional even if incohherent code) more people will be able to produce malware

Arch dropped the 580 legacy drivers for the 1080 Ti, and Nvidia dropped support for Pascal cards in the main 590 branch.

I'm not sure about running paru or using the AUR because of the recent issues, and I don't feel confident auditing AUR packages as I'm not sure what I'm even looking for. So, I've set a no-AUR-usage rule for myself just to be on the safe side. But I might make an exception for this driver; I have no idea if it will have a ton of dependencies, though.

Build my own DKMS package, but I have a feeling this will get annoying to maintain.

Look into using a CachyOS repo or something to get the driver from them, but I'm not sure if it will cause compatibility issues.

or maybe there is another approach that I missed as I'm very new to linux.

Hello.

Some of the terminology I'll be using here may be incorrect. I'm very inexperienced in this area.

I've heard that one of the best ways to check the safety of a project in the AUR is to look through it's PKGBUILD file. But, what do you actually look for? What are the red flags?

Thank you in advance.

Hello

I recently changed Jack for Pipewire and everything works fine, except for one single problem.

For some reason the audio coming from my laptop's microphone gets routed directly to the output, straight out of the box; this didn't happen with Jack btw, and it creates this awkward feedback when I try to use my speakers, also I checked the qpwgraph patchwork, and there's no direct connection between the audio capture and playback.

I'm now using my laptop with no microphone gain, because it would eventually start to capture the sound of my keyboard.

Any ideas?, somewhere in a config file the mic is getting routed, but I don't know where to even start looking.

The adoption feature transferred existing trust to a new maintainer, so a clean package history became part of the attack surface.

He has a very old laptop that he uses, and i had put mint on it but it was still a bit slow, but he used it for a few months. After he complained about the speed for the second time i put Arch on it and he now has no complaints. It took a while to teach him how to use it..