Arch Linux AUR Repository Found to Contain Malware

Re:Arch Linux AUR Repository Found to Contain Malware by JackCh on Tuesday July 10, 2018 @04:38PM (#17501927)

There is an expectation that projects dogfood their own software, but I really can't think of a rational reason for a production server not affiliated with the Arch project to be running Arch.

Rolling release is great for technically competent users to install on their workstations, but why would you ever want a rolling release on a production server?

[ Parent | on HN ]

Re:Arch Linux AUR Repository Found to Contain Malware by Foxboron on Tuesday July 10, 2018 @04:48PM (#17502023)

You wouldn't. The only reason why we run it is because we know it. I wouldn't have used Arch on any production things personally.

[ Parent | on HN ]

Re:Arch Linux AUR Repository Found to Contain Malware by semi-extrinsic on Wednesday July 11, 2018 @11:06AM (#17507483)

Well, one thing which I know of several projects doing, is having an Arch server as one of the continuous testing servers. This way you can test against bleeding edge gcc/glibc/whatnot and catch bugs or breaking API changes long before they appear in major distros.

[ Parent | on HN ]