It would be nice if Discover had a backend for AUR packages (https://aur.archlinux.org). I have some AURs installed on my system, and I need to use something different than Discover to update them. If such a feature was implemented, I would probably use only Discover for package updating. STEPS TO REPRODUCE 1. Install an AUR package (e.g. spotify) on an Arch Linux system 2. Wait for a new version to become available OBSERVED RESULT Discover does not show any update for the AUR. EXPECTED RESULT Discover shows the updates for the AUR and it allows to install it. SOFTWARE/OS VERSIONS Linux/KDE Plasma: 5.2.8 KDE Plasma Version: 5.16.4 KDE Frameworks Version: 5.60.0 Qt Version: 5.13.0 ADDITIONAL INFORMATION This is somewhat related to https://bugs.kde.org/show_bug.cgi?id=407096, but it is complementary.
Even if Discover adds AUR support, this feature will probably be disabled in the official build of Discover in Arch Linux repositories. AUR helpers are not supported by Arch Linux, and they will never be permitted in the [community] repo. [1] Furthermore, AUR packages can be compromised. [2] Users should carefully check the build scripts and files for malicious or dangerous commands before building a package. [3] [1] https://wiki.archlinux.org/index.php/AUR_Trusted_User_Guidelines#Rules_for_Packages_Entering_the_.5Bcommunity.5D_Repo [2] https://lists.archlinux.org/pipermail/aur-general/2018-July/034151.html [3] https://wiki.archlinux.org/index.php/Arch_User_Repository#Build_and_install_the_package
[archlinuxcn] and other unofficial user repositories may contain binary packages for AUR packages you are using (such as spotify). If you trust their maintainers and understand the risks, you can add the repositories to /etc/pacman.conf. This way you may be able to update AUR packages via Discover. See also: https://wiki.archlinux.org/index.php/Unofficial_user_repositories#archlinuxcn
There are other similar apps with AUR support (pamac, octopi, kalu, ...). I think that it is very important for Arch users (In reply to 2wxsy58236r3 from comment #1) > Even if Discover adds AUR support, this feature will probably be disabled in > the official build of Discover in Arch Linux repositories. AUR helpers are > not supported by Arch Linux, and they will never be permitted in the > [community] repo. [1] Furthermore, AUR packages can be compromised. [2] > Users should carefully check the build scripts and files for malicious or > dangerous commands before building a package. [3] > > [1] > https://wiki.archlinux.org/index.php/ > AUR_Trusted_User_Guidelines#Rules_for_Packages_Entering_the_.5Bcommunity. > 5D_Repo > [2] https://lists.archlinux.org/pipermail/aur-general/2018-July/034151.html > [3] > https://wiki.archlinux.org/index.php/ > Arch_User_Repository#Build_and_install_the_package
(In reply to Rober from comment #3) > There are other similar apps with AUR support (pamac, octopi, kalu, ...). > I think that it is very important for Arch users > > (In reply to 2wxsy58236r3 from comment #1) > > Even if Discover adds AUR support, this feature will probably be disabled in > > the official build of Discover in Arch Linux repositories. AUR helpers are > > not supported by Arch Linux, and they will never be permitted in the > > [community] repo. [1] Furthermore, AUR packages can be compromised. [2] > > Users should carefully check the build scripts and files for malicious or > > dangerous commands before building a package. [3] > > > > [1] > > https://wiki.archlinux.org/index.php/ > > AUR_Trusted_User_Guidelines#Rules_for_Packages_Entering_the_.5Bcommunity. > > 5D_Repo > > [2] https://lists.archlinux.org/pipermail/aur-general/2018-July/034151.html > > [3] > > https://wiki.archlinux.org/index.php/ > > Arch_User_Repository#Build_and_install_the_package I believe you could just make the AUR backend an optional dependency that you can get from the AUR.
This is a feature I found myself wanting too. I think it would be simple to implement and it can be disabled by default. Biggest reason I want it so I can get notifications for updates. Others would wanna install through Discover too and giving the user that freedom to choose what is best for them I think is the right move.
*** Bug 434994 has been marked as a duplicate of this bug. ***
Even if it would not make it to the Arch repositories, it could still be used in Arch based distros like Manjaro or Garuda and replace Pamac for their KDE versions.
I don't see this happening, sorry. AUR packages are super unstable and dangerous for normal users, who are the target audience for Discover. Offering support for it would be a false promise and give users a huge gun they could use to shoot themselves in the foot. People who really want to use AUR should absolutely be technical experts capable of evaluating the risks of doing so and manually recovering from issues it causes.
Can't this be put behind a big warning, or even an off by default build flag? I for one know the risks of AUR, but that shouldn't mean Discover is not for me. (which currently is true, as i won't have 2 software centers installed at the same time)