this post was submitted on 24 Jun 2023
6 points (87.5% liked)

Arch Linux

7841 readers
1 users here now

The beloved lightweight distro

founded 5 years ago
MODERATORS
[email protected]
6
About yay helper (sopuli.xyz)
submitted 2 years ago by [email protected] to c/[email protected]
10 comments fedilink hide all child comments
 

When using sudo yay it recommends not using sudo. It seems I had two different outcomes from using sudo and then from not using it. Having used it, what effect does this have?

you are viewing a single comment's thread
view the rest of the comments
[–] ogarcia 3 points 2 years ago

Running any AUR helper (I recommend paru instead of yay but either is a good option) should always be done with a normal user and never with sudo.

This is because both the download of PKGBUILD as well as the download of the sources and the compilation must be done with a normal user. Doing that as root poses a HUGE risk to the integrity of the system, a bad PKGBUILD, a source code with errors, a script with a space where it shouldn't be and you can even break your system completely, you could even execute malicious code!

It is the AUR helpers themselves that will (eventually) ask you for a sudo authentication for when they need to do the final step of installing the package once it has been built.