Skip to content

[safety question]: hyde arch linux safety questions #1967

Closed

Description

@alizaincodes

Description

I want to install hyde on a fresh(I didn't installed currently arch linux installation). I have heard packages from arch linux user repository were hacked. Is it safe for me to install it? I don't know what packages hyde is going to install.

Steps to Reproduce

Try to install hyde with install.sh on arch linux

Expected Behavior

I expect that hyde script might download malicious packages. I dont want to get malicious packages on a fresh arch linux installation.

Actual Behavior

I currently didn't installed arch neither started hyde installation

Screenshots

No response

Environment

You dont need this.

Additional Information

No response

Activity

  1. gaelcool commented on Aug 12, 2026

    @gaelcool

    At this precise moment HyDE is undergoing an interesting migration, regardless the installation continues to hit the same beats as the Wikis guide (Available in multiple languages)
    If you run into any issues you can follow-up, just be sure to include something related next time like the following print-out:

    printf 'mode: %s\nconfig: %s\nprofile: %s\n' \
      "$HYDE_MODE" "$HYPRLAND_CONFIG" "$DCONF_PROFILE" "$HYDE_ACTIVATED" "$HYDE_FEATURE_LUA" "$QT_QPA_PLATFORM" &&
    test -f "$HYPRLAND_CONFIG" || read -r -p ans "Interupted, continue?(y/n)"
    test -z "$DCONF_PROFILE" || test -f "$DCONF_PROFILE"
    hyprctl reload

    So that we may better help out.

  2. kRHYME7 commented on Aug 12, 2026

    @kRHYME7
    Contributor

    some if not most exploits can be mitigated when you use chaotic aur. As it ships direct binary so no arbitrary commands being run. *some as the binary can be exploited elsewhere (fyr XZ or builds that modifies the code of the software you install).

    Most of the exploits are at build part, using binary from chaotic aur prevents any malicious PKGBUILD to run arbitrary build commands that is malicious.

    Also so far all AUR packages that is used by the core package are participated by me, either opening issues or just watching their upstream repo.

    We don't really want to use AUR as much as possible.

  3. locked and limited conversation to collaborators on Aug 15, 2026
  4. converted this issue into a discussion #1981 on Aug 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingdocumentationImprovements or additions to documentation

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions