Why don't more distributions have something like the AUR when it's the main reason why so many people use Arch Linux?
Why don't more distributions have something like the AUR when it's the main reason why so many people use Arch Linux?
The majority of other distros value package managers that allow for complex graph evaluation of dependencies, and the ability to roll back. This is granted with rpm and Deb, but not for pkgsource, which is a pretty lightweight format compared to those.
As for AUR, the major distros (Ubuntu, Debian, Fedora) support 3p repositories as well. The main concern is security. IIRC one of major complaints for AUR in the past was that it didn't foresee a strongly secure distribution system.
when it’s the main reason why so many people use Arch Linux?
AUR is one reason why I use Arch. But not the reason. Besides AUR, Arch has many other advantages from my point of view. Like for example the wiki that also users of other distributions use. Or the many vanilla packages. Or that you can easily create your own packages through the PKGBUILD files. Or that, based on my own experience, Arch is quite problem-free to use despite the current packages.
One reason why other distributions don't have something like AUR could be that AUR is not an official offering, so no verification is done in advance either. Thus, it has happened at least once that someone has manipulated PKGBUILD files in bad faith (https://lists.archlinux.org/pipermail/aur-general/2018-July/034151.html). The Wiki does not warn against the use for nothing.
However, it is much easier for the user to check the files in the AUR in advance than it is, for example, with ready-made packages in an unofficial PPA.
With https://build.opensuse.org and https://mpr.makedeb.org there are also at least two offers that are somewhat similar to AUR.
NixOS has NUR, but it's not necessary because they take everyone's pull requests in the official repo. I've been maintaining the software I use myself on the official nixpkgs, so I don't need to use the NUR.
What makes you think there aren't equivalents out there?
Gentoo's Guru repository, for one, and any of the multitude of ebuild repositories available through the
eselect repositorycommand.The AUR is not particularly special.
AUR is really not that great? Who moves to Arch for it? It's been my main OS for I don't even know how long but AUR has been my primary pain point. PKGBUILD is cool and useful useful. AUR however, is untrusted (or rather shouldn't be trusted), often out of date, sometimes requires compilation, and doesn't even have any good pacman wrappers since yaourt (that I'm aware of).
Am I missing something?
I use Arch because pacman sounds cooler than apt, wakka wakka.
Don't know. The AUR is a big reason I use Arch. Obviously there's PPAs/OBS or whatever but they're not implemented nearly as well, I don't need to go searching for new repos with the AUR or messing with repo priorities (fun times on Suse...) since everything is in the one place and there's procedures for taking over orphaned packages. I use about twenty or so packages from it, many of them not packaged for any other distro. Personally not interested in using Flatpak since two package management systems is not my idea of KISS. Poor man's AUR imo :).
Because the AUR is a pretty low quality repo. Not sure if anything has changed since 2 years ago, but last I used arch, the AUR was full of broken, abandoned, and unbuildable packages. The Debian repos, fedora+rpmfusion, etc, provide a comparable number of software packages with substantially higher quality, hence no need for the AUR. Fedora actually has COPRs which suffer from the same quality issues as the AUR for similar reasons.
The equivalent for Gentoo is the overlay system. gpo.zugaina.org (which is the best total package index) claims to list over 100000 ebuilds for 56000 different packages (some packages have multiple versions in-tree), and I know their database is not complete, since I contribute occasionally to an overlay that they don't index. Oh, and that also doesn't include things like perl library packages autogenerated by g-cpan.
So, um, yeah, useful but not unique.
I think looking at the two major enterprise players (Red Hat and Canonical) can give hints.
Fedora: run by Red Hat, upstream of RHEL. No way they are going to allow an unreviewed repository to be shipped with fedora by default. But they do have guides to add RPM fusion, and copr repos (the closest equivalent)
Ubuntu: run by Canonical. No way they are going to allow an unreviewed repository to be shipped with Ubuntu by default. But they do host and have guides for PPAs (closest AUR equivalent)
Debian: kind of the base layer for a lot of other distros. Debian itself is kept very minimal, and has a whole philosophy on what packages are allowed.
Edit: I realized this implies PPAs, copr and the AUR are the same when I know they aren’t functionally. I am just trying to highlight the motivations behind the distros and how it may play a part
Many distros have independent community generated package repositories though most aren't on official infrastructure. Ubuntu has PPA which is close. I try and avoid AUR as much as I can. It is a potential attack surface and packages are sometimes poorly maintained and break. I like it for system stuff and I mostly review the PKGBUILD. It seems like a good way for software to find a path into the official repos. There was a lot of resistance from me initially but for most desktop applications flatpak has proven to be a better solution.
It really just comes down to the differences in goals and philosophies between each distribution. Some distros have large curated repositories containing most of everything a normal user would want to use. That's what people expect from those distros, and people use them because they want that experience. Likewise, people don't use arch just because it has the AUR. They want a more DIY experience, and arch provides that, with the AUR being an essential part of how it works.
You're not going to get arch users to switch to ubuntu or whatever by duct-taping an AUR clone onto it. Furthermore, I believe trying to make one distro "to rule them all" that attempts to appeal to every niche would be not only a train wreck technically, but an abomination, antithetical to the principles of the OSS community as well.
In my experience the AUR is a dumpsterfire where half of the stuff doesn't work or breaks other things in your system. Definitely not a reason to switch to arch or manjaro for me.
@InternetPirate I mean apt based distros do have ppa’s although I have found aur to have better support. theoretically though they are equivalent i believe?
Brew on Linux?
The AUR is nice and all, but the reality is that most people will be served just fine (if not better) by the more curated repositories. Fedora's bundled repositories are more than enough for my dev work - and thanks to Flatpak and AppImage, closing any gaps is pretty easy.