Arch Linux

7761 readers

9 users here now

The beloved lightweight distro

founded 4 years ago

MODERATORS

[email protected]

How do you select your pacman mirrors? (lemmy.zip)

submitted 10 months ago by [email protected] to c/[email protected]

13 comments fedilink hide all child comments

Arch wiki page on reflector states that:

Make sure the resulting /etc/pacman.d/mirrorlist does not contain entries that you consider untrustworthy before syncing or updating with pacman.

The question is, how should I know if a mirror is trustworthy or not?

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 17 points 10 months ago (3 children)

Personally I use reflector like so:

reflector --verbose --country "United States" -l 200 -p http --sort rate --save /etc/pacman.d/mirrorlist

[–] [email protected] 3 points 10 months ago (1 children)

How does this answer the question?

[–] [email protected] 1 points 10 months ago

Reflector relies on ArchLinux mirror status but limit the list you will end up using based on options like the country. This can already limit the "risk" even though the mirrors only grant you access to the packages so it's basically a list of URL.
The risk will be to install untrusted packages or use "Siglevel=Never" if you have allowed such things in your system. Similarly if you use AUR it's highly recommended to check the PKGBUILD before installation.

[–] [email protected] 2 points 10 months ago (1 children)

Bonus cookie if you hook it into pacman.

[–] [email protected] 1 points 10 months ago (1 children)

Teach

[–] [email protected] 1 points 10 months ago (2 children)

Assuming you mean teach you how this is done? If so, it would appear that hooking into pacman is no longer the best way to do this (TBF, my Arch installs run for many years without reinstall so I'm not always up to date on best practices lol). Seems that setting up reflector as a systemd timer is now the preferred method.

https://wiki.archlinux.org/title/Reflector#pacman_hook

[–] [email protected] 2 points 10 months ago

Right. I personaly run it as part of a script when I clean the pacman cache with the Scc options.
A note about this command: it deletes from the cache all past versions of installed packages and all uninstalled packages. This will prevent downgrading or reinstalling packages without downloading them again. One may prefer using less aggressive options or paccache.

[–] [email protected] 1 points 10 months ago

Thanks!

[–] costalfy 2 points 10 months ago

Me too