this post was submitted on 24 Aug 2025
50 points (100.0% liked)
Linux
9159 readers
286 users here now
A community for everything relating to the GNU/Linux operating system (except the memes!)
Also, check out:
Original icon base courtesy of lewing@isc.tamu.edu and The GIMP
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I don't know what the time frame or interval of these events is. I switched to CachyOS 5+ months ago now, updated in the evening before going to bed (basically daily, bleeding edge as you might say).
I had zero issues. Maybe it'll be an issue one day. But while I could check for any critical known issues, and that would be an extra step (I don't, so it's not), it has saved me so much time just having up to date packages on literally everything just in the repo. It's insane compared to especially Debian, where things can be years behind and the only way to get a reasonable recent version is to build from source, find a .deb repo for it or install a manually downloaded package directly (like on Windows).
It's fairly random when a problem pops up. You could be fine for another 6 months to a year, but generally the possibility is there every update.
As for getting updated software, I've personally been able to get the latest versions of all the apps I use on Debian thanks to flatpak, which is as simple as adding the flathub repo.
I fundamentally dislike the concept of flatpacks. It's fine and/or necessary for immutable distros, but I see little point in loading every dependency individually for every app. It's fine for an app or two, but adds up to a lot relatively quickly when used as the default system. To each their own I guess, but I'm very happy with the ecosystem of the huge, up-to-date native repo + availability of the AUR.
I can't say I've ever actually witnessed those things presenting as a problem on my system, personally.
One advantage (imo) of flatpak over the AUR at least, is that flatpaks can have a verified status, which makes them as safe as using a distro package (sometimes more so, since they can be sandboxed), where as each AUR package should be manually inspected to avoid the potential for malware, as recently occurred on there. Without knowledge on what to look for in an AUR build script, it can be a potentially unsafe source.
Debian + Verified flatpaks offers good security for the widest range of packages for the least effort, at least in my experience.