RUA

RUA is a build tool for ArchLinux, AUR. Its features:

Planned features include AUR upstream git diff and local patch application.

Use

rua install firefox-ublock-origin # install AUR package (with user confirmation)

rua install --offline firefox-ublock-origin # same as above, but PKGBUILD is run without internet access. Sources are downloaded using .SRCINFO.

rua tarcheck my_built_package.pkg.tar # if you already have a *.tar package built, run RUA checks on it (SUID, executable list, INSTALL script review etc).

rua jailbuild --offline /path/to/pkgbuild/directory # build a directory. Don't fetch any dependencies. Assumes a clean directory.

rua --help && rua install --help # shows CLI help

Jail wrapper arguments can be overridden in ~/.config/rua/wrap_args.d/, see the parent directory for examples.

Install (the AUR way)

Install rua package using the default manual build process. Or use another AUR helper, or an earlier version of RUA.

Install (the Rust way)

There won't be bash/zsh/fish completions this way, but everything else should work.

How it works

We'll consider the "install" command as it's the most advanced one. RUA will:

  1. Fetch the AUR package (via git)
  2. Check .SRCINFO for other AUR dependencies, repeat the process for them
  3. Once all dependencies are fetched, we know which pacman packages are needed to install, and which AUR packages are needed to be built and installed. Show this summary to the user.
  4. If the user proceeds, let them review all repo-s, including their PKGBUILDs.
  5. Build all AUR packages of maximum dependency "depth"
  6. After all are built, let the user review them all
  7. If review passes, let the user install these packages
  8. The lowest (dependency-wise) packages are now installed. Go to 5.
  9. Exit when all packages are installed.

Limitations

Safety

RUA only adds build-time safety and install-time control. Once the package passes your review, it's as safe (run-time) as it was in the first place. Do not install AUR packages you don't trust.

Other

The RUA name can be read as "RUst Aur jail", also an inversion of "AUR".

Project is shared under GPLv3+.