3 ms·
I prefer to use the packages provided by my OS (Arch) for anything security sensitive (like keybase!) rather than a binary package from the AUR. The official a
by daurnimator 9y ago
I prefer to use the packages provided by my OS (Arch) for anything security sensitive (like keybase!) rather than a binary package from the AUR.
The official arch package is stuck on 1.0.22 waiting for you to make a tag on github.
- oconnor663 9y agoThat's partly true, but it also uses a build script that doesn't include the KBFS or GUI bits, which isn't directly under our control. At some point I'll work with the Arch maintainer to figure out what we want the official packages to be, but for now the easier control we have over the AUR package has been convenient. (It's shocking how much easier it was to get our Arch packaging working, compared to deb/rpm.) Security-wise, you could verify our signature on the .deb package that aur/keybase-bin is downloading. The Linux install instructions describe where to find the sigs.