{"id":183452,"date":"2025-08-15T22:32:37","date_gmt":"2025-08-15T22:32:37","guid":{"rendered":"https:\/\/linuxiac.com\/?p=183452"},"modified":"2025-08-15T23:59:13","modified_gmt":"2025-08-15T23:59:13","slug":"arch-linux-aur-runs-into-recent-service-interruptions","status":"publish","type":"post","link":"https:\/\/linuxiac.com\/arch-linux-aur-runs-into-recent-service-interruptions\/","title":{"rendered":"Arch Linux\u2019s AUR Runs into Recent Service Interruptions"},"content":{"rendered":"\n

Arch\u2019s AUR<\/a>\u2014one of the distro\u2019s biggest selling points\u2014has been through quite a rough patch lately. First came several back-to-back attempts<\/a> to slip malicious software into the repository, which understandably set off alarm bells in the community.<\/p>\n\n\n\n

And now, over the past few days, many users say they\u2019ve been running into problems accessing the service almost daily.<\/p>\n\n\n\n

A quick check here<\/a> confirms it \u2014 since August 12, the AUR has been having daily access issues, and today, August 16, seems to be the worst so far. Right now, as I\u2019m writing this, trying to access the AUR just ends up timing out.<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

A quick look through a few different sources sheds some light on what\u2019s going on. In a Reddit post<\/a>, one of Arch\u2019s package maintainers explained:<\/p>\n\n\n\n

\n

Yes, we are suffering from some services outages (including the AUR) due to a DDOS attack. This is being investigated & worked on.<\/em><\/p>\n<\/blockquote>\n\n\n\n

Another message<\/a> on the Arch mailing list backs up what\u2019s already been said:<\/p>\n\n\n\n

\n

Arch sites are currently experiencing a DoS. Work is underway to make them available again. AUR should be mostly fine now \u2014 in particular access over IPv6 is reported to be in perfect shape. Access to other services may be spotty.<\/em><\/p>\n<\/blockquote>\n\n\n\n

It\u2019s obvious this is a targeted attack on the AUR. Whether it\u2019s a DoS (Denial of Service\u2014coming from a single source) or a DDoS (Distributed Denial of Service\u2014coming from multiple sources) isn\u2019t exactly clear, but that\u2019s not really the main point. Uptima\u2019s stats show that over the past two days, not only the AUR but the distribution\u2019s main website itself has also been hit.<\/p>\n\n\n\n

So far, the distribution hasn\u2019t released an official statement about the incident. However, from the messages, it\u2019s clear that Arch maintainers are working hard to sort out the details of these attacks and reduce their impact, keeping the service available for users.<\/p>\n\n\n\n

In closing, I have to say\u2014naive as it might sound\u2014that from an ethical standpoint, attacks like this on open-source projects are downright despicable. I\u2019m confident the Arch team will handle this unpleasant situation quickly and will do everything they can to minimize the impact of such actions in the future (as far as possible, of course).<\/p>\n","protected":false},"excerpt":{"rendered":"

Arch Linux\u2019s AUR users have experienced downtime in recent days after a DDoS attack. Maintainers are investigating and working on restoring the service.<\/p>\n","protected":false},"author":10,"featured_media":183455,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,5],"tags":[4264],"class_list":["post-183452","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-os","category-news","tag-arch-linux"],"blocksy_meta":[],"_links":{"self":[{"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/posts\/183452","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/comments?post=183452"}],"version-history":[{"count":0,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/posts\/183452\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/media\/183455"}],"wp:attachment":[{"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/media?parent=183452"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/categories?post=183452"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/linuxiac.com\/wp-json\/wp\/v2\/tags?post=183452"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}