I also see it’s not working.
Edit: It’s bizarre. It just worked now for me.
Don’t know what to say just this :
https://archlinux.org/mirrorlist/all/https/
The non-attack outage has been resolved, but they are under attack again.
I’ll post it as a screenshot, because the forum may go down at any time:
1 Like
maintenance-wise you are dialed in great then. a factor to eliminate.
did not know this. it explains a lot.
1 Like
An announcement on the Arch News page:
Recent service outages
2025-08-21 - Christian Heusel
We want to provide an update on the recent service outages affecting our infrastructure. The Arch Linux Project is currently experiencing an ongoing denial of service attack that primarily impacts our main webpage, the Arch User Repository (AUR), and the Forums.
We are aware of the problems that this creates for our end users and will continue to actively work with our hosting provider to mitigate the attack. We are also evaluating DDoS protection providers while carefully considering factors including cost, security, and ethical standards.
To improve the communication around this issue we will provide regular updates on our service status page going forward.
As a volunteer-driven project, we appreciate the community’s patience as our DevOps team works to resolve these issues. Please bear with us and thank you for all the support you have shown so far.
Workarounds during service disruption
In the case of downtime for archlinux.org:
- Mirrors: The mirror list endpoint used in tools like reflector is hosted on this site. Please default to the mirrors listed in the pacman-mirrorlist package during an outage.
- ISO: Our installation image is available on a lot of the mirrors, for example the DevOps administered geomirrors. Please always verify its integrity as described on the wiki and confirm it is signed by 0x54449A5C (or other trusted keys that may be used in the future).
In the case of downtime for aur.archlinux.org:
- Packages: We maintain a mirror of AUR packages on GitHub. You can retrieve a package using: $ git clone --branch <package_name> --single-branch https://github.com/archlinux/aur.git <package_name>
Additional remarks
Our services may send an initial connection reset due to the TCP SYN authentication performed by our hosting provider, but subsequent requests should work as expected.
We are keeping technical details about the attack, its origin and our mitigation tactics internal while the attack is still ongoing.
4 Likes
thanks for this. I can’t download sh*t for updates. Am opening a beer and trying workarounds now.
2 Likes
I just updated. No problems with repo packages, but the AUR is currently down.
I didn’t screen shot the update but the result is here:
[my sample mirror in post is the first one in the eos-mirrorlist file]
what is the command for the proper (non-aur) update? is it this?
sudo pacman -Syu https://mirrors.gigenet.com/endeavouros/repo/$repo/$arch
thanks
sudo pacman -Syu updates repo packages.
yay -Sua updates only AUR packages.
pacman will use the first mirror in your mirrorlist. You have 2 mirrorlists; one for Arch packages, and another one (the one you just listed) for EndeavourOS packages.
If the first mirror fails or times out, pacman will use the next mirror in the list.
The AUR is a single repo, there’s just the one address. There’s no mirrorlist for the AUR.
2 Likes
ok makes sense now.
sudo pacman -Syu —which I haven’t used for a year or more–worked for the regular repo.
yay looked like yours.
I just can’t believe someone would spend time with these week-long ddos nonsense. sad.
1 Like
I just got home from work. My alias for updating always shows Arch news first if I haven’t seen it yet.
This popped up when I attempted an update…
❯ up
2025-08-21 Recent service outages
We want to provide an update on the recent service outages affecting our infrastructure. The Arch Linux Project is currently experiencing an ongoing denial of service attack that primarily impacts our main webpage, the Arch User Repository (AUR), and the Forums.
We are aware of the problems that this creates for our end users and will continue to actively work with our hosting provider to mitigate the attack. We are also evaluating DDoS protection providers while carefully considering factors including cost, security, and ethical standards.
To improve the communication around this issue we will provide regular updates on our service status page going forward.
As a volunteer-driven project, we appreciate the community's patience as our DevOps team works to resolve these issues. Please bear with us and thank you for all the support you have shown so far.
Workarounds during service disruption
In the case of downtime for archlinux.org:
Mirrors: The mirror list endpoint used in tools like reflector is hosted on this site. Please default to the mirrors listed in the pacman-mirrorlist package during an outage.
ISO: Our installation image is available on a lot of the mirrors, for example the DevOps administered geomirrors. Please always verify its integrity as described on the wiki and confirm it is signed by 0x54449A5C (or other trusted keys that may be used in the future).
In the case of downtime for aur.archlinux.org:
Packages: We maintain a mirror of AUR packages on GitHub. You can retrieve a package using:
$ git clone --branch <package_name> --single-branch https://github.com/archlinux/aur.git <package_name>
Additional remarks
Our services may send an initial connection reset due to the TCP SYN authentication performed by our hosting provider, but subsequent requests should work as expected.
We are keeping technical details about the attack, its origin and our mitigation tactics internal while the attack is still ongoing.
[sudo] password for wombat:
So, first thing I did was come here to the forum.
1 Like
That is funny I was just reading the same message on their (dare I say it) website, somehow I just have no problems reaching the website (knock on unpainted wood) all the time this topic is going on. The “is it down website” now says it is up again.
I just tried the Arch forum and the Arch website. No issues accessing either.
4 Likes
Just installed EndeavourOS on my Laptop with Online Installation. All was working and fine. Also, I installed all my packages from Arch Repos and AUR without issues. Sometimes search was not available, but installation worked.
3 Likes