cockroachdb-bin
MEDIUM
maintainer xiota
9 votes
scanned 2026-11-04 16:07:14.930874
Why flagged
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:40
"$_pkgname-$pkgver.tar.gz"::"https://binaries.cockroachdb.com/$_pkgsrc.tgz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: aur.chaotic.cx
2
# Contributor: Riccardo Berto <riccardo at rcrdbrt dot-symbol com>
3
# Contributor: Moses Narrow <moe-narrow@use.startmail.com>
4
# Contributor: Dimitris Kiziridis <ragouel at outlook dot com>
5
# Contributor: Konrad Tegtmeier <konrad.tegtmeier+aur@gmail.com>
6
# Contributor: Marcel O'Neil <marcel@marceloneil.com>
7
8
## links
9
# https://www.cockroachlabs.com/docs/stable/install-cockroachdb-linux.html
10
# https://github.com/cockroachdb/cockroach
11
# https://www.cockroachlabs.com/docs/releases/
12
13
: ${_install_path:=usr/lib}
14
15
_pkgname=cockroachdb
16
pkgname="$_pkgname-bin"
17
pkgver=26.2.10
18
pkgrel=1
19
pkgdesc="Cloud-native, distributed SQL database"
20
url='https://www.cockroachlabs.com'
21
license=('LicenseRef-CockroachDB')
22
arch=('x86_64')
23
24
depends=(
25
'glibc'
26
'sh'
27
)
28
makedepends=('patchelf')
29
30
provides=("$_pkgname")
31
conflicts=("$_pkgname")
32
33
options=('!debug')
34
35
backup=("etc/default/cockroach")
36
37
_pkgsrc="cockroach-v$pkgver.linux-amd64"
38
_pkgsrc_source="cockroach-$pkgver"
39
source=(
40
"$_pkgname-$pkgver.tar.gz"::"https://binaries.cockroachdb.com/$_pkgsrc.tgz"
41
"$_pkgname-$pkgver-LICENSE.txt"::"https://github.com/cockroachdb/cockroach/raw/v$pkgver/LICENSE"
42
)
43
sha256sums=('d2d161f363780163207184bdb34c984c72065d74bec5aef13bca4aaaf9a57eb6'
44
'cb4f34a516b09ec1815bd8376a34de7ea5e6da06c70bed756110943ad1b340e4')
45
46
build() {
47
# generate shell completion
48
"$_pkgsrc/cockroach" gen autocomplete bash --out "cockroach.bash"
49
"$_pkgsrc/cockroach" gen autocomplete zsh --out "cockroach.zsh"
50
51
# generate man pages
52
"$_pkgsrc/cockroach" gen man --path "man"
53
}
54
55
package() {
56
# binary
57
install -Dm755 "$_pkgsrc/cockroach" "$pkgdir/$_install_path/$_pkgname/cockroach"
58
59
# GEOS libraries
60
install -Dm644 "$_pkgsrc/lib/libgeos.so" "$pkgdir/$_install_path/$_pkgname/lib/libgeos.so"
61
install -Dm644 "$_pkgsrc/lib/libgeos_c.so" "$pkgdir/$_install_path/$_pkgname/lib/libgeos_c.so"
62
patchelf --set-rpath "/$_install_path/$_pkgname" "$pkgdir/$_install_path/$_pkgname/lib/libgeos_c.so"
63
64
# script
65
install -Dm755 /dev/stdin "$pkgdir/usr/bin/cockroach" << END
66
#!/usr/bin/env sh
67
exec /$_install_path/$_pkgname/cockroach "\$@"
68
END
69
70
# user/group & owned directories
71
install -Dm644 /dev/stdin "$pkgdir/usr/lib/sysusers.d/cockroach.conf" << END
72
u cockroach - "CockroachDB" /var/lib/cockroach
73
END
74
75
install -Dm644 /dev/stdin "$pkgdir/usr/lib/tmpfiles.d/cockroach.conf" << END
76
d /etc/cockroach 0755 root cockroach - -
77
d /var/lib/cockroach 0750 cockroach cockroach - -
78
END
79
80
# services & runtime
81
install -Dm644 /dev/stdin "$pkgdir/usr/lib/systemd/system/cockroach.service" << END
82
[Unit]
83
Description=CockroachDB database server
84
Requires=network-online.target
85
After=network-online.target
86
87
[Service]
88
User=cockroach
89
Group=cockroach
90
91
EnvironmentFile=-/etc/default/cockroach
92
ExecStart=/usr/bin/cockroach start --certs-dir /etc/cockroach --store=${COCKROACH_STORE} $COCKROACH_FLAGS
93
LimitNOFILE=35000
94
95
ProtectHome=true
96
ProtectSystem=full
97
NoNewPrivileges=true
98
99
[Install]
100
WantedBy=multi-user.target
101
END
102
103
install -Dm644 /dev/stdin "$pkgdir/etc/default/cockroach" << END
104
COCKROACH_FLAGS="--insecure"
105
COCKROACH_STORE="path=/var/lib/cockroach"
106
END
107
108
# man pages
109
install -Dm644 "man"/*.1 -t "$pkgdir/usr/share/man/man1/"
110
111
# shell completion
112
install -Dm644 cockroach.bash "$pkgdir/usr/share/bash-completion/completions/cockroach"
113
install -Dm644 cockroach.zsh "$pkgdir/usr/share/zsh/site-functions/_cockroach"
114
115
# licenses
116
install -Dm644 "$_pkgname-$pkgver-LICENSE.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
117
}
118
Changes since previous scan
--- PKGBUILD @ 2026-10-29 00:13+++ PKGBUILD @ 2026-11-04 16:07@@ -14,7 +14,7 @@ _pkgname=cockroachdb pkgname="$_pkgname-bin"-pkgver=26.2.9+pkgver=26.2.10 pkgrel=1 pkgdesc="Cloud-native, distributed SQL database" url='https://www.cockroachlabs.com'@@ -40,7 +40,7 @@ "$_pkgname-$pkgver.tar.gz"::"https://binaries.cockroachdb.com/$_pkgsrc.tgz" "$_pkgname-$pkgver-LICENSE.txt"::"https://github.com/cockroachdb/cockroach/raw/v$pkgver/LICENSE" )-sha256sums=('e9c41b8ab520fa2cd7cb3d61a08622bd413df4fa1ef725e1e2d75cc9517722d3'+sha256sums=('d2d161f363780163207184bdb34c984c72065d74bec5aef13bca4aaaf9a57eb6' 'cb4f34a516b09ec1815bd8376a34de7ea5e6da06c70bed756110943ad1b340e4') build() {Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-04 16:07:14 | Medium | 1 |
| 2026-10-30 00:29:30 | Clean | 2 |
| 2026-10-29 13:52:19 | Medium | 1 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 07:34:22 | Medium | 1 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 21:16:13 | Medium | 1 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 21:13:25 | Medium | 1 |