cockroachdb-bin
LOW
maintainer xiota
9 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a prebuilt binary from the official project's binaries domain (binaries.cockroachdb.com), which is a standard and expected source for this software; the host is not on the analyzer's whitelist but is legitimate and controlled by the project, making this a normal AUR packaging pattern with low risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt binary from the official project's binaries domain (binaries.cockroachdb.com), which is a standard and expected source for this software; the host is not on the analyzer's whitelist but is legitimate and controlled by the project, making this a normal AUR packaging pattern with low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:40
"$_pkgname-$pkgver.tar.gz"::"https://binaries.cockroachdb.com/$_pkgsrc.tgz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: aur.chaotic.cx
2
# Contributor: Riccardo Berto <riccardo at rcrdbrt dot-symbol com>
3
# Contributor: Moses Narrow <moe-narrow@use.startmail.com>
4
# Contributor: Dimitris Kiziridis <ragouel at outlook dot com>
5
# Contributor: Konrad Tegtmeier <konrad.tegtmeier+aur@gmail.com>
6
# Contributor: Marcel O'Neil <marcel@marceloneil.com>
7
8
## links
9
# https://www.cockroachlabs.com/docs/stable/install-cockroachdb-linux.html
10
# https://github.com/cockroachdb/cockroach
11
# https://www.cockroachlabs.com/docs/releases/
12
13
: ${_install_path:=usr/lib}
14
15
_pkgname=cockroachdb
16
pkgname="$_pkgname-bin"
17
pkgver=26.2.6
18
pkgrel=1
19
pkgdesc="Cloud-native, distributed SQL database"
20
url='https://www.cockroachlabs.com'
21
license=('LicenseRef-CockroachDB')
22
arch=('x86_64')
23
24
depends=(
25
'glibc'
26
'sh'
27
)
28
makedepends=('patchelf')
29
30
provides=("$_pkgname")
31
conflicts=("$_pkgname")
32
33
options=('!debug')
34
35
backup=("etc/default/cockroach")
36
37
_pkgsrc="cockroach-v$pkgver.linux-amd64"
38
_pkgsrc_source="cockroach-$pkgver"
39
source=(
40
"$_pkgname-$pkgver.tar.gz"::"https://binaries.cockroachdb.com/$_pkgsrc.tgz"
41
"$_pkgname-$pkgver-LICENSE.txt"::"https://github.com/cockroachdb/cockroach/raw/v$pkgver/LICENSE"
42
)
43
sha256sums=('cd89dd377527de35ba9204b014d180ac973246854c7ad6f7db7fc59607da30ff'
44
'cb4f34a516b09ec1815bd8376a34de7ea5e6da06c70bed756110943ad1b340e4')
45
46
build() {
47
# generate shell completion
48
"$_pkgsrc/cockroach" gen autocomplete bash --out "cockroach.bash"
49
"$_pkgsrc/cockroach" gen autocomplete zsh --out "cockroach.zsh"
50
51
# generate man pages
52
"$_pkgsrc/cockroach" gen man --path "man"
53
}
54
55
package() {
56
# binary
57
install -Dm755 "$_pkgsrc/cockroach" "$pkgdir/$_install_path/$_pkgname/cockroach"
58
59
# GEOS libraries
60
install -Dm644 "$_pkgsrc/lib/libgeos.so" "$pkgdir/$_install_path/$_pkgname/lib/libgeos.so"
61
install -Dm644 "$_pkgsrc/lib/libgeos_c.so" "$pkgdir/$_install_path/$_pkgname/lib/libgeos_c.so"
62
patchelf --set-rpath "/$_install_path/$_pkgname" "$pkgdir/$_install_path/$_pkgname/lib/libgeos_c.so"
63
64
# script
65
install -Dm755 /dev/stdin "$pkgdir/usr/bin/cockroach" << END
66
#!/usr/bin/env sh
67
exec /$_install_path/$_pkgname/cockroach "\$@"
68
END
69
70
# user/group & owned directories
71
install -Dm644 /dev/stdin "$pkgdir/usr/lib/sysusers.d/cockroach.conf" << END
72
u cockroach - "CockroachDB" /var/lib/cockroach
73
END
74
75
install -Dm644 /dev/stdin "$pkgdir/usr/lib/tmpfiles.d/cockroach.conf" << END
76
d /etc/cockroach 0755 root cockroach - -
77
d /var/lib/cockroach 0750 cockroach cockroach - -
78
END
79
80
# services & runtime
81
install -Dm644 /dev/stdin "$pkgdir/usr/lib/systemd/system/cockroach.service" << END
82
[Unit]
83
Description=CockroachDB database server
84
Requires=network-online.target
85
After=network-online.target
86
87
[Service]
88
User=cockroach
89
Group=cockroach
90
91
EnvironmentFile=-/etc/default/cockroach
92
ExecStart=/usr/bin/cockroach start --certs-dir /etc/cockroach --store=${COCKROACH_STORE} $COCKROACH_FLAGS
93
LimitNOFILE=35000
94
95
ProtectHome=true
96
ProtectSystem=full
97
NoNewPrivileges=true
98
99
[Install]
100
WantedBy=multi-user.target
101
END
102
103
install -Dm644 /dev/stdin "$pkgdir/etc/default/cockroach" << END
104
COCKROACH_FLAGS="--insecure"
105
COCKROACH_STORE="path=/var/lib/cockroach"
106
END
107
108
# man pages
109
install -Dm644 "man"/*.1 -t "$pkgdir/usr/share/man/man1/"
110
111
# shell completion
112
install -Dm644 cockroach.bash "$pkgdir/usr/share/bash-completion/completions/cockroach"
113
install -Dm644 cockroach.zsh "$pkgdir/usr/share/zsh/site-functions/_cockroach"
114
115
# licenses
116
install -Dm644 "$_pkgname-$pkgver-LICENSE.txt" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
117
}
118
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |