incus-git
LOW
maintainer HackerinoTopolin
0 votes
scanned 2026-10-25 00:20:48.567348
Why flagged
The package builds from the official GitHub repository of the project, uses SKIP only for the git source (which is normal), and installs standard binaries and configuration files without executing untrusted remote code or exhibiting malicious behavior.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from the official GitHub repository of the project, uses SKIP only for the git source (which is normal), and installs standard binaries and configuration files without executing untrusted remote code or exhibiting malicious behavior.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
Recently orphaned & re-adopted
orphaned_readopted
This package was orphaned and re-adopted within the last 30 days — a window where ownership transfers can introduce malicious changes.
PKGBUILD
1
# Maintainer: Morten Linderud <foxboron@archlinux.org>
2
# Maintainer: George Rawlinson <grawlinson@archlinux.org>
3
# Contributor: Maikel Wever <maikelwever@gmail.com>
4
# Contributor: Asterios Dimitriou <asterios@pci.gr>
5
# Contributor: Benjamin Asbach <archlinux-aur.lxd@impl.it>
6
# Contributer: nightuser <nightuser.android at gmail.com>
7
8
pkgbase=incus-git
9
base=incus
10
pkgname=(incus-git incus-tools-git)
11
provides=(incus incus-tools)
12
conflicts=(incus incus-tools)
13
pkgver=v6.1.0.r148.3f91a7cc7
14
pkgrel=1
15
pkgdesc="Powerful system container and virtual machine manager, git version"
16
arch=('x86_64')
17
url="https://linuxcontainers.org/incus/"
18
license=('Apache-2.0')
19
depends=('lxc' 'lxcfs' 'squashfs-tools' 'dnsmasq' 'cowsql' 'libuv' 'ebtables' 'raft' 'sqlite' 'libcap' 'acl'
20
21
# VM Support
22
'qemu-base' 'qemu-chardev-spice' 'qemu-hw-usb-redirect'
23
'qemu-hw-display-virtio-vga' 'qemu-hw-display-virtio-gpu'
24
)
25
makedepends=('go' 'git' 'tcl' 'apparmor' 'libseccomp' 'systemd')
26
optdepends=(
27
'lvm2: lvm2 support'
28
'thin-provisioning-tools: thin provisioning support'
29
'btrfs-progs: btrfs storage driver support'
30
'minio: storage buckets support'
31
'cdrtools: VM support'
32
'systemd-libs: unix device hotplug support'
33
'apparmor: apparmor support'
34
'xdelta3: support delta downloads of images'
35
)
36
source=("git+https://github.com/lxc/incus.git"
37
"incus.socket"
38
"incus.service"
39
"incus-user.socket"
40
"incus-user.service"
41
"incus.sysusers")
42
validpgpkeys=('602F567663E593BCBD14F338C638974D64792D67' # Stéphane Graber <stgraber@stgraber.org>
43
)
44
sha256sums=('SKIP'
45
'602a8035cc51b8e0c4ca265e31ebf96c7977db4239d384d8f60fed0d2d0317c4'
46
'646b0a9b38954890bc8706b41dfb93c7fdc83cbee1a3632c7258d77a1fddd725'
47
'50288528ea910d186157a2515c5200b3b073f645922fb581d1913f236f14667d'
48
'1c934cac1aa61be2ede5830ea76dbb9ba199498f6eb920ce1016bbb54dd088bf'
49
'90beead5dbde947936a58df8773519c49d92a2028881ae0ec81ee5402510e39a')
50
51
52
pkgver() {
53
cd "$srcdir/${base}"
54
printf "%s" "$(git describe --long --always | sed 's/\([^-]*-\)g/r\1/;s/-/./g')"
55
}
56
57
58
prepare() {
59
cd "$base"
60
61
mkdir bin
62
go mod verify
63
}
64
65
build() {
66
cd "$base"
67
68
export GOFLAGS="-buildmode=pie -modcacherw"
69
export CGO_LDFLAGS_ALLOW="-Wl,-z,now"
70
GO_LDFLAGS="-compressdwarf=false -linkmode external"
71
72
CGO_LDFLAGS="-static" go build -v -tags "agent" -o bin/ ./cmd/incus-agent/...
73
74
go build -v -ldflags "${GO_LDFLAGS}" -tags "netgo" -o bin/ ./cmd/incus-migrate/...
75
for tool in fuidshift incus lxc-to-incus lxd-to-incus incusd incus-benchmark incus-user; do
76
go build -v -ldflags "${GO_LDFLAGS}" -tags "libsqlite3" -o bin/ ./cmd/$tool
77
done
78
79
# Generate manpages - not worth it
80
# mkdir manpages
81
# ./bin/incus manpage --all ./manpages
82
# ./bin/incusd manpage --all ./manpages
83
}
84
85
package_incus-git() {
86
cd "$base"
87
88
for tool in incus incusd incus-agent incus-user lxd-to-incus; do
89
install -v -p -Dm755 "bin/$tool" "${pkgdir}/usr/bin/$tool"
90
done
91
92
# Package license
93
install -v -Dm644 "COPYING" "${pkgdir}/usr/share/licenses/incus/LICENCE"
94
95
# systemd files
96
install -v -Dm644 "${srcdir}/"incus.{service,socket} -t "${pkgdir}/usr/lib/systemd/system"
97
install -v -Dm644 "${srcdir}/"incus-user.{service,socket} -t "${pkgdir}/usr/lib/systemd/system"
98
install -v -Dm644 "${srcdir}/incus.sysusers" "${pkgdir}/usr/lib/sysusers.d/incus.conf"
99
100
# logs
101
install -v -dm700 "${pkgdir}/var/log/incus"
102
103
# documentation
104
install -d "${pkgdir}/usr/share/doc/incus/"
105
rm -rf doc/html
106
cp -vr doc/* "${pkgdir}/usr/share/doc/incus/"
107
108
# Bash completions
109
./bin/incus completion bash | install -Dm644 /dev/stdin "$pkgdir/usr/share/bash-completion/completions/incus"
110
./bin/incus completion zsh | install -Dm644 /dev/stdin "$pkgdir/usr/share/zsh/site-functions/_incus"
111
./bin/incus completion fish | install -Dm644 /dev/stdin "$pkgdir/usr/share/fish/vendor_completions.d/incus.fish"
112
}
113
114
package_incus-tools-git() {
115
conflicts=('lxd')
116
cd "$base"
117
for tool in fuidshift lxc-to-incus incus-benchmark; do
118
install -v -p -Dm755 "bin/$tool" "${pkgdir}/usr/bin/$tool"
119
done
120
# Package license
121
install -v -Dm644 "COPYING" "${pkgdir}/usr/share/licenses/incus-tools/LICENCE"
122
}
123
124
# vim:set ts=2 sw=2 et:
125
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 23:41:29 | Medium | 1 |
| 2026-06-18 16:11:54 | Clean | 0 |