kernel-manager-bin
LOW
maintainer MadGoat
1 votes
scanned 2026-09-10 21:21:21.441781
Why flagged
The package installs a prebuilt binary from a trusted upstream GitHub repository with pinned checksums and no build-time network activity, posing minimal risk despite the binary nature and unverified host.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from a trusted upstream GitHub repository with pinned checksums and no build-time network activity, posing minimal risk despite the binary nature and unverified host.
PKGBUILD
1
# Maintainer: MadGoat <ghazlett@gmail.com>
2
#
3
# PREBUILT-BINARY companion to the source package `kernel-manager`
4
# (the source PKGBUILD is RETAINED — this is an addition, not a
5
# replacement). Installs a precompiled x86_64 Release build produced by
6
# the release-bin workflow (.github/workflows/release-bin.yml):
7
# archlinux:base-devel container, GCC + GNU ld + Unix Makefiles, fat
8
# LTO, WITH_SCX_MANAGER=OFF. No build step, no makedepends, no CPM
9
# network fetches in the user's chroot.
10
#
11
# DEPENDENCY AUTHORITY: the ldd-verified breakdown in the source
12
# PKGBUILD:40-78. Runtime depends = the source list (PKGBUILD:95)
13
# plus >= floors captured from the build environment at each release
14
# (re-captured per release from the CI audit artifact — plan Step 7).
15
#
16
# FILE COLLISION CONTRACT: this package installs the SAME file set as
17
# `kernel-manager` and `kernel-manager-git` (binary, usr/lib/kernel-manager
18
# helpers, polkit policy, desktop file, 10 icons, LICENSE). Mutual
19
# `conflicts=` make coexistence impossible; pacman performs the switch
20
# in a single transaction in either direction. `provides=` keeps ONLY
21
# the cachyos-kernel-manager rebrand contract (source PKGBUILD:92-93)
22
# and deliberately does NOT provide `kernel-manager`, so that
23
# `pacman -S kernel-manager` remains a working one-command switch from
24
# this package to the source build (and this package's conflicts make
25
# `pacman -S kernel-manager-bin` the reverse switch).
26
#
27
# scx-manager optdepends (source PKGBUILD:96) is deliberately OMITTED:
28
# this build is WITH_SCX_MANAGER=OFF (feature compiled out,
29
# CMakeLists.txt:71-78) and a prebuilt user cannot re-enable it —
30
# sched-ext management requires the source package.
31
32
pkgname=kernel-manager-bin
33
pkgver=1.30.1
34
pkgrel=1
35
pkgdesc="Prebuilt x86_64 binary of kernel-manager (Qt6 GUI for kernel configuration, compilation, and sched-ext (BPF) scheduler management) — installs without building"
36
arch=(x86_64)
37
url="https://github.com/MadGoatHaz/kernel-manager"
38
license=(GPL-3.0-or-later)
39
40
# Same file set as the source + git packages: symmetric conflicts make
41
# coexistence impossible, and `pacman -S <sibling>` is a one-command
42
# switch in either direction (see FILE COLLISION CONTRACT in the header).
43
# `provides=` keeps ONLY the cachyos-kernel-manager rebrand contract
44
# (source PKGBUILD:92-93); it deliberately does NOT provide `kernel-manager`
45
# so that `pacman -S kernel-manager` stays a working one-command switch
46
# from this package to the source build.
47
conflicts=(kernel-manager kernel-manager-git cachyos-kernel-manager)
48
provides=(cachyos-kernel-manager)
49
50
# Mirrors source PKGBUILD:95 (names) + build-environment floors.
51
# Initial values = the 2026-09-10 archlinux:base-devel capture;
52
# re-captured from the release-bin CI audit artifact at each release
53
# (plan §3 Step 7 item 3).
54
depends=("qt6-base>=6.11.2" "pacman>=7.1.0" "glib2>=2.88.3" "polkit>=127")
55
56
# -bin model: package() installs a prebuilt, checksum-pinned tarball
57
# from GitHub Releases — there is NO compile step, so no makedepends
58
# (no cmake, no cargo, no CPM network fetches in the user's chroot).
59
makedepends=()
60
61
# Shared polkit reload hook — byte-identical file to the source package.
62
install=kernel-manager.install
63
64
# Prebuilt Release tarball from the trusted upstream (the same GitHub
65
# account that hosts the source archives). Naming contract of
66
# release-bin.yml: kernel-manager-<ver>-x86_64.tar.zst with a `usr/`
67
# root, so a plain extraction into $pkgdir yields the FHS tree.
68
source=("https://github.com/MadGoatHaz/kernel-manager/releases/download/v${pkgver}/kernel-manager-${pkgver}-x86_64.tar.zst")
69
70
# Pinned via the project's standing double-fetch discipline (source
71
# PKGBUILD:27-30; Work/Docs/AUR_PACKAGING.md:9) after the v1.30.1
72
# workflow_dispatch backfill build (run 34516661858, 2026-09-10) uploaded
73
# the release assets (plan §3 Step 7 item 3: fetch twice, cmp byte-identical,
74
# record). Re-pin per release (plan §3 Step 7 item 3) after each backfill
75
# build publishes a new asset.
76
sha256sums=("39ebaad131e281f631fa84d82dd23b9ea3c26a973b8825d56974c0cd9c6fa840")
77
78
package() {
79
# The tarball's root is `usr/`, so a plain extraction into $pkgdir
80
# yields the full FHS layout (binary, usr/lib/kernel-manager helpers,
81
# polkit policy, desktop file, 10 icons, LICENSE — provenance:
82
# CMakeLists.txt:205-286 + source PKGBUILD:125-144). No compilation.
83
tar --zstd -xf "${srcdir}/kernel-manager-${pkgver}-x86_64.tar.zst" -C "$pkgdir"
84
}
85
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-10 21:21:21 | Low | 2 |