kiri-bin

LOW

maintainer ahp 0 votes scanned 2026-11-05 10:09:05.899562

View on AUR

Why flagged

The package installs prebuilt binaries from the project's official GitHub releases, which is a normal AUR practice; the flagged low votes and recent upload are metadata concerns, not security risks, and the build process is transparent with verifiable checksums.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs prebuilt binaries from the project's official GitHub releases, which is a normal AUR practice; the flagged low votes and recent upload are metadata concerns, not security risks, and the build process is transparent with verifiable checksums.

PKGBUILD

      1# Maintainer: Amir Husayn Panahifar <ahp@panahifar.ir>
    
      2
    
      3# Split package: one upstream release, two .debs. kiri-bin is the full app
    
      4# (engine, window, bundled docker CLI + Compose + buildx); kiri-lite-bin is
    
      5# the engine only. Bump pkgver once and both follow.
    
      6pkgbase=kiri-bin
    
      7pkgname=('kiri-bin' 'kiri-lite-bin')
    
      8pkgver=0.1.17
    
      9pkgrel=1
    
      10pkgdesc="Tiny, fast container runtime speaking the Docker API"
    
      11arch=('x86_64' 'aarch64')
    
      12url="https://runkiri.com"
    
      13_gh="https://github.com/libracoder/kiri"
    
      14license=('Apache-2.0')
    
      15# Prebuilt (static Rust/Go) binaries: nothing to strip, no debug info.
    
      16options=('!strip' '!debug')
    
      17source=('kiri.sysusers' 'kiri-path.sh' 'kiri.install')
    
      18source_x86_64=(
    
      19  "kiri-${pkgver}-x86_64.deb::${_gh}/releases/download/v${pkgver}/kiri_${pkgver}_amd64.deb"
    
      20  "kiri-lite-${pkgver}-x86_64.deb::${_gh}/releases/download/v${pkgver}/kiri-lite_${pkgver}_amd64.deb"
    
      21)
    
      22source_aarch64=(
    
      23  "kiri-${pkgver}-aarch64.deb::${_gh}/releases/download/v${pkgver}/kiri_${pkgver}_arm64.deb"
    
      24  "kiri-lite-${pkgver}-aarch64.deb::${_gh}/releases/download/v${pkgver}/kiri-lite_${pkgver}_arm64.deb"
    
      25)
    
      26# makepkg would unpack both .debs into the same data.tar.*; _unpack_deb does it.
    
      27noextract=(kiri{,-lite}-"${pkgver}"-{x86_64,aarch64}.deb)
    
      28sha256sums=('1e8f1730d7bca0eacdc7d1dea9e86e2dc690e1e14434fd90d98ad54bcf48df8d'
    
      29            'fa0bd2c3b048b5205b21c66959ba23e63ddde224ee0b1a14a11d2ad13f9375e2'
    
      30            'cc85676414f87b4c07af61e8df1a298fd3cc82fed4ec7024dec250fc629ced47')
    
      31sha256sums_x86_64=('1065eb98a95ab20b7898bad467d2e963e7bf0b1d2649c01a3e102c2d39da0b44'
    
      32                   '0dd842bbf48e7705e1f53b9d79d65190746e71def3f800788dadd872dc7aa17c')
    
      33sha256sums_aarch64=('41623f60f6fc9111e25a0e1ecdbec12fb2ccc481aca709b1e498e16329687ad6'
    
      34                    '3cf93765c9349a805497f490c44c9b7234214ee38d723030e53d957160a3d5fa')
    
      35
    
      36# Unpack a .deb's data.tar.* into $pkgdir and fix it up for Arch.
    
      37_unpack_deb() {
    
      38  local _deb=$1 _tmp
    
      39  _tmp=$(mktemp -d "$srcdir/deb.XXXXXX")
    
      40  bsdtar -xf "$_deb" -C "$_tmp"
    
      41  bsdtar -xpf "$_tmp"/data.tar.* -C "$pkgdir"
    
      42  rm -rf "$_tmp"
    
      43
    
      44  # /lib is a symlink to usr/lib on Arch; packages must not ship it.
    
      45  install -dm755 "$pkgdir/usr/lib/systemd/system"
    
      46  mv "$pkgdir/lib/systemd/system/kiri.service" "$pkgdir/usr/lib/systemd/system/"
    
      47  rm -rf "$pkgdir/lib"
    
      48
    
      49  # The deb's postinst runs groupadd; on Arch, systemd-sysusers does it.
    
      50  install -Dm644 "$srcdir/kiri.sysusers" "$pkgdir/usr/lib/sysusers.d/kiri.conf"
    
      51
    
      52  find "$pkgdir" -type d -exec chmod 755 {} +
    
      53}
    
      54
    
      55_licenses() {
    
      56  local _doc=$1
    
      57  install -dm755 "$pkgdir/usr/share/licenses/$pkgname"
    
      58  ln -s "/usr/share/doc/$_doc/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      59  ln -s "/usr/share/doc/$_doc/NOTICE" "$pkgdir/usr/share/licenses/$pkgname/NOTICE"
    
      60}
    
      61
    
      62package_kiri-bin() {
    
      63  pkgdesc+=" (with GUI and bundled docker CLI, Compose, buildx)"
    
      64  # kiri and kiri-init are static; these are kiri-window's ELF dependencies.
    
      65  depends=('gcc-libs' 'gdk-pixbuf2' 'glib2' 'glibc' 'gtk3' 'polkit' 'webkit2gtk-4.1')
    
      66  optdepends=(
    
      67    'docker: system docker CLI (preferred over the bundled one when installed)'
    
      68    'docker-compose: system Compose plugin (preferred over the bundled one)'
    
      69    'docker-buildx: system buildx plugin (preferred over the bundled one)'
    
      70  )
    
      71  # Not provides=('kiri'): the AUR's kiri-git is an unrelated KiCad tool that
    
      72  # provides that name. It also installs /usr/bin/kiri, hence the conflict.
    
      73  conflicts=('kiri-lite-bin' 'kiri-git')
    
      74  install=kiri.install
    
      75
    
      76  _unpack_deb "kiri-${pkgver}-${CARCH}.deb"
    
      77
    
      78  # Kiri's docker CLI and its wrapper: Arch keeps helpers in /usr/lib/<pkg>,
    
      79  # not /usr/libexec. Nothing but the wrapper names the old path.
    
      80  mv "$pkgdir/usr/libexec/kiri/bin" "$pkgdir/usr/lib/kiri/bin"
    
      81  mv "$pkgdir/usr/libexec/kiri/docker" "$pkgdir/usr/lib/kiri/docker"
    
      82  sed -i 's|/usr/libexec/kiri/bin/docker|/usr/lib/kiri/bin/docker|' "$pkgdir/usr/lib/kiri/docker"
    
      83  rmdir "$pkgdir/usr/libexec/kiri"
    
      84
    
      85  # Arch's docker-compose / docker-buildx own /usr/lib/docker/cli-plugins.
    
      86  # /usr/libexec/docker/cli-plugins is the one other system directory the
    
      87  # docker CLI searches, after that one, so the system plugins (when
    
      88  # installed) win, as upstream intends. namcap flags ELF files there.
    
      89  install -dm755 "$pkgdir/usr/libexec/docker"
    
      90  mv "$pkgdir/usr/lib/docker/cli-plugins" "$pkgdir/usr/libexec/docker/cli-plugins"
    
      91  rm -rf "$pkgdir/usr/lib/docker"
    
      92
    
      93  # Debian uses update-alternatives (priority 10) to put Kiri's docker at
    
      94  # /usr/bin/docker. That would conflict with Arch's docker package, so the
    
      95  # wrapper goes in its own directory, appended to the end of PATH: any other
    
      96  # docker on PATH still wins.
    
      97  install -dm755 "$pkgdir/usr/lib/kiri/path"
    
      98  ln -s /usr/lib/kiri/docker "$pkgdir/usr/lib/kiri/path/docker"
    
      99  install -Dm644 "$srcdir/kiri-path.sh" "$pkgdir/etc/profile.d/kiri.sh"
    
      100
    
      101  _licenses kiri
    
      102}
    
      103
    
      104package_kiri-lite-bin() {
    
      105  pkgdesc+=" (engine only)"
    
      106  depends=('glibc')
    
      107  optdepends=(
    
      108    'docker: docker CLI to talk to the engine'
    
      109    'polkit: pkexec for kiri host-access'
    
      110  )
    
      111  conflicts=('kiri-bin' 'kiri-git')
    
      112  install=kiri.install
    
      113
    
      114  _unpack_deb "kiri-lite-${pkgver}-${CARCH}.deb"
    
      115  _licenses kiri-lite
    
      116}
    
      117

Scan history

Scanned at (UTC)	Severity	Rules
2026-11-05 10:09:05	Low	2