kodi-rpi-dev
LOW
maintainer graysky
0 votes
base
kodi-rpi
scanned 2026-09-17 00:27:14.276658
Why flagged
The package builds Kodi and related components from source hosted on GitHub and official mirrors; the non-standard host (mirrors.kodi.tv) is plausibly part of Kodi's infrastructure, and all downloads are verified with checksums, posing minimal risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds Kodi and related components from source hosted on GitHub and official mirrors; the non-standard host (mirrors.kodi.tv) is plausibly part of Kodi's infrastructure, and all downloads are verified with checksums, posing minimal risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:52
"https://mirrors.kodi.tv/build-deps/sources/crossguid-$_crossguid_version.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Contributor graysky <therealgraysky AT proton DOT me>
2
# Contributor: BlackIkeEagle < ike DOT devolder AT gmail DOT com>
3
4
pkgbase=kodi-rpi
5
pkgname=(
6
'kodi-rpi'
7
'kodi-rpi-eventclients' 'kodi-rpi-tools-texturepacker' 'kodi-rpi-dev'
8
)
9
10
_commitnumber=66020
11
_commit=d5b1ab28fe6ba844beaa6a489021101b6c0622db
12
13
# set this to anything to build with clang
14
# recommend manually setting -DUSE_LTO=OFF to -DUSE_LTO=$(nproc) in build()
15
_clangbuild=
16
17
pkgver=21.3
18
pkgrel=7
19
arch=('aarch64' 'armv7h')
20
url="https://github.com/graysky2/xbmc/tree/gs-gbm_omega"
21
license=('GPL-2.0-or-later')
22
makedepends=(
23
'bluez-libs' 'cmake' 'curl' 'dav1d' 'doxygen' 'git' 'glew'
24
'gperf' 'hicolor-icon-theme' 'fmt' 'libass' 'java-environment<21'
25
'libbluray' 'libcdio' 'libcec' 'libgl' 'mariadb-libs' 'libmicrohttpd'
26
'libmodplug' 'libmpeg2' 'libnfs' 'libpulse'
27
'libxrandr' 'libxslt' 'lirc' 'lzo' 'mesa' 'nasm'
28
'pipewire' 'python-pycryptodomex' 'python-pillow' 'python-pybluez'
29
'python-simplejson' 'smbclient' 'sndio' 'spdlog' 'taglib'
30
'tinyxml' 'swig' 'upower' 'giflib' 'rapidjson' 'ghostscript' 'meson' 'gtest'
31
'graphviz' 'libinput' 'libxkbcommon' 'pcre' 'libdisplay-info' 'tinyxml2' 'python-setuptools'
32
)
33
34
[[ -n "$_clangbuild" ]] && makedepends+=('clang' 'lld' 'llvm')
35
36
_codename=Omega
37
_init_version=2.0
38
_libdvdcss_version="1.4.3-Next-Nexus-Alpha2-2"
39
_libdvdnav_version="6.1.1-Next-Nexus-Alpha2-2"
40
_libdvdread_version="6.1.3-Next-Nexus-Alpha2-2"
41
_ffmpeg_version="6.1.3"
42
_crossguid_version="ca1bf4b810e2d188d04cb6286f957008ee1b7681"
43
_fstrcmp_version="0.7.D001"
44
_flatbuffers_version="23.3.3"
45
_libudfread_version="1.1.2"
46
source=(
47
"xbmc-$pkgver.${_commit:0:10}.tar.gz::https://github.com/graysky2/xbmc/archive/$_commit.tar.gz"
48
"libdvdcss-$_libdvdcss_version.tar.gz::https://github.com/xbmc/libdvdcss/archive/$_libdvdcss_version.tar.gz"
49
"libdvdnav-$_libdvdnav_version.tar.gz::https://github.com/xbmc/libdvdnav/archive/$_libdvdnav_version.tar.gz"
50
"libdvdread-$_libdvdread_version.tar.gz::https://github.com/xbmc/libdvdread/archive/$_libdvdread_version.tar.gz"
51
"https://ffmpeg.org/releases/ffmpeg-$_ffmpeg_version.tar.gz"
52
"https://mirrors.kodi.tv/build-deps/sources/crossguid-$_crossguid_version.tar.gz"
53
"https://mirrors.kodi.tv/build-deps/sources/fstrcmp-$_fstrcmp_version.tar.gz"
54
"https://mirrors.kodi.tv/build-deps/sources/flatbuffers-$_flatbuffers_version.tar.gz"
55
"https://mirrors.kodi.tv/build-deps/sources/libudfread-$_libudfread_version.tar.gz"
56
"ArchARM-kodi-init-v$_init_version.tar.gz::https://github.com/graysky2/kodi-standalone-service/archive/v$_init_version.tar.gz"
57
kodi.config.txt
58
0001-ffmpeg-build-with-lto-when-duse-lto.patch::https://github.com/xbmc/xbmc/commit/2cc6f1728ccb67ef575fe57680dd42836e3d6a1f.patch
59
0001-Merge-pull-request-28016-from-heitbaum-giflib.patch
60
0002-backport-NFS-replace-nfs_create-with-nfs_open2.patch
61
)
62
backup=(boot/kodi.config.txt etc/conf.d/kodi-standalone)
63
noextract=(
64
"libdvdcss-$_libdvdcss_version.tar.gz"
65
"libdvdnav-$_libdvdnav_version.tar.gz"
66
"libdvdread-$_libdvdread_version.tar.gz"
67
"ffmpeg-$_ffmpeg_version.tar.gz"
68
"crossguid-$_crossguid_version.tar.gz"
69
"fstrcmp-$_fstrcmp_version.tar.gz"
70
"flatbuffers-$_flatbuffers_version.tar.gz"
71
"libudfread-$_libudfread_version.tar.gz"
72
)
73
sha256sums=('561edb25c047d604f7a67c1689fd47a101646a544426a690c32709c564dcbfde'
74
'f38c4a4e7a4f4da6d8e83b8852489aa3bb6588a915dc41f5ee89d9aad305a06e'
75
'584f62a3896794408d46368e2ecf2c6217ab9c676ce85921b2d68b8961f49dfc'
76
'719130091e3adc9725ba72df808f24a14737a009dca5a4c38c601c0c76449b62'
77
'3be466dfd1a312d752c20ece5b413248a5808fba3c967da0624bac48a4380857'
78
'6be27e0b3a4907f0cd3cfadec255ee1b925569e1bd06e67a4d2f4267299b69c4'
79
'e4018e850f80700acee8da296e56e15b1eef711ab15157e542e7d7e1237c3476'
80
'8aff985da30aaab37edf8e5b02fda33ed4cbdd962699a8e2af98fdef306f4e4d'
81
'2bf16726ac98d093156195bb049a663e07d3323e079c26912546f4e05c77bac5'
82
'995910eb228986cfb8b921a86d421e06130dfb629a97681eb8c0a2e7ede2d9cf'
83
'5ac76e6ff16d8f0f60a414647bddb13b46402563dd02d69a05e90c0ddbb085f0'
84
'5a2f1c5fa9189d56eaf7e05024071c57e11f92b4eeb68b4bb0555c1fdd66c890'
85
'36a2b3c0ec76fd6511fa0679a1d4fd15ab50edc5618992cc0f18ac822a355d32'
86
'd3b7377d5b194fa54514656230dc25ab67b07a2769830e5de69519649be9d091')
87
88
prepare() {
89
[[ -d "$srcdir/kodi-build" ]] && rm -rf "$srcdir/kodi-build"
90
mkdir "$srcdir/kodi-build"
91
cd "xbmc-$_commit"
92
93
rm -rf system/certs # remove not needed cacert
94
95
# honor LTO settings when building ffmpeg
96
patch -p1 -i ../0001-ffmpeg-build-with-lto-when-duse-lto.patch
97
98
# backports to fix build
99
patch -p1 -i ../0001-Merge-pull-request-28016-from-heitbaum-giflib.patch
100
patch -p1 -i ../0002-backport-NFS-replace-nfs_create-with-nfs_open2.patch
101
}
102
103
build() {
104
# disable https://rfc.archlinux.page/0023-pack-relative-relocs/
105
export LDFLAGS=${LDFLAGS/-Wl,-z,pack-relative-relocs}
106
107
cd kodi-build
108
109
_args=(
110
-DCMAKE_BUILD_TYPE=Release
111
-DCMAKE_INSTALL_PREFIX=/usr
112
-DCMAKE_INSTALL_LIBDIR=/usr/lib
113
-DVERBOSE=ON
114
-DUSE_LTO=ON
115
-DENABLE_LDGOLD=OFF
116
-DENABLE_AIRTUNES=OFF
117
-DENABLE_PLIST=OFF
118
-DENABLE_AVAHI=ON
119
-DENABLE_BLURAY=ON
120
-DENABLE_CEC=ON
121
-DENABLE_DBUS=ON
122
-DENABLE_DVDCSS=ON
123
-DENABLE_EGL=ON
124
-DENABLE_EVENTCLIENTS=ON
125
-DENABLE_MICROHTTPD=ON
126
-DENABLE_MYSQLCLIENT=ON
127
-DENABLE_NFS=ON
128
-DENABLE_OPTICAL=ON
129
-DENABLE_SMBCLIENT=ON
130
-DENABLE_UDEV=ON
131
-DENABLE_UPNP=ON
132
-DENABLE_VAAPI=OFF
133
-DENABLE_VDPAU=OFF
134
-DENABLE_XSLT=ON
135
-DENABLE_LIRCCLIENT=ON
136
-DENABLE_INTERNAL_RapidJSON=OFF
137
-DENABLE_INTERNAL_FFMPEG=ON
138
-DENABLE_INTERNAL_CROSSGUID=ON
139
-DENABLE_INTERNAL_FSTRCMP=ON
140
-DENABLE_INTERNAL_FLATBUFFERS=ON
141
-DENABLE_INTERNAL_UDFREAD=ON
142
-Dlibdvdcss_URL="$srcdir/libdvdcss-$_libdvdcss_version.tar.gz"
143
-Dlibdvdnav_URL="$srcdir/libdvdnav-$_libdvdnav_version.tar.gz"
144
-Dlibdvdread_URL="$srcdir/libdvdread-$_libdvdread_version.tar.gz"
145
-DFFMPEG_URL="$srcdir/ffmpeg-$_ffmpeg_version.tar.gz"
146
-DCROSSGUID_URL="$srcdir/crossguid-$_crossguid_version.tar.gz"
147
-DFSTRCMP_URL="$srcdir/fstrcmp-$_fstrcmp_version.tar.gz"
148
-DFLATBUFFERS_URL="$srcdir/flatbuffers-$_flatbuffers_version.tar.gz"
149
-DUDFREAD_URL="$srcdir/libudfread-$_libudfread_version.tar.gz"
150
-DAPP_RENDER_SYSTEM=gles
151
-DCORE_PLATFORM_NAME="x11 gbm"
152
)
153
154
echo "building kodi"
155
cmake "${_args[@]}" ../"xbmc-$_commit"
156
make
157
}
158
159
package_kodi-rpi() {
160
pkgdesc="Media player and entertainment hub with hw accel for RPi5, gbm_omega fork"
161
depends=(
162
'bluez-libs' 'curl' 'dav1d' 'desktop-file-utils' 'hicolor-icon-theme' 'fmt'
163
'lcms2' 'libass' 'libbluray' 'libcdio' 'libcec' 'libmicrohttpd' 'libnfs'
164
'libpulse' 'libxslt' 'lirc' 'mariadb-libs' 'taglib'
165
'mesa' 'libpipewire' 'python-pillow' 'python-pycryptodomex'
166
'python-simplejson' 'smbclient' 'sndio' 'spdlog' 'sqlite'
167
'tinyxml' 'libxkbcommon' 'polkit' 'lzo' 'libinput'
168
'pcre' 'libdisplay-info' 'tinyxml2' 'linux-rpi5'
169
)
170
[[ -n "$_clangbuild" ]] && depends+=('glu')
171
172
optdepends=(
173
'bluez: Blutooth support'
174
'python-pybluez: Bluetooth support'
175
'pulseaudio: PulseAudio support'
176
'pipewire: PipeWire support'
177
)
178
install='kodi.install'
179
provides=("kodi=${pkgver}" "kodi-common=${pkgver}")
180
conflicts=('kodi')
181
182
_components=(
183
'kodi'
184
'kodi-bin'
185
)
186
187
cd kodi-build
188
for _cmp in ${_components[@]}; do
189
DESTDIR="$pkgdir" /usr/bin/cmake \
190
-DCMAKE_INSTALL_COMPONENT="$_cmp" \
191
-P cmake_install.cmake
192
done
193
194
# setup video drivers for kodi-gbm
195
install -Dm0644 "$srcdir/kodi.config.txt" "$pkgdir/boot/kodi.config.txt"
196
197
sed -i 's/@@@/512/' "$pkgdir/boot/kodi.config.txt"
198
199
_initshit="$srcdir/kodi-standalone-service-$_init_version/arm"
200
201
# fix permissions necessary for accelerated video playback
202
install -Dm0644 "$_initshit/udev/99-kodi.rules" "$pkgdir/usr/lib/udev/rules.d/99-kodi.rules"
203
204
# environment vars
205
install -Dm644 "${_initshit/\/arm}"/common/kodi-standalone "$pkgdir/etc/conf.d/kodi-standalone"
206
207
# systemd manages kodi user
208
install -Dm644 "$_initshit"/init/sysusers.conf "$pkgdir/usr/lib/sysusers.d/kodi.conf"
209
install -Dm644 "$_initshit"/init/tmpfiles.conf "$pkgdir/usr/lib/tmpfiles.d/kodi.conf"
210
211
# systemd service and polkit rules
212
install -Dm0644 "$_initshit/init/kodi.service" "$pkgdir/usr/lib/systemd/system/kodi.service"
213
install -Dm0644 "$_initshit/polkit/polkit.rules" "$pkgdir/usr/share/polkit-1/rules.d/10-kodi.rules"
214
chmod 0755 "$pkgdir/usr/share/polkit-1/rules.d/"
215
216
# man page
217
install -Dm0644 "$_initshit/doc/kodi.service.1" "$pkgdir/usr/share/man/man1/kodi.service.1"
218
219
# avoid error <general>: GetDirectory - Error getting /usr/lib/kodi/addons
220
# https://bugs.archlinux.org/task/77366
221
mkdir -p "$pkgdir"/usr/lib/kodi/addons
222
223
# https://archlinux.org/todo/use-system-ca-store/
224
mkdir -p "$pkgdir"/usr/share/kodi/system/certs
225
ln -s /etc/ssl/cert.pem "$pkgdir"/usr/share/kodi/system/certs/cacert.pem
226
}
227
228
package_kodi-rpi-eventclients() {
229
pkgdesc="Kodi Event Clients"
230
provides=("kodi-eventclients=${pkgver}")
231
conflicts=('kodi-rpi-legacy-eventclients')
232
optdepends=(
233
'kodi: local machine eventclient use'
234
'python: most eventclients are implemented in python'
235
)
236
237
_components=(
238
'kodi-eventclients-common'
239
'kodi-eventclients-ps3'
240
'kodi-eventclients-kodi-send'
241
)
242
243
cd kodi-build
244
for _cmp in ${_components[@]}; do
245
DESTDIR="$pkgdir" /usr/bin/cmake \
246
-DCMAKE_INSTALL_COMPONENT="$_cmp" \
247
-P cmake_install.cmake
248
done
249
}
250
251
package_kodi-rpi-tools-texturepacker() {
252
pkgdesc="Kodi Texturepacker Tool"
253
depends=('libpng' 'giflib' 'libjpeg-turbo' 'lzo')
254
conflicts=('kodi-rpi-legacy-tools-texturepacker')
255
256
_components=(
257
'kodi-tools-texturepacker'
258
)
259
260
cd kodi-build
261
for _cmp in ${_components[@]}; do
262
DESTDIR="$pkgdir" /usr/bin/cmake \
263
-DCMAKE_INSTALL_COMPONENT="$_cmp" \
264
-P cmake_install.cmake
265
done
266
}
267
268
package_kodi-rpi-dev() {
269
pkgdesc="Kodi dev files"
270
depends=('kodi')
271
conflicts=('kodi-rpi-legacy-dev')
272
provides=("kodi-dev=${pkgver}")
273
274
_components=(
275
'kodi-addon-dev'
276
'kodi-eventclients-dev'
277
)
278
279
cd kodi-build
280
for _cmp in ${_components[@]}; do
281
DESTDIR="$pkgdir" /usr/bin/cmake \
282
-DCMAKE_INSTALL_COMPONENT="$_cmp" \
283
-P cmake_install.cmake
284
done
285
}
286
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |