libvirt-xen
LOW
maintainer ahmubashshir
0 votes
scanned 2026-10-17 00:21:55.226236
Why flagged
The source URL points to the official libvirt.org domain, which is the project's legitimate release host; downloading the source tarball from there is standard and safe, even though the domain might not be on a generic whitelist.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URL points to the official libvirt.org domain, which is the project's legitimate release host; downloading the source tarball from there is standard and safe, even though the domain might not be on a generic whitelist.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:137
"https://libvirt.org/sources/$pkgname-$pkgver.tar.xz"{,.asc}
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Mubashshir <ahmubashshir@gmail.com>
2
# Contributor: Sven-Hendrik Haase <svenstaro@archlinux.org>
3
# Contributor: Robin Broda <robin@broda.me>
4
# Contributor: Christian Rebischke <chris.rebischke@archlinux.org>
5
# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
6
# Contributor: Jonathan Wiersma <archaur at jonw dot org>
7
# from: github
8
# what: libvirt/libvirt
9
# match! -rc[0-9]+$
10
11
pkgname=(libvirt libvirt-storage-gluster libvirt-storage-iscsi-direct)
12
epoch=1
13
pkgver=12.8.0
14
pkgrel=1
15
pkgdesc="API for controlling virtualization engines (openvz,kvm,qemu,virtualbox,xen,etc)"
16
arch=('x86_64')
17
url="https://libvirt.org/"
18
license=('LGPL-2.1-or-later'
19
'GPL-3.0-or-later') # libvirt_parthelper links to libparted
20
depends=(
21
acl
22
audit
23
bash
24
curl
25
device-mapper
26
fuse3
27
gcc-libs
28
glib2
29
glibc
30
gnutls
31
json-c
32
libcap-ng
33
libnbd
34
libnl
35
libpcap
36
libpciaccess
37
libsasl
38
libssh
39
libssh2
40
libtirpc
41
libxml2
42
numactl
43
parted
44
polkit
45
readline
46
systemd-libs
47
util-linux-libs
48
)
49
makedepends=(
50
bash-completion
51
dnsmasq
52
glusterfs
53
iproute2
54
libiscsi
55
libxslt
56
lvm2
57
meson
58
open-iscsi
59
python-docutils
60
qemu-base
61
systemd
62
)
63
optdepends=(
64
'dmidecode: DMI system info support'
65
'dnsmasq: required for default NAT/DHCP for guests'
66
'gettext: required for libvirt-guests.service'
67
'iptables-nft: required for default NAT networking'
68
'libvirt-python: for virt-qemu-qmp-proxy and virt-qemu-sev-validate commands'
69
'libvirt-storage-gluster: Gluster storage backend'
70
'libvirt-storage-iscsi-direct: iSCSI-direct storage backend'
71
'lvm2: Logical Volume Manager support'
72
'openbsd-netcat: for remote management over ssh'
73
'open-iscsi: iSCSI support via iscsiadm'
74
'python-cryptography: for virt-qemu-sev-validate command'
75
'python-lxml: for virt-qemu-sev-validate command'
76
'qemu-base: QEMU/KVM support'
77
'qemu-desktop: QEMU/KVM desktop support'
78
'qemu-emulators-full: Support of additional QEMU architectures'
79
'radvd: IPv6 RAD support'
80
'swtpm: TPM emulator support'
81
)
82
83
backup=(
84
'etc/libvirt/libvirt-admin.conf'
85
'etc/libvirt/libvirt.conf'
86
'etc/libvirt/libvirtd.conf'
87
'etc/libvirt/lxc.conf'
88
'etc/libvirt/network.conf'
89
'etc/libvirt/nwfilter/allow-arp.xml'
90
'etc/libvirt/nwfilter/allow-dhcp-server.xml'
91
'etc/libvirt/nwfilter/allow-dhcpv6-server.xml'
92
'etc/libvirt/nwfilter/allow-dhcp.xml'
93
'etc/libvirt/nwfilter/allow-dhcpv6.xml'
94
'etc/libvirt/nwfilter/allow-incoming-ipv4.xml'
95
'etc/libvirt/nwfilter/allow-incoming-ipv6.xml'
96
'etc/libvirt/nwfilter/allow-ipv6.xml'
97
'etc/libvirt/nwfilter/allow-ipv4.xml'
98
'etc/libvirt/nwfilter/clean-traffic-gateway.xml'
99
'etc/libvirt/nwfilter/clean-traffic.xml'
100
'etc/libvirt/nwfilter/no-arp-ip-spoofing.xml'
101
'etc/libvirt/nwfilter/no-arp-mac-spoofing.xml'
102
'etc/libvirt/nwfilter/no-arp-spoofing.xml'
103
'etc/libvirt/nwfilter/no-ip-multicast.xml'
104
'etc/libvirt/nwfilter/no-ipv6-multicast.xml'
105
'etc/libvirt/nwfilter/no-ip-spoofing.xml'
106
'etc/libvirt/nwfilter/no-ipv6-spoofing.xml'
107
'etc/libvirt/nwfilter/no-mac-spoofing.xml'
108
'etc/libvirt/nwfilter/no-mac-broadcast.xml'
109
'etc/libvirt/nwfilter/no-other-l2-traffic.xml'
110
'etc/libvirt/nwfilter/no-other-rarp-traffic.xml'
111
'etc/libvirt/nwfilter/qemu-announce-self-rarp.xml'
112
'etc/libvirt/nwfilter/qemu-announce-self.xml'
113
'etc/libvirt/network.conf'
114
'etc/libvirt/qemu.conf'
115
'etc/libvirt/qemu-lockd.conf'
116
'etc/libvirt/qemu/networks/default.xml'
117
'etc/libvirt/virtchd.conf'
118
'etc/libvirt/virtinterfaced.conf'
119
'etc/libvirt/virtlockd.conf'
120
'etc/libvirt/virtlogd.conf'
121
'etc/libvirt/virt-login-shell.conf'
122
'etc/libvirt/virtlxcd.conf'
123
'etc/libvirt/virtnetworkd.conf'
124
'etc/libvirt/virtnodedevd.conf'
125
'etc/libvirt/virtnwfilterd.conf'
126
'etc/libvirt/virtproxyd.conf'
127
'etc/libvirt/virtqemud.conf'
128
'etc/libvirt/virtsecretd.conf'
129
'etc/libvirt/virtstoraged.conf'
130
'etc/libvirt/virtvboxd.conf'
131
'etc/logrotate.d/libvirtd'
132
'etc/logrotate.d/libvirtd.lxc'
133
'etc/logrotate.d/libvirtd.qemu'
134
'etc/sasl2/libvirt.conf'
135
)
136
source=(
137
"https://libvirt.org/sources/$pkgname-$pkgver.tar.xz"{,.asc}
138
)
139
sha256sums=('0cd46a8f3a2b9b63c35c6e6f42a6c2989183ef3b3d1499ee92b4876db35e6fe9'
140
'SKIP')
141
validpgpkeys=('453B65310595562855471199CA68BE8010084C9C') # Jiří Denemark <jdenemar@redhat.com>
142
143
# libvirt-xen
144
unset epoch
145
pkgname=(libvirt-xen)
146
depends+=('xen')
147
backup+=(
148
'etc/libvirt/libxl.conf'
149
'etc/libvirt/libxl-lockd.conf'
150
'etc/libvirt/virtxend.conf'
151
'etc/logrotate.d/libvirtd.libxl'
152
)
153
154
prepare() {
155
cd "${pkgname%*-xen}-${pkgver}"
156
sed -i 's|/sysconfig/|/conf.d/|g' \
157
src/remote/libvirtd.service.in \
158
tools/{libvirt-guests.service,libvirt-guests.sh}.in \
159
docs/manpages/libvirt-guests.rst \
160
src/locking/virtlockd.service.in \
161
src/logging/virtlogd.service.in
162
sed -i 's|/usr/libexec/qemu-bridge-helper|/usr/lib/qemu/qemu-bridge-helper|g' \
163
src/qemu/qemu.conf.in \
164
src/qemu/test_libvirtd_qemu.aug.in
165
}
166
167
build() {
168
arch-meson build "${pkgname%*-xen}-$pkgver" \
169
--libexecdir=lib/libvirt \
170
-Drunstatedir=/run \
171
-Dqemu_user=libvirt-qemu \
172
-Dqemu_group=libvirt-qemu \
173
-Dnetcf=disabled \
174
-Dopenwsman=disabled \
175
-Dapparmor=disabled \
176
-Dapparmor_profiles=disabled \
177
-Dselinux=disabled \
178
-Dwireshark_dissector=disabled \
179
-Ddriver_bhyve=disabled \
180
-Ddriver_hyperv=disabled \
181
-Ddriver_libxl=enabled \
182
-Ddriver_vz=disabled \
183
-Dsanlock=disabled \
184
-Dsecdriver_apparmor=disabled \
185
-Dsecdriver_selinux=disabled \
186
-Dstorage_vstorage=disabled \
187
-Ddtrace=disabled \
188
-Dnumad=disabled \
189
-Dstorage_zfs=enabled\
190
-Dstorage_rbd=disabled
191
192
meson compile -C build
193
}
194
195
check() {
196
meson test -C build --print-errorlogs
197
}
198
199
package_libvirt-xen() {
200
conflicts=('libvirt')
201
provides=("libvirt=$pkgver" 'libvirt.so' 'libvirt-admin.so' 'libvirt-lxc.so' 'libvirt-qemu.so')
202
203
meson install -C build --destdir "$pkgdir"
204
mkdir -p "$pkgdir"/usr/lib/{sysusers,tmpfiles}.d
205
echo 'g libvirt - -' > "$pkgdir/usr/lib/sysusers.d/libvirt-qemu.conf"
206
echo 'u! libvirt-qemu /var/lib/libvirt "Libvirt QEMU user"' >> "$pkgdir/usr/lib/sysusers.d/libvirt.conf"
207
echo 'm libvirt-qemu kvm' >> "$pkgdir/usr/lib/sysusers.d/libvirt.conf"
208
echo 'z /var/lib/libvirt/qemu 0751' > "$pkgdir/usr/lib/tmpfiles.d/libvirt.conf"
209
210
chmod 600 "$pkgdir"/etc/libvirt/nwfilter/*.xml \
211
"$pkgdir/etc/libvirt/qemu/networks/default.xml"
212
chmod 700 "$pkgdir"/etc/libvirt/secrets
213
chmod 711 "$pkgdir"/var/lib/libvirt/swtpm
214
215
rm -rf \
216
"$pkgdir/run" \
217
"$pkgdir/var/lib/libvirt/qemu" \
218
"$pkgdir/var/cache/libvirt/qemu" \
219
# "$pkgdir/etc/logrotate.d/libvirtd.libxl"
220
221
rm -f "$pkgdir/etc/libvirt/qemu/networks/autostart/default.xml"
222
223
# move split modules
224
mv "$pkgdir"/usr/lib/libvirt/storage-backend/libvirt_storage_backend_gluster.so "$pkgdir/../"
225
mv "$pkgdir/usr/lib/libvirt/storage-backend/libvirt_storage_backend_iscsi-direct.so" "$pkgdir/../"
226
mv "$pkgdir/usr/lib/libvirt/storage-file/libvirt_storage_file_gluster.so" "$pkgdir/../"
227
}
228
return 0;
229
230
package_libvirt-storage-gluster() {
231
pkgdesc="Libvirt Gluster storage backend"
232
depends=(
233
"libvirt=$pkgver"
234
gcc-libs
235
glib2
236
glibc
237
glusterfs
238
)
239
optdepends=()
240
backup=()
241
242
install -Dv -t "$pkgdir/usr/lib/libvirt/storage-backend" "$pkgdir/../libvirt_storage_backend_gluster.so"
243
install -Dv -t "$pkgdir/usr/lib/libvirt/storage-file" "$pkgdir/../libvirt_storage_file_gluster.so"
244
}
245
246
package_libvirt-storage-iscsi-direct() {
247
pkgdesc="Libvirt iSCSI-direct storage backend"
248
depends=(
249
"libvirt=$pkgver"
250
gcc-libs
251
glib2
252
glibc
253
libiscsi
254
)
255
optdepends=()
256
backup=()
257
258
install -Dv -t "$pkgdir/usr/lib/libvirt/storage-backend" "$pkgdir/../libvirt_storage_backend_iscsi-direct.so"
259
}
260
Changes since previous scan
--- PKGBUILD @ 2026-06-19 19:07+++ PKGBUILD @ 2026-10-17 00:21@@ -10,7 +10,7 @@ pkgname=(libvirt libvirt-storage-gluster libvirt-storage-iscsi-direct) epoch=1-pkgver=12.3.0+pkgver=12.8.0 pkgrel=1 pkgdesc="API for controlling virtualization engines (openvz,kvm,qemu,virtualbox,xen,etc)" arch=('x86_64')@@ -136,7 +136,7 @@ source=( "https://libvirt.org/sources/$pkgname-$pkgver.tar.xz"{,.asc} )-sha256sums=('0d2b548d1b732d1ae21cfefacc204a2c8dabada80ea1edfbd528bfb73b9d2d27'+sha256sums=('0cd46a8f3a2b9b63c35c6e6f42a6c2989183ef3b3d1499ee92b4876db35e6fe9' 'SKIP') validpgpkeys=('453B65310595562855471199CA68BE8010084C9C') # Jiří Denemark <jdenemar@redhat.com> Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 15:12:23 | Medium | 1 |
| 2026-06-19 19:07:35 | Clean | 2 |
| 2026-06-18 16:11:54 | Medium | 1 |