linux-libre-docs
LOW
maintainer dbermond
41 votes
base
linux-libre
scanned 2026-10-02 00:00:32.890515
Why flagged
The package builds Linux Libre from source hosted on its official project domain (linux-libre.fsfla.org), which is legitimate despite not being on a standard host whitelist; the downloaded content is source code and patches, not executables, and the build process is transparent and follows standard kernel compilation practices.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds Linux Libre from source hosted on its official project domain (linux-libre.fsfla.org), which is legitimate despite not being on a standard host whitelist; the downloaded content is source code and patches, not executables, and the build process is transparent and follows standard kernel compilation practices.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:42
source=("https://linux-libre.fsfla.org/pub/linux-libre/releases/${_basever}-gnu/linux-libre-${_basever}-gnu.tar.lz"{,.sign} -
PKGBUILD:44
'https://repo.parabola.nu/other/linux-libre/logos/logo_linux_'{clut224.ppm,vga16.ppm,mono.pbm}{,.sig})
PKGBUILD
2 offending line(s) highlighted
1
# Maintainer : Daniel Bermond <dbermond@archlinux.org>
2
# Contributor: Jonas Heinrich <onny@project-insanity.org>
3
# Contributor: André Silva <emulatorman@riseup.net>
4
# Contributor: Márcio Silva <coadde@riseup.net>
5
# Contributor (Parabola): Nicolás Reynolds <fauno@kiwwwi.com.ar>
6
# Contributor (Parabola): Sorin-Mihai Vârgolici <smv@yobicore.org>
7
# Contributor (Parabola): Michał Masłowski <mtjm@mtjm.eu>
8
# Contributor (Parabola): Luke Shumaker <lukeshu@sbcglobal.net>
9
# Contributor (Parabola): Luke R. <g4jc@openmailbox.org>
10
11
pkgbase=linux-libre
12
pkgver=7.2.7
13
pkgrel=1
14
pkgdesc='Linux Libre'
15
url='https://linux-libre.fsfla.org/'
16
arch=(x86_64)
17
license=(GPL-2.0-only)
18
makedepends=(
19
bc
20
cpio
21
gettext
22
libelf
23
pahole
24
perl
25
python
26
rust
27
rust-bindgen
28
rust-src
29
tar
30
xz
31
32
# htmldocs
33
graphviz
34
imagemagick
35
python-sphinx
36
python-yaml
37
texlive-latexextra
38
)
39
options=('!debug' '!strip')
40
_basever="$({ grep -Eq '[0-9]\.[0-9]+\.[0-9]+' <<< "$pkgver" && printf '%s' "${pkgver%.*}"; } || printf '%s' "$pkgver")"
41
_srcname="linux-${_basever}"
42
source=("https://linux-libre.fsfla.org/pub/linux-libre/releases/${_basever}-gnu/linux-libre-${_basever}-gnu.tar.lz"{,.sign}
43
"https://linux-libre.fsfla.org/pub/linux-libre/releases/${pkgver}-gnu/patch-${_basever}-gnu-${pkgver}-gnu.bz2"{,.sign}
44
'https://repo.parabola.nu/other/linux-libre/logos/logo_linux_'{clut224.ppm,vga16.ppm,mono.pbm}{,.sig})
45
source_x86_64=('config.x86_64')
46
sha256sums=('235b6a5e23a8beadd6a35c28a92e59e04075cdbbdfa234ac84408706b8662638'
47
'SKIP'
48
'2e087c2bfa5f5a389df8ec24768ae6ceb34ba77e624eb5fb799720e845deffec'
49
'SKIP'
50
'bfd4a7f61febe63c880534dcb7c31c5b932dde6acf991810b41a939a93535494'
51
'SKIP'
52
'6de8a8319271809ffdb072b68d53d155eef12438e6d04ff06a5a4db82c34fa8a'
53
'SKIP'
54
'13bd7a8d9ed6b6bc971e4cd162262c5a20448a83796af39ce394d827b0e5de74'
55
'SKIP')
56
sha256sums_x86_64=('44dcf7f2f45cc69423e85f0079acf60216cc4af5068a5e5cd1fb0782c108d78b')
57
b2sums=('2009ed4bec5643a4166790cf98cee098fc092732c41b8e8f356c02b0addb5a35300bdc0f5db9cbd2f96b45100653b3f18bc299f6b1d5524d5b15347efa57ff43'
58
'SKIP'
59
'9b108543d67b8c1e0651d57dadaf7671c013b3afbbcb8f545911dc8854f2343d3d4417c7e7e55a9e0c0ddeb68c66b8230e29861dc3171b9f4f346b4e9a470883'
60
'SKIP'
61
'73fee2ae5cb1ffd3e6584e56da86a8b1ff6c713aae54d77c0dab113890fc673dc5f300eb9ed93fb367b045ece8fa80304ff277fe61665eccf7b7ce24f0c045eb'
62
'SKIP'
63
'd02a1153a4285b32c774dca4560fe37907ccf30b8e487a681b717ed95ae9bed5988875c0a118938e5885ae9d2857e53a6f216b732b6fa3368e3c5fe08c86382c'
64
'SKIP'
65
'580911af9431c066bbc072fd22d5e2ef65f12d8358cec5ff5a4f1b7deebb86cef6b5c1ad631f42350af72c51d44d2093c71f761234fb224a8b9dbb3b64b8201d'
66
'SKIP')
67
b2sums_x86_64=('38da8371c1c6f236a9f3b2431801e3c8060d2e83dcda68f0b1383e156cf4f474533c90a582155846419ffb6761a9a7afb483fa42625800b3006d26949dac748a')
68
validpgpkeys=('474402C8C582DAFBE389C427BCB7CF877E7D47A7' # Alexandre Oliva
69
'6DB9C4B4F0D8C0DC432CF6E4227CA7C556B2BA78') # David P.
70
71
export KBUILD_BUILD_HOST=archlinux
72
export KBUILD_BUILD_USER=$pkgbase
73
export KBUILD_BUILD_TIMESTAMP="$(date -Ru${SOURCE_DATE_EPOCH:+d @$SOURCE_DATE_EPOCH})"
74
75
prepare() {
76
cd "$_srcname"
77
78
# freedo boot logo
79
install -m644 -t drivers/video/logo ../logo_linux_{clut224.ppm,vga16.ppm,mono.pbm}
80
81
echo "Setting version..."
82
echo "-$pkgrel" > localversion.10-pkgrel
83
echo "${pkgbase#linux}" > localversion.20-pkgname
84
sed -i 's|^-libre||' localversion.20-pkgname # minimize diff
85
86
local _src
87
for _src in "${source[@]}"
88
do
89
_src="${_src%%::*}"
90
_src="${_src##*/}"
91
_src="${_src%*.bz2}"
92
[[ "$_src" = *.patch ]] || { [[ "$_src" = patch-* ]] && [[ "$_src" != *.sign ]]; } || continue
93
echo "Applying patch $_src..."
94
patch -Np1 < "../$_src"
95
done
96
97
echo "Setting config..."
98
cp "../config.${CARCH}" .config
99
make olddefconfig
100
diff -u "../config.${CARCH}" .config || :
101
102
make -s kernelrelease > version
103
echo "Prepared $pkgbase version $(<version)"
104
}
105
106
build() {
107
make -C "$_srcname" htmldocs SPHINXOPTS='-QT' all
108
make -C "${_srcname}/tools/bpf/bpftool" vmlinux.h feature-clang-bpf-co-re='1'
109
}
110
111
_package() {
112
pkgdesc="The $pkgdesc kernel and modules"
113
depends=(
114
coreutils
115
initramfs
116
kmod
117
)
118
optdepends=(
119
"${pkgbase}-headers: headers and scripts for building modules"
120
'linux-firmware: firmware images needed for some devices'
121
'scx-scheds: to use sched-ext schedulers'
122
'wireless-regdb: to set the correct wireless channels of your country'
123
)
124
provides=(
125
KSMBD-MODULE
126
NTSYNC-MODULE
127
VIRTUALBOX-GUEST-MODULES
128
WIREGUARD-MODULE
129
)
130
replaces=(
131
virtualbox-guest-modules-arch
132
wireguard-arch
133
)
134
135
cd "$_srcname"
136
local _modulesdir="$pkgdir/usr/lib/modules/$(<version)"
137
138
echo "Installing boot image..."
139
# systemd expects to find the kernel here to allow hibernation
140
# https://github.com/systemd/systemd/commit/edda44605f06a41fb86b7ab8128dcf99161d2344
141
install -Dm644 "$(make -s image_name)" "$_modulesdir/vmlinuz"
142
143
# Used by mkinitcpio to name the kernel
144
echo "$pkgbase" | install -Dm644 /dev/stdin "$_modulesdir/pkgbase"
145
146
echo "Installing modules..."
147
ZSTD_CLEVEL=19 make INSTALL_MOD_PATH="$pkgdir/usr" INSTALL_MOD_STRIP=1 \
148
DEPMOD=/doesnt/exist modules_install # Suppress depmod
149
150
# remove build link
151
rm "$_modulesdir"/build
152
}
153
154
_package-headers() {
155
pkgdesc="Headers and scripts for building modules for the $pkgdesc kernel"
156
depends=(pahole)
157
provides=(LINUX-HEADERS)
158
159
cd "$_srcname"
160
local _builddir="$pkgdir/usr/lib/modules/$(<version)/build"
161
162
local _karch
163
case "$CARCH" in
164
x86_64) _karch='x86' ;;
165
*) echo "Unknown CARCH ${CARCH}"; exit 1 ;;
166
esac
167
168
echo "Installing build files..."
169
install -Dt "$_builddir" -m644 .config Makefile Module.symvers System.map \
170
localversion.* version vmlinux tools/bpf/bpftool/vmlinux.h
171
install -Dt "$_builddir/kernel" -m644 kernel/Makefile
172
install -Dt "$_builddir/arch/${_karch}" -m644 "arch/${_karch}/Makefile"
173
cp -t "$_builddir" -a scripts
174
ln -srt "$_builddir" "$_builddir/scripts/gdb/vmlinux-gdb.py"
175
176
if [[ "$(scripts/config -s CONFIG_HAVE_STACK_VALIDATION)" = 'y' ]]; then
177
install -Dt "${_builddir}/tools/objtool" tools/objtool/objtool
178
fi
179
180
if [[ "$(scripts/config -s CONFIG_DEBUG_INFO_BTF_MODULES)" = 'y' ]]; then
181
install -Dt "${_builddir}/tools/bpf/resolve_btfids" tools/bpf/resolve_btfids/resolve_btfids
182
fi
183
184
echo "Installing headers..."
185
cp -t "$_builddir" -a include
186
cp -t "$_builddir/arch/${_karch}" -a "arch/${_karch}/include"
187
install -Dt "$_builddir/arch/${_karch}/kernel" -m644 "arch/${_karch}/kernel/asm-offsets.s"
188
189
install -Dt "$_builddir/drivers/md" -m644 drivers/md/*.h
190
install -Dt "$_builddir/net/mac80211" -m644 net/mac80211/*.h
191
192
# https://bugs.archlinux.org/task/13146
193
install -Dt "$_builddir/drivers/media/i2c" -m644 drivers/media/i2c/msp3400-driver.h
194
195
# https://bugs.archlinux.org/task/20402
196
install -Dt "$_builddir/drivers/media/usb/dvb-usb" -m644 drivers/media/usb/dvb-usb/*.h
197
install -Dt "$_builddir/drivers/media/dvb-frontends" -m644 drivers/media/dvb-frontends/*.h
198
install -Dt "$_builddir/drivers/media/tuners" -m644 drivers/media/tuners/*.h
199
200
# https://bugs.archlinux.org/task/71392
201
install -Dt "$_builddir/drivers/iio/common/hid-sensors" -m644 drivers/iio/common/hid-sensors/*.h
202
203
echo "Installing KConfig files..."
204
find . -name 'Kconfig*' -exec install -Dm644 {} "$_builddir/{}" \;
205
206
echo "Installing Rust files..."
207
if [[ "$(scripts/config -s CONFIG_RUST)" = 'y' ]]; then
208
install -Dt "${_builddir}/rust" -m644 rust/*.rmeta
209
install -Dt "${_builddir}/rust" rust/*.so
210
fi
211
212
echo "Installing unstripped VDSO..."
213
make INSTALL_MOD_PATH="${pkgdir}/usr" vdso_install \
214
link= # Suppress build-id symlinks
215
216
echo "Removing unneeded architectures..."
217
local arch
218
for arch in "$_builddir"/arch/*/; do
219
[[ $arch = */"${_karch}/" ]] && continue
220
echo "Removing $(basename "$arch")"
221
rm -r "$arch"
222
done
223
224
echo "Removing documentation..."
225
rm -r "$_builddir/Documentation"
226
227
echo "Removing broken symlinks..."
228
find -L "$_builddir" -type l -printf 'Removing %P\n' -delete
229
230
echo "Removing loose objects..."
231
find "$_builddir" -type f -name '*.o' -printf 'Removing %P\n' -delete
232
233
echo "Stripping build tools..."
234
local file
235
while read -rd '' file; do
236
case "$(file -Sib "$file")" in
237
application/x-sharedlib\;*) # Libraries (.so)
238
strip -v $STRIP_SHARED "$file" ;;
239
application/x-archive\;*) # Libraries (.a)
240
strip -v $STRIP_STATIC "$file" ;;
241
application/x-executable\;*) # Binaries
242
strip -v $STRIP_BINARIES "$file" ;;
243
application/x-pie-executable\;*) # Relocatable binaries
244
strip -v $STRIP_SHARED "$file" ;;
245
esac
246
done < <(find "$_builddir" -type f -perm -u+x ! -name vmlinux -print0)
247
248
echo "Stripping vmlinux..."
249
strip -v $STRIP_STATIC "$_builddir/vmlinux"
250
251
echo "Adding symlink..."
252
mkdir -p "$pkgdir/usr/src"
253
ln -sr "$_builddir" "$pkgdir/usr/src/$pkgbase"
254
}
255
256
_package-docs() {
257
pkgdesc="Documentation for the $pkgdesc kernel"
258
259
cd "$_srcname"
260
local _builddir="$pkgdir/usr/lib/modules/$(<version)/build"
261
262
echo "Installing documentation..."
263
local src dst
264
while read -rd '' src; do
265
dst="${src#Documentation/}"
266
dst="$_builddir/Documentation/${dst#output/}"
267
install -Dm644 "$src" "$dst"
268
done < <(find Documentation -name '.*' -prune -o ! -type d -print0)
269
270
echo "Adding symlink..."
271
mkdir -p "$pkgdir/usr/share/doc"
272
ln -sr "$_builddir/Documentation" "$pkgdir/usr/share/doc/$pkgbase"
273
}
274
275
pkgname=(
276
"$pkgbase"
277
"$pkgbase-headers"
278
"$pkgbase-docs"
279
)
280
for _p in "${pkgname[@]}"; do
281
eval "package_$_p() {
282
$(declare -f "_package${_p#$pkgbase}")
283
_package${_p#$pkgbase}
284
}"
285
done
286
Changes since previous scan
--- PKGBUILD @ 2026-09-26 00:12+++ PKGBUILD @ 2026-10-02 00:00@@ -9,7 +9,7 @@ # Contributor (Parabola): Luke R. <g4jc@openmailbox.org> pkgbase=linux-libre-pkgver=7.2.6+pkgver=7.2.7 pkgrel=1 pkgdesc='Linux Libre' url='https://linux-libre.fsfla.org/'@@ -45,7 +45,7 @@ source_x86_64=('config.x86_64') sha256sums=('235b6a5e23a8beadd6a35c28a92e59e04075cdbbdfa234ac84408706b8662638' 'SKIP'- '7439a0ecffa8633265a1df083781adddb99dcc657cebcffee88f033b7ee1653d'+ '2e087c2bfa5f5a389df8ec24768ae6ceb34ba77e624eb5fb799720e845deffec' 'SKIP' 'bfd4a7f61febe63c880534dcb7c31c5b932dde6acf991810b41a939a93535494' 'SKIP'@@ -53,10 +53,10 @@ 'SKIP' '13bd7a8d9ed6b6bc971e4cd162262c5a20448a83796af39ce394d827b0e5de74' 'SKIP')-sha256sums_x86_64=('290990d223b96346bd5d8e049552d7601d2dd6257fc8c647bf15775e215d9f66')+sha256sums_x86_64=('44dcf7f2f45cc69423e85f0079acf60216cc4af5068a5e5cd1fb0782c108d78b') b2sums=('2009ed4bec5643a4166790cf98cee098fc092732c41b8e8f356c02b0addb5a35300bdc0f5db9cbd2f96b45100653b3f18bc299f6b1d5524d5b15347efa57ff43' 'SKIP'- '573c84c78c13291a81e9f9824e93bb8544b3f3dd892e6248280cae77882605b1c4fc991d0d486e64c147c4dd551c35f691d10c0130623304a585973d36abb9c0'+ '9b108543d67b8c1e0651d57dadaf7671c013b3afbbcb8f545911dc8854f2343d3d4417c7e7e55a9e0c0ddeb68c66b8230e29861dc3171b9f4f346b4e9a470883' 'SKIP' '73fee2ae5cb1ffd3e6584e56da86a8b1ff6c713aae54d77c0dab113890fc673dc5f300eb9ed93fb367b045ece8fa80304ff277fe61665eccf7b7ce24f0c045eb' 'SKIP'@@ -64,7 +64,7 @@ 'SKIP' '580911af9431c066bbc072fd22d5e2ef65f12d8358cec5ff5a4f1b7deebb86cef6b5c1ad631f42350af72c51d44d2093c71f761234fb224a8b9dbb3b64b8201d' 'SKIP')-b2sums_x86_64=('c036e526b7ee522888525aad79590e2c658db4048e76711f28d7d57c2f3fe21dfc603afabbdfa42aca52885e55f6abdf6efae6611eb2ffa8a998d7c091f8f48a')+b2sums_x86_64=('38da8371c1c6f236a9f3b2431801e3c8060d2e83dcda68f0b1383e156cf4f474533c90a582155846419ffb6761a9a7afb483fa42625800b3006d26949dac748a') validpgpkeys=('474402C8C582DAFBE389C427BCB7CF877E7D47A7' # Alexandre Oliva '6DB9C4B4F0D8C0DC432CF6E4227CA7C556B2BA78') # David P. Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |
| 2026-09-30 00:20:07 | Low | 2 |
| 2026-09-29 00:07:46 | Low | 2 |
| 2026-09-28 00:28:32 | Low | 2 |
| 2026-09-27 00:07:07 | Low | 2 |
| 2026-09-26 01:13:50 | Medium | 1 |
| 2026-09-26 00:12:15 | Low | 2 |
| 2026-09-25 00:03:36 | Low | 2 |
| 2026-09-24 00:24:14 | Low | 2 |
| 2026-09-23 00:28:13 | Low | 2 |
| 2026-09-22 00:15:14 | Low | 2 |
| 2026-09-21 00:26:32 | Low | 2 |
| 2026-09-20 00:25:31 | Low | 2 |
| 2026-09-19 15:30:39 | Medium | 1 |
| 2026-09-19 00:25:36 | Low | 2 |
| 2026-09-18 00:17:11 | Low | 2 |
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |