linux-lqxcjk-headers
LOW
maintainer eeeeei
1 votes
base
linux-lqxcjk
scanned 2026-10-18 00:06:55.117981
Why flagged
The flagged non-standard host (gh.jasonzeng.dev) is a proxy for GitHub content, used to apply CJK font patches; the patches are plain text, not executed code, and the main kernel source is from trusted hosts (kernel.org, GitHub, GitLab), making the risk low.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The flagged non-standard host (gh.jasonzeng.dev) is a proxy for GitHub content, used to apply CJK font patches; the patches are plain text, not executed code, and the main kernel source is from trusted hosts (kernel.org, GitHub, GitLab), making the risk low.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:103
"0001-cjktty.patch::https://gh.jasonzeng.dev/https://github.com/bigshans/cjktty-patches/raw/master/v7.x/cjktty-7.2.patch"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Piotr Gorski <lucjan.lucjanov@gmail.com> PGP-Key: BDB26C5A
2
# Contributor: shivik <> PGP-Key: 761E423C
3
# Contributor: Michael Duell <mail@akurei.me> PGP-Key: 6EE23EBE
4
# A special thanks to Steven Barrett for very important suggestions
5
# Contributor: Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>
6
# Contributor: Tobias Powalowski <tpowa@archlinux.org>
7
# Contributor: Thomas Baechler <thomas@archlinux.org>
8
9
### BUILD OPTIONS
10
# Set these variables to ANYTHING that is not null to enable them
11
12
### Tweak kernel options prior to a build via nconfig
13
_makenconfig=
14
15
### Tweak kernel options prior to a build via menuconfig
16
_makemenuconfig=
17
18
### Tweak kernel options prior to a build via xconfig
19
_makexconfig=
20
21
### Tweak kernel options prior to a build via gconfig
22
_makegconfig=
23
24
# Compile ONLY used modules to VASTLY reduce the number of modules built
25
# and the build time.
26
#
27
# To keep track of which modules are needed for your specific system/hardware,
28
# give module_db script a try: https://aur.archlinux.org/packages/modprobed-db
29
# This PKGBUILD read the database kept if it exists
30
#
31
# More at this wiki page ---> https://wiki.archlinux.org/index.php/Modprobed-db
32
_localmodcfg=
33
34
# Use the current kernel's .config file
35
# Enabling this option will use the .config of the RUNNING kernel rather than
36
# the ARCH defaults. Useful when the package gets updated and you already went
37
# through the trouble of customizing your config options. NOT recommended when
38
# a new kernel is released, but again, convenient for package bumps.
39
_use_current=
40
41
### Selecting the CPU scheduler
42
# ATTENTION - one of three predefined values should be selected!
43
# 'bmq' - select 'BitMap Queue CPU scheduler'
44
# 'pds' - select 'Priority and Deadline based Skip list multiple queue CPU scheduler'
45
# 'none' - select 'Completely Fair Scheduler'
46
_projectc='bmq'
47
48
### Enable htmldocs (increases compile time)
49
_htmldocs_enable=
50
51
### Do not edit below this line unless you know what you're doing
52
53
# pkgname=('linux-lqxcjk' 'linux-lqxcjk-headers' 'linux-lqxcjk-docs')
54
_major=7.2
55
_srcname=linux-${_major}
56
_lqxpatchname=liquorix-package
57
_lqxpatchrel=16
58
_lqxpatchver=${_lqxpatchname}-${_major}-${_lqxpatchrel}
59
pkgbase=linux-lqxcjk
60
pkgver=7.2.9.lqx2
61
pkgrel=1
62
pkgdesc='Linux Liquorix (with cjktty patch)'
63
url='https://liquorix.net/'
64
arch=(x86_64)
65
license=(GPL-2.0-only)
66
makedepends=(
67
bc
68
cpio
69
gettext
70
git
71
libelf
72
pahole
73
perl
74
python
75
rust
76
rust-src
77
rust-bindgen
78
tar
79
xz
80
zstd
81
)
82
83
if [ -n "$_htmldocs_enable" ]; then
84
makedepends+=(
85
graphviz
86
imagemagick
87
python-sphinx
88
texlive-latexextra
89
xmlto
90
)
91
fi
92
93
options=(
94
!debug
95
!strip
96
)
97
#_lucjanpath="https://raw.githubusercontent.com/sirlucjan/kernel-patches/master/${_major}"
98
_lucjanpath="https://gitlab.com/sirlucjan/kernel-patches/raw/master/${_major}"
99
100
source=("https://cdn.kernel.org/pub/linux/kernel/v7.x/${_srcname}.tar.xz"
101
"https://cdn.kernel.org/pub/linux/kernel/v7.x/${_srcname}.tar.sign"
102
"https://github.com/damentz/${_lqxpatchname}/archive/${_major}-${_lqxpatchrel}.tar.gz"
103
"0001-cjktty.patch::https://gh.jasonzeng.dev/https://github.com/bigshans/cjktty-patches/raw/master/v7.x/cjktty-7.2.patch"
104
"0002-cjktty-32.patch::https://gh.jasonzeng.dev/https://github.com/bigshans/cjktty-patches/raw/master/cjktty-add-cjk32x32-font-data.patch")
105
validpgpkeys=(
106
'ABAF11C65A2970B130ABE3C479BE3E4300411886' # Linus Torvalds
107
'647F28654894E3BD457199BE38DBBDC86092693E' # Greg Kroah-Hartman
108
)
109
sha512sums=('47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1'
110
'SKIP'
111
'72db225f1f0efa39f607022cbec2551d3d2930b8dc61c7999200216b3a23c46a80ad487bba8a3e90f6721b5c95b777a7f61ea8982a1843c3cd4caf4d84d71d67'
112
'770b55f7a84455f2c1b61837c2e4fcda77808f0b5a9614f8621991d6f7884c67225a268fa88dd8ce9908e55a2c8f20e605f64c05b5074854a39ec130e7e8d59d'
113
'c4a443b901030097623d191731a56c87cff2ba3422385d6d7b624387ffa4f659abde07c8360f07e099cd678f8c9b542d7199e3a05febc4c7deaba9e950012cb5')
114
115
116
117
export KBUILD_BUILD_HOST=archlinux
118
export KBUILD_BUILD_USER=$pkgbase
119
export KBUILD_BUILD_TIMESTAMP="$(date -Ru${SOURCE_DATE_EPOCH:+d @$SOURCE_DATE_EPOCH})"
120
121
prepare() {
122
cd $_srcname
123
124
### Set package version variables
125
_abiname="$(cat ${srcdir}/${_lqxpatchver}/linux-liquorix/debian/config/defines | grep 'abiname:' | sed -r 's/abiname:\s*//')"
126
_minor="$(echo "$_abiname" | cut -f1 -d -)"
127
_patchrel="$(echo "$_abiname" | cut -f2 -d -)"
128
129
### Add Liquorix patches
130
local _patchfolder="${srcdir}/${_lqxpatchver}/linux-liquorix/debian/patches"
131
grep -P '^(zen|lqx)/' "$_patchfolder/series" | while IFS= read -r line
132
do
133
echo "Patching sources with $line"
134
patch -Np1 -i "$_patchfolder/$line"
135
done
136
137
### Setting version
138
echo "Setting version..."
139
echo "-$pkgrel" > localversion.10-pkgrel
140
echo "${pkgbase#linux}" > localversion.20-pkgname
141
142
### Patching sources
143
for p in $(find ../../ -maxdepth 1 -name '*.patch' | sort); do
144
echo "Applying patch $p..."
145
patch -Np1 -i "$p"
146
done
147
148
### Setting config
149
echo "Setting config..."
150
cat ${srcdir}/${_lqxpatchver}/linux-liquorix/debian/config/kernelarch-x86/config-arch-64 >./.config
151
# cat ${srcdir}/../.config >./.config
152
make olddefconfig
153
diff -u ${srcdir}/${_lqxpatchver}/linux-liquorix/debian/config/kernelarch-x86/config-arch-64 .config || :
154
155
### Prepared version
156
make -s kernelrelease > version
157
echo "Prepared $pkgbase version $(<version)"
158
159
### Optionally use running kernel's config
160
# code originally by nous; http://aur.archlinux.org/packages.php?ID=40191
161
if [ -n "$_use_current" ]; then
162
if [[ -s /proc/config.gz ]]; then
163
echo "Extracting config from /proc/config.gz..."
164
# modprobe configs
165
zcat /proc/config.gz > ./.config
166
else
167
warning "Your kernel was not compiled with IKCONFIG_PROC!"
168
warning "You cannot read the current config!"
169
warning "Aborting!"
170
exit
171
fi
172
fi
173
174
### Selecting the CPU scheduler
175
if [ "$_projectc" = "bmq" ]; then
176
echo "Selecting BMQ CPU scheduler..."
177
scripts/config -e CONFIG_SCHED_BMQ
178
scripts/config -d CONFIG_SCHED_PDS
179
elif [ "$_projectc" = "pds" ]; then
180
echo "Selecting PDS CPU scheduler..."
181
scripts/config -d CONFIG_SCHED_BMQ
182
scripts/config -e CONFIG_SCHED_PDS
183
elif [ "$_projectc" = "none" ]; then
184
echo "Selecting Completely Fair Scheduler..."
185
scripts/config -d CONFIG_SCHED_ALT
186
else
187
if [ -n "$_projectc" ]; then
188
error "The value $_projectc is invalid. Choose the correct one again."
189
else
190
error "The value is empty. Choose the correct one again."
191
fi
192
error "Selecting the CPU scheduler failed!"
193
exit
194
fi
195
196
### Optionally load needed modules for the make localmodconfig
197
# See https://aur.archlinux.org/packages/modprobed-db
198
if [ -n "$_localmodcfg" ]; then
199
if [ -f $HOME/.local/share/modprobed-db/modprobed.db ]; then
200
echo "Running Steven Rostedt's make localmodconfig now"
201
make LSMOD=$HOME/.local/share/modprobed-db/modprobed.db localmodconfig
202
else
203
echo "No modprobed.db data found"
204
exit
205
fi
206
fi
207
208
## Use DWARF5 debug info for Arch
209
echo "Upgrading debug info from toolchain default to DWARF v5..."
210
scripts/config -e CONFIG_DEBUG_INFO_DWARF5
211
212
## Use Arch Wiki TOMOYO configuration: https://wiki.archlinux.org/title/TOMOYO_Linux#Installation_2
213
echo "Replacing Debian TOMOYO configuration with upstream Arch Linux..."
214
scripts/config --set-str CONFIG_SECURITY_TOMOYO_POLICY_LOADER "/usr/bin/tomoyo-init"
215
scripts/config --set-str CONFIG_SECURITY_TOMOYO_ACTIVATION_TRIGGER "/usr/lib/systemd/systemd"
216
217
## Add landlock for pacman sandbox support
218
echo "Adding 'landlock' to CONFIG_LSM for pacman sandbox support"
219
scripts/config --set-str CONFIG_LSM "landlock,lockdown,yama,bpf"
220
221
### Running make nconfig
222
[[ -z "$_makenconfig" ]] || make nconfig
223
224
### Running make menuconfig
225
[[ -z "$_makemenuconfig" ]] || make menuconfig
226
227
### Running make xconfig
228
[[ -z "$_makexconfig" ]] || make xconfig
229
230
### Running make gconfig
231
[[ -z "$_makegconfig" ]] || make gconfig
232
233
### Save configuration for later reuse
234
cat .config > "${startdir}/config.last"
235
}
236
237
build() {
238
cd $_srcname
239
240
make all
241
if [ -n "$_htmldocs_enable" ]; then
242
make htmldocs
243
fi
244
make -C tools/bpf/bpftool vmlinux.h feature-clang-bpf-co-re=1
245
}
246
247
_package() {
248
pkgdesc="The $pkgdesc kernel and modules"
249
depends=(coreutils kmod initramfs)
250
optdepends=('wireless-regdb: to set the correct wireless channels of your country'
251
'linux-firmware: firmware images needed for some devices'
252
'sof-firmware: firmware images needed for Sound Open Firmware capable devices'
253
'modprobed-db: Keeps track of EVERY kernel module that has ever been probed - useful for those of us who make localmodconfig')
254
provides=(KSMBD-MODULE NTSYNC-MODULE VIRTUALBOX-GUEST-MODULES WIREGUARD-MODULE VHBA-MODULE)
255
install=linux-lqx.install
256
257
cd $_srcname
258
local modulesdir="$pkgdir/usr/lib/modules/$(<version)"
259
260
echo "Installing boot image..."
261
# systemd expects to find the kernel here to allow hibernation
262
# https://github.com/systemd/systemd/commit/edda44605f06a41fb86b7ab8128dcf99161d2344
263
install -Dm644 "$(make -s image_name)" "$modulesdir/vmlinuz"
264
265
# Used by mkinitcpio to name the kernel
266
echo "$pkgbase" | install -Dm644 /dev/stdin "$modulesdir/pkgbase"
267
268
echo "Installing modules..."
269
make INSTALL_MOD_PATH="$pkgdir/usr" INSTALL_MOD_STRIP=1 \
270
DEPMOD=/doesnt/exist modules_install # Suppress depmod
271
272
# remove build link
273
rm "$modulesdir"/build
274
}
275
276
_package-headers() {
277
pkgdesc="Headers and scripts for building modules for the $pkgdesc kernel"
278
depends=("$pkgbase" 'pahole')
279
provides=(LINUX-HEADERS)
280
281
cd $_srcname
282
local builddir="$pkgdir/usr/lib/modules/$(<version)/build"
283
284
echo "Installing build files..."
285
install -Dt "$builddir" -m644 .config Makefile Module.symvers System.map \
286
localversion.* version vmlinux tools/bpf/bpftool/vmlinux.h
287
install -Dt "$builddir/kernel" -m644 kernel/Makefile
288
install -Dt "$builddir/arch/x86" -m644 arch/x86/Makefile
289
cp -t "$builddir" -a scripts
290
ln -srt "$builddir" "$builddir/scripts/gdb/vmlinux-gdb.py"
291
292
# required when STACK_VALIDATION is enabled
293
install -Dt "$builddir/tools/objtool" tools/objtool/objtool
294
295
# required when DEBUG_INFO_BTF_MODULES is enabled
296
install -Dt "$builddir/tools/bpf/resolve_btfids" tools/bpf/resolve_btfids/resolve_btfids \
297
|| true
298
299
echo "Installing headers..."
300
cp -t "$builddir" -a include
301
cp -t "$builddir/arch/x86" -a arch/x86/include
302
install -Dt "$builddir/arch/x86/kernel" -m644 arch/x86/kernel/asm-offsets.s
303
304
install -Dt "$builddir/drivers/md" -m644 drivers/md/*.h
305
install -Dt "$builddir/net/mac80211" -m644 net/mac80211/*.h
306
307
# https://bugs.archlinux.org/task/13146
308
install -Dt "$builddir/drivers/media/i2c" -m644 drivers/media/i2c/msp3400-driver.h
309
310
# https://bugs.archlinux.org/task/20402
311
install -Dt "$builddir/drivers/media/usb/dvb-usb" -m644 drivers/media/usb/dvb-usb/*.h
312
install -Dt "$builddir/drivers/media/dvb-frontends" -m644 drivers/media/dvb-frontends/*.h
313
install -Dt "$builddir/drivers/media/tuners" -m644 drivers/media/tuners/*.h
314
315
# https://bugs.archlinux.org/task/71392
316
install -Dt "$builddir/drivers/iio/common/hid-sensors" -m644 drivers/iio/common/hid-sensors/*.h
317
318
echo "Installing KConfig files..."
319
find . -name 'Kconfig*' -exec install -Dm644 {} "$builddir/{}" \;
320
321
echo "Installing Rust files... (if they exist)"
322
install -Dt "$builddir/rust" -m644 rust/*.rmeta || true
323
install -Dt "$builddir/rust" rust/*.so || true
324
325
echo "Installing unstripped VDSO..."
326
make INSTALL_MOD_PATH="$pkgdir/usr" vdso_install \
327
link= # Suppress build-id symlinks
328
329
echo "Removing unneeded architectures..."
330
local arch
331
for arch in "$builddir"/arch/*/; do
332
[[ $arch = */x86/ ]] && continue
333
echo "Removing $(basename "$arch")"
334
rm -r "$arch"
335
done
336
337
echo "Removing documentation..."
338
rm -r "$builddir/Documentation"
339
340
echo "Removing broken symlinks..."
341
find -L "$builddir" -type l -printf 'Removing %P\n' -delete
342
343
echo "Removing loose objects..."
344
find "$builddir" -type f -name '*.o' -printf 'Removing %P\n' -delete
345
346
echo "Stripping build tools..."
347
local file
348
while read -rd '' file; do
349
case "$(file -Sib "$file")" in
350
application/x-sharedlib\;*) # Libraries (.so)
351
strip -v $STRIP_SHARED "$file" ;;
352
application/x-archive\;*) # Libraries (.a)
353
strip -v $STRIP_STATIC "$file" ;;
354
application/x-executable\;*) # Binaries
355
strip -v $STRIP_BINARIES "$file" ;;
356
application/x-pie-executable\;*) # Relocatable binaries
357
strip -v $STRIP_SHARED "$file" ;;
358
esac
359
done < <(find "$builddir" -type f -perm -u+x ! -name vmlinux -print0)
360
361
echo "Stripping vmlinux..."
362
strip -v $STRIP_STATIC "$builddir/vmlinux"
363
364
echo "Adding symlink..."
365
mkdir -p "$pkgdir/usr/src"
366
ln -sr "$builddir" "$pkgdir/usr/src/$pkgbase"
367
}
368
369
_package-docs() {
370
pkgdesc="Documentation for the $pkgdesc kernel"
371
depends=("$pkgbase")
372
373
cd $_srcname
374
local builddir="$pkgdir/usr/lib/modules/$(<version)/build"
375
376
echo "Installing documentation..."
377
local src dst
378
while read -rd '' src; do
379
dst="${src#Documentation/}"
380
dst="$builddir/Documentation/${dst#output/}"
381
install -Dm644 "$src" "$dst"
382
done < <(find Documentation -name '.*' -prune -o ! -type d -print0)
383
384
echo "Adding symlink..."
385
mkdir -p "$pkgdir/usr/share/doc"
386
ln -sr "$builddir/Documentation" "$pkgdir/usr/share/doc/$pkgbase"
387
}
388
389
pkgname=(
390
"$pkgbase"
391
"$pkgbase-headers"
392
"$pkgbase-docs"
393
)
394
for _p in "${pkgname[@]}"; do
395
eval "package_$_p() {
396
$(declare -f "_package${_p#$pkgbase}")
397
_package${_p#$pkgbase}
398
}"
399
done
400
401
# vim:set ts=8 sts=2 sw=2 et:
402
Changes since previous scan
--- PKGBUILD @ 2026-10-10 00:11+++ PKGBUILD @ 2026-10-18 00:06@@ -54,10 +54,10 @@ _major=7.2 _srcname=linux-${_major} _lqxpatchname=liquorix-package-_lqxpatchrel=12+_lqxpatchrel=16 _lqxpatchver=${_lqxpatchname}-${_major}-${_lqxpatchrel} pkgbase=linux-lqxcjk-pkgver=7.2.7.lqx1+pkgver=7.2.9.lqx2 pkgrel=1 pkgdesc='Linux Liquorix (with cjktty patch)' url='https://liquorix.net/'@@ -108,7 +108,7 @@ ) sha512sums=('47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1' 'SKIP'- 'f35c762fc8d04d6a6ac1fa3064c5c8f02c7a6c76cc435d2b734fe19320413d2bffc63a2ce05270da200435d2b261b747f91c2435f704819a464057bc8457e33d'+ '72db225f1f0efa39f607022cbec2551d3d2930b8dc61c7999200216b3a23c46a80ad487bba8a3e90f6721b5c95b777a7f61ea8982a1843c3cd4caf4d84d71d67' '770b55f7a84455f2c1b61837c2e4fcda77808f0b5a9614f8621991d6f7884c67225a268fa88dd8ce9908e55a2c8f20e605f64c05b5074854a39ec130e7e8d59d' 'c4a443b901030097623d191731a56c87cff2ba3422385d6d7b624387ffa4f659abde07c8360f07e099cd678f8c9b542d7199e3a05febc4c7deaba9e950012cb5') Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 00:26:05 | Low | 2 |
| 2026-10-10 22:16:18 | Medium | 1 |
| 2026-10-10 00:11:52 | Low | 2 |
| 2026-10-09 00:05:33 | Low | 2 |
| 2026-10-08 00:28:03 | Low | 2 |
| 2026-10-07 00:21:34 | Low | 2 |
| 2026-10-06 00:13:36 | Low | 2 |
| 2026-10-05 23:40:58 | Medium | 1 |
| 2026-10-05 00:08:03 | Low | 2 |
| 2026-10-04 00:18:08 | Low | 2 |
| 2026-10-03 00:23:04 | Low | 2 |
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |