musa-userspace

maintainer orphaned · 0 votes · base musa · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a source archive from the official MooreThreads developer site, which is plausibly the project's own release infrastructure; despite the non-whitelisted host, this is a normal AUR packaging pattern for building from official vendor sources.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source archive from the official MooreThreads developer site, which is plausibly the project's own release infrastructure; despite the non-whitelisted host, this is a normal AUR packaging pattern for building from official vendor sources.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:39 "musasdk_v4.0.1_Intel_Ubuntu.zip::https://developer.mthreads.com/sdk/download/musa?equipment=&os=&driverVersion=&version="

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Yun Dou <dixyes@gmail.com>
    
      2
    
      3pkgbase=musa
    
      4pkgname=(
    
      5    mtgpu-dkms
    
      6    musa-userspace
    
      7)
    
      8
    
      9pkgver=4.0.1
    
      10_mtgpu_version=3.0.0
    
      11pkgrel=1
    
      12
    
      13pkgdesc='MooreThreads MUSA'
    
      14arch=('x86_64')
    
      15url='https://developer.mthreads.com/sdk/download/musa'
    
      16license=('custom')
    
      17options=('!strip')
    
      18
    
      19makedepends=(
    
      20    'binutils'
    
      21)
    
      22
    
      23# 早期不区分
    
      24# 2.1.0 - rc3.1.1期间userspace区分quyuan和chunxiao
    
      25# 4.0.1不区分
    
      26_mtgpu_deb_name=MT_Linux_Driver_3.0.0/musa_3.0.0_amd64.deb
    
      27_mtgpu_dkms_dirname=mtgpu-3.0.0
    
      28_mudnn_tar_name=muDNN_2.8.1/mudnn_2.8.1.tar.gz
    
      29_mudnn_component_strip=2
    
      30_mudnn_prefix=./mudnn
    
      31_mtml_deb_name=MTML_2.0.0/ee1ce2e41_mtml_2.0.0-linux-R_amd64.deb
    
      32_musa_toolkits_tar_name=MUSA_Toolkits_4.0.1/musa_toolkits_4.0.1.tar.gz
    
      33_musa_toolkits_component_strip=1
    
      34_musa_toolkits_prefix=musa_toolkits_4.0.0 # 打包仙人了属于是
    
      35
    
      36source=(
    
      37    # download it
    
      38    # https://developer.mthreads.com/sdk/download/musa?equipment=&os=&driverVersion=&version=
    
      39    "musasdk_v4.0.1_Intel_Ubuntu.zip::https://developer.mthreads.com/sdk/download/musa?equipment=&os=&driverVersion=&version="
    
      40    "00-Donot-define-os_follow_pfn-after-6.10.diff::https://github.com/dixyes/mtgpu-drv/commit/ff3466ccb9a80210234b40ebcf24c77af5675e58.diff"
    
      41    "01-Define-PCI_IRQ_LEGACY-if-not-exist.diff::https://github.com/dixyes/mtgpu-drv/commit/ab1d7dd2f766f1bf1d809907b458567c08b778cd.diff"
    
      42    "02-Use-fd_file-macro-if-exist.diff::https://github.com/dixyes/mtgpu-drv/commit/e52ca0202af67e5da5976f0dd9f5d44e6a7d3ab1.diff"
    
      43    "03-Remove-the-second-arg-of-__assign_str.diff::https://github.com/dixyes/mtgpu-drv/commit/0a30454a16830490f320d5ac2241a227cd4bf204.diff"
    
      44    "04-Add-missing-headers.diff::https://github.com/dixyes/mtgpu-drv/commit/833d80762b737c2d3dabbcc7ef0bf870a8f88995.diff"
    
      45    "05-Adopt-struct-platform_device-changes.diff::https://github.com/dixyes/mtgpu-drv/commit/14afae3e1a0f5a77cd6e250f7b70d1b861871b97.diff"
    
      46    "06-Fake-as-ubuntu.diff::https://github.com/dixyes/mtgpu-drv/commit/1509f9b50402a9532733de2b4ea9c138f5e15670.diff"
    
      47    "07-Add-FOP_UNSIGNED_OFFSET-flag.diff::https://github.com/dixyes/mtgpu-drv/commit/983a895a8af9577dd04e31758276c3ad1ec101c1.diff"
    
      48    "08-Add-lock-for-find_vma.diff::https://github.com/dixyes/mtgpu-drv/commit/2847ec7a64aad013491e4d20079b49d6f1af0b9f.diff"
    
      49    "09-Use-string-for-6.13.diff::https://github.com/dixyes/mtgpu-drv/commit/b1914a8c58590b8b29e556db01b8b4553ad19cc0.diff"
    
      50    "10-Adopt-6.14-drm-change.diff::https://github.com/dixyes/mtgpu-drv/commit/a18b13cabed1429ddac1e88143589c6edb8f6328.diff"
    
      51    "11-Adopt-6.13-__get_task_comm-change.diff::https://github.com/dixyes/mtgpu-drv/commit/7842afc22e88ff9b44a182e05acb22c0cdd172e4.diff"
    
      52    "12-Fix-6.14-function-signatures.diff::https://github.com/dixyes/mtgpu-drv/commit/472b0f3ba2650de739a78642e8654dfcabda5587.diff"
    
      53    "gcc-14-musa-header.diff"
    
      54)
    
      55sha256sums=('6c91eab385d5d439b60d82f03b0fa30a94d4fa53763399d8eec95674d4172547'
    
      56            '7c9270e0960b01de0e76a736e57b52f33c89a0fdee5ac5f086d0a4b8f657e824'
    
      57            '5011ba3e7920aba535ec82a686771fdab9faf3b0688614f3663f402382f77165'
    
      58            '717c255e716f30a35b7e53c274c7cbaf856ed8d98eae4f71fda43811d9e5503e'
    
      59            '9caf0cd1059baa1b4647cf8463bada164e0d4496b2fc980fd8dbee37a00875ca'
    
      60            'b6dde236fe3adaed6d21a12c20fd2126c6e1caed525d693bd4b8bd8b34d89564'
    
      61            'f34833b34cb682652b416b0e1af74fa2f2c19c430a8e05eb88a95d58b4aeface'
    
      62            '2aca50228ece16469613887e507db4b4f025f5cf75805ea92af414d9ddb3c35c'
    
      63            '9ee1fabfae2817307d5a4f8d94cf2a399ba51fc2a778bc6c61af918edf4e53e9'
    
      64            'f8e139d458594e3650da0a97b47bfeffc1bcb5a6d06b7c2ae92b6f065ee28441'
    
      65            'fb712890c10a96c44015614a0503035f89544807cfde930ba8d120aa3d9570cd'
    
      66            '42383e577c8e431da97ce5d038b06c8a7b68c369b781812877b1d4210ab63287'
    
      67            '1a0b6f3c119f5eeec149fe405d04317bb95aa5700300eeb974b686dabb7d0790'
    
      68            'c884b95a48cbef5d84fa257c0a3b8f85f611ee1d30b7366d1074987547701f10'
    
      69            'e32accdf1716bfb377f396f6c93bc9b5e9dea88ae31fd68180f31998e28c4fc6')
    
      70
    
      71prepare()
    
      72{
    
      73    # dkms sources and X11 things
    
      74    mkdir mtgpu
    
      75    pushd mtgpu
    
      76    {
    
      77        ar x "../${_mtgpu_deb_name}"
    
      78        rm control.tar.* debian-binary
    
      79        tar -xf data.tar.*
    
      80        rm data.tar.*
    
      81
    
      82        if [ "${_mtgpu_dkms_dirname}" != "mtgpu-${_mtgpu_version%%-*}" ]; then
    
      83            mv "usr/src/${_mtgpu_dkms_dirname}" "usr/src/mtgpu-${_mtgpu_version%%-*}"
    
      84        fi
    
      85        pushd "usr/src/mtgpu-${_mtgpu_version%%-*}"
    
      86        {
    
      87        
    
      88            for patch in "${srcdir}"/*.diff; do
    
      89                if [[ "${patch##*/}" = "gcc-14-musa-header.diff" ]]; then
    
      90                    # Skip this patch
    
      91                    continue
    
      92                fi
    
      93                patch -p1 < "${patch}"
    
      94            done
    
      95                cat > dkms.conf << EOF
    
      96MAKE="make ARCH=x86_64 KERNELVER=\$kernelver"
    
      97CLEAN="make ARCH=x86_64 clean"
    
      98BUILT_MODULE_NAME[0]="mtgpu"
    
      99DEST_MODULE_LOCATION[0]="/extra"
    
      100PACKAGE_NAME=mtgpu
    
      101PACKAGE_VERSION=${_mtgpu_version}
    
      102AUTOINSTALL="yes"
    
      103EOF
    
      104        }
    
      105        popd # "usr/src/mtgpu-${_mtgpu_version%%-*}"
    
      106    }
    
      107    popd # mtgpu
    
      108
    
      109    # mtml
    
      110    mkdir mtml
    
      111    pushd mtml
    
      112    {
    
      113        ar x "../${_mtml_deb_name}"
    
      114        rm control.tar.* debian-binary
    
      115        tar -xf data.tar.*
    
      116        rm data.tar.*
    
      117    }
    
      118    popd # mtml
    
      119
    
      120    mkdir mudnn musa_toolkits
    
      121
    
      122    if [[ -n "$_mudnn_tar_name" ]]; then
    
      123        tar -xf "$_mudnn_tar_name" -C mudnn --strip-components "${_mudnn_component_strip}" \
    
      124            "${_mudnn_prefix}/bin" \
    
      125            "${_mudnn_prefix}/lib" \
    
      126            "${_mudnn_prefix}/include" \
    
      127            "${_mudnn_prefix}/docs"
    
      128    fi
    
      129    if [[ -n "$_musa_toolkits_tar_name" ]]; then
    
      130        tar -xf "$_musa_toolkits_tar_name" -C musa_toolkits \
    
      131            --strip-components "${_musa_toolkits_component_strip}" \
    
      132            "${_musa_toolkits_prefix}" \
    
      133            --exclude="${_musa_toolkits_prefix}/install.sh" \
    
      134            --exclude="${_musa_toolkits_prefix}/version.json"
    
      135        
    
      136        pushd musa_toolkits
    
      137        {
    
      138            patch -p1 < "${srcdir}/gcc-14-musa-header.diff"
    
      139        }
    
      140        popd # musa_toolkits
    
      141    fi
    
      142}
    
      143
    
      144package_mtgpu-dkms()
    
      145{
    
      146    pkgdesc="MooreThreads mtgpu dkms driver"
    
      147    depends=("dkms")
    
      148
    
      149    pushd mtgpu
    
      150    {
    
      151        # modprobe config
    
      152        install -D -m0644 etc/modprobe.d/mtgpu.conf "${pkgdir}/etc/modprobe.d/mtgpu.conf"
    
      153
    
      154        # firmwares
    
      155        install -d -m0755 "${pkgdir}/usr/lib/firmware/mthreads"
    
      156        cp -r --no-preserve='ownership' lib "${pkgdir}/usr/"
    
      157
    
      158        # dkms sources
    
      159        install -d -m0755 "${pkgdir}/usr/src/mtgpu-${_mtgpu_version%%-*}"
    
      160        cp -dr --no-preserve='ownership' usr/src/mtgpu-${_mtgpu_version%%-*} "${pkgdir}/usr/src"
    
      161    }
    
      162    popd # mtgpu
    
      163}
    
      164
    
      165package_musa-userspace()
    
      166{
    
      167    pkgdesc="MooreThreads MUSA userspace libraries include OpenCL, Vulkan, Xorg drivers, muDNN, MTML, MUSA Toolkits"
    
      168    depends=("openssl-1.1")
    
      169    optdepends=(
    
      170        "nettle7: for X support"
    
      171        "libweston-9.so: for Wayland support"
    
      172    )
    
      173    provides=("musa-userspace")
    
      174    conflicts=("musa-userspace")
    
      175    replaces=("musa-userspace")
    
      176
    
      177    pushd mtgpu
    
      178    {
    
      179        # ldconfig
    
      180        install -d -m0755 "${pkgdir}/etc/ld.so.conf.d"
    
      181        cat > "${pkgdir}/etc/ld.so.conf.d/musa.conf" <<EOF
    
      182/usr/lib/musa
    
      183/usr/local/musa/lib
    
      184/usr/local/lib/weston
    
      185EOF
    
      186
    
      187        # config files
    
      188        # install -D -m0644 etc/OpenCL/vendors/MT.icd "${pkgdir}/etc/OpenCL/vendors/MT.icd"
    
      189        install -D -m0644 etc/vulkan/icd.d/musaicdconf.json "${pkgdir}/etc/vulkan/icd.d/musaicdconf.json"
    
      190
    
      191        # install -D -m0644 etc/musa_config "${pkgdir}/etc/musa_config"
    
      192        install -D -m0644 etc/musa.ini "${pkgdir}/etc/musa.ini"
    
      193
    
      194        # binaries and libraries
    
      195        install -d -m0755 "${pkgdir}/usr"
    
      196        cp -r --no-preserve='ownership' usr/bin usr/local usr/share "${pkgdir}/usr/"
    
      197        # install -d -m0755 "${pkgdir}/usr/lib/musa"
    
      198        # cp -r --no-preserve='ownership' usr/lib/x86_64-linux-gnu/musa/* "${pkgdir}/usr/lib/musa"
    
      199        install -d -m0755 "${pkgdir}/usr/lib/xorg"
    
      200        cp -r --no-preserve='ownership' usr/lib/xorg/* "${pkgdir}/usr/lib/xorg"
    
      201        install -d -m0755 "${pkgdir}/usr/lib/dri"
    
      202        cp -r --no-preserve='ownership' usr/lib/x86_64-linux-gnu/dri/* "${pkgdir}/usr/lib/dri"
    
      203        install -d -m0755 "${pkgdir}/usr/lib/gbm"
    
      204        cp -r --no-preserve='ownership' usr/lib/x86_64-linux-gnu/gbm/* "${pkgdir}/usr/lib/gbm"
    
      205
    
      206        # ucm2
    
      207        install -d -m0755 "${pkgdir}/usr/share/alsa/ucm2"
    
      208        ln -sf MooreThreads/ucm2/MooreThreads "${pkgdir}/usr/share/alsa/ucm2/"
    
      209    }
    
      210    popd # mtgpu
    
      211
    
      212    cp -r --no-preserve='ownership' mtml/usr/* "${pkgdir}/usr/local/musa/lib"
    
      213    cp -r --no-preserve='ownership' mudnn/* "${pkgdir}/usr/local/musa"
    
      214    cp -r --no-preserve='ownership' musa_toolkits/* "${pkgdir}/usr/local/musa"
    
      215}
    
      216

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2