nvidia-open-beta
LOW
maintainer dbermond
21 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is a tarball from NVIDIA's official download domain for open kernel modules, which is a legitimate and expected source for this package; building kernel modules from the vendor's official source is normal AUR packaging practice.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from NVIDIA's official download domain for open kernel modules, which is a legitimate and expected source for this package; building kernel modules from the vendor's official source is normal AUR packaging practice.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:17
source=("https://download.nvidia.com/XFree86/NVIDIA-kernel-module-source/NVIDIA-kernel-module-source-${pkgver}.tar.xz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Daniel Bermond <dbermond@archlinux.org>
2
3
pkgbase=nvidia-open-beta
4
pkgname=(
5
'nvidia-open-beta'
6
'nvidia-open-beta-dkms')
7
pkgver=615.78.08
8
pkgrel=1
9
epoch=1
10
pkgdesc='NVIDIA open kernel modules (beta version)'
11
arch=('x86_64')
12
url='https://github.com/NVIDIA/open-gpu-kernel-modules/'
13
license=('MIT AND GPL-2.0-only')
14
makedepends=(
15
'linux-headers')
16
options=('!buildflags' '!lto' '!strip')
17
source=("https://download.nvidia.com/XFree86/NVIDIA-kernel-module-source/NVIDIA-kernel-module-source-${pkgver}.tar.xz"
18
'110-nvidia-open-change-dkms-conf.patch'
19
'120-nvidia-open-linux-rt-gift.patch'
20
'130-nvidia-open-reproducible-build.patch'
21
'140-nvidia-open-gcc-sls.patch')
22
sha256sums=('17b4f3d195a5ab1fad9aa1f195c9d3a4ad03aceda18bb9fb68a8bd33d7a000f6'
23
'418edc32dd945c5e2a3b97d293284c1a026362777e20ff576babfcf4cf2b9b42'
24
'b0f62a78f749ff3a104197c12b6d885352adcf35fb5ecf00c4cd4c51b4195e45'
25
'7f7cf450e909dd36c9cb37b4fc4a7ddce4d4b9554ad54b5d4738e61f8b746b66'
26
'8889fc942ff038ef3161209d3f72d87c8788fd8eb4853c79589c1ce54a4c3e25')
27
28
prepare() {
29
patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/110-nvidia-open-change-dkms-conf.patch"
30
patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/120-nvidia-open-linux-rt-gift.patch"
31
patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/130-nvidia-open-reproducible-build.patch"
32
patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/140-nvidia-open-gcc-sls.patch"
33
34
[ -d dkms-src ] && rm -rf dkms-src
35
cp -a "NVIDIA-kernel-module-source-${pkgver}/kernel-open" dkms-src
36
}
37
38
build() {
39
local -x KERNEL_UNAME
40
41
# allow usage of custom kernel and building in a chroot
42
if [ -d "/usr/lib/modules/$(uname -r)" ]
43
then
44
KERNEL_UNAME="$(uname -r)"
45
else
46
KERNEL_UNAME="$(find /usr/lib/modules -mindepth 1 -maxdepth 1 -type d | sed -n 's|.*/||;1p')"
47
fi
48
49
unset -v SYSSRC
50
make -C "NVIDIA-kernel-module-source-${pkgver}" modules
51
}
52
53
package_nvidia-open-beta() {
54
depends=(
55
'libglvnd'
56
'linux'
57
"nvidia-utils-beta>=${pkgver%.*}")
58
provides=("nvidia-open=${pkgver}" 'NVIDIA-MODULE')
59
conflicts=('nvidia-open' 'NVIDIA-MODULE')
60
61
local _kernver
62
if [ -d "/usr/lib/modules/$(uname -r)" ]
63
then
64
_kernver="$(<"/usr/lib/modules/$(uname -r)/build/version")"
65
else
66
_kernver="$(find /usr/lib/modules -mindepth 1 -maxdepth 1 -type d | head -n1)"
67
_kernver="$(<"/usr/lib/modules/${_kernver##*/}/build/version")"
68
fi
69
70
install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/kernel-open"/*.ko -t "${pkgdir}/usr/lib/modules/${_kernver}/extramodules"
71
install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/COPYING" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
72
find "$pkgdir" -name '*.ko' -exec zstd --rm -19 {} +
73
74
install -D -m644 <(printf '%s\n' 'options nvidia NVreg_OpenRmEnableUnsupportedGpus=1') "${pkgdir}/usr/lib/modprobe.d/nvidia-open.conf"
75
}
76
77
package_nvidia-open-beta-dkms() {
78
pkgdesc="$(sed 's/(\(beta[[:space:]]version\)/(module sources; \1/' <<< "$pkgdesc")"
79
depends=(
80
'dkms'
81
'libglvnd'
82
"nvidia-utils-beta>=${pkgver%.*}")
83
provides=("nvidia-open=${pkgver}" 'NVIDIA-MODULE')
84
conflicts=('nvidia-open' 'NVIDIA-MODULE')
85
86
install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/src/nvidia/_out/Linux_x86_64/nv-kernel.o" \
87
dkms-src/nvidia/nv-kernel.o_binary
88
install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/src/nvidia-modeset/_out/Linux_x86_64/nv-modeset-kernel.o" \
89
dkms-src/nvidia-modeset/nv-modeset-kernel.o_binary
90
install -d -m755 "${pkgdir}/usr/src"
91
cp -dr --no-preserve='ownership' dkms-src "${pkgdir}/usr/src/nvidia-${pkgver}"
92
install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/COPYING" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
93
94
install -D -m644 <(printf '%s\n' 'options nvidia NVreg_OpenRmEnableUnsupportedGpus=1') "${pkgdir}/usr/lib/modprobe.d/nvidia-open.conf"
95
}
96
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |