nvidia-open-beta

LOW
maintainer dbermond 21 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The source is a kernel module tarball from NVIDIA's official download domain, which is a legitimate and expected source for this software; building kernel modules from the vendor's official site is normal AUR packaging, even if the host is not on a whitelist.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a kernel module tarball from NVIDIA's official download domain, which is a legitimate and expected source for this software; building kernel modules from the vendor's official site is normal AUR packaging, even if the host is not on a whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:17 source=("https://download.nvidia.com/XFree86/NVIDIA-kernel-module-source/NVIDIA-kernel-module-source-${pkgver}.tar.xz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Daniel Bermond <dbermond@archlinux.org>
2
3pkgbase=nvidia-open-beta
4pkgname=(
5 'nvidia-open-beta'
6 'nvidia-open-beta-dkms')
7pkgver=615.71.09
8pkgrel=1
9epoch=1
10pkgdesc='NVIDIA open kernel modules (beta version)'
11arch=('x86_64')
12url='https://github.com/NVIDIA/open-gpu-kernel-modules/'
13license=('MIT AND GPL-2.0-only')
14makedepends=(
15 'linux-headers')
16options=('!buildflags' '!lto' '!strip')
17source=("https://download.nvidia.com/XFree86/NVIDIA-kernel-module-source/NVIDIA-kernel-module-source-${pkgver}.tar.xz"
18 '110-nvidia-open-change-dkms-conf.patch'
19 '120-nvidia-open-linux-rt-gift.patch'
20 '130-nvidia-open-reproducible-build.patch'
21 '140-nvidia-open-gcc-sls.patch')
22sha256sums=('b038fe5d70e7c3209459a8121f231543939895145f0ad0d58d34f170e7eaf7e9'
23 '7fb578c3ecb47f8895a22443f22f08c5319a5374790d628857c637d516f157ea'
24 'b0f62a78f749ff3a104197c12b6d885352adcf35fb5ecf00c4cd4c51b4195e45'
25 '7f7cf450e909dd36c9cb37b4fc4a7ddce4d4b9554ad54b5d4738e61f8b746b66'
26 '8889fc942ff038ef3161209d3f72d87c8788fd8eb4853c79589c1ce54a4c3e25')
27
28prepare() {
29 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/110-nvidia-open-change-dkms-conf.patch"
30 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/120-nvidia-open-linux-rt-gift.patch"
31 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/130-nvidia-open-reproducible-build.patch"
32 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/140-nvidia-open-gcc-sls.patch"
33
34 [ -d dkms-src ] && rm -rf dkms-src
35 cp -a "NVIDIA-kernel-module-source-${pkgver}/kernel-open" dkms-src
36}
37
38build() {
39 local -x KERNEL_UNAME
40
41 # allow usage of custom kernel and building in a chroot
42 if [ -d "/usr/lib/modules/$(uname -r)" ]
43 then
44 KERNEL_UNAME="$(uname -r)"
45 else
46 KERNEL_UNAME="$(find /usr/lib/modules -mindepth 1 -maxdepth 1 -type d | sed -n 's|.*/||;1p')"
47 fi
48
49 unset -v SYSSRC
50 make -C "NVIDIA-kernel-module-source-${pkgver}" modules
51}
52
53package_nvidia-open-beta() {
54 depends=(
55 'libglvnd'
56 'linux'
57 "nvidia-utils-beta>=${pkgver%.*}")
58 provides=("nvidia-open=${pkgver}" 'NVIDIA-MODULE')
59 conflicts=('nvidia-open' 'NVIDIA-MODULE')
60
61 local _kernver
62 if [ -d "/usr/lib/modules/$(uname -r)" ]
63 then
64 _kernver="$(<"/usr/lib/modules/$(uname -r)/build/version")"
65 else
66 _kernver="$(find /usr/lib/modules -mindepth 1 -maxdepth 1 -type d | head -n1)"
67 _kernver="$(<"/usr/lib/modules/${_kernver##*/}/build/version")"
68 fi
69
70 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/kernel-open"/*.ko -t "${pkgdir}/usr/lib/modules/${_kernver}/extramodules"
71 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/COPYING" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
72 find "$pkgdir" -name '*.ko' -exec zstd --rm -19 {} +
73
74 install -D -m644 <(printf '%s\n' 'options nvidia NVreg_OpenRmEnableUnsupportedGpus=1') "${pkgdir}/usr/lib/modprobe.d/nvidia-open.conf"
75}
76
77package_nvidia-open-beta-dkms() {
78 pkgdesc="$(sed 's/(\(beta[[:space:]]version\)/(module sources; \1/' <<< "$pkgdesc")"
79 depends=(
80 'dkms'
81 'libglvnd'
82 "nvidia-utils-beta>=${pkgver%.*}")
83 provides=("nvidia-open=${pkgver}" 'NVIDIA-MODULE')
84 conflicts=('nvidia-open' 'NVIDIA-MODULE')
85
86 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/src/nvidia/_out/Linux_x86_64/nv-kernel.o" \
87 dkms-src/nvidia/nv-kernel.o_binary
88 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/src/nvidia-modeset/_out/Linux_x86_64/nv-modeset-kernel.o" \
89 dkms-src/nvidia-modeset/nv-modeset-kernel.o_binary
90 install -d -m755 "${pkgdir}/usr/src"
91 cp -dr --no-preserve='ownership' dkms-src "${pkgdir}/usr/src/nvidia-${pkgver}"
92 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/COPYING" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
93
94 install -D -m644 <(printf '%s\n' 'options nvidia NVreg_OpenRmEnableUnsupportedGpus=1') "${pkgdir}/usr/lib/modprobe.d/nvidia-open.conf"
95}
96

Changes since previous scan

--- PKGBUILD @ 2026-09-13 00:19
+++ PKGBUILD @ 2026-09-17 00:27
@@ -4,7 +4,7 @@
pkgname=(
'nvidia-open-beta'
'nvidia-open-beta-dkms')
-pkgver=610.57.04
+pkgver=615.71.09
pkgrel=1
epoch=1
pkgdesc='NVIDIA open kernel modules (beta version)'
@@ -19,11 +19,11 @@
'120-nvidia-open-linux-rt-gift.patch'
'130-nvidia-open-reproducible-build.patch'
'140-nvidia-open-gcc-sls.patch')
-sha256sums=('0be1ce1905f579e68c1701c1286e15ddf02f5243e625773f5a997a8325dc856d'
- '406ad63ea6cc469d311ecaa49f2b4c0b224fea1df57696bf888d0bac05e3f2bd'
+sha256sums=('b038fe5d70e7c3209459a8121f231543939895145f0ad0d58d34f170e7eaf7e9'
+ '7fb578c3ecb47f8895a22443f22f08c5319a5374790d628857c637d516f157ea'
'b0f62a78f749ff3a104197c12b6d885352adcf35fb5ecf00c4cd4c51b4195e45'
- 'c62b989627ae8b4ac919adf703794b181222dfb52d8ae727904c65cbc5a65eb6'
- '7bf431dec09616d05da9135f3a0c5435fe5c5c44b3ac3da0c7c0ab0a762a687c')
+ '7f7cf450e909dd36c9cb37b4fc4a7ddce4d4b9554ad54b5d4738e61f8b746b66'
+ '8889fc942ff038ef3161209d3f72d87c8788fd8eb4853c79589c1ce54a4c3e25')
prepare() {
patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/110-nvidia-open-change-dkms-conf.patch"

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 15:14:52 Medium 1
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion