nvidia-open-beta-dkms

maintainer dbermond · 21 votes · base nvidia-open-beta · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a tarball from NVIDIA's official domain (download.nvidia.com), which is the project's legitimate release infrastructure; despite not being on a standard host whitelist, it is a trusted official source for building NVIDIA's own kernel modules, posing no real supply-chain risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from NVIDIA's official domain (download.nvidia.com), which is the project's legitimate release infrastructure; despite not being on a standard host whitelist, it is a trusted official source for building NVIDIA's own kernel modules, posing no real supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:17 source=("https://download.nvidia.com/XFree86/NVIDIA-kernel-module-source/NVIDIA-kernel-module-source-${pkgver}.tar.xz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Daniel Bermond <dbermond@archlinux.org>
2
3pkgbase=nvidia-open-beta
4pkgname=(
5 'nvidia-open-beta'
6 'nvidia-open-beta-dkms')
7pkgver=610.43.03
8pkgrel=1
9epoch=1
10pkgdesc='NVIDIA open kernel modules (beta version)'
11arch=('x86_64')
12url='https://github.com/NVIDIA/open-gpu-kernel-modules/'
13license=('MIT AND GPL-2.0-only')
14makedepends=(
15 'linux-headers')
16options=('!buildflags' '!lto' '!strip')
17source=("https://download.nvidia.com/XFree86/NVIDIA-kernel-module-source/NVIDIA-kernel-module-source-${pkgver}.tar.xz"
18 '110-nvidia-open-change-dkms-conf.patch'
19 '120-nvidia-open-linux-rt-gift.patch'
20 '130-nvidia-open-reproducible-build.patch'
21 '140-nvidia-open-gcc-sls.patch')
22sha256sums=('7e118923c7a23edc36114d63273a46e3e04e9af98695a42203e7ac2dfe9fc1dc'
23 '806531f927216e6cf1eb6693b9f7bdd381eca84a594802e0d6b138b4f3ed15ea'
24 'b0f62a78f749ff3a104197c12b6d885352adcf35fb5ecf00c4cd4c51b4195e45'
25 'c62b989627ae8b4ac919adf703794b181222dfb52d8ae727904c65cbc5a65eb6'
26 '7bf431dec09616d05da9135f3a0c5435fe5c5c44b3ac3da0c7c0ab0a762a687c')
27
28prepare() {
29 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/110-nvidia-open-change-dkms-conf.patch"
30 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/120-nvidia-open-linux-rt-gift.patch"
31 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/130-nvidia-open-reproducible-build.patch"
32 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/140-nvidia-open-gcc-sls.patch"
33
34 [ -d dkms-src ] && rm -rf dkms-src
35 cp -a "NVIDIA-kernel-module-source-${pkgver}/kernel-open" dkms-src
36}
37
38build() {
39 local -x KERNEL_UNAME
40
41 # allow usage of custom kernel and building in a chroot
42 if [ -d "/usr/lib/modules/$(uname -r)" ]
43 then
44 KERNEL_UNAME="$(uname -r)"
45 else
46 KERNEL_UNAME="$(find /usr/lib/modules -mindepth 1 -maxdepth 1 -type d | sed -n 's|.*/||;1p')"
47 fi
48
49 unset -v SYSSRC
50 make -C "NVIDIA-kernel-module-source-${pkgver}" modules
51}
52
53package_nvidia-open-beta() {
54 depends=(
55 'libglvnd'
56 'linux'
57 "nvidia-utils-beta>=${pkgver%.*}")
58 provides=("nvidia-open=${pkgver}" 'NVIDIA-MODULE')
59 conflicts=('nvidia-open' 'NVIDIA-MODULE')
60
61 local _kernver
62 if [ -d "/usr/lib/modules/$(uname -r)" ]
63 then
64 _kernver="$(<"/usr/lib/modules/$(uname -r)/build/version")"
65 else
66 _kernver="$(find /usr/lib/modules -mindepth 1 -maxdepth 1 -type d | head -n1)"
67 _kernver="$(<"/usr/lib/modules/${_kernver##*/}/build/version")"
68 fi
69
70 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/kernel-open"/*.ko -t "${pkgdir}/usr/lib/modules/${_kernver}/extramodules"
71 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/COPYING" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
72 find "$pkgdir" -name '*.ko' -exec zstd --rm -19 {} +
73
74 install -D -m644 <(printf '%s\n' 'options nvidia NVreg_OpenRmEnableUnsupportedGpus=1') "${pkgdir}/usr/lib/modprobe.d/nvidia-open.conf"
75}
76
77package_nvidia-open-beta-dkms() {
78 pkgdesc="$(sed 's/(\(beta[[:space:]]version\)/(module sources; \1/' <<< "$pkgdesc")"
79 depends=(
80 'dkms'
81 'libglvnd'
82 "nvidia-utils-beta>=${pkgver%.*}")
83 provides=("nvidia-open=${pkgver}" 'NVIDIA-MODULE')
84 conflicts=('nvidia-open' 'NVIDIA-MODULE')
85
86 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/src/nvidia/_out/Linux_x86_64/nv-kernel.o" \
87 dkms-src/nvidia/nv-kernel.o_binary
88 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/src/nvidia-modeset/_out/Linux_x86_64/nv-modeset-kernel.o" \
89 dkms-src/nvidia-modeset/nv-modeset-kernel.o_binary
90 install -d -m755 "${pkgdir}/usr/src"
91 cp -dr --no-preserve='ownership' dkms-src "${pkgdir}/usr/src/nvidia-${pkgver}"
92 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/COPYING" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
93
94 install -D -m644 <(printf '%s\n' 'options nvidia NVreg_OpenRmEnableUnsupportedGpus=1') "${pkgdir}/usr/lib/modprobe.d/nvidia-open.conf"
95}
96

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion