nvidia-open-egpu

MEDIUM
maintainer NickNill 0 votes scanned 2026-09-14 15:17:35.672679
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:23 source=("https://download.nvidia.com/XFree86/NVIDIA-kernel-module-source/NVIDIA-kernel-module-source-${pkgver}.tar.xz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Bohdan Dymchenko <dmbohdan@gmail.com>
2# NOTE: This package requires headers matching your kernel.
3# For linux: install linux-headers
4# For linux-lts: install linux-lts-headers
5# For linux-zen: install linux-zen-headers
6# For linux-cachyos: install linux-cachyos-headers
7# For linux-cachyos-lts: install linux-cachyos-lts-headers
8# etc.
9
10pkgbase=nvidia-open-egpu
11pkgname=(
12 'nvidia-open-egpu'
13 'nvidia-open-egpu-dkms')
14pkgver=615.71.09
15pkgrel=1
16epoch=1
17pkgdesc='NVIDIA open kernel modules with thunderbolt 4 force egpu and hotplug patches'
18arch=('x86_64')
19url='https://github.com/NVIDIA/open-gpu-kernel-modules'
20license=('MIT AND GPL-2.0-only')
21makedepends=() # Requires kernel headers matching your kernel (linux-headers, linux-cachyos-headers, etc.)
22options=('!buildflags' '!lto' '!strip')
23source=("https://download.nvidia.com/XFree86/NVIDIA-kernel-module-source/NVIDIA-kernel-module-source-${pkgver}.tar.xz"
24 '110-nvidia-open-change-dkms-conf.patch'
25 '120-nvidia-open-linux-rt-gift.patch'
26 '130-nvidia-open-reproducible-build.patch'
27 '140-nvidia-open-gcc-sls.patch'
28 '160-nvidia-open-thunderbolt-egpu-hotplug.patch'
29 '170-nvidia-open-force-external-gpu.patch'
30 'nvidia-egpu-hotplug.rules'
31 'nvidia-egpu-hotplug.sh')
32sha256sums=('b038fe5d70e7c3209459a8121f231543939895145f0ad0d58d34f170e7eaf7e9'
33 '70a13159e43b78df1fb03601cd594d9c39893e8351b0318daa7a3cf1fd692738'
34 'b0f62a78f749ff3a104197c12b6d885352adcf35fb5ecf00c4cd4c51b4195e45'
35 '5340f33cdd19024a4501fee3d475af152c39f277d44422c65d447db263a0d501'
36 '22aa6f5be5d3c23762230df4322b1edabb16217c6b40b95b63fbe92753c33e30'
37 'a8418032ec4e7ae89e14e0f4fe20fd7faf55a84e31da038692ee244d9af1f6ac'
38 'fb18cacdf323f985208dae3fcd174c9f6aad42a77d06229be082849a9d7d9f42'
39 'f502e8062d6458792a08d54479eb82d16592e1981e46f3e9e3838cd7a3bd03eb'
40 '31a057be4dce6e4e9587adf317cf2ed9df1dd2968e1e2866bad4e9fd7a6f47eb')
41
42prepare() {
43 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/110-nvidia-open-change-dkms-conf.patch"
44 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/120-nvidia-open-linux-rt-gift.patch"
45 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/130-nvidia-open-reproducible-build.patch"
46 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/140-nvidia-open-gcc-sls.patch"
47 # Thunderbolt eGPU hotplug support: https://github.com/bdandy/open-gpu-kernel-modules/tree/fix/hotunplug
48 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/160-nvidia-open-thunderbolt-egpu-hotplug.patch"
49 # https://github.com/NVIDIA/open-gpu-kernel-modules/pull/984 - force eGPU mode for TB4/5 enclosures
50 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/170-nvidia-open-force-external-gpu.patch"
51
52 # Substitute version placeholder in dkms.conf
53 sed -i "s/@@PKGVER@@/${pkgver}/" "NVIDIA-kernel-module-source-${pkgver}/kernel-open/dkms.conf"
54
55 # Kbuild emits LLVM bitcode objects for ThinLTO kernels. Select the
56 # matching linker for each DKMS target while retaining GNU ld for kernels
57 # that do not use LLD.
58 if ! grep -q '^MAKE\[0\].* LD=' "NVIDIA-kernel-module-source-${pkgver}/kernel-open/dkms.conf"; then
59 sed -i \
60 's| KERNEL_UNAME=${kernelver} modules"| LD=$(if grep -qs ^CONFIG_LD_IS_LLD=y /lib/modules/${kernelver}/build/.config; then echo ld.lld; else echo ld; fi) KERNEL_UNAME=${kernelver} modules"|' \
61 "NVIDIA-kernel-module-source-${pkgver}/kernel-open/dkms.conf"
62 fi
63
64 [ -d dkms-src ] && rm -rf dkms-src
65 cp -a "NVIDIA-kernel-module-source-${pkgver}/kernel-open" dkms-src
66}
67
68build() {
69 local -x KERNEL_UNAME
70 local _ld
71
72 # allow usage of custom kernel and building in a chroot
73 if [ -d "/usr/lib/modules/$(uname -r)" ]
74 then
75 KERNEL_UNAME="$(uname -r)"
76 else
77 KERNEL_UNAME="$(find /usr/lib/modules -mindepth 1 -maxdepth 1 -type d | sed -n 's|.*/||;1p')"
78 fi
79
80 unset -v SYSSRC
81
82 # Fix build issues with kernels that use ThinLTO (cachyos)
83 if grep -qs '^CONFIG_LD_IS_LLD=y' "/usr/lib/modules/${KERNEL_UNAME}/build/.config"; then
84 _ld=ld.lld
85 else
86 _ld=ld
87 fi
88
89 make -C "NVIDIA-kernel-module-source-${pkgver}" modules LD="${_ld}"
90}
91
92package_nvidia-open-egpu() {
93 depends=(
94 'libglvnd'
95 'linux'
96 "nvidia-utils>=${pkgver}")
97 provides=("nvidia-open=${pkgver}" 'NVIDIA-MODULE')
98 conflicts=('nvidia-open' 'nvidia-open-dkms' 'nvidia-open-egpu-dkms' 'NVIDIA-MODULE')
99
100 local _kernver
101 if [ -d "/usr/lib/modules/$(uname -r)" ]
102 then
103 _kernver="$(<"/usr/lib/modules/$(uname -r)/build/version")"
104 else
105 _kernver="$(find /usr/lib/modules -mindepth 1 -maxdepth 1 -type d | head -n1)"
106 _kernver="$(<"/usr/lib/modules/${_kernver##*/}/build/version")"
107 fi
108
109 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/kernel-open"/*.ko -t "${pkgdir}/usr/lib/modules/${_kernver}/extramodules"
110 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/COPYING" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
111 find "$pkgdir" -name '*.ko' -exec zstd --rm -19 {} +
112
113 install -D -m644 <(printf '%s\n' 'options nvidia NVreg_OpenRmEnableUnsupportedGpus=1') "${pkgdir}/usr/lib/modprobe.d/nvidia-open.conf"
114
115 # eGPU hotplug support: udev rules and handler script
116 install -D -m644 "${srcdir}/nvidia-egpu-hotplug.rules" "${pkgdir}/usr/lib/udev/rules.d/90-nvidia-egpu-hotplug.rules"
117 install -D -m755 "${srcdir}/nvidia-egpu-hotplug.sh" "${pkgdir}/usr/lib/nvidia-egpu/nvidia-egpu-hotplug.sh"
118}
119
120package_nvidia-open-egpu-dkms() {
121 pkgdesc="$(sed 's/(with Thunderbolt eGPU hotplug support/(Thunderbolt eGPU hotplug support; module sources/' <<< "$pkgdesc")"
122 depends=(
123 'dkms'
124 'libglvnd'
125 "nvidia-utils>=${pkgver}")
126 provides=("nvidia-open=${pkgver}" 'NVIDIA-MODULE')
127 conflicts=('nvidia-open' 'nvidia-open-dkms' 'nvidia-open-egpu' 'NVIDIA-MODULE')
128
129 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/src/nvidia/_out/Linux_x86_64/nv-kernel.o" \
130 dkms-src/nvidia/nv-kernel.o_binary
131 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/src/nvidia-modeset/_out/Linux_x86_64/nv-modeset-kernel.o" \
132 dkms-src/nvidia-modeset/nv-modeset-kernel.o_binary
133 install -d -m755 "${pkgdir}/usr/src"
134 cp -dr --no-preserve='ownership' dkms-src "${pkgdir}/usr/src/nvidia-${pkgver}"
135 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/COPYING" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
136
137 install -D -m644 <(printf '%s\n' 'options nvidia NVreg_OpenRmEnableUnsupportedGpus=1') "${pkgdir}/usr/lib/modprobe.d/nvidia-open.conf"
138
139 # eGPU hotplug support: udev rules and handler script
140 install -D -m644 "${srcdir}/nvidia-egpu-hotplug.rules" "${pkgdir}/usr/lib/udev/rules.d/90-nvidia-egpu-hotplug.rules"
141 install -D -m755 "${srcdir}/nvidia-egpu-hotplug.sh" "${pkgdir}/usr/lib/nvidia-egpu/nvidia-egpu-hotplug.sh"
142}
143

Changes since previous scan

--- PKGBUILD @ 2026-08-14 00:03
+++ PKGBUILD @ 2026-09-14 15:17
@@ -11,7 +11,7 @@
pkgname=(
'nvidia-open-egpu'
'nvidia-open-egpu-dkms')
-pkgver=610.57.04
+pkgver=615.71.09
pkgrel=1
epoch=1
pkgdesc='NVIDIA open kernel modules with thunderbolt 4 force egpu and hotplug patches'
@@ -29,12 +29,12 @@
'170-nvidia-open-force-external-gpu.patch'
'nvidia-egpu-hotplug.rules'
'nvidia-egpu-hotplug.sh')
-sha256sums=('0be1ce1905f579e68c1701c1286e15ddf02f5243e625773f5a997a8325dc856d'
+sha256sums=('b038fe5d70e7c3209459a8121f231543939895145f0ad0d58d34f170e7eaf7e9'
'70a13159e43b78df1fb03601cd594d9c39893e8351b0318daa7a3cf1fd692738'
'b0f62a78f749ff3a104197c12b6d885352adcf35fb5ecf00c4cd4c51b4195e45'
'5340f33cdd19024a4501fee3d475af152c39f277d44422c65d447db263a0d501'
- 'b498128faffe3b7ccdf210b5cdbb8da75b8e3a381d2c9b82355c344405e4e916'
- 'bb776663f3627e0f8db2758aa00f43bb67c89729a6add92b3c3378a772b65f24'
+ '22aa6f5be5d3c23762230df4322b1edabb16217c6b40b95b63fbe92753c33e30'
+ 'a8418032ec4e7ae89e14e0f4fe20fd7faf55a84e31da038692ee244d9af1f6ac'
'fb18cacdf323f985208dae3fcd174c9f6aad42a77d06229be082849a9d7d9f42'
'f502e8062d6458792a08d54479eb82d16592e1981e46f3e9e3838cd7a3bd03eb'
'31a057be4dce6e4e9587adf317cf2ed9df1dd2968e1e2866bad4e9fd7a6f47eb')

Scan history

Scanned at (UTC)SeverityRules
2026-09-14 15:17:35 Medium 1
2026-08-14 00:03:41 Clean 2
2026-08-13 23:27:02 Medium 1
2026-07-15 00:09:25 Clean 2
2026-07-14 19:45:40 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 18:55:24 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion