nvidia-open-egpu-dkms

LOW
maintainer NickNill 0 votes base nvidia-open-egpu scanned 2026-10-29 00:13:55.229276
View on AUR
Why flagged

The package downloads the official NVIDIA open kernel module source from download.nvidia.com, which is NVIDIA's legitimate domain, and applies known patches; building kernel modules from official vendor sources is standard practice and not inherently dangerous.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads the official NVIDIA open kernel module source from download.nvidia.com, which is NVIDIA's legitimate domain, and applies known patches; building kernel modules from official vendor sources is standard practice and not inherently dangerous.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:24 source=("https://download.nvidia.com/XFree86/NVIDIA-kernel-module-source/NVIDIA-kernel-module-source-${pkgver}.tar.xz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Bohdan Dymchenko <dmbohdan@gmail.com>
2# NOTE: This package requires headers matching your kernel.
3# For linux: install linux-headers
4# For linux-lts: install linux-lts-headers
5# For linux-zen: install linux-zen-headers
6# For linux-cachyos: install linux-cachyos-headers
7# For linux-cachyos-lts: install linux-cachyos-lts-headers
8# etc.
9
10pkgbase=nvidia-open-egpu
11pkgname=(
12 'nvidia-open-egpu'
13 'nvidia-open-egpu-dkms')
14pkgver=615.78.08
15pkgrel=5
16epoch=1
17pkgdesc='NVIDIA open kernel modules with thunderbolt 4 force egpu and hotplug patches'
18arch=('x86_64')
19url='https://github.com/NVIDIA/open-gpu-kernel-modules'
20license=('MIT AND GPL-2.0-only')
21makedepends=() # Requires kernel headers matching your kernel (linux-headers, linux-cachyos-headers, etc.)
22options=('!buildflags' '!lto' '!strip')
23install=nvidia-open-egpu.install
24source=("https://download.nvidia.com/XFree86/NVIDIA-kernel-module-source/NVIDIA-kernel-module-source-${pkgver}.tar.xz"
25 '110-nvidia-open-change-dkms-conf.patch'
26 '120-nvidia-open-linux-rt-gift.patch'
27 '130-nvidia-open-reproducible-build.patch'
28 '140-nvidia-open-gcc-sls.patch'
29 '160-nvidia-open-thunderbolt-egpu-hotplug.patch'
30 '170-nvidia-open-force-external-gpu.patch'
31 '180-nvidia-open-bar1-unmap-overhang.patch'
32 '190-nvidia-open-bar1-kernel-client-contiguous.patch'
33 '200-nvidia-open-rebar-failure-nonfatal.patch'
34 '210-nvidia-open-bar1-mapping-reuse.patch'
35 '220-nvidia-open-procfs-external-gpu.patch'
36 'nvidia-egpu-hotplug.rules'
37 'nvidia-egpu-hotplug.sh')
38sha256sums=('17b4f3d195a5ab1fad9aa1f195c9d3a4ad03aceda18bb9fb68a8bd33d7a000f6'
39 '70a13159e43b78df1fb03601cd594d9c39893e8351b0318daa7a3cf1fd692738'
40 'b0f62a78f749ff3a104197c12b6d885352adcf35fb5ecf00c4cd4c51b4195e45'
41 '5340f33cdd19024a4501fee3d475af152c39f277d44422c65d447db263a0d501'
42 '22aa6f5be5d3c23762230df4322b1edabb16217c6b40b95b63fbe92753c33e30'
43 '3f01480b81af4708b755941a2cdc8e580193eac9d9f8d58abc4d267f84831c79'
44 'fb18cacdf323f985208dae3fcd174c9f6aad42a77d06229be082849a9d7d9f42'
45 '7762f80d131ed1a8fee86f46d86d33a3a01f9a9fd1d6a66f95336df42aa0e5a1'
46 '954254e280f819cd14b06abb219700b9b93aee4c4e50ecd01b76297fbe064c09'
47 'de65235573dce384ee4b865f4164c67af84fd11a78c4f58f7ce8d52d77c12a91'
48 '85c9dd29bca475e4d8d816191bb36d4a8c67f76a074c67c2928a0683ca3fef42'
49 'e40eb621ef6832f7bd3f577e1c041e9fc280334040f8dc4b3c8fb32d83c6648c'
50 '570f66dd11212511193ddadf606dcda611a72584b3bf86c6e55273a6b7945567'
51 'dfbdc05ccc3af945d8429b46f06f3b6b81ecf27144dd21272109f3912e7e27b0')
52
53prepare() {
54 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/110-nvidia-open-change-dkms-conf.patch"
55 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/120-nvidia-open-linux-rt-gift.patch"
56 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/130-nvidia-open-reproducible-build.patch"
57 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/140-nvidia-open-gcc-sls.patch"
58 # Thunderbolt eGPU hotplug support: https://github.com/bdandy/open-gpu-kernel-modules/tree/fix/hotunplug
59 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/160-nvidia-open-thunderbolt-egpu-hotplug.patch"
60 # https://github.com/NVIDIA/open-gpu-kernel-modules/pull/984 - force eGPU mode for TB4/5 enclosures
61 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/170-nvidia-open-force-external-gpu.patch"
62
63 # BAR1 mapping fixes: https://github.com/NVIDIA/open-gpu-kernel-modules/pull/1354 and #1403
64 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/180-nvidia-open-bar1-unmap-overhang.patch"
65 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/190-nvidia-open-bar1-kernel-client-contiguous.patch"
66
67 # Preserve normal ReBAR attempts and continue probing if resize fails: PR #1109
68 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/200-nvidia-open-rebar-failure-nonfatal.patch"
69 # BAR1 mapping reuse cleanup from PR #1426 (source file only)
70 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/210-nvidia-open-bar1-mapping-reuse.patch"
71 # Export NVIDIA's existing eGPU classification for the hotplug handler.
72 patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/220-nvidia-open-procfs-external-gpu.patch"
73
74 # Substitute version placeholder in dkms.conf
75 sed -i "s/@@PKGVER@@/${pkgver}/" "NVIDIA-kernel-module-source-${pkgver}/kernel-open/dkms.conf"
76
77 # Kbuild emits LLVM bitcode objects for ThinLTO kernels. Select the
78 # matching linker for each DKMS target while retaining GNU ld for kernels
79 # that do not use LLD.
80 if ! grep -q '^MAKE\[0\].* LD=' "NVIDIA-kernel-module-source-${pkgver}/kernel-open/dkms.conf"; then
81 sed -i \
82 's| KERNEL_UNAME=${kernelver} modules"| LD=$(if grep -qs ^CONFIG_LD_IS_LLD=y /lib/modules/${kernelver}/build/.config; then echo ld.lld; else echo ld; fi) KERNEL_UNAME=${kernelver} modules"|' \
83 "NVIDIA-kernel-module-source-${pkgver}/kernel-open/dkms.conf"
84 fi
85
86 [ -d dkms-src ] && rm -rf dkms-src
87 cp -a "NVIDIA-kernel-module-source-${pkgver}/kernel-open" dkms-src
88}
89
90build() {
91 local -x KERNEL_UNAME
92 local _ld
93
94 # allow usage of custom kernel and building in a chroot
95 if [ -d "/usr/lib/modules/$(uname -r)" ]
96 then
97 KERNEL_UNAME="$(uname -r)"
98 else
99 KERNEL_UNAME="$(find /usr/lib/modules -mindepth 1 -maxdepth 1 -type d | sed -n 's|.*/||;1p')"
100 fi
101
102 unset -v SYSSRC
103
104 # Fix build issues with kernels that use ThinLTO (cachyos)
105 if grep -qs '^CONFIG_LD_IS_LLD=y' "/usr/lib/modules/${KERNEL_UNAME}/build/.config"; then
106 _ld=ld.lld
107 else
108 _ld=ld
109 fi
110
111 make -C "NVIDIA-kernel-module-source-${pkgver}" modules LD="${_ld}"
112}
113
114package_nvidia-open-egpu() {
115 depends=(
116 'libglvnd'
117 'linux'
118 "nvidia-utils>=${pkgver}")
119 provides=("nvidia-open=${pkgver}" 'NVIDIA-MODULE')
120 conflicts=('nvidia-open' 'nvidia-open-dkms' 'nvidia-open-egpu-dkms' 'NVIDIA-MODULE')
121
122 local _kernver
123 if [ -d "/usr/lib/modules/$(uname -r)" ]
124 then
125 _kernver="$(<"/usr/lib/modules/$(uname -r)/build/version")"
126 else
127 _kernver="$(find /usr/lib/modules -mindepth 1 -maxdepth 1 -type d | head -n1)"
128 _kernver="$(<"/usr/lib/modules/${_kernver##*/}/build/version")"
129 fi
130
131 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/kernel-open"/*.ko -t "${pkgdir}/usr/lib/modules/${_kernver}/extramodules"
132 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/COPYING" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
133 find "$pkgdir" -name '*.ko' -exec zstd --rm -19 {} +
134
135 install -D -m644 <(
136 printf '%s\n' \
137 '# Load NVIDIA modules through the eGPU udev handler.' \
138 'options nvidia NVreg_OpenRmEnableUnsupportedGpus=1' \
139 'blacklist nvidia' \
140 'blacklist nvidia-drm' \
141 'blacklist nvidia-uvm' \
142 'blacklist nvidia-modeset' \
143 'blacklist nvidia-nvlink' \
144 'blacklist nouveau'
145 ) "${pkgdir}/usr/lib/modprobe.d/nvidia-open.conf"
146
147 # eGPU hotplug support: udev rules and handler script
148 install -D -m644 "${srcdir}/nvidia-egpu-hotplug.rules" "${pkgdir}/usr/lib/udev/rules.d/90-nvidia-egpu-hotplug.rules"
149 install -D -m755 "${srcdir}/nvidia-egpu-hotplug.sh" "${pkgdir}/usr/lib/nvidia-egpu/nvidia-egpu-hotplug.sh"
150}
151
152package_nvidia-open-egpu-dkms() {
153 pkgdesc="$(sed 's/(with Thunderbolt eGPU hotplug support/(Thunderbolt eGPU hotplug support; module sources/' <<< "$pkgdesc")"
154 depends=(
155 'dkms'
156 'libglvnd'
157 "nvidia-utils>=${pkgver}")
158 provides=("nvidia-open=${pkgver}" 'NVIDIA-MODULE')
159 conflicts=('nvidia-open' 'nvidia-open-dkms' 'nvidia-open-egpu' 'NVIDIA-MODULE')
160
161 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/src/nvidia/_out/Linux_x86_64/nv-kernel.o" \
162 dkms-src/nvidia/nv-kernel.o_binary
163 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/src/nvidia-modeset/_out/Linux_x86_64/nv-modeset-kernel.o" \
164 dkms-src/nvidia-modeset/nv-modeset-kernel.o_binary
165 install -d -m755 "${pkgdir}/usr/src"
166 cp -dr --no-preserve='ownership' dkms-src "${pkgdir}/usr/src/nvidia-${pkgver}"
167 install -D -m644 "NVIDIA-kernel-module-source-${pkgver}/COPYING" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
168
169 install -D -m644 <(
170 printf '%s\n' \
171 '# Load NVIDIA modules through the eGPU udev handler.' \
172 'options nvidia NVreg_OpenRmEnableUnsupportedGpus=1' \
173 'blacklist nvidia' \
174 'blacklist nvidia-drm' \
175 'blacklist nvidia-uvm' \
176 'blacklist nvidia-modeset' \
177 'blacklist nvidia-nvlink' \
178 'blacklist nouveau'
179 ) "${pkgdir}/usr/lib/modprobe.d/nvidia-open.conf"
180
181 # eGPU hotplug support: udev rules and handler script
182 install -D -m644 "${srcdir}/nvidia-egpu-hotplug.rules" "${pkgdir}/usr/lib/udev/rules.d/90-nvidia-egpu-hotplug.rules"
183 install -D -m755 "${srcdir}/nvidia-egpu-hotplug.sh" "${pkgdir}/usr/lib/nvidia-egpu/nvidia-egpu-hotplug.sh"
184}
185

Changes since previous scan

--- PKGBUILD @ 2026-10-12 00:18
+++ PKGBUILD @ 2026-10-29 00:13
@@ -12,7 +12,7 @@
'nvidia-open-egpu'
'nvidia-open-egpu-dkms')
pkgver=615.78.08
-pkgrel=4
+pkgrel=5
epoch=1
pkgdesc='NVIDIA open kernel modules with thunderbolt 4 force egpu and hotplug patches'
arch=('x86_64')
@@ -32,6 +32,7 @@
'190-nvidia-open-bar1-kernel-client-contiguous.patch'
'200-nvidia-open-rebar-failure-nonfatal.patch'
'210-nvidia-open-bar1-mapping-reuse.patch'
+ '220-nvidia-open-procfs-external-gpu.patch'
'nvidia-egpu-hotplug.rules'
'nvidia-egpu-hotplug.sh')
sha256sums=('17b4f3d195a5ab1fad9aa1f195c9d3a4ad03aceda18bb9fb68a8bd33d7a000f6'
@@ -45,8 +46,9 @@
'954254e280f819cd14b06abb219700b9b93aee4c4e50ecd01b76297fbe064c09'
'de65235573dce384ee4b865f4164c67af84fd11a78c4f58f7ce8d52d77c12a91'
'85c9dd29bca475e4d8d816191bb36d4a8c67f76a074c67c2928a0683ca3fef42'
- '7ce1d553e9b12d6a686c00d0a88039dc29c66fdf995b5dd5e042f169d7515682'
- '74ad7d24e2dfdce1f2b52c51c2f2f85b1857d056000fa1d27f342d9aa00d410c')
+ 'e40eb621ef6832f7bd3f577e1c041e9fc280334040f8dc4b3c8fb32d83c6648c'
+ '570f66dd11212511193ddadf606dcda611a72584b3bf86c6e55273a6b7945567'
+ 'dfbdc05ccc3af945d8429b46f06f3b6b81ecf27144dd21272109f3912e7e27b0')
prepare() {
patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/110-nvidia-open-change-dkms-conf.patch"
@@ -66,6 +68,8 @@
patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/200-nvidia-open-rebar-failure-nonfatal.patch"
# BAR1 mapping reuse cleanup from PR #1426 (source file only)
patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/210-nvidia-open-bar1-mapping-reuse.patch"
+ # Export NVIDIA's existing eGPU classification for the hotplug handler.
+ patch -d "NVIDIA-kernel-module-source-${pkgver}" -Np1 -i "${srcdir}/220-nvidia-open-procfs-external-gpu.patch"
# Substitute version placeholder in dkms.conf
sed -i "s/@@PKGVER@@/${pkgver}/" "NVIDIA-kernel-module-source-${pkgver}/kernel-open/dkms.conf"

Scan history

Scanned at (UTC)SeverityRules
2026-10-29 00:13:55 Low 2
2026-10-28 00:06:54 Low 2
2026-10-27 00:23:28 Low 2
2026-10-26 00:12:40 Low 2
2026-10-25 00:20:48 Low 2
2026-10-24 00:14:55 Low 2
2026-10-23 00:02:19 Low 2
2026-10-22 00:13:10 Low 2
2026-10-21 00:12:50 Low 2
2026-10-20 00:10:31 Low 2
2026-10-19 00:03:55 Low 2
2026-10-18 00:06:55 Low 2
2026-10-17 00:21:55 Low 2
2026-10-16 00:12:47 Low 2
2026-10-15 00:28:05 Low 2
2026-10-14 00:06:47 Low 2
2026-10-13 00:23:45 Low 2
2026-10-12 09:12:50 Medium 1
2026-10-12 00:18:51 Low 2
2026-10-11 21:11:00 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion