opencl-nvidia-beta

LOW
maintainer dbermond 343 votes base nvidia-utils-beta scanned 2026-10-02 00:00:32.890515
View on AUR
Why flagged

The package downloads an official NVIDIA driver installer from nvidia.com, a legitimate source, and installs it with standard build steps; the flagged privileged operations are normal for driver packages and do not pose a supply-chain risk.

Triggered rules

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads an official NVIDIA driver installer from nvidia.com, a legitimate source, and installs it with standard build steps; the flagged privileged operations are normal for driver packages and do not pose a supply-chain risk.

2 higher static findings superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:16 source=("https://us.download.nvidia.com/XFree86/Linux-${CARCH}/${pkgver}/${_pkg}.run"
Medium Privileged / out-of-pacman install (sudoers, setuid, or self-update) privileged_install

The package grants elevated privileges or installs an update path outside pacman: a /etc/sudoers.d rule (often passwordless), a setuid/setgid binary, or a self-update script/service that can fetch and run future code with no checksum verification. The initial install may be verified, but the ongoing privilege + update surface is a real supply-chain / privilege-escalation risk.

  • PKGBUILD:249 install -D -m4755 nvidia-modprobe -t "${pkgdir}/usr/bin"

PKGBUILD

2 offending line(s) highlighted
1# Maintainer : Daniel Bermond <dbermond@archlinux.org>
2# Contributor: Det <nimetonmaili g-mail>
3# Contributor: Ng Oon-Ee
4# Contributor: Dan Vratil
5
6pkgbase=nvidia-utils-beta
7pkgname=('nvidia-utils-beta' 'opencl-nvidia-beta' 'nvidia-settings-beta')
8pkgver=615.71.09
9pkgrel=1
10pkgdesc='NVIDIA drivers utilities (beta version)'
11arch=('x86_64')
12url='https://www.nvidia.com/'
13license=('LicenseRef-NVIDIA-Driver-License-Agreement')
14options=('!strip')
15_pkg="NVIDIA-Linux-${CARCH}-${pkgver}"
16source=("https://us.download.nvidia.com/XFree86/Linux-${CARCH}/${pkgver}/${_pkg}.run"
17 'nvidia-drm-outputclass.conf'
18 'nvidia-utils.conf'
19 'nvidia-utils.sysusers'
20 'nvidia.rules'
21 'systemd-homed-override.conf'
22 'systemd-suspend-override.conf'
23 '10-gsk.conf'
24 'gsk-renderer.sh'
25 '120-nvidia-settings-change-desktop-paths.patch')
26sha256sums=('cdceed22bbeb61248d1a6deabc2596673e3a6501698ee71ac8d2fdc28f3b70fe'
27 'be99ff3def641bb900c2486cce96530394c5dc60548fc4642f19d3a4c784134d'
28 '8ed91802c2a2d5b46c0692c624caf01dcde62a885dc617dda6694f4666de4c8e'
29 'f77a5247a3ba63e9fad3a3b2822d0fcfa51e0f79b5a90bd79bf08ea34b64ab07'
30 'e30714f9b473d810c28763d067e0b85c75f86f23618d968b49b9d1fced9a1dd6'
31 'c5aa7b8abe69e72bfdc6b9ee8afbfd350bcc557e894558f2e6e4087fa9aa0dd8'
32 '1d053c5078387021338cfc3a732bed61be1a20a549775573788e9134775c8149'
33 '05af96f86b7b3b40b93160fdcb702572401579f8756c0831b5de5f8e9afebeba'
34 '67eac203e7de4cf979b82c1e43439ac0e7c951d8901ebd9e4555c5d186a1b2ec'
35 '6f0f4a23706241e9e37e0fe30a09bd30ca29bb446d8fe7861cb4959f0a010ef4')
36
37# create soname links
38_create_links() {
39 local _lib
40 local _soname
41 local _base
42 find "$pkgdir" -type f -name '*.so*' ! -path '*xorg/*' -print0 | while read -d $'\0' _lib
43 do
44 _soname="$(dirname "$_lib")/$(readelf -d "$_lib" | grep -Po 'SONAME.*: \[\K[^]]*' || true)"
45 _base="$(printf '%s' "$_soname" | sed -r 's/(.*)\.so.*/\1.so/')"
46 [ -e "$_soname" ] || ln -s "$(basename "$_lib")" "$_soname"
47 [ -e "$_base" ] || ln -s "$(basename "$_soname")" "$_base"
48 done
49}
50
51prepare() {
52 # extract the source file
53 [ -d "$_pkg" ] && rm -rf "$_pkg"
54 printf '%s\n' " -> Self-Extracting ${_pkg}.run..."
55 sh "${_pkg}.run" --extract-only
56 bsdtar -C "$_pkg" -xf "${_pkg}/nvidia-persistenced-init.tar.bz2"
57 gunzip "$_pkg"/nvidia-{cuda-mps-control,modprobe,persistenced,settings,smi,xconfig}.1.gz
58
59 patch -d "$_pkg" -Np1 -i "${srcdir}/120-nvidia-settings-change-desktop-paths.patch"
60}
61
62package_nvidia-settings-beta() {
63 pkgdesc='Tool for configuring the NVIDIA graphics driver (beta version)'
64 depends=(
65 'at-spi2-core'
66 'cairo'
67 'glib2'
68 'glibc'
69 'gdk-pixbuf2'
70 'gtk3'
71 'hicolor-icon-theme'
72 'libx11'
73 'libxext'
74 "nvidia-utils-beta>=${pkgver}"
75 'pango'
76 'wayland')
77 provides=("nvidia-settings=${pkgver}" "nvidia-settings-beta=${pkgver}")
78 conflicts=('nvidia-settings')
79
80 cd "$_pkg"
81
82 install -D -m755 nvidia-settings -t "${pkgdir}/usr/bin"
83 install -D -m644 nvidia-settings.1 -t "${pkgdir}/usr/share/man/man1"
84 install -D -m644 nvidia-settings.png -t "${pkgdir}/usr/share/icons/hicolor/128x128/apps"
85 install -D -m644 nvidia-settings.desktop -t "${pkgdir}/usr/share/applications"
86 install -D -m755 "libnvidia-gtk3.so.${pkgver}" -t "${pkgdir}/usr/lib"
87 install -D -m755 "libnvidia-wayland-client.so.${pkgver}" -t "${pkgdir}/usr/lib"
88
89 # license
90 install -D -m644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}"
91}
92
93package_opencl-nvidia-beta() {
94 pkgdesc='OpenCL implemention for NVIDIA (beta version)'
95 depends=(
96 'glibc')
97 optdepends=(
98 'opencl-headers: headers necessary for OpenCL development')
99 provides=("opencl-nvidia=${pkgver}" 'opencl-driver')
100 conflicts=('opencl-nvidia')
101
102 cd "$_pkg"
103
104 # OpenCL
105 install -D -m644 nvidia.icd "${pkgdir}/etc/OpenCL/vendors/nvidia.icd"
106 install -D -m755 "libnvidia-opencl.so.${pkgver}" -t "${pkgdir}/usr/lib"
107
108 _create_links
109
110 # license
111 install -D -m644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}"
112}
113
114package_nvidia-utils-beta() {
115 depends=(
116 'bash'
117 'egl-gbm'
118 'egl-wayland'
119 'egl-wayland2'
120 'egl-x11'
121 'glibc'
122 'libgcc'
123 'libglvnd'
124 'libx11'
125 'libxext'
126 'openssl')
127 optdepends=(
128 'nvidia-settings-beta: for the configuration tool'
129 'opencl-nvidia-beta: for OpenCL support'
130 'xorg-server: for Xorg support'
131 'xorg-server-devel: for nvidia-xconfig')
132 provides=("nvidia-utils=${pkgver}" 'vulkan-driver' 'opengl-driver' "nvidia-libgl=${pkgver}"
133 "nvidia-libgl-beta=${pkgver}")
134 conflicts=('nvidia-utils' 'nvidia-libgl')
135 replaces=('nvidia-libgl')
136 install=nvidia-utils.install
137
138 cd "$_pkg"
139
140 # X driver
141 install -D -m755 nvidia_drv.so -t "${pkgdir}/usr/lib/xorg/modules/drivers"
142
143 # Wayland/GBM
144 install -d -m755 "${pkgdir}/usr/lib/gbm"
145 ln -s "../libnvidia-allocator.so.${pkgver}" "${pkgdir}/usr/lib/gbm/nvidia-drm_gbm.so"
146
147 # firmware
148 install -D -m644 firmware/*.bin -t "${pkgdir}/usr/lib/firmware/nvidia/${pkgver}"
149
150 # GLX extension module for X
151 install -D -m755 "libglxserver_nvidia.so.${pkgver}" -t "${pkgdir}/usr/lib/nvidia/xorg"
152 # Ensure that X finds glx
153 ln -s "libglxserver_nvidia.so.${pkgver}" "${pkgdir}/usr/lib/nvidia/xorg/libglxserver_nvidia.so.1"
154 ln -s "libglxserver_nvidia.so.${pkgver}" "${pkgdir}/usr/lib/nvidia/xorg/libglxserver_nvidia.so"
155
156 install -D -m755 "libGLX_nvidia.so.${pkgver}" -t "${pkgdir}/usr/lib"
157
158 # OpenGL libraries
159 install -D -m755 "libEGL_nvidia.so.${pkgver}" -t "${pkgdir}/usr/lib"
160 install -D -m755 "libGLESv1_CM_nvidia.so.${pkgver}" -t "${pkgdir}/usr/lib"
161 install -D -m755 "libGLESv2_nvidia.so.${pkgver}" -t "${pkgdir}/usr/lib"
162 install -D -m644 10_nvidia.json -t "${pkgdir}/usr/share/glvnd/egl_vendor.d"
163
164 # OpenGL core library
165 install -D -m755 "libnvidia-glcore.so.${pkgver}" -t "${pkgdir}/usr/lib"
166 install -D -m755 "libnvidia-eglcore.so.${pkgver}" -t "${pkgdir}/usr/lib"
167 install -D -m755 "libnvidia-glsi.so.${pkgver}" -t "${pkgdir}/usr/lib"
168
169 # misc
170 install -D -m755 libnvidia-api.so.1 -t "${pkgdir}/usr/lib"
171 install -D -m755 "libnvidia-fbc.so.${pkgver}" -t "${pkgdir}/usr/lib"
172 install -D -m755 "libnvidia-encode.so.${pkgver}" -t "${pkgdir}/usr/lib"
173 install -D -m755 "libnvidia-cfg.so.${pkgver}" -t "${pkgdir}/usr/lib"
174 install -D -m755 "libnvidia-ml.so.${pkgver}" -t "${pkgdir}/usr/lib"
175 install -D -m755 "libnvidia-fmdrv.so.${pkgver}" -t "${pkgdir}/usr/lib"
176 install -D -m755 "libnvidia-imex.so.${pkgver}" -t "${pkgdir}/usr/lib"
177 install -D -m755 "libnvidia-glvkspirv.so.${pkgver}" -t "${pkgdir}/usr/lib"
178 install -D -m755 "libnvidia-allocator.so.${pkgver}" -t "${pkgdir}/usr/lib"
179 install -D -m755 "libnvidia-gpucomp.so.${pkgver}" -t "${pkgdir}/usr/lib"
180
181 # Vulkan ICD
182 install -D -m644 nvidia_icd.json -t "${pkgdir}/usr/share/vulkan/icd.d"
183 install -D -m644 nvidia_layers.json -t "${pkgdir}/usr/share/vulkan/implicit_layer.d"
184
185 # VulkanSC
186 install -D -m755 nvidia-pcc -t "${pkgdir}/usr/bin"
187 install -D -m755 "libnvidia-vksc-core.so.${pkgver}" -t "${pkgdir}/usr/lib"
188 install -D -m644 nvidia_icd_vksc.json -t "${pkgdir}/usr/share/vulkansc/icd.d"
189
190 # NvPresent - Vulkan layer implementing NVIDIA Smooth Motion
191 install -D -m755 "libnvidia-present.so.${pkgver}" -t "${pkgdir}/usr/lib"
192
193 # VDPAU
194 install -D -m755 "libvdpau_nvidia.so.${pkgver}" -t "${pkgdir}/usr/lib/vdpau"
195
196 # nvidia-tls library
197 install -D -m755 "libnvidia-tls.so.${pkgver}" -t "${pkgdir}/usr/lib"
198
199 # CUDA
200 install -D -m755 "libcuda.so.${pkgver}" -t "${pkgdir}/usr/lib"
201 install -D -m755 "libnvcuvid.so.${pkgver}" -t "${pkgdir}/usr/lib"
202 install -D -m755 "libcudadebugger.so.${pkgver}" -t "${pkgdir}/usr/lib"
203
204 # NVVM Compiler (JIT link-time-optimization for CUDA)
205 install -D -m755 libnvidia-nvvm70.so.4 -t "${pkgdir}/usr/lib"
206 install -D -m755 "libnvidia-nvvm.so.${pkgver}" -t "${pkgdir}/usr/lib"
207
208 # PTX JIT Compiler (Parallel Thread Execution (PTX) is a pseudo-assembly language for CUDA)
209 install -D -m755 "libnvidia-ptxjitcompiler.so.${pkgver}" -t "${pkgdir}/usr/lib"
210
211 # raytracing
212 install -D -m755 "libnvoptix.so.${pkgver}" -t "${pkgdir}/usr/lib"
213 install -D -m755 "libnvidia-rtcore.so.${pkgver}" -t "${pkgdir}/usr/lib"
214 install -D -m755 "nvoptix.bin" -t "${pkgdir}/usr/share/nvidia/nvoptix.bin"
215
216 # NGX / DLSS
217 install -D -m755 nvidia-ngx-updater -t "${pkgdir}/usr/bin"
218 install -D -m755 "libnvidia-ngx.so.${pkgver}" -t "${pkgdir}/usr/lib"
219 install -D -m644 {,_}nvngx.dll -t "${pkgdir}/usr/lib/nvidia/wine"
220
221 # Optical flow
222 install -D -m755 "libnvidia-opticalflow.so.${pkgver}" -t "${pkgdir}/usr/lib"
223
224 # Cryptography library wrapper
225 install -D -m755 "libnvidia-pkcs11.so.${pkgver}" -t "${pkgdir}/usr/lib"
226 install -D -m755 "libnvidia-pkcs11-openssl3.so.${pkgver}" -t "${pkgdir}/usr/lib"
227
228 # Debug
229 install -D -m755 nvidia-debugdump -t "${pkgdir}/usr/bin"
230
231 # nvidia-xconfig
232 install -D -m755 nvidia-xconfig -t "${pkgdir}/usr/bin"
233 install -D -m644 nvidia-xconfig.1 -t "${pkgdir}/usr/share/man/man1"
234
235 # nvidia-bug-report
236 install -D -m755 nvidia-bug-report.sh -t "${pkgdir}/usr/bin"
237
238 # nvidia-smi
239 install -D -m755 nvidia-smi -t "${pkgdir}/usr/bin"
240 install -D -m644 nvidia-smi.1 -t "${pkgdir}/usr/share/man/man1"
241
242 # nvidia-cuda-mps
243 install -D -m755 nvidia-cuda-mps-server -t "${pkgdir}/usr/bin"
244 install -D -m755 nvidia-cuda-mps-control -t "${pkgdir}/usr/bin"
245 install -D -m644 nvidia-cuda-mps-control.1 -t "${pkgdir}/usr/share/man/man1"
246
247 # nvidia-modprobe
248 # This should be removed if nvidia fixed their uvm module!
249 install -D -m4755 nvidia-modprobe -t "${pkgdir}/usr/bin"
250 install -D -m644 nvidia-modprobe.1 -t "${pkgdir}/usr/share/man/man1"
251
252 # nvidia-persistenced
253 install -D -m755 nvidia-persistenced -t "${pkgdir}/usr/bin"
254 install -D -m644 nvidia-persistenced.1 -t "${pkgdir}/usr/share/man/man1"
255 install -D -m644 nvidia-persistenced-init/systemd/nvidia-persistenced.service.template "${pkgdir}/usr/lib/systemd/system/nvidia-persistenced.service"
256 sed -i 's/__USER__/nvidia-persistenced/' "${pkgdir}/usr/lib/systemd/system/nvidia-persistenced.service"
257
258 # application profiles
259 install -D -m644 "nvidia-application-profiles-${pkgver}-rc" -t "${pkgdir}/usr/share/nvidia"
260 install -D -m644 "nvidia-application-profiles-${pkgver}-key-documentation" -t "${pkgdir}/usr/share/nvidia"
261
262 install -D -m644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}"
263 install -D -m644 README.txt "${pkgdir}/usr/share/doc/${pkgname}/README"
264 install -D -m644 NVIDIA_Changelog -t "${pkgdir}/usr/share/doc/${pkgname}"
265 install -D -m644 supported-gpus/supported-gpus.json -t "${pkgdir}/usr/share/doc/${pkgname}"
266 cp -dr --no-preserve='ownership' html "${pkgdir}/usr/share/doc/${pkgname}/"
267 #ln -s nvidia "${pkgdir}/usr/share/doc/nvidia-utils"
268
269 # new power management support
270 install -D -m644 systemd/system/*.service -t "${pkgdir}/usr/lib/systemd/system"
271 install -D -m755 systemd/system-sleep/nvidia -t "${pkgdir}/usr/lib/systemd/system-sleep"
272 install -D -m755 systemd/nvidia-sleep.sh -t "${pkgdir}/usr/bin"
273 install -D -m755 nvidia-powerd -t "${pkgdir}/usr/bin"
274 install -D -m644 nvidia-dbus.conf -t "${pkgdir}/usr/share/dbus-1/system.d"
275 install -D -m644 "${srcdir}/systemd-homed-override.conf" "${pkgdir}/usr/lib/systemd/system/systemd-homed.service.d/10-nvidia-no-freeze-session.conf"
276 local _dir
277 for _dir in systemd-{suspend{,-then-hibernate},hibernate,hybrid-sleep}.service.d
278 do
279 install -D -m644 "${srcdir}/systemd-suspend-override.conf" "${pkgdir}/usr/lib/systemd/system/${_dir}/10-nvidia-no-freeze-session.conf"
280 done
281
282 # distro specific files must be installed in /usr/share/X11/xorg.conf.d
283 install -D -m644 "${srcdir}/nvidia-drm-outputclass.conf" "${pkgdir}/usr/share/X11/xorg.conf.d/10-nvidia-drm-outputclass.conf"
284
285 install -D -m644 "${srcdir}/nvidia-utils.sysusers" "${pkgdir}/usr/lib/sysusers.d/${pkgname}.conf"
286 install -D -m644 "${srcdir}/nvidia.rules" "${pkgdir}/usr/lib/udev/rules.d/60-nvidia.rules"
287
288 install -D -m644 <(printf '%s\n' 'nvidia-uvm') "${pkgdir}/usr/lib/modules-load.d/${pkgname}.conf"
289
290 # enable NVreg_UseKernelSuspendNotifiers and TemporaryFilePath
291 install -D -m644 "${srcdir}/nvidia-utils.conf" -t "${pkgdir}/usr/lib/modprobe.d"
292
293 # Vulkan GTK renderer crash fix
294 # https://forums.developer.nvidia.com/t/580-65-06-gtk-4-apps-hang-when-attempting-to-exit-close/341308/5?u=ptr1337
295 install -D -m644 "${srcdir}/gsk-renderer.sh" -t "${pkgdir}/etc/profile.d"
296 # same fix but also for Gnome/GDM users
297 install -D -m644 "${srcdir}/10-gsk.conf" -t "${pkgdir}/usr/lib/environment.d"
298
299 # lists NVIDIA driver files for container runtimes like nvidia-container-toolkit
300 install -D -m644 sandboxutils-filelist.json -t "${pkgdir}/usr/share/nvidia/files.d"
301
302 _create_links
303}
304

Scan history

Scanned at (UTC)SeverityRules
2026-10-02 00:00:32 Low 3
2026-10-01 00:02:06 Low 3
2026-09-30 00:20:07 Low 3
2026-09-29 00:07:46 Low 3
2026-09-28 00:28:32 Low 3
2026-09-27 00:07:07 Low 3
2026-09-26 00:12:15 Low 3
2026-09-25 00:03:36 Low 3
2026-09-24 00:24:14 Low 3
2026-09-23 00:28:13 Low 3
2026-09-22 00:15:14 Low 3
2026-09-21 00:26:32 Low 3
2026-09-20 00:25:31 Low 3
2026-09-19 00:25:36 Low 3
2026-09-18 00:17:11 Low 3
2026-09-17 00:27:14 Low 3
2026-09-16 00:03:17 Low 3
2026-09-15 00:25:31 Low 3
2026-09-14 00:27:57 Low 3
2026-09-13 15:14:52 Low 3

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion