radiance-inference-git

LOW
maintainer redxherring 0 votes scanned 2026-10-19 01:23:43.518710
View on AUR
Why flagged

Package builds from a legitimate project source on Codeberg with no malicious payloads or remote code execution; the low severity is due to few votes and recent upload, not technical issues.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 90%): Package builds from a legitimate project source on Codeberg with no malicious payloads or remote code execution; the low severity is due to few votes and recent upload, not technical issues.

PKGBUILD

1# Maintainer: redxherring
2# Update instructions (stolen from aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=open-webui-desktop-bin):
3# 1. Update pkgver to the new version
4# 2. Update sha512sums_x86_64 (run: updpkgsums)
5# 3. Regenerate .SRCINFO (run: makepkg --printsrcinfo > .SRCINFO)
6# 4. Build and test (run: makepkg -sf)
7_pkgname=radiance-inference
8pkgname=${_pkgname}-git
9pkgver=1.8.1.r0
10pkgrel=2
11pkgdesc="C++20 LLM inference server for AMD GPUs (primarily gfx1201) with OpenAI-compatible HTTP API (git HEAD)"
12arch=('x86_64')
13url="https://codeberg.org/StillDeadcode/radiance"
14license=('Apache-2.0')
15depends=('gcc-libs' 'glibc' 'ffmpeg' 'rocm-gfx120x-bin')
16makedepends=('git' 'cmake' 'ninja')
17provides=("${_pkgname}")
18conflicts=("${_pkgname}")
19backup=('etc/radiance/radiance.conf')
20install=${pkgname}.install
21options=('!lto' '!debug')
22source=("${_pkgname}::git+${url}.git#branch=main"
23 radiance.service
24 radiance.conf)
25sha256sums=('SKIP' 'cf695b19ebdc371c8894710ea0dea831507ac4618aaeb7d5b458f14d4cb35b3a' '9aaea1f8692a1098414cf97db6d7248b026894eaa1e37f4d692cdce2e08d10a8')
26
27# Edit for other hardware: run `offload-arch`.
28_hip_archs='gfx1201'
29# VOPD pairing arm for the shadow-toolchain A/B: OFF or ON. Flip with the pkgrel bump.
30_rad_vopd='ON'
31
32pkgver() {
33 cd "${srcdir}/${_pkgname}"
34 if _ver=$(git describe --long --tags --match 'v[0-9]*' 2>/dev/null); then
35 echo "${_ver}" | sed 's/^v//;s/-\([0-9]\+\)-g.*/.r\1/'
36 else
37 _basever=$(grep -m1 '^project(' CMakeLists.txt | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -1)
38 printf "%s.r%s" "${_basever}" "$(git rev-list --count HEAD)"
39 fi
40}
41
42build() {
43 cd "${srcdir}/${_pkgname}"
44 # Shadow toolchain (Path 2 same-dylib A/B, 2026-10-18): both arms MUST compile with the
45 # user-space patched libLLVM in $TC/lib so pairing ON/OFF is the only difference. Dies if
46 # missing or built for a different clang commit (ROCm update => marker rev mismatch).
47 local TC="${RAD_VOPD_TOOLCHAIN:-$HOME/radiance-toolchain}"
48 local rev; rev=$(/opt/rocm/lib/llvm/bin/clang --version | sed -n 's|.*ROCm/llvm-project.git \([0-9a-f]\{40\}\).*|\1|p')
49 [[ -f "$TC/lib/.vopd-patched" && "$(cat "$TC/lib/.vopd-patched")" == "$rev"* ]] \
50 || die "shadow toolchain missing/stale: $TC/lib not marked for clang rev $rev (rebuild it after ROCm updates)"
51 export LD_LIBRARY_PATH="$TC/lib${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}"
52 msg2 "shadow libLLVM active: $TC/lib (rev ${rev:0:12}, pairing=${_rad_vopd})"
53 cmake -S . -B build -G Ninja \
54 -DCMAKE_BUILD_TYPE=Release \
55 -DCMAKE_INSTALL_PREFIX=/usr \
56 -DRAD_WITH_HIP=ON \
57 -DRAD_GPU_TARGETS="${_hip_archs}" \
58 -DRAD_WITH_FFMPEG=ON \
59 -DRAD_BUILD_TESTS=OFF \
60 -DRAD_HIP_VOPD_REPEATABLE="${_rad_vopd}"
61 cmake --build build --parallel
62}
63
64package() {
65 cd "${srcdir}/${_pkgname}"
66 DESTDIR="${pkgdir}" cmake --install build
67 # upstream install rules miss data/recipes/*.recipe (Dockerfile lines 113-114 replicate this)
68 install -d "${pkgdir}/usr/share/radiance/recipes"
69 install -m644 data/recipes/*.recipe -t "${pkgdir}/usr/share/radiance/recipes/"
70 install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
71 install -Dm644 NOTICE "${pkgdir}/usr/share/licenses/${pkgname}/NOTICE"
72
73 install -Dm644 "${srcdir}/radiance.service" "${pkgdir}/usr/lib/systemd/system/radiance.service"
74 install -Dm644 "${srcdir}/radiance.conf" "${pkgdir}/etc/radiance/radiance.conf"
75}
76

Changes since previous scan

--- PKGBUILD @ 2026-10-17 00:21
+++ PKGBUILD @ 2026-10-19 01:23
@@ -1,8 +1,13 @@
# Maintainer: redxherring
+# Update instructions (stolen from aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=open-webui-desktop-bin):
+# 1. Update pkgver to the new version
+# 2. Update sha512sums_x86_64 (run: updpkgsums)
+# 3. Regenerate .SRCINFO (run: makepkg --printsrcinfo > .SRCINFO)
+# 4. Build and test (run: makepkg -sf)
_pkgname=radiance-inference
pkgname=${_pkgname}-git
-pkgver=1.7.0.r2
-pkgrel=1
+pkgver=1.8.1.r0
+pkgrel=2
pkgdesc="C++20 LLM inference server for AMD GPUs (primarily gfx1201) with OpenAI-compatible HTTP API (git HEAD)"
arch=('x86_64')
url="https://codeberg.org/StillDeadcode/radiance"
@@ -21,6 +26,8 @@
# Edit for other hardware: run `offload-arch`.
_hip_archs='gfx1201'
+# VOPD pairing arm for the shadow-toolchain A/B: OFF or ON. Flip with the pkgrel bump.
+_rad_vopd='ON'
pkgver() {
cd "${srcdir}/${_pkgname}"
@@ -34,13 +41,23 @@
build() {
cd "${srcdir}/${_pkgname}"
+ # Shadow toolchain (Path 2 same-dylib A/B, 2026-10-18): both arms MUST compile with the
+ # user-space patched libLLVM in $TC/lib so pairing ON/OFF is the only difference. Dies if
+ # missing or built for a different clang commit (ROCm update => marker rev mismatch).
+ local TC="${RAD_VOPD_TOOLCHAIN:-$HOME/radiance-toolchain}"
+ local rev; rev=$(/opt/rocm/lib/llvm/bin/clang --version | sed -n 's|.*ROCm/llvm-project.git \([0-9a-f]\{40\}\).*|\1|p')
+ [[ -f "$TC/lib/.vopd-patched" && "$(cat "$TC/lib/.vopd-patched")" == "$rev"* ]] \
+ || die "shadow toolchain missing/stale: $TC/lib not marked for clang rev $rev (rebuild it after ROCm updates)"
+ export LD_LIBRARY_PATH="$TC/lib${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}"
+ msg2 "shadow libLLVM active: $TC/lib (rev ${rev:0:12}, pairing=${_rad_vopd})"
cmake -S . -B build -G Ninja \
-DCMAKE_BUILD_TYPE=Release \
-DCMAKE_INSTALL_PREFIX=/usr \
-DRAD_WITH_HIP=ON \
-DRAD_GPU_TARGETS="${_hip_archs}" \
-DRAD_WITH_FFMPEG=ON \
- -DRAD_BUILD_TESTS=OFF
+ -DRAD_BUILD_TESTS=OFF \
+ -DRAD_HIP_VOPD_REPEATABLE="${_rad_vopd}"
cmake --build build --parallel
}

Scan history

Scanned at (UTC)SeverityRules
2026-10-19 01:23:43 Low 2
2026-10-17 00:21:55 Clean 2
2026-10-16 23:16:14 Low 1
2026-10-15 00:28:05 Clean 2
2026-10-14 21:20:28 Low 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion