schroot-hybris

maintainer orphaned · 1 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package builds from official Debian source tarballs and a Git repository hosted on GitHub, which is a common and reasonable practice; the non-standard host (http.debian.net) is a redirector for Debian's infrastructure, and the git source is from the maintainer's own GitHub, used for supplemental files, posing minimal risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from official Debian source tarballs and a Git repository hosted on GitHub, which is a common and reasonable practice; the non-standard host (http.debian.net) is a redirector for Debian's infrastructure, and the git source is from the maintainer's own GitHub, used for supplemental files, posing minimal risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:14 source=("http://http.debian.net/debian/pool/main/s/$_pkgbase/${_pkgbase}_${pkgver}.orig.tar.xz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Michael Serpieri <mickybart@pygoscelis.org>
2# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
3# Contributor: Andreas Wagner <Andreas dot Wagner at em dot uni-frankfurt dot de>
4
5pkgbase=schroot-hybris
6_pkgbase=schroot
7pkgname=('schroot-hybris' 'schroot-droid')
8pkgver=1.6.10
9pkgrel=18
10url="http://packages.qa.debian.org/s/schroot.html"
11license=('GPL3')
12makedepends=('boost' 'cppunit')
13arch=('x86_64' 'armv7h')
14source=("http://http.debian.net/debian/pool/main/s/$_pkgbase/${_pkgbase}_${pkgver}.orig.tar.xz"
15 "http://http.debian.net/debian/pool/main/s/schroot/schroot_$pkgver-3+deb9u1.debian.tar.xz"
16 'arch32-example'
17 'arch32-config'
18 'arch32-copyfiles'
19 'arch32-mount'
20 'arch32-nssdatabases'
21 'pam.d.schroot.patch'
22 'schroot-cppunit.patch'
23 'android-environment-schroot.patch'
24 'gls-common::git+https://github.com/mickybart/gnulinux_support-common')
25md5sums=('f8ec667831487f4b12e094bc0dc9bbe3'
26 '467f67cfc9596ddf301bd26968935d29'
27 '54239847f89b9a4772910415bde6276a'
28 '5a3f7b839c7e0b8933748da7c5b6385b'
29 'ddb2f09c02b24dab777110f9808472e1'
30 'f0d5d5b5e34a860f6f90b5628c680f46'
31 'af1da6edd8c8c0dafeeb2c2c4e0c840b'
32 'a8d77cac806a0a9adef3f93cdbeb280a'
33 '4c744c38b1541359de5696c65a508e5e'
34 '532a4f1abdb479ba569cc7e23e53d69c'
35 'SKIP')
36
37prepare() {
38 cd ${_pkgbase}-${pkgver}
39 cat "$srcdir"/debian/patches/series | while read p; do
40 patch -p1 -i "$srcdir"/debian/patches/$p
41 done
42 # fix configure with cppunit 1.4
43 patch -p1 -i ../schroot-cppunit.patch
44 # support for android
45 patch -p1 -i "${srcdir}"/android-environment-schroot.patch
46 ./bootstrap
47}
48
49build() {
50 cd ${_pkgbase}-${pkgver}
51 export LDFLAGS="${LDFLAGS//-Wl,--as-needed}"
52 ./configure \
53 --prefix=/usr \
54 --libexecdir=/usr/lib \
55 --sysconfdir=/etc \
56 --localstatedir=/var \
57 --enable-dchroot \
58 --enable-lvm-snapshot \
59 --enable-btrfs-snapshot \
60 --with-bash-completion-dir=/usr/share/bash-completion/completions/ \
61 BTRFS=/sbin/btrfs \
62 BTRFSCTL=/sbin/btrfsctl \
63 LVCREATE=/sbin/lvcreate \
64 LVREMOVE=/sbin/lvremove
65 # --enable-csbuild
66 make
67}
68
69check() {
70 cd ${_pkgbase}-${pkgver}
71# make -k check
72}
73
74package_schroot-hybris() {
75 pkgdesc="Allows users to execute shell commands under different root filesystems. (Successor to dchroot)."
76 depends=('pam' 'lockdev' 'boost-libs' 'e2fsprogs')
77 optdepends=('btrfs-progs-unstable' 'lvm2')
78 conflicts=('dchroot' 'schroot' 'schroot-android')
79 replaces=('dchroot' 'schroot' 'schroot-android')
80 provides=('schroot' 'sbuild' 'dchroot' 'schroot-android')
81 backup=('etc/schroot/schroot.conf'
82 'etc/schroot/arch32/config'
83 'etc/schroot/arch32/copyfiles'
84 'etc/schroot/arch32/mount'
85 'etc/schroot/arch32/nssdatabases')
86
87 cd ${_pkgbase}-${pkgver}
88 make DESTDIR="$pkgdir" install
89 install -dm 755 "${pkgdir}"/etc/schroot/arch32
90 install -m 644 "${srcdir}"/arch32-{config,mount,copyfiles,nssdatabases} "${pkgdir}"/etc/schroot/arch32
91 rename 'arch32-' '' "${pkgdir}"/etc/schroot/arch32/*
92 install -m 644 "${srcdir}"/arch32-example "${pkgdir}"/etc/schroot/chroot.d/arch32.conf.example
93 patch -i "${srcdir}"/pam.d.schroot.patch "${pkgdir}"/etc/pam.d/schroot
94
95 install -dm 755 "${pkgdir}"/usr/share/schroot/examples/
96 cp -a "${srcdir}"/gls-common/schroot/android-example "${pkgdir}"/usr/share/schroot/examples/android
97}
98
99package_schroot-droid() {
100 pkgdesc="Allow user to interact with Android chroot easily"
101 depends=('schroot-hybris')
102
103 install -d "${pkgdir}"/usr/bin
104 install -m 755 "${srcdir}"/gls-common/schroot/sdroid "${pkgdir}"/usr/bin/
105
106 install -d "${pkgdir}"/usr/lib/tmpfiles.d/
107 install -m 644 "${srcdir}"/gls-common/schroot/config/tmpfiles.d.schroot-droid.conf "${pkgdir}"/usr/lib/tmpfiles.d/schroot-droid.conf
108
109}
110

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion