schroot-hybris
LOW
maintainer orphaned
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package builds from official Debian source tarballs and a Git repository hosted on GitHub, which is a common and reasonable practice; the non-standard host (http.debian.net) is a redirector for Debian's infrastructure, and the git source is from the maintainer's own GitHub, used for supplemental files, posing minimal risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from official Debian source tarballs and a Git repository hosted on GitHub, which is a common and reasonable practice; the non-standard host (http.debian.net) is a redirector for Debian's infrastructure, and the git source is from the maintainer's own GitHub, used for supplemental files, posing minimal risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:14
source=("http://http.debian.net/debian/pool/main/s/$_pkgbase/${_pkgbase}_${pkgver}.orig.tar.xz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Michael Serpieri <mickybart@pygoscelis.org>
2
# Contributor: Sergej Pupykin <pupykin.s+arch@gmail.com>
3
# Contributor: Andreas Wagner <Andreas dot Wagner at em dot uni-frankfurt dot de>
4
5
pkgbase=schroot-hybris
6
_pkgbase=schroot
7
pkgname=('schroot-hybris' 'schroot-droid')
8
pkgver=1.6.10
9
pkgrel=18
10
url="http://packages.qa.debian.org/s/schroot.html"
11
license=('GPL3')
12
makedepends=('boost' 'cppunit')
13
arch=('x86_64' 'armv7h')
14
source=("http://http.debian.net/debian/pool/main/s/$_pkgbase/${_pkgbase}_${pkgver}.orig.tar.xz"
15
"http://http.debian.net/debian/pool/main/s/schroot/schroot_$pkgver-3+deb9u1.debian.tar.xz"
16
'arch32-example'
17
'arch32-config'
18
'arch32-copyfiles'
19
'arch32-mount'
20
'arch32-nssdatabases'
21
'pam.d.schroot.patch'
22
'schroot-cppunit.patch'
23
'android-environment-schroot.patch'
24
'gls-common::git+https://github.com/mickybart/gnulinux_support-common')
25
md5sums=('f8ec667831487f4b12e094bc0dc9bbe3'
26
'467f67cfc9596ddf301bd26968935d29'
27
'54239847f89b9a4772910415bde6276a'
28
'5a3f7b839c7e0b8933748da7c5b6385b'
29
'ddb2f09c02b24dab777110f9808472e1'
30
'f0d5d5b5e34a860f6f90b5628c680f46'
31
'af1da6edd8c8c0dafeeb2c2c4e0c840b'
32
'a8d77cac806a0a9adef3f93cdbeb280a'
33
'4c744c38b1541359de5696c65a508e5e'
34
'532a4f1abdb479ba569cc7e23e53d69c'
35
'SKIP')
36
37
prepare() {
38
cd ${_pkgbase}-${pkgver}
39
cat "$srcdir"/debian/patches/series | while read p; do
40
patch -p1 -i "$srcdir"/debian/patches/$p
41
done
42
# fix configure with cppunit 1.4
43
patch -p1 -i ../schroot-cppunit.patch
44
# support for android
45
patch -p1 -i "${srcdir}"/android-environment-schroot.patch
46
./bootstrap
47
}
48
49
build() {
50
cd ${_pkgbase}-${pkgver}
51
export LDFLAGS="${LDFLAGS//-Wl,--as-needed}"
52
./configure \
53
--prefix=/usr \
54
--libexecdir=/usr/lib \
55
--sysconfdir=/etc \
56
--localstatedir=/var \
57
--enable-dchroot \
58
--enable-lvm-snapshot \
59
--enable-btrfs-snapshot \
60
--with-bash-completion-dir=/usr/share/bash-completion/completions/ \
61
BTRFS=/sbin/btrfs \
62
BTRFSCTL=/sbin/btrfsctl \
63
LVCREATE=/sbin/lvcreate \
64
LVREMOVE=/sbin/lvremove
65
# --enable-csbuild
66
make
67
}
68
69
check() {
70
cd ${_pkgbase}-${pkgver}
71
# make -k check
72
}
73
74
package_schroot-hybris() {
75
pkgdesc="Allows users to execute shell commands under different root filesystems. (Successor to dchroot)."
76
depends=('pam' 'lockdev' 'boost-libs' 'e2fsprogs')
77
optdepends=('btrfs-progs-unstable' 'lvm2')
78
conflicts=('dchroot' 'schroot' 'schroot-android')
79
replaces=('dchroot' 'schroot' 'schroot-android')
80
provides=('schroot' 'sbuild' 'dchroot' 'schroot-android')
81
backup=('etc/schroot/schroot.conf'
82
'etc/schroot/arch32/config'
83
'etc/schroot/arch32/copyfiles'
84
'etc/schroot/arch32/mount'
85
'etc/schroot/arch32/nssdatabases')
86
87
cd ${_pkgbase}-${pkgver}
88
make DESTDIR="$pkgdir" install
89
install -dm 755 "${pkgdir}"/etc/schroot/arch32
90
install -m 644 "${srcdir}"/arch32-{config,mount,copyfiles,nssdatabases} "${pkgdir}"/etc/schroot/arch32
91
rename 'arch32-' '' "${pkgdir}"/etc/schroot/arch32/*
92
install -m 644 "${srcdir}"/arch32-example "${pkgdir}"/etc/schroot/chroot.d/arch32.conf.example
93
patch -i "${srcdir}"/pam.d.schroot.patch "${pkgdir}"/etc/pam.d/schroot
94
95
install -dm 755 "${pkgdir}"/usr/share/schroot/examples/
96
cp -a "${srcdir}"/gls-common/schroot/android-example "${pkgdir}"/usr/share/schroot/examples/android
97
}
98
99
package_schroot-droid() {
100
pkgdesc="Allow user to interact with Android chroot easily"
101
depends=('schroot-hybris')
102
103
install -d "${pkgdir}"/usr/bin
104
install -m 755 "${srcdir}"/gls-common/schroot/sdroid "${pkgdir}"/usr/bin/
105
106
install -d "${pkgdir}"/usr/lib/tmpfiles.d/
107
install -m 644 "${srcdir}"/gls-common/schroot/config/tmpfiles.d.schroot-droid.conf "${pkgdir}"/usr/lib/tmpfiles.d/schroot-droid.conf
108
109
}
110
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |