Arch Linux User Repository

@catzer @corv1d Thanks for the pings and the work — but the package deliberately isn't updating, and switching to a tarball + sha256-only PKGBUILD is the wrong fix. A checksum of a GitHub autogenerated tarball only pins "whatever GitHub served the day it was computed"; it says nothing about who made the release. The current PKGBUILD builds from the git tag with ?signed + validpgpkeys, so makepkg verifies the release is signed by the pinned Bisq release key (E222AA02) before anything is built.

The updates are stuck because upstream published v1.10.5 and v1.10.6 with unsigned (lightweight) tags. The automated updater (https://github.com/nikicat/aur-bisq-updater) test-builds every release and refuses to push when tag verification fails — for an app that holds your bitcoin, shipping faster by silently dropping provenance is the wrong trade.

Tracked upstream: https://github.com/bisq-network/bisq/issues/8032 — same problem as v1.10.4 (#7967), which upstream fixed by retro-signing the tag; the installer .asc files are already signed by the right key, so this is a release-process slip, not anything suspicious. The moment the tag is signed, the daily job pushes the update automatically. If it drags on, please add your voice on that issue.

Thanks, I Updated it for v1.10.6

# Maintainer: David Parrish <daveparrish@tutanota.com>
# Co-Maintainer: Felix Golatofski <contact@xdfr.de>

pkgbase=bisq
pkgname=(
  bisq-desktop
  bisq-cli
  bisq-daemon
)
pkgver=1.10.6
pkgrel=1
pkgdesc="Cross-platform desktop application that allows users to trade national currency (dollars, euros, etc) for bitcoin without relying on centralized exchanges"
arch=('any')
url="https://bisq.network"
license=('AGPL3')
depends=('jdk21-openjdk')
makedepends=('jdk21-openjdk' 'git')

# TODO: at next bisq release, re-check whether upstream restores end-to-end
# source provenance: a .asc on the source tarball (signed by E222AA02 or
# 387C8307), a signed annotated tag, or the promised reproducible-build
# artifacts. v1.10.0 source has no signature from a Bisq release manager
# (the lightweight tag and the GitHub-web-UI commit signature don't count),
# so this PKGBUILD currently relies on sha256 alone.
source=(
  "$pkgbase-$pkgver.tar.gz::https://github.com/bisq-network/bisq/archive/v${pkgver}.tar.gz"
  "bisq.desktop"
  "bisq-desktop-launcher"
)
sha256sums=(
  '309394ca820963ab50dfee709deda09eeaac42c2601a9842f39853d0d2e9b3ce'
  '9f2ee38c5089f5a929f978a0fd0adabba6bd7e42fd89864dcf2e0bfa0dcd90d2'
  '59029081b943f51e0e3efe4a82abbf5bd3c0a33b49117837cd30e25ec48cb7bd'
)

_binname=Bisq
_bitcoind_sha=65d7e4a435c95427f818922ba44e7a27ab5a3619

prepare() {
  cd "${srcdir}/${pkgbase}-${pkgver}" || exit
  rm -rf bitcoind
  git clone https://github.com/bisq-network/bitcoind.git bitcoind
  git -C bitcoind checkout "${_bitcoind_sha}"
}

build() {
  cd "${srcdir}/${pkgbase}-${pkgver}" || exit

  # Force the Gradle wrapper to boot with Java 21 instead of the system's
  # default Java 26 to avoid "Unsupported class file major version 70"
  export JAVA_HOME=/usr/lib/jvm/java-21-openjdk
  export PATH=$JAVA_HOME/bin:$PATH

  msg2 "Building bisq..."
  export GRADLE_USER_HOME="${srcdir}/.gradle"
  ./gradlew :desktop:build :cli:build :daemon:build \
    -Dorg.gradle.java.home=/usr/lib/jvm/java-21-openjdk \
    -Dorg.gradle.java.installations.paths=/usr/lib/jvm/java-21-openjdk \
    -Porg.gradle.java.installations.auto-download=false \
    -x test
}

package_bisq-desktop() {
  conflicts=("bisq-bin" "bisq-git" "bisq")
  provides=("bisq")
  replaces=("bisq")

  install -d "${pkgdir}/opt/bisq-desktop"
  cp -r "${srcdir}/${pkgbase}-${pkgver}/desktop/build/install/desktop/." \
    "${pkgdir}/opt/bisq-desktop"

  # JavaFX must be loaded as named modules (not via classpath) so the
  # --add-exports/--add-opens flags resolve and HiDPI GTK auto-detection
  # works. Move javafx-*.jar to a dedicated module-path subdir and patch
  # the gradle-generated launcher.
  install -d "${pkgdir}/opt/bisq-desktop/lib/javafx"
  mv "${pkgdir}/opt/bisq-desktop/lib/"javafx-*.jar \
    "${pkgdir}/opt/bisq-desktop/lib/javafx/"

  sed -i \
    -e 's|$APP_HOME/lib/javafx-[^:]*\.jar:||g' \
    -e 's|:$APP_HOME/lib/javafx-[^:]*\.jar||g' \
    -e "s|^DEFAULT_JVM_OPTS='|DEFAULT_JVM_OPTS='\"--module-path\" \"/opt/bisq-desktop/lib/javafx\" \"--add-modules\" \"javafx.controls,javafx.fxml\" |" \
    "${pkgdir}/opt/bisq-desktop/bin/desktop"

  # JavaFX on Linux doesn't auto-detect compositor HiDPI scaling, so
  # /usr/bin/bisq-desktop is a thin wrapper that resolves the user's UI
  # scale and passes it via -Dglass.gtk.uiScale. See bisq-desktop-launcher.
  install -Dm755 "${srcdir}/bisq-desktop-launcher" \
    "${pkgdir}/usr/bin/bisq-desktop"

  # Install desktop launcher.
  install -Dm644 bisq.desktop \
    "${pkgdir}/usr/share/applications/bisq-desktop.desktop"
  install -Dm644 \
    "${srcdir}/${pkgbase}-${pkgver}/desktop/package/linux/icon.png" \
    "${pkgdir}/usr/share/pixmaps/bisq-desktop.png"
}

package_bisq-cli() {
  install -d "${pkgdir}/opt/bisq-cli"
  cp -r "${srcdir}/${pkgbase}-${pkgver}/cli/build/install/cli/." \
    "${pkgdir}/opt/bisq-cli"
  install -d "${pkgdir}/usr/bin"
  ln -s "/opt/bisq-cli/bin/cli" "${pkgdir}/usr/bin/bisq-cli"
}

package_bisq-daemon() {
  install -d "${pkgdir}/opt/bisq-daemon"
  cp -r "${srcdir}/${pkgbase}-${pkgver}/daemon/build/install/daemon/." \
    "${pkgdir}/opt/bisq-daemon"
  install -d "${pkgdir}/usr/bin"
  ln -s "/opt/bisq-daemon/bin/daemon" "${pkgdir}/usr/bin/bisq-daemon"
}

# Maintainer: David Parrish <daveparrish@tutanota.com>
# Co-Maintainer: Felix Golatofski <contact@xdfr.de>

pkgbase=bisq
pkgname=(
  bisq-desktop
  bisq-cli
  bisq-daemon
)
pkgver=1.10.5
pkgrel=1
pkgdesc="Cross-platform desktop application that allows users to trade national currency (dollars, euros, etc) for bitcoin without relying on centralized exchanges"
arch=('any')
url="https://bisq.network"
license=('AGPL3')
depends=('jdk21-openjdk')
makedepends=('jdk21-openjdk' 'git')

# TODO: at next bisq release, re-check whether upstream restores end-to-end
# source provenance: a .asc on the source tarball (signed by E222AA02 or
# 387C8307), a signed annotated tag, or the promised reproducible-build
# artifacts. v1.10.0 source has no signature from a Bisq release manager
# (the lightweight tag and the GitHub-web-UI commit signature don't count),
# so this PKGBUILD currently relies on sha256 alone.
source=(
  "$pkgbase-$pkgver.tar.gz::https://github.com/bisq-network/bisq/archive/v${pkgver}.tar.gz"
  "bisq.desktop"
  "bisq-desktop-launcher"
)
sha256sums=(
  'e7228f93ba221d849c327cc7b79a7b72bd5675881bd1a4611caec2c74a3f0746'
  '9f2ee38c5089f5a929f978a0fd0adabba6bd7e42fd89864dcf2e0bfa0dcd90d2'
  '59029081b943f51e0e3efe4a82abbf5bd3c0a33b49117837cd30e25ec48cb7bd'
)

_binname=Bisq
_bitcoind_sha=65d7e4a435c95427f818922ba44e7a27ab5a3619

prepare() {
  cd "${srcdir}/${pkgbase}-${pkgver}" || exit
  rm -rf bitcoind
  git clone https://github.com/bisq-network/bitcoind.git bitcoind
  git -C bitcoind checkout "${_bitcoind_sha}"
}

build() {
  cd "${srcdir}/${pkgbase}-${pkgver}" || exit

  # Force the Gradle wrapper to boot with Java 21 instead of the system's
  # default Java 26 to avoid "Unsupported class file major version 70"
  export JAVA_HOME=/usr/lib/jvm/java-21-openjdk
  export PATH=$JAVA_HOME/bin:$PATH

  msg2 "Building bisq..."
  export GRADLE_USER_HOME="${srcdir}/.gradle"
  ./gradlew :desktop:build :cli:build :daemon:build \
    -Dorg.gradle.java.home=/usr/lib/jvm/java-21-openjdk \
    -Dorg.gradle.java.installations.paths=/usr/lib/jvm/java-21-openjdk \
    -Porg.gradle.java.installations.auto-download=false \
    -x test
}

package_bisq-desktop() {
  conflicts=("bisq-bin" "bisq-git" "bisq")
  provides=("bisq")
  replaces=("bisq")

  install -d "${pkgdir}/opt/bisq-desktop"
  cp -r "${srcdir}/${pkgbase}-${pkgver}/desktop/build/install/desktop/." \
    "${pkgdir}/opt/bisq-desktop"

  # JavaFX must be loaded as named modules (not via classpath) so the
  # --add-exports/--add-opens flags resolve and HiDPI GTK auto-detection
  # works. Move javafx-*.jar to a dedicated module-path subdir and patch
  # the gradle-generated launcher.
  install -d "${pkgdir}/opt/bisq-desktop/lib/javafx"
  mv "${pkgdir}/opt/bisq-desktop/lib/"javafx-*.jar \
    "${pkgdir}/opt/bisq-desktop/lib/javafx/"

  sed -i \
    -e 's|$APP_HOME/lib/javafx-[^:]*\.jar:||g' \
    -e 's|:$APP_HOME/lib/javafx-[^:]*\.jar||g' \
    -e "s|^DEFAULT_JVM_OPTS='|DEFAULT_JVM_OPTS='\"--module-path\" \"/opt/bisq-desktop/lib/javafx\" \"--add-modules\" \"javafx.controls,javafx.fxml\" |" \
    "${pkgdir}/opt/bisq-desktop/bin/desktop"

  # JavaFX on Linux doesn't auto-detect compositor HiDPI scaling, so
  # /usr/bin/bisq-desktop is a thin wrapper that resolves the user's UI
  # scale and passes it via -Dglass.gtk.uiScale. See bisq-desktop-launcher.
  install -Dm755 "${srcdir}/bisq-desktop-launcher" \
    "${pkgdir}/usr/bin/bisq-desktop"

  # Install desktop launcher.
  install -Dm644 bisq.desktop \
    "${pkgdir}/usr/share/applications/bisq-desktop.desktop"
  install -Dm644 \
    "${srcdir}/${pkgbase}-${pkgver}/desktop/package/linux/icon.png" \
    "${pkgdir}/usr/share/pixmaps/bisq-desktop.png"
}

package_bisq-cli() {
  install -d "${pkgdir}/opt/bisq-cli"
  cp -r "${srcdir}/${pkgbase}-${pkgver}/cli/build/install/cli/." \
    "${pkgdir}/opt/bisq-cli"
  install -d "${pkgdir}/usr/bin"
  ln -s "/opt/bisq-cli/bin/cli" "${pkgdir}/usr/bin/bisq-cli"
}

package_bisq-daemon() {
  install -d "${pkgdir}/opt/bisq-daemon"
  cp -r "${srcdir}/${pkgbase}-${pkgver}/daemon/build/install/daemon/." \
    "${pkgdir}/opt/bisq-daemon"
  install -d "${pkgdir}/usr/bin"
  ln -s "/opt/bisq-daemon/bin/daemon" "${pkgdir}/usr/bin/bisq-daemon"
}

can you update to 1.10.5 please?

new pkgbuild for 1.10.1, also it would fail build on arch due to latest jdk being v26, edited pkgbuild to specifically use the version it's built and tested with (could have changed gradle version instead ig but i think this makes sense.) also i'm using the .desktop from >transgressoft so thanks. new PKGBUILD:

# Maintainer: David Parrish <daveparrish@tutanota.com>
# Co-Maintainer: Felix Golatofski <contact@xdfr.de>

pkgbase=bisq
pkgname=(
  bisq-desktop
  bisq-cli
  bisq-daemon
)
pkgver=1.10.1
pkgrel=1
pkgdesc="Cross-platform desktop application that allows users to trade national currency (dollars, euros, etc) for bitcoin without relying on centralized exchanges"
arch=('any')
url="https://bisq.network"
license=('AGPL3')
depends=('jdk21-openjdk')
makedepends=('jdk21-openjdk' 'git')
# TODO: at next bisq release, re-check whether upstream restores end-to-end
# source provenance: a .asc on the source tarball (signed by E222AA02 or
# 387C8307), a signed annotated tag, or the promised reproducible-build
# artifacts. v1.10.0 source has no signature from a Bisq release manager
# (the lightweight tag and the GitHub-web-UI commit signature don't count),
# so this PKGBUILD currently relies on sha256 alone.
source=("$pkgbase-$pkgver.tar.gz::https://github.com/bisq-network/bisq/archive/v${pkgver}.tar.gz"
  "bisq.desktop"
  "bisq-desktop-launcher")
sha256sums=('359fbee61419efd165f6e4d7970741b50cbd8c8aedc206699b03ad53ee4d2397'
            '9f2ee38c5089f5a929f978a0fd0adabba6bd7e42fd89864dcf2e0bfa0dcd90d2'
            '59029081b943f51e0e3efe4a82abbf5bd3c0a33b49117837cd30e25ec48cb7bd')

_binname=Bisq
_bitcoind_sha=65d7e4a435c95427f818922ba44e7a27ab5a3619

prepare() {
  cd "${srcdir}/${pkgbase}-${pkgver}" || exit
  rm -rf bitcoind
  git clone https://github.com/bisq-network/bitcoind.git bitcoind
  git -C bitcoind checkout "${_bitcoind_sha}"
}

build() {
  cd "${srcdir}/${pkgbase}-${pkgver}" || exit

  # Force the Gradle wrapper to boot with Java 21 instead of the system's 
  # default Java 26 to avoid "Unsupported class file major version 70"
  export JAVA_HOME=/usr/lib/jvm/java-21-openjdk
  export PATH=$JAVA_HOME/bin:$PATH

  msg2 "Building bisq..."
  export GRADLE_USER_HOME="${srcdir}/.gradle"
  ./gradlew :desktop:build :cli:build :daemon:build \
    -Dorg.gradle.java.home=/usr/lib/jvm/java-21-openjdk \
    -Dorg.gradle.java.installations.paths=/usr/lib/jvm/java-21-openjdk \
    -Porg.gradle.java.installations.auto-download=false \
    -x test
}

package_bisq-desktop() {
  conflicts=("bisq-bin" "bisq-git" "bisq")
  provides=("bisq")
  replaces=("bisq")

  install -d "${pkgdir}/opt/bisq-desktop"
  cp -r "${srcdir}/${pkgbase}-${pkgver}/desktop/build/install/desktop/." "${pkgdir}/opt/bisq-desktop"

  # JavaFX must be loaded as named modules (not via classpath) so the
  # --add-exports/--add-opens flags resolve and HiDPI GTK auto-detection
  # works. Move javafx-*.jar to a dedicated module-path subdir and patch
  # the gradle-generated launcher.
  install -d "${pkgdir}/opt/bisq-desktop/lib/javafx"
  mv "${pkgdir}/opt/bisq-desktop/lib/"javafx-*.jar "${pkgdir}/opt/bisq-desktop/lib/javafx/"
  sed -i \
    -e 's|$APP_HOME/lib/javafx-[^:]*\.jar:||g' \
    -e 's|:$APP_HOME/lib/javafx-[^:]*\.jar||g' \
    -e "s|^DEFAULT_JVM_OPTS='|DEFAULT_JVM_OPTS='\"--module-path\" \"/opt/bisq-desktop/lib/javafx\" \"--add-modules\" \"javafx.controls,javafx.fxml\" |" \
    "${pkgdir}/opt/bisq-desktop/bin/desktop"

  # JavaFX on Linux doesn't auto-detect compositor HiDPI scaling, so
  # /usr/bin/bisq-desktop is a thin wrapper that resolves the user's UI
  # scale and passes it via -Dglass.gtk.uiScale. See bisq-desktop-launcher.
  install -Dm755 "${srcdir}/bisq-desktop-launcher" "${pkgdir}/usr/bin/bisq-desktop"

  # Install desktop launcher.
  install -Dm644 bisq.desktop "${pkgdir}/usr/share/applications/bisq-desktop.desktop"
  install -Dm644 "${srcdir}/${pkgbase}-${pkgver}/desktop/package/linux/icon.png" "${pkgdir}/usr/share/pixmaps/bisq-desktop.png"
}

package_bisq-cli() {
  install -d "${pkgdir}/opt/bisq-cli"
  cp -r "${srcdir}/${pkgbase}-${pkgver}/cli/build/install/cli/." "${pkgdir}/opt/bisq-cli"
  install -d "${pkgdir}/usr/bin"
  ln -s "/opt/bisq-cli/bin/cli" "${pkgdir}/usr/bin/bisq-cli"
}

package_bisq-daemon() {
  install -d "${pkgdir}/opt/bisq-daemon"
  cp -r "${srcdir}/${pkgbase}-${pkgver}/daemon/build/install/daemon/." "${pkgdir}/opt/bisq-daemon"
  install -d "${pkgdir}/usr/bin"
  ln -s "/opt/bisq-daemon/bin/daemon" "${pkgdir}/usr/bin/bisq-daemon"
}

This is the updated PKGBUILD for the latest, 1.10.0 version:

# Maintainer: David Parrish <daveparrish@tutanota.com>
# Co-Maintainer: Felix Golatofski <contact@xdfr.de>

pkgbase=bisq
pkgname=(
  bisq-desktop
  bisq-cli
  bisq-daemon
)
pkgver=1.10.0
pkgrel=1
pkgdesc="Cross-platform desktop application that allows users to trade national currency (dollars, euros, etc) for bitcoin without relying on centralized exchanges"
arch=('any')
url="https://bisq.network"
license=('AGPL3')
depends=('jdk21-openjdk')
makedepends=('jdk21-openjdk' 'git')
source=("$pkgbase-$pkgver.tar.gz::https://github.com/bisq-network/bisq/archive/v${pkgver}.tar.gz"
  "bisq.desktop")
sha256sums=('b3d1901854ad0487b7125a48b5eb0440de49836e2ac9260802057ee360c4040f'
            'c510dd6a9ee2beab74dc1988a1aa3dd9d4800eef88315712367586e1f958da4c')

validpgpkeys=('B493319106CC3D1F252E19CBF806F422E222AA02') # Alejandro García

_binname=Bisq

prepare() {
  cd "${srcdir}/${pkgbase}-${pkgver}" || exit
  rm -rf bitcoind
  git clone https://github.com/bisq-network/bitcoind.git bitcoind
  git -C bitcoind checkout 65d7e4a435c95427f818922ba44e7a27ab5a3619
}

build() {
  cd "${srcdir}/${pkgbase}-${pkgver}" || exit
  msg2 "Building bisq..."
  sed -i '/vendor = JvmVendorSpec.AZUL/d' build-logic/commons/src/main/groovy/bisq.java-conventions.gradle
  sed -i '/implementation = JvmImplementation.VENDOR_SPECIFIC/d' build-logic/commons/src/main/groovy/bisq.java-conventions.gradle
  export GRADLE_USER_HOME="${srcdir}/.gradle"
  ./gradlew :desktop:build :cli:build :daemon:build -x test
}

package_bisq-desktop() {
  conflicts=("bisq-bin" "bisq-git" "bisq")
  provides=("bisq")
  replaces=("bisq")

  install -d "${pkgdir}/opt/bisq-desktop"
  cp -r "${srcdir}/${pkgbase}-${pkgver}/desktop/build/install/desktop/." "${pkgdir}/opt/bisq-desktop"
  install -d "${pkgdir}/usr/bin"
  ln -s "/opt/bisq-desktop/bin/desktop" "${pkgdir}/usr/bin/bisq-desktop"

  # Install desktop launcher.
  install -Dm644 bisq.desktop "${pkgdir}/usr/share/applications/bisq-desktop.desktop"
  install -Dm644 "${srcdir}/${pkgbase}-${pkgver}/desktop/package/linux/icon.png" "${pkgdir}/usr/share/pixmaps/bisq-desktop.png"
}

package_bisq-cli() {
  install -d "${pkgdir}/opt/bisq-cli"
  cp -r "${srcdir}/${pkgbase}-${pkgver}/cli/build/install/cli/." "${pkgdir}/opt/bisq-cli"
  install -d "${pkgdir}/usr/bin"
  ln -s "/opt/bisq-cli/bin/bisq-cli" "${pkgdir}/usr/bin/bisq-cli"
}

package_bisq-daemon() {
  install -d "${pkgdir}/opt/bisq-daemon"
  cp -r "${srcdir}/${pkgbase}-${pkgver}/daemon/build/install/daemon/." "${pkgdir}/opt/bisq-daemon"
  install -d "${pkgdir}/usr/bin"
  ln -s "/opt/bisq-daemon/bin/bisq-daemon" "${pkgdir}/usr/bin/bisq-daemon"
}

and this the updated bisq.desktop file pointing to jdk21-openjdk:

[Desktop Entry]
Name=Bisq
GenericName=P2P Bitcoin Exchange
Comment=Bisq is a cross-platform desktop application that allows users to trade national currency (dollars, euros, etc) for bitcoin without relying on centralized exchanges
Exec=env JAVA_HOME=/usr/lib/jvm/java-21-openjdk /usr/bin/bisq-desktop
Icon=bisq-desktop
Terminal=false
Type=Application
Categories=Utility;Finance;

Please remove the --scan argument from gradle. It is unnecessary, and it uploads data about the build to a Gradle cloud service, which is not ideal for privacy.

@ldahleen54 @catzer Thanks!

@ldahleen54 leading zero missing so sha256 checksum is 0a7dbf8e01f7ce293a6b9d580f507c03b093bf7c062e8bd3a1b93334bf76b002

version 1.9.21 is very broken. Until the AUR is updated, its best to edit the PKGBUILD file to use 1.9.22 and update the sha256 checksum to a7dbf8e01f7ce293a6b9d580f507c03b093bf7c062e8bd3a1b93334bf76b002