Doors of Opportunity

LinuxDoors

A Linux From Scratch (systemd edition) + BLFS distribution, hand-built from source, package by package. Browse 600 packages →

New — LinuxDoors AppImage Store

One file. Download and run. Nothing to install.

A curated shelf of Linux AppImages — a whole application in a single executable, its runtime carried inside. Some are LinuxDoors' own; others are trusted upstream builds we mirror here unchanged, each with a SHA-256 you can verify. 15 apps and growing.

Open the AppImage Store →

Featured AppImage

FlashScp
Copy files and folders between computers, over SSH using scp.
$0.00

Compiled, or from source -- your choice

Every one of LinuxDoors' 600 packages ships two ways.

Every package is available two ways. Initially, installing one fetches a small prebuilt zip — the finished, already-compiled files, ready to drop straight in. Flip the source toggle and the exact same package installs instead by compiling its real upstream source right on your own machine.

The two paths are not approximations of each other: the prebuilt zip is literally the captured output of running the same build script the source path runs, so the result is the same files either way. That script is the literal Linux From Scratch (systemd edition) and BLFS book commands for that package — and the from-scratch GCC, Clang and Rust toolchains those scripts lean on were themselves built the same way, from source, with nothing carried over from another Linux.

The source download uses the same HTTPS port as every other download, authorised by a short-lived, single-use token — no SSH, no extra open port — and the compile runs sandboxed as an unprivileged build user; only the final step that copies the finished files into place needs root.

Keeping both forms of every package — the built zip and its pinned source tree with build script side by side — is deliberate: sources are never discarded after a build. Any package can therefore be rebuilt, pinned to an older version that something downstream needs, or read line by line against its upstream, and every file on an installed system traces back to a named source tarball and an exact list of commands. The “from source” toggle just points the installer at that same material instead of the pre-run output — on a fast machine most packages build in seconds, the toolchain and the browsers in rather longer.

The package browser: Stage 2, now live

A one-click installer, and real Debian packages too.

Stage 2 of linuxdoors.com is a real, searchable package browser -- the page you're looking at is backed by it. From LinuxDoors' own Firefox, package rows here say Install instead of Download: picking one installs it straight from the desktop, no terminal required.

The same catalogue drives the machine itself. A desktop LinuxDoors Package Manager lists everything with a live “upgrade available” status; installing offers the same precompiled-or-from-source choice this page does, and an uninstall removes exactly the files that install placed and nothing shared. From a terminal the pkg command mirrors it — pkg update refreshes the list, pkg upgrade applies newer builds — and sudo is a small PAM-based build of its own.

The LinuxDoors Package Manager also bridges into Debian's own real package archive -- hundreds of thousands of packages, far beyond what LinuxDoors ships natively. Search Debian's full live index right from the desktop app ("Find More...", in its Debian view), or from a terminal with deb search <name> and deb install <name>. Pick something that isn't staged here yet and it gets fetched and staged on linuxdoors.com automatically as part of that same install request -- no separate step, and it stays available for every future install after that. Best-effort by nature: LinuxDoors is its own from-scratch build, not a Debian derivative, so a Debian package is fetched and made to run on your LinuxDoors.

The browser you are reading is a plain Python CGI backed by a PostgreSQL catalogue of every package's real metadata and on-disk size — no web framework, modelled on the same author's EaglePress project. When LinuxDoors' own Firefox visits (it identifies itself with a custom User-Agent string) the rows switch from Download to Install and hand off to the on-desktop LinuxDoors Package Manager, which installs the prebuilt zip or triggers the from-source build described alongside — no terminal, no config. Every download link is a lightweight counting redirect, so the “most downloaded” sort reflects real activity rather than a guess. The whole site is a few hundred lines of plain CGI on nginx + fcgiwrap, sharing a host with two sibling projects and no framework between them.

Popular packages

Sorted by downloads, then name.

Browser

firefox 153.2.0esr

BLFS xsoft/firefox.html.

98.2 MB · 62 downloads

NetworkingNot in ISO

x2goclient 4.1.2.3

X2Go Client GUI -- the desktop app that connects TO an x2goserver (this is the client side of packages/x2goserver).

Install separately after boot — not preinstalled on the ISO

1.1 MB · 57 downloads

Browser

ungoogled-chromium 153.0.8010.36-1

Real, ungoogled Chromium build -- explicit user preference over stock Chromium/Chrome ('a version without all the telemetry and analytics'), built with our own from-source Clang (packages/clang-chromium) instead of Go...

607.5 MB · 55 downloads

Office

linuxultraoffice 26.8.0.3

LinuxUltraOffice -- a deep-rebranded LibreOffice-derived productivity suite for LinuxDoors OS (Writer/Calc/Impress launcher entries now, Draw/Base/Math added to the menu later; all six are already part of this one bui...

290.5 MB · 52 downloads

Core System

binutils 2.47

LFS ch8, final native binutils build, run inside the chroot.

23.6 MB · 43 downloads

Core System

bash 5.3

LFS ch8, built and installed inside the chroot.

4.5 MB · 42 downloads

Core System

attr 2.6.0

LFS ch8, run inside the chroot.

144.9 KB · 40 downloads

Libraries

at-spi2-core 2.60.6

BLFS.

904.5 KB · 39 downloads

See all packages →

Featured packages

Hand-picked highlights, not just what's downloaded most.

Just updated — security fix

ungoogled-chromium 153.0.8010.36-1

A real Chromium build with Google's own tracking and telemetry stripped out, now on 151.0.7922.173. Across the two most recent updates this fixes 22 security issues, including 2 Critical sandbox-escape flaws (WebGL and Dawn/WebGPU).

607.5 MB

Download

Now on Chromium 151.0.7922.173, which on its own fixes 7 more security issues per Google's own Chrome Releases blog (individual CVE details embargoed until most users have updated, standard practice). Combined with the previous 151.0.7922.169 update, that's 22 fixes across the two most recent updates, including 2 rated Critical:

CVE-2026-76034 (Critical) — a heap buffer overflow in WebGL that could let a malicious webpage run code outside the browser's sandbox.
CVE-2026-76036 (Critical) — the same class of sandbox-escape flaw, this time in Dawn, Chromium's WebGPU implementation.
CVE-2026-76033 (High) — an inappropriate implementation in CORS handling.
~19 additional fixes across both updates that Google's own advisories don't name individually (standard practice for lower-severity issues).

This build uses ungoogled-chromium's own real, matching 151.0.7922.169-1 release for its de-googling patch set, applied against the newer 151.0.7922.173 Chromium source. Before starting the real build, that patch set was tested against the newer source in isolation first: all 109 of ungoogled-chromium's own de-googling patches applied with zero conflicts — a check on whether the rebase was safe to attempt, not itself a count of security fixes. Built on LinuxDoors' new, faster 24-core build machine -- the full ~56,000-target compile now finishes in under 3 hours.

Full ESR release

firefox 153.2.0esr

The real, official Mozilla Firefox, built from source on the same Extended Support Release track real-world Linux distributions ship — full add-on and sync support included.

98.2 MB

Download

Full office suite

linuxultraoffice 26.8.0.3

Writer, Calc, and Impress — a complete, real office suite for documents, spreadsheets, and presentations, opening and saving the file formats you already use.

290.5 MB

Learn more

Rounds out the suite

linuxultraoffice-addons 26.8.0.3

Draw, Base, and Math — vector drawing, a database frontend, and a formula editor, completing LinuxUltraOffice into a full productivity set. Just a few KB, since Draw/Base/Math already run from the same LibreOffice engine the main package installs — this only adds the menu entries.

2.5 KB

See the complete suite

Programmer Select Packages

Picks for setting up a LinuxDoors machine as a developer workstation.

Remote desktop -- server

x2goserver 4.1.0.6

Turn a LinuxDoors machine into a remote desktop you can reach from anywhere. x2goserver runs your full XFCE session over an SSH-tunnelled, NX-compressed X11 link -- responsive enough for real work even on a slow connection. Install it, open SSH, and connect with x2goclient.

187.9 KB

Download

Built from x2goserver's real 4.1.0.6 source, with the nxagent X server captured from Debian. Everything a fresh LinuxDoors box needs is bundled: the seven Perl modules the session scripts depend on, /etc/x2go/Xsession taught to recognise LinuxDoors, the x2gouser account and session database created automatically on first start, the xfwm4 compositor switched off (drop-shadows are pure lag over a remote link), and the stray xfce4-notifyd unit silenced.

For a LAN connection, set your client to Connection speed: LAN and Compression: 16m-png -- /usr/share/doc/x2goserver/CLIENT-TUNING.md has the details. Verified end-to-end on a clean install: connect, and a real XFCE desktop comes up with zero failed services.

Remote desktop -- client -- Qt6

x2goclient 4.1.2.3

The desktop app for connecting to an x2goserver -- yours or anyone's. Manage saved sessions, choose a resolution and compression profile, and land on a remote XFCE desktop in a window. Ported to Qt6 specifically for LinuxDoors -- upstream x2goclient is still Qt5-only.

1.1 MB

Download

Upstream x2goclient 4.1.2.3 has no Qt6 port, so LinuxDoors carries its own: a ~3,800-line patch against the real source, built on the same Qt6 already used for QtWebEngine and PySide6. The two Qt6-removed subsystems x2goclient relied on -- QX11Info (X11 display access) and QDesktopWidget (multi-monitor geometry) -- are replaced by a small qt6compat shim over the modern QScreen / native-interface APIs; the rest is mechanical API renaming across ~50 files, with QRegExp kept via Qt's own Core5Compat module.

LDAP session brokers are disabled (LinuxDoors has no OpenLDAP; it's a niche feature). Two small libraries were built to support it: libssh for the SSH transport and brotli for Qt6's network stack.

File transfer -- scp over SSH -- Free

flashscp 2026.08.30

A two-pane file-transfer window in the manner of FlashFXP, but where FlashFXP spoke FTP, FlashScp copies with scp over an SSH connection. Two computers side by side; drag between them; a queue does the work. Local-to-remote, remote-to-local and remote-to-remote are all the same gesture. Written for LinuxDoors by Stan Switaj -- free.

216.3 KB

Download

FlashScp drives the real ssh, scp and sshpass already on your machine -- it carries no SSH library of its own -- so your keys, ~/.ssh/config, the agent, known_hosts, ProxyJump and key+password hosts all behave exactly as in a terminal. One ControlMaster connection per machine means a password-protected host is asked once, not once per file. A dragged folder is walked and queued a file at a time, giving a real progress figure, several transfers at once, resume of an interrupted copy, and an optional speed cap. Compare and Mirror, a Terminal tab, full file management with a delete that names exactly what and where, and light/dark themes with every colour measured to WCAG contrast.

This is the installable-package build: a PySide6/Qt6 app that uses the Python and Qt already on your system. The same program is also on the LinuxDoors AppImage Store as a single self-contained file. Saved machines live in ~/.config/FlashScp/FlashScp.save (mode 0600); a password is stored only if you ask, scrambled, and the program says plainly that that is obfuscation, not encryption.