Packages

BLFS general/libtasn1.html (ASN.1/DER encoder-decoder). Part of the real GnuTLS chain -- see packages/libunistring/metadata.json for why this chain exists. Needed by both p11-kit and gnutls directly. Skips the test suite and optional GTK-Doc/Valgrind extras.

Transport-Independent RPC library. Needed only because packages/nx-libs uses the Debian nxagent binary, which is linked against libtirpc.so.3 (for XDR / the X font-server protocol). LinuxDoors' glibc does not provide the sunrpc/libtirpc split and no other package needed it before. Built from upstream WITH --disable-gssapi: Debian's own libtirpc pulls in the full MIT krb5 closure (libgssapi_krb5 -> libkrb5 -> libk5crypto -> ...) for RPCSEC_GSS, which nxagent does not use -- disabling it keeps this to a single small self-contained .so. --disable-static too (nothing links it statically). ship_in_iso=false: only reachable via packages/x2goserver. || Security/patch update 1.3.6 -> 1.3.8 (2026-10-08): real upstream tarball, archive integrity tested, sha256 computed from the download.

LFS ch8. Skips the optional make check.

BLFS general/libunistring.html (Unicode string library). Part of the real GnuTLS chain, needed because GIMP 3.2.4's meson.build unconditionally tests for a working glib-networking (a real, non-optional hard requirement, confirmed by reading the live meson.build directly -- the -D check-update=no option does NOT skip this check). Chain: libunistring + libtasn1 + nettle + p11-kit -> gnutls -> glib-networking -> gimp. Skips the test suite and doc install. || 1.4.2 -> 1.5 (2026-10-19, v1.49 update; sha256 archive-test only).

libusb 1.0 -- USB device access. Needed by libgusb -> colord -> mutter (GNOME 48). ship_in_iso=false, built on .101.

NetSurf project (not BLFS/LFS). UTF-8 processing library used by netsurf itself.

libva 2.24.1, DRM backend only. Added 2026-10-16 for plasma68-kpipewire (hard requirement). Upstream publishes only a .asc signature; sha256 computed locally after bzip2 -t. ship_in_iso=false.

LibVNCServer -- provides both libvncclient and libvncserver, gnome-remote-desktop 51.0's own VNC backend dependency (dependency('libvncclient') + dependency('libvncserver')). Chosen over the RDP backend deliberately: RDP needs a massive chain (FreeRDP, a full TPM2 stack, Kerberos, VAAPI/Vulkan) for the same end-user result (remote GNOME 51 desktop access via x2goclient); VNC needs only this one small, well-established library plus what this project already has (zlib/libjpeg-turbo/openssl). Isolated to /opt/gnome51 -- see packages/libgnome-desktop/build.sh for the full isolation reasoning, though this specific library has no shared-prefix consumer anywhere else in this project so there's no real collision risk either way; kept isolated for consistency with the rest of the GNOME 51 stack. CMake-based build, real GitHub tag archive, no published upstream checksum file -- verified via a direct download+recompute rather than a cross-check (matching this project's own established fallback when no checksum file exists).

BLFS multimedia. Required by libcanberra, needed by xfce4-notifyd. Skips the optional make check.

BLFS multimedia/libvpx.html. Recommended by Firefox for VP8/VP9 codec support. Test suite skipped (needs curl-downloaded test vectors).

libwacom -- tablet description library. mutter 48 and plasma-desktop's tablet KCM hard-require it. ship_in_iso=false, built on .101.

NetSurf project (not BLFS/LFS). String-interning library, needed by libcss/libdom, needed by netsurf. No dependencies beyond ns-buildsystem.

BLFS general/libwebp.html. Recommended by Firefox for WebP image support. Skips optional tiff/sdl2-compat/freeglut/giflib deps (demo/test tools only, not needed for the library itself).

BLFS XFCE. Window Navigator Construction Kit -- required by libxfce4windowing. GObject Introspection recommended dep skipped, consistent with the rest of the stack.

BLFS. X authority database routines. Skips the optional make check.

BLFS. Foundational X11 client library used throughout the rest of the stack. Skips the optional make check.

LFS ch8. Skips the optional make check. 4.5.2-1 (2026-10-08): adds the LFS book's optional ABI-1 compatibility library libcrypt.so.1 -- shadow's login/su/passwd link it, and it had only ever resolved through a stale ld.so.cache entry pointing at Debian's multiarch copy.

BLFS. VESA CVT timing modeline generator, needed by xorg-server.

BLFS. X Display Manager Control Protocol library. Skips the optional make check.

BLFS XFCE. Shared GTK3 widgets/dialogs for XFCE apps -- needs startup-notification (already built) and xfconf. libgtop/libgudev/Glade optional deps skipped.

BLFS XFCE. Base utility library nearly every other XFCE component links against. GObject Introspection recommended dep skipped, consistent with glib2/gtk3's introspection=disabled.

BLFS XFCE. Window/monitor abstraction library used by xfce4-panel, xfwm4, xfdesktop, xfce4-settings. --enable-x11 (we have no Wayland backend), --disable-debug.

BLFS. GTK3's meson.build hard-requires xkbcommon even on X11-only builds (not just Wayland), so this had to be added mid-build when gtk3 failed configure. enable-docs=false (no Doxygen). Applies BLFS's upstream_fix patch for a tools/info.c build failure in 1.13.2. wayland/wayland-protocols recommended deps skipped per the no-Wayland scope -- libxkbcommon-x11 (the piece GTK3 actually needs) doesn't require them.

BLFS. Keyboard layout library -- turned out to be a hard requirement of lightdm's own configure (not just the optional greeter flag originally assumed), surfaced as a real 'Package requirements ... libxklavier ... were not met' failure. No test suite.