Packages

SpiderMonkey 140 (mozjs-140) from the Firefox 140.16.0 ESR source -- a SEPARATE, NEW package from the existing packages/mozjs (which stays pinned at mozjs-128, the version GNOME 48's own gjs 1.84.2 and Cinnamon's cjs 128.1 both already depend on). Added 2026-09-18 specifically because gnome-shell 51.0 requires gjs >= 1.87.1, and EVERY gjs release satisfying that (confirmed by checking gjs 1.87.2 through 1.90.0's own meson.build directly) hard-requires exactly mozjs-140, not a smaller bump. Real sha256 verified against Mozilla's own published SHA256SUMS file. Built into the isolated /opt/gnome51 prefix (NOT /usr) -- same reasoning as the rest of this GNOME 51 chain: the existing mozjs-128 is a real, in-use dependency of the already-working GNOME 48 gjs and Cinnamon's cjs, and a second, unrelated JS engine major version has no business anywhere near that shared install. build.sh is closely modeled on packages/mozjs's own working build.sh (same Firefox-source-tree ast.Str/ast.Index Python-3.12+ compat patch, same log-to-file redirect to avoid the documented SSH-channel-deadlock bug from streaming a very warning-heavy build).

LFS ch8. Skips make html/install-html (docs) and the optional make check.

LFS ch8, final build (ch7's mpdecimal-tmp was a bootstrap version). Skips make check_local.

LFS ch7, inside the chroot. Needed by python's decimal module. Superseded by chapter 8's full mpdecimal build.

LFS ch8. Skips make html/install-html (docs) and make check (book calls this critical, but we skip it for build speed).

BLFS general-libraries page. Multitouch protocol translation library -- required by xf86-input-evdev and libinput's configure scripts but not part of the x7driver meta-page's own listed sources, so built as its own package. Skips the optional test suite (none exists).

Cinnamon's window manager / compositor (fork of Mutter/GNOME Shell's clutter+cogl+mutter). Built X11-only -- no Wayland/native backend. Linux Mint upstream, branch 6.4-maintenance @ commit 760e2a3046e1 (GitHub branch snapshot -- Mint doesn't publish release tarballs; SHA recorded for reproducibility). Cinnamon 6.4 line pairs with this project's mozjs 128 via cjs 128.1. ship_in_iso=false (Packages page / Package Manager only, like KDE Plasma & LXQt). Built on .101, meson --libdir=lib for the non-multiarch layout.

Fast math expression parser. Needed by lxqt-panel (sensors/expr) and lxqt-runner. LXQt 2.4 minimal-but-real desktop stack, ship_in_iso=false (Packages-page / Package Manager install only, like KDE Plasma). Built on .101 against /opt/qt6-full + KF6 6.29. cmake/meson --libdir=lib for LinuxDoors' non-multiarch layout.

Mutter -- GNOME Shell's Wayland compositor + window manager. Built without screencast/remote-desktop (no pipewire) and without colord. ship_in_iso=false -- GNOME Shell is a Packages-page / Package Manager install, kept off linuxdoors.iso (XFCE + MATE are the shipped desktops). Built on .101 against the existing rustc/llvm/p11-kit/librsvg/gi/glib2/pango/cairo stack; only the GNOME-specific libraries are new packages. || 48.5 -> 48.8 (2026-09-14 real upstream-currency bump, real sha256 computed from the downloaded tarball, archive integrity verified before trusting it). || Bumped 48.8 -> 51.0 (2026-09-18, part of the GNOME 51 push). Real sha256 verified against GNOME's own published sha256sum file. || 51.0 -> 51.1 (2026-10-16, v1.46 update; sha256 matches upstream sums).

BLFS general/mypaint-brushes.html -- the default brush-preset data files GIMP's brush engine (libmypaint) ships with. Required by GIMP 3.2.4 directly. Pure data package (installs to /usr/share/mypaint-data), no test suite.

Extra (not in BLFS's general index either -- built from nano's own upstream release), user-requested editor. || 9.2 -> 9.3 (2026-10-23, v1.55); only .asc published; xz -t.

BLFS general/nasm.html. Recommended by Firefox for its bundled dav1d/libvpx/libaom codec assembly routines.

LFS ch8, final native build. Simplified from the book's DESTDIR=$PWD/dest + cp -av dest/* / two-step dance -- our engine's own $PKG_DESTDIR + rsync capture already does the equivalent merge, so the curses.h sed fix applies directly to $PKG_DESTDIR. Skips optional docs copy.

LFS ch6 temporary tools stage. Also directly installs a host-native `tic` binary into $LFS/tools/bin (bootstrap-only, not captured/zipped) before cross-compiling the real library.

Cinnamon file manager + desktop-icon handler (fork of Nautilus). 6.6.x. Linux Mint upstream, branch 6.6-maintenance @ commit 8d23a398a2fd (GitHub branch snapshot -- Mint doesn't publish release tarballs; SHA recorded for reproducibility). Cinnamon 6.4 line pairs with this project's mozjs 128 via cjs 128.1. ship_in_iso=false (Packages page / Package Manager only, like KDE Plasma & LXQt). Built on .101, meson --libdir=lib for the non-multiarch layout.

NetSurf project (not BLFS/LFS) -- user-requested lightweight browser, chosen specifically because it avoids Rust (no WebKitGTK, no Firefox/Chromium) while still being a real, actively-maintained browser. TARGET=gtk NETSURF_GTK_MAJOR=3 (the frontend directory is literally 'gtk', not 'gtk3' -- GTK2 vs GTK3 is a NETSURF_GTK_MAJOR switch within it, confirmed from the real frontends/ directory listing). SVG rendering uses the bundled libsvgtiny (already built) instead of librsvg -- NETSURF_USE_RSVG defaults to AUTO and librsvg isn't present, so it's skipped automatically, no explicit disable needed. JS engine is duktape, vendored directly in netsurf's own source tree (content/handlers/javascript/duktape/), no separate build. Depends on nsgenbind (a build-time code generator, needs to be on PATH) plus the whole NetSurf library chain (libwapcaplet through libdom) and curl/GTK3 from earlier in the manifest.

BLFS postlfs/nettle.html (low-level crypto library). Part of the real GnuTLS chain -- see packages/libunistring/metadata.json for why this chain exists. GnuTLS's own required dependency. Skips the test suite and PDF/HTML doc install.

Extra (BLFS basicnet page), user-requested classic net tools alongside iproute2. Followed the book's install step verbatim, which deletes {nis,yp}domainname/hostname/dnsdomainname/domainname (already provided by inetutils) AND ifconfig itself + its man page (BLFS considers it superseded by iproute2's `ip`) -- so the shipped binaries are netstat/route/arp/plipconfig/mii-tool/iptunnel/ipmaddr/slattach, not ifconfig. Confirmed via a direct re-fetch of the live BLFS page since this seemed surprising at first.

LFS ch8. Python bootstrap script, not autotools. Skips the optional NINJAJOBS sed patch.

BLFS general/nodejs.html. Required by Firefox's build system. Book also recommends --shared-brotli/--shared-cares/--shared-libuv/--shared-nghttp2, but those 4 libraries weren't built separately for this project (scope call to avoid ballooning the already-large Rust/Firefox chain further) -- node vendors/builds its own bundled copies of those 4 instead, which is the documented fallback when the flag is simply omitted. --shared-openssl/--shared-zlib/--shared-simdutf and --with-intl=system-icu ARE used since those 4 are already built. 2026-10-10: rebuilt as 24.21.0-1 against simdutf 9.2.1 (libsimdutf.so.34 -> .so.36). || 24.21.0 -> 24.22.0 (2026-10-17, v1.47 update; sha256 matches upstream sums). || 24.22.0-1: rebuilt against simdutf 9.3.2 (soname 36->37) (2026-10-19, v1.49). || 24.22.0-1 -> 24.22.1 (2026-10-22 security update, v1.54; sha256 matches upstream sums).

Not BLFS/LFS -- NetSurf isn't in either book, this whole dependency chain (through 'netsurf' itself) is hand-verified against the project's own release tarballs and README docs. Shared Makefile infrastructure every other NetSurf-project library/nsgenbind/netsurf itself builds against, installed to $PREFIX/share/netsurf-buildsystem (confirmed from its own Makefile, supports DESTDIR natively). All sibling packages reference it via NSSHARED=/usr/share/netsurf-buildsystem rather than relying on PREFIX matching (the more fragile of the two documented options).

NetSurf project (not BLFS/LFS). Build-time code generator (turns WebIDL-ish DSL bindings into C) needed by netsurf's own build for the duktape JS bindings. Uses flex/bison, both already built.

BLFS general/nspr.html. Required by NSS, which is recommended by Firefox. Tarball actually expands to 'nspr-4.40/nspr/' (a versioned top-level dir containing the real 'nspr' source dir), not a bare top-level 'nspr' -- an earlier draft of this build.sh assumed the latter and failed with 'cd: nspr: No such file or directory'; fixed to 'cd nspr-*/nspr'.

BLFS postlfs/nss.html. Recommended by Firefox (system NSS instead of Firefox vendoring/building its own copy in-tree). Own hand-rolled make-based build (not autotools/cmake) -- installs straight from dist/Linux*/... via `install`, not `make install`, so build.sh stages those installs into $PKG_DESTDIR manually rather than using a DESTDIR make var. Tarball expands to 'nss-3.126/nss/' (same versioned-parent-dir pattern as nspr) -- an earlier draft applied the patch from $SRC_DIR directly (missing the initial 'cd nss-*/'), so '../nss-standalone-1.patch' pointed outside $SRC_DIR entirely and failed with 'No such file or directory'. || 3.126 -> 3.129 (2026-09-14): real, forced bump -- Firefox 155.0.1's configure hard-requires 'nss >= 3.127' and refused to build against 3.126.0. Went straight to 3.129 (the newest release, and what BLFS's own live postlfs/nss.html page already documents) rather than the bare minimum 3.127, for headroom against the next Firefox bump too. NSS 3.129's own release notes state it needs NSPR >= 4.39; this project's nspr is already 4.40, so no nspr bump was needed. Both the source tarball and the nss-standalone-1.patch (unchanged filename/URL, refetched and its real sha256 filled in for the first time -- both were PLACEHOLDER before this) verified against BLFS's current live book page before use. build.sh needed zero changes (globs nss-*.tar.gz / cd nss-*/). || 3.131 -> 3.132 (2026-10-22 security update, v1.54; sha256 matches upstream sums).