Packages

nxagent -- the X2Go Agent X server (a forked, headless X.Org that speaks the NX compression protocol). This is the one piece of the x2go server stack NOT built from source here: nx-libs is a large forked-X-server C codebase (essentially a mini-Xorg, multi-hour build) and the user's explicit choice was a hybrid -- build x2goserver from source, capture nx-libs from Debian. So build.sh just fetches the real Debian trixie nx-libs binary .debs (nxagent + libNX_X11 + libXcomp + libXcompshad + nx-x11-common data), extracts each package's data.tar.* straight into $PKG_DESTDIR, and adds the /usr/lib/x86_64-linux-gnu/nx/bin/ symlink farm that Debian's separate x2goserver-x2goagent package normally provides (packages/x2goserver builds x2goserver-x2goagent from source and expects nxagent to already be findable under that nx/ prefix). Same best-effort caveat as engine/debian_fetch.py: LinuxDoors has its own glibc baseline, but this exact nxagent 3.5.99.27-2 binary was confirmed running on a real LinuxDoors install (70.20.232.101) via the deb bridge before this package existed. ship_in_iso=false -- only pulled in when someone installs packages/x2goserver. libxcompext3 is deliberately NOT fetched: nxagent's ldd on the real install links only libXcomp.so.3 / libXcompshad.so.3 / libNX_X11.so.6, not libXcompext.

nxproxy -- the CLIENT-side half of the NX protocol (nxagent, captured by packages/nx-libs, is the SERVER-side half). x2goclient spawns a local nxproxy process for every session type -- confirmed the hard way: ONMainWindow::runCommand() (which leads into SlotRunCommand(), the callback that actually starts the chosen desktop session on the server) is only ever called from slotProxyStderr(), a slot watching the LOCAL nxproxy QProcess's stderr for a specific 'session established' marker string. Without nxproxy on the client machine, that QProcess never produces the marker, slotProxyStderr() never fires, runCommand() never runs, and the session sits at 'Status: connecting' forever -- for EVERY session type, not just LinuxDoors' own new GNOME 51 (VNC) one (real bug found and confirmed live on a real connection attempt from packages/x2goclient-gnome51vnc, 2026-09-19). Same Debian-binary-capture pattern as packages/nx-libs (same exact upstream version, 3.5.99.27-2, confirmed present in the same deb.debian.org/debian/pool/main/n/nx-libs/ directory) -- build.sh just extracts the .deb's data.tar.* into $PKG_DESTDIR. Only real dependency is libXcomp.so.3, already provided by packages/nx-libs (confirmed via ldd -- libjpeg/libpng16/libz/libstdc++/libm/libgcc_s are all otherwise-already-present standard libs). depends on nx-libs so the engine builds/deploys that first.

Qt6 Openbox configuration tool (theme, mouse, desktops, dock). LXQt 2.4 minimal-but-real desktop stack, ship_in_iso=false (Packages-page / Package Manager install only, like KDE Plasma). Built on .101 against /opt/qt6-full + KF6 6.29. cmake/meson --libdir=lib for LinuxDoors' non-multiarch layout.

The default LXQt window manager. Last upstream release (2015); plain X11, no XI2/compositing -- a good x2go fit, unlike Mutter/Muffin. LXQt 2.4 minimal-but-real desktop stack, ship_in_iso=false (Packages-page / Package Manager install only, like KDE Plasma). Built on .101 against /opt/qt6-full + KF6 6.29. cmake/meson --libdir=lib for LinuxDoors' non-multiarch layout.

BLFS general/openjpeg2.html (JPEG 2000 codec). Added as a fourth real hard-required poppler dependency -- BLFS lists it as merely 'Recommended' for poppler, but a real 'Could NOT find openjpeg2' CMake configure failure showed poppler's own CMakeLists.txt has no disable flag for it (unlike Qt5/Qt6/GPGME/Boost, which each had a real ENABLE_* option). Simplest fix was to just build it -- it's small and standalone with no heavy sub-dependencies.

OpenShot 4.0.0 (openshot-qt) -- the Qt6/PySide6 video-editor GUI on top of libopenshot 1.0.0. Released 2026-08-30. Pure-Python app: `python3 setup.py install` lays down the openshot_qt module, the /usr/bin/openshot-qt launcher, xdg .desktop/appdata/icons/mime. Runtime Python deps: PySide6 (already built), openshot (the SWIG module from libopenshot), requests+certifi (already in $LFS), plus pyzmq / markdown / defusedxml / Pillow pip-installed into the destdir at build time (manylinux wheels -- pyzmq's bundles its own libzmq). 4.0.0 has a redesigned NATIVE Qt timeline, so no QtWebEngine is needed. AI Object-Mask/Detection features are absent (libopenshot built without OpenCV). ship_in_iso=false: video-editing feature, packages-only, kept out of linuxdoors.iso per user direction.

Extra (BLFS), not core LFS. OpenSSH's single portable tarball builds BOTH the client (ssh/scp) and server (sshd) together via one `make install` -- there's no separate 'openssh-server' upstream, that split is a Debian/Ubuntu packaging convention. Ships and enables a hand-written sshd.service (the book's own BLFS instructions referenced a nonexistent `make install-sshd` target -- that command was dropped after failing against the real Makefile). The unit runs `ssh-keygen -A` before every start, which only generates host keys that don't already exist, so real unique host keys appear automatically on first real boot rather than being baked into the build. The sshd system user/group is created live in the chroot's real /etc/passwd (already exists from ch7 prep; not portable through $PKG_DESTDIR since it's a real live-system mutation, same category as shadow/systemd's known gaps). sshd_config is left at its shipped default (root login not disabled) since no password/user account exists yet to log in with otherwise -- revisit once real credentials exist. 2026-10-10 10.6p1-1: helpers in versioned /usr/libexec/openssh-<ver>/ so `pkg upgrade` cannot break a running sshd; sshd_config shipped as sshd_config.ldpkg-default; no boot-enable link in the package.

LFS ch8. Uses `./config` (not `./configure`). Skips the optional test suite (book notes one specific test, 30-test_afalg.t, can fail harmlessly without certain kernel crypto options) and the optional extra docs copy. || 4.0.3 -> 4.1.0 (2026-10-23, v1.55); sha256 matches upstream .sha256.

OpenTimelineIO 0.18.1 (C++ core only) -- required by Kdenlive 26.08 (find_package(OpenTimelineIO REQUIRED)) for OTIO timeline import/export. Not in BLFS. ship_in_iso=false (Kdenlive stack = packages only). CMake, C++ install only (OTIO_PYTHON_INSTALL=OFF, OTIO_CXX_INSTALL=ON, OTIO_FIND_IMATH=ON to use the system imath), --libdir=lib. Bundled rapidjson/any/optional-lite headers are used as-is.

BLFS multimedia/opus.html -- Opus audio codec, needed by ffmpeg (--enable-libopus) and used widely for web video. ship_in_iso=false (video-editing feature = packages only). Plain autotools.

BLFS postlfs/p11-kit.html (PKCS#11 module loader, used by GnuTLS for its trust store). Part of the real GnuTLS chain -- see packages/libunistring/metadata.json. Skips the book's own trust-extract-compat/update-ca-certificates hookup, which wires into make-ca -- this project has deliberately never built make-ca's own PKCS#11 trust-store machinery (already noted elsewhere in this project: curl uses --with-ca-bundle instead specifically to avoid that rabbit hole), and GIMP/glib-networking only need p11-kit's basic module-loading functionality to exist, not a populated system trust store.

LFS ch8. Python package built as a wheel and pip-installed offline.

BLFS. Originally -D introspection=disabled since we deliberately skipped gobject-introspection when building glib2. Rebuilt with introspection=enabled for the Phase 1.5 GTK3+PyGObject installer -- gtk3's own introspection rebuild needs Pango-1.0.gir (visible directly in its g-ir-scanner --include list) which this package never produced while disabled. Skips optional man-pages/API docs and the optional test suite.

C++ bindings for pango -- the 2.46 series, providing the pangomm-1.4 pkg-config module (pangomm-2.48+ is the gtkmm-4 line). meson; --libdir=lib. ship_in_iso:false.

LFS ch8, final native build. Skips the optional test suite.

BLFS general/patchelf.html -- small standalone tool for adjusting an ELF binary's dynamic linker/RPATH, no dependencies. Added as a real, previously-unbuilt build-time tool specifically because pyside-setup's own build (packages/pyside6) uses it to bake the correct runtime library search path (pointing at /opt/qt6-full/lib) into shiboken6/PySide6's built binaries -- caught by a real 'error: patchelf not found' failure. Skips the optional test suite.

Real gap found building packages/ungoogled-chromium: ANGLE (third_party/angle/BUILD.gn's use_libpci arg, auto-enabled on Linux+X11/ozone) hard-requires <pci/pci.h> and libpci for real GPU-vendor detection via PCI bus enumeration (used for renderer GPU driver blocklisting) -- this project never built it before. BLFS general/pciutils.html, pciutils-3.15.0, real MD5 confirmed matching upstream's own published sum before computing our own sha256. Built with `make PREFIX=/usr SHAREDIR=/usr/share/hwdata SHARED=yes` (SHARED=yes so ANGLE gets libpci.so, not a static archive, matching BLFS's own documented reasoning) into $PKG_DESTDIR, following the book's exact commands including the sed that prevents pci.ids from being installed (this project already has real pci.ids data via the existing hwdata package, declared as a dep here -- avoids a file conflict between the two packages' destdirs).

LXQt file manager + desktop-icon manager (front-end to libfm-qt). LXQt 2.4 minimal-but-real desktop stack, ship_in_iso=false (Packages-page / Package Manager install only, like KDE Plasma). Built on .101 against /opt/qt6-full + KF6 6.29. cmake/meson --libdir=lib for LinuxDoors' non-multiarch layout.

LFS ch8. Skips the optional make check.

LFS ch8, final build (ch7's perl-tmp was a minimal bootstrap version). Skips the optional test suite.

Not in BLFS's own list -- File::ShareDir (needed by Intltool via XML::Parser) requires Class::Inspector at runtime. Discovered live via `perl -MXML::Parser`. Class-Inspector-1.28's own Makefile.PL needs Module::Install::DSL bootstrapped, which a plain `perl Makefile.PL` can't do -- installed via cpanm instead (see cpanm package notes), which resolves that automatically. Source tarball still fetched/kept for provenance but build.sh uses cpanm against it.

SQLite DBI driver (XS / compiled). x2goserver's session database (/var/lib/x2go/x2go_sessions) is SQLite, reached via DBI->connect('dbi:SQLite:...'). Not in LinuxDoors base Perl. DBD::SQLite bundles its own SQLite amalgamation by default; packages/sqlite is listed so a system-lib build can be forced later if wanted.

Perl Database Interface (XS / compiled). Required by x2goserver's X2Go::Server::DB::SQLite3 (use DBI). Not in LinuxDoors base Perl. cpanm builds it from the tarball; DESTDIR honoured via PERL_MM_OPT. || 1.655 -> 1.656 (2026-10-19, v1.49 update; sha256 archive-test only).