Beyond Linux ® From Scratch (systemd edition)

Optional (runtime)

Java-1.8.0.141 or OpenJDK-1.8.0.141, NSS-3.32, and p11-kit-0.23.8

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/cacerts

Installation of Certificate Authority Certificates

The make-ca.sh script will process the certificates included in the certdata.txt file for use in multiple certificate stores (if the associated applications are present on the system). Additionally, any local certificates stored in /etc/ssl/local will be imported to the certificate stores. Certificates in this directory should be stored as PEM encoded OpenSSL trusted certificates.

To create an OpenSSL trusted certificate from a regular PEM encoded file, provided by a CA not included in Mozilla's certificate distribution, you need to add trust arguments to the openssl command, and create a new certificate. There are three trust types that are recognized by the make-ca.sh script, SSL/TLS, S/Mime, and code signing. For example, using the CAcert root, if you want it to be trusted for all three roles, the following commands will create an appropriate OpenSSL trusted certificate:

install -vdm755 /etc/ssl/local &&
wget http://www.cacert.org/certs/root.crt &&
openssl x509 -in root.crt -text -fingerprint -setalias "CAcert Class 1 root" \
        -addtrust serverAuth -addtrust emailProtection -addtrust codeSigning \
        > /etc/ssl/local/CAcert_Class_1_root.pem

If one of the three trust arguments is omitted, the certificate is neither trusted, nor rejected for that role. Clients that use OpenSSL or NSS encountering this certificate will present a warning to the user. Clients using GnuTLS without p11-kit support are not aware of trusted certificates. To include this CA into the ca-bundle.crt (used for GnuTLS), it must have serverAuth trust. Additionally, to explicitly disallow a certificate for a particular use, replace the -addtrust flag with the -addreject flag.

To install the various certificate stores, first install the make-ca.sh script into the correct location. As the root user:

install -vm755 make-ca.sh-20170514 /usr/sbin/make-ca.sh

As the root user, make sure that certdata.txt is in the current directory, and update the certificate stores with the following command:

Note

If running the script a second time with the same version of certdata.txt, for instance, to add additional stores as the requisite software is installed, add the -f switch to the command line. If packaging, run make-ca.sh --help to see all available command line options.

/usr/sbin/make-ca.sh

You should periodically download a copy of certdata.txt and run the make-ca.sh script (as the root user), or as part of a monthly cron job to ensure that you have the latest available version of the certificates.

The certdata.txt file provided by BLFS is obtained from the mozilla-release branch, and is modified to provide a simple dated revision. This will be the correct version for most systems. There are, however, several other variants of the file available for use that might be preferred for one reason or another, including the files shipped with Mozilla products in this book. RedHat and OpenSUSE, for instance, use the version included in NSS-3.32. Additional upstream downloads are available at the links below.

Mozilla Release (the version provided by BLFS): https://hg.mozilla.org/releases/mozilla-release/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt
NSS (this is the latest available version): https://hg.mozilla.org/projects/nss/raw-file/tip/lib/ckfw/builtins/certdata.txt
Mozilla Central: https://hg.mozilla.org/mozilla-central/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt
Mozilla Beta: https://hg.mozilla.org/releases/mozilla-beta/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt
Mozilla Aurora: https://hg.mozilla.org/releases/mozilla-aurora/raw-file/default/security/nss/lib/ckfw/builtins/certdata.txt

Installed Programs: make-ca.sh

Installed Libraries: None

Installed Directories: /etc/ssl/{certs,java,local} and /etc/pki/{nssdb,anchors}

Short Descriptions

make-ca.sh

is a shell script that adapts a current version of certdata.txt, and prepares it for use as the system certificate store.

Last updated on 2017-08-30 16:58:57 -0700

CrackLib-2.9.6

Introduction to CrackLib

The CrackLib package contains a library used to enforce strong passwords by comparing user selected passwords to words in chosen word lists.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/cracklib/cracklib/releases/download/cracklib-2.9.6/cracklib-2.9.6.tar.gz
Download MD5 sum: c52f463585d85924b28cdc1e373ae06d
Download size: 628 KB
Estimated disk space required: 3.8 MB
Estimated build time: less than 0.1 SBU

Additional Downloads

Recommended word list for English-speaking countries (size: 5.3 MB; md5sum: cae1257e3a9f95c917cc9dbbab852316): https://github.com/cracklib/cracklib/releases/download/cracklib-2.9.6/cracklib-words-2.9.6.gz

There are additional word lists available for download, e.g., from http://www.cotse.com/tools/wordlists.htm. CrackLib can utilize as many, or as few word lists you choose to install.

Important

Users tend to base their passwords on regular words of the spoken language, and crackers know that. CrackLib is intended to filter out such bad passwords at the source using a dictionary created from word lists. To accomplish this, the word list(s) for use with CrackLib must be an exhaustive list of words and word-based keystroke combinations likely to be chosen by users of the system as (guessable) passwords.

The default word list recommended above for downloading mostly satisfies this role in English-speaking countries. In other situations, it may be necessary to download (or even create) additional word lists.

Note that word lists suitable for spell-checking are not usable as CrackLib word lists in countries with non-Latin based alphabets, because of “word-based keystroke combinations” that make bad passwords.

CrackLib Dependencies

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/cracklib

Installation of CrackLib

Install CrackLib by running the following commands:

sed -i '/skipping/d' util/packer.c &&

./configure --prefix=/usr    \
            --disable-static \
            --with-default-dict=/lib/cracklib/pw_dict &&
make

Now, as the root user:

make install                      &&
mv -v /usr/lib/libcrack.so.* /lib &&
ln -sfv ../../lib/$(readlink /usr/lib/libcrack.so) /usr/lib/libcrack.so

Issue the following commands as the root user to install the recommended word list and create the CrackLib dictionary. Other word lists (text based, one word per line) can also be used by simply installing them into /usr/share/dict and adding them to the create-cracklib-dict command.

install -v -m644 -D    ../cracklib-words-2.9.6.gz \
                         /usr/share/dict/cracklib-words.gz     &&

gunzip -v                /usr/share/dict/cracklib-words.gz     &&
ln -v -sf cracklib-words /usr/share/dict/words                 &&
echo $(hostname) >>      /usr/share/dict/cracklib-extra-words  &&
install -v -m755 -d      /lib/cracklib                         &&

create-cracklib-dict     /usr/share/dict/cracklib-words \
                         /usr/share/dict/cracklib-extra-words

If desired, check the proper operation of the library as an unprivileged user by issuing the following command:

make test

Important

If you are installing CrackLib after your LFS system has been completed and you have the Shadow package installed, you must reinstall Shadow-4.5 if you wish to provide strong password support on your system. If you are now going to install the Linux-PAM-1.3.0 package, you may disregard this note as Shadow will be reinstalled after the Linux-PAM installation.

Command Explanations

sed -i '/skipping/d' util/packer.c: Remove a meaningless warning.

--with-default-dict=/lib/cracklib/pw_dict: This parameter forces the installation of the CrackLib dictionary to the /lib hierarchy.

--disable-static: This switch prevents installation of static versions of the libraries.

mv -v /usr/lib/libcrack.so.2* /lib and ln -v -sf ../../lib/libcrack.so.2.8.1 ...: These two commands move the libcrack.so.2.9.0 library and associated symlink from /usr/lib to /lib, then recreates the /usr/lib/libcrack.so symlink pointing to the relocated file.

install -v -m644 -D ...: This command creates the /usr/share/dict directory (if it doesn't already exist) and installs the compressed word list there.

ln -v -s cracklib-words /usr/share/dict/words: The word list is linked to /usr/share/dict/words as historically, words is the primary word list in the /usr/share/dict directory. Omit this command if you already have a /usr/share/dict/words file installed on your system.

echo $(hostname) >>...: The value of hostname is echoed to a file called cracklib-extra-words. This extra file is intended to be a site specific list which includes easy to guess passwords such as company or department names, user names, product names, computer names, domain names, etc.

create-cracklib-dict ...: This command creates the CrackLib dictionary from the word lists. Modify the command to add any additional word lists you have installed.

Installed Programs: cracklib-check, cracklib-format, cracklib-packer, cracklib-unpacker and create-cracklib-dict

Installed Libraries: libcrack.so and the _cracklibmodule.so Python module

Installed Directories: /lib/cracklib, /usr/share/dict and /usr/share/cracklib

Short Descriptions

cracklib-check	is used to determine if a password is strong.
cracklib-format	is used to format text files (lowercases all words, removes control characters and sorts the lists).
cracklib-packer	creates a database with words read from standard input.
cracklib-unpacker	displays on standard output the database specified.
create-cracklib-dict	is used to create the CrackLib dictionary from the given word list(s).
`libcrack.so`	provides a fast dictionary lookup method for strong password enforcement.

Last updated on 2017-08-16 21:41:37 -0700

cryptsetup-1.7.5

Introduction to cryptsetup

cryptsetup is used to set up transparent encryption of block devices using the kernel crypto API.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.kernel.org/pub/linux/utils/cryptsetup/v1.7/cryptsetup-1.7.5.tar.xz
Download MD5 sum: d2d668223e795dcf750da44dc3e7076b
Download size: 1.2 MB
Estimated disk space required: 12 MB
Estimated build time: 0.1 SBU (add 7.4 SBU for tests)

cryptsetup Dependencies

Required

libgcrypt-1.8.0, Nettle-3.3, LVM2-2.02.171, NSS-3.32, OpenSSL-1.1.0f, popt-1.16

Optional

libpwquality-1.4.0, LVM2-2.02.171, Python-2.7.13, and passwdqc

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/cryptsetup

Kernel Configuration

Encrypted block devies require kernel support. To use it, the appropriate kernel configuration parameters need to be set:

Device Drivers  --->          
  [*] Multiple devices driver support (RAID and LVM) ---> [CONFIG_MD]
       <*/M> Device mapper support                        [CONFIG_BLK_DEV_DM]
       <*/M> Crypt target support                         [CONFIG_DM_CRYPT]

Cryptographic API  --->                                    
  <*/M> XTS support                                       [CONFIG_CRYPTO_XTS]
  <*/M> SHA224 and SHA256 digest algorithm                [CONFIG_CRYPTO_SHA256]
  <*/M> AES cipher algorithms                             [CONFIG_CRYPTO_AES]
  <*/M> AES cipher algorithms (x86_64)                    [CONFIG_CRYPTO_AES_X86_64] 
  <*/M> User-space interface for symmetric key cipher algorithms
                                                          [CONFIG_CRYPTO_USER_API_SKCIPHER]
  For tests:
  <*/M> Twofish cipher algorithm                          [CONFIG_CRYPTO_TWOFISH]

Installation of cryptsetup

Install cryptsetup by running the following commands:

./configure --prefix=/usr &&
make

To test the result, issue as the root user: make check

Now, as the root user:

make install

Configuring cryptsetup

Because of the number of possible configurations, setup of encrypted volumes is beyond the scope of the BLFS book. Please see the configuration guide in the cryptsetup FAQ.

Installed Programs: cryptsetup and veritysetup

Installed Libraries: libcryptsetup.so

Installed Directories: None

Short Descriptions

cryptsetup	is used to setup dm-crypt managed device-mapper mappings.
veritysetup	is used to configure dm-verity managed device-mapper mappings. Device-mapper verity target provides read-only transparent integrity checking of block devices using kernel crypto API.

Last updated on 2017-08-31 20:56:24 -0700

Cyrus SASL-2.1.26

Introduction to Cyrus SASL

The Cyrus SASL package contains a Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. To use SASL, a protocol includes a command for identifying and authenticating a user to a server and for optionally negotiating protection of subsequent protocol interactions. If its use is negotiated, a security layer is inserted between the protocol and the connection.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (FTP): ftp://ftp.cyrusimap.org/cyrus-sasl/cyrus-sasl-2.1.26.tar.gz
Download MD5 sum: a7f4e5e559a0e37b3ffc438c9456e425
Download size: 5.0 MB
Estimated disk space required: 30 MB
Estimated build time: 0.5 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/cyrus-sasl-2.1.26-fixes-3.patch
Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/cyrus-sasl-2.1.26-openssl-1.1.0-1.patch

Cyrus SASL Dependencies

Required

Optional

Linux-PAM-1.3.0, MIT Kerberos V5-1.15.1, MariaDB-10.2.8 or MySQL, OpenJDK-1.8.0.141, OpenLDAP-2.4.45, PostgreSQL-9.6.4, SQLite-3.20.0, krb4 and Dmalloc

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/cyrus-sasl

Installation of Cyrus SASL

Install Cyrus SASL by running the following commands:

patch -Np1 -i ../cyrus-sasl-2.1.26-fixes-3.patch &&
patch -Np1 -i ../cyrus-sasl-2.1.26-openssl-1.1.0-1.patch &&
autoreconf -fi &&

./configure --prefix=/usr        \
            --sysconfdir=/etc    \
            --enable-auth-sasldb \
            --with-dbpath=/var/lib/sasl/sasldb2 \
            --with-saslauthd=/var/run/saslauthd &&
make

This package does not come with a test suite. If you are planning on using the GSSAPI authentication mechanism, it is recommended to test it after installing the package using the sample server and client programs which were built in the preceding step. Instructions for performing the tests can be found at http://www.linuxfromscratch.org/hints/downloads/files/cyrus-sasl.txt.

Now, as the root user:

make install &&
install -v -dm755 /usr/share/doc/cyrus-sasl-2.1.26 &&
install -v -m644  doc/{*.{html,txt,fig},ONEWS,TODO} \
    saslauthd/LDAP_SASLAUTHD /usr/share/doc/cyrus-sasl-2.1.26 &&
install -v -dm700 /var/lib/sasl

Command Explanations

--with-dbpath=/var/lib/sasl/sasldb2: This switch forces the sasldb database to be created in /var/lib/sasl instead of /etc.

--with-saslauthd=/var/run/saslauthd: This switch forces saslauthd to use the FHS compliant directory /var/run/saslauthd for variable run-time data.

--enable-auth-sasldb: This switch enables SASLDB authentication backend.

--with-dblib=gdbm: This switch forces GDBM to be used instead of Berkeley DB.

--with-ldap: This switch enables the OpenLDAP support.

--enable-ldapdb: This switch enables the LDAPDB authentication backend. There is a circular dependency with this parameter. See http://wiki.linuxfromscratch.org/blfs/wiki/cyrus-sasl for a solution to this problem.

--enable-java: This switch enables compiling of the Java support libraries.

--enable-login: This option enables unsupported LOGIN authentication.

--enable-ntlm: This option enables unsupported NTLM authentication.

install -v -m644 ...: These commands install documentation which is not installed by the make install command.

install -v -m700 -d /var/lib/sasl: This directory must exist when starting saslauthd or using the sasldb plugin. If you're not going to be running the daemon or using the plugins, you may omit the creation of this directory.

Configuring Cyrus SASL

Config Files

/etc/saslauthd.conf (for saslauthd LDAP configuration) and /etc/sasl2/Appname.conf (where "Appname" is the application defined name of the application)

Configuration Information

See file:///usr/share/doc/cyrus-sasl-2.1.26/sysadmin.html for information on what to include in the application configuration files.

See file:///usr/share/doc/cyrus-sasl-2.1.26/LDAP_SASLAUTHD for configuring saslauthd with OpenLDAP.

See file:///usr/share/doc/cyrus-sasl-2.1.26/gssapi.html for configuring saslauthd with Kerberos.

Systemd Unit

If you need to run the saslauthd daemon at system startup, install the saslauthd.service unit included in the blfs-systemd-units-20160602 package using the following command:

make install-saslauthd

Note

You'll need to modify /etc/default/saslauthd and modify the MECHANISM parameter with your desired authentication mechanism.

Installed Programs: pluginviewer, saslauthd, sasldblistusers2, saslpasswd2 and testsaslauthd

Installed Library: libsasl2.so

Installed Directories: /usr/include/sasl, /usr/lib/sasl2, /usr/share/doc/cyrus-sasl-2.1.26 and /var/lib/sasl

Short Descriptions

pluginviewer	is used to list loadable SASL plugins and their properties.
saslauthd	is the SASL authentication server.
sasldblistusers2	is used to list the users in the SASL password database `sasldb2`.
saslpasswd2	is used to set and delete a user's SASL password and mechanism specific secrets in the SASL password database `sasldb2`.
testsaslauthd	is a test utility for the SASL authentication server.
`libsasl2.so`	is a general purpose authentication library for server and client applications.

Last updated on 2017-08-20 20:24:54 -0700

GnuPG-2.1.23

Introduction to GnuPG

The GnuPG package is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described by several RFCs. GnuPG 2 is the stable version of GnuPG integrating support for OpenPGP and S/MIME.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.gnupg.org/ftp/gcrypt/gnupg/gnupg-2.1.23.tar.bz2
Download (FTP): ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-2.1.23.tar.bz2
Download MD5 sum: 86c2304ead54b74a422e76c3f1bc7a91
Download size: 6.2 MB
Estimated disk space required: 107 MB (with makeinfo docs)
Estimated build time: 0.8 SBU (with makeinfo docs, add 1.4 SBU for tests)

GnuPG 2 Dependencies

Required

Libassuan-2.4.3, libgcrypt-1.8.0, libgpg-error-1.27, Libksba-1.3.5, and npth-1.5

Optional

cURL-7.55.1, GnuTLS-3.5.14, ImageMagick-7.0.6-10 (for the convert utility, used for generating the documentation), libusb-compat-0.1.5, an MTA, OpenLDAP-2.4.45, SQLite-3.20.0, texlive-20170524 (or install-tl-unx), fig2dev (for generating documentation), and GNU adns

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/gnupg2

Installation of GnuPG

Warning

If you are upgrading from gnupg prior to version 2.1, upstream developers recommend to backup ~/.gnupg, because some additional configuration will probably be necessary, and you could lose your keys. You can find instructions at http://jo-ke.name/wp/?p=111 and https://wiki.archlinux.org/index.php/GnuPG#.22Lost.22_keys.2C_upgrading_to_gnupg_version_2.1.

If the top directory path where the source is unpacked contains symbolic links, the openpgp tests may fail. If this is your case and you wish to run the test suite, fix that with:

sed -e '/noinst_SCRIPTS = gpg-zip/c sbin_SCRIPTS += gpg-zip' \
    -i tools/Makefile.in

Install GnuPG by running the following commands:

./configure --prefix=/usr            \
            --enable-symcryptrun     \
            --enable-maintainer-mode \
            --docdir=/usr/share/doc/gnupg-2.1.23 &&
make &&

makeinfo --html --no-split \
         -o doc/gnupg_nochunks.html doc/gnupg.texi &&
makeinfo --plaintext       \
         -o doc/gnupg.txt           doc/gnupg.texi

If you have texlive-20170524 installed and you wish to create documentation in alternate formats, issue the following commands:

make -C doc pdf ps html

To test the results, issue: make check.

Note that if you have already installed GnuPG, the instructions below will overwrite /usr/share/man/man1/gpg-zip.1. Now, as the root user:

make install &&

install -v -m755 -d /usr/share/doc/gnupg-2.1.23/html            &&
install -v -m644    doc/gnupg_nochunks.html \
                    /usr/share/doc/gnupg-2.1.23/html/gnupg.html &&
install -v -m644    doc/*.texi doc/gnupg.txt \
                    /usr/share/doc/gnupg-2.1.23

If you created alternate formats of the documentation, install it using the following command as the root user:

install -v -m644 doc/gnupg.html/* \
                 /usr/share/doc/gnupg-2.1.23/html &&
install -v -m644 doc/gnupg.{pdf,dvi,ps} \
                 /usr/share/doc/gnupg-2.1.23

Command Explanations

sed ... tools/Makefile.in: This command is needed to build the gpg-zip program.

--docdir=/usr/share/doc/gnupg-2.1.23: This switch changes the default docdir to /usr/share/doc/gnupg-2.1.23.

--enable-symcryptrun: This switch enables building the symcryptrun program.

--enable-maintainer-mode: This switch is needed for proper completion of the tests.

--enable-g13: This switch enables building the g13 program.

Installed Programs: addgnupghome, applygnupgdefaults, dirmngr, dirmngr-client, g13, gpg-agent, gpg-connect-agent, gpg, gpgconf, gpgparsemail, gpgscm, gpgsm, gpgtar, gpgv, igpg-zip, kbxutil, symcryptrun, and watchgnupg

Installed Libraries: None

Installed Directories: /usr/share/doc/gnupg-2.1.23 and /usr/share/gnupg

Short Descriptions

addgnupghome	is used to create and populate user's `~/.gnupg` directories
applygnupgdefaults	is a wrapper script used to run gpgconf with the `--apply-defaults` parameter on all user's GnuPG home directories.
dirmngr	is a tool that takes care of accessing the OpenPGP keyservers.
dirmngr-client	is a tool to contact a running dirmngr and test whether a certificate has been revoked.
g13	is a tool to create, mount or unmount an encrypted file system container (optional).
gpg-agent	is a daemon used to manage secret (private) keys independently from any protocol. It is used as a backend for gpg2 and gpgsm as well as for a couple of other utilities.
gpg-connect-agent	is a utility used to communicate with a running gpg-agent.
gpg	is the OpenPGP part of the GNU Privacy Guard (GnuPG). It is a tool used to provide digital encryption and signing services using the OpenPGP standard.
gpgconf	is a utility used to automatically and reasonably safely query and modify configuration files in the `~/.gnupg` home directory. It is designed not to be invoked manually by the user, but automatically by graphical user interfaces.
gpgparsemail	is a utility currently only useful for debugging. Run it with `--help` for usage information.
gpgscm	executes the given scheme program or spawns an interactive shell.
gpgsm	is a tool similar to gpg2 used to provide digital encryption and signing services on X.509 certificates and the CMS protocol. It is mainly used as a backend for S/MIME mail processing.
gpgtar	is a tool to encrypt or sign files into an archive.
gpgv	is a verify only version of gpg2.
gpg-zip	encrypts or signs files into an archive.
kbxutil	is used to list, export and import Keybox data.
symcryptrun	is a simple symmetric encryption tool.
watchgnupg	is used to listen to a Unix Domain socket created by any of the GnuPG tools.

Last updated on 2017-08-26 21:14:29 -0700

GnuTLS-3.5.14

Introduction to GnuTLS

The GnuTLS package contains libraries and userspace tools which provide a secure layer over a reliable transport layer. Currently the GnuTLS library implements the proposed standards by the IETF's TLS working group. Quoting from the TLS protocol specification:

“The TLS protocol provides communications privacy over the Internet. The protocol allows client/server applications to communicate in a way that is designed to prevent eavesdropping, tampering, or message forgery.”

GnuTLS provides support for TLS 1.2, TLS 1.1, TLS 1.0, and SSL 3.0 protocols, TLS extensions, including server name and max record size. Additionally, the library supports authentication using the SRP protocol, X.509 certificates and OpenPGP keys, along with support for the TLS Pre-Shared-Keys (PSK) extension, the Inner Application (TLS/IA) extension and X.509 and OpenPGP certificate handling.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.gnupg.org/ftp/gcrypt/gnutls/v3.5/gnutls-3.5.14.tar.xz
Download (FTP): ftp://ftp.gnupg.org/gcrypt/gnutls/v3.5/gnutls-3.5.14.tar.xz
Download MD5 sum: 1e84b57a472b5f3b01f2c1b7a3a2bcbe
Download size: 6.9 MB
Estimated disk space required: 147 MB (add 42 MB for tests)
Estimated build time: 1.3 SBU (add 5.0 SBU for tests)

GnuTLS Dependencies

Required

Nettle-3.3

Optional

Doxygen-1.8.13, GTK-Doc-1.26, Guile-2.2.2, libidn-1.33 or libidn2, Net-tools-CVS_20101030 (used during the test suite), texlive-20170524 or install-tl-unx, Unbound-1.6.5 (to build the DANE library), Valgrind-3.13.0 (used during the test suite), autogen, cmocka and datefudge (used during the test suite if the DANE library is built), and Trousers (Trusted Platform Module support)

Note

Note that if you do not install libtasn1-4.12, an older version shipped in the GnuTLS tarball will be used instead.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/gnutls

Installation of GnuTLS

Install GnuTLS by running the following commands:

./configure --prefix=/usr \
            --with-default-trust-store-pkcs11="pkcs11:" &&
make

To test the results, issue: make check. If a prior version of GnuTLS (or the same version but without all of the recommended dependencies) has been installed, some tests may fail. If /usr/lib/libgnutls.so and the target of that symlink are moved or renamed so that they cannot be found, all tests should pass and the install procedure will restore libgnutls.so and the versioned library it points to.

Now, as the root user:

make install

If you passed --enable-gtk-doc to the configure script, the API will automatically be installed. Otherwise, if desired, you can still install the API documentation to the /usr/share/gtk-doc/html/gnutls directory using the following command as the root user:

make -C doc/reference install-data-local

Command Explanations

--with-default-trust-store-pkcs11="pkcs11:": This switch tells gnutls to use the PKCS #11 trust store as the default trust. Omit this switch if p11-kit-0.23.8 is not installed.

--with-default-trust-store-file=/etc/ssl/ca-bundle.crt: This switch tells configure where to find the legacy CA certificate bundle and to use it instead of PKCS #11 module by default. Use this if p11-kit-0.23.8 is not installed.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

--enable-openssl-compatibility: Use this switch if you wish to build the OpenSSL compatibility library.

--without-p11-kit: use this switch if you have not installed p11-kit.

--with-included-unistring: uses the bundled version of libunistring, instead of the system one. Use this switch if you have not installed libunistring-0.9.7.

Installed Programs: certtool, danetool, gnutls-cli, gnutls-cli-debug, gnutls-serv, ocsptool, p11tool, psktool, and srptool

Installed Libraries: libgnutls.so, libgnutls-dane.so, libgnutlsxx.so, libgnutls-openssl.so, and /usr/lib/guile/2.0/guile-gnutls-v-2.so

Installed Directories: /usr/{include,share/gtk-doc/html,share/guile/site/2.0}/gnutls

Short Descriptions

certtool	is used to generate X.509 certificates, certificate requests, and private keys.
danetool	is a tool used to generate and check DNS resource records for the DANE protocol.
gnutls-cli	is a simple client program to set up a TLS connection to some other computer.
gnutls-cli-debug	is a simple client program to set up a TLS connection to some other computer and produces very verbose progress results.
gnutls-serv	is a simple server program that listens to incoming TLS connections.
ocsptool	is a program that can parse and print information about OCSP requests/responses, generate requests and verify responses.
p11tool	is a program that allows handling data from PKCS #11 smart cards and security modules.
psktool	is a simple program that generates random keys for use with TLS-PSK.
srptool	is a simple program that emulates the programs in the Stanford SRP (Secure Remote Password) libraries using GnuTLS.
`libgnutls.so`	contains the core API functions and X.509 certificate API functions.

Last updated on 2017-08-20 15:06:11 -0700

GPGME-1.9.0

Introduction to GPGME

The GPGME package is a C library that allows cryptography support to be added to a program. It is designed to make access to public key crypto engines like GnuPG or GpgSM easier for applications. GPGME provides a high-level crypto API for encryption, decryption, signing, signature verification and key management.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.gnupg.org/ftp/gcrypt/gpgme/gpgme-1.9.0.tar.bz2
Download (FTP): ftp://ftp.gnupg.org/gcrypt/gpgme/gpgme-1.9.0.tar.bz2
Download MD5 sum: 1e00bb8ef04d1d05d5a0f19e143854c3
Download size: 1.3 MB
Estimated disk space required: 127 MB (with all bindings)
Estimated build time: 1.1 SBU (with all bindings, add 0.2 SBU for tests)

GPGME Dependencies

Required

Libassuan-2.4.3

Optional

Doxygen-1.8.13 (for API documentation), GnuPG-2.1.23 (used during the testsuite), and Clisp-2.49, Python-2.7.13, Python-3.6.2, Qt-5.9.1, and/or SWIG-3.0.12 (for language bindings)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/gpgme

Installation of GPGME

Install GPGME by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Installed Program: gpgme-config and gpgme-tool

Installed Libraries: libgpgme-pthread.so and libgpgme.so

Installed Directory: /usr/share/common-lisp/source/gpgme

Short Descriptions

gpgme-config	is used to obtain GPGME compilation and linking information.
gpgme-tool	prints fingerprint and keyid with keyservers.
`libgpgme-pthread.so`	contains the GPGME API functions for applications using pthread.
`libgpgme.so`	contains the GPGME API functions.

Last updated on 2017-08-20 20:24:54 -0700

Haveged-1.9.1

Introduction to Haveged

The Haveged package contains a daemon that generates an unpredictable stream of random numbers and feeds the /dev/random device.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/haveged/haveged-1.9.1.tar.gz
Download MD5 sum: 015ff58cd10607db0e0de60aeca2f5f8
Download size: 468 KB
Estimated disk space required: 4.8 MB
Estimated build time: 0.2 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/haveged

Installation of Haveged

Install Haveged by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install &&
mkdir -pv    /usr/share/doc/haveged-1.9.1 &&
cp -v README /usr/share/doc/haveged-1.9.1

Configuring haveged

Systemd Unit

If you want the Haveged daemon to start automatically when the system is booted, install the haveged.service unit included in the blfs-systemd-units-20160602 package (as the root user):

make install-haveged

Installed Programs: haveged

Installed Libraries: libhavege.so

Installed Directory: /usr/include/haveged

Short Descriptions

haveged

is a daemon that generates an unpredictable stream of random numbers harvested from the indirect effects of hardware events based on hidden processor states (caches, branch predictors, memory translation tables, etc).

Last updated on 2017-08-29 10:55:51 -0700

Iptables-1.6.1

Introduction to Iptables

The next part of this chapter deals with firewalls. The principal firewall tool for Linux is Iptables. You will need to install Iptables if you intend on using any form of a firewall.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.netfilter.org/projects/iptables/files/iptables-1.6.1.tar.bz2
Download (FTP): ftp://ftp.netfilter.org/pub/iptables/iptables-1.6.1.tar.bz2
Download MD5 sum: ab38a33806b6182c6f53d6afb4619add
Download size: 608 KB
Estimated disk space required: 15 MB
Estimated build time: 0.2 SBU

Iptables Dependencies

Optional

nftables

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/iptables

Kernel Configuration

A firewall in Linux is accomplished through a portion of the kernel called netfilter. The interface to netfilter is Iptables. To use it, the appropriate kernel configuration parameters are found in:

[*] Networking support  --->                                    [CONFIG_NET]
      Networking Options  --->
        [*] Network packet filtering framework (Netfilter) ---> [CONFIG_NETFILTER]

Installation of Iptables

Note

The installation below does not include building some specialized extension libraries which require the raw headers in the Linux source code. If you wish to build the additional extensions (if you aren't sure, then you probably don't), you can look at the INSTALL file to see an example of how to change the KERNEL_DIR= parameter to point at the Linux source code. Note that if you upgrade the kernel version, you may also need to recompile Iptables and that the BLFS team has not tested using the raw kernel headers.

For some non-x86 architectures, the raw kernel headers may be required. In that case, modify the KERNEL_DIR= parameter to point at the Linux source code.

Install Iptables by running the following commands:

./configure --prefix=/usr      \
            --sbindir=/sbin    \
            --disable-nftables \
            --enable-libipq    \
            --with-xtlibdir=/lib/xtables &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
ln -sfv ../../sbin/xtables-multi /usr/bin/iptables-xml &&

for file in ip4tc ip6tc ipq iptc xtables
do
  mv -v /usr/lib/lib${file}.so.* /lib &&
  ln -sfv ../../lib/$(readlink /usr/lib/lib${file}.so) /usr/lib/lib${file}.so
done

Command Explanations

--disable-nftables: This switch disables building nftables compat. Omit this switch if you have installed nftables.

--enable-libipq: This switch enables building of libipq.so which can be used by some packages outside of BLFS.

--with-xtlibdir=/lib/xtables: Ensure all Iptables modules are installed in the /lib/xtables directory.

--enable-nfsynproxy: This switch enables installation of nfsynproxy SYNPROXY configuration tool.

ln -sfv ../../sbin/xtables-multi /usr/bin/iptables-xml: Ensure the symbolic link for iptables-xml is relative.

Configuring Iptables

Introductory instructions for configuring your firewall are presented in the next section: Firewalling

Systemd Unit

To set up the iptables firewall at boot, install the iptables.service unit included in the blfs-systemd-units-20160602 package.

make install-iptables

Installed Programs: ip6tables, ip6tables-restore, ip6tables-save, iptables, iptables-restore, iptables-save, iptables-xml, nfsynproxy (optional) and xtables-multi

Installed Libraries: libip4tc.so, libip6tc.so, libipq.so, libiptc.so, and libxtables.so

Installed Directories: /lib/xtables and /usr/include/libiptc

Short Descriptions

iptables	is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel.
iptables-restore	is used to restore IP Tables from data specified on STDIN. Use I/O redirection provided by your shell to read from a file.
iptables-save	is used to dump the contents of an IP Table in easily parseable format to STDOUT. Use I/O-redirection provided by your shell to write to a file.
iptables-xml	is used to convert the output of iptables-save to an XML format. Using the `iptables.xslt` stylesheet converts the XML back to the format of iptables-restore.
ip6tables*	are a set of commands for IPV6 that parallel the iptables commands above.
nfsynproxy	(optional) configuration tool. SYNPROXY target makes handling of large SYN floods possible without the large performance penalties imposed by the connection tracking in such cases.
xtables-multi	is a binary that behaves according to the name it is called by.

Last updated on 2017-08-25 14:22:07 -0700

Setting Up a Network Firewall

Before you read this part of the chapter, you should have already installed iptables as described in the previous section.

Introduction to Firewall Creation

The general purpose of a firewall is to protect a computer or a network against malicious access.

In a perfect world, every daemon or service on every machine is perfectly configured and immune to flaws such as buffer overflows or other problems regarding its security. Furthermore, you trust every user accessing your services. In this world, you do not need to have a firewall.

In the real world however, daemons may be misconfigured and exploits against essential services are freely available. You may wish to choose which services are accessible by certain machines or you may wish to limit which machines or applications are allowed external access. Alternatively, you may simply not trust some of your applications or users. You are probably connected to the Internet. In this world, a firewall is essential.

Don't assume however, that having a firewall makes careful configuration redundant, or that it makes any negligent misconfiguration harmless. It doesn't prevent anyone from exploiting a service you intentionally offer but haven't recently updated or patched after an exploit went public. Despite having a firewall, you need to keep applications and daemons on your system properly configured and up to date. A firewall is not a cure all, but should be an essential part of your overall security strategy.

Meaning of the Word "Firewall"

The word firewall can have several different meanings.

Personal Firewall

This is a hardware device or software program commercially sold (or offered via freeware) by companies such as Symantec which claims that it secures a home or desktop computer connected to the Internet. This type of firewall is highly relevant for users who do not know how their computers might be accessed via the Internet or how to disable that access, especially if they are always online and connected via broadband links.

Masquerading Router

This is a system placed between the Internet and an intranet. To minimize the risk of compromising the firewall itself, it should generally have only one role—that of protecting the intranet. Although not completely risk free, the tasks of doing the routing and IP masquerading (rewriting IP headers of the packets it routes from clients with private IP addresses onto the Internet so that they seem to come from the firewall itself) are commonly considered relatively secure.

BusyBox

This is often an old computer you may have retired and nearly forgotten, performing masquerading or routing functions, but offering non-firewall services such as a web-cache or mail. This may be used for home networks, but is not to be considered as secure as a firewall only machine because the combination of server and router/firewall on one machine raises the complexity of the setup.

Firewall with a Demilitarized Zone [Not Further Described Here]

This box performs masquerading or routing, but grants public access to some branch of your network which, because of public IPs and a physically separated structure, is essentially a separate network with direct Internet access. The servers on this network are those which must be easily accessible from both the Internet and intranet. The firewall protects both networks. This type of firewall has a minimum of three network interfaces.

Packetfilter

This type of firewall does routing or masquerading, but does not maintain a state table of ongoing communication streams. It is fast, but quite limited in its ability to block undesired packets without blocking desired packets.

Now You Can Start to Build your Firewall

Caution

This introduction on how to setup a firewall is not a complete guide to securing systems. Firewalling is a complex issue that requires careful configuration. The scripts quoted here are simply intended to give examples of how a firewall works. They are not intended to fit into any particular configuration and may not provide complete protection from an attack.

Customization of these scripts for your specific situation will be necessary for an optimal configuration, but you should make a serious study of the iptables documentation and creating firewalls in general before hacking away. Have a look at the list of links for further reading at the end of this section for more details. There you will find a list of URLs that contain quite comprehensive information about building your own firewall.

The main startup firewall is located in the file /etc/systemd/scripts/iptables. The sections below provide three different approaches that can be used for a system.

Note

You should always run your firewall rules from a script. This ensures consistency and a record of what was done. It also allows retention of comments that are essential for understanding the rules long after they were written.

Personal Firewall

A Personal Firewall is designed to let you access all the services offered on the Internet, but keep your box secure and your data private.

Below is a slightly modified version of Rusty Russell's recommendation from the Linux 2.4 Packet Filtering HOWTO. It is still applicable to the Linux 2.6 kernels.

install -v -dm755 /etc/systemd/scripts

cat > /etc/systemd/scripts/iptables << "EOF"
#!/bin/sh

# Begin /etc/systemd/scripts/iptables

# Insert connection-tracking modules
# (not needed if built into the kernel)
modprobe nf_conntrack
modprobe xt_LOG

# Enable broadcast echo Protection
echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts

# Disable Source Routed Packets
echo 0 > /proc/sys/net/ipv4/conf/all/accept_source_route
echo 0 > /proc/sys/net/ipv4/conf/default/accept_source_route

# Enable TCP SYN Cookie Protection
echo 1 > /proc/sys/net/ipv4/tcp_syncookies

# Disable ICMP Redirect Acceptance
echo 0 > /proc/sys/net/ipv4/conf/default/accept_redirects

# Do not send Redirect Messages
echo 0 > /proc/sys/net/ipv4/conf/all/send_redirects
echo 0 > /proc/sys/net/ipv4/conf/default/send_redirects

# Drop Spoofed Packets coming in on an interface, where responses
# would result in the reply going out a different interface.
echo 1 > /proc/sys/net/ipv4/conf/all/rp_filter
echo 1 > /proc/sys/net/ipv4/conf/default/rp_filter

# Log packets with impossible addresses.
echo 1 > /proc/sys/net/ipv4/conf/all/log_martians
echo 1 > /proc/sys/net/ipv4/conf/default/log_martians

# be verbose on dynamic ip-addresses  (not needed in case of static IP)
echo 2 > /proc/sys/net/ipv4/ip_dynaddr

# disable Explicit Congestion Notification
# too many routers are still ignorant
echo 0 > /proc/sys/net/ipv4/tcp_ecn

# Set a known state
iptables -P INPUT   DROP
iptables -P FORWARD DROP
iptables -P OUTPUT  DROP

# These lines are here in case rules are already in place and the
# script is ever rerun on the fly. We want to remove all rules and
# pre-existing user defined chains before we implement new rules.
iptables -F
iptables -X
iptables -Z

iptables -t nat -F

# Allow local-only connections
iptables -A INPUT  -i lo -j ACCEPT

# Free output on any interface to any ip for any service
# (equal to -P ACCEPT)
iptables -A OUTPUT -j ACCEPT

# Permit answers on already established connections
# and permit new connections related to established ones
# (e.g. port mode ftp)
iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT

# Log everything else. What's Windows' latest exploitable vulnerability?
iptables -A INPUT -j LOG --log-prefix "FIREWALL:INPUT "

# End /etc/systemd/scripts/iptables
EOF
chmod 700 /etc/systemd/scripts/iptables

This script is quite simple, it drops all traffic coming into your computer that wasn't initiated from your computer, but as long as you are simply surfing the Internet you are unlikely to exceed its limits.

If you frequently encounter certain delays at accessing FTP servers, take a look at BusyBox example number 4.

Even if you have daemons or services running on your system, these will be inaccessible everywhere but from your computer itself. If you want to allow access to services on your machine, such as ssh or ping, take a look at BusyBox.

Masquerading Router

A true Firewall has two interfaces, one connected to an intranet, in this example eth0, and one connected to the Internet, here ppp0. To provide the maximum security for the firewall itself, make sure that there are no unnecessary servers running on it such as X11 et al. As a general principle, the firewall itself should not access any untrusted service (think of a remote server giving answers that makes a daemon on your system crash, or even worse, that implements a worm via a buffer-overflow).

install -v -dm755 /etc/systemd/scripts

cat > /etc/systemd/scripts/iptables << "EOF"
#!/bin/sh

# Begin /etc/systemd/scripts/iptables

echo
echo "You're using the example configuration for a setup of a firewall"
echo "from Beyond Linux From Scratch."
echo "This example is far from being complete, it is only meant"
echo "to be a reference."
echo "Firewall security is a complex issue, that exceeds the scope"
echo "of the configuration rules below."

echo "You can find additional information"
echo "about firewalls in Chapter 4 of the BLFS book."
echo "http://www.linuxfromscratch.org/blfs"
echo

# Insert iptables modules (not needed if built into the kernel).

modprobe nf_conntrack
modprobe nf_conntrack_ftp
modprobe xt_conntrack
modprobe xt_LOG
modprobe xt_state

# Enable broadcast echo Protection
echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts

# Disable Source Routed Packets
echo 0 > /proc/sys/net/ipv4/conf/all/accept_source_route

# Enable TCP SYN Cookie Protection
echo 1 > /proc/sys/net/ipv4/tcp_syncookies

# Disable ICMP Redirect Acceptance
echo 0 > /proc/sys/net/ipv4/conf/all/accept_redirects

# Don't send Redirect Messages
echo 0 > /proc/sys/net/ipv4/conf/default/send_redirects

# Drop Spoofed Packets coming in on an interface where responses
# would result in the reply going out a different interface.
echo 1 > /proc/sys/net/ipv4/conf/default/rp_filter

# Log packets with impossible addresses.
echo 1 > /proc/sys/net/ipv4/conf/all/log_martians

# Be verbose on dynamic ip-addresses  (not needed in case of static IP)
echo 2 > /proc/sys/net/ipv4/ip_dynaddr

# Disable Explicit Congestion Notification
# Too many routers are still ignorant
echo 0 > /proc/sys/net/ipv4/tcp_ecn

# Set a known state
iptables -P INPUT   DROP
iptables -P FORWARD DROP
iptables -P OUTPUT  DROP

# These lines are here in case rules are already in place and the
# script is ever rerun on the fly. We want to remove all rules and
# pre-existing user defined chains before we implement new rules.
iptables -F
iptables -X
iptables -Z

iptables -t nat -F

# Allow local connections
iptables -A INPUT  -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT

# Allow forwarding if the initiated on the intranet
iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD ! -i ppp+ -m conntrack --ctstate NEW       -j ACCEPT

# Do masquerading
# (not needed if intranet is not using private ip-addresses)
iptables -t nat -A POSTROUTING -o ppp+ -j MASQUERADE

# Log everything for debugging
# (last of all rules, but before policy rules)
iptables -A INPUT   -j LOG --log-prefix "FIREWALL:INPUT "
iptables -A FORWARD -j LOG --log-prefix "FIREWALL:FORWARD "
iptables -A OUTPUT  -j LOG --log-prefix "FIREWALL:OUTPUT "

# Enable IP Forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward

# End /etc/systemd/scripts/iptables
EOF
chmod 700 /etc/systemd/scripts/iptables

With this script your intranet should be reasonably secure against external attacks. No one should be able to setup a new connection to any internal service and, if it's masqueraded, makes your intranet invisible to the Internet. Furthermore, your firewall should be relatively safe because there are no services running that a cracker could attack.

Note

If the interface you're connecting to the Internet doesn't connect via PPP, you will need to change <ppp+> to the name of the interface (e.g., eth1) which you are using.

BusyBox

This scenario isn't too different from the Masquerading Router, but additionally offers some services to your intranet. Examples of this can be when you want to administer your firewall from another host on your intranet or use it as a proxy or a name server.

Note

Outlining a true concept of how to protect a server that offers services on the Internet goes far beyond the scope of this document. See the references at the end of this section for more information.

Be cautious. Every service you have enabled makes your setup more complex and your firewall less secure. You are exposed to the risks of misconfigured services or running a service with an exploitable bug. A firewall should generally not run any extra services. See the introduction to the Masquerading Router for some more details.

If you want to add services such as internal Samba or name servers that do not need to access the Internet themselves, the additional statements are quite simple and should still be acceptable from a security standpoint. Just add the following lines into the script before the logging rules.

iptables -A INPUT  -i ! ppp+  -j ACCEPT
iptables -A OUTPUT -o ! ppp+  -j ACCEPT

If daemons, such as squid, have to access the Internet themselves, you could open OUTPUT generally and restrict INPUT.

iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -j ACCEPT

However, it is generally not advisable to leave OUTPUT unrestricted. You lose any control over trojans who would like to "call home", and a bit of redundancy in case you've (mis-)configured a service so that it broadcasts its existence to the world.

To accomplish this, you should restrict INPUT and OUTPUT on all ports except those that it's absolutely necessary to have open. Which ports you have to open depends on your needs: mostly you will find them by looking for failed accesses in your log files.

Have a Look at the Following Examples:

Squid is caching the web:

iptables -A OUTPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT  -p tcp --sport 80 -m conntrack --ctstate ESTABLISHED \
  -j ACCEPT

Your caching name server (e.g., named) does its lookups via UDP:
```
iptables -A OUTPUT -p udp --dport 53 -j ACCEPT
```

You want to be able to ping your computer to ensure it's still alive:

iptables -A INPUT  -p icmp -m icmp --icmp-type echo-request -j ACCEPT
iptables -A OUTPUT -p icmp -m icmp --icmp-type echo-reply   -j ACCEPT

If you are frequently accessing FTP servers or enjoy chatting, you might notice certain delays because some implementations of these daemons have the feature of querying an identd on your system to obtain usernames. Although there's really little harm in this, having an identd running is not recommended because many security experts feel the service gives out too much additional information.

To avoid these delays you could reject the requests with a 'tcp-reset':
```
iptables -A INPUT  -p tcp --dport 113 -j REJECT --reject-with tcp-reset
```
To log and drop invalid packets (packets that came in after netfilter's timeout or some types of network scans) insert these rules at the top of the chain:
```
iptables -I INPUT 0 -p tcp -m conntrack --ctstate INVALID \
  -j LOG --log-prefix "FIREWALL:INVALID "
iptables -I INPUT 1 -p tcp -m conntrack --ctstate INVALID -j DROP
```
Anything coming from the outside should not have a private address, this is a common attack called IP-spoofing:
```
iptables -A INPUT -i ppp+ -s 10.0.0.0/8     -j DROP
iptables -A INPUT -i ppp+ -s 172.16.0.0/12  -j DROP
iptables -A INPUT -i ppp+ -s 192.168.0.0/16 -j DROP
```
There are other addresses that you may also want to drop: 0.0.0.0/8, 127.0.0.0/8, 224.0.0.0/3 (multicast and experimental), 169.254.0.0/16 (Link Local Networks), and 192.0.2.0/24 (IANA defined test network).

If your firewall is a DHCP client, you need to allow those packets:

iptables -A INPUT  -i ppp0 -p udp -s 0.0.0.0 --sport 67 \
   -d 255.255.255.255 --dport 68 -j ACCEPT

To simplify debugging and be fair to anyone who'd like to access a service you have disabled, purposely or by mistake, you could REJECT those packets that are dropped.

Obviously this must be done directly after logging as the very last lines before the packets are dropped by policy:
```
iptables -A INPUT -j REJECT
```

These are only examples to show you some of the capabilities of the firewall code in Linux. Have a look at the man page of iptables. There you will find much more information. The port numbers needed for this can be found in /etc/services, in case you didn't find them by trial and error in your log file.

Conclusion

Finally, there is one fact you must not forget: The effort spent attacking a system corresponds to the value the cracker expects to gain from it. If you are responsible for valuable information, you need to spend the time to protect it properly.

Extra Information

Where to Start with Further Reading on Firewalls

www.netfilter.org - Homepage of the netfilter/iptables project
Netfilter related FAQ
Netfilter related HOWTO's
en.tldp.org/LDP/nag2/x-087-2-firewall.html
en.tldp.org/HOWTO/Security-HOWTO.html
en.tldp.org/HOWTO/Firewall-HOWTO.html
www.linuxsecurity.com/docs/
www.little-idiot.de/firewall (German & outdated, but very comprehensive)
linux.oreillynet.com/pub/a/linux/2000/03/10/netadmin/ddos.html
staff.washington.edu/dittrich/misc/ddos
www.e-infomax.com/ipmasq
www.circlemud.org/~jelson/writings/security/index.htm
www.securityfocus.com
www.cert.org - tech_tips
security.ittoolbox.com
www.insecure.org/reading.html

Last updated on 2016-06-04 22:57:10 -0700

libcap-2.25 with PAM

Introduction to libcap with PAM

The libcap package was installed in LFS, but if Linux-PAM support is desired, the PAM module must be built (after installation of Linux-PAM).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.kernel.org/pub/linux/libs/security/linux-privs/libcap2/libcap-2.25.tar.xz
Download MD5 sum: 6666b839e5d46c2ad33fc8aa2ceb5f77
Download size: 64 KB
Estimated disk space required: 1.7 MB
Estimated build time: less than 0.1 SBU

libcap Dependencies

Required

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libcap

Installation of libcap

Install libcap by running the following commands:

make -C pam_cap

This package does not come with a test suite.

Now, as the root user:

install -v -m755 pam_cap/pam_cap.so /lib/security &&
install -v -m644 pam_cap/capability.conf /etc/security

Installed Programs: None

Installed Library: pam_cap.so

Installed Directories: None

Last updated on 2017-08-26 09:42:24 -0700

Linux-PAM-1.3.0

Introduction to Linux PAM

The Linux PAM package contains Pluggable Authentication Modules used to enable the local system administrator to choose how applications authenticate users.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://linux-pam.org/library/Linux-PAM-1.3.0.tar.bz2
Download MD5 sum: da4b2289b7cfb19583d54e9eaaef1c3a
Download size: 1.3 MB
Estimated disk space required: 28 MB (with tests)
Estimated build time: 0.5 SBU (with tests)

Additional Downloads

Optional Documentation

Download (HTTP): http://linux-pam.org/documentation/Linux-PAM-1.2.0-docs.tar.bz2
Download MD5 sum: 558378b8be9b8b5c987326f4529f2130
Download size 480 KB

Linux PAM Dependencies

Optional

Berkeley DB-6.2.32, CrackLib-2.9.6, libtirpc-1.0.2 and Prelude

Optional (To Rebuild the Documentation)

docbook-xml-4.5, docbook-xsl-1.79.1, fop-2.2, libxslt-1.1.29 and either w3m-0.5.3 or elinks (but with a link calling it 'links') and remove the documentation switch.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/linux-pam

Installation of Linux PAM

If you downloaded the documentation, unpack the tarball by issuing the following command.

tar -xf ../Linux-PAM-1.2.0-docs.tar.bz2 --strip-components=1

Install Linux PAM by running the following commands:

./configure --prefix=/usr                    \
            --sysconfdir=/etc                \
            --libdir=/usr/lib                \
            --disable-regenerate-docu        \
            --enable-securedir=/lib/security \
            --docdir=/usr/share/doc/Linux-PAM-1.3.0 &&
make

To test the results, a suitable /etc/pam.d/other configuration file must exist.

Reinstallation or upgrade of Linux PAM

If you have a system with Linux PAM installed and working, be careful when modifying the files in /etc/pam.d, since your system may become totally unusable. If you want to run the tests, you do not need to create another /etc/pam.d/other file. The installed one can be used for that purpose.

You should also be aware that make install overwrites the configuration files in /etc/security as well as /etc/environment. In case you have modified those files, be sure to back them up.

For a first installation, create the configuration file by issuing the following commands as the root user:

install -v -m755 -d /etc/pam.d &&

cat > /etc/pam.d/other << "EOF"
auth     required       pam_deny.so
account  required       pam_deny.so
password required       pam_deny.so
session  required       pam_deny.so
EOF

Now run the tests by issuing make check. Ensure there are no errors produced by the tests before continuing the installation. Note that the checks are quite long. It may be useful to redirect the output to a log file in order to inspect it thoroughly.

Only in case of a first installation, remove the configuration file created earlier by issuing the following command as the root user:

rm -fv /etc/pam.d/*

Now, as the root user:

make install &&
chmod -v 4755 /sbin/unix_chkpwd &&

for file in pam pam_misc pamc
do
  mv -v /usr/lib/lib${file}.so.* /lib &&
  ln -sfv ../../lib/$(readlink /usr/lib/lib${file}.so) /usr/lib/lib${file}.so
done

Command Explanations

--enable-securedir=/lib/security: This switch sets install location for the PAM modules.

--disable-regenerate-docu : This switch prevents this version of the package trying to build its documentation, and failing, if the required dependencies except w3m-0.5.3 are present, but Links-2.14 is present. Remove this switch if you have installed w3m (or elinks, with a link so it can be invoked as 'links').

chmod -v 4755 /sbin/unix_chkpwd: The unix_chkpwd helper program must be setuid so that non-root processes can access the shadow file.

Configuring Linux-PAM

Config Files

/etc/security/* and /etc/pam.d/*

Configuration Information

Configuration information is placed in /etc/pam.d/. Below is an example file:

# Begin /etc/pam.d/other

auth            required        pam_unix.so     nullok
account         required        pam_unix.so
session         required        pam_unix.so
password        required        pam_unix.so     nullok

# End /etc/pam.d/other

Now set up some generic files. As root:

install -vdm755 /etc/pam.d &&
cat > /etc/pam.d/system-account << "EOF" &&
# Begin /etc/pam.d/system-account

account   required    pam_unix.so

# End /etc/pam.d/system-account
EOF

cat > /etc/pam.d/system-auth << "EOF" &&
# Begin /etc/pam.d/system-auth

auth      required    pam_unix.so

# End /etc/pam.d/system-auth
EOF

cat > /etc/pam.d/system-session << "EOF"
# Begin /etc/pam.d/system-session

session   required    pam_unix.so

# End /etc/pam.d/system-session
EOF

The remaining generic file depends on whether CrackLib-2.9.6 is installed. If it is installed, use:

cat > /etc/pam.d/system-password << "EOF"
# Begin /etc/pam.d/system-password

# check new passwords for strength (man pam_cracklib)
password  required    pam_cracklib.so   type=Linux retry=3 difok=5 \
                                        difignore=23 minlen=9 dcredit=1 \
                                        ucredit=1 lcredit=1 ocredit=1 \
                                        dictpath=/lib/cracklib/pw_dict
# use sha512 hash for encryption, use shadow, and use the
# authentication token (chosen password) set by pam_cracklib
# above (or any previous modules)
password  required    pam_unix.so       sha512 shadow use_authtok

# End /etc/pam.d/system-password
EOF

Note

In its default configuration, pam_cracklib will allow multiple case passwords as short as 6 characters, even with the minlen value set to 11. You should review the pam_cracklib(8) man page and determine if these default values are acceptable for the security of your system.

If CrackLib-2.9.6 is NOT installed, use:

cat > /etc/pam.d/system-password << "EOF"
# Begin /etc/pam.d/system-password

# use sha512 hash for encryption, use shadow, and try to use any previously
# defined authentication token (chosen password) set by any prior module
password  required    pam_unix.so       sha512 shadow try_first_pass

# End /etc/pam.d/system-password
EOF

Now add a restrictive /etc/pam.d/other configuration file. With this file, programs that are PAM aware will not run unless a configuration file specifically for that application is created.

cat > /etc/pam.d/other << "EOF"
# Begin /etc/pam.d/other

auth        required        pam_warn.so
auth        required        pam_deny.so
account     required        pam_warn.so
account     required        pam_deny.so
password    required        pam_warn.so
password    required        pam_deny.so
session     required        pam_warn.so
session     required        pam_deny.so

# End /etc/pam.d/other
EOF

The PAM man page (man pam) provides a good starting point for descriptions of fields and allowable entries. The Linux-PAM System Administrators' Guide is recommended for additional information.

Refer to http://debian.securedservers.com/kernel/pub/linux/libs/pam/modules.html for a list of various third-party modules available.

Important

You should now reinstall the Shadow-4.5 and Systemd-234 packages.

Installed Program: mkhomedir_helper, pam_tally, pam_tally2, pam_timestamp_check, unix_chkpwd and unix_update

Installed Libraries: libpam.so, libpamc.so and libpam_misc.so

Installed Directories: /etc/security, /lib/security, /usr/include/security and /usr/share/doc/Linux-PAM-1.3.0

Short Descriptions

mkhomedir_helper	is a helper binary that creates home directories.
pam_tally	is used to interrogate and manipulate the login counter file.
pam_tally2	is used to interrogate and manipulate the login counter file, but does not have some limitations that pam_tally does.
pam_timestamp_check	is used to check if the default timestamp is valid
unix_chkpwd	is a helper binary that verifies the password of the current user.
unix_update	is a helper binary that updates the password of a given user.
`libpam.so`	provides the interfaces between applications and the PAM modules.

Last updated on 2017-08-16 21:41:37 -0700

liboauth-1.0.3

Introduction to liboauth

liboauth is a collection of POSIX-C functions implementing the OAuth Core RFC 5849 standard. Liboauth provides functions to escape and encode parameters according to OAuth specification and offers high-level functionality to sign requests or verify OAuth signatures as well as perform HTTP requests.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/liboauth/liboauth-1.0.3.tar.gz
Download MD5 sum: 689b46c2b3ab1a39735ac33f714c4f7f
Download size: 496 KB
Estimated disk space required: 3.5 MB
Estimated build time: less than 0.1 SBU

Additonal Downloads

Required patch for use with OpenSSL-1.1.0f: http://www.linuxfromscratch.org/patches/blfs/8.1/liboauth-1.0.3-openssl-1.1.0-2.patch

liboauth Dependencies

Required

cURL-7.55.1 and OpenSSL-1.1.0f or NSS-3.32

Optional

Doxygen-1.8.13 (to build documentation)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/liboauth

Installation of liboauth

If building with OpenSSL-1.1.0f support, apply a patch for the new version:

patch -Np1 -i ../liboauth-1.0.3-openssl-1.1.0-2.patch

Install liboauth by running the following commands:

./configure --prefix=/usr --disable-static &&
make

If you have installed Doxygen-1.8.13, issue make dox to build the documentation.

To test the results, issue: make check.

Now, as the root user:

make install

If you have previously built the documentation, install it by running the following commands as the root user:

install -v -dm755 /usr/share/doc/liboauth-1.0.3 &&
cp -rv doc/html/* /usr/share/doc/liboauth-1.0.3

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-nss: Use this switch if you want to use Mozilla NSS instead of OpenSSL.

Installed Programs: None

Installed Libraries: liboauth.so

Installed Directories: /usr/share/doc/liboauth-1.0.3

Short Descriptions

liboauth.so

provides functions to escape and encode stings according to OAuth specifications and offers high-level functionality built on top to sign requests or verify signatures using either NSS or OpenSSL for calculating the hash/signatures.

Last updated on 2017-08-28 23:13:49 -0700

libpwquality-1.4.0

Introduction to libpwquality

The libpwquality package provides common functions for password quality checking and also scoring them based on their apparent randomness. The library also provides a function for generating random passwords with good pronounceability.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/libpwquality/libpwquality/releases/download/libpwquality-1.4.0/libpwquality-1.4.0.tar.bz2
Download MD5 sum: b8defcc7280a90e9400d6689c93a279c
Download size: 440 KB
Estimated disk space required: 4.0 MB
Estimated build time: less than 0.1 SBU

libpwquality Dependencies

Required

CrackLib-2.9.6

Installation of libpwquality

Install libpwquality by running the following commands:

./configure --prefix=/usr --disable-static &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Programs: pwscore and pwmake

Installed Libraries: pam_pwquality.so and libpwquality.so

Installed Directories: /etc/security

Short Descriptions

pwmake	is a simple configurable tool for generating random and relatively easily pronounceable passwords.
pwscore	is a simple tool for checking quality of a password.
`libpwquality.so`	contains API functions for checking the password quality.
`pam_pwquality.so`	is a Linux PAM module used to perform password quality checking.

Last updated on 2015-09-25 08:48:24 -0500

MIT Kerberos V5-1.15.1

Introduction to MIT Kerberos V5

MIT Kerberos V5 is a free implementation of Kerberos 5. Kerberos is a network authentication protocol. It centralizes the authentication database and uses kerberized applications to work with servers or services that support Kerberos allowing single logins and encrypted communication over internal networks or the Internet.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://web.mit.edu/kerberos/dist/krb5/1.15/krb5-1.15.1.tar.gz
Download MD5 sum: 8022f3a1cde8463e44fd35ef42731f85
Download size: 9.0 MB
Estimated disk space required: 136 MB (additional 24 MB for the testsuite)
Estimated build time: 0.9 SBU (additional 4.0 SBU for the testsuite)

MIT Kerberos V5 Dependencies

Optional

DejaGnu-1.6 (for full test coverage), GnuPG-2.1.23 (to authenticate the package), keyutils-1.5.10, OpenLDAP-2.4.45, Python-2.7.13 (used during the testsuite), rpcbind-0.2.4 (used during the testsuite), and Valgrind-3.13.0 (used during the test suite)

Note

Some sort of time synchronization facility on your system (like ntp-4.2.8p10) is required since Kerberos won't authenticate if there is a time difference between a kerberized client and the KDC server.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/mitkrb

Installation of MIT Kerberos V5

Build MIT Kerberos V5 by running the following commands:

cd src &&

sed -e "s@python2.5/Python.h@& python2.7/Python.h@g" \
    -e "s@-lpython2.5]@&,\n  AC_CHECK_LIB(python2.7,main,[PYTHON_LIB=-lpython2.7])@g" \
    -i configure.in &&

sed -e 's@\^u}@^u cols 300}@' \
    -i tests/dejagnu/config/default.exp &&

sed -e '/eq 0/{N;s/12 //}' \
    -i plugins/kdb/db2/libdb2/test/run.test &&

autoconf &&
./configure --prefix=/usr            \
            --sysconfdir=/etc        \
            --localstatedir=/var/lib \
            --with-system-et         \
            --with-system-ss         \
            --with-system-verto=no   \
            --enable-dns-for-realm &&
make

To test the build, issue as the root user: make check. You need at least Tcl-8.6.7, which is used to drive the testsuite. Furthermore, DejaGnu-1.6 must be available for some of the tests to run. If you have a former version of MIT Kerberos V5 installed, it may happen that the test suite pick up the installed versions of the libraries, rather than the newly built ones. If so, it is better to run the tests after the installation.

Now, as the root user:

make install &&

for f in gssapi_krb5 gssrpc k5crypto kadm5clnt kadm5srv \
         kdb5 kdb_ldap krad krb5 krb5support verto ; do

    find /usr/lib -type f -name "lib$f*.so*" -exec chmod -v 755 {} \;    
done          &&

mv -v /usr/lib/libkrb5.so.3*        /lib &&
mv -v /usr/lib/libk5crypto.so.3*    /lib &&
mv -v /usr/lib/libkrb5support.so.0* /lib &&

ln -v -sf ../../lib/libkrb5.so.3.3        /usr/lib/libkrb5.so        &&
ln -v -sf ../../lib/libk5crypto.so.3.1    /usr/lib/libk5crypto.so    &&
ln -v -sf ../../lib/libkrb5support.so.0.1 /usr/lib/libkrb5support.so &&

mv -v /usr/bin/ksu /bin &&
chmod -v 755 /bin/ksu   &&

install -v -dm755 /usr/share/doc/krb5-1.15.1 &&
cp -vfr ../doc/*  /usr/share/doc/krb5-1.15.1

Command Explanations

sed -e ...: The first sed fixes Python detection. The second one increases the width of the virtual terminal used for some tests to prevent some spurious text in the output which is taken as a failure. The third sed removes a test that is known to fail.

--localstatedir=/var/lib: This option is used so that the Kerberos variable run-time data is located in /var/lib instead of /usr/var.

--with-system-et: This switch causes the build to use the system-installed versions of the error-table support software.

--with-system-ss: This switch causes the build to use the system-installed versions of the subsystem command-line interface software.

--with-system-verto=no: This switch fixes a bug in the package: it does not recognize its own verto library installed previously. This is not a problem, if reinstalling the same version, but if you are updating, the old library is used as system's one, instead of installing the new version.

--enable-dns-for-realm: This switch allows realms to be resolved using the DNS server.

--with-ldap: Use this switch if you want to compile the OpenLDAP database backend module.

mv -v /usr/lib/libk... /lib and ln -v -sf ../../lib/libk... /usr/lib/libk...: Move critical libraries to the /lib directory so that they are available when the /usr filesystem is not mounted.

find /usr/lib -type f -name "lib$f*.so*" -exec chmod -v 755 {} \;: This command changes the permisison of installed libraries.

mv -v /usr/bin/ksu /bin: Moves the ksu program to the /bin directory so that it is available when the /usr filesystem is not mounted.

Configuring MIT Kerberos V5

Config Files

/etc/krb5.conf and /var/lib/krb5kdc/kdc.conf

Configuration Information

Kerberos Configuration

Tip

You should consider installing some sort of password checking dictionary so that you can configure the installation to only accept strong passwords. A suitable dictionary to use is shown in the CrackLib-2.9.6 instructions. Note that only one file can be used, but you can concatenate many files into one. The configuration file shown below assumes you have installed a dictionary to /usr/share/dict/words.

Create the Kerberos configuration file with the following commands issued by the root user:

cat > /etc/krb5.conf << "EOF"
# Begin /etc/krb5.conf

[libdefaults]
    default_realm = <EXAMPLE.ORG>
    encrypt = true

[realms]
    <EXAMPLE.ORG> = {
        kdc = <belgarath.example.org>
        admin_server = <belgarath.example.org>
        dict_file = /usr/share/dict/words
    }

[domain_realm]
    .<example.org> = <EXAMPLE.ORG>

[logging]
    kdc = SYSLOG:INFO:AUTH
    admin_server = SYSLOG:INFO:AUTH
    default = SYSLOG:DEBUG:DAEMON

# End /etc/krb5.conf
EOF

You will need to substitute your domain and proper hostname for the occurrences of the <belgarath> and <example.org> names.

default_realm should be the name of your domain changed to ALL CAPS. This isn't required, but both Heimdal and MIT recommend it.

encrypt = true provides encryption of all traffic between kerberized clients and servers. It's not necessary and can be left off. If you leave it off, you can encrypt all traffic from the client to the server using a switch on the client program instead.

The [realms] parameters tell the client programs where to look for the KDC authentication services.

The [domain_realm] section maps a domain to a realm.

Create the KDC database:

kdb5_util create -r <EXAMPLE.ORG> -s

Now you should populate the database with principals (users). For now, just use your regular login name or root.

kadmin.local
kadmin.local: add_policy dict-only
kadmin.local: addprinc -policy dict-only <loginname>

The KDC server and any machine running kerberized server daemons must have a host key installed:

kadmin.local: addprinc -randkey host/<belgarath.example.org>

After choosing the defaults when prompted, you will have to export the data to a keytab file:

kadmin.local: ktadd host/<belgarath.example.org>

This should have created a file in /etc named krb5.keytab (Kerberos 5). This file should have 600 (root rw only) permissions. Keeping the keytab files from public access is crucial to the overall security of the Kerberos installation.

Exit the kadmin program (use quit or exit) and return back to the shell prompt. Start the KDC daemon manually, just to test out the installation:

/usr/sbin/krb5kdc

Attempt to get a ticket with the following command:

kinit <loginname>

You will be prompted for the password you created. After you get your ticket, you can list it with the following command:

klist

Information about the ticket should be displayed on the screen.

To test the functionality of the keytab file, issue the following command:

ktutil
ktutil: rkt /etc/krb5.keytab
ktutil: l

This should dump a list of the host principal, along with the encryption methods used to access the principal.

At this point, if everything has been successful so far, you can feel fairly confident in the installation and configuration of the package.

Additional Information

For additional information consult the documentation for krb5-1.15.1 on which the above instructions are based.

Systemd Unit

If you want to start Kerberos services at boot, install the krb5.service unit included in the blfs-systemd-units-20160602 package using the following command:

make install-krb5

Installed Programs: gss-client, gss-server, k5srvutil, kadmin, kadmin.local, kadmind, kdb5_ldap_util (optional), kdb5_util, kdestroy, kinit, klist, kpasswd, kprop, kpropd, kproplog, krb5-config, krb5kdc, krb5-send-pr, ksu, kswitch, ktutil, kvno, sclient, sim_client, sim_server, sserver, uuclient and uuserver

Installed Libraries: libgssapi_krb5.so, libgssrpc.so, libk5crypto.so, libkadm5clnt_mit.so, libkadm5clnt.so, libkadm5srv_mit.so, libkadm5srv.so, libkdb_ldap.so (optional), libkdb5.so, libkrad.so, libkrb5.so, libkrb5support.so, libverto.so, and some plugins under the /usr/lib/krb5 tree

Installed Directories: /usr/include/{gssapi,gssrpc,kadm5,krb5}, /usr/lib/krb5, /usr/share/{doc/krb5-1.15.1,examples/krb5}, /var/lib/krb5kdc, and /var/lib/run/krb5kdc

Short Descriptions

gss-client	is a GSSAPI test client.
gss-server	is a GSSAPI test server.
k5srvutil	is a host keytable manipulation utility.
kadmin	is an utility used to make modifications to the Kerberos database.
kadmin.local	is an utility similar to kadmin, but if the database is db2, the local client kadmin.local, is intended to run directly on the master KDC without Kerberos authentication.
kadmind	is a server for administrative access to a Kerberos database.
kdb5_ldap_util (optional)	allows an administrator to manage realms, Kerberos services and ticket policies.
kdb5_util	is the KDC database utility.
kdestroy	removes the current set of tickets.
kinit	is used to authenticate to the Kerberos server as a principal and acquire a ticket granting ticket that can later be used to obtain tickets for other services.
klist	reads and displays the current tickets in the credential cache.
kpasswd	is a program for changing Kerberos 5 passwords.
kprop	takes a principal database in a specified format and converts it into a stream of database records.
kpropd	receives a database sent by kprop and writes it as a local database.
kproplog	displays the contents of the KDC database update log to standard output.
krb5-config	gives information on how to link programs against libraries.
krb5kdc	is the Kerberos 5 server.
krb5-send-pr	sends a problem report (PR) to a central support site.
ksu	is the super user program using Kerberos protocol. Requires a properly configured `/etc/shells` and `~/.k5login` containing principals authorized to become super users.
kswitch	makes the specified credential cache the primary cache for the collection, if a cache collection is available.
ktutil	is a program for managing Kerberos keytabs.
kvno	prints keyversion numbers of Kerberos principals.
sclient	is used to contact a sample server and authenticate to it using Kerberos 5 tickets, then display the server's response.
sim_client	is a simple UDP-based sample client program, for demonstration.
sim_server	is a simple UDP-based server application, for demonstration.
sserver	is the sample Kerberos 5 server.
uuclient	is another sample client.
uuserver	is another sample server.
`libgssapi_krb5.so`	contains the Generic Security Service Application Programming Interface (GSSAPI) functions which provides security services to callers in a generic fashion, supportable with a range of underlying mechanisms and technologies and hence allowing source-level portability of applications to different environments.
`libkadm5clnt.so`	contains the administrative authentication and password checking functions required by Kerberos 5 client-side programs.
`libkadm5srv.so`	contains the administrative authentication and password checking functions required by Kerberos 5 servers.
`libkdb5.so`	is a Kerberos 5 authentication/authorization database access library.
`libkrad.so`	contains the internal support library for RADIUS functionality.
`libkrb5.so`	is an all-purpose Kerberos 5 library.

Last updated on 2017-08-28 22:41:33 -0700

Nettle-3.3

Introduction to Nettle

The Nettle package contains a low-level cryptographic library that is designed to fit easily in many contexts.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/nettle/nettle-3.3.tar.gz
Download (FTP): ftp://ftp.gnu.org/gnu/nettle/nettle-3.3.tar.gz
Download MD5 sum: 10f969f78a463704ae73529978148dbe
Download size: 1.8 MB
Estimated disk space required: 75 MB (with tests)
Estimated build time: 0.3 SBU (with tests)

Nettle Dependencies

Optional

OpenSSL-1.1.0f (for examples)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/nettle

Installation of Nettle

Install Nettle by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install &&
chmod   -v   755 /usr/lib/lib{hogweed,nettle}.so &&
install -v -m755 -d /usr/share/doc/nettle-3.3 &&
install -v -m644 nettle.html /usr/share/doc/nettle-3.3

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: nettle-hash, nettle-lfib-stream, nettle-pbkdf2, pkcs1-conv and sexp-conv

Installed Libraries: libhogweed.so and libnettle.so

Installed Directory: /usr/include/nettle and /usr/share/doc/nettle-3.3

Short Descriptions

nettle-hash	calculates a hash value using a specified algorithm.
nettle-lfib-stream	outputs a sequence of pseudorandom (non-cryptographic) bytes, using Knuth's lagged fibonacci generator. The stream is useful for testing, but should not be used to generate cryptographic keys or anything else that needs real randomness.
nettle-pbkdf2	password-based key derivation function that take as input a password or passphrase and typically strengthen it and protect against certain pre-computation attacks by using salting and expensive computation.
pkcs1-conv	converts private and public RSA keys from PKCS #1 format to sexp format.
sexp-conv	converts an s-expression to a different encoding.

Last updated on 2017-08-19 20:26:54 -0700

NSS-3.32

Introduction to NSS

The Network Security Services (NSS) package is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards. This is useful for implementing SSL and S/MIME or other Internet security standards into an application.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://archive.mozilla.org/pub/security/nss/releases/NSS_3_32_RTM/src/nss-3.32.tar.gz
Download MD5 sum: 076abf8ed88b6bb28f3396b072d252ed
Download size: 9.1 MB
Estimated disk space required: 107 MB
Estimated build time: 1.7 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/nss-3.32-standalone-1.patch

NSS Dependencies

Required

NSPR-4.16

Installation of NSS

Note

This package does not support parallel build.

Install NSS by running the following commands:

patch -Np1 -i ../nss-3.32-standalone-1.patch &&

cd nss &&

make -j1 BUILD_OPT=1                  \
  NSPR_INCLUDE_DIR=/usr/include/nspr  \
  USE_SYSTEM_ZLIB=1                   \
  ZLIB_LIBS=-lz                       \
  NSS_ENABLE_WERROR=0                 \
  $([ $(uname -m) = x86_64 ] && echo USE_64=1) \
  $([ -f /usr/include/sqlite3.h ] && echo NSS_USE_SYSTEM_SQLITE=1)

This package does not come with a test suite.

Now, as the root user:

cd ../dist                                                          &&

install -v -m755 Linux*/lib/*.so              /usr/lib              &&
install -v -m644 Linux*/lib/{*.chk,libcrmf.a} /usr/lib              &&

install -v -m755 -d                           /usr/include/nss      &&
cp -v -RL {public,private}/nss/*              /usr/include/nss      &&
chmod -v 644                                  /usr/include/nss/*    &&

install -v -m755 Linux*/bin/{certutil,nss-config,pk12util} /usr/bin &&

install -v -m644 Linux*/lib/pkgconfig/nss.pc  /usr/lib/pkgconfig

Command Explanations

BUILD_OPT=1: This option is passed to make so that the build is performed with no debugging symbols built into the binaries and the default compiler optimizations are used.

NSPR_INCLUDE_DIR=/usr/include/nspr: This option sets the location of the nspr headers.

USE_SYSTEM_ZLIB=1: This option is passed to make to ensure that the libssl3.so library is linked to the system installed zlib instead of the in-tree version.

ZLIB_LIBS=-lz: This option provides the linker flags needed to link to the system zlib.

$([ $(uname -m) = x86_64 ] && echo USE_64=1): The USE_64=1 option is required on x86_64, otherwise make will try (and fail) to create 32-bit objects. The [ $(uname -m) = x86_64 ] test ensures it has no effect on a 32 bit system.

([ -f /usr/include/sqlite3.h ] && echo NSS_USE_SYSTEM_SQLITE=1): This tests if sqlite is installed and if so it echos the option NSS_USE_SYSTEM_SQLITE=1 to make so that libsoftokn3.so will link against the system version of sqlite.

Configuring NSS

If p11-kit-0.23.8 is installed, the p11-kit trust module (/usr/lib/pkcs11/p11-kit-trust.so) can be used as a drop-in replacement for /usr/lib/libnssckbi.so to transparently make the system CAs available to NSS aware applications, rather than the static list provided by /usr/lib/libnssckbi.so. As the root user, execute the following commands:

if [ -e /usr/lib/libp11-kit.so ]; then
  readlink /usr/lib/libnssckbi.so ||
  rm -v /usr/lib/libnssckbi.so    &&
  ln -sfv ./pkcs11/p11-kit-trust.so /usr/lib/libnssckbi.so
fi

Additionally, for dependent applications that do not use the internal database (/usr/lib/libnssckbi.so), the make-ca.sh script, included on the Certificate Authority Certificates page, will generate a system wide NSS DB.

Installed Programs: certutil, nss-config, and pk12util

Installed Libraries: libcrmf.a, libfreebl3.so, libfreeblpriv3.so, libgtest1.so, libnss3.so, libnssckbi.so, libnssdbm3.so, libnsssysinit.so, libnssutil3.so, libsmime3.so, libsoftokn3.so, and libssl3.so

Installed Directories: /usr/include/nss

Short Descriptions

certutil	is the Mozilla Certificate Database Tool. It is a command-line utility that can create and modify the Netscape Communicator cert8.db and key3.db database files. It can also list, generate, modify, or delete certificates within the cert8.db file and create or change the password, generate new public and private key pairs, display the contents of the key database, or delete key pairs within the key3.db file.
nss-config	is used to determine the NSS library settings of the installed NSS libraries.
pk12util	is a tool for importing certificates and keys from pkcs #12 files into NSS or exporting them. It can also list certificates and keys in such files.

Last updated on 2017-08-16 21:41:37 -0700

OpenSSH-7.5p1

Introduction to OpenSSH

The OpenSSH package contains ssh clients and the sshd daemon. This is useful for encrypting authentication and subsequent traffic over a network. The ssh and scp commands are secure implementations of telnet and rcp respectively.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.5p1.tar.gz
Download MD5 sum: 652fdc7d8392f112bef11cacf7e69e23
Download size: 1.4 MB
Estimated disk space required: 37 MB (add 11 MB for tests)
Estimated build time: 0.4 SBU (running the tests takes 10+ minutes, irrespective of processor speed)

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/openssh-7.5p1-openssl-1.1.0-1.patch

OpenSSH Dependencies

Installation of OpenSSH

Warning

If reinstalling over an SSH connection to enable Linux-PAM-1.3.0 support, be certain to temporarily set PermitRootLogin to yes in /etc/ssh/sshd_config until you complete reinstallation of Systemd-234, or you may find that you are unable to login to the system remotely.

OpenSSH runs as two processes when connecting to other computers. The first process is a privileged process and controls the issuance of privileges as necessary. The second process communicates with the network. Additional installation steps are necessary to set up the proper environment, which are performed by issuing the following commands as the root user:

install  -v -m700 -d /var/lib/sshd &&
chown    -v root:sys /var/lib/sshd &&

groupadd -g 50 sshd        &&
useradd  -c 'sshd PrivSep' \
         -d /var/lib/sshd  \
         -g sshd           \
         -s /bin/false     \
         -u 50 sshd

Install OpenSSH by running the following commands:

patch -Np1 -i ../openssh-7.5p1-openssl-1.1.0-1.patch &&

./configure --prefix=/usr                     \
            --sysconfdir=/etc/ssh             \
            --with-md5-passwords              \
            --with-privsep-path=/var/lib/sshd &&
make

The testsuite requires an installed copy of scp to complete the multiplexing tests. To run the test suite, first copy the scp program to /usr/bin, making sure that you backup any existing copy first.

To test the results, issue: make tests.

Now, as the root user:

make install &&
install -v -m755    contrib/ssh-copy-id /usr/bin     &&

install -v -m644    contrib/ssh-copy-id.1 \
                    /usr/share/man/man1              &&
install -v -m755 -d /usr/share/doc/openssh-7.5p1     &&
install -v -m644    INSTALL LICENCE OVERVIEW README* \
                    /usr/share/doc/openssh-7.5p1

Command Explanations

--sysconfdir=/etc/ssh: This prevents the configuration files from being installed in /usr/etc.

--with-md5-passwords: This enables the use of MD5 passwords.

--with-pam: This parameter enables Linux-PAM support in the build.

--with-xauth=/usr/bin/xauth: Set the default location for the xauth binary for X authentication. Change the location if xauth will be installed to a different path. This can also be controlled from sshd_config with the XAuthLocation keyword. You can omit this switch if Xorg is already installed.

--with-kerberos5=/usr: This option is used to include Kerberos 5 support in the build.

--with-libedit: This option enables line editing and history features for sftp.

Configuring OpenSSH

Config Files

~/.ssh/*, /etc/ssh/ssh_config, and /etc/ssh/sshd_config

There are no required changes to any of these files. However, you may wish to view the /etc/ssh/ files and make any changes appropriate for the security of your system. One recommended change is that you disable root login via ssh. Execute the following command as the root user to disable root login via ssh:

echo "PermitRootLogin no" >> /etc/ssh/sshd_config

If you want to be able to log in without typing in your password, first create ~/.ssh/id_rsa and ~/.ssh/id_rsa.pub with ssh-keygen and then copy ~/.ssh/id_rsa.pub to ~/.ssh/authorized_keys on the remote computer that you want to log into. You'll need to change REMOTE_USERNAME and REMOTE_HOSTNAME for the username and hostname of the remote computer and you'll also need to enter your password for the ssh-copy-id command to succeed:

ssh-keygen &&
ssh-copy-id -i ~/.ssh/id_rsa.pub REMOTE_USERNAME@REMOTE_HOSTNAME

Once you've got passwordless logins working it's actually more secure than logging in with a password (as the private key is much longer than most people's passwords). If you would like to now disable password logins, as the root user:

echo "PasswordAuthentication no" >> /etc/ssh/sshd_config &&
echo "ChallengeResponseAuthentication no" >> /etc/ssh/sshd_config

If you added Linux-PAM support and you want ssh to use it then you will need to add a configuration file for sshd and enable use of LinuxPAM. Note, ssh only uses PAM to check passwords, if you've disabled password logins these commands are not needed. If you want to use PAM, issue the following commands as the root user:

sed 's@d/login@d/sshd@g' /etc/pam.d/login > /etc/pam.d/sshd &&
chmod 644 /etc/pam.d/sshd &&
echo "UsePAM yes" >> /etc/ssh/sshd_config

Additional configuration information can be found in the man pages for sshd, ssh and ssh-agent.

Systemd Unit

To start the SSH server at system boot, install the sshd.service unit included in the blfs-systemd-units-20160602 package.

make install-sshd

Installed Programs: scp, sftp, slogin (symlink to ssh), ssh, ssh-add, ssh-agent, ssh-copy-id, ssh-keygen, ssh-keyscan, and sshd

Installed Libraries: None

Installed Directories: /etc/ssh, /usr/share/doc/openssh-7.5p1, and /var/lib/sshd

Short Descriptions

scp	is a file copy program that acts like rcp except it uses an encrypted protocol.
sftp	is an FTP-like program that works over the SSH1 and SSH2 protocols.
slogin	is a symlink to ssh.
ssh	is an rlogin/rsh-like client program except it uses an encrypted protocol.
sshd	is a daemon that listens for ssh login requests.
ssh-add	is a tool which adds keys to the ssh-agent.
ssh-agent	is an authentication agent that can store private keys.
ssh-copy-id	is a script that enables logins on remote machine using local keys.
ssh-keygen	is a key generation tool.
ssh-keyscan	is a utility for gathering public host keys from a number of hosts.

Last updated on 2017-08-16 21:41:37 -0700

OpenSSL-1.1.0f

Introduction to OpenSSL

The OpenSSL package contains management tools and libraries relating to cryptography. These are useful for providing cryptographic functions to other packages, such as OpenSSH, email applications and web browsers (for accessing HTTPS sites).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://openssl.org/source/openssl-1.1.0f.tar.gz
Download (FTP): ftp://openssl.org/source/openssl-1.1.0f.tar.gz
Download MD5 sum: 7b521dea79ab159e8ec879d2333369fa
Download size: 5.1 MB
Estimated disk space required: 70 MB (with tests)
Estimated build time: 1.5 SBU (with tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/OpenSSL

Installation of OpenSSL

Install OpenSSL with the following commands:

./config --prefix=/usr         \
         --openssldir=/etc/ssl \
         --libdir=lib          \
         shared                \
         zlib-dynamic &&
make

To test the results, issue: make test.

If you want to disable installing the static libraries, use this sed:

sed -i 's# libcrypto.a##;s# libssl.a##;/INSTALL_LIBS/s#libcrypto.a##' Makefile

Now, as the root user:

make MANSUFFIX=ssl install           &&
mv -v /usr/share/doc/openssl{,-1.1.0f} &&
cp -vfr doc/* /usr/share/doc/openssl-1.1.0f

Command Explanations

shared: This parameter forces the creation of shared libraries along with the static libraries.

zlib-dynamic: This parameter adds compression/decompression functionality using the libz library.

no-rc5 no-idea: When added to the ./config command, this will eliminate the building of those encryption methods. Patent licenses may be needed for you to utilize either of those methods in your projects.

make MANSUFFIX=ssl install: This command appends an "ssl" suffix to the manual page names to avoid conflicts with manual pages installed by other packages.

Configuring OpenSSL

Config Files

/etc/ssl/openssl.cnf

Configuration Information

Most users will want to install Certificate Authority Certificates for validation of downloaded certificates. For example, these certificates can be used by git-2.14.1, cURL-7.55.1 or Wget-1.19.1 when accessing secure (https protocol) sites. To do this, follow the instructions from the Certificate Authority Certificates page.

Users who just want to use OpenSSL for providing functions to other programs such as OpenSSH and web browsers do not need to worry about additional configuration. This is an advanced topic and those who do need it would normally be expected to either know how to properly update /etc/ssl/openssl.cnf or be able to find out how to do it.

Installed Programs: c_rehash and openssl

Installed Libraries: libcrypto.{so,a} and libssl.{so,a}

Installed Directories: /etc/ssl, /usr/include/openssl, /usr/lib/engines and /usr/share/doc/openssl-1.1.0f

Short Descriptions

c_rehash	is a Perl script that scans all files in a directory and adds symbolic links to their hash values.
openssl	is a command-line tool for using the various cryptography functions of OpenSSL's crypto library from the shell. It can be used for various functions which are documented in man 1 openssl.
`libcrypto.{so,a}`	implements a wide range of cryptographic algorithms used in various Internet standards. The services provided by this library are used by the OpenSSL implementations of SSL, TLS and S/MIME, and they have also been used to implement OpenSSH, OpenPGP, and other cryptographic standards.
`libssl.{so,a}`	implements the Transport Layer Security (TLS v1) protocol. It provides a rich API, documentation on which can be found by running man 3 ssl.

Last updated on 2017-08-16 21:41:37 -0700

OpenSSL-1.0.2l

Introduction to OpenSSL-1.0.2l Libraries

The OpenSSL-1.0.2l package contains libraries relating to cryptography. These are useful for providing cryptographic functions to other packages, such as email applications and web browsers (for accessing HTTPS sites). This package provides only the libraries and headers for packages that have not yet been ported to OpenSSL-1.1.0f.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://openssl.org/source/openssl-1.0.2l.tar.gz
Download (FTP): ftp://openssl.org/source/openssl-1.0.2l.tar.gz
Download MD5 sum: f85123cd390e864dfbe517e7616e6566
Download size: 5.2 MB
Estimated disk space required: 58 MB (with tests)
Estimated build time: 1.6 SBU (with tests)

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/openssl-1.0.2l-compat_versioned_symbols-1.patch

OpenSSL-1.0.2l Dependencies

Optional

MIT Kerberos V5-1.15.1

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/OpenSSL

Installation of OpenSSL-1.0.2l Libraries

Note

This package does not support parallel build.

Install OpenSSL-1.0.2l Libraries with the following commands:

 patch -Np1 -i ../openssl-1.0.2l-compat_versioned_symbols-1.patch &&

./config --prefix=/usr            \
         --openssldir=/etc/ssl    \
         --libdir=lib/openssl-1.0 \
         shared                   \
         zlib-dynamic             &&

make depend                       &&
make -j1

To test the results, issue: make -j1 test. The test suite does not support parallel jobs.

Now, as the root user:

make INSTALL_PREFIX=$PWD/Dest install_sw                      &&

install -vdm755                   /usr/lib/openssl-1.0        &&
cp -Rv Dest/usr/lib/openssl-1.0/* /usr/lib/openssl-1.0        &&

mv -v  /usr/lib/openssl-1.0/lib{crypto,ssl}.so.1.0.0 /usr/lib &&
ln -sv ../libssl.so.1.0.0         /usr/lib/openssl-1.0        &&
ln -sv ../libcrypto.so.1.0.0      /usr/lib/openssl-1.0        &&

install -vdm755                   /usr/include/openssl-1.0    &&
cp -Rv Dest/usr/include/openssl   /usr/include/openssl-1.0    &&

sed 's@/include$@/include/openssl-1.0@' -i /usr/lib/openssl-1.0/pkgconfig/*.pc

Command Explanations

shared: This parameter forces the creation of shared libraries along with the static libraries.

zlib-dynamic: This parameter adds compression/decompression functionality using the libz library.

Installed Libraries: libcrypto.so.1.0.0 and libssl.so.1.0.0

Installed Directories: /usr/lib/openssl-1.0 and /usr/include/openssl-1.0

Short Descriptions

`libcrypto.so.1.0.0`	implements a wide range of cryptographic algorithms used in various Internet standards. The services provided by this library are used by the OpenSSL implementations of SSL, TLS and S/MIME, and they have also been used to implement OpenSSH, OpenPGP, and other cryptographic standards.
`libssl.so.1.0.0`	implements the Transport Layer Security (TLS v1) protocol. It provides a rich API, documentation on which can be found by running man 3 ssl.

Last updated on 2017-08-21 11:12:53 -0700

p11-kit-0.23.8

Introduction to p11-kit

The p11-kit package provides a way to load and enumerate PKCS #11 (a Cryptographic Token Interface Standard) modules.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/p11-glue/p11-kit/releases/download/0.23.8/p11-kit-0.23.8.tar.gz
Download MD5 sum: 3caf26d841df1527d52549e7adc62966
Download size: 1.0 MB
Estimated disk space required: 87 MB (an additional 104 MB for tests)
Estimated build time: 0.5 SBU (an additional 0.2 SBU for tests)

p11-kit Dependencies

Optional

NSS-3.32, GTK-Doc-1.26 and libxslt-1.1.29

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/p11-kit

Installation of p11-kit

Install p11-kit by running the following commands:

./configure --prefix=/usr     \
            --sysconfdir=/etc \
            --with-trust-paths=/etc/pki/anchors &&
make

To test the results, issue: make check. The test-token test is known to fail.

Now, as the root user:

make install

Command Explanations

--with-trust-paths=/etc/pki/anchors: this switch sets the location of trusted certificates used by libp11-kit.so.

--with-hash-impl=freebl: Use this switch if you want to use the Freebl library from NSS for SHA1 and MD5 hashing.

--enable-doc: Use this switch if you have installed GTK-Doc-1.26 and libxslt-1.1.29 and wish to rebuild the documentation and generate manual pages.

Configuring p11-kit

The p11-kit trust module (/usr/lib/pkcs11/p11-kit-trust.so) can be used as a drop-in replacement for /usr/lib/libnssckbi.so to transparently make the system CAs available to NSS aware applications, rather than the static list provided by /usr/lib/libnssckbi.so. As the root user, execute the following commands:

if [ -e /usr/lib/libnssckbi.so ]; then
  readlink /usr/lib/libnssckbi.so ||
  rm -v /usr/lib/libnssckbi.so    &&
  ln -sfv ./pkcs11/p11-kit-trust.so /usr/lib/libnssckbi.so
fi

Installed Program: p11-kit and trust

Installed Libraries: libp11-kit.so and p11-kit-proxy.so

Installed Directories: /etc/pkcs11, /usr/include/p11-kit-1, /usr/lib/{p11-kit,pkcs11}, /usr/share/gtk-doc/html/p11-kit, and /usr/share/p11-kit

Short Descriptions

p11-kit	is a command line tool that can be used to perform operations on PKCS#11 modules configured on the system.
trust	is a command line tool to examine and modify the shared trust policy store.
`libp11-kit.so`	contains functions used to coordinate initialization and finalization of any PKCS#11 module.
`p11-kit-proxy.so`	is the PKCS#11 proxy module.

Last updated on 2017-08-20 18:54:25 -0700

Polkit-0.113+git_2919920+js38

Introduction to Polkit

Polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to communicate with privileged processes.

This package is known to build and work properly using an LFS-8.1 platform.

Note

Due to lack of relases, a tarball has been generated for use by BLFS, which includes a git checkout at ref 2919920, and a pending patch to use js38. The patch is included in the tarball for review.

Package Information

Download (HTTP): http://anduin.linuxfromscratch.org/BLFS/polkit/polkit-0.113+git_2919920+js38.tar.xz
Download MD5 sum: 11ec10c04899651e40ef66766932254d
Download size: 616 KB
Estimated disk space required: 19 MB
Estimated build time: 0.2 SBU

Polkit Dependencies

Required

GLib-2.52.3, and js38-38.2.1

Note

Since systemd-logind uses PAM to register user sessions, it is a good idea to build Polkit with PAM support so systemd-logind can track Polkit sessions.

Optional (Required if building GNOME)

Optional

docbook-xml-4.5, docbook-xsl-1.79.1, GTK-Doc-1.26, and libxslt-1.1.29

Required Runtime Dependencies

Systemd-234

Note

If libxslt-1.1.29 is installed, then docbook-xml-4.5 and docbook-xsl-1.79.1 are required. If you have installed libxslt-1.1.29, but you do not want to install any of the DocBook packages mentioned, you will need to use --disable-man-pages in the instructions below.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/polkit

Installation of Polkit

There should be a dedicated user and group to take control of the polkitd daemon after it is started. Issue the following commands as the root user:

groupadd -fg 27 polkitd &&
useradd -c "PolicyKit Daemon Owner" -d /etc/polkit-1 -u 27 \
        -g polkitd -s /bin/false polkitd

Note

When building Polkit with systemd logind support, the configure script explicitly checks if system is booted using systemd. This can cause problems if building the package in chroot, where the configure would fail to detect systemd. To workaround the problem, simply run the following command:

sed -i "s:/sys/fs/cgroup/systemd/:/sys:g" configure

Install Polkit by running the following commands:

./configure --prefix=/usr                    \
            --sysconfdir=/etc                \
            --localstatedir=/var             \
            --disable-static                 &&
make

To test the results, issue: make check. Note that system D-Bus daemon must be running for the testsuite to complete. There is also a warning about ConsoleKit database not present, but that one can be safely ignored.

Now, as the root user:

make install

Command Explanations

--with-authfw=shadow: This switch enables the package to use the Shadow rather than the Linux PAM Authentication framework. Use it if you have not installed Linux PAM.

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Configuring Polkit

PAM Configuration

Note

If you did not build Polkit with Linux PAM support, you can skip this section.

If you have built Polkit with Linux PAM support, you need to modify the default PAM configuration file which was installed by default to get Polkit to work correctly with BLFS. Issue the following commands as the root user to create the configuration file for Linux PAM:

cat > /etc/pam.d/polkit-1 << "EOF"
# Begin /etc/pam.d/polkit-1

auth     include        system-auth
account  include        system-account
password include        system-password
session  include        system-session

# End /etc/pam.d/polkit-1
EOF

Installed Programs: pkaction, pkcheck, pk-example-frobnicate, pkexec, pkttyagent and polkitd

Installed Libraries: libpolkit-agent-1.so and libpolkit-gobject-1.so

Installed Directories: /etc/polkit-1, /usr/include/polkit-1, /usr/lib/polkit-1, /usr/share/gtk-doc/html/polkit-1 and /usr/share/polkit-1

Short Descriptions

pkaction	is used to obtain information about registered PolicyKit actions.
pkcheck	is used to check whether a process is authorized for action.
pk-example-frobnicate	is an example program to test the pkexec command.
pkexec	allows an authorized user to execute a command as another user.
pkttyagent	is used to start a textual authentication agent for the subject.
polkitd	provides the org.freedesktop.PolicyKit1 D-Bus service on the system message bus.
`libpolkit-agent-1.so`	contains the Polkit authentication agent API functions.
`libpolkit-gobject-1.so`	contains the Polkit authorization API functions.

Last updated on 2017-08-20 20:24:54 -0700

Shadow-4.5

Introduction to Shadow

Shadow was indeed installed in LFS and there is no reason to reinstall it unless you installed CrackLib or Linux-PAM after your LFS system was completed. If you have installed CrackLib after LFS, then reinstalling Shadow will enable strong password support. If you have installed Linux-PAM, reinstalling Shadow will allow programs such as login and su to utilize PAM.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/shadow-maint/shadow/releases/download/4.5/shadow-4.5.tar.xz
Download MD5 sum: c350da50c2120de6bb29177699d89fe3
Download size: 1.6 MB
Estimated disk space required: 31 MB
Estimated build time: 0.2 SBU

Shadow Dependencies

Required

Linux-PAM-1.3.0 or CrackLib-2.9.6

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/shadow

Installation of Shadow

Important

The installation commands shown below are for installations where Linux-PAM has been installed (with or without a CrackLib installation) and Shadow is being reinstalled to support the Linux-PAM installation.

If you are reinstalling Shadow to provide strong password support using the CrackLib library without using Linux-PAM, ensure you add the --with-libcrack parameter to the configure script below and also issue the following command:

sed -i 's@DICTPATH.*@DICTPATH\t/lib/cracklib/pw_dict@' etc/login.defs

Reinstall Shadow by running the following commands:

sed -i 's/groups$(EXEEXT) //' src/Makefile.in &&

find man -name Makefile.in -exec sed -i 's/groups\.1 / /'   {} \; &&
find man -name Makefile.in -exec sed -i 's/getspnam\.3 / /' {} \; &&
find man -name Makefile.in -exec sed -i 's/passwd\.5 / /'   {} \; &&

sed -i -e 's@#ENCRYPT_METHOD DES@ENCRYPT_METHOD SHA512@' \
       -e 's@/var/spool/mail@/var/mail@' etc/login.defs &&

sed -i 's/1000/999/' etc/useradd                           &&

./configure --sysconfdir=/etc --with-group-name-max-length=32 &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
mv -v /usr/bin/passwd /bin

Command Explanations

sed -i 's/groups$(EXEEXT) //' src/Makefile.in: This sed is used to suppress the installation of the groups program as the version from the Coreutils package installed during LFS is preferred.

find man -name Makefile.in -exec ... {} \;: This command is used to suppress the installation of the groups man pages so the existing ones installed from the Coreutils package are not replaced.

sed -i -e 's@#ENCRYPT_METHOD DES@ENCRYPT_METHOD SHA512@' -e 's@/var/spool/mail@/var/mail@' etc/login.defs: Instead of using the default 'DES' method, this command modifies the installation to use the more secure 'SHA512' method of hashing passwords, which also allows passwords longer than eight characters. It also changes the obsolete /var/spool/mail location for user mailboxes that Shadow uses by default to the /var/mail location.

sed -i 's/1000/999/' etc/useradd: Make a minor change to make the default useradd consistent with the LFS groups file.

--with-group-name-max-length=32: The maximum user name is 32 characters. Make the maximum group name the same.

mv -v /usr/bin/passwd /bin: The passwd program may be needed during times when the /usr filesystem is not mounted so it is moved into the root partition.

Configuring Shadow

Shadow's stock configuration for the useradd utility may not be desirable for your installation. One default parameter causes useradd to create a mailbox file for any newly created user. useradd will make the group ownership of this file to the mail group with 0660 permissions. If you would prefer that these mailbox files are not created by useradd, issue the following command as the root user:

sed -i 's/yes/no/' /etc/default/useradd

Configuring Linux-PAM to Work with Shadow

Note

The rest of this page is devoted to configuring Shadow to work properly with Linux-PAM. If you do not have Linux-PAM installed, and you reinstalled Shadow to support strong passwords via the CrackLib library, no further configuration is required.

Config Files

/etc/pam.d/* or alternatively /etc/pam.conf, /etc/login.defs and /etc/security/*

Configuration Information

Configuring your system to use Linux-PAM can be a complex task. The information below will provide a basic setup so that Shadow's login and password functionality will work effectively with Linux-PAM. Review the information and links on the Linux-PAM-1.3.0 page for further configuration information. For information specific to integrating Shadow, Linux-PAM and CrackLib, you can visit the following link:

http://www.deer-run.com/~hal/sysadmin/pam_cracklib.html

Configuring /etc/login.defs

The login program currently performs many functions which Linux-PAM modules should now handle. The following sed command will comment out the appropriate lines in /etc/login.defs, and stop login from performing these functions (a backup file named /etc/login.defs.orig is also created to preserve the original file's contents). Issue the following commands as the root user:

install -v -m644 /etc/login.defs /etc/login.defs.orig &&
for FUNCTION in FAIL_DELAY               \
                FAILLOG_ENAB             \
                LASTLOG_ENAB             \
                MAIL_CHECK_ENAB          \
                OBSCURE_CHECKS_ENAB      \
                PORTTIME_CHECKS_ENAB     \
                QUOTAS_ENAB              \
                CONSOLE MOTD_FILE        \
                FTMP_FILE NOLOGINS_FILE  \
                ENV_HZ PASS_MIN_LEN      \
                SU_WHEEL_ONLY            \
                CRACKLIB_DICTPATH        \
                PASS_CHANGE_TRIES        \
                PASS_ALWAYS_WARN         \
                CHFN_AUTH ENCRYPT_METHOD \
                ENVIRON_FILE
do
    sed -i "s/^${FUNCTION}/# &/" /etc/login.defs
done

Configuring the /etc/pam.d/ Files

As mentioned previously in the Linux-PAM instructions, Linux-PAM has two supported methods for configuration. The commands below assume that you've chosen to use a directory based configuration, where each program has its own configuration file. You can optionally use a single /etc/pam.conf configuration file by using the text from the files below, and supplying the program name as an additional first field for each line.

As the root user, replace the following Linux-PAM configuration files in the /etc/pam.d/ directory (or add the contents to the /etc/pam.conf file) using the following commands:

'login'

cat > /etc/pam.d/login << "EOF"
# Begin /etc/pam.d/login

# Set failure delay before next prompt to 3 seconds
auth      optional    pam_faildelay.so  delay=3000000

# Check to make sure that the user is allowed to login
auth      requisite   pam_nologin.so

# Check to make sure that root is allowed to login
# Disabled by default. You will need to create /etc/securetty
# file for this module to function. See man 5 securetty.
#auth      required    pam_securetty.so

# Additional group memberships - disabled by default
#auth      optional    pam_group.so

# include the default auth settings
auth      include     system-auth

# check access for the user
account   required    pam_access.so

# include the default account settings
account   include     system-account

# Set default environment variables for the user
session   required    pam_env.so

# Set resource limits for the user
session   required    pam_limits.so

# Display date of last login - Disabled by default
#session   optional    pam_lastlog.so

# Display the message of the day - Disabled by default
#session   optional    pam_motd.so

# Check user's mail - Disabled by default
#session   optional    pam_mail.so      standard quiet

# include the default session and password settings
session   include     system-session
password  include     system-password

# End /etc/pam.d/login
EOF

'passwd'

cat > /etc/pam.d/passwd << "EOF"
# Begin /etc/pam.d/passwd

password  include     system-password

# End /etc/pam.d/passwd
EOF

'su'

cat > /etc/pam.d/su << "EOF"
# Begin /etc/pam.d/su

# always allow root
auth      sufficient  pam_rootok.so
auth      include     system-auth

# include the default account settings
account   include     system-account

# Set default environment variables for the service user
session   required    pam_env.so

# include system session defaults
session   include     system-session

# End /etc/pam.d/su
EOF

'chage'

cat > /etc/pam.d/chage << "EOF"
# Begin /etc/pam.d/chage

# always allow root
auth      sufficient  pam_rootok.so

# include system defaults for auth account and session
auth      include     system-auth
account   include     system-account
session   include     system-session

# Always permit for authentication updates
password  required    pam_permit.so

# End /etc/pam.d/chage
EOF

Other common programs

for PROGRAM in chfn chgpasswd chpasswd chsh groupadd groupdel \
               groupmems groupmod newusers useradd userdel usermod
do
    install -v -m644 /etc/pam.d/chage /etc/pam.d/${PROGRAM}
    sed -i "s/chage/$PROGRAM/" /etc/pam.d/${PROGRAM}
done

Because the installation of systemd is not yet complete, you will need to remove the /run/nologin file before testing the installation. Execute the following command as the root user:

rm -f /run/nologin

Warning

At this point, you should do a simple test to see if Shadow is working as expected. Open another terminal and log in as a user, then su to root. If you do not see any errors, then all is well and you should proceed with the rest of the configuration. If you did receive errors, stop now and double check the above configuration files manually. You can also run the test suite from the Linux-PAM package to assist you in determining the problem. If you cannot find and fix the error, you should recompile Shadow adding the --without-libpam switch to the configure command in the above instructions (also move the /etc/login.defs.orig backup file to /etc/login.defs). If you fail to do this and the errors remain, you will be unable to log into your system.

Configuring Login Access

Instead of using the /etc/login.access file for controlling access to the system, Linux-PAM uses the pam_access.so module along with the /etc/security/access.conf file. Rename the /etc/login.access file using the following command:

[ -f /etc/login.access ] && mv -v /etc/login.access{,.NOUSE}

Configuring Resource Limits

Instead of using the /etc/limits file for limiting usage of system resources, Linux-PAM uses the pam_limits.so module along with the /etc/security/limits.conf file. Rename the /etc/limits file using the following command:

[ -f /etc/limits ] && mv -v /etc/limits{,.NOUSE}

Caution

Be sure to test the login capabilities of the system before logging out. Errors in the configuration can cause a permanent lockout requiring a boot from an external source to correct the problem.

A list of the installed files, along with their short descriptions can be found at ../../../../lfs/view/8.1-systemd/chapter06/shadow.html#contents-shadow.

Last updated on 2017-08-16 21:41:37 -0700

ssh-askpass-7.5p1

Introduction to ssh-askpass

The ssh-askpass is a generic executable name for many packages, with similar names, that provide a interactive X service to grab password for packages requiring administrative privileges to be run. It prompts the user with a window box where the necessary password can be inserted. Here, we choose Damien Miller's package distributed in the OpenSSH tarball.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.5p1.tar.gz
Download (FTP): ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.5p1.tar.gz
Download MD5 sum: 652fdc7d8392f112bef11cacf7e69e23
Download size: 1.4 MB
Estimated disk space required: 8.0 MB
Estimated build time: less than 0.1 SBU

ssh-askpass Dependencies

Required

GTK+-2.24.31, Sudo-1.8.20p2 (runtime), Xorg Libraries, and X Window System (runtime)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/ssh-askpass

Installation of ssh-askpass

Install ssh-askpass by running the following commands:

cd contrib &&
make gnome-ssh-askpass2

Now, as the root user:

install -v -d -m755 /usr/libexec/openssh/contrib  &&
install -v -m755    gnome-ssh-askpass2 \
                    /usr/libexec/openssh/contrib  &&
ln -sv -f contrib/gnome-ssh-askpass2 \
                    /usr/libexec/openssh/ssh-askpass

The use of /usr/libexec/openssh/contrib and a symlink is justified by the eventual necessity of a different program for that service.

Configuring ssh-askpass

Configuration Information

As the root user, configure Sudo-1.8.20p2 to use ssh-askpass:

cat >> /etc/sudo.conf << "EOF" &&
# Path to askpass helper program
Path askpass /usr/libexec/openssh/ssh-askpass
EOF
chmod -v 0644 /etc/sudo.conf

If a given graphical <application> requires administrative privileges, use sudo -A <application> from an x-terminal, from a Window Manager menu and/or replace "Exec=<application> ..." by "Exec=sudo -A <application> ..." in the <application>.desktop file.

Installed Programs: None

Installed Library: None

Installed Directory: /usr/libexec/openssh/contrib

Last updated on 2017-08-28 20:59:34 -0700

stunnel-5.42

Introduction to stunnel

The stunnel package contains a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) so you can easily communicate with clients over secure channels. stunnel can be used to add SSL functionality to commonly used Inetd daemons such as POP-2, POP-3, and IMAP servers, along with standalone daemons such as NNTP, SMTP, and HTTP. stunnel can also be used to tunnel PPP over network sockets without changes to the server package source code.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (FTP): ftp://ftp.stunnel.org/stunnel/archive/5.x/stunnel-5.42.tar.gz
Download MD5 sum: ad0a6c63b30ec40afc7a2326e9ce04e0
Download size: 636 KB
Estimated disk space required: 5.8 MB
Estimated build time: 0.1 SBU

stunnel Dependencies

Required

Optional

tcpwrappers and TOR

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/stunnel

Installation of stunnel

The stunnel daemon will be run in a chroot jail by an unprivileged user. Create the new user and group using the following commands as the root user:

groupadd -g 51 stunnel &&
useradd -c "stunnel Daemon" -d /var/lib/stunnel \
        -g stunnel -s /bin/false -u 51 stunnel

Note

A signed SSL Certificate and a Private Key is necessary to run the stunnel daemon. After the package is installed, there are instructions to generate them. However, if you own or have already created a signed SSL Certificate you wish to use, copy it to /etc/stunnel/stunnel.pem before starting the build (ensure only root has read and write access). The .pem file must be formatted as shown below:

Install stunnel by running the following commands:

Note

For some systems with binutils versions prior to 2.25, configure may fail. If necessary, fix it either with:

sed -i '/LDFLAGS.*static_flag/ s/^/#/' configure

or, if LLVM-4.0.1 with Clang is installed, you can replace ./configure ... with CC=clang ./configure ... in the first command below.

./configure --prefix=/usr        \
            --sysconfdir=/etc    \
            --localstatedir=/var &&
make

This package does not come with a test suite.

Now, as the root user:

make docdir=/usr/share/doc/stunnel-5.42 install

Install the included systemd unit by running the following command as the root user:

install -v -m644 tools/stunnel.service /lib/systemd/system

If you do not already have a signed SSL Certificate and Private Key, create the stunnel.pem file in the /etc/stunnel directory using the command below. You will be prompted to enter the necessary information. Ensure you reply to the

Common Name (FQDN of your server) [localhost]:

prompt with the name or IP address you will be using to access the service(s).

To generate a certificate, as the root user, issue:

make cert

Command Explanations

make docdir=... install: This command installs the package and changes the documentation installation directory to standard naming conventions.

Configuring stunnel

Config Files

/etc/stunnel/stunnel.conf

Configuration Information

As the root user, create the directory used for the .pid file created when the stunnel daemon starts:

install -v -m750 -o stunnel -g stunnel -d /var/lib/stunnel/run &&
chown stunnel:stunnel /var/lib/stunnel

Next, create a basic /etc/stunnel/stunnel.conf configuration file using the following commands as the root user:

cat >/etc/stunnel/stunnel.conf << "EOF" 
; File: /etc/stunnel/stunnel.conf

; Note: The pid and output locations are relative to the chroot location.

pid    = /run/stunnel.pid
chroot = /var/lib/stunnel
client = no
setuid = stunnel
setgid = stunnel
cert   = /etc/stunnel/stunnel.pem

;debug = 7
;output = stunnel.log

;[https]
;accept  = 443
;connect = 80
;; "TIMEOUTclose = 0" is a workaround for a design flaw in Microsoft SSL
;; Microsoft implementations do not use SSL close-notify alert and thus
;; they are vulnerable to truncation attacks
;TIMEOUTclose = 0

EOF

Finally, add the service(s) you wish to encrypt to the configuration file. The format is as follows:

[<service>]
accept  = <hostname:portnumber>
connect = <hostname:portnumber>

If you use stunnel to encrypt a daemon started from [x]inetd, you may need to disable that daemon in the /etc/[x]inetd.conf file and enable a corresponding <service>_stunnel service. You may have to add an appropriate entry in /etc/services as well.

For a full explanation of the commands and syntax used in the configuration file, issue man stunnel.

Systemd Unit

To start the stunnel daemon at boot, enable the previously installed systemd unit by running the following command as the root user:

systemctl enable stunnel

Installed Programs: stunnel and stunnel3

Installed Library: libstunnel.so

Installed Directories: /{etc,usr/lib,var/lib}/stunnel and /usr/share/doc/stunnel-5.42

Short Descriptions

stunnel	is a program designed to work as an SSL encryption wrapper between remote clients and local ({x}inetd-startable) or remote servers.
stunnel3	is a Perl wrapper script to use stunnel 3.x syntax with stunnel >=4.05.
`libstunnel.so`	contains the API functions required by stunnel.

Last updated on 2017-08-29 10:55:51 -0700

Sudo-1.8.20p2

Introduction to Sudo

The Sudo package allows a system administrator to give certain users (or groups of users) the ability to run some (or all) commands as root or another user while logging the commands and arguments.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.sudo.ws/dist/sudo-1.8.20p2.tar.gz
Download (FTP): ftp://ftp.sudo.ws/pub/sudo/sudo-1.8.20p2.tar.gz
Download MD5 sum: 03da8e711caca6fd93e57751bfb74adc
Download size: 2.8 MB
Estimated disk space required: 29 MB (with tests)
Estimated build time: 0.3 SBU (with tests)

Sudo Dependencies

Optional

Linux-PAM-1.3.0, MIT Kerberos V5-1.15.1, OpenLDAP-2.4.45, MTA (that provides a sendmail command), AFS, FWTK, and Opie

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/sudo

Installation of Sudo

Install Sudo by running the following commands:

./configure --prefix=/usr              \
            --libexecdir=/usr/lib      \
            --with-secure-path         \
            --with-all-insults         \
            --with-env-editor          \
            --docdir=/usr/share/doc/sudo-1.8.20p2 \
            --with-passprompt="[sudo] password for %p: " &&
make

To test the results, issue: env LC_ALL=C make check 2>&1 | tee ../make-check.log. Check the results with grep failed ../make-check.log.

Now, as the root user:

make install &&
ln -sfv libsudo_util.so.0.0.0 /usr/lib/sudo/libsudo_util.so.0

Command Explanations

--libexecdir=/usr/lib: This switch controls where private programs are installed. Everything in that directory is a library, so they belong under /usr/lib instead of /usr/libexec.

--with-secure-path: This switch transparently adds /sbin and /usr/sbin directories to the PATH environment variable.

--with-all-insults: This switch includes all the sudo insult sets.

--with-env-editor: This switch enables use of the environment variable EDITOR for visudo.

--with-passprompt: This switch sets the prompt.

--without-pam: This switch avoids building Linux-PAM support when Linux-PAM is installed on the system.

Note

There are many options to sudo's configure command. Check the configure --help output for a complete list.

ln -sfv libsudo_util...: Works around a bug in the installation process, which links to the previously installed version (if there is one) instead of the new one.

Configuring Sudo

Config File

/etc/sudoers

Configuration Information

The sudoers file can be quite complicated. It is composed of two types of entries: aliases (basically variables) and user specifications (which specify who may run what). The installation installs a default configuration that has no privileges installed for any user.

One example usage is to allow the system administrator to execute any program without typing a password each time root privileges are needed. This can be configured as:

# User alias specification
User_Alias  ADMIN = YourLoginId

# Allow people in group ADMIN to run all commands without a password
ADMIN       ALL = NOPASSWD: ALL

For details, see man sudoers.

Note

The Sudo developers highly recommend using the visudo program to edit the sudoers file. This will provide basic sanity checking like syntax parsing and file permission to avoid some possible mistakes that could lead to a vulnerable configuration.

If PAM is installed on the system, Sudo is built with PAM support. In that case, issue the following command as the root user to create the PAM configuration file:

cat > /etc/pam.d/sudo << "EOF"
# Begin /etc/pam.d/sudo

# include the default auth settings
auth      include     system-auth

# include the default account settings
account   include     system-account

# Set default environment variables for the service user
session   required    pam_env.so

# include system session defaults
session   include     system-session

# End /etc/pam.d/sudo
EOF
chmod 644 /etc/pam.d/sudo

Installed Programs: sudo, sudoedit (symlink), sudoreplay, and visudo

Installed Libraries: group_file.so, libsudo_util.so, sudoers.so, sudo_noexec.so, and system_group.so

Installed Directories: /etc/sudoers.d, /usr/lib/sudo, /usr/share/doc/sudo-1.8.20p2, and /var/{lib,run}/sudo

Short Descriptions

sudo	executes a command as another user as permitted by the `/etc/sudoers` configuration file.
sudoedit	is a symlink to sudo that implies the `-e` option to invoke an editor as another user.
sudoreplay	is used to play back or list the output logs created by sudo.
visudo	allows for safer editing of the `sudoers` file.

Last updated on 2017-08-16 21:41:37 -0700

Tripwire-2.4.3.5

Introduction to Tripwire

The Tripwire package contains programs used to verify the integrity of the files on a given system.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/Tripwire/tripwire-open-source/releases/download/2.4.3.5/tripwire-open-source-2.4.3.5.tar.gz
Download MD5 sum: 34f09583d7ab4c10003db61707f1b707
Download size: 944 KB
Estimated disk space required: 28 MB
Estimated build time: 1.6 SBU (scripting install)

Tripwire Dependencies

Optional

An MTA

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/tripwire

Installation of Tripwire

Compile Tripwire by running the following commands:

sed -e 's|TWDB="${prefix}|TWDB="/var|'   \
    -e '/TWMAN/ s|${prefix}|/usr/share|' \
    -e '/TWDOCS/s|${prefix}/doc/tripwire|/usr/share/doc/tripwire-2.4.3.5|' \
    -i installer/install.cfg                               &&

find . -name Makefile.am | xargs                           \
    sed -i 's/^[[:alpha:]_]*_HEADERS.*=/noinst_HEADERS =/' &&

sed '/dist/d' -i man/man?/Makefile.am                      &&
autoreconf -fi                                             &&

./configure --prefix=/usr --sysconfdir=/etc/tripwire       &&
make

Note

The default configuration is to use a local MTA. If you don't have an MTA installed and have no wish to install one, modify install/install.cfg to use an SMTP server instead. Otherwise the install will fail.

This package does not come with a test suite.

Now, as the root user:

make install &&
cp -v policy/*.txt /usr/share/doc/tripwire-2.4.3.5

Note

During make install, several questions are asked, including passwords. If you want to make a script, you have to apply a sed before running make install:

sed -i -e 's@installer/install.sh@& -n -s <site-password> -l <local-password>@' Makefile

Of course, you should do this with dummy passwords and change them later.

Another issue when scripting is that the installer exits when the standard input is not a terminal. You may disable this behavior with the following sed:

sed '/-t 0/,+3d' -i installer/install.sh

Command Explanations

sed ... installer/install.cfg: This command tells the package to install the program database and reports in /var/lib/tripwire and sets the proper location for man pages and documentation.

find ..., sed ..., and autoreconf -fi: The build system is unusable as is, and has to be modified for the build to succeed.

make install: This command creates the Tripwire security keys as well as installing the binaries. There are two keys: a site key and a local key which are stored in /etc/tripwire/.

cp -v policy/*.txt /usr/doc/tripwire-2.4.3.5: This command installs the tripwire sample policy files with the other tripwire documentation.i

Configuring Tripwire

Config Files

/etc/tripwire/*

Configuration Information

Tripwire uses a policy file to determine which files are integrity checked. The default policy file (/etc/tripwire/twpol.txt) is for a default installation and will need to be updated for your system.

Policy files should be tailored to each individual distribution and/or installation. Some example policy files can be found in /usr/share/doc/tripwire/.

If desired, copy the policy file you'd like to try into /etc/tripwire/ instead of using the default policy file, twpol.txt. It is, however, recommended that you edit your policy file. Get ideas from the examples above and read /usr/share/doc/tripwire/policyguide.txt for additional information. twpol.txt is a good policy file for learning about Tripwire as it will note any changes to the file system and can even be used as an annoying way of keeping track of changes for uninstallation of software.

After your policy file has been edited to your satisfaction you may begin the configuration steps (perform as the root) user:

twadmin --create-polfile --site-keyfile /etc/tripwire/site.key \
    /etc/tripwire/twpol.txt &&
tripwire --init

Depending on your system and the contents of the policy file, the initialization phase above can take a relatively long time.

Usage Information

Tripwire will identify file changes in the critical system files specified in the policy file. Using Tripwire while making frequent changes to these directories will flag all these changes. It is most useful after a system has reached a configuration that the user considers stable.

To use Tripwire after creating a policy file to run a report, use the following command:

tripwire --check > /etc/tripwire/report.txt

View the output to check the integrity of your files. An automatic integrity report can be produced by using a cron facility to schedule the runs.

Reports are stored in binary and, if desired, encrypted. View reports, as the root user, with:

twprint --print-report -r /var/lib/tripwire/report/<report-name.twr>

After you run an integrity check, you should examine the report (or email) and then modify the Tripwire database to reflect the changed files on your system. This is so that Tripwire will not continually notify you that files you intentionally changed are a security violation. To do this you must first ls -l /var/lib/tripwire/report/ and note the name of the newest file which starts with your system name as presented by the command uname -n and ends in .twr. These files were created during report creation and the most current one is needed to update the Tripwire database of your system. As the root user, type in the following command making the appropriate report name:

tripwire --update --twrfile /var/lib/tripwire/report/<report-name.twr>

You will be placed into Vim with a copy of the report in front of you. If all the changes were good, then just type :wq and after entering your local key, the database will be updated. If there are files which you still want to be warned about, remove the 'x' before the filename in the report and type :wq.

Changing the Policy File

If you are unhappy with your policy file and would like to modify it or use a new one, modify the policy file and then execute the following commands as the root user:

twadmin --create-polfile /etc/tripwire/twpol.txt &&
tripwire --init

Installed Programs: siggen, tripwire, twadmin, and twprint

Installed Libraries: None

Installed Directories: /etc/tripwire, /var/lib/tripwire, and /usr/share/doc/tripwire-2.4.3.5

Short Descriptions

siggen	is a signature gathering utility that displays the hash function values for the specified files.
tripwire	is the main file integrity checking program.
twadmin	administrative and utility tool used to perform certain administrative functions related to Tripwire files and configuration options.
twprint	prints Tripwire database and report files in clear text format.

Last updated on 2017-08-29 10:55:51 -0700

volume_key-0.3.9

Introduction to volume_key

The volume_key package provides a library for manipulating storage volume encryption keys and storing them separately from volumes to handle forgotten passphrases.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://releases.pagure.org/volume_key/volume_key-0.3.9.tar.xz
Download MD5 sum: a2d14931177c660e1f3ebbcf5f47d8e2
Download size: 436 KB
Estimated disk space required: 7.9 MB
Estimated build time: 0.1 SBU

volume_key Dependencies

Required

cryptsetup-1.7.5, GLib-2.52.3, GPGME-1.9.0, and SWIG-3.0.12

Optional

Python-3.6.2

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/volume_key

Installation of volume_key

Install volume_key by running the following commands:

sed -i '/config.h/d' lib/libvolume_key.h &&

autoreconf -fiv           &&
./configure --prefix=/usr &&
make

This package does not come with a functioning test suite.

Now, as the root user:

make install

Installed Program: volume_key

Installed Library: libvolume_key.so

Installed Directory: /usr/include/volume_key

Short Descriptions

volume_key	manages encrypted volume keys and passphrases.
`volume_key.so`	contains API functions for managing encrypted volume keys.

Last updated on 2015-09-25 08:48:24 -0500

Chapter 5. File Systems and Disk Management

Journaling file systems reduce the time needed to recover a file system that was not unmounted properly. While this can be extremely important in reducing downtime for servers, it has also become popular for desktop environments. This chapter contains other journaling file systems you can use instead of the default LFS extended file system (ext2/3/4). It also provides introductory material on managing disk arrays.

About initramfs

The only purpose of an initramfs is to mount the root filesystem. The initramfs is a complete set of directories that you would find on a normal root filesystem. It is bundled into a single cpio archive and compressed with one of several compression algorithms.

At boot time, the boot loader loads the kernel and the initramfs image into memory and starts the kernel. The kernel checks for the presence of the initramfs and, if found, mounts it as / and runs /init. The init program is typically a shell script. Note that the boot process takes longer, possibly significantly longer, if an initramfs is used.

For most distributions, kernel modules are the biggest reason to have an initramfs. In a general distribution, there are many unknowns such as file system types and disk layouts. In a way, this is the opposite of LFS where the system capabilities and layout are known and a custom kernel is normally built. In this situation, an initramfs is rarely needed.

There are only four primary reasons to have an initramfs in the LFS environment: loading the rootfs from a network, loading it from an LVM logical volume, having an encrypted rootfs where a password is required, or for the convenience of specifying the rootfs as a LABEL or UUID. Anything else usually means that the kernel was not configured properly.

Building an initramfs

If you do decide to build an initramfs, the following scripts will provide a basis to do it. The scripts will allow specifying a rootfs via partition UUID or partition LABEL or a rootfs on an LVM logical volume. They do not support an encrypted root file system or mounting the rootfs over a network card. For a more complete capability see the LFS Hints or dracut.

To install these scripts, run the following commands as the root user:

cat > /sbin/mkinitramfs << "EOF"
#!/bin/bash
# This file based in part on the mkinitramfs script for the LFS LiveCD
# written by Alexander E. Patrakov and Jeremy Huntwork.

copy()
{
  local file

  if [ "$2" == "lib" ]; then
    file=$(PATH=/lib:/usr/lib type -p $1)
  else
    file=$(type -p $1)
  fi

  if [ -n $file ] ; then
    cp $file $WDIR/$2
  else
    echo "Missing required file: $1 for directory $2"
    rm -rf $WDIR
    exit 1
  fi
}

if [ -z $1 ] ; then
  INITRAMFS_FILE=initrd.img-no-kmods
else
  KERNEL_VERSION=$1
  INITRAMFS_FILE=initrd.img-$KERNEL_VERSION
fi

if [ -n "$KERNEL_VERSION" ] && [ ! -d "/lib/modules/$1" ] ; then
  echo "No modules directory named $1"
  exit 1
fi

printf "Creating $INITRAMFS_FILE... "

binfiles="sh cat cp dd killall ls mkdir mknod mount "
binfiles="$binfiles umount sed sleep ln rm uname"

# Systemd installs udevadm in /bin. Other udev implementations have it in /sbin
if [ -x /bin/udevadm ] ; then binfiles="$binfiles udevadm"; fi

sbinfiles="modprobe blkid switch_root"

#Optional files and locations
for f in mdadm mdmon udevd udevadm; do
  if [ -x /sbin/$f ] ; then sbinfiles="$sbinfiles $f"; fi
done

unsorted=$(mktemp /tmp/unsorted.XXXXXXXXXX)

DATADIR=/usr/share/mkinitramfs
INITIN=init.in

# Create a temporary working directory
WDIR=$(mktemp -d /tmp/initrd-work.XXXXXXXXXX)

# Create base directory structure
mkdir -p $WDIR/{bin,dev,lib/firmware,run,sbin,sys,proc}
mkdir -p $WDIR/etc/{modprobe.d,udev/rules.d}
touch $WDIR/etc/modprobe.d/modprobe.conf
ln -s lib $WDIR/lib64

# Create necessary device nodes
mknod -m 640 $WDIR/dev/console c 5 1
mknod -m 664 $WDIR/dev/null    c 1 3

# Install the udev configuration files
if [ -f /etc/udev/udev.conf ]; then
  cp /etc/udev/udev.conf $WDIR/etc/udev/udev.conf
fi

for file in $(find /etc/udev/rules.d/ -type f) ; do
  cp $file $WDIR/etc/udev/rules.d
done

# Install any firmware present
cp -a /lib/firmware $WDIR/lib

# Copy the RAID configuration file if present
if [ -f /etc/mdadm.conf ] ; then
  cp /etc/mdadm.conf $WDIR/etc
fi

# Install the init file
install -m0755 $DATADIR/$INITIN $WDIR/init

if [  -n "$KERNEL_VERSION" ] ; then
  if [ -x /bin/kmod ] ; then
    binfiles="$binfiles kmod"
  else
    binfiles="$binfiles lsmod"
    sbinfiles="$sbinfiles insmod"
  fi
fi

# Install basic binaries
for f in $binfiles ; do
  ldd /bin/$f | sed "s/\t//" | cut -d " " -f1 >> $unsorted
  copy $f bin
done

# Add lvm if present
if [ -x /sbin/lvm ] ; then sbinfiles="$sbinfiles lvm dmsetup"; fi

for f in $sbinfiles ; do
  ldd /sbin/$f | sed "s/\t//" | cut -d " " -f1 >> $unsorted
  copy $f sbin
done

# Add udevd libraries if not in /sbin
if [ -x /lib/udev/udevd ] ; then
  ldd /lib/udev/udevd | sed "s/\t//" | cut -d " " -f1 >> $unsorted
elif [ -x /lib/systemd/systemd-udevd ] ; then
  ldd /lib/systemd/systemd-udevd | sed "s/\t//" | cut -d " " -f1 >> $unsorted
fi

# Add module symlinks if appropriate
if [ -n "$KERNEL_VERSION" ] && [ -x /bin/kmod ] ; then
  ln -s kmod $WDIR/bin/lsmod
  ln -s kmod $WDIR/bin/insmod
fi

# Add lvm symlinks if appropriate
# Also copy the lvm.conf file
if  [ -x /sbin/lvm ] ; then
  ln -s lvm $WDIR/sbin/lvchange
  ln -s lvm $WDIR/sbin/lvrename
  ln -s lvm $WDIR/sbin/lvextend
  ln -s lvm $WDIR/sbin/lvcreate
  ln -s lvm $WDIR/sbin/lvdisplay
  ln -s lvm $WDIR/sbin/lvscan

  ln -s lvm $WDIR/sbin/pvchange
  ln -s lvm $WDIR/sbin/pvck
  ln -s lvm $WDIR/sbin/pvcreate
  ln -s lvm $WDIR/sbin/pvdisplay
  ln -s lvm $WDIR/sbin/pvscan

  ln -s lvm $WDIR/sbin/vgchange
  ln -s lvm $WDIR/sbin/vgcreate
  ln -s lvm $WDIR/sbin/vgscan
  ln -s lvm $WDIR/sbin/vgrename
  ln -s lvm $WDIR/sbin/vgck
  # Conf file(s)
  cp -a /etc/lvm $WDIR/etc
fi

# Install libraries
sort $unsorted | uniq | while read library ; do
  if [ "$library" == "linux-vdso.so.1" ] ||
     [ "$library" == "linux-gate.so.1" ]; then
    continue
  fi

  copy $library lib
done

if [ -d /lib/udev ]; then
  cp -a /lib/udev $WDIR/lib
fi
if [ -d /lib/systemd ]; then
  cp -a /lib/systemd $WDIR/lib
fi

# Install the kernel modules if requested
if [ -n "$KERNEL_VERSION" ]; then
  find                                                                        \
     /lib/modules/$KERNEL_VERSION/kernel/{crypto,fs,lib}                      \
     /lib/modules/$KERNEL_VERSION/kernel/drivers/{block,ata,md,firewire}      \
     /lib/modules/$KERNEL_VERSION/kernel/drivers/{scsi,message,pcmcia,virtio} \
     /lib/modules/$KERNEL_VERSION/kernel/drivers/usb/{host,storage}           \
     -type f 2> /dev/null | cpio --make-directories -p --quiet $WDIR

  cp /lib/modules/$KERNEL_VERSION/modules.{builtin,order}                     \
            $WDIR/lib/modules/$KERNEL_VERSION

  depmod -b $WDIR $KERNEL_VERSION
fi

( cd $WDIR ; find . | cpio -o -H newc --quiet | gzip -9 ) > $INITRAMFS_FILE

# Remove the temporary directory and file
rm -rf $WDIR $unsorted
printf "done.\n"

EOF

chmod 0755 /sbin/mkinitramfs

mkdir -p /usr/share/mkinitramfs &&
cat > /usr/share/mkinitramfs/init.in << "EOF"
#!/bin/sh

PATH=/bin:/usr/bin:/sbin:/usr/sbin
export PATH

problem()
{
   printf "Encountered a problem!\n\nDropping you to a shell.\n\n"
   sh
}

no_device()
{
   printf "The device %s, which is supposed to contain the\n" $1
   printf "root file system, does not exist.\n"
   printf "Please fix this problem and exit this shell.\n\n"
}

no_mount()
{
   printf "Could not mount device %s\n" $1
   printf "Sleeping forever. Please reboot and fix the kernel command line.\n\n"
   printf "Maybe the device is formatted with an unsupported file system?\n\n"
   printf "Or maybe filesystem type autodetection went wrong, in which case\n"
   printf "you should add the rootfstype=... parameter to the kernel command line.\n\n"
   printf "Available partitions:\n"
}

do_mount_root()
{
   mkdir /.root
   [ -n "$rootflags" ] && rootflags="$rootflags,"
   rootflags="$rootflags$ro"

   case "$root" in
      /dev/* ) device=$root ;;
      UUID=* ) eval $root; device="/dev/disk/by-uuid/$UUID"  ;;
      LABEL=*) eval $root; device="/dev/disk/by-label/$LABEL" ;;
      ""     ) echo "No root device specified." ; problem    ;;
   esac

   while [ ! -b "$device" ] ; do
       no_device $device
       problem
   done

   if ! mount -n -t "$rootfstype" -o "$rootflags" "$device" /.root ; then
       no_mount $device
       cat /proc/partitions
       while true ; do sleep 10000 ; done
   else
       echo "Successfully mounted device $root"
   fi
}

init=/sbin/init
root=
rootdelay=
rootfstype=auto
ro="ro"
rootflags=
device=

mount -n -t devtmpfs devtmpfs /dev
mount -n -t proc     proc     /proc
mount -n -t sysfs    sysfs    /sys
mount -n -t tmpfs    tmpfs    /run

read -r cmdline < /proc/cmdline

for param in $cmdline ; do
  case $param in
    init=*      ) init=${param#init=}             ;;
    root=*      ) root=${param#root=}             ;;
    rootdelay=* ) rootdelay=${param#rootdelay=}   ;;
    rootfstype=*) rootfstype=${param#rootfstype=} ;;
    rootflags=* ) rootflags=${param#rootflags=}   ;;
    ro          ) ro="ro"                         ;;
    rw          ) ro="rw"                         ;;
  esac
done

# udevd location depends on version
if [ -x /sbin/udevd ]; then
  UDEVD=/sbin/udevd
elif [ -x /lib/udev/udevd ]; then
  UDEVD=/lib/udev/udevd
elif [ -x /lib/systemd/systemd-udevd ]; then
  UDEVD=/lib/systemd/systemd-udevd
else
  echo "Cannot find udevd nor systemd-udevd"
  problem
fi

${UDEVD} --daemon --resolve-names=never
udevadm trigger
udevadm settle

if [ -f /etc/mdadm.conf ] ; then mdadm -As                       ; fi
if [ -x /sbin/vgchange  ] ; then /sbin/vgchange -a y > /dev/null ; fi
if [ -n "$rootdelay"    ] ; then sleep "$rootdelay"              ; fi

do_mount_root

killall -w ${UDEVD##*/}

exec switch_root /.root "$init" "$@"

EOF

Using an initramfs

Required Runtime Dependency

cpio-2.12

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/initramfs

To build an initramfs, run the following as the root user:

mkinitramfs [KERNEL VERSION]

The optional argument is the directory where the appropriate kernel modules are located. This must be a subdirectory of /lib/modules. If no modules are specified, then the initramfs is named initrd.img-no-kmods. If a kernel version is specified, the initrd is named initrd.img-$KERNEL_VERSION and is only appropriate for the specific kernel specified. The output file will be placed in the current directory.

After generating the initrd, copy it to the /boot directory.

Now edit /boot/grub/grub.cfg and add a new menuentry. Below are several examples.

# Generic initramfs and root fs identified by UUID
menuentry "LFS Dev (LFS-7.0-Feb14) initrd, Linux 3.0.4"
{
  linux  /vmlinuz-3.0.4-lfs-20120214 root=UUID=54b934a9-302d-415e-ac11-4988408eb0a8 ro
  initrd /initrd.img-no-kmods
}

# Generic initramfs and root fs on LVM partition
menuentry "LFS Dev (LFS-7.0-Feb18) initrd lvm, Linux 3.0.4"
{
  linux  /vmlinuz-3.0.4-lfs-20120218 root=/dev/mapper/myroot ro
  initrd /initrd.img-no-kmods
}

# Specific initramfs and root fs identified by LABEL
menuentry "LFS Dev (LFS-7.1-Feb20) initrd label, Linux 3.2.6"
{
  linux  /vmlinuz-3.2.6-lfs71-120220 root=LABEL=lfs71 ro
  initrd /initrd.img-3.2.6-lfs71-120220
}

Finally, reboot the system and select the desired system.

Last updated on 2016-06-01 12:21:44 -0700

btrfs-progs-4.12

Introduction to btrfs-progs

The btrfs-progs package contains administration and debugging tools for the B-tree file system (btrfs).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.kernel.org/pub/linux/kernel/people/kdave/btrfs-progs/btrfs-progs-v4.12.tar.xz
Download MD5 sum: 4b1a143677597de413381118db8c10bb
Download size: 1.5 MB
Estimated disk space required: 44 MB (add 28 MB for tests)
Estimated build time: 0.3 SBU (add 12 SBU for tests)

Btrfs-progs Dependencies

Required

LZO-2.10

Optional

LVM2-2.02.171 (dmsetup is used in tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/xfs

Kernel Configuration

Enable the following option in the kernel configuration and recompile the kernel:

File systems --->
  <*/M> Btrfs filesystem support [CONFIG_BTRFS_FS]

Note

CONFIG_BTRFS_FS_POSIX_ACL is required for the tests. Other Btrfs options in the kernel are optional.

Installation of btrfs-progs

Install btrfs-progs by running the following commands:

sed -i '1,100 s/\.gz//g' Documentation/Makefile.in &&

./configure --prefix=/usr \
            --bindir=/bin \
            --libdir=/lib &&
make

Before running tests, disable several that fail:

mv tests/fuzz-tests/003-multi-check-unmounted/test.sh{,.broken}    &&
mv tests/fuzz-tests/004-simple-dump-tree/test.sh{,.broken}         &&
mv tests/fuzz-tests/007-simple-super-recover/test.sh{,.broken}     &&
mv tests/fuzz-tests/009-simple-zero-log/test.sh{,.broken}          &&
mv tests/misc-tests/019-receive-clones-on-munted-subvol/test.sh{,.broken}

To test the results, issue (as the root user):

pushd tests
   ./fsck-tests.sh
   ./mkfs-tests.sh
   ./convert-tests.sh
   ./misc-tests.sh
   ./cli-tests.sh
   ./fuzz-tests.sh
popd

Install the package as the root user:

make install &&

ln -sfv ../../lib/$(readlink /lib/libbtrfs.so) /usr/lib/libbtrfs.so &&
rm -v /lib/libbtrfs.{a,so} &&
mv -v /bin/{mkfs,fsck}.btrfs /sbin

Command Explanations

sed ... Documentation/Makefile.in: Disables compressing man pages to be consistent with the rest of BLFS.

--disable-documentation: This option is needed if the recommended dependencies are not installed.

mv tests/fuzz-tests/ ...: Disables tests that fail and prevent tests from completing.

ln -s ... /usr/lib/libbtrfs.so: Creates a symbolic link in the directory where it is expected.

rm /lib/libbtrfs.{a,so}: Removes unneeded library entries.

Installed Programs: btrfs, btrfs-convert, btrfs-debug-tree, btrfs-find-root, btrfs-image, btrfs-map-logical, btrfs-select-super, btrfs-show-super, btrfs-zero-log, btrfsck (link to btrfs), btrfstune, fsck.btrfs, and mkfs.btrfs

Installed Libraries: libbtrfs.so

Installed Directories: /usr/include/btrfs

Short Descriptions

btrfs	is the main interface into btrfs filesystem operations.
btrfs-convert	converts from ext2/3/4 filesystem to btrfs.
btrfs-debug-tree	queries various internal information.
btrfs-find-root	is a filter to find btrfs root.
btrfs-map-logical	maps btrfs logical extent to physical extent.
btrfs-select-super	overwrites primary superblock with a backup copy.
btrfs-show-super	queries various internal information.
btrfs-zero-log	recovers a damaged btrfs filesystem.
btrfstune	tunes various filesystem parameters.
fsck.btrfs	does nothing, but is present for consistency with fstab.
mkfs.btrfs	creates a btrfs file system.

Last updated on 2017-08-30 16:10:27 -0700

dosfstools-4.1

Introduction to dosfstools

The dosfstools package contains various utilities for use with the FAT family of file systems.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/dosfstools/dosfstools/releases/download/v4.1/dosfstools-4.1.tar.xz
Download MD5 sum: 07a1050db1a898e9a2e03b0c4569c4bd
Download size: 176 KB
Estimated disk space required: 2.9 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/dosfstools

Kernel Configuration

Enable the following option in the kernel configuration and recompile the kernel:

File systems --->
  <DOS/FAT/NT Filesystems --->
    <*/M> MSDOS fs support             [CONFIG_MSDOS_FS]
    <*/M> VFAT (Windows-95) fs support [CONFIG_VFAT_FS]

Installation of dosfstools

Install dosfstools by running the following commands:

./configure --prefix=/               \
            --enable-compat-symlinks \
            --mandir=/usr/share/man  \
            --docdir=/usr/share/doc/dosfstools-4.1 &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--enable-compat-symlinks: This switch creates the dosfsck, dosfslabel, fsck.msdos, fsck.vfat, mkdosfs, mkfs.msdos, and mkfs.vfat symlinks required by some programs.

Installed Programs: fatlabel, fsck.fat, and mkfs.fat

Short Descriptions

fatlabel	set or get a MS-DOS filesystem label from a given device
fsck.fat	check and repair MS-DOS filesystems
mkfs.fat	create an MS-DOS filesystem under Linux

Last updated on 2017-08-24 18:56:23 -0700

Fuse-3.1.1

Introduction to Fuse

FUSE (Filesystem in Userspace) is a simple interface for userspace programs to export a virtual filesystem to the Linux kernel. Fuse also aims to provide a secure method for non privileged users to create and mount their own filesystem implementations.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/libfuse/libfuse/releases/download/fuse-3.1.1/fuse-3.1.1.tar.gz
Download MD5 sum: 20b10f24b825062c1db9a21a35157f97
Download size: 804 KB
Estimated disk space required: 8.5 MB
Estimated build time: 0.1 SBU

Fuse Dependencies

Optional

Doxygen-1.8.13 (to rebuild the API documentation)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/fuse

Kernel Configuration

Enable the following options in the kernel configuration and recompile the kernel if necessary:

File systems  --->
  <*/M> FUSE (Filesystem in Userspace) support [CONFIG_FUSE_FS]

Installation of Fuse

Install Fuse by running the following commands:

./configure --prefix=/usr    \
            --disable-static \
            --exec-prefix=/  \
            --with-pkgconfigdir=/usr/lib/pkgconfig \
            INIT_D_PATH=/tmp/init.d &&
make

The API documentation is included in the package, but if you have Doxygen-1.8.13 installed and wish to rebuild it, issue doxygen doc/Doxyfile.

This package does not come with a test suite.

Now, as the root user:

make install                                         &&
rm -v /lib/libfuse3.{so,la}                          &&
ln -sfv ../../lib/libfuse3.so.3 /usr/lib/libfuse3.so &&

rm -rf  /tmp/init.d &&

install -v -m755 -d /usr/share/doc/fuse-3.1.1 &&
install -v -m644    doc/{README.NFS,kernel.txt} \
                    /usr/share/doc/fuse-3.1.1 &&
cp -Rv doc/html /usr/share/doc/fuse-3.1.1

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--exec-prefix=/: This parameter moves programs and libraries that could be needed before the /usr directory is mounted, to the root filesystem.

INIT_D_PATH=/tmp/init.d: This parameter installs the bootscript into /tmp/init.d as a bootscript is not required.

rm -rf /tmp/init.d: This removes the unneeded bootscript.

Configuring fuse

Config Files

Some options regarding mount policy can be set in the file /etc/fuse.conf. To install the file run the following command as the root user:

cat > /etc/fuse.conf << "EOF"
# Set the maximum number of FUSE mounts allowed to non-root users.
# The default is 1000.
#
#mount_max = 1000

# Allow non-root users to specify the 'allow_other' or 'allow_root'
# mount options.
#
#user_allow_other
EOF

Additional information about the meaning of the configuration options are found in the man page.

Installed Programs: fusermount3, mount.fuse3

Installed Libraries: libfuse3.so

Installed Directory: /usr/include/fuse3 and /usr/share/doc/fuse-3.1.1

Short Descriptions

fusermount3	is a set users ID root program to mount and unmount Fuse filesystems.
mount.fuse3	is the command mount would call to mount a Fuse filesystem.
`libfuse3.so`	contains the FUSE API functions.

Last updated on 2017-08-24 15:03:00 -0700

Fuse-2.9.7

Introduction to Fuse

This package is only installed for compatibility with Gvfs-1.32.1. It is not needed with other packages. For full fuse functionality, install Fuse-3.1.1 which does not interfere with these instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/libfuse/libfuse/releases/download/fuse-2.9.7/fuse-2.9.7.tar.gz
Download MD5 sum: 9bd4ce8184745fd3d000ca2692adacdb
Download size: 646 KB
Estimated disk space required: 8.2 MB (9.8 MB with API documentation)
Estimated build time: 0.1 SBU

Fuse Dependencies

Optional

Doxygen-1.8.13 (to rebuild the API documentation)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/fuse2

Kernel Configuration

Enable the following options in the kernel configuration and recompile the kernel if necessary:

File systems  --->
  <*/M> FUSE (Filesystem in Userspace) support [CONFIG_FUSE_FS]

Installation of Fuse

Install Fuse by running the following commands:

./configure --prefix=/usr    \
            --disable-static \
            --exec-prefix=/  &&

make &&
make DESTDIR=$PWD/Dest install

This package does not come with a test suite.

Now, as the root user:

install -vm755 Dest/lib/libfuse.so.2.9.7 /lib                  &&
install -vm755 Dest/lib/libulockmgr.so.1.0.1 /lib                 &&
ln -sfv ../../lib/libfuse.so.2.9.7 /usr/lib/libfuse.so         &&
ln -sfv ../../lib/libulockmgr.so.1.0.1 /usr/lib/libulockmgr.so &&

install -vm644  Dest/lib/pkgconfig/fuse.pc /usr/lib/pkgconfig  && 
                                                         
install -vm4755 Dest/bin/fusermount       /bin                 &&
install -vm755  Dest/bin/ulockmgr_server  /bin                 &&

install -vm755  Dest/sbin/mount.fuse      /sbin                &&

install -vdm755 /usr/include/fuse                              &&

install -vm644  Dest/usr/include/*.h      /usr/include         &&
install -vm644  Dest/usr/include/fuse/*.h /usr/include/fuse/   &&

install -vm644  Dest/usr/share/man/man1/* /usr/share/man/man1  &&
/sbin/ldconfig -v

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--exec-prefix=/: This parameter moves programs and libraries that could be needed before the /usr directory is mounted, to the root filesystem.

make DESTDIR=$PWD/Dest install: This command installs the files to a temporary directory, so that the needed files can be installed.

Configuring fuse

Config Files

Information on configuring fuse can be found at the section called “Configuring fuse”.

Installed Programs: fusermount, mount.fuse, and ulockmgr_server

Installed Libraries: libfuse.so and libulockmgr.so

Installed Directory: /usr/include/fuse

Short Descriptions

fusermount	is a set users ID root program to mount and unmount Fuse filesystems.
mount.fuse	is the command mount would call to mount a Fuse filesystem.
ulockmgr_server	is the Userspace Lock Manager Server for Fuse filesystems.
`libfuse.so`	contains the FUSE API functions.
`libulockmgr.so`	contains the Userspace Lock Manager API functions.

Last updated on 2017-08-24 15:03:00 -0700

jfsutils-1.1.15

Introduction to jfsutils

The jfsutils package contains administration and debugging tools for the jfs file system.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://jfs.sourceforge.net/project/pub/jfsutils-1.1.15.tar.gz
Download MD5 sum: 8809465cd48a202895bc2a12e1923b5d
Download size: 532 KB
Estimated disk space required: 8.9 MB
Estimated build time: 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/jfs

Kernel Configuration

Enable the following option in the kernel configuration and recompile the kernel:

File systems  --->
  <*/M> JFS filesystem support [CONFIG_JFS_FS]

Installation of jfsutils

Install jfsutils by running the following commands:

sed "s@<unistd.h>@&\n#include <sys/types.h>@g" -i fscklog/extract.c &&
./configure &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

sed "s@<unistd.h>@&\n#include <sys/types.h>@g" -i fscklog/extract.c: Fixes building with Glibc 2.17.

Installed Programs: fsck.jfs, jfs_debugfs, jfs_fsck, jfs_fscklog, jfs_logdump, jfs_mkfs, jfs_tune, mkfs.jfs

Installed Libraries: None

Installed Directories: None

Short Descriptions

fsck.jfs	is used to replay the JFS transaction log, check a JFS formatted device for errors, and fix any errors found.
jfs_fsck	is a hard link to fsck.jfs.
mkfs.jfs	constructs an JFS file system.
jfs_mkfs	is a hard link to mkfs.jfs.
jfs_debugfs	is a program which can be used to perform various low-level actions on a JFS formatted device.
jfs_fscklog	extracts a JFS fsck service log into a file and/or formats and displays the extracted file.
jfs_logdump	dumps the contents of the journal log from the specified JFS formatted device into output file ./jfslog.dmp.
jfs_tune	adjusts tunable file system parameters on JFS file systems.

Last updated on 2017-08-28 15:14:37 -0700

LVM2-2.02.171

Introduction to LVM2

The LVM2 package is a set of tools that manage logical partitions. It allows spanning of file systems across multiple physical disks and disk partitions and provides for dynamic growing or shrinking of logical partitions, mirroring and low storage footprint snapshots.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://sourceware.org/ftp/lvm2/releases/LVM2.2.02.171.tgz
Download (FTP): ftp://sourceware.org/pub/lvm2/releases/LVM2.2.02.171.tgz
Download MD5 sum: 153b7bb643eb26073274968e9026fa8f
Download size: 2.2 MB
Estimated disk space required: 33 MB (add 15 MB for tests, however transient files can grow up to around 500 MB)
Estimated build time: 0.6 SBU (add 52 SBU for tests)

LVM2 Dependencies

Optional

mdadm-4.0, reiserfsprogs-3.6.27, Valgrind-3.13.0, Which-2.21, xfsprogs-4.12.0 (all five may be used, but are not required, for tests), and thin-provisioning-tools

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/lvm2

Caution

Kernel versions between 4.1 and 4.4.1 have a broken RAID implementation. If you want to use RAID type LV's, you should install kernel version 4.4.2 or above. Note that several tests use RAID logical volumes, and can generate a “kernel oops” with the faulty kernel version, which usually renders the system unusable.

Kernel Configuration

Enable the following options in the kernel configuration and recompile the kernel:

Note

There are several other Device Mapper options in the kernel beyond those listed below. In order to get reasonable results if running the regression tests, all must be enabled either internally or as a module. The tests will all time out if Magic SysRq key is not enabled.

Device Drivers --->
  [*] Multiple devices driver support (RAID and LVM) ---> [CONFIG_MD]
    <*/M>   Device mapper support                         [CONFIG_BLK_DEV_DM]
    <*/M/ >   Crypt target support                        [CONFIG_DM_CRYPT]
    <*/M/ >   Snapshot target                             [CONFIG_DM_SNAPSHOT]
    <*/M/ >   Thin provisioning target                    [CONFIG_DM_THIN_PROVISIONING]
    <*/M/ >   Mirror target                               [CONFIG_DM_MIRROR]
Kernel hacking --->
  [*] Magic SysRq key                                     [CONFIG_MAGIC_SYSRQ]

Installation of LVM2

Install LVM2 by running the following commands:

SAVEPATH=$PATH                  &&
PATH=$PATH:/sbin:/usr/sbin      &&
./configure --prefix=/usr       \
            --exec-prefix=      \
            --with-confdir=/etc \
            --enable-applib     \
            --enable-cmdlib     \
            --enable-pkgconfig  \
            --enable-udev_sync  &&
make                            &&
PATH=$SAVEPATH                  &&
unset SAVEPATH

The tests use udev for logical volume synchronization, so that the LVM udev rules and some utilities need to be installed before running the tests. If you are installing LVM2 for the first time, and do not want to install the full package before running the tests, the minimal set of utilities can be installed by running the following instructions as the root user:

make -C tools install_dmsetup_dynamic &&
make -C udev  install                 &&
make -C libdm install

To test the results, issue: make check_local as the root user. Other targets are available and can be listed with make -C test help. The test timings are very dependent on the speed of the disk(s), and on the number of enabled kernel options.

Those tests do not implement the “expected fail” possibility, and a small number of test failures is expected by upstream. More failures may happen because some kernel options are missing. For example, the lack of the dm-delay device mapper target may explain some failures. Some tests are flagged “warned” if thin-provisioning-tools are not installed. A workaround is to add the following flags to configure:

     --with-thin-check=    \
     --with-thin-dump=     \
     --with-thin-repair=   \
     --with-thin-restore=  \
     --with-cache-check=   \
     --with-cache-dump=    \
     --with-cache-repair=  \
     --with-cache-restore= \

Some tests may hang with kernel versions in the 4.1 and 4.2 series (see above). They can be removed if necessary, for example: rm test/shell/lvcreate-large-raid.sh. The tests generate a lot of kernel messages, which may clutter your terminal. You can disable them by issuing dmesg -D before running the tests (do not forget to issue dmesg -E when tests are done).

Now, as the root user:

make install

Command Explanations

PATH=$PATH:/sbin:/usr/sbin: The path must contain /sbin and /usr/sbin for proper system tool detection by the configure script. This instruction ensures that PATH is properly set even if you build as an unprivileged user.

--enable-applib: This switch enables building of the shared application library.

--enable-cmdlib: This switch enables building of the shared command library. It is required when building the event daemon.

--enable-pkgconfig: This switch enables installation of pkg-config support files.

--enable-udev_sync: This switch enables synchronisation with Udev processing.

--enable-dmeventd: This switch enables building of the Device Mapper event daemon.

--enable-lvmetad: This switch enables building of the LVM metadata daemon, which avoids scanning all the filesystems when an lvm command is run.

Installed Programs: blkdeactivate, dmeventd (optional), dmsetup, fsadm, lvm, lvmconf, lvmdump, and lvmetad (optional). There are also numerous symbolic links to lvm that implement specific functionalities

Installed Libraries: libdevmapper.so, liblvm2app.so, and liblvm2cmd.so; optional: libdevmapper-event.so, libdevmapper-event-lvm2.so, libdevmapper-event-lvm2mirror.so, libdevmapper-event-lvm2snapshot.so, libdevmapper-event-lvm2raid.so, and libdevmapper-event-lvm2thin.so

Installed Directories: /etc/lvm and /lib/device-mapper (optional)

Short Descriptions

blkdeactivate	is a utility to deactivate block device.
dmeventd	(optional) is the Device Mapper event daemon.
dmsetup	is a low level logical volume management tool.
fsadm	is a utility used to resize or check filesystem on a device.
lvm	provides the command-line tools for LVM2. Commands are implemented via sympolic links to this program to manage physical devices (pv), volume groups (vg) and logical volumes (lv*).
lvmconf	is a script that modifies the locking configuration in the LVM2 configuration file.
lvmdump	is a tool used to dump various information concerning LVM2.
lvmetad	(optional) is the LVM metadata daemon.
vgimportclone	is used to import a duplicated VG (e.g. hardware snapshot).
`libdevmapper.so`	contains the Device Mapper API functions.

Last updated on 2017-08-24 18:56:23 -0700

About Logical Volume Management (LVM)

LVM manages disk drives. It allows multiple drives and partitions to be combined into larger volume groups, assists in making backups through a snapshot, and allows for dynamic volume resizing. It can also provide mirroring similar to a RAID 1 array.

A complete discussion of LVM is beyond the scope of this introduction, but basic concepts are presented below.

To run any of the commands presented here, the LVM2-2.02.171 package must be installed. All commands must be run as the root user.

Management of disks with lvm is accomplished using the following concepts:

physical volumes: These are physical disks or partitions such as /dev/sda3 or /dev/sdb.
volume groups: These are named groups of physical volumes that can be manipulated by the administrator. The number of physical volumes that make up a volume group is arbitrary. Physical volumes can be dynamically added or removed from a volume group.
logical volumes: Volume groups may be subdivided into logical volumes. Each logical volume can then be individually formatted as if it were a regular Linux partition. Logical volumes may be dynamically resized by the administrator according to need.

To give a concrete example, suppose that you have two 2 TB disks. Also suppose a really large amount of space is required for a very large database, mounted on /srv/mysql. This is what the initial set of partitions would look like:

Partition  Use    Size      Partition Type
/dev/sda1  /boot  100MB     83 (Linux)
/dev/sda2  /       10GB     83 (Linux)
/dev/sda3  swap     2GB     82 (Swap)
/dev/sda4  LVM    remainder 8e (LVM)
/dev/sdb1  swap     2GB     82 (Swap)
/dev/sdb2  LVM    remainder 8e (LVM)

First initialize the physical volumes:

pvcreate /dev/sda4 /dev/sdb2

Next create a volume group named lfs-lvm:

vgcreate lfs-lvm /dev/sda4  /dev/sdb2

The status of the volume group can be checked by running the command vgscan. Now create the logical volumes. Since there is about 3900 GB available, leave about 900 GB free for expansion. Note that the logical volume named mysql is larger than any physical disk.

lvcreate --name mysql --size 2500G lfs-lvm
lvcreate --name home  --size  500G lfs-lvm

Finally the logical volumes can be formatted and mounted. In this example, the jfs file system (jfsutils-1.1.15) is used for demonstration purposes.

mkfs -t ext4 /dev/lfs-lvm/home
mkfs -t jfs  /dev/lfs-lvm/mysql
mount /dev/lfs-lvm/home /home
mkdir -p /srv/mysql
mount /dev/lfs-lvm/mysql /srv/mysql

The LFS boot scripts automatically make these file systems available to the system in the checkfs script. Edit the /etc/fstab file as required to automatically mount them.

A LVM logical volume can host a root filesystem, but requires the use of an initramfs (initial RAM file system) and is not discussed here.

For a more information about LVM, see the LVM HOWTO and the lvm man pages.

Last updated on 2013-02-11 10:51:17 -0800

About RAID

The storage technology known as RAID (Redundant Array of Independent Disks) combines multiple physical disks into a logical unit. The drives can generally be combined to provide data redundancy or to extend the size of logical units beyond the capability of the physical disks or both. The technology also allows for providing hardware maintenance without powering down the system.

The types of RAID organization are described in the RAID Wiki.

Note that while RAID provides protection against disk failures, it is not a substitute for backups. A file deleted is still deleted on all the disks of a RAID array. Modern backups are generally done via rsync-3.1.2.

There are three major types of RAID implementation: Hardware RAID, BIOS-based RAID, and Software RAID.

Hardware RAID

Hardware based RAID provides capability through proprietary hardware and data layouts. The control and configuration is generally done via firmware in conjunction with executable programs made available by the device manufacturer. The capabilities are generally supplied via a PCI card, although there are some instances of RAID components integrated in to the motherboard. Hardware RAID may also be available in a stand-alone enclosure.

One advantage of hardware-based RAID is that the drives are offered to the operating system as a logical drive and no operating system dependent configuration is needed.

Disadvantages include difficulties in transferring drives from one system to another, updating firmware, or replacing failed RAID hardware.

BIOS-based RAID

Some computers offter a hardware-like RAID implementation in the system BIOS. Sometime this is referred to as 'fake' RAID as the capabilites are generally incorporated into firmware without any hardware acceleration.

The advantages and disadvantages of BIOS-based RAID are generally the same as hardware RAID with the additional disadvantage that there is no hardware acceleration.

In some cases, BIOS-based RAID firmware is enabled by default (e.g. some DELL systems). If software RAID is desired, this option must be explicitly disabled in the BIOS.

Software RAID

Software based RAID is the most flexible form of RAID. It is easy to install and update and provides full capability on all or part of any drives available to the system. In BLFS, the RAID software is found in mdadm-4.0.

Configuring a RAID device is straight forward using mdadm. Generally devices are created in the /dev directory as /dev/mdx where x is an integer.

The first step in creating a RAID array is to use partitioning software such as fdisk or parted-3.2 to define the partitions needed for the array. Usually, there will be one partition on each drive participating in the RAID array, but that is not strictly necessary. For this example, there will be four disk drives: /dev/sda, /dev/sdb, /dev/sdc, and /dev/sdd. They will be partitioned as follows:

Partition Size     Type                Use
sda1:     100 MB   fd Linux raid auto  /boot    (RAID 1) /dev/md0
sda2:      10 GB   fd Linux raid auto  /        (RAID 1) /dev/md1
sda3:       2 GB   83 Linux swap       swap
sda4      300 GB   fd Linux raid auto  /home    (RAID 5) /dev/md2

sdb1:     100 MB   fd Linux raid auto  /boot    (RAID 1) /dev/md0
sdb2:      10 GB   fd Linux raid auto  /        (RAID 1) /dev/md1
sdb3:       2 GB   83 Linux swap       swap
sdb4      300 GB   fd Linux raid auto  /home    (RAID 5) /dev/md2

sdc1:      12 GB   fd Linux raid auto  /usr/src (RAID 0) /dev/md3
sdc2:     300 GB   fd Linux raid auto  /home    (RAID 5) /dev/md2

sdd1:      12 GB   fd Linux raid auto  /usr/src (RAID 0) /dev/md3
sdd2:     300 GB   fd Linux raid auto  /home    (RAID 5) /dev/md2

Is this arrangement, a separate boot partition is created as the first small RAID array and a root filesystem as the secong RAID array, both mirrored. The third partition is a large (about 1TB) array for the /home directory. This provides an ability to stripe data across multiple devices, improving speed for botih reading and writing large files. Finally, a fourth array is created that concatenates two partitions into a larger device.

Note

All mdadm commands must be run as the root user.

To create these RAID arrays the commands are:

/sbin/mdadm -Cv /dev/md0 --level=1 --raid-devices=2 /dev/sda1 /dev/sdb1
/sbin/mdadm -Cv /dev/md1 --level=1 --raid-devices=2 /dev/sda2 /dev/sdb2
/sbin/mdadm -Cv /dev/md3 --level=0 --raid-devices=2 /dev/sdc1 /dev/sdd1
/sbin/mdadm -Cv /dev/md2 --level=5 --raid-devices=4 \
        /dev/sda4 /dev/sdb4 /dev/sdc2 /dev/sdd2

The devices created can be examined by device. For example, to see the details of /dev/md1, use /sbin/mdadm --detail /dev/md1:

        Version : 1.2
  Creation Time : Tue Feb  7 17:08:45 2012
     Raid Level : raid1
     Array Size : 10484664 (10.00 GiB 10.74 GB)
  Used Dev Size : 10484664 (10.00 GiB 10.74 GB)
   Raid Devices : 2
  Total Devices : 2
    Persistence : Superblock is persistent

    Update Time : Tue Feb  7 23:11:53 2012
          State : clean
 Active Devices : 2
Working Devices : 2
 Failed Devices : 0
  Spare Devices : 0

           Name : core2-blfs:0  (local to host core2-blfs)
           UUID : fcb944a4:9054aeb2:d987d8fe:a89121f8
         Events : 17

    Number   Major   Minor   RaidDevice State
       0       8        1        0      active sync   /dev/sda1
       1       8       17        1      active sync   /dev/sdb1

From this point, the partitions can be formated with the filesystem of choice (e.g. ext3, ext4, xfsprogs-4.12.0, reiserfsprogs-3.6.27, etc). The formatted partitions can then be mounted. The /etc/fstab file can use the devices created for mounting at boot time and the linux command line in /boot/grub/grub.cfg can specify root=/dev/md1.

Note

The swap devices should be specified in the /etc/fstab file as normal. The kernel normally stripes swap data across multiple swap files and should not be made part of a RAID array.

For further options and management details of RAID devices, refer to man mdadm.

Additional details for monitoring RAID arrays and dealing with problems can be found at the Linux RAID Wiki.

Last updated on 2016-01-30 14:15:21 -0800

mdadm-4.0

Introduction to mdadm

The mdadm package contains administration tools for software RAID.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.kernel.org/pub/linux/utils/raid/mdadm/mdadm-4.0.tar.xz
Download MD5 sum: 2cb4feffea9167ba71b5f346a0c0a40d
Download size: 424 KB
Estimated disk space required: 6.7 MB (10 MB with tests)
Estimated build time: less than 0.1 SBU (tests take about an hour, only partially processor dependent)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/mdadm

Caution

Kernel versions in series 4.1 through 4.4.1 have a broken RAID implementation. Use a kernel with version at or above 4.4.2.

Kernel Configuration

Enable the following options in the kernel configuration and recompile the kernel, if necessary. Only the RAID types desired are required.

Device Drivers --->
  [*] Multiple devices driver support (RAID and LVM) ---> [CONFIG_MD]
    <*> RAID support                                      [CONFIG_BLK_DEV_MD]
    [*]   Autodetect RAID arrays during kernel boot       [CONFIG_MD_AUTODETECT]
    <*/M>  Linear (append) mode                           [CONFIG_MD_LINEAR]
    <*/M>  RAID-0 (striping) mode                         [CONFIG_MD_RAID0]
    <*/M>  RAID-1 (mirroring) mode                        [CONFIG_MD_RAID1]
    <*/M>  RAID-10 (mirrored striping) mode               [CONFIG_MD_RAID10]
    <*/M>  RAID-4/RAID-5/RAID-6 mode                      [CONFIG_MD_RAID456]

Installation of mdadm

Fix a build error introduced by GCC-7.1:

sed 's@-Werror@@' -i Makefile

Install mdadm by running the following commands:

make

If you wish to run the tests, ensure that your kernel supports RAID and that a version of mdadm is not already running. As many as 9 out of 124 tests may fail.

First fix the test script to avoid a bogus error message when tests fail and build the supporting programs:

sed -i 's# if.* == "1"#& -a -e $targetdir/log#' test &&
make test

Run the tests as the root user:

./test --keep-going --logdir=test-logs --save-logs

Now, as the root user:

make install

Command Explanations

make everything: This optional target creates extra programs, particularly a statically-linked version of mdadm and also versions of mdassemble. These all need to be manually installed.

--keep-going: Run the tests to the end, even if one or more tests fail.

--logdir=test-logs: Defines that the directory where test logs are saved.

--save-logs: Instructs the test suite to save the logs.

--tests=<test1,test2,...>: Optional comma separated list of tests to be executed (all tests, if this option is not passed).

Installed Programs: mdadm, mdmon and optionally mdassemble

Installed Libraries: None

Installed Directory: None

Short Descriptions

mdadm	manages MD devices aka Linux Software RAID.
mdmon	monitors MD external metadata arrays.
mdassemble	is a tiny program that can be used to assemble MD devices inside an initial ramdisk (initrd) or initramfs.

Last updated on 2017-08-24 18:56:23 -0700

ntfs-3g-2017.3.23

Introduction to Ntfs-3g

The Ntfs-3g package contains a stable, read-write open source driver for NTFS partitions. NTFS partitions are used by most Microsoft operating systems. Ntfs-3g allows you to mount NTFS partitions in read-write mode from your Linux system. It uses the FUSE kernel module to be able to implement NTFS support in user space. The package also contains various utilities useful for manipulating NTFS partitions.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://tuxera.com/opensource/ntfs-3g_ntfsprogs-2017.3.23.tgz
Download MD5 sum: d97474ae1954f772c6d2fa386a6f462c
Download size: 1.2 MB
Estimated disk space required: 20 MB
Estimated build time: 0.2 SBU

Ntfs-3g Dependencies

Optional

fuse 2.x (this disables user mounts)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/ntfs-3g

Kernel Configuration

Enable the following options in the kernel configuration and recompile the kernel if necessary:

File systems  --->
  <*/M> FUSE (Filesystem in Userspace) support [CONFIG_FUSE_FS]

Installation of Ntfs-3g

Install Ntfs-3g by running the following commands:

./configure --prefix=/usr        \
            --disable-static     \
            --with-fuse=internal &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
ln -sv ../bin/ntfs-3g /sbin/mount.ntfs &&
ln -sv ntfs-3g.8 /usr/share/man/man8/mount.ntfs.8

If you want ordinary users to be able to mount NTFS partitions you'll need to set mount.ntfs with the root user ID. Note: it is probably unsafe to do this on a computer that needs to be secure (like a server). As the root user:

chmod -v 4755 /bin/ntfs-3g

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

patch -Np1 -i ...: This command applies a security patch from upstream to fix ntfs-3g on systems that use setuid for the executable.

--with-fuse=internal: This switch dynamically forces ntfs-3g to use an internal copy of the fuse-2.x library. This is required if you wish to allow users to mount NTFS partitions.

--disable-ntfsprogs: Disables installation of various utilities used to manipulate NTFS partitions.

ln -sv ../bin/ntfs-3g /sbin/mount.ntfs: Creating /sbin/mount.ntfs makes mount default to using Ntfs-3g to mount NTFS partitions.

chmod -v 4755 /bin/ntfs-3g: Making mount.ntfs setuid root allows non root users to mount NTFS partitions.

Using Ntfs-3g

To mount a Windows partition at boot time, put a line like this in /etc/fstab:

/dev/sda1 /mnt/windows auto defaults 0 0

To allow users to mount a usb stick with an NTFS filesystem on it, put a line similar to this (change sdc1 to whatever a usb stick would be on your system) in /etc/fstab:

/dev/sdc1 /mnt/usb auto user,noauto,umask=0,utf8 0 0

In order for a user to be able to mount the usb stick, they will need to be able to write to /mnt/usb, so as the root user:

chmod -v 777 /mnt/usb

Installed Programs: lowntfs-3g, mkfs.ntfs, mkntfs, mount.lowntfs-3g, mount.ntfs, mount.ntfs-3g, ntfs-3g, ntfs-3g.probe, ntfs-3g.secaudit, ntfs-3g.usermap, ntfscat, ntfsclone, ntfscluster, ntfscmp, ntfscp, ntfsfix, ntfsinfo, ntfslabel, ntfsls, ntfsresize and ntfsundelete

Installed Library: libntfs-3g.so

Installed Directories: /usr/include/ntfs-3g and /usr/share/doc/ntfs-3g

Short Descriptions

lowntfs-3g	is similar to ntfs-3g but uses the Fuse low-level interface.
mkfs.ntfs	is a symlink to mkntfs.
mkntfs	creates an NTFS file system.
mount.lowntfs-3g	is a symlink to lowntfs-3g.
mount.ntfs	mounts an NTFS filesystem.
mount.ntfs-3g	is a symbolic link to ntfs-3g.
ntfs-3g	is an NTFS driver, which can create, remove, rename, move files, directories, hard links, and streams. It can also read and write files, including streams, sparse files and transparently compressed files. It can also handle special files like symbolic links, devices, and FIFOs; moreover it provides standard management of file ownership and permissions, including POSIX ACLs.
ntfs-3g.probe	tests if an NTFS volume is mountable read only or read-write, and exits with a status value accordingly. The volume can be a block device or image file.
ntfs-3g.secaudit	audits NTFS Security Data.
ntfs-3g.usermap	creates the file defining the mapping of Windows accounts to Linux logins for users who owns files which should be visible from both Windows and Linux.
ntfscluster	identifies files in a specified region of an NTFS volume
ntfscp	copies a file to an NTFS volume.
ntfsfix	fixes common errors and forces Windows to check an NTFS partition.
ntfsls	lists directory contents on an NTFS filesystem.
ntfscat	prints NTFS files and streams on the standard output.
ntfsclone	clones an NTFS filesystem.
ntfscmp	compares two NTFS filesystems and tells the differences.
ntfsinfo	dumps a file's attributes.
ntfslabel	displays or changes the label on an ntfs file system.
ntfsresize	resizes an NTFS filesystem without data loss.
ntfsundelete	recovers a deleted file from an NTFS volume.
`libntfs-3g.so`	contains the Ntfs-3g API functions.

Last updated on 2017-08-24 15:03:00 -0700

gptfdisk-1.0.3

Introduction to gptfdisk

The gptfdisk package is a set of programs for creation and maintenance of GUID Partition Table (GPT) disk drives. A GPT partitioned disk is required for drives greater than 2 TB and is a modern replacement for legacy PC-BIOS partitioned disk drives that use a Master Boot Record (MBR). The main program, gdisk, has an inteface similar to the classic fdisk program.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/gptfdisk/gptfdisk-1.0.3.tar.gz
Download MD5 sum: 07b625a583b66c8c5840be5923f3e3fe
Download size: 195 KB
Estimated disk space required: 3.1 MB
Estimated build time: less than 0.1 SBU

Additional Downloads

Recommended patch: http://www.linuxfromscratch.org/patches/blfs/8.1/gptfdisk-1.0.3-convenience-1.patch

gptfdisk Dependencies

Optional

ICU-59.1 (for Unicode partition names)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/gptdisk

Installation of gptfdisk

The gptfdisk package comes with a rudimentary Makefile. First we update it to provide a simple build and install interface. Install gptfdisk by running the following commands:

patch -Np1 -i ../gptfdisk-1.0.3-convenience-1.patch &&
make POPT=1

This package does not come with a test suite.

Now, as the root user:

make POPT=1 install

Command Explanations

POPT=1: Adding this option to the make command is required to build sgdisk. If used, this option needs to be on both the make and the make install line.

ICU=1: Adding this option to the make command allows use of Unicode characters in partition names.

Installed Programs: cgdisk, gdisk, fixparts, and sgdisk

Short Descriptions

cgdisk	is an is a curses-based text-mode tool for manipulating GPT partitions.
gdisk	is an interactive text-mode tool for manipulating GPT partitions.
fixparts	repairs mis-formatted MBR based disk partitions.
sgdisk	is a partition manipulation program for GPT partitions similar to sfdisk.

Last updated on 2017-08-24 15:03:00 -0700

parted-3.2

Introduction to parted

The Parted package is a disk partitioning and partition resizing tool.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/parted/parted-3.2.tar.xz
Download (FTP): ftp://ftp.gnu.org/gnu/parted/parted-3.2.tar.xz
Download MD5 sum: 0247b6a7b314f8edeb618159fa95f9cb
Download size: 1.6 MB
Estimated disk space required: 27 MB (additional 2 MB for the tests and additional 1 MB for optional PDF and Postscript documentation)
Estimated build time: 0.4 SBU (additional 0.6 SBU for the tests)

Additional Downloads

Optional, to fix build without device mapper support: http://www.linuxfromscratch.org/patches/blfs/8.1/parted-3.2-devmapper-1.patch

Parted Dependencies

Optional

Pth-2.0.7 and texlive-20170524 (or install-tl-unx)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/parted

Installation of parted

If you want to build without device mapper support, a fix is necessary:

patch -Np1 -i ../parted-3.2-devmapper-1.patch

Install Parted by running the following commands:

./configure --prefix=/usr --disable-static &&
make &&

make -C doc html                                       &&
makeinfo --html      -o doc/html       doc/parted.texi &&
makeinfo --plaintext -o doc/parted.txt doc/parted.texi

If you have texlive-20170524 installed and wish to create PDF and Postcript documentation issue the following commands:

texi2pdf             -o doc/parted.pdf doc/parted.texi &&
texi2dvi             -o doc/parted.dvi doc/parted.texi &&
dvips                -o doc/parted.ps  doc/parted.dvi

If you wish to run the test suite, first remove a test that normally fails in BLFS, because it needs a locale C.UTF-8:

sed -i '/t0251-gpt-unicode.sh/d' tests/Makefile

To test the results, issue: make check. Note that many tests are skipped if not run as the root user.

Now, as the root user:

make install &&
install -v -m755 -d /usr/share/doc/parted-3.2/html &&
install -v -m644    doc/html/* \
                    /usr/share/doc/parted-3.2/html &&
install -v -m644    doc/{FAT,API,parted.{txt,html}} \
                    /usr/share/doc/parted-3.2

Install the optional PDF and Postscript documentation by issuing the following command as the root user:

install -v -m644 doc/FAT doc/API doc/parted.{pdf,ps,dvi} \
                    /usr/share/doc/parted-3.2

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--disable-device-mapper: This option disables device mapper support. Add this parameter if you have not installed LVM2.

Installed Programs: parted and partprobe

Installed Libraries: libparted.so and libparted-fs-resize.so

Installed Directories: /usr/include/parted and /usr/share/doc/parted-3.2

Short Descriptions

parted	is a partition manipulation program.
partprobe	informs the OS of partition table changes.
`libparted.so`	contains the Parted API functions.

Last updated on 2017-08-24 18:56:23 -0700

reiserfsprogs-3.6.27

Introduction to reiserfsprogs

The reiserfsprogs package contains various utilities for use with the Reiser file system.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.kernel.org/pub/linux/kernel/people/jeffm/reiserfsprogs/v3.6.27/reiserfsprogs-3.6.27.tar.xz
Download MD5 sum: 90c139542725efc6da3a6b1709695395
Download size: 439 KB
Estimated disk space required: 13 MB
Estimated build time: 0.2 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/reiser

Kernel Configuration

Enable the following option in the kernel configuration and recompile the kernel:

File systems --->
  <*/M> Reiserfs support [CONFIG_REISERFS_FS]

Installation of reiserfsprogs

Install reiserfsprogs by running the following commands:

autoreconf -fiv             &&
./configure --prefix=/usr   \
            --sbindir=/sbin &&

make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--sbindir=/sbin: This switch ensures that the reiserfsprogs utilities are installed in /sbin.

Installed Programs: debugreiserfs, mkreiserfs, reiserfsck, reiserfstune, and resize_reiserfs

Installed Library: libreiserfscore.so

Installed Directory: /usr/include/reiserfs

Short Descriptions

debugreiserfs	can sometimes help to solve problems with ReiserFS file systems. If it is called without options, it prints the super block of any ReiserFS file system found on the device.
mkreiserfs	creates a ReiserFS file system.
reiserfsck	is used to check or repair a ReiserFS file system.
reiserfstune	is used for tuning the ReiserFS journal. WARNING: Don't use this utility without first reading the man page thoroughly.
resize_reiserfs	is used to resize an unmounted ReiserFS file system.

Last updated on 2017-08-28 15:14:37 -0700

smartmontools-6.5

Introduction to smartmontools

The smartmontools package contains utility programs (smartctl, smartd) to control/monitor storage systems using the Self-Monitoring, Analysis and Reporting Technology System (S.M.A.R.T.) built into most modern ATA and SCSI disks.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/smartmontools/smartmontools-6.5.tar.gz
Download MD5 sum: 093aeec3f8f39fa9a37593c4012d3156
Download size: 836 KB
Estimated disk space required: 21 MB
Estimated build time: 0.2 SBU

smartmontools Dependencies

Optional (runtime)

cURL-7.55.1 or Lynx-2.8.8rel.2 or Wget-1.19.1 (download tools)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/gptdisk

Installation of smartmontools

Install smartmontools by running the following commands:

./configure --prefix=/usr           \
            --sysconfdir=/etc       \
            --with-initscriptdir=no \
            --docdir=/usr/share/doc/smartmontools-6.5 &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Configuring smartmontools

Config File

/etc/smartd.conf

Configuration Information

See the embedded comments in /etc/smartd.conf for detailed instructions on customizing the smartd darmon.

Command Explanations

--with-initscriptdir=no: This switch suppresses the default initialization script. See above for the BLFS script.

Installed Programs: smartctl, smartd, and update-smart-drivedb

Installed Libraries: None

Installed Directories: /usr/share/smartmontools, /usr/share/doc/smartmontools-6.4, and /etc/smartd_warning.d

Short Descriptions

smartctl	is the control and monitor utility for SMART Disks.
smartd	is the SMART disk monitoring daemon.
update-smart-drivedb	is the update tool for the smartmontools drive database.

Last updated on 2017-08-20 15:06:11 -0700

sshfs-3.2.0

Introduction to Sshfs

The Sshfs package contains a filesystem client based on the SSH File Transfer Protocol. This is useful for mounting a remote computer that you have ssh access to as a local filesystem. This allows you to drag and drop files or run shell commands on the remote files as if they were on your local computer.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/libfuse/sshfs/releases/download/sshfs-3.2.0/sshfs-3.2.0.tar.gz
Download MD5 sum: dee189442efb22e08d4f233af8626ce7
Download size: 164 KB
Estimated disk space required: 1.9 MB
Estimated build time: less than 0.1 SBU

Sshfs Dependencies

Required

Fuse-3.1.1, GLib-2.52.3, and OpenSSH-7.5p1.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/sshfs

Installation of Sshfs

Install Sshfs by running the following commands:

./configure --prefix=/usr &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Using Sshfs

To mount an ssh server you need to be able to log into the server. For example, to mount your remote home folder to the local ~/examplepath (the directory must exist and you must have permissions to write to it):

sshfs example.com:/home/userid ~/examplepath

When you've finished work and want to unmount it again:

fusermount -u ~/example

You can also mount an sshfs filesystem at boot by adding an entry similar to the following in the /etc/fstab file:

userid@example.com:/path /media/path fuse.sshfs  _netdev,IdentityFile=/home/userid/.ssh/id_rsa 0 0

See man 1 sshfs and man 8 mount.fuse for all available mount options.

Installed Program: sshfs

Installed Libraries: None

Installed Directories: None

Short Descriptions

sshfs

mounts an ssh server as a local file system.

Last updated on 2016-08-27 23:14:16 +0200

xfsprogs-4.12.0

Introduction to xfsprogs

The xfsprogs package contains administration and debugging tools for the XFS file system.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.kernel.org/pub/linux/utils/fs/xfs/xfsprogs/xfsprogs-4.12.0.tar.xz
Download MD5 sum: e348b0e1d7bd1cd82d64b91ff37e727e
Download size: 1.1 MB
Estimated disk space required: 72 MB
Estimated build time: 0.6 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/xfs

Kernel Configuration

Enable the following options in the kernel configuration and recompile the kernel:

File systems --->
  <*/M> XFS filesystem support [CONFIG_XFS_FS]

Installation of xfsprogs

Install xfsprogs by running the following commands:

make DEBUG=-DNDEBUG     \
     INSTALL_USER=root  \
     INSTALL_GROUP=root \
     LOCAL_CONFIGURE_OPTIONS="--enable-readline"

This package does not come with a test suite.

Now, as the root user:

make PKG_DOC_DIR=/usr/share/doc/xfsprogs-4.12.0 install     &&
make PKG_DOC_DIR=/usr/share/doc/xfsprogs-4.12.0 install-dev &&

rm -rfv /usr/lib/libhandle.a                               &&
rm -rfv /lib/libhandle.{a,la,so}                           &&
ln -sfv ../../lib/libhandle.so.1 /usr/lib/libhandle.so     &&
sed -i "s@libdir='/lib@libdir='/usr/lib@" /usr/lib/libhandle.la

Command Explanations

make DEBUG=-DNDEBUG: Turns off debugging symbols.

INSTALL_USER=root INSTALL_GROUP=root: This sets the owner and group of the installed files.

LOCAL_CONFIGURE_OPTIONS="...": This passes extra configuration options to the configure script. The example --enable-readline parameter enables linking the XFS programs with the libreadline.so library, in order to allow editing interactive commands.

OPTIMIZER="...": Adding this parameter to the end of the make command overrides the default optimization settings.

Installed Programs: fsck.xfs, mkfs.xfs, xfs_admin, xfs_bmap, xfs_copy, xfs_db, xfs_estimate, xfs_freeze, xfs_fsr, xfs_growfs, xfs_info, xfs_io, xfs_logprint, xfs_mdrestore, xfs_metadump, xfs_mkfile, xfs_ncheck, xfs_quota, xfs_repair, xfs_rtcp, and xfs_spaceman

Installed Libraries: libhandle.so

Installed Directories: /usr/include/xfs and /usr/share/doc/xfsprogs-4.12.0

Short Descriptions

fsck.xfs	simply exits with a zero status, since XFS partitions are checked at mount time.
mkfs.xfs	constructs an XFS file system.
xfs_admin	changes the parameters of an XFS file system.
xfs_bmap	prints block mapping for an XFS file.
xfs_copy	copies the contents of an XFS file system to one or more targets in parallel.
xfs_estimate	for each directory argument, estimates the space that directory would take if it were copied to an XFS filesystem (does not cross mount points).
xfs_db	is used to debug an XFS file system.
xfs_freeze	suspends access to an XFS file system.
xfs_fsr	applicable only to XFS filesystems, improves the organization of mounted filesystems, the reorganization algorithm operates on one file at a time, compacting or othewise improving the layout of the file extents (contiguous blocks of file data).
xfs_growfs	expands an XFS file system.
xfs_info	is equivalent to invoking xfs_growfs, but specifying that no change to the file system is to be made.
xfs_io	is a debugging tool like xfs_db, but is aimed at examining the regular file I/O path rather than the raw XFS volume itself.
xfs_logprint	prints the log of an XFS file system.
xfs_mdrestore	restores an XFS metadump image to a filesystem image.
xfs_metadump	copies XFS filesystem metadata to a file.
xfs_mkfile	creates an XFS file, padded with zeroes by default.
xfs_ncheck	generates pathnames from inode numbers for an XFS file system.
xfs_quota	is a utility for reporting and editing various aspects of filesystem quota.
xfs_repair	repairs corrupt or damaged XFS file systems.
xfs_rtcp	copies a file to the real-time partition on an XFS file system.
xfs_spaceman	reports and controls free space usage in an XFS file system.
`libhandle.so`	contains XFS-specific functions that provide a way to perform certain filesystem operations without using a file descriptor to access filesystem objects.

Last updated on 2017-08-24 18:56:23 -0700

Chapter 6. Editors

This chapter is referenced in the LFS book for those wishing to use other editors on their LFS system. You're also shown how some LFS installed programs benefit from being recompiled after GUI libraries have been installed.

Bluefish-2.2.10

Introduction to Bluefish

Bluefish is a GTK+ text editor targeted towards programmers and web designers, with many options to write websites, scripts and programming code. Bluefish supports many programming and markup languages, and it focuses on editing dynamic and interactive websites.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.bennewitz.com/bluefish/stable/source/bluefish-2.2.10.tar.bz2
Download MD5 sum: 06cc710505856cb328444d834f5e9666
Download size: 4.0 MB
Estimated disk space required: 60 MB
Estimated build time: 0.4 SBU

Bluefish Dependencies

Required

GTK+-2.24.31 or GTK+-3.22.18 (If both are installed, configure defaults to using GTK+ 3)

Optional

enchant-1.6.0 (for spell checking), Gucharmap-10.0.0, PCRE-8.41 and Jing

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/bluefish

Installation of Bluefish

Install Bluefish by running the following commands:

./configure --prefix=/usr --docdir=/usr/share/doc/bluefish-2.2.10 &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Note

This package installs icon files into the /usr/share/icons/hicolor hierarchy and desktop files into the /usr/share/applications hierarchy. You can improve system performance and memory usage by updating /usr/share/icons/hicolor/icon-theme.cache and /usr/share/applications/mimeinfo.cache. To perform the update you must have desktop-file-utils-0.23 (for the desktop cache) and issue the following commands as the root user:

gtk-update-icon-cache -t -f --include-image-data /usr/share/icons/hicolor &&
update-desktop-database

Installed Program: bluefish

Installed Libraries: several under /usr/lib/bluefish/

Installed Directories: /usr/lib/bluefish, /usr/share/bluefish, /usr/share/doc/bluefish-2.2.10, and /usr/share/xml/bluefish

Short Descriptions

bluefish

is a GTK+ text editor for markup and programming.

Last updated on 2017-08-28 15:14:37 -0700

Ed-1.14.2

Introduction to Ed

Ed is a line-oriented text editor. It is used to create, display, modify and otherwise manipulate text files, both interactively and via shell scripts. Ed isn't something which many people use. It's described here because it can be used by the patch program if you encounter an ed-based patch file. This happens rarely because diff-based patches are preferred these days.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/ed/ed-1.14.2.tar.lz
Download (FTP): ftp://ftp.gnu.org/gnu/ed/ed-1.14.2.tar.lz
Download MD5 sum: 273d04778b2a51f7c3cbfcd2001876bf
Download size: 66 KB
Estimated disk space required: 1.1 MB
Estimated build time: less than 0.1 SBU

Ed Dependencies

Required to uncompress the tarball

libarchive-3.3.2 (for bsdtar)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/ed

Installation of Ed

Install Ed by running the following commands:

./configure --prefix=/usr --bindir=/bin &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Installed Programs: ed and red

Installed Libraries: None

Installed Directories: None

Short Descriptions

ed	is a line-oriented text editor.
red	is a restricted ed—it can only edit files in the current directory and cannot execute shell commands.

Last updated on 2017-08-28 15:14:37 -0700

Emacs-25.2

Introduction to Emacs

The Emacs package contains an extensible, customizable, self-documenting real-time display editor.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/emacs/emacs-25.2.tar.xz
Download (FTP): ftp://ftp.gnu.org/gnu/emacs/emacs-25.2.tar.xz
Download MD5 sum: 06442d867158754bdde793eca420ca49
Download size: 45 MB
Estimated disk space required: 352 MB
Estimated build time: 1.2 SBU

Emacs Dependencies

Optional

X Window System, alsa-lib-1.1.4.1, dbus-1.10.22, GConf-3.2.6, GnuTLS-3.5.14, gobject-introspection-1.52.1, gsettings-desktop-schemas-3.24.0, GPM-1.20.7, GTK+-2.24.31 or GTK+-3.22.18, ImageMagick-6.9.9-9 libraries (see command explanations), libjpeg-turbo-1.5.2, libpng-1.6.31, librsvg-2.40.18, LibTIFF-4.0.8, libxml2-2.9.4, MIT Kerberos V5-1.15.1, Valgrind-3.13.0, intlfonts, libungif, libotf and m17n-lib - to correctly display such complex scripts as Indic and Khmer, and also for scripts that require Arabic shaping support (Arabic and Farsi), and libXaw3d

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/emacs

Installation of Emacs

Install Emacs by running the following commands:

./configure --prefix=/usr --localstatedir=/var &&
make

This package does not come with a test suite. If make succeeds, you can test the result by running src/emacs -Q, which is the program that will be installed, with its auxiliary files. This should start and display the application opening screen.

Now, as the root user:

make install &&
chown -v -R root:root /usr/share/emacs/25.2

This package installs icon files into the /usr/share/icons/hicolor hierarchy and desktop files into the /usr/share/applications hierarchy. You can improve system performance and memory usage by updating /usr/share/icons/hicolor/icon-theme.cache and /usr/share/applications/mimeinfo.cache. To perform the update you must have GTK+-2.24.31 or GTK+-3.22.18 installed (for the icon cache) and desktop-file-utils-0.23 (for the desktop cache) and issue the following commands as the root user:

gtk-update-icon-cache -t -f --include-image-data /usr/share/icons/hicolor &&
update-desktop-database

Command Explanations

--localstatedir=/var: Create game score files in /var/games/emacs instead of /usr/var/games/emacs.

IMAGEMAGICK_CFLAGS=-I/usr/include/ImageMagick-6 IMAGEMAGICK_LIBS="-lMagickCore-6.Q16HDRI -lMagick++-6.Q16HDRI -lMagickWand-6.Q16HDRI" : use these when you invoke configure if you have installed ImageMagick-6.9.9-9 libraries and wish to link to them (the normal unversioned pkgconfig files collide with ImageMagick-7.0.6-10 which this package cannot use).

--with-giflib=no: Use this if you have not installed giflib-5.1.4 or libungif.

Installed Programs: ctags, ebrowse, emacs (symlink), emacs-25.2, emacsclient, etags, and grep-changelog

Installed Libraries: None

Installed Directories: /usr/libexec/emacs, /usr/share/emacs, and /var/games/emacs

Short Descriptions

ctags	creates cross-reference tagfile database files for source code.
ebrowse	permits browsing of C++ class hierarchies from within emacs.
emacs	is an editor.
emacsclient	attaches an emacs session to an already running emacsserver instance.
etags	is another program to generate source code cross-reference tagfiles.
grep-changelog	prints entries in Change Logs matching various criteria.

Last updated on 2017-08-25 11:57:45 -0700

Gedit-3.22.1

Introduction to Gedit

The Gedit package contains a lightweight UTF-8 text editor for the GNOME Desktop.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/gedit/3.22/gedit-3.22.1.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/gedit/3.22/gedit-3.22.1.tar.xz
Download MD5 sum: b3ee39faa2f905c83cb158a9b4d3fb44
Download size: 2.8 MB
Estimated disk space required: 71 MB
Estimated build time: 0.8 SBU

Gedit Dependencies

Required

gsettings-desktop-schemas-3.24.0, gtksourceview-3.24.3, itstool-2.0.2, and libpeas-1.20.0

Optional

GTK-Doc-1.26, Vala-0.36.4, gspell, and zeitgeist

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/gedit

Installation of Gedit

Install Gedit by running the following commands:

./configure --prefix=/usr --disable-spell &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--disable-spell: Use this switch to disable spell-checking capability. It is required if gspell is not installed.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Program: gedit and gnome-text-editor (symlink to gedit)

Installed Libraries: libgedit.so

Installed Directories: /usr/include/gedit-3.14 and /usr/{lib,libexec,share,share/gtk-doc/html,share/help/*}/gedit

Short Descriptions

gedit

is a lightweight text editor integrated with the GNOME Desktop.

Last updated on 2017-08-28 15:14:37 -0700

JOE-4.4

Introduction to JOE

JOE (Joe's own editor) is a small text editor capable of emulating WordStar, Pico, and Emacs.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/joe-editor/joe-4.4.tar.gz
Download MD5 sum: 59e63debe60b456a6ee5c0c27a756a47
Download size: 1.3 MB
Estimated disk space required: 14 MB
Estimated build time: 0.2 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/joe

Installation of JOE

Install JOE by running the following commands:

./configure --prefix=/usr     \
            --sysconfdir=/etc \
            --docdir=/usr/share/doc/joe-4.4 &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&

install -vm 755 joe/util/{stringify,termidx,uniproc} /usr/bin &&

install -vdm755 /usr/share/joe/util &&
install -vm 644 joe/util/{*.txt,README} /usr/share/joe/util

Configuring JOE

Config Files

/etc/joe/jmacsrc, /etc/joe/joerc, /etc/joe/jpicorc, /etc/joe/jstarrc, /etc/joe/rjoerc, and ~/.joerc

Installed Programs: jmacs, joe, jpico, jstar, rjoe, stringify, termidx, and uniproc

Installed Libraries: None

Installed Directories: /etc/joe, /usr/share/joe, and /usr/share/doc/joe-4.4

Short Descriptions

jmacs	is a symbolic link to joe used to launch Emacs emulation mode.
joe	is a small text editor capable of emulating WordStar, Pico, and Emacs.
jpico	is a symbolic link to joe used to launch Pico emulation mode.
jstar	is a symbolic link to joe used to launch WordStar emulation mode.
rjoe	is a symbolic link to joe that restricts JOE to editing only files which are specified on the command-line.
stringify	is a program used by joe to convert rc and .jsf files into a C file (see /usr/share/joe/util/README).
termidx	is a program used by joe to generate the termcap index file (see /usr/share/joe/util/README).
uniproc	is a program used by joe to generate joe's unicode database file unicat.c from Blocks.txt CaseFolding.txt EastAsianWidth.txt and UnicodeData.txt (find them at /usr/share/joe/util; see /usr/share/joe/util/README).

Last updated on 2017-08-28 15:14:37 -0700

juffed-0.10.r71.gc3c1a3f

Introduction to JuffEd

The JuffEd package is a Qt based editor with support for multiple tabs. It is simple and clear, but very powerful. It supports language syntax highlighting, auto-indents in accordance with file type, code blocks folding, matching braces highlighting with instant jumps between them, powerful search and replacing text using regular expressions (including multiline ones) with the opportunity to use matches \1, \2, … in substitutions, a terminal emulator, saving named sessions and many other features.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://anduin.linuxfromscratch.org/BLFS/juffed/juffed-0.10.r71.gc3c1a3f.tar.xz
Download MD5 sum: 5d211f5aadcb3d7365b5a6127d3d275f
Download size: 1.3 MB
Estimated disk space required: 22 MB
Estimated build time: 0.8 SBU

The source tarball shown above was created by the BLFS team by cloning the source code repository, finding the correct version to rename accordingly the source code directory, removing .git directory and .gitignore file, and finally making the compressed tarball. No other modification has been made.

JuffEd Dependencies

Required

qscintilla-2.10.1

Optional

desktop-file-utils-0.23 and Enca

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/juffed

Installation of JuffEd

For compilation with Qt4, see “Command Explanations” below. Install JuffEd by running the following commands:

sed -i 's/"64"/""/' cmake/LibSuffix.cmake &&

mkdir -v build &&
cd       build &&

cmake -DCMAKE_INSTALL_PREFIX=$LXQT_PREFIX \
      -DCMAKE_BUILD_TYPE=Release          \
      -DBUILD_TERMINAL=ON                 \
      -DUSE_QT5=true                      \
      ..       &&

LIBRARY_PATH=$LXQT_PREFIX/lib make

The choice of /usr prefix is due to the general characteristics of this program, which can be used without LXQt.

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

sed ... LibSuffix.cmake: Removes the 64 from /lib64.

LIBRARY_PATH=$LXQT_PREFIX/lib: This environment variable is needed for the linker to find a required library.

-DBUILD_TERMINAL=ON: This switch is used in order to enable building the terminal. Toggle to “OFF” or remove the switch, if you do not wish it.

-DUSE_QT5=true: This switch is used in order to build this application linked to Qt5. Toggle to “false”, if you prefer to use Qt4.

Installed Program: juffed

Installed Libraries: libjuff.so, libjuffed-engine-qsci.so and plugins under /usr/lib/juffed/plugins

Installed Directory: /usr/{include,lib,share}/juffed

Short Descriptions

juffed	is a Qt based text editor.
`libjuff.so`	contains the JuffEd API functions.
`libjuffed-engine-qsci.so`	contains the QScintilla bindings.

Last updated on 2017-08-28 15:14:37 -0700

Kate-17.08.0

Introduction to Kate

The Kate package contains an advanced KF5 based graphical text editor.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://download.kde.org/stable/applications/17.08.0/src/kate-17.08.0.tar.xz
Download MD5 sum: 05fd3a46011a39b05677c4e94ec4de3f
Download size: 5.4 MB
Estimated disk space required: 69 MB
Estimated build time: 2.6 SBU

Kate Dependencies

Required

KDE Frameworks-5.37.0,

Optional

libgit2

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/kate5

Installation of Kate

Install Kate by running the following commands:

mkdir build &&
cd    build &&

cmake -DCMAKE_INSTALL_PREFIX=$KF5_PREFIX  \
      -DCMAKE_BUILD_TYPE=Release          \
      -DBUILD_TESTING=OFF                 \
      -Wno-dev .. &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Programs: kate and kwrite

Installed Libraries: libkdeinit5_kate.so and libkdeinit5_kwrite.so

Installed Directories: $KF5_PREFIX/lib/plugins/ktexteditor, $KF5_PREFIX/lib/plugins/plasma/dataengine, $KF5_PREFIX/share/doc/HTML/*/{kate,katepart,kwrite}, $KF5_PREFIX/share/{kateproject,katexmltools}, $KF5_PREFIX/share/kxmlgui5/{kate,katebuild,katecloseexceptplugin}, $KF5_PREFIX/share/kxmlgui5/{katectags,katefiletree,kategdb}, $KF5_PREFIX/share/kxmlgui5/{katekonsole,kateopenheaderplugin}, $KF5_PREFIX/share/kxmlgui5/{kateproject,katesearch,katesnippets}, $KF5_PREFIX/share/kxmlgui5/{katesql,katesymbolviewer,katexmltools}, $KF5_PREFIX/share/kxmlgui5/{kwrite,tabswitcher} and $KF5_PREFIX/share/plasma/plasmoids/org.kde.plasma.katesessions

Short Descriptions

kate	is an advanced text editor for kde.
kwrite	is a text editor for KDE, that is a light version of kate.

Last updated on 2017-08-27 09:22:45 -0700

Mousepad-0.4.0

Introduction to Mousepad

Mousepad is a simple GTK+ 2 text editor for the Xfce desktop environment.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://archive.xfce.org/src/apps/mousepad/0.4/mousepad-0.4.0.tar.bz2
Download MD5 sum: f55314c5dda6323883241e6cf01550a7
Download size: 568 KB
Estimated disk space required: 9.4 MB
Estimated build time: less than 0.1 SBU

Mousepad Dependencies

Required

gtksourceview-3.24.3 (optionally, it can be built with gtksourceview-2)

Optional

DConf-0.26.0 (runtime) and dbus-glib-0.108

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/mousepad

Installation of Mousepad

Install Mousepad by running the following commands:

./configure --prefix=/usr --enable-keyfile-settings &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--enable-keyfile-settings: Use the GSettings keyfile backend rather than the default DConf-0.26.0.

Installed Program: mousepad

Installed Libraries: None

Installed Directories: None

Short Descriptions

mousepad

is a simple GTK+ 2 text editor.

Last updated on 2017-08-28 15:14:37 -0700

Nano-2.8.7

Introduction to Nano

The Nano package contains a small, simple text editor which aims to replace Pico, the default editor in the Pine package.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.nano-editor.org/dist/v2.8/nano-2.8.7.tar.xz
Download MD5 sum: 733b3f80a0a2f44fb25de6c6d3a583cf
Download size: 1.4 MB
Estimated disk space required: 16 MB
Estimated build time: 0.2 SBU

Nano Dependencies

Optional

slang-2.3.1

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/Nano

Installation of Nano

Install Nano by running the following commands:

./configure --prefix=/usr     \
            --sysconfdir=/etc \
            --enable-utf8     \
            --docdir=/usr/share/doc/nano-2.8.7 &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
install -v -m644 doc/{nano.html,sample.nanorc} /usr/share/doc/nano-2.8.7

Command Explanations

--enable-utf8: This switch enables unicode support in Nano.

--with-slang: This forces Nano to use S-Lang. Use this if installed.

Configuring nano

Config Files

/etc/nanorc and ~/.nanorc

Configuration Information

Example configuration (create as a system-wide /etc/nanorc or a personal ~/.nanorc file)

set autoindent
set constantshow
set fill 72
set historylog
set multibuffer
set nohelp
set nowrap
set positionlog
set quickblank 
set regexp
set smooth
set suspend

Another example is the nanorc.sample file in the installed documentation directory. It includes color configurations and has some documentation included in the comments.

Syntax highlighting is provided for several file types, in /usr/share/nano/ directory. E.g., for shell scripts, you can insert include /usr/share/nano/sh.nanorc in the personal or global configuration file. If you wish highlighting for all supported files, use include /usr/share/nano/*.nanorc.

Installed Programs: nano and rnano (symlink)

Installed Libraries: None

Installed Directories: /usr/share/nano and /usr/share/doc/nano-2.8.7

Short Descriptions

nano	is a small, simple text editor which aims to replace Pico, the default editor in the Pine package.
rnano	is a restricted mode for nano.

Last updated on 2017-08-28 13:52:53 -0700

Vim-8.0.586

Introduction to Vim

The Vim package, which is an abbreviation for VI IMproved, contains a vi clone with extra features as compared to the original vi.

The default LFS instructions install vim as a part of the base system. If you would prefer to link vim against X, you should recompile vim to enable GUI mode. There is no need for special instructions since X support is automatically detected.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.vim.org/vim/unix/vim-8.0.586.tar.bz2
Download MD5 sum: b35e794140c196ff59b492b56c1e73db
Download size: 10.4 MB
Estimated disk space required: 77 MB (with tests)
Estimated build time: 2.2 SBU )with tests)

Vim Dependencies

Optional

GPM-1.20.7, Lua-5.3.4, Python-2.7.13, Ruby-2.4.1, and Tcl-8.6.7

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/vim

Installation of Vim

Note

If you recompile Vim to link against X and your X libraries are not on the root partition, you will no longer have an editor for use in emergencies. You may choose to install an additional editor, not link Vim against X, or move the current vim executable to the /bin directory under a different name such as vi.

Install Vim by running the following commands:

echo '#define SYS_VIMRC_FILE  "/etc/vimrc"' >>  src/feature.h &&
echo '#define SYS_GVIMRC_FILE "/etc/gvimrc"' >> src/feature.h &&

./configure --prefix=/usr \
            --with-features=huge \
            --with-tlib=ncursesw &&
make

To test the results, issue: make test. The vim test suite outputs a lot of binary data to the screen, which can cause issues with the settings of the current terminal. This can be resolved by redirecting the output to a log file. Even if one of the tests fails to produce the file test.out in src/testdir, the remaining tests will still be executed. If all goes well,the final message in the log file will be ALL DONE. Note: Some color tests expect to be executed under the xterm terminal emulator. Three tests are known to fail occasionally and can be ignored.

Now, as the root user:

make install

By default, Vim's documentation is installed in /usr/share/vim. The following symlink allows the documentation to be accessed via /usr/share/doc/vim-8.0.586, making it consistent with the location of documentation for other packages:

ln -snfv ../vim/vim80/doc /usr/share/doc/vim-8.0.586

If you wish to update the runtime files, issue the following command (requires rsync-3.1.2):

rsync -avzcP --delete --exclude="/dos/" --exclude="/spell/" \
    ftp.nluug.nl::Vim/runtime/ ./runtime/

To install the runtime files and regenerate the tags file, as the root user issue:

make -C src installruntime &&
vim -c ":helptags /usr/share/doc/vim-8.0.586" -c ":q"

Command Explanations

--with-features=huge: This switch enables all the additional features available in Vim, including support for multibyte characters.

--with-tlib=ncursesw: This switch forces Vim to link against the libncursesw library.

--enable-gui=no: This will prevent compilation of the GUI. Vim will still link against X, so that some features such as the client-server model or the x11-selection (clipboard) are still available.

--without-x: If you prefer not to link Vim against X, use this switch.

--enable-perlinterp, --enable-pythoninterp, --enable-tclinterp, --enable-rubyinterp: These options include the Perl, Python, Tcl, or Ruby interpreters that allow using other application code in vim scripts.

Configuring Vim

Config Files

/etc/vimrc and ~/.vimrc

Desktop File

If desired, create a menu entry for graphical vim, gvim.desktop, as the root user

cat > /usr/share/applications/gvim.desktop << "EOF"
[Desktop Entry]
Name=GVim Text Editor
Comment=Edit text files
Comment[pt_BR]=Edite arquivos de texto
TryExec=gvim
Exec=gvim -f %F
Terminal=false
Type=Application
Icon=gvim.png
Categories=Utility;TextEditor;
StartupNotify=true
MimeType=text/plain;
EOF

Configuration Information

Vim has an integrated spell checker which you can enable it if you issue the following in a vim window:

:setlocal spell spelllang=ru

This setting will enable spell checking for the Russian language for the current session.

By default, Vim only installs spell files for the English language. If a spell file is not available for a language, then Vim will call the $VIMRUNTIME/plugin/spellfile.vim plugin and will try to obtain the *.spl and optionally *.sug from the vim ftp server, by using the $VIMRUNTIME/plugin/netrwPlugin.vim plugin.

Alternatively you can manually download the *.spl and *.sug files from: ftp://ftp.vim.org/pub/vim/runtime/spell/ and save them to ~/.vim/spell or in /usr/share/vim/vim80/spell/.

To find out what's new in Vim-8.0.586 issue the following command:

:help version-8.0.586

For additional information on setting up Vim configuration files, see The vimrc Files and http://vim.wikia.com/wiki/Example_vimrc.

A list of the reinstalled files, along with their short descriptions can be found in the LFS Vim Installation Instructions

Installed Programs: gview, gvim, gvimdiff, rgview, and rgvim

Installed Libraries: None

Installed Directory: /usr/share/vim

Short Descriptions

gview	starts gvim in read-only mode.
gvim	is the editor that runs under X and includes a GUI.
gvimdiff	edits two or three versions of a file with gvim and shows the differences.
rgview	is a restricted version of gview.
rgvim	is a restricted version of gvim.

Last updated on 2017-08-27 04:41:00 -0700

Other Editors

Geany is a text editor using the GTK+2 toolkit with basic features of an integrated development environment. It was developed to provide a small and fast IDE, which has only a few dependencies from other packages. It supports many filetypes and has some nice features.
Leafpad is a very simple text editor using the GTK+2 toolkit.
mcedit is a text editor installed as part of MC-4.8.19.
pico is a text editor installed as a part of Alpine-2.21.

Last updated on 2017-06-03 15:32:28 -0700

Chapter 7. Shells

We are all familiar with the Bourne Again SHell, but there are two other user interfaces that are considered useful modern shells – the Berkeley Unix C shell and the Korn shell. This chapter installs packages compatible with these additional shell types.

Dash-0.5.9.1

Introduction to Dash

Dash is a POSIX compliant shell. It can be installed as /bin/sh or as the default shell for either root or a second user with a userid of 0. It depends on fewer libraries than the Bash shell and is therefore less likely to be affected by an upgrade problem or disk failure. Dash is also useful for checking that a script is completely compatible with POSIX syntax.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://gondor.apana.org.au/~herbert/dash/files/dash-0.5.9.1.tar.gz
Download MD5 sum: 6472702a8d9760d166ef8333dcb527a6
Download size: 220 KB
Estimated disk space required: 2.8 MB
Estimated build time: less than 0.1 SBU

Dash Dependencies

Optional

libedit (command line editor library)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/dash

Installation of Dash

Install Dash by running the following commands:

./configure --bindir=/bin --mandir=/usr/share/man &&
make

This package does not come with a test suite.

Now, as the root user:

make install

If you would like to make dash the default sh, recreate the /bin/sh symlink as the root user:

Note

If you create the symbolic link from dash to sh, you will need to reset the link to bash to build LFS.

ln -svf dash /bin/sh

Command Explanations

--bindir=/bin: This parameter places the dash binary into the root filesystem.

--with-libedit: To compile Dash with libedit support.

Configuring Dash

Config Files

Dash sources /etc/profile and ~/.profile

Configuration Information

Update /etc/shells to include the Dash shell by issuing the following command as the root user:

cat >> /etc/shells << "EOF"
/bin/dash
EOF

Installed Program: dash

Installed Libraries: None

Installed Directories: None

Short Description

dash

is a POSIX compliant shell.

Last updated on 2017-08-28 15:14:37 -0700

Tcsh-6.20.00

Introduction to Tcsh

The Tcsh package contains “an enhanced but completely compatible version of the Berkeley Unix C shell (csh)”. This is useful as an alternative shell for those who prefer C syntax to that of the bash shell, and also because some programs require the C shell in order to perform installation tasks.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://fossies.org/linux/misc/tcsh-6.20.00.tar.gz
Download (FTP): ftp://ftp.astron.com/pub/tcsh/tcsh-6.20.00.tar.gz
Download MD5 sum: 59d40ef40a68e790d95e182069431834
Download size: 980 KB
Estimated disk space required: 12.3 MB (with tests)
Estimated build time: 0.2 SBU (with tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/tcsh

Installation of Tcsh

First, fix the package for tool chain changes:

sed -i 's|SVID_SOURCE|DEFAULT_SOURCE|g' config/linux  &&
sed -i 's|BSD_SOURCE|DEFAULT_SOURCE|g'  config/linux

Install Tcsh by running the following commands:

./configure --prefix=/usr --bindir=/bin &&

make &&
sh ./tcsh.man2html

To test the results, issue: make check.

Now, as the root user:

make install install.man &&

ln -v -sf tcsh   /bin/csh &&
ln -v -sf tcsh.1 /usr/share/man/man1/csh.1 &&

install -v -m755 -d          /usr/share/doc/tcsh-6.20.00/html &&
install -v -m644 tcsh.html/* /usr/share/doc/tcsh-6.20.00/html &&
install -v -m644 FAQ         /usr/share/doc/tcsh-6.20.00

Command Explanations

--bindir=/bin: This installs the tcsh program in /bin instead of /usr/bin.

sh ./tcsh.man2html: This creates HTML documentation from the formatted man page.

ln -v -sf tcsh /bin/csh: The FHS states that if there is a C shell installed, there should be a symlink from /bin/csh to it. This creates that symlink.

Configuring Tcsh

Config Files

There are numerous configuration files for the C shell. Examples of these are /etc/csh.cshrc, /etc/csh.login, /etc/csh.logout, ~/.tcshrc, ~/.cshrc, ~/.history, ~/.cshdirs, ~/.login, and ~/.logout. More information on these files can be found in the tcsh(1) man page.

Configuration Information

Update /etc/shells to include the C shell program names (as the root user):

cat >> /etc/shells << "EOF"
/bin/tcsh
/bin/csh
EOF

The following ~/.cshrc provides two alternative colour prompts and coloured ls output. If you prefer a global modification, issue the command as the root user, replacing ~/.cshrc by /etc/csh.cshrc.

cat > ~/.cshrc << "EOF"
# Original at:
# https://www.cs.umd.edu/~srhuang/teaching/code_snippets/prompt_color.tcsh.html

# Modified by the BLFS Development Team.

# Add these lines to your ~/.cshrc (or to /etc/csh.cshrc).

# Colors!
set     red="%{\033[1;31m%}"
set   green="%{\033[0;32m%}"
set  yellow="%{\033[1;33m%}"
set    blue="%{\033[1;34m%}"
set magenta="%{\033[1;35m%}"
set    cyan="%{\033[1;36m%}"
set   white="%{\033[0;37m%}"
set     end="%{\033[0m%}" # This is needed at the end...

# Setting the actual prompt.  Two separate versions for you to try, pick
# whichever one you like better, and change the colors as you want.
# Just don't mess with the ${end} guy in either line...  Comment out or
# delete the prompt you don't use.

set prompt="${green}%n${blue}@%m ${white}%~ ${green}%%${end} "
set prompt="[${green}%n${blue}@%m ${white}%~ ]${end} "

# This was not in the original URL above
# Provides coloured ls
alias ls ls --color=always

# Clean up after ourselves...
unset red green yellow blue magenta cyan yellow white end
EOF

Installed Program: tcsh

Installed Libraries: None

Installed Directory: /usr/share/doc/tcsh-6.20.00

Short Descriptions

tcsh

is an enhanced but completely compatible version of the Berkeley Unix C shell, csh. It is usable as both an interactive shell and a script processor.

Last updated on 2017-08-28 15:14:37 -0700

zsh-5.4.2

Introduction to zsh

The zsh package contains a command interpreter (shell) usable as an interactive login shell and as a shell script command processor. Of the standard shells, zsh most closely resembles ksh but includes many enhancements.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.zsh.org/pub/zsh-5.4.2.tar.gz
Download MD5 sum: dfe156fd69b0d8d1745ecf6d6e02e047
Download size: 4.3 MB
Estimated disk space required: 44 MB (includes documentation and tests)
Estimated build time: 1.0 SBU (includes documentation and tests)

Additional Downloads

Optional Documentation: http://www.zsh.org/pub/zsh-5.4.2-doc.tar.xz
Documentation MD5 sum: e718bbcd663992ba33c01d4f8a289fc5
Documentation download size: 3.1 MB

Note

When there is a new zsh release, the old files shown above are moved to a new server directory: http://www.zsh.org/pub/old/.

zsh Dependencies

Optional

libcap-2.25 with PAM, PCRE-8.41, and Valgrind-3.13.0,

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/zsh

Installation of zsh

If you downloaded the optional documentation, unpack it with the following command:

tar --strip-components=1 -xvf ../zsh-5.4.2-doc.tar.xz

Install zsh by running the following commands:

./configure --prefix=/usr         \
            --bindir=/bin         \
            --sysconfdir=/etc/zsh \
            --enable-etcdir=/etc/zsh                  &&
make                                                  &&

makeinfo  Doc/zsh.texi --plaintext -o Doc/zsh.txt     &&
makeinfo  Doc/zsh.texi --html      -o Doc/html        &&
makeinfo  Doc/zsh.texi --html --no-split --no-headers -o Doc/zsh.html

If you have texlive-20170524 installed, you can build PDF format of the documentation by issuing the following command:

texi2pdf  Doc/zsh.texi -o Doc/zsh.pdf

To test the results, issue: make check.

Now, as the root user:

make install                              &&
make infodir=/usr/share/info install.info &&

install -v -m755 -d                 /usr/share/doc/zsh-5.4.2/html &&
install -v -m644 Doc/html/*         /usr/share/doc/zsh-5.4.2/html &&
install -v -m644 Doc/zsh.{html,txt} /usr/share/doc/zsh-5.4.2

If you downloaded the optional documentation, install it by issuing the following commands as the root user:

make htmldir=/usr/share/doc/zsh-5.4.2/html install.html &&
install -v -m644 Doc/zsh.dvi /usr/share/doc/zsh-5.4.2

If you built the PDF format of the documentation, install it by issuing the following command as the root user:

install -v -m644 Doc/zsh.pdf /usr/share/doc/zsh-5.4.2

Command Explanations

--sysconfdir=/etc/zsh and --enable-etcdir=/etc/zsh: These parameters are used so that all the zsh configuration files are consolidated into the /etc/zsh directory. Omit these parameters if you wish to retain historical compatibility by having all the files located in the /etc directory.

--bindir=/bin: This parameter places the zsh binaries into the root filesystem.

--enable-cap: This option enables POSIX capabilities.

--disable-gdbm: This option disables the use of the GDBM library.

--enable-pcre: This option allows zsh to use the PCRE regular expression library in shell builtins.

Multiple partitions

Linking zsh dynamically against pcre and/or gdbm produces runtime dependencies on libpcre.so and/or libgdbm.so respectively, which both reside in /usr hierarchy. If /usr is a separate mount point and zsh needs to be available in boot time, then its supporting libraries should be in /lib too. You can move the libraries as follows:

mv -v /usr/lib/libpcre.so.* /lib &&
ln -v -sf ../../lib/libpcre.so.0 /usr/lib/libpcre.so

mv -v /usr/lib/libgdbm.so.* /lib &&
ln -v -sf ../../lib/libgdbm.so.3 /usr/lib/libgdbm.so

Alternatively you can statically link zsh against pcre and gdbm if you modify the config.modules file (you need first to run configure to generate it).

Configuring zsh

Config Files

There are a whole host of configuration files for zsh including /etc/zsh/zshenv, /etc/zsh/zprofile, /etc/zsh/zshrc, /etc/zsh/zlogin and /etc/zsh/zlogout. You can find more information on these in the zsh(1) and related manual pages.

The first time zsh is executed, you will be prompted by messages asking several questions. The answers will be used to create a ~/.zshrc file. If you wish to run these questions again, run zsh /usr/share/zsh/5.4.2/functions/zsh-newuser-install -f.

There are several built-in advanced prompts. In the zsh shell, start advanced prompt support with autoload -U promptinit, then promptinit. Available prompt names are listed with prompt -l. Select a particular one with prompt <prompt-name>. Display all available prompts with prompt -p. Except for the list and display commands above, you can insert the other ones in ~/.zshrc to be automatically executed at shell start, with the prompt you chose.

Configuration Information

Update /etc/shells to include the zsh shell program names (as the root user):

cat >> /etc/shells << "EOF"
/bin/zsh
EOF

Installed Programs: zsh and zsh-5.4.2 (hardlinked to each other)

Installed Libraries: Numerous plugin helper modules under /usr/lib/zsh/5.4.2/

Installed Directories: /usr/{lib,share}/zsh and /usr/share/doc/zsh-5.4.2

Short Description

zsh

is a shell which has command-line editing, built-in spelling correction, programmable command completion, shell functions (with autoloading), a history mechanism, and a host of other features.

Last updated on 2017-08-28 15:24:26 -0700

Chapter 8. Virtualization

Virtualization allows running a complete operating system, or virtual machine (VM), within another operating environment as a task. There are several commercial and open source environments that either emulate another processor or utilize the hardware virtualization features of the host processor.

qemu-2.9.0

Introduction to qemu

qemu is a full virtualization solution for Linux on x86 hardware containing virtualization extensions (Intel VT or AMD-V).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://download.qemu-project.org/qemu-2.9.0.tar.bz2
Download MD5 sum: 02781eb15b364aedef79da7a5113f5b7
Download size: 27 MB
Estimated disk space required: 404 MB (add 420 MB for tests)
Estimated build time: 2.1 SBU (add 1.9 SBU for tests)

Qemu Dependencies

Required

GLib-2.52.3, Python-2.7.13, and X Window System

Optional

Depending on the sound system, various packages in ALSA-1.1.4, BlueZ-5.46, Check-0.11.0, cURL-7.55.1, Cyrus SASL-2.1.26, GnuTLS-3.5.14, GTK+-2.24.31, GTK+-3.22.18, libusb-1.0.21, libgcrypt-1.8.0, LZO-2.10, Nettle-3.3, Mesa-17.1.6, SDL-1.2.15, VTE-0.48.3 or Vte-0.28.2, libcacard, and libssh2

Note

This optional dependencies list is not comprehensive. See the output of ./configure --help for a more complete list.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/qemu

KVM Prerequisites

Before building qemu, check to see if your processor supports Virtualization Technology (VT):

egrep '^flags.*(vmx|svm)' /proc/cpuinfo

If you get any output, you have VT technology (vmx for Intel processors and svm for AMD processors). You then need to go into your system BIOS and ensure it is enabled. After enabing, reboot back to your LFS instance.

Kernel Configuration

Enable the following options in the kernel configuration and recompile the kernel if necessary:

[*] Virtualization:  --->                            [CONFIG_VIRTUALIZATION]
  <*/M>   Kernel-based Virtual Machine (KVM) support [CONFIG_KVM]
  <*/M>     KVM for Intel processors support         [CONFIG_KVM_INTEL]
  <*/M>     KVM for AMD processors support           [CONFIG_KVM_AMD]

The Intel or AMD settings are not both required, but the one matching your system processor is required.

To use the “bridge” network device, as explained below, check that bridge-utils-1.6 is installed and the following options in the kernel configuration are enabled:

[*] Networking support  --->                         [CONFIG_NET]
  Networking options  --->
    <*/M> 802.1d Ethernet Bridging                   [CONFIG_BRIDGE]
Device Drivers  --->
  [*] Network device support  --->                   [CONFIG_NETDEVICES]
    <*/M>    Universal TUN/TAP device driver support [CONFIG_TUN]

Installation of qemu

You will need a dedicated group that will contain users (other than root) allowed to access the KVM device. Create this group by running the following command as the root user:

groupadd -g 61 kvm

Add any users that might use the KVM device to that group:

usermod -a -G kvm <username>

Install qemu by running the following commands:

Note

Qemu is capable of running many targets. The build process is also capable of building multiple targets at one time in a comma delimited list assigned to --target-list. Run ./configure --help to get a complete list of available targets.

if [ $(uname -m) = i686 ]; then
   QEMU_ARCH=i386-softmmu
else
   QEMU_ARCH=x86_64-softmmu
fi

mkdir -vp build &&
cd        build &&

../configure --prefix=/usr               \
             --sysconfdir=/etc           \
             --target-list=$QEMU_ARCH    \
             --audio-drv-list=alsa       \
             --with-sdlabi=2.0           \
             --docdir=/usr/share/doc/qemu-2.9.0 &&

unset QEMU_ARCH &&

make

To run the built in tests, run make V=1 -k check.

Now, as the root user:

make install

You will also need to add an Udev rule so that the KVM device gets correct permissions:

cat > /lib/udev/rules.d/65-kvm.rules << "EOF"
KERNEL=="kvm", GROUP="kvm", MODE="0660"
EOF

Change the permissions and ownership of a helper script, which is needed when using the “bridge” network device (see below):

chgrp kvm  /usr/libexec/qemu-bridge-helper &&
chmod 4750 /usr/libexec/qemu-bridge-helper

Note

For convenience you may want to create a symbolic link to run the installed program. For instance:

ln -sv qemu-system-`uname -m` /usr/bin/qemu

Command Explanations

--audio-drv-list=alsa: This switch sets the audio driver to ALSA. For other drivers see the --audio-drv-list list in configure's help output. The default audio driver is OSS.

--with-sdlabi=2.0: Chooses to build with SDL-2 if both SDL and SDL-2 are installed.

--with-gtkabi=3.0: builds with GTK+-3 if both GTK+-2 and GTK+-3 are installed.

Using Qemu

Since using qemu means using a virtual computer, the steps to set up the virtual machine are in close analogy with those to set up a real computer. You'll need to decide about CPU, memory, disk, USB devices, network card(s), screen size, etc. Once the “hardware” is decided, you'll have for example to choose how to connect the machine to internet, and/or to install an OS. In the following, we show basic ways of performing those steps. But qemu is much more than this, and it is strongly advised to read the qemu documentation in /usr/share/doc/qemu-2.9.0/qemu-doc.html.

Note

It is standard practice to name the computer running qemu “host” and the emulated machine running under qemu the “guest”. We'll use those notations in the following.

Note

The following instructions assume the optional symbolic link, qemu, has been created. Additionally, qemu must be run from an X Window System based terminal (either locally or over ssh).

Disk

A virtual disk may be set up in the following way:

VDISK_SIZE=50G
VDISK_FILENAME=vdisk.img
qemu-img create -f qcow2 $VDISK_FILENAME $VDISK_SIZE

The virtual disk size and filename should be ajusted as desired. The actual size of the file will be less than specified, but will expand as needed, so it is safe to put a high value.

Operating System

To install an operating system, download an iso image from your preferred Linux distribution. For the purposes of this example, we'll use Fedora-16-x86_64-Live-LXDE.iso in the current directory. Run the following:

qemu -enable-kvm                           \
     -drive file=$VDISK_FILENAME           \
     -cdrom Fedora-16-x86_64-Live-LXDE.iso \
     -boot d                               \
     -m 1G

Follow the normal installation procedures for the chosen distribution. The -boot option specifies the boot order of drives as a string of drive letters. Valid drive letters are: a, b (floppy 1 and 2), c (first hard disk), d (first CD-ROM). The -m option is the amount of memory to use for the virtual machine. The choice depends on the load of the host. Modern distributions should be comfortable with 1GB. The -enable-kvm option allows hardware acceleration. Without this switch, the emulation is much slower.

Defining the virtual hardware

The virtual machine hardware is defined by the qemu command line. An example command is given below:

qemu -enable-kvm                     \
     -smp 4                          \
     -cpu host                       \
     -m 1G                           \
     -drive file=$VDISK_FILENAME     \
     -cdrom grub-img.iso             \
     -boot order=c,once=d,menu=on    \
     -net nic,netdev=net0            \
     -netdev user,id=net0            \
     -soundhw ac97                   \
     -vga std                        \
     -serial mon:stdio               \
     -name "fedora-16"

Meaning of the command line options

-enable-kvm: enable full KVM virtualization support. On some hardware, it may be necessary to add the undocumented -machine smm=off option in order to enable KVM.

-smp <N>: enable symmetric multiprocessing with <N> CPUs.

-cpu <model>: simulate CPU <model>. the list of supported models can be obtained with -cpu help.

-drive file=<filename>: defines a virtual disk whose image is stored in <filename>.

-cdrom grub-img.iso: defines an iso formated file to use as a cdrom. Here we use a grub rescue disk, which may turn handy when something goes wrong at boot time.

-boot order=c,once=d,menu=on: defines the boot order for the virtual BIOS.

-net nic,netdev=<netid>: defines a network card connected to the network device with id <netid>.

-netdev user,id=<netid>: defines the network “user” device. This is a virtual local network with addresses 10.0.2.0/24, where the host has address 10.0.2.2 and acts as a gateway to internet, and with a name server at address 10.0.2.3, and an smb server at address 10.0.2.4. A builtin DHCP server can allocate addresses between 10.0.2.15 and 10.0.2.31.

-soundhw <model>: defines the soundcard model. The list may be obtained with -soundhw help.

-vga <type>: defines the type of vga card to emulate.

-serial mon:stdio: sends the serial port of the guest (/dev/ttyS0 on linux guests), multiplexed with the qemu monitor, to the standard input and output of the qemu process.

-name <name>: sets the name of the guest. This name is displayed in the guest window caption. It may be useful if you run several guests at the same time.

Controlling the Emulated Display

It may happen that the guest window displayed by qemu does not correspond to the full capability of the emulated vga card. For example, the vmware card is 1600x900 capable, but only 1024x768 is displayed by default. A suitable Xorg configuration on the guest allows to use the full size (Note that the Xorg video driver to use is Xorg VMware Driver-13.2.1):

cat > /usr/share/X11/xorg.conf.d/20-vmware.conf << "EOF"
Section         "Monitor"
  Identifier    "Monitor0"
  # cvt 1600 900
  # 1600x900 59.95 Hz (CVT 1.44M9) hsync: 55.99 kHz; pclk: 118.25 MHz
  Modeline      "1600x900"  118.25  1600 1696 1856 2112  900 903 908 934 -hsync +vsync
  Option        "PreferredMode" "1600x900"
  HorizSync     1-200
  VertRefresh   1-200
EndSection

Section         "Device"
  Identifier    "VMware SVGA II Adapter"
  Option        "Monitor" "default"
  Driver        "vmware"
EndSection

Section         "Screen"
  Identifier    "Default Screen"
  Device        "VMware SVGA II Adapter"
  Monitor       "Monitor0"

  SubSection    "Display"
    Depth       24
    Modes       "1600x900" "1440x900" "1366x768" "1280x720" "800x480"
  EndSubSection

EndSection
EOF

New sizes will be available besides the native ones. You need to restart X in order to have the new sizes available.

Networking

The above solution for networking allows the guest to access the local network through the host (and possibly to access internet through the local routers), but the converse is not true. Not even the host can access the guest, unless port forwarding is enabled. And in the case several guests are running, they cannot communicate with each other. Other network devices can be used for this purpose. For example, there is the “socket” device, which allows several guests to share a common virtual network. In the following, we describe in more details how to set up the “bridge” device, which allows the guests to appear as if connected to the local network. All the commands below should be run as the root user.

Allow the host to forward IP packets:

sysctl -w net.ipv4.ip_forward=1

To make this permanent, add the command to /etc/sysctl.d/60-net-forward.conf:

cat >> /etc/sysctl.d/60-net-forward.conf << EOF
net.ipv4.ip_forward=1
EOF

Set up a required configuration file:

install -vdm 755 /etc/qemu &&
echo allow br0 > /etc/qemu/bridge.conf

In the command above, replace the switch -netdev user,... with -netdev bridge,id=net0.

Installed Programs: ivshmem-client, ivshmem-server, qemu (symlink), qemu-ga, qemu-img, qemu-io, qemu-nbd, qemu-system-<arch>, and virtfs-proxy-helper

Installed Library: None

Installed Directories: /usr/share/qemu and /usr/share/doc/qemu-2.9.0

Short Description

ivshmem-client	is a standalone client for using the ivshmem device.
ivshmem-server	is an example server for the ivshmem device.
qemu-ga	implements support for QMP (QEMU Monitor Protocol) commands and events that terminate and originate respectively within the guest using an agent built as part of QEMU.
qemu-img	provides commands to manage QEMU disk images.
qemu-io	is a diagnostic and manipulation program for (virtual) memory media. It is still at an early stage of development.
qemu-nbd	exports Qemu disk images using the QEMU Disk Network Block Device (NBD) protocol.
qemu-system-x86_64	is the QEMU PC System emulator.
virtfs-proxy-helper	creates a socket pair or a named socket. QEMU and proxy helper communicate using this socket. QEMU proxy fs driver sends filesystem request to proxy helper and receives the response from it.

Last updated on 2017-08-27 19:18:31 -0700

Part III. General Libraries and Utilities

Chapter 9. General Libraries

Libraries contain code which is often required by more than one program. This has the advantage that each program doesn't need to duplicate code (and risk introducing bugs), it just has to call functions from the libraries installed on the system. The most obvious example of a set of libraries is Glibc which is installed during the LFS book. This contains all of the C library functions which programs use.

There are two types of libraries: static and shared. Shared libraries (usually libXXX.so) are loaded into memory from the shared copy at runtime (hence the name). Static libraries (libXXX.a ) are actually linked into the program executable file itself, thus making the program file larger. Quite often, you will find both static and shared copies of the same library on your system.

Generally, you only need to install libraries when you are installing software that needs the functionality they supply. In the BLFS book, each package is presented with a list of (known) dependencies. Thus, you can figure out which libraries you need to have before installing that program. If you are installing something without using BLFS instructions, usually the README or INSTALL file will contain details of the program's requirements.

There are certain libraries which nearly everyone will need at some point. In this chapter these and some others are listed and it is explained why you may want to install them.

Apr-1.6.2

Introduction to Apr

The Apache Portable Runtime (APR) is a supporting library for the Apache web server. It provides a set of application programming interfaces (APIs) that map to the underlying Operating System (OS). Where the OS doesn't support a particular function, APR will provide an emulation. Thus programmers can use the APR to make a program portable across different platforms.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://archive.apache.org/dist/apr/apr-1.6.2.tar.bz2
Download (FTP): ftp://ftp.mirrorservice.org/sites/ftp.apache.org/apr/apr-1.6.2.tar.bz2
Download MD5 sum: e81a851967c79b5ce9bfbc909e4bf735
Download size: 833 KB
Estimated disk space required: 13 MB (additional 3 MB for the tests)
Estimated build time: 0.2 SBU (1.6 with tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/apr

Installation of Apr

Install Apr by running the following commands:

./configure --prefix=/usr    \
            --disable-static \
            --with-installbuilddir=/usr/share/apr-1/build &&
make

To test the results, issue: make test.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Program: apr-1-config

Installed Library: libapr-1.so

Installed Directories: /usr/include/apr-1 and /usr/share/apr-1

Short Descriptions

apr-1-config	is a shell script used to retrieve information about the apr library in the system. It is typically used to compile and link against the library.
`libapr-1.so`	is the Apache Portable Runtime library.

Last updated on 2017-08-18 12:42:43 -0700

Apr-Util-1.6.0

Introduction to Apr Util

The Apache Portable Runtime Utility Library provides a predictable and consistent interface to underlying client library interfaces. This application programming interface assures predictable if not identical behaviour regardless of which libraries are available on a given platform.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://archive.apache.org/dist/apr/apr-util-1.6.0.tar.bz2
Download (FTP): ftp://ftp.mirrorservice.org/sites/ftp.apache.org/apr/apr-util-1.6.0.tar.bz2
Download MD5 sum: 069a9a980776acab05212c5f37ef8368
Download size: 419 KB
Estimated disk space required: 8 MB (additional 1.4 MB for tests)
Estimated build time: 0.1 SBU (additional 0.3 SBU for tests)

Apr Util Dependencies

Required

Apr-1.6.2

Optional

Berkeley DB-6.2.32, FreeTDS, MariaDB-10.2.8 or MySQL, OpenLDAP-2.4.45, PostgreSQL-9.6.4, SQLite-3.20.0 and unixODBC-2.3.4

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/apr-util

Installation of Apr Util

Install Apr Util by running the following commands:

./configure --prefix=/usr       \
            --with-apr=/usr     \
            --with-gdbm=/usr    \
            --with-openssl=/usr \
            --with-crypto &&
make

To test the results, issue: make test.

Now, as the root user:

make install

Command Explanations

--with-gdbm=/usr: This switch enables the apr_dbm_gdbm-1.so plugin.

--with-openssl=/usr --with-crypto: These switches enable the apr_crypto_openssl-1.so plugin. Remove them if you have not installed OpenSSL-1.1.0f.

--with-berkeley-db=/usr: If you have installed Berkeley DB-6.2.32, use this switch to compile the apr_dbm_db-1.so plugin.

--with-ldap: If you have installed OpenLDAP-2.4.45, use this switch to compile the apr_ldap.so plugin.

Installed Program: apu-1-config

Installed Library: libaprutil-1.so

Installed Directory: /usr/lib/apr-util-1

Short Descriptions

apu-1-config	is an APR-util script designed to allow easy command line access to APR-util configuration parameters.
`libaprutil-1.so`	contains functions that provide a predictable and consistent interface to underlying client library interfaces.

Last updated on 2017-08-18 12:42:43 -0700

Aspell-0.60.6.1

Introduction to Aspell

The Aspell package contains an interactive spell checking program and the Aspell libraries. Aspell can either be used as a library or as an independent spell checker.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/aspell/aspell-0.60.6.1.tar.gz
Download (FTP): ftp://ftp.gnu.org/gnu/aspell/aspell-0.60.6.1.tar.gz
Download MD5 sum: e66a9c9af6a60dc46134fdacf6ce97d7
Download size: 1.8 MB
Estimated disk space required: 58 MB (Additional 8 MB for EN dictionary)
Estimated build time: 0.5 SBU

Additional Downloads

You'll need to download at least one dictionary. The link below will take you to a page containing links to dictionaries in many languages.

Aspell dictionaries: https://ftp.gnu.org/gnu/aspell/dict

Aspell Dependencies

Required

Which-2.21 (for the dictionaries)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/aspell

Installation of Aspell

First fix some probles identified by gcc7:

sed -i '/ top.do_check ==/s/top.do_check/*&/' modules/filter/tex.cpp &&
sed -i '/word ==/s/word/*&/'                  prog/check_funs.cpp

Install Aspell by running the following commands:

./configure --prefix=/usr &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
ln -svfn aspell-0.60 /usr/lib/aspell &&

install -v -m755 -d /usr/share/doc/aspell-0.60.6.1/aspell{,-dev}.html &&

install -v -m644 manual/aspell.html/* \
    /usr/share/doc/aspell-0.60.6.1/aspell.html &&

install -v -m644 manual/aspell-dev.html/* \
    /usr/share/doc/aspell-0.60.6.1/aspell-dev.html

If you do not plan to install Ispell, then copy the wrapper script ispell:

install -v -m 755 scripts/ispell /usr/bin/

If you do not plan to install Spell, then copy the wrapper script spell:

install -v -m 755 scripts/spell /usr/bin/

Command Explanations

ln -svfn aspell-0.60 /usr/lib/aspell: This command is useful for configuration of other applications, such as enchant-1.6.0.

Configuring Aspell

Configuration Information

After Aspell is installed, you must set up at least one dictionary. Install one or more dictionaries by running the following commands:

./configure &&
make

Now, as the root user:

make install

Installed Programs: aspell, aspell-import, precat, preunzip, prezip, prezip-bin, pspell-config, run-with-aspell, word-list-compress and optionally, ispell and spell.

Installed Libraries: libaspell.so and libpspell.so

Installed Directories: /usr/include/pspell and /usr/lib/aspell-0.60

Short Descriptions

aspell	is a utility that can function as an ispell -a replacement, as an independent spell checker, as a test utility to test out Aspell features, and as a utility for managing dictionaries.
ispell	is a wrapper around aspell to invoke it in ispell compatible mode.
spell	is a wrapper around aspell to invoke it in spell compatible mode.
aspell-import	imports old personal dictionaries into Aspell.
precat	decompresses a prezipped file to stdout.
preunzip	decompresses a prezipped file.
prezip	is a prefix delta compressor, used to compress sorted word lists or other similar text files.
prezip-bin	is called by the various wrapper scripts to perform the actual compressing and decompressing.
pspell-config	displays information about the `libpspell` installation, mostly for use in build scripts.
run-with-aspell	is a script to help use Aspell as an ispell replacement.
word-list-compress	compresses or decompresses sorted word lists for use with the Aspell spell checker.
`libaspell.so`	contains spell checking API functions.
`libpspell.so`	is an interface to the `libaspell` library. All the spell checking functionality is now in `libaspell` but this library is included for backward compatibility.

Last updated on 2017-08-24 18:56:23 -0700

Boost-1.64.0

Introduction to Boost

Boost provides a set of free peer-reviewed portable C++ source libraries. It includes libraries for linear algebra, pseudorandom number generation, multithreading, image processing, regular expressions and unit testing.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://dl.bintray.com/boostorg/release/1.64.0/source/boost_1_64_0.tar.bz2
Download MD5 sum: 93eecce2abed9d2442c9676914709349
Download size: 77 MB
Estimated disk space required: 980 MB (with regression tests)
Estimated build time: 1.6 SBU (using -j4; add 2.1 SBU for regression tests)

Boost Dependencies

Optional

ICU-59.1, Python-2.7.13 or Python-3.6.2, and Open MPI

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/boost

Installation of Boost

First, fix a bug with the header files path, when Python3 is used:

sed -e '/using python/ s@;@: /usr/include/python${PYTHON_VERSION/3*/${PYTHON_VERSION}m} ;@' \
    -i bootstrap.sh

Install Boost by running the following commands:

./bootstrap.sh --prefix=/usr &&
./b2 stage threading=multi link=shared

To run the Boost.Build's regression test (Python-2.7.13 is required), issue pushd tools/build/test; python test_all.py; popd. All 131 tests should pass.

To run every library's regression tests, issue pushd status; ../b2; popd. A few tests may fail. They take very long (over 120 SBU at -j1, 50 SBU at -j4) and use a very large amount of disk space (up to 40 GB). You can use the -jN switch to speed them up.

Now, as the root user:

./b2 install threading=multi link=shared

Command Explanations

threading=multi: This parameter ensures that Boost is built with multithreading support.

link=shared: This parameter ensures that only shared libraries are created, except for libboost_exception and libboost_test_exec_monitor which are created as static. Most people will not need the static libraries. Indeed most programs using Boost only use the headers. Omit this parameter if you do need static libraries.

-jN: This switch may be added to the b2 command lines, to run up to N processes in parallel.

--with-python=python3: Add this switch to the bootstrap command, if you want Boost to use Python3 instead of Python2.

Installed Programs: None

Installed Libraries: libboost_atomic.so, libboost_chrono.a, libboost_chrono.so, libboost_container.so, libboost_context.so, libboost_coroutine.so, libboost_date_time.so, libboost_exception.a, libboost-fiber.so, libboost_filesystem.so, libboost_graph.so, libboost_iostreams.so, libboost_locale.so, libboost_log_setup.so, libboost_log.so, libboost_math_c99.so, libboost_math_c99f.so, libboost_math_c99l.so, libboost_math_tr1.so, libboost_math_tr1f.so, libboost_math_tr1l.so, libboost_prg_exec_monitor.so, libboost_program_options.so, libboost_python.so or libboost_python3.so, libboost_random.so, libboost_regex.so, libboost_serialization.so, libboost_signals.so, libboost_system.a, libboost_system.so, libboost_test_exec_monitor.a, libboost_thread.so, libboost_timer.a, libboost_timer.so, libboost_type_erasure.so, libboost_unit_test_framework.so, libboost_wave.so, and libboost_wserialization.so

Installed Directory: /usr/include/boost

Last updated on 2017-08-19 15:43:35 -0700

CLucene-2.3.3.4

Introduction to CLucene

CLucene is a C++ version of Lucene, a high performance text search engine.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/clucene/clucene-core-2.3.3.4.tar.gz
Download MD5 sum: 48d647fbd8ef8889e5a7f422c1bfda94
Download size: 2.2 MB
Estimated disk space required: 78 MB
Estimated build time: 0.8 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/clucene-2.3.3.4-contribs_lib-1.patch

CLucene Dependencies

Required

Installation of CLucene

Install CLucene by running the following commands:

patch -Np1 -i ../clucene-2.3.3.4-contribs_lib-1.patch &&

mkdir build &&
cd    build &&

cmake -DCMAKE_INSTALL_PREFIX=/usr \
      -DBUILD_CONTRIBS_LIB=ON .. &&
make

Now, as the root user:

make install

Command Explanations

-DBUILD_CONTRIBS_LIB=ON: This cmake variable enables building the CLucene contribs library necessary for running applications that use language specific text analyzers like LibreOffice for example.

Installed Programs: None

Installed Libraries: libclucene-contribs-lib.so, libclucene-core.so, and libclucene-shared.so

Installed Directories: /usr/include/CLucene and /usr/lib/CLuceneConfig.cmake

Last updated on 2017-08-29 10:55:51 -0700

dbus-glib-0.108

Introduction to D-Bus GLib

The D-Bus GLib package contains GLib interfaces to the D-Bus API.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://dbus.freedesktop.org/releases/dbus-glib/dbus-glib-0.108.tar.gz
Download MD5 sum: a66a613705870752ca9786e0359aea97
Download size: 796 KB
Estimated disk space required: 9.5 MB (with tests)
Estimated build time: 0.1 SBU (with tests)

D-Bus GLib Dependencies

Required

dbus-1.10.22 and GLib-2.52.3

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/dbus-glib

Installation of D-Bus GLib

Install D-Bus GLib by running the following commands:

./configure --prefix=/usr     \
            --sysconfdir=/etc \
            --disable-static &&
make

To test the results, issue: make check. Note that more comprehensive tests can be run by following the same method used in D-Bus instructions, which requires building the package twice.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Program: dbus-binding-tool

Installed Library: libdbus-glib-1.so

Installed Directories: /usr/share/gtk-doc/html/dbus-glib and /usr/share/doc/dbus-glib-0.108

Short Descriptions

dbus-binding-tool	is a tool used to interface with the D-Bus API.
`libdbus-glib-1.so`	contains GLib interface functions to the D-Bus API.

Last updated on 2017-08-21 16:43:13 -0700

enchant-1.6.0

Introduction to enchant

The enchant package provide a generic interface into various existing spell checking libraries.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.abisource.com/downloads/enchant/1.6.0/enchant-1.6.0.tar.gz
Download (FTP): ftp://ftp.netbsd.org/pub/pkgsrc/distfiles/enchant-1.6.0.tar.gz
Download MD5 sum: de11011aff801dc61042828041fb59c7
Download size: 596 KB
Estimated disk space required: 11 MB
Estimated build time: 0.1 SBU

enchant Dependencies

Required

Optional

dbus-glib-0.108, Hspell, Hunspell, and Voikko

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/enchant

Installation of enchant

Install enchant by running the following commands:

./configure --prefix=/usr --disable-static &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Configuring enchant

Config Files

~/.enchant and /usr/share/enchant/enchant.ordering

Configuration Information

If you wish to use the Aspell-0.60.6.1 backend, create a symlink, as the root user:

ln -svfn ../../lib/aspell /usr/share/enchant/aspell

You can test your installation and configuration by creating a test file and running the commands in the following (you can replace the en_GB dictionary by any other downloaded when installing Aspell-0.60.6.1):

cat > /tmp/test-enchant.txt << "EOF"
Tel me more abot linux
Ther ar so many commads
EOF

enchant -d en_GB -l /tmp/test-enchant.txt &&
enchant -d en_GB -a /tmp/test-enchant.txt

You will see a list of the misspelled words followed by a list of alternatives for them.

See more details in the enchant manual page.

Installed Programs: enchant and enchant-lsmod

Installed Libraries: libenchant.so and various backend libraries

Installed Directories: /usr/{include,lib,share}/enchant

Short Descriptions

enchant	is a spellchecker
enchant-lsmod	lists available backends, languages, and dictionaries.
`libenchant.so`	contains spell checking interface API functions.

Last updated on 2017-08-26 15:00:55 -0700

Exempi-2.4.3

Introduction to Exempi

Exempi is an implementation of XMP (Adobe's Extensible Metadata Platform).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://libopenraw.freedesktop.org/download/exempi-2.4.3.tar.bz2
Download MD5 sum: ad612752c8bf50d7c84a4689073246d2
Download size: 3.5 MB
Estimated disk space required: 232 MB (add 20 MB for tests)
Estimated build time: 1.2 SBU (add 0.2 SBU for tests)

Exempi Dependencies

Required

Boost-1.64.0

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/exempi

Installation of Exempi

Install Exempi by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Program: exempi

Installed Library: libexempi.so

Installed Directory: /usr/include/exempi-2.0

Short Descriptions

exempi	is a command line tool to manipulate XMP metadata.
`libexempi.so`	is a library used to parse XMP metadata.

Last updated on 2017-08-29 10:55:51 -0700

fftw-3.3.6-pl2

Introduction to fftw

FFTW is a C subroutine library for computing the discrete Fourier transform (DFT) in one or more dimensions, of arbitrary input size, and of both real and complex data (as well as of even/odd data, i.e. the discrete cosine/sine transforms or DCT/DST).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.fftw.org/fftw-3.3.6-pl2.tar.gz
Download (FTP): ftp://ftp.fftw.org/pub/fftw/fftw-3.3.6-pl2.tar.gz
Download MD5 sum: 927e481edbb32575397eb3d62535a856
Download size: 4.0 MB
Estimated disk space required: 59 MB (with tests)
Estimated build time: 0.8 SBU (with tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/fftw

Installation of fftw

Install fftw by running the following commands:

./configure --prefix=/usr  --enable-shared --enable-threads &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--enable-shared --disable-static: Use shared libs instead of static libs.

--enable-threads: This enables libfftw3_threads.so to be compiled. It is used by e.g. the gimp plugin from G'MIC.

--enable-float: This enables floating point, and will cause the library to be called libfftw3f.so (needed by RawTherapee (and similarly for the threaded library if that is built (not needed by RawTherapee). These versions are not usable by packages in this book which use libfftw3 so if you need both you will need to build fftw twice.

Installed Programs: fftw-wisdom and fftw-wisdom-to-conf

Installed Library: libfftw3.so and libfftw3_threads.so, or libfftw3f.so and libfftw3f_threads.so

Installed Directories: None

Short Descriptions

`fftw-wisdom`	is a utility to generate FFTW wisdom files, which contain saved information about how to optimally compute (Fourier) transforms of various sizes.
`fftw-wisdom-to-conf`	is a utility to generate C configuration routines from FFTW wisdom files, where the latter contain saved information about how to optimally compute (Fourier) transforms of various sizes.
`libfftw3.so`	is the Fast Fourier Transform library
`libfftw3_threads.so`	is the threaded Fast Fourier Transform library
`libfftw3f.so`	is the floating-point Fast Fourier Transform library
`libfftw3f_threads.so`	is the threaded floating-point Fast Fourier Transform library

Last updated on 2017-08-23 12:11:26 -0700

gcab-0.7

Introduction to Gcab

The Gcab package contains a program and a library used to create Microsoft cabinet (.cab) archives.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/gcab/0.7/gcab-0.7.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/gcab/0.7/gcab-0.7.tar.xz
Download MD5 sum: d8c54c340e56d0b6a8fe082fd04d8090
Download size: 328 KB
Estimated disk space required: 5.2 MB (with tests)
Estimated build time: 0.1 SBU (with tests)

Required

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/gcab

Installation of Gcab

Install Gcab by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Program: gcab

Installed Libraries: libgcab-1.0.so

Installed Directories: /usr/include/libgcab-1.0 and /usr/share/gtk-doc/html/gcab

Short Descriptions

gcab	is a program used to create Microsoft cabinet (.cab) archives.
`libgcab-1.0.so`	contains API functions for creating Microsoft cabinet (.cab) archives.

Last updated on 2017-08-24 15:03:00 -0700

GLib-2.52.3

Introduction to GLib

The GLib package contains low-level libraries useful for providing data structure handling for C, portability wrappers and interfaces for such runtime functionality as an event loop, threads, dynamic loading and an object system.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/glib/2.52/glib-2.52.3.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/glib/2.52/glib-2.52.3.tar.xz
Download MD5 sum: 89265d0289a436e99cad54491eb21ef4
Download size: 7.3 MB
Estimated disk space required: 142 MB (additional 73 MB for tests)
Estimated build time: 1.0 SBU (additional 4.5 SBU for tests)

GLib Dependencies

Required

libffi-3.2.1 and Python-2.7.13 or Python-3.6.2

Optional

dbus-1.10.22 (required for some tests), elfutils-0.170, GTK-Doc-1.26, FAM library, and GNU Indent

Additional Runtime Dependencies

gobject-introspection-1.52.1 (should be installed before gtk+, atk, etc.)

Quoted directly from the INSTALL file: “Some of the mimetype-related functionality in GIO requires the update-mime-database and update-desktop-database utilities”, which are part of shared-mime-info-1.8 and desktop-file-utils-0.23, respectively.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/glib2

Installation of GLib

Install GLib by running the following commands:

./configure --prefix=/usr --with-pcre=system &&
make

The GLib test suite requires desktop-file-utils for some tests. However, desktop-file-utils requires GLib in order to compile; therefore, you must first install GLib and then run the test suite.

Now, as the root user:

make install

You should now install desktop-file-utils-0.23 and proceed to run the test suite.

To test the results, after having installed the package, issue: make -k check.

Command Explanations

--with-pcre=system: This switch causes the build to use a system-provided version of the PCRE library instead of an internal version.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

--with-python=/usr/bin/python3: Add this switch if you want GLib to use Python3 instead of Python2.

Installed Programs: gapplication, gdbus, gdbus-codegen, gio, gio-querymodules, glib-compile-resources, glib-compile-schemas, glib-genmarshal, glib-gettextize, glib-mkenums, gobject-query, gresource, gsettings, gtester, and gtester-report

Installed Libraries: libgio-2.0.so, libglib-2.0.so, libgmodule-2.0.so, libgobject-2.0.so, and libgthread-2.0.so

Installed Directories: /usr/include/gio-unix-2.0, /usr/{include,lib,share}/glib-2.0, /usr/lib/gio, and /usr/share/gtk-doc/html/g{io,lib,object}

Short Descriptions

gapplication	can be used to start applications and to send messages to already-running instances of other applications.
gdbus	is a simple tool used for working with D-Bus objects.
gdbus-codegen	is used to generate code and/or documentation for one or more D-Bus interfaces.
gio	is a utility that makes many GIO features available from the command line.
gio-querymodules	is used to create a `giomodule.cache` file in the listed directories. This file lists the implemented extension points for each module that has been found.
glib-compile-resources	is used to read the resource description from a file and the files that it references to create a binary resource bundle that is suitable for use with the GResource API.
glib-compile-schemas	is used to compile all the GSettings XML schema files in directory into a binary file with the name `gschemas.compiled` that can be used by GSettings.
glib-genmarshal	is a C code marshaller generation utility for GLib closures.
glib-gettextize	is a variant of the gettext internationalization utility.
glib-mkenums	is a C language enum description generation utility.
gobject-query	is a small utility that draws a tree of types.
gresource	offers a simple command line interface to GResource.
gsettings	offers a simple command line interface to GSettings.
gtester	is a test running utility.
gtester-report	is a test report formatting utility.
GLib libraries	contain low-level core libraries for the GIMP Toolkit.

Last updated on 2017-08-20 15:06:11 -0700

GLibmm-2.52.0

Introduction to GLibmm

The GLibmm package is a set of C++ bindings for GLib.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/glibmm/2.52/glibmm-2.52.0.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/glibmm/2.52/glibmm-2.52.0.tar.xz
Download MD5 sum: 0ceaccabce7772e6ef6d0657bb0d2de1
Download size: 6.2 MB
Estimated disk space required: 163 MB (with tests)
Estimated build time: 2.4 SBU (with tests)

GLibmm Dependencies

Required

GLib-2.52.3 and libsigc++-2.10.0

Optional

Doxygen-1.8.13, glib-networking-2.50.0 (for tests), GnuTLS-3.5.14 (for tests), and libxslt-1.1.29

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/glibmm

Installation of GLibmm

First, fix the documents directory name:

sed -e '/^libdocdir =/ s/$(book_name)/glibmm-2.52.0/' \
    -i docs/Makefile.in

Install GLibmm by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Installed Programs: None

Installed Libraries: libgiomm-2.4.so, libglibmm-2.4.so and libglibmm_generate_extra_defs-2.4.so

Installed Directories: /usr/{include,lib}/g{io,lib}mm-2.4 and /usr/share/{devhelp/books/glibmm-2.4,doc/glibmm-2.52.0}

Short Descriptions

`libgiomm-2.4.so`	contains the GIO API classes.
`libglibmm-2.4.so`	contains the GLib API classes.

Last updated on 2017-08-23 19:39:45 -0700

GMime-2.6.23

Introduction to GMime

The GMime package contains a set of utilities for parsing and creating messages using the Multipurpose Internet Mail Extension (MIME) as defined by the applicable RFCs. See the GMime web site for the RFCs resourced. This is useful as it provides an API which adheres to the MIME specification as closely as possible while also providing programmers with an extremely easy to use interface to the API functions.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/gmime/2.6/gmime-2.6.23.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/gmime/2.6/gmime-2.6.23.tar.xz
Download MD5 sum: 247072236d84bd0fbbff299d69bdf333
Download size: 5.0 MB
Estimated disk space required: 28 MB (with tests)
Estimated build time: 0.5 SBU (with tests)

GMime Dependencies

Required

GLib-2.52.3 and libgpg-error-1.27

Optional

DocBook-utils-0.6.14, GPGME-1.9.0, GTK-Doc-1.26 and Gtk# (requires Mono)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/gmime

Installation of GMime

Install GMime by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-smime: Use this switch if you have installed GPGME-1.9.0 and wish to enable S/MIME support in GMime.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: None

Installed Library: libgmime-2.6.so

Installed Directories: /usr/include/gmime-2.6 and /usr/share/gtk-doc/html/gmime-2.6

Short Descriptions

libgmime-2.6.so

contains API functions used by programs that need to comply to the MIME standards.

Last updated on 2017-08-28 13:39:51 -0700

gobject-introspection-1.52.1

Introduction to GObject Introspection

The GObject Introspection is used to describe the program APIs and collect them in a uniform, machine readable format.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/gobject-introspection/1.52/gobject-introspection-1.52.1.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/gobject-introspection/1.52/gobject-introspection-1.52.1.tar.xz
Download MD5 sum: 34157073991f9eeb0ed953351b65eb61
Download size: 1.3 MB
Estimated disk space required: 38 MB (add 7 MB for tests)
Estimated build time: 0.3 SBU (additional 0.3 SBU for the tests)

Required

GLib-2.52.3 and Python-2.7.13

Optional

Cairo-1.14.10 (required for the tests), GTK-Doc-1.26 and Mako-1.0.4

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/gobject-introspection

Installation of GObject Introspection

Install GObject Introspection by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check. One test, Regress-1.0.gir, is known to fail with glibc-2.26.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Program: g-ir-annotation-tool, g-ir-compiler, g-ir-doc-tool, g-ir-inspect, g-ir-generate, and g-ir-scanner

Installed Libraries: libgirepository-1.0.so and /usr/lib/gobject-introspection/giscanner/_giscanner.so

Installed Directories: /usr/include/gobject-introspection-1.0, /usr/lib/girepository-1.0, /usr/lib/gobject-introspection, /usr/share/gir-1.0, and /usr/share/gobject-introspection-1.0

Short Descriptions

g-ir-compiler	converts one or more GIR files into one or more typelib.
g-ir-doc-tool	generates Mallard files that can be viewed with yelp or rendered to HTML with yelp-build from yelp-tools.
g-ir-inspect	is a utility that gives information about a GI typelib.
g-ir-scanner	is a tool which generates GIR XML files by parsing headers and introspecting GObject based libraries.
g-ir-generate	is a GIR generator that uses the repository API.
`libgirepository-1.0.so`	provides an API to access the typelib metadata.

Last updated on 2017-08-24 15:03:00 -0700

Grantlee-5.1.0

Introduction to grantlee

Grantlee is a set of free software libraries written using the Qt framework. Currently two libraries are shipped with Grantlee: Grantlee Templates and Grantlee TextDocument. The goal of Grantlee Templates is to make it easier for application developers to separate the structure of documents from the data they contain, opening the door for theming.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://downloads.grantlee.org/grantlee-5.1.0.tar.gz
Download MD5 sum: 57989ae9f7c113e682ef1713a6f1e92a
Download size: 1.1 MB
Estimated disk space required: 23 MB
Estimated build time: 1.2 SBU

Grantlee Dependencies

Required

CMake-3.9.1 and Qt-5.9.1

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/grantlee

Installation of Grantlee

Install Grantlee by running the following commands:

mkdir build &&
cd    build &&

cmake -DCMAKE_INSTALL_PREFIX=/usr \
      -DCMAKE_BUILD_TYPE=Release  \
      .. &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Programs: none

Installed Libraries: libgrantlee_core.so and libgrantlee_gui.so

Installed Directories: /usr/lib/cmake/grantlee, /usr/lib/grantlee/0.4, and /usr/include/grantlee

Last updated on 2017-08-26 21:18:25 -0700

Gsl-2.4

Introduction to Gsl

The GNU Scientific Library (GSL) is a numerical library for C and C++ programmers. It provides a wide range of mathematical routines such as random number generators, special functions and least-squares fitting.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/gsl/gsl-2.4.tar.gz
Download (FTP): ftp://ftp.gnu.org/gnu/gsl/gsl-2.4.tar.gz
Download MD5 sum: dba736f15404807834dc1c7b93e83b92
Download size: 5.6 MB
Estimated disk space required: 181 MB (with tests, without docs)
Estimated build time: 1.3 SBU (with tests using parallelism=4, without docs)

Gsl Dependencies

Optional

Sphinx with sphinx_rtd_theme

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/gsl

Installation of Gsl

Install Gsl by running the following commands:

./configure --prefix=/usr --disable-static &&
make

If you have the optional Sphinx package installed, buid the documentaiton with:

make html

To test the results, issue: make check.

Now, as the root user:

make install

If you built the documentation, install it (as root) with:

mkdir                   /usr/share/doc/gsl-2.4 &&
cp -R doc/_build/html/* /usr/share/doc/gsl-2.4

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: gsl-config, gsl-histogram, and gsl-randist

Installed Libraries: libgslcblas.so and libgsl.so

Installed Directory: /usr/include/gsl and /usr/share/doc/gsl-2.4

Short Descriptions

gsl-config	is a shell script to get the version number and compiler flags of the installed Gsl library.
gsl-histogram	is a demonstration program for the GNU Scientific Library that computes a histogram from data taken from stdin.
gsl-randist	is a demonstration program for the GNU Scientific Library that generates random samples from various distributions.
`libgslcblas.so`	contains functions that implement a C interface to Basic Linear Algebra Subprograms.
`libgsl.so.so`	contains functions that provide a collection of numerical routines for scientific computing.

Last updated on 2017-08-21 16:43:13 -0700

ICU-59.1

Introduction to ICU

The International Components for Unicode (ICU) package is a mature, widely used set of C/C++ libraries providing Unicode and Globalization support for software applications. ICU is widely portable and gives applications the same results on all platforms.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://download.icu-project.org/files/icu4c/59.1/icu4c-59_1-src.tgz
Download MD5 sum: 54923fa9fab5b2b83f235fb72523de37
Download size: 22 MB
Estimated disk space required: 285 MB (add 32 MB for tests)
Estimated build time: 1.3 SBU (add 1.3 SBU for tests)

ICU Dependencies

Optional

LLVM-4.0.1 (with Clang), and Doxygen-1.8.13 (for documentation)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/icu

Installation of ICU

Install ICU by running the following commands:

cd source                                    &&
sed -i 's/xlocale/locale/' i18n/digitlst.cpp &&
./configure --prefix=/usr                    &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

CC=gcc CXX=g++: If you prefer to use gcc and/or g++ instead of clang and/or clang++, if they are installed, use one or both variables in the configure line.

Installed Programs: derb, genbrk, genccode, gencfu, gencmn, gencnval, gendict, gennorm2, genrb, gensprep, icu-config, icuinfo, icupkg, makeconv, pkgdata, and uconv

Installed Libraries: libicudata.so, libicui18n.so, libicuio.so, libicule.so, libiculx.so, libicutest.so, libicutu.so, and libicuuc.so

Installed Directories: /usr/include/layout, /usr/include/unicode, /usr/lib/icu, and /usr/share/icu

Short Descriptions

derb	disassembles a resource bundle.
genbrk	compiles ICU break iteration rules source files into binary data files.
genccode	generates C or platform specific assembly code from an ICU data file.
gencfu	reads in Unicode confusable character definitions and writes out the binary data.
gencmn	generates an ICU memory-mappable data file.
gencnval	compiles the converter's aliases file.
gendict	compiles word lists into ICU string trie dictionaries.
gennorm2	builds binary data files with Unicode normalization data.
genrb	compiles a resource bundle.
gensprep	compiles StringPrep data from filtered RFC 3454 files.
icu-config	outputs ICU build options.
icuinfo	outputs configuration information about the current ICU.
icupkg	extracts or modifies an ICU .dat archive.
makeconv	compiles a converter table.
pkgdata	packages data for use by ICU.
uconv	converts data from one encoding to another.
`libicudata.so`	is the data library.
`libicui18n.so`	is the internationalization (i18n) library.
`libicuio.so`	is the ICU I/O (unicode stdio) library.
`libicule.so`	is the layout engine.
`libiculx.so`	is the layout extensions engine.
`libicutest.so`	is the test library.
`libicutu.so`	is the tool utility library.
`libicuuc.so`	is the common library.

Last updated on 2017-08-19 15:43:35 -0700

JS-38.2.1

Introduction to JS

JS is Mozilla's JavaScript engine written in C.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://people.mozilla.org/~sstangl/mozjs-38.2.1.rc0.tar.bz2
Download MD5 sum: cb602e21f5fc798b88163a3aa4e03e0a
Download size: 24 MB
Estimated disk space required: 896 MB
Estimated build time: 3.3 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/js38-38.2.1-upstream_fixes-2.patch

JS38 Dependencies

Required

Autoconf-2.13, ICU-59.1, libffi-3.2.1, NSPR-4.16, Python-2.7.13, and Zip-3.0

Optional

Doxygen-1.8.13

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/js38

Installation of JS

Warning

The tarball extracts to mozjs-38.0.0, rather than what is listed in the download section.

First, apply a patch to fix the build and to prevent segmentation faults.

patch -Np1 -i ../js38-38.2.1-upstream_fixes-2.patch

Install JS by running the following commands:

cd js/src &&
autoconf2.13 &&

./configure --prefix=/usr       \
            --with-intl-api     \
            --with-system-zlib  \
            --with-system-ffi   \
            --with-system-nspr  \
            --with-system-icu   \
            --enable-threadsafe \
            --enable-readline   &&
make

This package does not come with a working test suite.

Now, as the root user:

make install &&
pushd /usr/include/mozjs-38 &&
for link in `find . -type l`; do
    header=`readlink $link`
    rm -f $link
    cp -pv $header $link
    chmod 644 $link
done &&
popd

Command Explanations

autoconf213: This command regenerates the configure script with the changes from the patch.

--with-*: These parameters allow the build system to use system versions of the above libriares. These are required for stability.

--enable-readline: This switch enables Readline support in the JS shell.

--enable-threadsafe: This switch enables support for multiple threads at one time. This increases performance as well as stability.

for link in...: This command replaces links to the build directory, with files copied from the build directory.

Installed Programs: js38 and js38-config

Installed Libraries): libmozjs-38.so and libjs_static.ajs

Installed Directories: /usr/include/mozjs-38

Short Descriptions

js38	provides a command line interface to the JavaScript engine.
js38-config	is used to find the JS compiler and linker flags.
`libmozjs-38.so`	contains the Mozilla JavaScript API functions.

Last updated on 2017-08-20 20:24:54 -0700

JSON-C-0.12.1

Introduction to JSON-C

The JSON-C implements a reference counting object model that allows you to easily construct JSON objects in C, output them as JSON formatted strings and parse JSON formatted strings back into the C representation of JSON objects.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://s3.amazonaws.com/json-c_releases/releases/json-c-0.12.1.tar.gz
Download MD5 sum: 55f7853f7d8cf664554ce3fa71bf1c7d
Download size: 524 KB
Estimated disk space required: 4.2 MB (add 3.0 MB for tests)
Estimated build time: less than 0.1 SBU (add 0.9 SBU for tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/json-c

Installation of JSON-C

Note

This package does not support parallel build.

Install JSON-C by running the following commands:

sed -i s/-Werror// Makefile.in tests/Makefile.in &&
./configure --prefix=/usr --disable-static       &&
make -j1

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

sed ...: This instruction removes a flag that prevents one file from compiling.

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: None

Installed Libraries: libjson-c.so and libjson.so

Installed Directories: /usr/include/json and /usr/include/json-c

Short Descriptions

`libjson.so`	contains the JSON-C API functions.
`libjson-c.so`	contains the JSON-C API functions.

Last updated on 2017-08-23 12:11:26 -0700

JSON-GLib-1.2.8

Introduction to JSON GLib

The JSON GLib package is a library providing serialization and deserialization support for the JavaScript Object Notation (JSON) format described by RFC 4627.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/json-glib/1.2/json-glib-1.2.8.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/json-glib/1.2/json-glib-1.2.8.tar.xz
Download MD5 sum: ff31e7d0594df44318e12facda3d086e
Download size: 592 KB
Estimated disk space required: 13 MB (with tests)
Estimated build time: 0.1 SBU (with tests)

JSON-GLib Dependencies

Required

Optional (Required if building GNOME)

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/json-glib

Installation of JSON GLib

Install JSON GLib by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: json-glib-format and json-glib-validate

Installed Library: libjson-glib-1.0.so

Installed Directories: /usr/include/json-glib-1.0 and /usr/share/gtk-doc/html/json-glib

Short Descriptions

json-glib-format	is a simple command line interface to format JSON data.
json-glib-validate	is a simple command line interface to validate JSON data.
`libjson-glib-1.0.so`	contains the JSON GLib API functions.

Last updated on 2017-08-23 21:43:46 -0700

keyutils-1.5.10

Introduction to keyutils

Keyutils is a set of utilities for managing the key retention facility in the kernel, which can be used by filesystems, block devices and more to gain and retain the authorization and encryption keys required to perform secure operations.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://people.redhat.com/~dhowells/keyutils/keyutils-1.5.10.tar.bz2
Download MD5 sum: 3771676319bc7b84b1549b5c63ff5243
Download size: 76 KB
Estimated disk space required: 1.4 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/keyutils

Installation of keyutils

Install keyutils by running the following commands:

make

This package does not come with a test suite.

Now, as the root user:

make NO_ARLIB=1 install

Command Explanations

NO_ARLIB=1: This make flag disables installing the static library.

Configuring keyutils

Config Files

/etc/request-key.conf and /etc/request-key.d/*

Installed Programs: keyctl, key.dns_resolver, and request-key

Installed Library: libkeyutils.so

Installed Directory: /etc/request-key.d and /usr/share/keyutils

Short Descriptions

keyctl	is to control the key management facility in various ways using a variety of subcommands.
key.dns_resolver	is invoked by request-key on behalf of the kernel when kernel services (such as NFS, CIFS and AFS) need to perform a hostname lookup and the kernel does not have the key cached. It is not ordinarily intended to be called directly.
request-key	is invoked by the kernel when the kernel is asked for a key that it doesn't have immediately available. The kernel creates a temporary key and then calls out to this program to instantiate it. It is not intended to be called directly.
`libkeyutils.so`	contains the keyutils library API instantiation.

Last updated on 2017-08-28 20:59:34 -0700

libarchive-3.3.2

Introduction to libarchive

The libarchive library provides a single interface for reading/writing various compression formats.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.libarchive.org/downloads/libarchive-3.3.2.tar.gz
Download MD5 sum: 4583bd6b2ebf7e0e8963d90879eb1b27
Download size: 6.0 MB
Estimated disk space required: 37 MB (add 26 MB for tests)
Estimated build time: 0.3 SBU (add 1.5 SBU for tests)

libarchive Dependencies

Optional

libxml2-2.9.4, LZO-2.10, and Nettle-3.3 or OpenSSL-1.1.0f

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libarchive

Installation of libarchive

Install libarchive by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--without-xml2: This switch sets expat for xar archive format support instead of preferred libxml2 if both packages are installed.

--without-nettle: This switch sets OpenSSL for crypto support instead of preferred Nettle if both packages are installed.

Installed Programs: bsdcat, bsdcpio, and bsdtar

Installed Libraries: libarchive.so

Installed Directories: None

Short Descriptions

bsdcat	expands files to standard output.
bsdcpio	is a tool similar to cpio.
bsdtar	is a tool similar to GNU tar.
`libarchive.so`	is a library that can create and read several streaming archive formats.

Last updated on 2017-08-18 12:42:43 -0700

libassuan-2.4.3

Introduction to libassuan

The libassuan package contains an inter process communication library used by some of the other GnuPG related packages. libassuan's primary use is to allow a client to interact with a non-persistent server. libassuan is not, however, limited to use with GnuPG servers and clients. It was designed to be flexible enough to meet the demands of many transaction based environments with non-persistent servers.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.gnupg.org/ftp/gcrypt/libassuan/libassuan-2.4.3.tar.bz2
Download (FTP): ftp://ftp.gnupg.org/gcrypt/libassuan/libassuan-2.4.3.tar.bz2
Download MD5 sum: 8e01a7c72d3e5d154481230668e6eb5a
Download size: 547 KB
Estimated disk space required: 6.7 MB (with tests)
Estimated build time: 0.1 SBU (with tests)

libassuan Dependencies

Required

libgpg-error-1.27

Optional

texlive-20170524 (or install-tl-unx)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libassuan

Installation of libassuan

Install libassuan by running the following commands:

./configure --prefix=/usr &&
make

If you wish to build documentation, you must have texlive-20170524 installed and issue the following commands:

make -C doc pdf ps

To test the results, issue: make check.

Now, as the root user:

make install

If you built the documentation, install it by running the following commands as the root user:

install -v -dm755 /usr/share/doc/libassuan-2.4.3 &&
install -v -m644  doc/assuan.{pdf,ps,dvi} \
                  /usr/share/doc/libassuan-2.4.3

Installed Program: libassuan-config

Installed Library: libassuan.so

Installed Directory: /usr/share/doc/libassuan-2.4.3

Short Descriptions

libassuan-config	is a `libassuan` build information script.
`libassuan.so`	is an inter process communication library which implements the Assuan protocol.

Last updated on 2017-08-20 20:24:54 -0700

libatasmart-0.19

Introduction to libatasmart

The libatasmart package is a disk reporting library. It only supports a subset of the ATA S.M.A.R.T. functionality.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://0pointer.de/public/libatasmart-0.19.tar.xz
Download MD5 sum: 53afe2b155c36f658e121fe6def33e77
Download size: 248 KB
Estimated disk space required: 3 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libatasmart

Installation of libatasmart

Install libatasmart by running the following commands:

./configure --prefix=/usr --disable-static &&
make

This package does not come with a test suite.

Now, as the root user:

make docdir=/usr/share/doc/libatasmart-0.19 install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: skdump and sktest

Installed Library: libatasmart.so

Installed Directory: /usr/share/doc/libatasmart-0.19

Short Descriptions

skdump	is a utility that reports on the status of the disk.
sktest	is a utility to issue disks tests.
`libatasmart.so`	contains the ATA S.M.A.R.T API functions.

Last updated on 2017-08-24 18:56:23 -0700

libatomic_ops-7.4.6

Introduction to libatomic_ops

libatomic_ops provides implementations for atomic memory update operations on a number of architectures. This allows direct use of these in reasonably portable code. Unlike earlier similar packages, this one explicitly considers memory barrier semantics, and allows the construction of code that involves minimum overhead across a variety of architectures.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/ivmai/libatomic_ops/releases/download/v7.4.6/libatomic_ops-7.4.6.tar.gz
Download MD5 sum: 675dbd6681c6de7c9f4a834bcae9b748
Download size: 472 KB
Estimated disk space required: 4.9 MB (with tests)
Estimated build time: 0.1 SBU (with tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libatomic_ops

Installation of libatomic_ops

Install libatomic_ops by running the following commands:

./configure --prefix=/usr    \
            --enable-shared  \
            --disable-static \
            --docdir=/usr/share/doc/libatomic_ops-7.4.6 &&
make

To check the results, issue make check.

Now, as the root user:

make install

Command Explanations

--enable-shared: This switch enables building of the libatomic_ops shared libraries.

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: None

Installed Libraries: libatomic_ops.so and libatomic_ops_gpl.so

Installed Directory: /usr/include/libatomic_ops and /usr/share/doc/libatomic_ops-7.4.6

Short Descriptions

libatomic_ops.so

contains functions for atomic memory operations.

Last updated on 2017-08-20 20:24:54 -0700

libblockdev-2.11-1

Introduction to libblockdev

libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology (like LVM, Btrfs, MD RAID, Swap,...) is implemented in a separate plugin, possibly with multiple implementations (e.g. using LVM CLI or the new LVM DBus API).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/storaged-project/libblockdev/archive/libblockdev-2.11-1.tar.gz
Download MD5 sum: c1b240878ce2e36dbeb68b94bfd0403d
Download size: 244 KB
Estimated disk space required: 13 MB
Estimated build time: 0.2 SBU

libblockdev Dependencies

Required

gobject-introspection-1.52.1, libbytesize-0.11, LVM2-2.02.171 (with device-mapper), and volume_key-0.3.9

Optional

btrfs-progs-4.12, GTK-Doc-1.26, mdadm-4.0, parted-3.2, Python-2.7.13, dmraid, and bcachefs

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libblockdev

Installation of libblockdev

Install libblockdev by running the following commands:

sh autogen.sh &&

./configure --prefix=/usr \
            --without-dm  \
            --sysconfdir=/etc &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Programs: None

Installed Libraries: libbd_btrfs.so, libbd_crypto.so, libbd_fs.so, libbd_kbd.so, libbd_loop.so, libbd_lvm.so, libbd_lvm-dbus.so, libbd_mdraid.so, libbd_mpath.so, libbd_part.so, libbd_part_err.so, libbd_swap.so, libbd_utils.so, and libblockdev.so

Installed Directories: /etc/libblockdev and /usr/include/blockdev

Last updated on 2017-08-24 18:56:23 -0700

libbytesize-0.11

Introduction to libbytesize

The libbytesize package is a library facilitates the common operations with sizes in bytes.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/storaged-project/libbytesize/archive/libbytesize-0.11.tar.gz
Download MD5 sum: c469110ae134ea3a58546ba13fdb5074
Download size: 68 KB
Estimated disk space required: 2.7 MB
Estimated build time: less than 0.1 SBU

libbytesize Dependencies

Required

pcre2-10.30

Optional

GTK-Doc-1.26, Python-2.7.13, Python-3.6.2, and six (python module for tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libbytesize

Installation of libbytesize

Install libbytesize by running the following commands:

sh autogen.sh             &&
./configure --prefix=/usr &&
make

If you have the optional python module 'six' installed, the regression tests can be run with: make check.

Now, as the root user:

make install

Installed Programs: None

Installed Library: libbytesize.so

Installed Directories: /usr/lib/python{2,3}/site-packages/bytesize

Last updated on 2017-08-24 18:56:23 -0700

libcroco-0.6.12

Introduction to libcroco

The libcroco package contains a standalone CSS2 parsing and manipulation library.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/libcroco/0.6/libcroco-0.6.12.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/libcroco/0.6/libcroco-0.6.12.tar.xz
Download MD5 sum: bc0984fce078ba2ce29f9500c6b9ddce
Download size: 472 KB
Estimated disk space required: 12 MB (with tests)
Estimated build time: 0.1 SBU (with tests)

libcroco Dependencies

Required

GLib-2.52.3 and libxml2-2.9.4

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libcroco

Installation of libcroco

Install libcroco by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To execute the test suite, run make -k test. Some tests fail: searching files in wrong location, locale problems (character codes compared to characters), float point numbers not properly rounded to the same number of places are some of the reasons.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: croco-0.6-config and csslint-0.6

Installed Library: libcroco-0.6.so

Installed Directories: /usr/include/libcroco-0.6 and /usr/share/gtk-doc/html/libcroco

Short Descriptions

croco-0.6-config	is a helper script for building with `libcroco-0.6.so`.
csslint-0.6	is used to parse one or more CSS files specified on the command line.
`libcroco-0.6.so`	contains the API functions for CSS2 parsing and manipulation.

Last updated on 2017-08-21 16:43:13 -0700

libdaemon-0.14

Introduction to libdaemon

The libdaemon package is a lightweight C library that eases the writing of UNIX daemons.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://0pointer.de/lennart/projects/libdaemon/libdaemon-0.14.tar.gz
Download MD5 sum: 509dc27107c21bcd9fbf2f95f5669563
Download size: 332 KB
Estimated disk space required: 3 MB
Estimated build time: 0.1 SBU

libdaemon Dependencies

Optional

Doxygen-1.8.13 and Lynx-2.8.8rel.2

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libdaemon

Installation of libdaemon

Install libdaemon by running the following commands:

./configure --prefix=/usr --disable-static &&
make

If you have Doxygen installed and wish to build the API documentation, issue the following command:

make -C doc doxygen

This package does not come with a test suite.

Now, as the root user:

make docdir=/usr/share/doc/libdaemon-0.14 install

If you built the API documentation, install it using the following commands as the root user:

install -v -m755 -d /usr/share/doc/libdaemon-0.14/api &&
install -v -m644 doc/reference/html/* /usr/share/doc/libdaemon-0.14/api &&
install -v -m644 doc/reference/man/man3/* /usr/share/man/man3

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: None

Installed Library: libdaemon.so

Installed Directories: /usr/include/libdaemon and /usr/share/doc/libdaemon-0.14

Short Descriptions

libdaemon.so

contains the libdaemon API functions.

Last updated on 2017-08-24 18:56:23 -0700

libESMTP-1.0.6

Introduction to libESMTP

The libESMTP package contains the libESMTP libraries which are used by some programs to manage email submission to a mail transport layer.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.stafford.uklinux.net/libesmtp/libesmtp-1.0.6.tar.bz2
Download (FTP): http://pkgs.fedoraproject.org/repo/pkgs/libesmtp/libesmtp-1.0.6.tar.bz2/bf3915e627fd8f35524a8fdfeed979c8/libesmtp-1.0.6.tar.bz2
Download MD5 sum: bf3915e627fd8f35524a8fdfeed979c8
Download size: 364 KB
Estimated disk space required: 7.1 MB
Estimated build time: 0.1 SBU

libESMTP Dependencies

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libesmtp

Installation of libESMTP

Fix a build issue with OpenSSL-1.1.0:

sed 's@SSL_library_init@SSL_new@g' -i configure.ac &&
autoreconf -fi

Install libESMTP by running the following commands:

./configure --prefix=/usr &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Program: libesmtp-config

Installed Libraries: libesmtp.{so,a} and libESMTP SASL plugins

Installed Directory: /usr/lib/esmtp-plugins

Short Descriptions

libesmtp-config	displays version information and the options used to compile libESMTP.
`libesmtp.{so,a}`	is used to manage submission of electronic mail to a Mail Transport Agent.
`libesmtp SASL plugins`	are used to integrate libesmtp with SASL authentication.

Last updated on 2017-08-29 10:55:51 -0700

libffi-3.2.1

Introduction to libffi

The libffi library provides a portable, high level programming interface to various calling conventions. This allows a programmer to call any function specified by a call interface description at run time.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://sourceware.org/ftp/libffi/libffi-3.2.1.tar.gz
Download (FTP): ftp://sourceware.org/pub/libffi/libffi-3.2.1.tar.gz
Download MD5 sum: 83b89587607e3eb65c70d361f13bab43
Download size: 920 KB
Estimated disk space required: 6.1 MB (additional 1.7 MB for the tests)
Estimated build time: less than 0.1 SBU (additional 0.4 SBU for the tests)

libffi Dependencies

Optional

DejaGnu-1.6 (required to run the testsuite)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libffi

Installation of libffi

Install libffi by running the following commands:

sed -e '/^includesdir/ s/$(libdir).*$/$(includedir)/' \
    -i include/Makefile.in &&

sed -e '/^includedir/ s/=.*$/=@includedir@/' \
    -e 's/^Cflags: -I${includedir}/Cflags:/' \
    -i libffi.pc.in        &&

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

sed ... include/Makefile.in and sed ... libffi.pc.in: Makes the package install headers into the standardized /usr/include instead of /usr/lib/libffi-3.2.1/include..

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: None

Installed Library: libffi.so

Installed Directories: None

Short Descriptions

libffi.so

contains the libffi API functions.

Last updated on 2017-08-16 21:41:37 -0700

libgcrypt-1.8.0

Introduction to libgcrypt

The libgcrypt package contains a general purpose crypto library based on the code used in GnuPG. The library provides a high level interface to cryptographic building blocks using an extendable and flexible API.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.8.0.tar.bz2
Download (FTP): ftp://ftp.gnupg.org/gcrypt/libgcrypt/libgcrypt-1.8.0.tar.bz2
Download MD5 sum: 530db74602b558209f9ad7356a680971
Download size: 2.8 MB
Estimated disk space required: 40 MB (with tests and building docs)
Estimated build time: 0.9 SBU (with tests and building docs)

libgcrypt Dependencies

Required

libgpg-error-1.27

Optional

Pth-2.0.7 and texlive-20170524 (or install-tl-unx)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libgcrypt

Installation of libgcrypt

Install libgcrypt by running the following commands:

./configure --prefix=/usr &&
make

Only info documentation is shipped in the package tarball. If you wish to build alternate formats of the documentation, (you must have texlive-20170524 installed to build the PDF and PostScript documentation), then issue the following commands:

make -C doc pdf ps html &&
makeinfo --html --no-split -o doc/gcrypt_nochunks.html doc/gcrypt.texi &&
makeinfo --plaintext       -o doc/gcrypt.txt           doc/gcrypt.texi

To test the results, issue: make check.

Now, as the root user:

make install &&
install -v -dm755   /usr/share/doc/libgcrypt-1.8.0 &&
install -v -m644    README doc/{README.apichanges,fips*,libgcrypt*} \
                    /usr/share/doc/libgcrypt-1.8.0

If you built the additional documentation, install it by issuing the following commands as the root user:

install -v -dm755   /usr/share/doc/libgcrypt-1.8.0/html &&
install -v -m644 doc/gcrypt.html/* \
                    /usr/share/doc/libgcrypt-1.8.0/html &&
install -v -m644 doc/gcrypt_nochunks.html \
                    /usr/share/doc/libgcrypt-1.8.0 &&
install -v -m644 doc/gcrypt.{pdf,ps,dvi,txt,texi} \
                    /usr/share/doc/libgcrypt-1.8.0

Command Explanations

--with-capabilities: This option enables libcap2 support. Note that this breaks Cryptsetup.

Installed Programs: dumpsexp, hmac256, libgcrypt-config, and mpicalc

Installed Library: libgcrypt.so

Installed Directory: /usr/share/doc/libgcrypt-1.8.0

Short Descriptions

dumpsexp	is a debug tool for S-expressions.
hmac256	is a standalone HMAC-SHA-256 implementation used to compute an HMAC-SHA-256 authentication code.
libgcrypt-config	determines the compile and linker flags that should be used to compile and link programs that use `libgcrypt`.
mpicalc	is a RPN (Reverse Polish Notation) calculator.
`libgcrypt.so`	contains the cryptographic API functions.

Last updated on 2017-08-19 20:26:54 -0700

libgpg-error-1.27

Introduction to libgpg-error

The libgpg-error package contains a library that defines common error values for all GnuPG components.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.27.tar.bz2
Download (FTP): ftp://ftp.gnupg.org/gcrypt/libgpg-error/libgpg-error-1.27.tar.bz2
Download MD5 sum: 5217ef3e76a7275a2a3b569a12ddc989
Download size: 796 KB
Estimated disk space required: 7.8 MB (with tests)
Estimated build time: less than 0.1 SBU (with tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libgpg-error

Installation of libgpg-error

Install libgpg-error by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install &&
install -v -m644 -D README /usr/share/doc/libgpg-error-1.27/README

Installed Programs: gpg-error and gpg-error-config

Installed Library: libgpg-error.so

Installed Directories: /usr/share/common-lisp/source/gpg-error, /usr/share/libgpg-error, and /usr/share/doc/libgpg-error-1.27

Short Descriptions

gpg-error	is used to determine libgpg-error error codes.
gpg-error-config	is a utility used to configure and build applications based on the libgpg-error library. It can be used to query the C compiler and linker flags which are required to correctly compile and link the application against the libgpg-error library.
`libgpg-error.so`	contains the libgpg-error API functions.

Last updated on 2017-08-19 20:26:54 -0700

libgsf-1.14.41

Introduction to libgsf

The libgsf package contains a library used for providing an extensible input/output abstraction layer for structured file formats.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/libgsf/1.14/libgsf-1.14.41.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/libgsf/1.14/libgsf-1.14.41.tar.xz
Download MD5 sum: 5b039d1b7196e643315abda1c1c349c4
Download size: 604 KB
Estimated disk space required: 17 MB (with tests)
Estimated build time: 0.3 SBU (with tests)

libgsf Dependencies

Required

GLib-2.52.3 and libxml2-2.9.4

Optional

gobject-introspection-1.52.1 and GTK-Doc-1.26

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libgsf

Installation of libgsf

Install libgsf by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check. Two tests fail for unknown reasons.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: gsf, gsf-office-thumbnailer, and gsf-vba-dump

Installed Library: libgsf-1.so

Installed Directories: /usr/include/libgsf-1, /usr/share/gtk-doc/html/gsf and /usr/share/thumbnailers

Short Descriptions

gsf	is a simple archive utility, somewhat similar to tar(1).
gsf-office-thumbnailer	is used internally by GNOME applications such as Nautilus to generate thumbnails of several types of office application files.
gsf-vba-dump	is used to extract Visual Basic for Applications macros from files.
`libgsf-1.so`	contains the libgsf API functions.

Last updated on 2017-08-29 10:55:51 -0700

libgudev-231

Introduction to libgudev

The libgudev package contains GObject bindings for libudev.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/libgudev/231/libgudev-231.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/libgudev/231/libgudev-231.tar.xz
Download MD5 sum: 916c10c51ec61131e244c3936bbb2e0c
Download size: 268 KB
Estimated disk space required: 3.3 MB
Estimated build time: less than 0.1 SBU

Required

Optional

gobject-introspection-1.52.1 (for gir-data, needed for GNOME), GTK-Doc-1.26, and umockdev

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libgudev

Installation of libgudev

Install libgudev by running the following commands:

./configure --prefix=/usr --disable-umockdev &&
make

This package does not come with a testsuite.

Now, as the root user:

make install

Command Explanations

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Program: None

Installed Libraries: libgudev-1.0.so

Installed Directories: /usr/include/gudev-1.0 and /usr/share/gtk-doc/html/gudev

Short Descriptions

libgudev-1.0.so

is a GObject-based wrapper library for libudev.

Last updated on 2017-08-20 15:06:11 -0700

libgusb-0.2.11

Introduction to libgusb

The libgusb package contains the GObject wrappers for libusb-1.0 that makes it easy to do asynchronous control, bulk and interrupt transfers with proper cancellation and integration into a mainloop.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://people.freedesktop.org/~hughsient/releases/libgusb-0.2.11.tar.xz
Download MD5 sum: fa2b41b828c749f9190edf888948a77b
Download size: 288 KB
Estimated disk space required: 4.5 MB (with tests)
Estimated build time: less than 0.1 SBU (with tests)

libgusb Dependencies

Required

libusb-1.0.21

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libgusb

Installation of libgusb

Install libgusb by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: None

Installed Library: libgusb.so

Installed Directories: /usr/include/gusb-1 and /usr/share/gtk-doc/html/gusb

Short Descriptions

libgusb.so

contains the libgusb API functions.

Last updated on 2017-08-20 15:06:11 -0700

libical-2.0.0

Introduction to libical

The libical package contains an implementation of the iCalendar protocols and data formats.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/libical/libical/releases/download/v2.0.0/libical-2.0.0.tar.gz
Download MD5 sum: 6bf8e5f5a3ba88baf390d0134e05d76e
Download size: 684 KB
Estimated disk space required: 14 MB, with tests (additional 12 MB for the API documentation)
Estimated build time: 0.3 SBU (with tests and API documentation)

libical Dependencies

Required

Optional

Berkeley DB-6.2.32, Doxygen-1.8.13 (for the API documentation), gobject-introspection-1.52.1, and ICU-59.1

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libical

Installation of libical

Install libical by running the following commands:

mkdir build &&
cd build &&

cmake -DCMAKE_INSTALL_PREFIX=/usr      \
      -DCMAKE_BUILD_TYPE=Release       \
      -DSHARED_ONLY=yes                \
      .. &&
make

If you have Doxygen-1.8.13 installed and wish to build the API documentation, issue:

make docs

To test the results, issue: make test.

Now, as the root user:

make install

If you have built the API documentation, install by issuing, as root user:

install -vdm755 /usr/share/doc/libical-2.0.0/html &&
cp -vr apidocs/html/* /usr/share/doc/libical-2.0.0/html

Command Explanations

-DCMAKE_BUILD_TYPE=Release: This switch is used to apply higher level of the compiler optimizations.

-DSHARED_ONLY=yes: This switch is used in order to only build the shared libraries.

-DUSE_BUILTIN_TZDATA=yes: This switch is used in order to build using your own timezone data.

Installed Programs: None

Installed Libraries: libical_cxx.so, libical.so, libicalss_cxx.so, libicalss.so, and libicalvcal.so

Installed Directory: /usr/include/libical, /usr/lib/cmake/LibIcal and /usr/share/doc/libical-2.0.0/html

Short Descriptions

`libical.so`	contains the libical API functions.
`libical_cxx.so`	contains the libical C++ bindings.
`libicalss.so`	is a library that allows you to store iCal component data to disk in a variety of ways.
`libicalss_cxx.so`	contains the libicalss C++ bindings.
`libicalvcal.so`	is a vCard/vCalendar C interface.

Last updated on 2017-08-22 13:27:15 -0700

libidn-1.33

Introduction to libidn

libidn is a package designed for internationalized string handling based on the Stringprep, Punycode and IDNA specifications defined by the Internet Engineering Task Force (IETF) Internationalized Domain Names (IDN) working group, used for internationalized domain names. This is useful for converting data from the system's native representation into UTF-8, transforming Unicode strings into ASCII strings, allowing applications to use certain ASCII name labels (beginning with a special prefix) to represent non-ASCII name labels, and converting entire domain names to and from the ASCII Compatible Encoding (ACE) form.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/libidn/libidn-1.33.tar.gz
Download (FTP): ftp://ftp.gnu.org/gnu/libidn/libidn-1.33.tar.gz
Download MD5 sum: a9aa7e003665de9c82bd3f9fc6ccf308
Download size: 3.3 MB
Estimated disk space required: 25 MB (with tests)
Estimated build time: 0.4 SBU (with tests)

libidn Dependencies

Optional

Pth-2.0.7, Emacs-25.2, GTK-Doc-1.26, OpenJDK-1.8.0.141, Valgrind-3.13.0, and DotGNU Portable.NET or Mono

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libidn

Installation of libidn

Install libidn by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install &&

find doc -name "Makefile*" -delete            &&
rm -rf -v doc/{gdoc,idn.1,stamp-vti,man,texi} &&
mkdir -v       /usr/share/doc/libidn-1.33     &&
cp -r -v doc/* /usr/share/doc/libidn-1.33

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Program: idn

Installed Library: libidn.so

Installed Directories: /usr/share/doc/libidn-1.33 and /usr/share/gtk-doc/html/libidn

Short Descriptions

idn

is a command line interface to the internationalized domain name library.

libidn.so

contains a generic Stringprep implementation that does Unicode 3.2 NFKC normalization, mapping and prohibition of characters, and bidirectional character handling. Profiles for Nameprep, iSCSI, SASL and XMPP are included as well as support for Punycode and ASCII Compatible Encoding (ACE) via IDNA. A mechanism to define Top-Level Domain (TLD) specific validation tables, and to compare strings against those tables, as well as default tables for some TLDs are included.

Last updated on 2017-08-23 10:58:13 -0700

libiodbc-3.52.12

Introduction to libiodbc

libiodbc is an API to ODBC compatible databases.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/iodbc/libiodbc-3.52.12.tar.gz
Download MD5 sum: c76cab12a642a024bd1a262615a1a4a8
Download size: 1.1 MB
Estimated disk space required: 26 MB
Estimated build time: 0.3 SBU

libiodbc Dependencies

Installation of libiodbc

Install libiodbc by running the following commands:

./configure --prefix=/usr                   \
            --with-iodbc-inidir=/etc/iodbc  \
            --includedir=/usr/include/iodbc \
            --disable-libodbc               \
            --disable-static                &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--with-iodbc-inidir=/etc/iodbc: libiodbc will install configuration files in this directory.

--includedir=/usr/include/iodbc: This installs the interface headers to a private directory to avoid a conflict with headers installed by unixODBC.

--disable-libodbc: This prevents the installation of the libodbc.so symbolic link to avoid a conflict with unixODBC.

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: iodbc-config, iodbctest, iodbctestw, and iodbcadm-gtk

Installed Libraries: libdrvproxy.so, libiodbc.so, libiodbcinst.so, and libiodbcadm.so

Installed Directory: /usr/include/iodbc, /usr/share/libiodbc, and /etc/iodbc

Short Descriptions

iodbc-config	is a utility for retrieving the installation options of libiodbc.
iodbctest{,w}	are interactive SQL processors.
iodbcadm-gtk	is a graphical administration utility.

Last updated on 2017-08-28 20:59:34 -0700

Libksba-1.3.5

Introduction to Libksba

The Libksba package contains a library used to make X.509 certificates as well as making the CMS (Cryptographic Message Syntax) easily accessible by other applications. Both specifications are building blocks of S/MIME and TLS. The library does not rely on another cryptographic library but provides hooks for easy integration with Libgcrypt.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.gnupg.org/ftp/gcrypt/libksba/libksba-1.3.5.tar.bz2
Download (FTP): ftp://ftp.gnupg.org/gcrypt/libksba/libksba-1.3.5.tar.bz2
Download MD5 sum: 8302a3e263a7c630aa7dea7d341f07a2
Download size: 608 KB
Estimated disk space required: 9.2 MB (with tests)
Estimated build time: 0.1 SBU (with tests)

Libksba Dependencies

Required

libgpg-error-1.27

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libksba

Installation of Libksba

Install Libksba by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Installed Program: ksba-config

Installed Library: libksba.so

Installed Directory: None

Short Descriptions

ksba-config	is a utility used to configure and build applications based on the libksba(3) library. It can be used to query the C compiler and linker flags which are required to correctly compile and link the application against the libksba(3) library.
`libksba.{so,a}`	contains the cryptographic API functions.

Last updated on 2017-08-20 20:24:54 -0700

liblinear-211

Introduction to liblinear

This package provides a library for learning linear classifiers for large scale applications. It supports Support Vector Machines (SVM) with L2 and L1 loss, logistic regression, multi class classification and also Linear Programming Machines (L1-regularized SVMs). Its computational complexity scales linearly with the number of training examples making it one of the fastest SVM solvers around.

This package is known to build and work properly using an LFS-8.1 platform.

Note

After updating this package from liblinear-1.96 or earlier, you need to reinstall Nmap-7.60, in order to link to the new library.

Package Information

Download (HTTP): https://github.com/cjlin1/liblinear/archive/v211/liblinear-211.tar.gz
Download MD5 sum: 9aa46bea862a82d7bdb86017e94feffc
Download size: 496 KB
Estimated disk space required: 1.4 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/liblinear

Installation of liblinear

Install liblinear by running the following commands:

make lib

This package does not come with a test suite.

Now, as the root user:

install -vm644 linear.h /usr/include &&
install -vm755 liblinear.so.3 /usr/lib &&
ln -sfv liblinear.so.3 /usr/lib/liblinear.so

Installed Programs: None

Installed Library: liblinear.so

Installed Directories: None

Short Descriptions

liblinear.so

is a large linear classification library.

Last updated on 2017-08-29 10:55:51 -0700

libmbim-1.14.2

Introduction to libmbim

The libmbim package contains a GLib-based library for talking to WWAN modems and devices which speak the Mobile Interface Broadband Model (MBIM) protocol.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.freedesktop.org/software/libmbim/libmbim-1.14.2.tar.xz
Download MD5 sum: 40b1543119b65f9a75f264a3a5abf33b
Download size: 396 KB
Estimated disk space required: 14 MB (with tests)
Estimated build time: 0.1 SBU (with tests)

libmbim Dependencies

Required

libgudev-231

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libmbim

Installation of libmbim

Install libmbim by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: mbimcli and mbim-network

Installed Libraries: libmbim-glib.so

Installed Directories: /usr/include/libmbim-glib and /usr/share/gtk-doc/html/libmbim-glib

Short Descriptions

mbimcli	is an utility used to control MBIM devices.
mbim-network	is an utility used for simple network management of MBIM devices.
`libmbim-glib.so`	contains API functions for talking to WWAN modems and devices which speak the Mobile Interface Broadband Model (MBIM) protocol.

Last updated on 2017-08-24 18:56:23 -0700

libnfsidmap-0.26

Introduction to libnfsidmap

The libnfsidmap package contains a library to help mapping id's, mainly for NFSv4.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://fedorapeople.org/~steved/libnfsidmap/0.26/libnfsidmap-0.26.tar.bz2
Download MD5 sum: 2c0cf0e2b1665d51fa9a783679494888
Download size: 260 KB
Estimated disk space required: 3.3 MB
Estimated build time: less than 0.1 SBU

libnfsidmap Dependencies

Optional

OpenLDAP-2.4.45 (client only)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libnfsidmap

Installation of libnfsidmap

Install libnfsidmap by running the following commands:

./configure --prefix=/usr     \
            --sysconfdir=/etc \
            --disable-static  &&
make

This package does not come with a testsuite.

Now, as the root user:

make install                         &&
mv -v /usr/lib/libnfsidmap.so.* /lib &&
ln -sfv ../../lib/$(readlink /usr/lib/libnfsidmap.so) /usr/lib/libnfsidmap.so

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

mv -v /usr/lib/libnfsidmap.so.* ...: Move shared libraries into /lib so they are available before /usr is mounted.

Installed Programs: None

Installed Libraries: libnfsidmap.so

Installed Directories: /usr/lib/libnfsidmap

Short Descriptions

libnfsidmap.so

contains the libnfsidmap API functions.

Last updated on 2017-08-20 20:24:54 -0700

libpaper-1.1.24+nmu5

Introduction to libpaper

This package is intended to provide a simple way for applications to take actions based on a system or user-specified paper size.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.debian.org/debian/pool/main/libp/libpaper/libpaper_1.1.24+nmu5.tar.gz
Download (FTP): ftp://ftp.debian.org/debian/pool/main/libp/libpaper/libpaper_1.1.24+nmu5.tar.gz
Download MD5 sum: 38bc55688c0fc5544edaa5a951a45fbd
Download size: 48 KB
Estimated disk space required: 3.5 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libpaper

Installation of libpaper

Install libpaper by running the following commands:

autoreconf -fi                &&
./configure --prefix=/usr     \
            --sysconfdir=/etc \
            --disable-static &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
mkdir -vp /etc/libpaper.d &&

cat > /usr/bin/run-parts << "EOF"
#!/bin/sh
# run-parts:  Runs all the scripts found in a directory.
# from Slackware, by Patrick J. Volkerding with ideas borrowed
# from the Red Hat and Debian versions of this utility.

# keep going when something fails
set +e

if [ $# -lt 1 ]; then
  echo "Usage: run-parts <directory>"
  exit 1
fi

if [ ! -d $1 ]; then
  echo "Not a directory: $1"
  echo "Usage: run-parts <directory>"
  exit 1
fi

# There are several types of files that we would like to
# ignore automatically, as they are likely to be backups
# of other scripts:
IGNORE_SUFFIXES="~ ^ , .bak .new .rpmsave .rpmorig .rpmnew .swp"

# Main loop:
for SCRIPT in $1/* ; do
  # If this is not a regular file, skip it:
  if [ ! -f $SCRIPT ]; then
    continue
  fi
  # Determine if this file should be skipped by suffix:
  SKIP=false
  for SUFFIX in $IGNORE_SUFFIXES ; do
    if [ ! "$(basename $SCRIPT $SUFFIX)" = "$(basename $SCRIPT)" ]; then
      SKIP=true
      break
    fi
  done
  if [ "$SKIP" = "true" ]; then
    continue
  fi
  # If we've made it this far, then run the script if it's executable:
  if [ -x $SCRIPT ]; then
    $SCRIPT || echo "$SCRIPT failed."
  fi
done

exit 0
EOF

chmod -v 755 /usr/bin/run-parts

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

mkdir -pv /etc/libpaper.d: libpaper expects that packages will install files into this directory.

cat > /usr/bin/run-parts << "EOF" : paperconfig is a script which will invoke run-parts if /etc/libpaper.d exists. No other BLFS package installs this, so we create it here.

Configuring libpaper

Configuration Information

Create /etc/papersize to set the default system paper size. Issue the following command as the root user to set this to 'A4' (libpaper prefers the lowercase form). You may wish to use a different size, such as letter.

cat > /etc/papersize << "EOF"
a4
EOF

Installed Programs: paperconf, paperconfig, run-parts

Installed Library: libpaper.so

Installed Directories: /etc/libpaper.d

Short Descriptions

paperconf	prints paper configuration information.
paperconfig	configures the system default paper size.
run-parts	runs all the scripts found in a directory.
`libpaper.so`	contains functions for interrogating the paper library.

Last updated on 2017-08-20 20:24:54 -0700

libqmi-1.18.0

Introduction to libqmi

The libqmi package contains a GLib-based library for talking to WWAN modems and devices which speak the Qualcomm MSM Interface (QMI) protocol.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.freedesktop.org/software/libqmi/libqmi-1.18.0.tar.xz
Download MD5 sum: 25bae4e383ad77f491ad49b49e04fdcf
Download size: 856 KB
Estimated disk space required: 88 MB (with tests)
Estimated build time: 0.5 SBU (with tests)

libqmi Dependencies

Required

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libqmi

Installation of libqmi

Install libqmi by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

--disable-mbim-qmux: This switch disables support for using a MBIM control device for QMI messages. Use this switch if you did not install libmbim.

Installed Programs: qmicli, qmi-firmware-update, and qmi-network

Installed Libraries: libqmi-glib.so

Installed Directories: /usr/include/libqmi-glib and /usr/share/gtk-doc/html/libqmi-glib

Short Descriptions

qmicli	is an utility used to control QMI devices.
qmi-network	is an utility used for simple network management of QMI devices.
`libqmi-glib.so`	contains API functions for talking to WWAN modems and devices which speak the Qualcomm MSM Interface (QMI) protocol.

Last updated on 2017-08-24 18:56:23 -0700

libsigc++-2.10.0

Introduction to libsigc++

The libsigc++ package implements a typesafe callback system for standard C++.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/libsigc++/2.10/libsigc++-2.10.0.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/libsigc++/2.10/libsigc++-2.10.0.tar.xz
Download MD5 sum: 70bcbde2c900e4925d6ef4bf50954195
Download size: 3.6 MB
Estimated disk space required: 58 MB (with tests)
Estimated build time: 0.3 SBU (with tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libsigc++

Installation of libsigc++

First, fix the documentation directory name:

sed -e '/^libdocdir =/ s/$(book_name)/libsigc++-2.10.0/' -i docs/Makefile.in

Install libsigc++ by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Installed Programs: None

Installed Library: libsigc-2.0.so

Installed Directories: /usr/{include,lib}/sigc++-2.0 and /usr/share/{devhelp/books,doc}/libsigc++-2.0

Short Descriptions

libsigc-2.0.so

contains the libsigc++ API functions.

Last updated on 2017-08-23 19:39:45 -0700

libsigsegv-2.11

Introduction to libsigsegv

This is a library for handling page faults in user mode. A page fault occurs when a program tries to access to a region of memory that is currently not available. Catching and handling a page fault is a useful technique for implementing pageable virtual memory, memory-mapped access to persistent databases, generational garbage collectors, stack overflow handlers, and distributed shared memory.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/libsigsegv/libsigsegv-2.11.tar.gz
Download (FTP): ftp://ftp.gnu.org/gnu/libsigsegv/libsigsegv-2.11.tar.gz
Download MD5 sum: a812d9481f6097f705599b218eea349f
Download size: 440 KB
Estimated disk space required: 3.4 MB (with checks)
Estimated build time: less than 0.1 SBU (with checks)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libsigsegv

Installation of libsigsegv

Install libsigsegv by running the following commands:

./configure --prefix=/usr   \
            --enable-shared \
            --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--enable-shared: This switch ensures that shared libraries are compiled.

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: None

Installed Library: libsigsegv.so

Installed Directories: None

Short Descriptions

libsigsegv.so

is a library for handling page faults in user mode.

Last updated on 2017-08-26 10:08:22 -0700

libstatgrab-0.91

Introduction to libstatgrab

This is a library that provides cross platform access to statistics about the system on which it's run. It's written in C and presents a selection of useful interfaces which can be used to access key system statistics. The current list of statistics includes CPU usage, memory utilisation, disk usage, process counts, network traffic, disk I/O, and more.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.mirrorservice.org/sites/ftp.i-scream.org/pub/i-scream/libstatgrab/libstatgrab-0.91.tar.gz
Download (FTP): ftp://www.mirrorservice.org/sites/ftp.i-scream.org/pub/i-scream/libstatgrab/libstatgrab-0.91.tar.gz
Download MD5 sum: b906d312076ca9be3d5188edfe07f496
Download size: 760 KB
Estimated disk space required: 9.0 MB (with the test suite)
Estimated build time: 0.1 SBU (1.6 SBU with the test suite)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libstatgrab

Installation of libstatgrab

Install libstatgrab by running the following commands:

./configure --prefix=/usr   \
            --disable-static \
            --docdir=/usr/share/doc/libstatgrab-0.91 &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: saidar, statgrab, statgrab-make-mrtg-config, and statgrab-make-mrtg-index

Installed Library: libstatgrab.so

Installed Directories: /usr/share/doc/libstatgrab-0.91

Short Descriptions

saidar	is a curses-based tool for viewing system statistics.
statgrab	is a sysctl-style interface to system statistics.
statgrab-make-mrtg-config	generates MRTG configuration.
statgrab-make-mrtg-index	generates an XHTML index page from MRTG configuration files or stdin.
`libstatgrab.so`	contains the libstatgrab API functions.

Last updated on 2017-08-29 10:55:51 -0700

libtasn1-4.12

Introduction to libtasn1

libtasn1 is a highly portable C library that encodes and decodes DER/BER data following an ASN.1 schema.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/libtasn1/libtasn1-4.12.tar.gz
Download (FTP): ftp://ftp.gnu.org/gnu/libtasn1/libtasn1-4.12.tar.gz
Download MD5 sum: 5c724bd1f73aaf4a311833e1cd297b21
Download size: 1.8 MB
Estimated disk space required: 11 MB (with tests)
Estimated build time: 0.3 SBU (with tests)

libtasn1 Dependencies

Optional

GTK-Doc-1.26 and Valgrind-3.13.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libtasn1

Installation of libtasn1

Install libtasn1 by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

If you did not pass the --enable-gtk-doc parameter to the configure script, you can install the API documentation using the following command as the root user:

make -C doc/reference install-data-local

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: This parameter is normally used if GTK-Doc is installed and you wish to rebuild and install the API documentation. It is broken for this package due to the use of a long deprecated gtk-doc program that is no longer available.

Installed Programs: asn1Coding, asn1Decoding and asn1Parser

Installed Library: libtasn1.so

Installed Directory: /usr/share/gtk-doc/html/libtasn1

Short Descriptions

asn1Coding	is an ASN.1 DER encoder.
asn1Decoding	is an ASN.1 DER decoder.
asn1Parser	is an ASN.1 syntax tree generator for libtasn1.
`libtasn1.so`	is a library for Abstract Syntax Notation One (ASN.1) and Distinguish Encoding Rules (DER) manipulation.

Last updated on 2017-09-01 14:59:47 -0700

libunique-1.1.6

Introduction to libunique

The libunique package contains a library for writing single instance applications.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/libunique/1.1/libunique-1.1.6.tar.bz2
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/libunique/1.1/libunique-1.1.6.tar.bz2
Download MD5 sum: 7955769ef31f1bc4f83446dbb3625e6d
Download size: 328 KB
Estimated disk space required: 7.0 MB
Estimated build time: 0.2 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/libunique-1.1.6-upstream_fixes-1.patch

libunique Dependencies

Required

GTK+-2.24.31

Optional

gobject-introspection-1.52.1 and GTK-Doc-1.26

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libunique

Installation of libunique

Install libunique by running the following commands:

patch -Np1 -i ../libunique-1.1.6-upstream_fixes-1.patch &&
autoreconf -fi &&

./configure --prefix=/usr  \
            --disable-dbus \
            --disable-static &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--disable-dbus: This switch disables D-Bus backend in favor of the GDBus backend.

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: None

Installed Library: libunique-1.0.so

Installed Directories: /usr/include/unique-1.0 and /usr/share/gtk-doc/html/unique

Short Descriptions

libunique-1.0.so

contains the libunique API functions for single instance support.

Last updated on 2017-08-28 15:14:37 -0700

libunistring-0.9.7

Introduction to libunistring

libunistring is a library that provides functions for manipulating Unicode strings and for manipulating C strings according to the Unicode standard.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/libunistring/libunistring-0.9.7.tar.xz
Download (FTP): ftp://ftp.gnu.org/gnu/libunistring/libunistring-0.9.7.tar.xz
Download MD5 sum: 82e0545363d111bfdfec2ddbfe62ffd3
Download size: 1.9 MB
Estimated disk space required: 43 MB (add 42 MB for tests)
Estimated build time: 0.7 SBU (add 1.4 SBU for tests)

libunistring Dependencies

Optional

texlive-20170524 (or install-tl-unx) (to rebuild the documentation)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libunistring

Installation of libunistring

Install libunistring by running the following commands:

./configure --prefix=/usr    \
            --disable-static \
            --docdir=/usr/share/doc/libunistring-0.9.7 &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: None

Installed Libraries: libunistring.so

Installed Directory: /usr/include/unistring and /usr/share/doc/libunistring-0.9.7

Short Descriptions

libunistring.so

provides the unicode string library API.

Last updated on 2017-08-20 20:24:54 -0700

libusb-1.0.21

Introduction to libusb

The libusb package contains a library used by some applications for USB device access.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com//libusb/libusb/releases/download/v1.0.21/libusb-1.0.21.tar.bz2
Download MD5 sum: 1da9ea3c27b3858fa85c5f4466003e44
Download size: 596 KB
Estimated disk space required: 5.7 MB (add 1.5 MB for API documentation)
Estimated build time: less than 0.1 SBU

libusb Dependencies

Optional

Doxygen-1.8.13

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libusb

Installation of libusb

Note

This package does not support parallel build.

Install libusb by running the following commands:

sed -i "s/^PROJECT_LOGO/#&/" doc/doxygen.cfg.in &&

./configure --prefix=/usr --disable-static &&
make -j1

If Doxygen is installed and you wish to build the API documentation, issue the following command:

make -C doc docs

This package does not come with a test suite.

Now, as the root user:

make install

If you built the API documentation, install it using the following commands as the root user:

install -v -d -m755 /usr/share/doc/libusb-1.0.21/apidocs &&
install -v -m644    doc/html/* \
                    /usr/share/doc/libusb-1.0.21/apidocs

Command Explanations

sed -i ...: This sed prevents a warning when building the documentation.

Configuring Libusb

To access raw USB devices (those not treated as a disk by the mass-storage driver), appropriate support must be available in the kernel. Check your kernel configuration:

Device Drivers --->
  [*] USB support --->                   [CONFIG_USB_SUPPORT]
    <*/M> Support for Host-side USB      [CONFIG_USB]
    (Select any USB hardware device drivers you may need on the same page)

For more details on setting up USB devices, see the section called “USB Device Issues”.

Installed Programs: None

Installed Library: libusb-1.0.so

Installed Directories: /usr/include/libusb-1.0 and /usr/share/doc/libusb-1.0.21

Short Descriptions

libusb-1.0.so

contains API functions used for accessing USB hardware.

Last updated on 2017-08-20 20:24:54 -0700

libusb-compat-0.1.5

Introduction to libusb-compat

The libusb-compat package aims to look, feel and behave exactly like libusb-0.1. It is a compatibility layer needed by packages that have not been upgraded to the libusb-1.0 API.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/libusb/libusb-compat-0.1.5.tar.bz2
Download MD5 sum: 2780b6a758a1e2c2943bdbf7faf740e4
Download size: 276 KB
Estimated disk space required: 2.4 MB
Estimated build time: less than 0.1 SBU

libusb-compat Dependencies

Required

libusb-1.0.21

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libusb-compat

Installation of libusb-compat

Install libusb-compat by running the following commands:

./configure --prefix=/usr --disable-static &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Program: libusb-config

Installed Library: libusb.so

Installed Directories: None

Short Descriptions

libusb-config	determines the compile and linker flags that should be used to compile and link programs that use `libusb`.
`libusb.so`	is a library that is compatible with libusb-0.1, but uses libusb-1.0 to provide functionality.

Last updated on 2017-08-26 21:14:29 -0700

libxkbcommon-0.7.2

Introduction to libxkbcommon

libxkbcommon is a keymap compiler and support library which processes a reduced subset of keymaps as defined by the XKB specification.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://xkbcommon.org/download/libxkbcommon-0.7.2.tar.xz
Download MD5 sum: f53fa65beb5ae4b6a6b7f08f9dedabc4
Download size: 616 KB
Estimated disk space required: 35 MB (with tests)
Estimated build time: 0.2 SBU (with tests)

libxkbcommon Dependencies

Required

xkeyboard-config-2.21

Installation of libxkbcommon

Install libxkbcommon by running the following commands:

./configure $XORG_CONFIG     \
            --docdir=/usr/share/doc/libxkbcommon-0.7.2 &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--disable-x11: Use this switch if you have not installed libxcb-1.12 and don't need the libxkbcommon-x11.so library.

Installed Programs: None

Installed Libraries: libxkbcommon.so and libxkbcommon-x11.so

Installed Directories: /usr/include/xkbcommon and /usr/share/doc/libxkbcommon-0.7.2

Short Descriptions

`libxkbcommon.so`	contains the libxkbcommon API functions.
`libxkbcommon-x11.so`	contains the libxkbcommon X11 specific API functions.

Last updated on 2017-08-21 16:43:13 -0700

libxml2-2.9.4

Introduction to libxml2

The libxml2 package contains libraries and utilities used for parsing XML files.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://xmlsoft.org/sources/libxml2-2.9.4.tar.gz
Download (FTP): ftp://xmlsoft.org/libxml2/libxml2-2.9.4.tar.gz
Download MD5 sum: ae249165c173b1ff386ee8ad676815f5
Download size: 5.1 MB
Estimated disk space required: 95 MB (additional 20 MB for tests)
Estimated build time: 0.6 SBU (additional 0.2 SBU for tests)

Additional Downloads

Optional Testsuite: http://www.w3.org/XML/Test/xmlts20130923.tar.gz - This enables make check to do complete testing.

libxml2 Dependencies

Note

Some packages which utilize libxml2 (such as GNOME Doc Utils) need the Python module installed to function properly and some packages will not build properly if the Python module is not available.

Optional

ICU-59.1 and Valgrind-3.13.0 (may be used in the tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libxml2

Installation of libxml2

If you want to build the Python module for Python-3.6.2, run:

sed -i '/_PyVerify_fd/,+1d' python/types.c

Install libxml2 by running the following commands:

./configure --prefix=/usr --disable-static --with-history &&
make

If you downloaded the testsuite, issue the following command:

tar xf ../xmlts20130923.tar.gz

To test the results, issue: make check > check.log. A summary of the results can be obtained with grep -E '^Total|expected' check.log. If Valgrind-3.13.0 is installed and you want to check memory leaks, replace check with check-valgrind.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--with-history: This switch enables Readline support when running xmlcatalog or xmllint in shell mode.

--with-python=/usr/bin/python3: Add this switch if you want libxml2 to use Python3 instead of Python2.

--with-icu: Add this switch if you have built ICU-59.1, for better unicode support.

--with-threads: Add this switch to enable multithread support.

Installed Programs: xml2-config, xmlcatalog and xmllint

Installed Libraries: libxml2.so and optionally, the libxml2mod.so Python module

Installed Directories: /usr/include/libxml2, /usr/lib/cmake/libxml2, /usr/share/doc/libxml2-2.9.4, /usr/share/doc/libxml2-python-2.9.4, and /usr/share/gtk-doc/html/libxml2

Short Descriptions

xml2-config	determines the compile and linker flags that should be used to compile and link programs that use `libxml2`.
xmlcatalog	is used to monitor and manipulate XML and SGML catalogs.
xmllint	parses XML files and outputs reports (based upon options) to detect errors in XML coding.
`libxml2.so`	provides functions for programs to parse files that use the XML format.

Last updated on 2017-08-18 12:42:43 -0700

libxslt-1.1.29

Introduction to libxslt

The libxslt package contains XSLT libraries used for extending libxml2 libraries to support XSLT files.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://xmlsoft.org/sources/libxslt-1.1.29.tar.gz
Download (FTP): ftp://xmlsoft.org/libxslt/libxslt-1.1.29.tar.gz
Download MD5 sum: a129d3c44c022de3b9dcf6d6f288d72e
Download size: 3.3 MB
Estimated disk space required: 40 MB (with tests)
Estimated build time: 0.3 SBU (with tests)

libxslt Dependencies

Required

libxml2-2.9.4

Optional

libgcrypt-1.8.0 and Python-2.7.13

Note

Although it is not a direct dependency, many applications using libxslt will expect docbook-xml-4.5 and docbook-xsl-1.79.1 to be present.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libxslt

Installation of libxslt

Install libxslt by running the following commands:

sed -i '/#include <xlocale.h>/d' libxslt/xsltlocale.h &&
./configure --prefix=/usr --disable-static            &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

sed -i '/#include <xlocale.h>/d' libxslt/xsltlocale.h: with glibc-2.26, xlocale.h is no-longer installed, any package using it should use locale.h but libxslt references that on the previous line of the header, so just delete this.

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: xslt-config and xsltproc

Installed Libraries: libexslt.so, libxslt.so and optionally, libxsltmod.so Python modules

Installed Directories: /usr/include/libexslt, /usr/include/libxslt, /usr/lib/libxslt-plugins, /usr/share/doc/libxslt-1.1.29, and /usr/share/doc/libxslt-python-1.1.29

Short Descriptions

xslt-config	is used to find out the pre-processor, linking and compiling flags necessary to use the libxslt libraries in 3rd-party programs.
xsltproc	is used to apply XSLT stylesheets to XML documents.
`libexslt.so`	is used to provide extensions to XSLT functions.
`libxslt.so`	provides extensions to the `libxml2` libraries to parse files that use the XSLT format.

Last updated on 2017-08-19 18:04:07 -0700

libwacom-0.26

Introduction to libwacom

The libwacom package contains a library used to identify wacom tablets and their model-specific features.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/linuxwacom/libwacom-0.26.tar.bz2
Download MD5 sum: 00d7f50bc7feda6a01f2b2546f787bc9
Download size: 472 KB
Estimated disk space required: 6.5 MB (with tests)
Estimated build time: less than 0.1 SBU (with tests)

libwacom Dependencies

Required

libgudev-231

Optional

git-2.14.1, GTK+-2.24.31, and librsvg-2.40.18

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libwacom

Installation of libwacom

Install libwacom by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: libwacom-list-local-devices

Installed Libraries: libwacom.so

Installed Directories: /usr/include/libwacom-1.0 and /usr/share/libwacom

Short Descriptions

libwacom.so

contains functions used for accessing Wacom information.

Last updated on 2017-08-26 18:53:46 -0700

libzeitgeist-0.3.18

Introduction to libzeitgeist

The libzeitgeist package contains a client library used to access and manage the Zeitgeist event log from languages such as C and Vala. Zeitgeist is a service which logs the user's activities and events (files opened, websites visited, conversations hold with other people, etc.) and makes the relevant information available to other applications.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://launchpad.net/libzeitgeist/0.3/0.3.18/+download/libzeitgeist-0.3.18.tar.gz
Download MD5 sum: d63a37295d01a58086d0d4ae26e604c2
Download size: 516 KB
Estimated disk space required: 7.0 MB
Estimated build time: 0.1 SBU

libzeitgeist Dependencies

Required

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libzeitgeist

Installation of libzeitgeist

Install libzeitgeist by running the following commands:

sed -i  "s|/doc/libzeitgeist|&-0.3.18|" Makefile.in &&

./configure --prefix=/usr --disable-static &&
make

This package does not have a working testsuite.

Now, as the root user:

make install

Command Explanations

sed ... Makefile.in: PLace the documentation in a versioned directory.

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: None

Installed Library: libzeitgeist-1.0.so

Installed Directories: /usr/include/libzeitgeist-1.0 and /usr/share/doc/libzeitgeist

Short Descriptions

libzeitgeist-1.0.so

contains the libzeitgeist API functions.

Last updated on 2017-08-30 17:02:22 -0700

LZO-2.10

Introduction to LZO

LZO is a data compression library which is suitable for data decompression and compression in real-time. This means it favors speed over compression ratio.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.oberhumer.com/opensource/lzo/download/lzo-2.10.tar.gz
Download MD5 sum: 39d3f3f9c55c87b1e5d6888e1420f4b5
Download size: 588 KB
Estimated disk space required: 12 MB
Estimated build time: 0.3 SBU (with tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/lzo

Installation of LZO

Install LZO by running the following commands:

./configure --prefix=/usr                    \
            --enable-shared                  \
            --disable-static                 \
            --docdir=/usr/share/doc/lzo-2.10 &&
make

To test the results, issue: make check. All the checks should pass. Now issue make test to run the full suite of tests.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: None

Installed Libraries: liblzo2.so

Installed Directories: /usr/include/lzo and /usr/share/doc/lzo

Short Descriptions

liblzo2.so

is a data compression and decompression library.

Last updated on 2017-08-18 12:42:43 -0700

mtdev-1.1.5

Introduction to mtdev

The mtdev package contains Multitouch Protocol Translation Library which is used to transform all variants of kernel MT (Multitouch) events to the slotted type B protocol.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://bitmath.org/code/mtdev/mtdev-1.1.5.tar.bz2
Download MD5 sum: 52c9610b6002f71d1642dc1a1cca5ec1
Download size: 268 KB
Estimated disk space required: 2.4 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/mtdev

Installation of mtdev

Install mtdev by running the following commands:

./configure --prefix=/usr --disable-static &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Program: mtdev-test

Installed Library: libmtdev.so

Installed Directories: None

Short Descriptions

mtdev-test	is a tool to test `libmtdev`.
`libmtdev.so`	contains Multitouch Protocol Translation API functions.

Last updated on 2017-08-20 20:24:54 -0700

Node.js-8.4.0

Introduction to Node.js

Node.js is a JavaScript runtime built on Chrome's V8 JavaScript engine.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://nodejs.org/dist/v8.4.0/node-v8.4.0.tar.xz
Download MD5 sum: e6c85c83001340b30671e9432e1bd337
Download size: 18 MB
Estimated disk space required: 349 MB
Estimated build time: 11.3 SBU

Node.js Dependencies

Required

Optional

http-parser, libuv, and npm (an internal copy of npm will be installed if not present)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/nodejs

Installation of Node.js

Build Node.js by running the following commands:

PKG_CONFIG_PATH=/usr/lib/openssl-1.0/pkgconfig \
    ./configure --prefix=/usr                  \
                --shared-cares                 \
                --shared-openssl               \
                --shared-zlib                  \
                --with-intl=system-icu         &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
ln -sf node /usr/share/doc/node-8.4.0

Command Explanations

--with-intl=system-icu: use the system version of icu. Other values are full-icu (to build a local, full icu library) and small-icu (to to build a local, minimal icu library).

--shared-{cares,openssl,zlib}: use the system installed libraries instead of local copies.

--without-npm: do not build npm (use if you'd like to build a separate npm later).

--shared-{http-parser,libuv}: use the system installed libraries instead of local copies.

Installed Programs: /usr/bin/node and /usr/bin/npm

Installed Library: None

Installed Directories: /usr/lib/node_modules/npm/

Short Descriptions

node	is the server-side JavaScript runtime.
npm	is the Node.js package manager.
`/usr/lib/node_modules/npm/`	is the installation root for Node.js executables and libraries.

Last updated on 2017-08-21 21:02:12 -0700

npth-1.5

Introduction to NPth

The NPth package contains a very portable POSIX/ANSI-C based library for Unix platforms which provides non-preemptive priority-based scheduling for multiple threads of execution (multithreading) inside event-driven applications. All threads run in the same address space of the server application, but each thread has its own individual program-counter, run-time stack, signal mask and errno variable.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.gnupg.org/ftp/gcrypt/npth/npth-1.5.tar.bz2
Download (FTP): ftp://ftp.gnupg.org/gcrypt/npth/npth-1.5.tar.bz2
Download MD5 sum: 9ba2dc4302d2f32c66737c43ed191b1b
Download size: 296 KB
Estimated disk space required: 2.5 MB (with checks)
Estimated build time: less than 0.1 SBU (with checks)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/npth

Installation of NPth

Install NPth by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Installed Program: npth-config

Installed Library: libnpth.so

Installed Directory: None

Short Descriptions

npth-config	is a utility used to configure and build applications based on the npth library. It can be used to query the C compiler and linker flags which are required to correctly compile and link the application against the npth library.
`libnpth.so`	contains the API functions used by the New Portable Threads Library.

Last updated on 2017-08-20 20:24:54 -0700

NSPR-4.16

Introduction to NSPR

Netscape Portable Runtime (NSPR) provides a platform-neutral API for system level and libc like functions.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://archive.mozilla.org/pub/nspr/releases/v4.16/src/nspr-4.16.tar.gz
Download MD5 sum: 42fd8963a4b394f62d43ba604f03fab7
Download size: 1.1 MB
Estimated disk space required: 12 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/nspr

Installation of NSPR

Install NSPR by running the following commands:

cd nspr                                                     &&
sed -ri 's#^(RELEASE_BINS =).*#\1#' pr/src/misc/Makefile.in &&
sed -i 's#$(LIBRARY) ##'            config/rules.mk         &&

./configure --prefix=/usr \
            --with-mozilla \
            --with-pthreads \
            $([ $(uname -m) = x86_64 ] && echo --enable-64bit) &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

sed -ri 's#^(RELEASE_BINS =).*#\1#' pr/src/misc/Makefile.in: This sed disables installing two unneeded scripts.

sed -i 's#$(LIBRARY) ##' config/rules.mk: This sed disables installing the static libraries.

--with-mozilla: This parameter adds Mozilla support to the libraries (required if you want to build any other Mozilla products and link them to these libraries).

--with-pthreads: This parameter forces use of the system pthread library.

$([ $(uname -m) = x86_64 ] && echo --enable-64bit): The --enable-64bit parameter is required on an x86_64 system to prevent configure failing with a claim that this is a system without pthread support. The [ $(uname -m) = x86_64 ] test ensures it has no effect on a 32 bit system.

Installed Programs: nspr-config

Installed Libraries: libnspr4.so, libplc4.so and libplds4.so

Installed Directories: /usr/include/nspr

Short Descriptions

nspr-config	provides compiler and linker options to other packages that use NSPR.
`libnspr4.so`	contains functions that provide platform independence for non-GUI operating system facilities such as threads, thread synchronization, normal file and network I/O, interval timing and calendar time, basic memory management and shared library linking.
`libplc4.so`	contains functions that implement many of the features offered by libnspr4
`libplds4.so`	contains functions that provide data structures.

Last updated on 2017-08-16 21:41:37 -0700

OpenOBEX-1.7.2

Introduction to OpenOBEX

The OpenOBEX package contains a library that implements Object Exchange Protocol used for binary file transfers between devices.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/openobex/openobex-1.7.2-Source.tar.gz
Download MD5 sum: f6e0b6cb7dcfd731460a7e9a91429a3a
Download size: 128 KB
Estimated disk space required: 3.1 MB
Estimated build time: less than 0.1 SBU

OpenOBEX Dependencies

Required

CMake-3.9.1 and libusb-1.0.21

Optional

Doxygen-1.8.13, libxslt-1.1.29, OpenJDK-1.8.0.141, and xmlto-0.0.28

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/openobex

Installation of OpenOBEX

OpenOBEX installs a udev rule that requires a group named plugdev. Create that group as the root user:

groupadd -g 90 plugdev

Install OpenOBEX by running the following commands:

mkdir build &&
cd    build &&

cmake -DCMAKE_INSTALL_PREFIX=/usr      \
      -DCMAKE_INSTALL_LIBDIR=/usr/lib  \
      -DCMAKE_BUILD_TYPE=Release       \
      -Wno-dev                         \
      .. &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
if [ -d /usr/share/doc/openobex ]; then
  mv -fv /usr/share/doc/{openobex,openobex-1.7.2}
fi

Command Explanations

-DCMAKE_BUILD_TYPE=Release: This switch is used to apply higher level of the compiler optimizations.

-Wno-dev: This switch is used to suppress warnings that are meant for the author of the CMakeLists.txt files.

mv -fv ...: Moves the documentation to a versioned directory, if it has been created.

Installed Program: obex-check-device

Installed Library: libopenobex.so

Installed Directory: /usr/include/openobex, /usr/lib/cmake/OpenObex-1.7.1, and /usr/share/doc/openobex-1.7.1

Short Descriptions

obex-check-device	is a tool that helps udev find connectable OBEX USB devices.
`libopenobex.so`	contains the OpenOBEX API functions.

Last updated on 2017-08-28 20:59:34 -0700

PCRE-8.41

Introduction to PCRE

The PCRE package contains Perl Compatible Regular Expression libraries. These are useful for implementing regular expression pattern matching using the same syntax and semantics as Perl 5.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/pcre/pcre-8.41.tar.bz2
Download (FTP): ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.41.tar.bz2
Download MD5 sum: c160d22723b1670447341b08c58981c1
Download size: 1.5 MB
Estimated disk space required: 24 MB (with tests)
Estimated build time: 0.3 SBU (with tests)

PCRE Dependencies

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/pcre

Installation of PCRE

Install PCRE by running the following commands:

./configure --prefix=/usr                     \
            --docdir=/usr/share/doc/pcre-8.41 \
            --enable-unicode-properties       \
            --enable-pcre16                   \
            --enable-pcre32                   \
            --enable-pcregrep-libz            \
            --enable-pcregrep-libbz2          \
            --enable-pcretest-libreadline     \
            --disable-static                 &&
make

To test the results, issue: make check.

Now, as the root user:

make install                     &&
mv -v /usr/lib/libpcre.so.* /lib &&
ln -sfv ../../lib/$(readlink /usr/lib/libpcre.so) /usr/lib/libpcre.so

Command Explanations

--enable-unicode-properties: This switch enables Unicode properties support and includes the code for handling UTF-8/16/32 character strings in the library. You need this switch if you are going to build GLib-2.52.3 with the --with-pcre=system switch.

--enable-pcre16: This switch enables 16 bit character support.

--enable-pcre32: This switch enables 32 bit character support.

--enable-pcregrep-libz: This switch adds support to pcregrep to read .gz compressed files.

--enable-pcregrep-libbz2: This switch adds support to pcregrep to read .bz2 compressed files.

--enable-pcretest-libreadline: This switch adds line editing and history features to pcretest program.

--disable-static: This switch prevents installation of static versions of the libraries.

mv -v /usr/lib/libpcre.so.* /lib: Moves the PCRE library on the root filesystem so that it is available in case grep gets reinstalled with PCRE support.

--enable-jit: this option enables Just-in-time compiling, which can greatly speed up pattern matching.

Installed Programs: pcregrep, pcretest, and pcre-config

Installed Libraries: libpcre.so, libpcre16.so, libpcre32.so, libpcrecpp.so and libpcreposix.so

Installed Directory: /usr/share/doc/pcre-8.41

Short Descriptions

pcregrep	is a grep that understands Perl compatible regular expressions.
pcretest	can test a Perl compatible regular expression.
pcre-config	is used during the compile process of programs linking to the PCRE libraries.

Last updated on 2017-08-19 20:26:54 -0700

PCRE2-10.30

Introduction to PCRE2

The PCRE2 package contains a new generation of the Perl Compatible Regular Expression libraries. These are useful for implementing regular expression pattern matching using the same syntax and semantics as Perl.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/pcre/pcre2-10.30.tar.bz2
Download (FTP): ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre2-10.30.tar.bz2
Download MD5 sum: d3adf4b130eed854a530390f00020a65
Download size: 1.5 MB
Estimated disk space required: 15 MB (with tests)
Estimated build time: 0.3 SBU (with tests)

PCRE2 Dependencies

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/pcre2

Installation of PCRE2

Install PCRE2 by running the following commands:

./configure --prefix=/usr                       \
            --docdir=/usr/share/doc/pcre2-10.30 \
            --enable-unicode                    \
            --enable-pcre2-16                   \
            --enable-pcre2-32                   \
            --enable-pcre2grep-libz             \
            --enable-pcre2grep-libbz2           \
            --enable-pcre2test-libreadline      \
            --disable-static                    &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--enable-unicode: This switch enables Unicode support and includes the functions for handling UTF-8/16/32 character strings in the library.

--enable-pcre2-16: This switch enables 16 bit character support.

--enable-pcre2-32: This switch enables 32 bit character support.

--enable-pcre2grep-libz: This switch adds support for reading .gz compressed files to pcre2grep.

--enable-pcre2grep-libbz2: This switch adds support for reading .bz2 compressed files to pcre2grep.

--enable-pcre2test-libreadline: This switch adds line editing and history features to the pcre2test program.

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-jit: this option enables Just-in-time compiling, which can greatly speed up pattern matching.

Installed Programs: pcre2-config, pcre2grep, and pcre2test.

Installed Libraries: libpcre2-8.so, libpcre2-16.so, libpcre2-32.so, and libpcre2-posix.so

Installed Directory: /usr/share/doc/pcre2-10.30

Short Descriptions

pcre2grep	is a version of grep that understands Perl compatible regular expressions..
pcre2test	can test a Perl compatible regular expression.
pcre2-config	outputs compilation information to programs linking against the PCRE2 libraries.

Last updated on 2017-08-21 16:43:13 -0700

Popt-1.16

Introduction to Popt

The popt package contains the popt libraries which are used by some programs to parse command-line options.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://rpm5.org/files/popt/popt-1.16.tar.gz
Download (FTP): ftp://anduin.linuxfromscratch.org/BLFS/popt/popt-1.16.tar.gz
Download MD5 sum: 3743beefa3dd6247a73f8f7a32c14c33
Download size: 702 kB
Estimated disk space required: 8 MB (includes installing documentation)
Estimated build time: 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/popt

Installation of Popt

Install popt by running the following commands:

./configure --prefix=/usr --disable-static &&
make

If you have Doxygen-1.8.13 installed and wish to build the API documentation, issue doxygen.

To test the results, issue:make check.

Now, as the root user:

make install

If you built the API documentation, install it using the following commands issued by the root user:

install -v -m755 -d /usr/share/doc/popt-1.16 &&
install -v -m644 doxygen/html/* /usr/share/doc/popt-1.16

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: None

Installed Library: libpopt.so

Installed Directories: /usr/share/doc/popt-1.16

Short Descriptions

libpopt.so

is used to parse command-line options.

Last updated on 2017-08-20 15:06:11 -0700

Pth-2.0.7

Introduction to Pth

The Pth package contains a very portable POSIX/ANSI-C based library for Unix platforms which provides non-preemptive priority-based scheduling for multiple threads of execution (multithreading) inside event-driven applications. All threads run in the same address space of the server application, but each thread has its own individual program-counter, run-time stack, signal mask and errno variable.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/pth/pth-2.0.7.tar.gz
Download (FTP): ftp://ftp.gnu.org/gnu/pth/pth-2.0.7.tar.gz
Download MD5 sum: 9cb4a25331a4c4db866a31cbe507c793
Download size: 652 KB
Estimated disk space required: 5 MB
Estimated build time: 0.2 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/pth

Installation of Pth

Caution

Don't add the --enable-pthread parameter to the configure command below else you will overwrite the pthread library and interface header installed by the Glibc package in LFS.

Install Pth by running the following commands:

sed -i 's#$(LOBJS): Makefile#$(LOBJS): pth_p.h Makefile#' Makefile.in &&
./configure --prefix=/usr           \
            --disable-static        \
            --mandir=/usr/share/man &&
make

To test the results, issue: make test.

Now, as the root user:

make install &&
install -v -m755 -d /usr/share/doc/pth-2.0.7 &&
install -v -m644    README PORTING SUPPORT TESTS \
                    /usr/share/doc/pth-2.0.7

Command Explanations

sed -i 's#$(LOBJS) ...: This sed fixes a race condition in the Makefile. It allows you to run make with multiple jobs (e.g., make -j4) .

--disable-static: This switch prevents installation of static versions of the libraries.

--mandir=/usr/share/man: This switch puts the man pages in /usr/share/man instead of /usr/man.

Installed Program: pth-config

Installed Library: libpth.so

Installed Directory: /usr/share/doc/pth-2.0.7

Short Descriptions

pth-config	is a utility used to configure and build applications based on the pth(3) library. It can be used to query the C compiler and linker flags which are required to correctly compile and link the application against the pth(3) library.
`libpth.so`	contains the API functions used by the GNU Portable Threads Library.

Last updated on 2017-08-16 21:41:37 -0700

Ptlib-2.10.11

Introduction to Ptlib

The Ptlib (Portable Tools Library) package contains a class library that has its genesis many years ago as PWLib (portable Windows Library), a method to produce applications to run on various platforms.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/ptlib/2.10/ptlib-2.10.11.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/ptlib/2.10/ptlib-2.10.11.tar.xz
Download MD5 sum: 3ffdf89170dbfa6d29a015ef8741a4e4
Download size: 2.4 MB
Estimated disk space required: 81 MB
Estimated build time: 0.9 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/ptlib-2.10.11-bison_fixes-2.patch
Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/ptlib-2.10.11-openssl-1.1.0-1.patch

Ptlib Dependencies

Optional

Cyrus SASL-2.1.26, Lua-5.3.4, OpenLDAP-2.4.45, PulseAudio-10.0, SDL-1.2.15, unixODBC-2.3.4, v4l-utils-1.12.5, libdc1394, and libraw1394,

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/ptlib

Installation of Ptlib

Fix a build issue with gcc-7.1.0:

sed -i "s/sbin\.Right(1) == '\\\\0')/strlen(sbin\.Right(1)) == 0)/" \
    src/ptclib/podbc.cxx &&
    
sed -i '/\/ioctl.h/a#include <sys/uio.h>' src/ptlib/unix/channel.cxx

Install Ptlib by running the following commands:

patch -Np1 -i ../ptlib-2.10.11-openssl-1.1.0-1.patch &&
patch -Np1 -i ../ptlib-2.10.11-bison_fixes-2.patch &&

./configure --prefix=/usr &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
chmod -v 755 /usr/lib/libpt.so.2.10.11

Installed Program: ptlib-config

Installed Libraries: libpt.so and libpt_s.a

Installed Directories: /usr/include/ptclib, /usr/include/ptlib, /usr/lib/ptlib-2.10.11, and /usr/share/ptlib

Short Descriptions

ptlib-config	determines the compile and linker flags that should be used to compile and link programs that use `libpt`.
`libpt.so`	contains the Ptlib API functions.

Last updated on 2017-08-23 17:35:52 -0700

Qca-2.1.3

Introduction to Qca

Qca aims to provide a straightforward and cross-platform crypto API, using Qt datatypes and conventions. Qca separates the API from the implementation, using plugins known as Providers.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://download.kde.org/stable/qca/2.1.3/src/qca-2.1.3.tar.xz
Download MD5 sum: 5019cc29efcf828681cd93164238ce26
Download size: 672 KB
Estimated disk space required: 28 MB
Estimated build time: 1.5 SBU (additional 0.6 SBU for the tests)

Qca Dependencies

Required

Certificate Authority Certificates, CMake-3.9.1, Qt-5.9.1, and Which-2.21

Optional

Cyrus SASL-2.1.26, GnuPG-2.1.23, libgcrypt-1.8.0, libgpg-error-1.27, NSS-3.32, NSPR-4.16, OpenSSL-1.0.2l Libraries, p11-kit-0.23.8, Doxygen-1.8.13, and Which-2.21

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/qca

Installation of Qca

Fix the location of the CA certificates:

sed -i 's@ca-bundle.pem@ca-bundle.crt@' CMakeLists.txt

Install Qca by running the following commands:

mkdir build &&
cd    build &&

cmake -DCMAKE_INSTALL_PREFIX=$QT5DIR                             \
      -DCMAKE_BUILD_TYPE=Release                                 \
      -DQCA_MAN_INSTALL_DIR:PATH=/usr/share/man                  \
      -DOPENSSL_INCLUDE_DIR=/usr/include/openssl-1.0             \
      -DOPENSSL_SSL_LIBRARY=/usr/lib/openssl-1.0/libssl.so       \
      -DOPENSSL_CRYPTO_LIBRARY=/usr/lib/openssl-1.0/libcrypto.so \
      ..                                                         &&

make

To test the results, issue make test.

Now, as the root user:

make install

Command Explanations

-DCMAKE_BUILD_TYPE=Release: This switch is used to apply a higher level of compiler optimizations.

-DQCA_MAN_INSTALL_DIR:PATH=/usr/share/man: Install the qca man page in the normal location.

Installed Programs: mozcerts-qt5 and qcatool-qt5

Installed Libraries: libqca-qt5.so

Installed Directories: $QT5DIR/include/Qca-qt5, $QT5DIR/lib/cmake/Qca-qt5, and $QT5DIR/lib/qca-qt5

Short Descriptions

mozcerts-qt5	is a command line tool for converting certdata.txt into outfile.pem files.
qcatool-qt5	is a command line tool for performing various cryptographic operations with Qca.
`libqca-qt5.so`	is the Qt Cryptography Architecture (Qca) library.

Last updated on 2017-08-22 20:47:27 -0700

Talloc-2.1.10

Introduction to Talloc

Talloc provides a hierarchical, reference counted memory pool system with destructors. It is the core memory allocator used in Samba.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.samba.org/ftp/talloc/talloc-2.1.10.tar.gz
Download MD5 sum: 48b8822a76797bb143e3e38ed738c320
Download size: 432 KB
Estimated disk space required: 7.7 MB (with tests)
Estimated build time: 0.3 SBU (with tests)

Talloc Dependencies

Optional

docbook-xml-4.5, docbook-xsl-1.79.1 and libxslt-1.1.29 (To generate man pages), Python-2.7.13 (To build Python-2 module) and Python-3.6.2 (To build Python-3 module)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/talloc

Installation of Talloc

Install Talloc by running the following commands:

./configure --prefix=/usr &&
make

To check the results, issue make check.

Now, as the root user:

make install

Command Explanations

--extra-python=PYTHON: This switch enables building selected libraries for the specified additional version of Python (example: --extra-python=/usr/bin/python3).

Installed Programs: None

Installed Libraries: libpytalloc-util.cpython-35m-x86-64-linux-gnu.so, libpytalloc-util.so, libtalloc.so, talloc.so (Python-2 Module) and talloc.cpython-35m-x86_64-linux-gnu.so (Python-3 Module)

Installed Directories: None

Short Descriptions

libtalloc.so

contains a replacement for the Glibc malloc function.

Last updated on 2017-08-24 15:03:00 -0700

Wayland-1.14.0

Introduction to Wayland

Wayland is a project to define a protocol for a compositor to talk to its clients as well as a library implementation of the protocol.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://wayland.freedesktop.org/releases/wayland-1.14.0.tar.xz
Download MD5 sum: 0235f6075c32c3be61cff94fa0b9f108
Download size: 408 KB
Estimated disk space required: 12 MB (with tests)
Estimated build time: 0.2 SBU (with tests)

Wayland Dependencies

Required

libffi-3.2.1 and libxml2-2.9.4

Optional

Doxygen-1.8.13, Graphviz-2.40.1 and xmlto-0.0.28 (to build the API documentation) and docbook-xml-4.5, docbook-xsl-1.79.1 and libxslt-1.1.29 (to build the manual pages)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/wayland

Installation of Wayland

Install Wayland by running the following commands:

./configure --prefix=/usr    \
            --disable-static \
            --disable-documentation &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--disable-documentation: This switch is used to disable building of the API documentation. Remove it if you have installed optional dependencies.

Installed Programs: wayland-scanner

Installed Libraries: libwayland-client.so, libwayland-cursor.so, and libwayland-server.so

Installed Directories: /usr/share/wayland

Short Descriptions

wayland-scanner	is a tool to generate proxy methods in wayland-client-protocol.h and wayland-server-protocol.h
`libwayland-client.so`	contains API functions for writing Wayland applications.
`libwayland-cursor.so`	contains API functions for managing cursors in Wayland applications.
`libwayland-server.so`	contains API functions for writing Wayland compositors.

Last updated on 2015-07-31 23:26:22 -0500

Wayland-Protocols-1.10

Introduction to Wayland-Protocols

The Wayland-Protocols package contains additional Wayland protocols that add functionality outside of protocols already in the Wayland core.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://wayland.freedesktop.org/releases/wayland-protocols-1.10.tar.xz
Download MD5 sum: 84a7846c2b6a6a3e265fc9be36453e60
Download size: 116 KB
Estimated disk space required: 1.0 MB (with tests)
Estimated build time: less than 0.1 SBU (with tests)

Wayland-protocols Dependencies

Required

Wayland-1.14.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/wayland-protocols

Installation of Wayland-protocols

Install Wayland-protocols by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Installed Programs: None

Installed Libraries: None

Installed Directories: /usr/share/wayland-protocols

Last updated on 2017-08-20 20:24:54 -0700

wv-1.2.9

Introduction to wv

This package contains tools for reading information from an MS Word document.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.abisource.com/downloads/wv/1.2.9/wv-1.2.9.tar.gz
Download (FTP):
Download MD5 sum: dbccf2e9f747e50c913b7e3d126b73f7
Download size: 608 KB
Estimated disk space required: 25 MB
Estimated build time: 0.4 SBU

wv Dependencies

Required

libgsf-1.14.41 and libpng-1.6.31

Optional

libwmf

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/wv

Installation of wv

Install wv by running the following commands:

./configure --prefix=/usr --disable-static &&
make

This package does not have a testsuite.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: wvSummary and several other wv* programs which are deprecated in favour of abiword: see http://wvware.sourceforge.net/

Installed Library: libwv-1.2.so

Installed Directory: /usr/share/wv

Short Descriptions

wvSummary	displays the summary information from an MS Word document.
`libwv-1.2.so`	provides functions to access MS Word documents.

Last updated on 2017-08-29 10:55:51 -0700

Xapian-1.4.4

Introduction to xapian

Xapian is an open source search engine library.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://oligarchy.co.uk/xapian/1.4.4/xapian-core-1.4.4.tar.xz
Download MD5 sum: 919ad9a80a7c6a01ab4721670bb29cab
Download size: 2.7 MB
Estimated disk space required: 122 MB (add estimated 95 MB for tests)
Estimated build time: 0.5 SBU (add estimated 179 SBU for tests)

Xapian Dependencies

Optional

Valgrind-3.13.0 (for tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/xapian

Installation of Xapian

Install Xapian by running the following commands:

./configure --prefix=/usr    \
            --disable-static \
            --docdir=/usr/share/doc/xapian-core-1.4.4 &&
make

The regression tests are not recommended. On a fast (3.2 GHz i7) system they took over five hours and two of four tests (the valgrind tests) failed. To run the test suite anyway, issue: make check.

Now, as the root user:

make install

Installed Programs: copydatabase, delve, quest, simpleexpand, simpleindex, simplesearch, xapian-check, xapian-chert-update, xapian-compact, xapian-config, xapian-inspect, xapian-metadata, xapian-progsrv, xapian-replicate, xapian-replicate-server and xapian-tcpsrv

Installed Libraries: libxapian.so

Installed Directories: /usr/include/xapian, /usr/lib/cmake/xapian, and /usr/share/doc/xapian-core-1.4.4

Short Descriptions

copydatabase	perform a document-by-document copy of one or more Xapian databases.
delve	inspect the contents of a Xapian database.
quest	is a search command line tool.
simpleexpand	is a simple example program demonstrating query expansion.
simpleindex	index each paragraph of a text file as a Xapian document.
simplesearch	is a simple command line search utility.
xapian-check	check the consistency of a database or table.
xapian-chert-update	update a chert database to the new format keys.
xapian-compact	compact a database, or merge and compact several.
xapian-config	report information about the installed xapian.
xapian-inspect	inspect the contents of a flint table for development or debugging.
xapian-metadata	read and write user metadata.
xapian-progsrv	remote server for use with ProgClient.
xapian-replicate	replicate a database from a master server to a local copy.
xapian-replicate-server	service database replication requests from clients.
xapian-tcpsrv	is the TCP daemon for use with Xapian's remote backend.

Last updated on 2017-08-24 18:56:23 -0700

YAML-0.1.7

Introduction to YAML

The YAML package contains a C library for parsing and emitting YAML (YAML Ain't Markup Language).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://pyyaml.org/download/libyaml/yaml-0.1.7.tar.gz
Download MD5 sum: 1abf45bd3a96374fa55ca63b32f9f2f9
Download size: 516 KB
Estimated disk space required: 6.1 MB
Estimated build time: 0.1 SBU

YAML Dependencies

Optional

Doxygen-1.8.13

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/yaml

Installation of YAML

Install YAML by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: None

Installed Libraries: libyaml.so

Installed Directories: None

Short Descriptions

libyaml.so

contains API functions for parsing and emitting YAML.

Last updated on 2017-08-24 15:03:00 -0700

Chapter 10. Graphics and Font Libraries

Depending on what your system will be used for, you may or may not require the graphics and font libraries. Most desktop machines will want them for use with graphical applications. Most servers on the other hand, will not require them.

AAlib-1.4rc5

Introduction to AAlib

AAlib is a library to render any graphic into ASCII Art.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/aa-project/aalib-1.4rc5.tar.gz
Download MD5 sum: 9801095c42bba12edebd1902bcf0a990
Download size: 388 KB
Estimated disk space required: 6.5 MB
Estimated build time: 0.1 SBU

AAlib Dependencies

Optional

X Window System, slang-2.3.1, and GPM-1.20.7

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/aalib

Installation of AAlib

Fix a minor problem with the included m4 file:

sed -i -e '/AM_PATH_AALIB,/s/AM_PATH_AALIB/[&]/' aalib.m4

Install AAlib by running the following commands:

./configure --prefix=/usr             \
            --infodir=/usr/share/info \
            --mandir=/usr/share/man   \
            --disable-static          &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Programs: aafire, aainfo, aalib-config, aasavefont, and aatest

Installed Library: libaa.{so,a}

Installed Directories: None

Short Descriptions

aafire	is a demo of AAlib, rendering an animated fire in ASCII Art.
aainfo	provides information for your current settings related to AAlib.
aalib-config	provides configuration info for AAlib.
aasavefont	saves a font to a file.
aatest	shows the abilities of AAlib in a little test.
`libaa.{so,a}`	is a collection of routines to render any graphical input in portable format to ASCII Art. It can be used through many programs and has a very well documented API, so you can easily put it into your own programs.

Last updated on 2017-08-23 17:35:52 -0700

babl-0.1.30

Introduction to Babl

The Babl package is a dynamic, any to any, pixel format translation library.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://download.gimp.org/pub/babl/0.1/babl-0.1.30.tar.bz2
Download MD5 sum: fca6926a00130eeacc875cac5465c5e7
Download size: 603 KB
Estimated disk space required: 16 MB (with tests)
Estimated build time: 0.2 SBU (with tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/babl

Installation of Babl

Install Babl by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install &&

install -v -m755 -d /usr/share/gtk-doc/html/babl/graphics &&
install -v -m644 docs/*.{css,html} /usr/share/gtk-doc/html/babl &&
install -v -m644 docs/graphics/*.{html,png,svg} /usr/share/gtk-doc/html/babl/graphics

Command Explanations

install -v -m755 -d /usr/share/gtk-doc/html/babl/graphics: This and the subsequent commands install the library html documentation under /usr/share/gtk-doc/html where other gtk packages put the programmer-oriented documentation.

Installed Programs: None

Installed Libraries: libbabl-0.1.so and libraries in /usr/lib/babl-0.1

Installed Directories: /usr/{include,lib}/babl-0.1 and /usr/share/gtk-doc/html/babl

Short Descriptions

libbabl-0.1.so

contains functions to access BablFishes to convert between formats.

Last updated on 2017-08-28 19:49:07 -0700

Exiv2-0.25

Introduction to Exiv2

Exiv2 is a C++ library and a command line utility for managing image and video metadata.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.exiv2.org/exiv2-0.25.tar.gz
Download MD5 sum: 258d4831b30f75a01e0234065c6c2806
Download size: 5.2 MB
Estimated disk space required: 46 MB
Estimated build time: 1 SBU

Exiv2 dependencies

Optional

libssh

Optional for documentation

Doxygen-1.8.13, Graphviz-2.40.1, Python-3.6.2, and libxslt-1.1.29

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/exiv2

Installation of Exiv2

Install Exiv2 by running the following commands:

./configure --prefix=/usr     \
            --enable-video    \
            --enable-webready \
            --without-ssh     \
            --disable-static  &&

make

This package does not come with a test suite.

Now, as the root user:

make install &&
chmod -v 755 /usr/lib/libexiv2.so

Command Explanations

--enable-video: This switch enables managing video metadata.

--enable-webready: This switch enables managing web image metadata.

--without-ssh: This switch is necessary when webready is enabled and libssh is not installed. Libssh is required for ssh.

--disable-static: This switch prevents installation of static versions of the libraries.

--without-curl: This switch is necessary when webready is enabled and cURL-7.55.1 is not installed. Libcurl is required for http.

Installed Program: exiv2

Installed Library: libexiv2.so

Installed Directory: /usr/include/exiv2

Short Descriptions

exiv2

is a utility used to dump Exif data.

Last updated on 2017-08-26 21:18:25 -0700

FreeType-2.8

Introduction to FreeType2

The FreeType2 package contains a library which allows applications to properly render TrueType fonts.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/freetype/freetype-2.8.tar.bz2
Download MD5 sum: 2413ac3eaf508ada019c63959ea81a92
Download size: 1.8 MB
Estimated disk space required: 26 MB (with additional documentation)
Estimated build time: 0.2 SBU (with additional documentation)

Additional Downloads

Additional Documentation

Download (HTTP): https://downloads.sourceforge.net/freetype/freetype-doc-2.8.tar.bz2
Download MD5 sum: 961d5802bb6085ad91e0ab9fa99fbf39
Download size: 2.1 MB

FreeType2 Dependencies

Installation of FreeType2

If you downloaded the additional documentation, unpack it into the source tree using the following command:

tar -xf ../freetype-doc-2.8.tar.bz2 --strip-components=2 -C docs

Install FreeType2 by running the following commands:

sed -ri "s:.*(AUX_MODULES.*valid):\1:" modules.cfg &&

sed -r "s:.*(#.*SUBPIXEL_RENDERING) .*:\1:" \
    -i include/freetype/config/ftoption.h  &&

./configure --prefix=/usr --disable-static &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
install -v -m755 -d /usr/share/doc/freetype-2.8 &&
cp -v -R docs/*     /usr/share/doc/freetype-2.8

Command Explanations

sed -ri ...: First command enables GX/AAT and OpenType table validation and second command enables Subpixel Rendering. Note that Subpixel Rendering may have patent issues. Be sure to read the 'Other patent issues' part of http://www.freetype.org/patents.html before enabling this option.

--without-harfbuzz: If harfbuzz is installed prior to freetype without freetype support, use this switch to avoid a build failure.

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Program: freetype-config

Installed Library: libfreetype.so

Installed Directories: /usr/include/freetype2 and /usr/share/doc/freetype-2.8

Short Descriptions

freetype-config	is used to get FreeType compilation and linking information.
`libfreetype.so`	contains functions for rendering various font types, such as TrueType and Type1.

Last updated on 2017-08-20 15:06:11 -0700

Fontconfig-2.12.4

Introduction to Fontconfig

The Fontconfig package contains a library and support programs used for configuring and customizing font access.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.freedesktop.org/software/fontconfig/release/fontconfig-2.12.4.tar.bz2
Download MD5 sum: 29105662c7d319720e0088a0ac53f494
Download size: 1.5 MB
Estimated disk space required: 15 MB (with tests)
Estimated build time: 0.3 SBU (with tests)

Fontconfig Dependencies

Required

FreeType-2.8

Optional

DocBook-utils-0.6.14 and libxml2-2.9.4, texlive-20170524 (or install-tl-unx)

Note

If you have DocBook Utils installed and you remove the --disable-docs parameter from the configure command below, you must have SGMLSpm-1.1 and texlive-20170524 installed also, or the Fontconfig build will fail.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/Fontconfig

Installation of Fontconfig

Make sure the system regenerates src/fcobjshash.h.

rm -f src/fcobjshash.h

Install Fontconfig by running the following commands:

./configure --prefix=/usr        \
            --sysconfdir=/etc    \
            --localstatedir=/var \
            --disable-docs       \
            --docdir=/usr/share/doc/fontconfig-2.12.4 &&
make

To test the results, issue: make check.

Now, as the root user:

make install

If you did not remove the --disable-docs parameter from the configure command, you can install the pre-generated documentation by using the following commands as the root user:

install -v -dm755 \
        /usr/share/{man/man{3,5},doc/fontconfig-2.12.4/fontconfig-devel} &&
install -v -m644 fc-*/*.1         /usr/share/man/man1 &&
install -v -m644 doc/*.3          /usr/share/man/man3 &&
install -v -m644 doc/fonts-conf.5 /usr/share/man/man5 &&
install -v -m644 doc/fontconfig-devel/* \
                                  /usr/share/doc/fontconfig-2.12.4/fontconfig-devel &&
install -v -m644 doc/*.{pdf,sgml,txt,html} \
                                  /usr/share/doc/fontconfig-2.12.4

Command Explanations

--disable-docs: This switch avoids building the documentation (the release tarball includes pre-generated documentation).

Configuring Fontconfig

Config Files

/etc/fonts/*, /etc/fonts/conf.d/* and /usr/share/fontconfig/conf.avail/*

Configuration Information

The main configuration file for Fontconfig is /etc/fonts/fonts.conf. Generally you do not want to edit this file. It will also read /etc/fonts/local.conf and any files in /etc/fonts/conf.d. To put a new font directory in the configuration, create (or update) the /etc/fonts/local.conf file with your local information or add a new file in /etc/fonts/conf.d. The default location of fonts in Fontconfig is:

/usr/share/fonts
~/.local/share/fonts
~/.fonts (this is now deprecated, but for the moment it still works)

Fontconfig also ships many example configuration files in the /usr/share/fontconfig/conf.avail directory. Symlinking specific files to /etc/fonts/conf.d will enable them. The default setup is generally good enough for most users. See /etc/fonts/conf.d/README for a description of the configuration files.

More information about configuring Fontconfig can be found in the user's manual in file:///usr/share/doc/fontconfig-2.12.4/fontconfig-user.html

Installed Programs: fc-cache, fc-cat, fc-list, fc-match, fc-pattern, fc-query, fc-scan, and fc-validate

Installed Library: libfontconfig.so

Installed Directories: /etc/fonts, /usr/include/fontconfig, /usr/share/doc/fontconfig-2.12.4, /usr/share/fontconfig, /usr/share/xml/fontconfig, and /var/cache/fontconfig

Short Descriptions

fc-cache	is used to create font information caches.
fc-cat	is used to read font information caches.
fc-list	is used to create font lists.
fc-match	is used to match available fonts, or find fonts that match a given pattern.
fc-pattern	is used to parse pattern (empty pattern by default) and show the parsed result.
fc-query	is used to query fonts files and print resulting patterns.
fc-scan	is used to scan font files and directories, and print resulting patterns.
fc-validate	is used to validate font files.
`libfontconfig.so`	contains functions used by the Fontconfig programs and also by other programs to configure or customize font access.

Last updated on 2017-08-19 20:26:54 -0700

FriBidi-0.19.7

Introduction to FriBidi

The FriBidi package is an implementation of the Unicode Bidirectional Algorithm (BIDI). This is useful for supporting Arabic and Hebrew alphabets in other packages.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.fribidi.org/download/fribidi-0.19.7.tar.bz2
Download MD5 sum: 6c7e7cfdd39c908f7ac619351c1c5c23
Download size: 636 KB
Estimated disk space required: 6.7 MB (with tests)
Estimated build time: less than 0.1 SBU (with tests)

FriBidi Dependencies

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/fribidi

Installation of FriBidi

Install FriBidi by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Installed Program: fribidi

Installed Library: libfribidi.so

Installed Directory: /usr/include/fribidi

Short Descriptions

fribidi	is a command-line interface to the `libfribidi` library and can be used to convert a logical string to visual output.
`libfribidi.so`	contains functions used to implement the Unicode Bidirectional Algorithm.

Last updated on 2017-08-26 15:00:55 -0700

gegl-0.3.20

Introduction to gegl

This package provides the GEneric Graphics Library, which is a graph based image processing format.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://download.gimp.org/pub/gegl/0.3/gegl-0.3.20.tar.bz2
Download MD5 sum: 5a31ebb855f525fecedccf6b84be4a07
Download size: 5.6 MB
Estimated disk space required: 140 MB (add 21 MB for tests)
Estimated build time: 1.4 SBU (add 0.4 SBU for tests)

gegl Dependencies

Required

babl-0.1.30 and JSON-GLib-1.2.8

Optional

asciidoc-8.6.9, Cairo-1.14.10, Enscript-1.6.6, Exiv2-0.25, FFmpeg-3.3.3, gdk-pixbuf-2.36.8, Graphviz-2.40.1, libjpeg-turbo-1.5.2, libpng-1.6.31, librsvg-2.40.18, libwebp-0.6.0, Lua-5.3.4, Pango-1.40.10, Python-2.7.13, Ruby-2.4.1, SDL-1.2.15, gobject-introspection-1.52.1, Vala-0.36.4, w3m-0.5.3, gexiv2, lensfun, libopenraw, libspiro, libumfpack, MRG, OpenCL (for tests), and OpenEXR

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/gegl

Installation of gegl

Install gegl by running the following commands:

./configure --prefix=/usr &&
LC_ALL=en_US make

To test the results, issue: make check.

Now, as the root user:

make install &&
install -v -m644 docs/*.{css,html} /usr/share/gtk-doc/html/gegl &&
install -d -v -m755 /usr/share/gtk-doc/html/gegl/images &&
install -v -m644 docs/images/*.{png,ico,svg} /usr/share/gtk-doc/html/gegl/images

Command Explanations

install -v -m644/docs/*/{css,html} ...: This and the subsequent commands install all the provided documentation instead of only operations.html and the stylesheet gegl.css.

--without-vala: Do not create a vala API - use this if vapigen breaks the build.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

LC_ALL=en_US: In some locales with Ruby-2.4.1 installed, one build component fails and prevents completion of the procedure. Using this variable avoids the problem.

Installed Programs: gegl

Installed Libraries: libgegl-0.2.so and libraries in /usr/lib/gegl-0.2

Installed Directories: /usr/include/gegl-0.2

Short Descriptions

gegl	is a commandline tool for working with the XML data model.
`libgegl-0.2.so`	provides infrastructure to do demand based cached non destructive image editing on larger than RAM buffers.

Last updated on 2017-08-28 19:49:07 -0700

giflib-5.1.4

Introduction to giflib

The giflib package contains libraries for reading and writing GIFs as well as programs for converting and working with GIF files.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/giflib/giflib-5.1.4.tar.bz2
Download (HTTP) MD5 sum: 2c171ced93c0e83bb09e6ccad8e3ba2b
Download (HTTP) size: 625 KB
Estimated disk space required: 7.6 MB (with documentation and tests)
Estimated build time: 0.1 SBU (with documentation and tests)

giflib Dependencies

Optional

xmlto-0.0.28 (for html documentation)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/giflib

Installation of giflib

Install giflib by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check-TESTS. Test suite results are kept in test.sh.log.

Now, as the root user:

make install

If xmlto-0.0.28 is installed, then the API documentation has been built. If you wish to install the distributed and the just built documentations, issue, as the root user:

find doc \( -name Makefile\* -o -name \*.1 \
         -o -name \*.xml \) -exec rm -v {} \; &&

install -v -dm755 /usr/share/doc/giflib-5.1.4 &&
cp -v -R doc/* /usr/share/doc/giflib-5.1.4

Command Explanations

find doc ... -exec rm -v {} \;: This command removes Makefiles, man and xml files from the documentation directory that would otherwise be installed by the commands that follow.

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: gif2rgb, gifbuild, gifclrmp, gifecho, giffix, gifinto, giftext and giftool

Installed Library: libgif.so

Installed Directory: /usr/share/doc/giflib-5.1.4

Short Descriptions

gif2rgb	converts images saved as GIF to 24-bit RGB images.
gifbuild	dumps GIF data in a textual format, or undumps it to a GIF.
gifclrmp	modifies GIF image colormaps.
gifecho	generates a GIF from ASCII text.
giffix	clumsily attempts to fix truncated GIF images.
gifinto	is an end-of-pipe fitting for GIF-processing pipelines.
giftext	prints (text only) general information about a GIF file.
giftool	is a GIF transformation tool.
`libgif.so`	contains API functions required by the giflib programs and any other programs needing library functionality to read, write and manipulate GIF images.

Last updated on 2017-08-21 23:29:00 -0700

Graphite2-1.3.10

Introduction to Graphite2

Graphite2 is a rendering engine for graphite fonts. These are TrueType fonts with additional tables containing smart rendering information and were originally developed to support complex non-Roman writing systems. They may contain rules for e.g. ligatures, glyph substitution, kerning, justification - this can make them useful even on text written in Roman writing systems such as English. Note that firefox by default provides an internal copy of the graphite engine and cannot use a system version (although it can now be patched to use it), but it too should benefit from the availability of graphite fonts.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/silnrsi/graphite/releases/download/1.3.10/graphite2-1.3.10.tgz
Download MD5 sum: b39d5ed21195f8b709bcee548c87e2b5
Download size: 3.8 MB
Estimated disk space required: 21 MB (with tests, add 1.5 MB for docs)
Estimated build time: 0.2 SBU (with tests, add 0.1 SBU for docs)

Graphite2 Dependencies

Required

Optional

FreeType-2.8, Python-2.7.13, and silgraphite to build the comparerender test and benchmarking tool, and if that is present, HarfBuzz-1.4.8 to add more functionality to it (this is a circular dependency, you would need to first build graphite2 without harfbuzz).

To build the documentation: asciidoc-8.6.9, Doxygen-1.8.13, texlive-20170524 (or install-tl-unx), and dblatex (for PDF docs)

To execute the test suite you will need FontTools (Python 2 module), otherwise, the "cmp" tests fail.

Optional (at runtime)

You will need at least one suitable graphite font for the package to be useful.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/graphite2

Installation of Graphite2

Some tests fail if FontTools (Python 2 module) is not installed. These tests can be removed with:

sed -i '/cmptest/d' tests/CMakeLists.txt

Install Graphite2 by running the following commands:

mkdir build &&
cd    build &&

cmake -DCMAKE_INSTALL_PREFIX=/usr .. &&
make

If you wish to build the documentation, issue:

make docs

To test the results, issue: make test.

Now, as the root user:

make install

If you built the documentation, install, as the root user:

install -v -d -m755 /usr/share/doc/graphite2-1.3.10 &&

cp      -v -f    doc/{GTF,manual}.html \
                    /usr/share/doc/graphite2-1.3.10 &&
cp      -v -f    doc/{GTF,manual}.pdf \
                    /usr/share/doc/graphite2-1.3.10

Command Explanations

-DCMAKE_VERBOSE_MAKEFILE=ON: This switch turns on build verbose mode.

Installed Programs: gr2fonttest, and optionally comparerender

Installed Libraries: libgraphite2.so

Installed Directories: /usr/{include,share}/graphite2 and optionally /usr/share/doc/graphite2-1.3.10

Short Descriptions

comparerender	is a test and benchmarking tool.
gr2fonttest	is a diagnostic console tool for graphite fonts.
`libgraphite2.so`	is a rendering engine for graphite fonts.

Last updated on 2017-08-19 15:43:35 -0700

HarfBuzz-1.4.8

Introduction to Harfbuzz

The HarfBuzz package contains an OpenType text shaping engine.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.freedesktop.org/software/harfbuzz/release/harfbuzz-1.4.8.tar.bz2
Download MD5 sum: d1aa446e1e65717311c15d9ac0cf31ee
Download size: 1.5 MB
Estimated disk space required: 30 MB (add 20 MB for tests)
Estimated build time: 0.3 SBU (add 0.2 SBU for tests)

HarfBuzz Dependencies

Optional

Cairo-1.14.10, gobject-introspection-1.52.1, GTK-Doc-1.26, and Graphite2-1.3.10

Warning

Recommended dependencies are not strictly required to build the package. However, you might not get expected results at runtime if you don't install them. Please do not report bugs with this package if you have not installed the recommended dependencies.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/harfbuzz

Installation of HarfBuzz

Install HarfBuzz by running the following commands:

./configure --prefix=/usr --with-gobject &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--with-gobject: This switch enables building of the HarfBuzz GObject wrapper. Remove it if you did not install GLib.

--with-graphite2: This switch enables Graphite2 support.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: hb-ot-shape-closure, hb-shape, and hb-view (only if cairo is installed)

Installed Libraries: libharfbuzz.so, libharfbuzz-gobject.so and libharfbuzz-icu.so

Installed Directories: /usr/{include,share/gtk-doc/html}/harfbuzz

Short Descriptions

hb-ot-shape-closure	gives the set of characters contained in a string, represented as single characters and/or single character names. Example: hb-ot-shape-closure /usr/share/fonts/dejavu/DejaVuSans.ttf "Hello World.".
hb-shape	is used for the conversion of text strings into positioned glyphs.
hb-view	may be used for a graphical view of a string shape, using a particular font, as a set of glyphs. Output format is automatically defined by the file extension, the supported ones being ansi/png/svg/pdf/ps/eps. Example: hb-view --output-file=hello.png /usr/share/fonts/dejavu/DejaVuSans.ttf "Hello World.".
`libharfbuzz.so`	HarfBuzz text shaping library.
`libharfbuzz-gobject.so`	HarfBuzz text shaping library GObject integration.
`libharfbuzz-icu.so`	HarfBuzz text shaping library ICU integration.

Last updated on 2017-08-19 20:26:54 -0700

IJS-0.35

Introduction to IJS

The IJS package contains a library which implements a protocol for transmission of raster page images.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.openprinting.org/download/ijs/download/ijs-0.35.tar.bz2
Download MD5 sum: 896fdcb7a01c586ba6eb81398ea3f6e9
Download size: 252 KB
Estimated disk space required: 2.2 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/ijs

Installation of IJS

Install IJS by running the following commands:

./configure --prefix=/usr \
            --mandir=/usr/share/man \
            --enable-shared \
            --disable-static &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: ijs_client_example, ijs-config and ijs_server_example

Installed Library: libijs.so

Installed Directory: /usr/include/ijs

Short Descriptions

ijs-config	is a program that is used to determine the compiler and linker flags that should be used to compile and link programs that use IJS.
`libijs.so`	contains the IJS API functions.

Last updated on 2017-08-28 18:17:24 -0700

JasPer-2.0.12

Introduction to JasPer

The JasPer Project is an open-source initiative to provide a free software-based reference implementation of the JPEG-2000 codec.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.ece.uvic.ca/~frodo/jasper/software/jasper-2.0.12.tar.gz
Download MD5 sum: b839a8bf418a64aa2d06413b23dd5ab3
Download size: 1.6 MB
Estimated disk space required: 11 MB (with tests)
Estimated build time: 0.3 SBU (with tests)

JasPer Dependencies

Required

LibRaw-demosaic-pack-GPL2 and LibRaw-demosaic-pack-GPL3

Optional

Freeglut-3.0.0 (required for jiv), Doxygen-1.8.13 (needed for generating html documentation), and texlive-20170524 (needed to regnerate the pdf documentation)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/jasper

Installation of JasPer

mkdir BUILD &&
cd    BUILD &&

cmake -DCMAKE_INSTALL_PREFIX=/usr    \
      -DCMAKE_BUILD_TYPE=Release     \
      -DCMAKE_SKIP_INSTALL_RPATH=YES \
      -DCMAKE_INSTALL_DOCDIR=/usr/share/doc/jasper-2.0.12 \
      ..  &&
make

To test the results, issue: make test.

Now, as the root user:

make install

Command Explanations

-DCMAKE_SKIP_INSTALL_RPATH=YES: This option removes embedded library search paths.

Installed Programs: imgcmp, imginfo, jasper, and jiv

Installed Library: libjasper.so

Installed Directories: /usr/include/jasper and /usr/share/doc/jasper-2.0.12

Short Descriptions

imgcmp	compares two images of the same geometry.
imginfo	displays information about an image.
jasper	converts images between formats (BMP, JPS, JPC, JPG, PGX, PNM, MIF, and RAS).
jiv	displays images.
`libjasper.so`	is a library used by programs for reading and writing JPEG2000 format files.

Last updated on 2017-08-21 23:29:00 -0700

Little CMS-1.19

Introduction to Little CMS

The Little CMS library is used by other programs to provide color management facilities.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/lcms/lcms-1.19.tar.gz
Download MD5 sum: 8af94611baf20d9646c7c2c285859818
Download size: 927 KB
Estimated disk space required: 27 MB
Estimated build time: 0.5 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/lcms-1.19-cve_2013_4276-1.patch

Little CMS Dependencies

Optional

LibTIFF-4.0.8, libjpeg-turbo-1.5.2, and Python-2.7.13 (with SWIG-3.0.12 also)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/lcms

Installation of Little CMS

Install Little CMS by running the following commands:

patch -Np1 -i ../lcms-1.19-cve_2013_4276-1.patch &&

./configure --prefix=/usr --disable-static       &&
make

To test the results, issue: make check.

Now, as the root user:

make install &&
install -v -m755 -d /usr/share/doc/lcms-1.19 &&
install -v -m644    README.1ST doc/* \
                    /usr/share/doc/lcms-1.19

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--with-python: Use this parameter if Python and SWIG are installed.

Installed Programs: icc2ps, icclink, icctrans, wtpt and optionally, jpegicc, tiffdiff and tifficc

Installed Libraries: liblcms.so and the optional _lcms.so Python module

Installed Directory: /usr/share/doc/lcms-1.19

Short Descriptions

icc2ps	generates PostScript CRD or CSA from ICC profiles.
icclink	links two or more profiles into a single device link profile.
icctrans	is a color space conversion calculator.
jpegicc	is an ICC profile applier for JPEG files.
tifficc	is an ICC profile applier for TIFF files.
tiffdiff	A TIFF compare utility
wtpt	shows media white of profiles, identifying black body locus.
`liblcms.so`	is used by the lcms programs as well as other programs to provide color management facilities.

Last updated on 2017-08-22 13:27:15 -0700

Little CMS-2.8

Introduction to Little CMS2

The Little Color Management System is a small-footprint color management engine, with special focus on accuracy and performance. It uses the International Color Consortium standard (ICC), which is the modern standard for color management.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/lcms/lcms2-2.8.tar.gz
Download MD5 sum: 87a5913f1a52464190bb655ad230539c
Download size: 6.4 MB
Estimated disk space required: 21 MB (with the tests)
Estimated build time: 0.2 SBU (with the tests)

Little CMS2 Dependencies

Optional

libjpeg-turbo-1.5.2 and LibTIFF-4.0.8

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/lcms2

Installation of Little CMS2

Install Little CMS2 by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: jpgicc, linkicc, psicc, tificc, and transicc

Installed Library: liblcms2.so

Installed Directories: None

Short Descriptions

jpgicc	is the Little CMS ICC profile applier for JPEG.
linkicc	is the Little CMS ICC device link generator
psicc	is the Little CMS ICC PostScript generator.
tificc	is the Little CMS ICC tiff generator.
transicc	is the Little CMS ColorSpace conversion calculator.
`liblcms2.so`	contains functions implement the lcms2 API.

Last updated on 2017-08-20 15:06:11 -0700

libexif-0.6.21

Introduction to libexif

The libexif package contains a library for parsing, editing, and saving EXIF data. Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. All EXIF tags described in EXIF standard 2.1 are supported.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/libexif/libexif-0.6.21.tar.bz2
Download MD5 sum: 27339b89850f28c8f1c237f233e05b27
Download size: 1.4 MB
Estimated disk space required: 17 MB
Estimated build time: 0.2 SBU

libexif Dependencies

Optional (to Build Documentation)

Doxygen-1.8.13 and Graphviz-2.40.1

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libexif

Installation of libexif

Install libexif by running the following commands:

./configure --prefix=/usr \
            --with-doc-dir=/usr/share/doc/libexif-0.6.21 \
            --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Documentation was built and installed if you have the dependencies shown above installed. If you don't have the dependencies installed, there is a compressed tarball in the source tree doc directory that can be unpacked into /usr/share/doc/libexif-0.6.21.

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: None

Installed Library: libexif.so

Installed Directories: /usr/include/libexif and /usr/share/doc/libexif-0.6.21

Short Descriptions

libexif.so

contains functions used for parsing, editing, and saving EXIF data.

Last updated on 2017-08-21 19:54:38 -0700

libjpeg-turbo-1.5.2

Introduction to libjpeg-turbo

libjpeg-turbo is a fork of the original IJG libjpeg which uses SIMD to accelerate baseline JPEG compression and decompression. libjpeg is a library that implements JPEG image encoding, decoding and transcoding.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/libjpeg-turbo/libjpeg-turbo-1.5.2.tar.gz
Download MD5 sum: 6b4923e297a7eaa255f08511017a8818
Download size: 1.6 MB
Estimated disk space required: 15 MB (with tests)
Estimated build time: 0.5 SBU (with tests)

libjpeg-turbo Dependencies

Required

NASM-2.13.01 or yasm-1.3.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libjpeg-turbo

Installation of libjpeg-turbo

Install libjpeg-turbo by running the following commands:

./configure --prefix=/usr           \
            --mandir=/usr/share/man \
            --with-jpeg8            \
            --disable-static        \
            --docdir=/usr/share/doc/libjpeg-turbo-1.5.2 &&
make

To test the results, issue: make test.

Note

If installing libjpeg-turbo over an older jpeg installation, not all library symbolic links are updated properly. To fix this before installation, run the following as the root user:

rm -f /usr/lib/libjpeg.so*

Now, as the root user:

make install

Command Explanations

--with-jpeg8: This switch enables compatibility with libjpeg version 8.

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: cjpeg, djpeg, jpegtran, rdjpgcom, tjbench, and wrjpgcom

Installed Libraries: libjpeg.so and libturbojpeg.so

Installed Directories: /usr/share/doc/libjpeg-turbo-1.5.2

Short Descriptions

cjpeg	compresses image files to produce a JPEG/JFIF file on the standard output. Currently supported input file formats are: PPM (PBMPLUS color format), PGM (PBMPLUS gray-scale format), BMP, and Targa.
djpeg	decompresses image files from JPEG/JFIF format to either PPM (PBMPLUS color format), PGM (PBMPLUS gray-scale format), BMP, or Targa format.
jpegtran	is used for lossless transformation of JPEG files.
rdjpgcom	displays text comments from within a JPEG file.
tjbench	is used to benchmark the performance of libjpeg-turbo.
wrjpgcom	inserts text comments into a JPEG file.
`libjpeg.so`	contains functions used for reading and writing JPEG images.

Last updated on 2017-08-20 15:06:11 -0700

libmng-2.0.3

Introduction to libmng

The libmng libraries are used by programs wanting to read and write Multiple-image Network Graphics (MNG) files which are the animation equivalents to PNG files.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/libmng/libmng-2.0.3.tar.xz
Download MD5 sum: e9e899adb1b681b17f14d91e261878c5
Download size: 932 KB
Estimated disk space required: 15 MB
Estimated build time: 0.1 SBU

libmng Dependencies

Required

libjpeg-turbo-1.5.2 and Little CMS-2.8

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libmng

Installation of libmng

Install libmng by running the following commands:

./configure --prefix=/usr --disable-static &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&

install -v -m755 -d        /usr/share/doc/libmng-2.0.3 &&
install -v -m644 doc/*.txt /usr/share/doc/libmng-2.0.3

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: None

Installed Library: libmng.so

Installed Directory: /usr/share/doc/libmng-2.0.3

Short Descriptions

libmng.so

provides functions for programs wishing to read and write MNG files which are animation files without the patent problems associated with certain other formats.

Last updated on 2017-08-22 13:27:15 -0700

libpng-1.6.31

Introduction to libpng

The libpng package contains libraries used by other programs for reading and writing PNG files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/libpng/libpng-1.6.31.tar.xz
Download MD5 sum: 1b34eab440263e32cfa39d19413fad54
Download size: 972 KB
Estimated disk space required: 14 MB (with tests)
Estimated build time: 0.8 SBU (with tests)

Additional Downloads

Recommended patch to include animated png functionality in libpng (required to use the system libpng in Firefox, Seamonkey, and Thunderbird): https://downloads.sourceforge.net/apng/libpng-1.6.31-apng.patch.gz

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libpng

Installation of libpng

If you want to patch libpng to support apng files, apply it here:

gzip -cd ../libpng-1.6.31-apng.patch.gz | patch -p0

Install libpng by running the following commands:

LIBS=-lpthread ./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install &&
mkdir -v /usr/share/doc/libpng-1.6.31 &&
cp -v README libpng-manual.txt /usr/share/doc/libpng-1.6.31

Command Explanations

LIBS=-lpthread: Ensure the libpthread library is used to allow parallelism on systems with multiple cores.

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: libpng-config (symlink), libpng16-config, pngfix and png-fix-itxt

Installed Libraries: libpng.so

Installed Directories: /usr/include/libpng16 and /usr/share/doc/libpng-1.6.31

Short Descriptions

pngfix	tests, optimizes and optionally fixes the zlib header in PNG files. Optionally, when fixing, strips ancillary chunks from the file.
png-fix-itxt	fixes PNG files that have an incorrect length field in the iTXt chunks.
libpng-config	is a shell script that provides configuration information for applications wanting to use libpng.
`libpng.so`	contain routines used to create and manipulate PNG format graphics files.

Last updated on 2017-08-19 15:43:35 -0700

libraw-0.18.2

Introduction to libraw

Libraw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.libraw.org/data/LibRaw-0.18.2.tar.gz
Download MD5 sum: 7bd923ea7c9cc71897b005be46c01b2b
Download size: 1.2 MB
Estimated disk space required: 19 MB
Estimated build time: 0.2 SBU

libraw Dependencies

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libraw

Installation of libraw

Install libraw by running the following commands:

./configure --prefix=/usr    \
            --enable-jpeg    \
            --enable-jasper  \
            --enable-lcms    \
            --disable-static \
            --docdir=/usr/share/doc/libraw-0.18.2 &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

CXX="g++ -Wno-narrowing": This environment variable disables a warning that prevents the package from compiling.

--enable-jpeg: This switch enables support for jpeg. Remove if you don't have libjpeg-turbo-1.5.2 installed.

--enable-jasper: This switch enables support for jasper. Remove if you don't have JasPer-2.0.12 installed.

--enable-lcms: This switch enables support for Little CMS2. Remove if you don't have Little CMS-2.8 installed.

--disable-static: This switch prevents installation of static versions of the libraries.

Note

All the installed programs are examples of libraw use.

Installed Programs: 4channels, dcraw_emu, dcraw_half, half_mt, mem_image, multirender_test, postprocessing_benchmark, raw-identify, simple_dcraw, and unprocessed_raw

Installed Library: libraw.so and libraw_r.so

Installed Directories: /usr/include/libraw and /usr/share/doc/libraw-0.18.2

Short Descriptions

4channels	generates four TIFF files from RAW data, one file per channel.
dcraw_half	emulates "dcraw -h" (see DCRAW manpage).
mem_image	emulates "dcraw [-4] [-6] [-e]" (see DCRAW manpage).
postprocessing_benchmark	creates eight different renderings from one source file. The first and fourth one should be identical.
simple_dcraw	emulates call to "dcraw [-D] [-T] [-v] [-e] [-4]" (see DCRAW manpage).
dcraw_emu	is an almost complete dcraw emulator (see DCRAW manpage).
half_mt	emulates call to "dcraw -h [-w] [-a] [-v]" (see DCRAW manpage).
multirender_test	creates eight different renderings from one source file. The first and fourth one should be identical.
raw-identify	emulates call to "dcraw -i [-v]" (see DCRAW manpage).
unprocessed_raw	generates unprocessed raw image: with masked pixels and without black subtraction.

Last updated on 2017-08-26 21:18:25 -0700

librsvg-2.40.18

Introduction to librsvg

The librsvg package contains a library and tools used to manipulate, convert and view Scalable Vector Graphic (SVG) images.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/librsvg/2.40/librsvg-2.40.18.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/librsvg/2.40/librsvg-2.40.18.tar.xz
Download MD5 sum: eaa5c8a8bbe2600ab5194c0d3b1b621b
Download size: 561 KB
Estimated disk space required: 14 MB (with tests)
Estimated build time: 0.2 SBU (with tests)

librsvg Dependencies

Required

gdk-pixbuf-2.36.8, libcroco-0.6.12 and Pango-1.40.10

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/librsvg

Installation of librsvg

Install librsvg by running the following commands:

sed -i 's/ --nogtkinit//' doc/Makefile.in &&

./configure --prefix=/usr    \
            --enable-vala    \
            --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

sed ... doc/Makefile.in: This change removes a switch that prevents building the API documentation (if requested).

--enable-vala: This switch enables building of the Vala bindings. Remove this switch if you don't have Vala-0.36.4 installed.

--disable-static: This switch prevents installation of static versions of the libraries.

--disable-introspection: Use this switch if you have not installed Gobject Introspection.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: rsvg-convert and rsvg-view-3

Installed Library: librsvg-2.so and libpixbufloader-svg.so

Installed Directories: /usr/include/librsvg-2.0 and /usr/share/gtk-doc/html/rsvg-2.0

Short Descriptions

rsvg-convert	is used to convert images into PNG, PDF, PS, SVG and other formats.
rsvg-view-3	is a simple GTK+ 3 application that can be used to view an SVG file.
`librsvg-2.so`	provides the functions to render Scalable Vector Graphics.
`libpixbufloader-svg.so`	is the Gdk Pixbuf plugin that allows GTK+ applications to render Scalable Vector Graphics images.

Last updated on 2017-09-01 14:59:47 -0700

LibTIFF-4.0.8

Introduction to LibTIFF

The LibTIFF package contains the TIFF libraries and associated utilities. The libraries are used by many programs for reading and writing TIFF files and the utilities are used for general work with TIFF files.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://download.osgeo.org/libtiff/tiff-4.0.8.tar.gz
Download MD5 sum: 2a7d1c1318416ddf36d5f6fa4600069b
Download size: 2.0 MB
Estimated disk space required: 24 MB (with tests)
Estimated build time: 0.3 SBU (with tests)

LibTIFF Dependencies

Optional

Freeglut-3.0.0 (required for tiffgt), libjpeg-turbo-1.5.2 and JBIG-KIT

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libtiff

Installation of LibTIFF

Install LibTIFF by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: bmp2tiff, fax2ps, fax2tiff, gif2tiff, pal2rgb, ppm2tiff, ras2tiff, raw2tiff, rgb2ycbcr, thumbnail, tiff2bw, tiff2pdf, tiff2ps, tiff2rgba, tiffcmp, tiffcp, tiffcrop, tiffdither, tiffdump, tiffgt, tiffinfo, tiffmedian, tiffset and tiffsplit

Installed Libraries: libtiff.so and libtiffxx.so

Installed Directory: /usr/share/doc/tiff-4.0.8

Short Descriptions

bmp2tiff	converts a Microsoft Windows Device Independent Bitmap image file to a TIFF image.
fax2ps	converts a TIFF facsimile to compressed PostScript file.
fax2tiff	creates a TIFF Class F fax file from raw fax data.
gif2tiff	creates a TIFF file from a GIF87 format image file.
pal2rgb	converts a palette color TIFF image to a full color image.
ppm2tiff	creates a TIFF file from a PPM image file.
ras2tiff	creates a TIFF file from a Sun rasterfile.
raw2tiff	converts a raw byte sequence into TIFF.
rgb2ycbcr	converts non-YCbCr TIFF images to YCbCr TIFF images.
thumbnail	creates a TIFF file with thumbnail images.
tiff2bw	converts a color TIFF image to grayscale.
tiff2pdf	converts a TIFF image to a PDF document.
tiff2ps	converts a TIFF image to a PostScript file.
tiff2rgba	converts a wide variety of TIFF images into an RGBA TIFF image.
tiffcmp	compares two TIFF files.
tiffcp	copies (and possibly converts) a TIFF file.
tiffcrop	selects, copies, crops, converts, extracts and/or processes one or more TIFF files.
tiffdither	converts a grayscale image to bilevel using dithering.
tiffdump	prints verbatim information about TIFF files.
tiffgt	displays an image stored in a TIFF file.
tiffinfo	prints information about TIFF files.
tiffmedian	applies the median cut algorithm to data in a TIFF file.
tiffset	sets the value of a TIFF header to a specified value.
tiffsplit	splits a multi-image TIFF into single-image TIFF files.
`libtiff.so`	contains the API functions used by the libtiff programs as well as other programs to read and write TIFF files.
`libtiffxx.so`	contains the C++ API functions used by programs to read and write TIFF files.

Last updated on 2017-08-20 20:24:54 -0700

libwebp-0.6.0

Introduction to libwebp

The libwebp package contains a library and support programs to encode and decode images in WebP format.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://downloads.webmproject.org/releases/webp/libwebp-0.6.0.tar.gz
Download MD5 sum: 19a6e926ab1721268df03161b84bb4a0
Download size: 1.2 MB
Estimated disk space required: 27 MB
Estimated build time: 0.3 SBU

libwebp Dependencies

Optional

Freeglut-3.0.0 and giflib-5.1.4

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libwebp

Installation of libwebp

Install libwebp by running the following commands:

Note

If you are updating from libwebp-0.4.x or 0.5.x, and wish that installed applications link to the new version 0.6.x, they need to be reinstalled.

./configure --prefix=/usr           \
            --enable-libwebpmux     \
            --enable-libwebpdemux   \
            --enable-libwebpdecoder \
            --enable-libwebpextras  \
            --enable-swap-16bit-csp \
            --disable-static        &&

make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--enable-swap-16bit-csp: This switch enables byte swap for 16 bit colorspaces.

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: cwebp, dwebp, gif2webp, vwebp, and webpmux

Installed Library: libwebpdecoder.so, libwebpdemux.so, libwebpextras.so, libwebpmux.so, and libwebp.so

Installed Directory: /usr/include/webp

Short Descriptions

cwebp	compresses an image using the WebP format.
dwebp	decompresses WebP files into PNG, PAM, PPM or PGM images.
gif2webp	converts a GIF image to a WebP image.
vwebp	decompress a WebP file and display it in a window.
webpmux	creates animated WebP files from non-animated WebP images, extracts frames from animated WebP images, and manages XMP/EXIF metadata and ICC profile.
`libwebp.so`	contains the API functions for WebP encoding and decoding.

Last updated on 2017-08-21 23:29:00 -0700

newt-0.52.20

Introduction to newt

Newt is a programming library for color text mode, widget based user interfaces. It can be used to add stacked windows, entry widgets, checkboxes, radio buttons, labels, plain text fields, scrollbars, etc., to text mode user interfaces. Newt is based on the S-Lang library.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://releases.pagure.org/newt/newt-0.52.20.tar.gz
Download MD5 sum: 70b288f821234593a8e7920e435b259b
Download size: 180 KB
Estimated disk space required: 4.1 MB
Estimated build time: less than 0.1 SBU

Newt Dependencies

Required

popt-1.16 and slang-2.3.1

Optional

Python-2.7.13 and Python-3.6.2

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/newt

Installation of newt

Install newt by running the following command:

sed -e 's/^LIBNEWT =/#&/' \
    -e '/install -m 644 $(LIBNEWT)/ s/^/#/' \
    -e 's/$(LIBNEWT)/$(LIBNEWTSONAME)/g' \
    -i Makefile.in                           &&

./configure --prefix=/usr --with-gpm-support &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

sed -e ... -i Makefile.in: Disables installation of a static library.

Installed Programs: whiptail

Installed Library: libnewt.so, whiptcl.so, and /usr/lib/python{2.7,3.6}/site-packages/_snack.so

Installed Directories: None

Short Descriptions

whiptail	displays dialog boxes from shell scripts.
`libnewt.so`	is the library for color text mode, widget based user interfaces.

Last updated on 2017-08-28 23:13:49 -0700

opencv-3.3.0

Introduction to opencv

The opencv package contains graphics libraries mainly aimed at real-time computer vision.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/opencvlibrary/opencv-3.3.0.zip
Download MD5 sum: cc586ebe960a7cdd87100e89088abc06
Download size: 81 MB
Estimated disk space required: 851 MB
Estimated build time: 2.1 SBU (using parallelism=4)

Additional Downloads

Optional file (x86_64 only; will be downloaded when running cmake if not present): https://raw.githubusercontent.com/opencv/opencv_3rdparty/a62e20676a60ee0ad6581e217fe7e4bada3b95db/ippicv/ippicv_2017u2_lnx_intel64_20170418.tgz
Optional additional modules: https://github.com/opencv/opencv_contrib/archive/3.3.0/opencv_contrib-3.3.0.tar.gz

opencv Dependencies

Required

CMake-3.9.1 and UnZip-6.0

Optional

apache-ant-1.10.1, Doxygen-1.8.13, Java-1.8.0.141, Python-3.6.2, Cuda, Eigen, OpenEXR, GCD, GDAL, GigEVisionSDK, JACK, libdc1394, libgphoto2, NumPy, OpenNI, PlanetUML, PvAPI, Threading Building Blocks (TBB), UniCap, VTK - The Visualization Toolkit, and XIMEA

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/opencv

Installation of opencv

If the optional Integrated Performance Primitives (IPP) package has been downloaded, put it in place so the cmake script does not try to download it again:

ipp_file=ippicv_2017u2_lnx_intel64_20170418.tgz &&
ipp_hash=$(md5sum ../$ipp_file | cut -d" " -f1) &&
ipp_dir=.cache/ippicv                           &&

mkdir -p $ipp_dir &&
cp ../$ipp_file $ipp_dir/$ipp_hash-$ipp_file

If needed, unpack the additional modules package:

tar xf ../opencv_contrib-3.3.0.tar.gz

Install opencv by running the following commands:

mkdir build &&
cd    build &&

cmake -DCMAKE_INSTALL_PREFIX=/usr      \
      -DCMAKE_BUILD_TYPE=Release       \
      -DENABLE_CXX11=ON                \
      -DBUILD_PERF_TESTS=OFF           \
      -DWITH_XINE=ON                   \
      -DBUILD_TESTS=OFF                \
      -DENABLE_PRECOMPILED_HEADERS=OFF \
      -DCMAKE_SKIP_RPATH=ON            \
      -DBUILD_WITH_DEBUG_INFO=OFF      \
      -Wno-dev  ..                     &&
make

The package does not come with an operable test suite.

Now, as the root user:

make install             &&

case $(uname -m) in
  x86_64) ARCH=intel64 ;;
       *) ARCH=ia32    ;;
esac                     &&

cp -v 3rdparty/ippicv/ippicv_lnx/lib/$ARCH/libippicv.a /usr/lib &&
unset ARCH

Command Explanations

-DWITH_XINE=ON: This option instructs the make procedure to use xine-lib-1.2.8.

-DENABLE_PRECOMPILED_HEADERS=OFF: This option is needed for compatibiiity with gcc-6.1 and later.

-DOPENCV_EXTRA_MODULES_PATH=../opencv_contrib-3.3.0/modules: instructs the build system to build the additional modules.

cp -v 3rdparty/.../libippicv.a /usr/lib: This command installs a 3rdparty library.

Installed Programs: opencv_annotation, opencv_createsamples, and opencv_traincascade

Installed Libraries: libippicv.a, libopencv_calib3d.so, libopencv_core.so, libopencv_features2d.so, libopencv_flann.so, libopencv_highgui.so, libopencv_imgcodecs.so, libopencv_imgproc.so, libopencv_ml.so, libopencv_objdetect.so, libopencv_photo.so, libopencv_shape.so, libopencv_stitching.so, libopencv_superres.so, libopencv_ts.a, libopencv_video.so, libopencv_videoio.so, and libopencv_videostab.so

Installed Directories: /usr/include/opencv{,2} and /usr/share/OpenCV

Last updated on 2017-08-23 12:11:26 -0700

OpenJPEG-1.5.2

Introduction to OpenJPEG

OpenJPEG is an open-source implementation of the JPEG-2000 standard. OpenJPEG fully respects the JPEG-2000 specifications and can compress/decompress lossless 16-bit images.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/openjpeg.mirror/openjpeg-1.5.2.tar.gz
Download MD5 sum: c41772c30fb1c272358b3707233134a1
Download size: 1.4 MB
Estimated disk space required: 16 MB
Estimated build time: 0.2 SBU

OpenJPEG Dependencies

Optional

Little CMS-2.8, libpng-1.6.31, LibTIFF-4.0.8 and Doxygen-1.8.13 (to build the API documentation)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/openjpeg

Installation of OpenJPEG

Install OpenJPEG by running the following commands:

autoreconf -f -i &&
./configure --prefix=/usr --disable-static &&
make

This package does not come with a testsuite.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: image_to_j2k, j2k_dump and j2k_to_image

Installed Libraries: libopenjpeg.so

Installed Directories: /usr/include/openjpeg-1.5 and /usr/share/doc/openjpeg-1.5

Short Descriptions

image_to_j2k	converts various image formats to the jpeg2000 format.
j2k_dump	reads in a jpeg2000 image and dumps the contents to stdout.
j2k_to_image	converts jpeg2000 images to other image types.

Last updated on 2017-08-23 12:11:26 -0700

OpenJPEG-2.2.0

Introduction to OpenJPEG

OpenJPEG is an open-source implementation of the JPEG-2000 standard. OpenJPEG fully respects the JPEG-2000 specifications and can compress/decompress lossless 16-bit images.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/uclouvain/openjpeg/archive/v2.2.0/openjpeg-2.2.0.tar.gz
Download MD5 sum: 269bb0b175476f3addcc0d03bd9a97b6
Download size: 2.7 MB
Estimated disk space required: 18 MB
Estimated build time: 0.2 SBU

OpenJPEG Dependencies

Required

Optional

Little CMS-2.8, libpng-1.6.31, LibTIFF-4.0.8, and Doxygen-1.8.13 (to build the API documentation)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/openjpeg2

Installation of OpenJPEG

Install OpenJPEG by running the following commands:

mkdir -v build &&
cd       build &&

cmake -DCMAKE_BUILD_TYPE=Release -DCMAKE_INSTALL_PREFIX=/usr .. &&
make

This package does not come with a working test suite.

Now, as the root user:

make install &&

pushd ../doc &&
  for man in man/man?/* ; do
      install -v -D -m 644 $man /usr/share/$man
  done 
popd

Installed Programs: opj_compress, opj_decompress, and opj_dump

Installed Libraries: libopenjp2.so

Installed Directories: /usr/include/openjpeg-2.1 and /usr/lib/openjpeg-2.1

Short Descriptions

opj_compress	converts various image formats to the jpeg2000 format.
opj_decompress	converts jpeg2000 images to other image types.
opj_dump	reads in a jpeg2000 image and dumps the contents to stdout.

Last updated on 2017-08-23 19:39:45 -0700

Pixman-0.34.0

Introduction to Pixman

The Pixman package contains a library that provides low-level pixel manipulation features such as image compositing and trapezoid rasterization.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.cairographics.org/releases/pixman-0.34.0.tar.gz
Download MD5 sum: e80ebae4da01e77f68744319f01d52a3
Download size: 860 KB
Estimated disk space required: 47 MB (with tests)
Estimated build time: 0.8 SBU (with tests)

Pixman Dependencies

Optional

GTK+-2.24.31 and libpng-1.6.31 (for tests and demos)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/pixman

Installation of Pixman

Install Pixman by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: None

Installed Library: libpixman-1.so

Installed Directory: /usr/include/pixman-1

Short Descriptions

libpixman-1.so

contains functions that provide low-level pixel manipulation features.

Last updated on 2017-08-20 20:24:54 -0700

Poppler-0.57.0

Introduction to Poppler

The Poppler package contains a PDF rendering library and command line tools used to manipulate PDF files. This is useful for providing PDF rendering functionality as a shared library.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://poppler.freedesktop.org/poppler-0.57.0.tar.xz
Download MD5 sum: bc5a191741604552c90d484103229374
Download size: 1.6 MB
Estimated disk space required: 50 MB (with Qt5 library)
Estimated build time: 1.3 SBU (with Qt5 library)

Additional Downloads

Poppler Encoding Data

Download (HTTP): https://poppler.freedesktop.org/poppler-data-0.4.8.tar.gz
Download MD5 sum: 00f8989c804de84af0ba2ea629949980
Download size: 4.1 MB
Estimated disk space required: 13 MB
Estimated build time: less than 0.1 SBU

The additional package consists of encoding files for use with Poppler. The encoding files are optional and Poppler will automatically read them if they are present. When installed, they enable Poppler to render CJK and Cyrillic properly.

Poppler Dependencies

Required

Fontconfig-2.12.4

Optional

cURL-7.55.1, gobject-introspection-1.52.1, GTK-Doc-1.26, GTK+-2.24.31, Little CMS-1.19 or Little CMS-2.8, LibTIFF-4.0.8, OpenJPEG-2.2.0 (preference is for OpenJPEG1, due to regressions with OpenJPEG2), and Qt-5.9.1 (required for PDF support in Okular-17.08.0)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/poppler

Installation of Poppler

Install Poppler by running the following commands:

./configure --prefix=/usr               \
            --sysconfdir=/etc           \
            --disable-static            \
            --enable-build-type=release \
            --enable-cmyk               \
            --enable-xpdf-headers       \
            --with-testdatadir=$PWD/testfiles &&
make

In order to run the test suite, some testcases are needed and can be obtained only from a git repository. The command to download them is: git clone git://git.freedesktop.org/git/poppler/test testfiles. Then issue: LC_ALL=en_US.UTF-8 make check. It seems that only the Qt4/5 libraries are tested.

Now, as the root user:

make install

To install the documentation, run the following commands as root:

install -v -m755 -d        /usr/share/doc/poppler-0.57.0 &&
install -v -m644 README*   /usr/share/doc/poppler-0.57.0 &&
cp -vr glib/reference/html /usr/share/doc/poppler-0.57.0

Poppler Data

If you downloaded the additional encoding data package, install it by issuing the following commands:

tar -xf ../poppler-data-0.4.8.tar.gz &&
cd poppler-data-0.4.8

Now, as the root user:

make prefix=/usr install

Command Explanations

--enable-build-type=release: This switch is used to apply a higher level of compiler optimizations. Other options are: [relwithdebinfo/debug/debugfull/profile]

--enable-cmyk: Include support for CMYK rasterization.

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-xpdf-headers: Install some old Xpdf headers required by certain programs (e.g. Okular, LibreOffice and Inkscape).

--with-testdatadir=$PWD/testfiles: Tell the test programs where the auxiliary files are located.

--enable-libcurl: Use libcurl for HTTP support.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

--disable-poppler-qt5: Don't compile poppler Qt5 wrapper, when Qt5 is installed. Note that Qt5 support is required for PDF support in Okular-17.08.0.

LC_ALL=en_US.UTF-8 make check: Run the test suite. The environment variable LC_ALL=en_US.UTF-8 is only needed if the default locale does not include UTF-8.

Installed Programs: pdfdetach, pdffonts, pdfimages, pdfinfo, pdfseparate, pdfsig, pdftocairo, pdftohtml, pdftoppm, pdftops, pdftotext, pdfunite, and poppler-glib-demo

Installed Libraries: libpoppler.so, libpoppler-cpp.so, libpoppler-glib.so, and libpoppler-qt5.so

Installed Directories: /usr/{include,share,share/gtk-doc/html}/poppler and /usr/share/doc/poppler-0.57.0

Short Descriptions

pdfdetach	lists or extracts embedded files from PDF files.
pdffonts	lists the fonts used in a PDF file along with various information for each font.
pdfimages	saves images from a PDF file as PPM, PBM, or JPEG files.
pdfinfo	prints the contents of the 'Info' dictionary (plus some other useful information) from a PDF file.
pdfseparate	extracts single pages from a PDF file.
pdfsig	verifies the digital signatures in a PDF document.
pdftocairo	converts a PDF file to one of several formats (PNG, JPEG, PDF, PS, EPS, SVG) using the cairo output device of the poppler library.
pdftohtml	converts a PDF file to HTML.
pdftoppm	converts PDF files to PBM, PGM and PPM formats.
pdftops	converts PDF files to Postscript format.
pdftotext	converts PDF files to plain text.
pdfunite	merges several PDF files, in the order of their occurrence on the command line, to one PDF output file.
poppler-glib-demo	is a tool to demonstrate the API, and for use when debugging and testing Poppler.
`libpoppler.so`	contains the API functions to render PDF files.
`libpoppler-cpp.so`	is a C++ backend for rendering PDF files.
`libpoppler-glib.so`	is a wrapper library used to interface the PDF rendering functions with GTK+.
`libpoppler-qt5.so`	is a wrapper library used to interface the PDF rendering functions with Qt5.

Last updated on 2017-08-23 19:39:45 -0700

Potrace-1.15

Introduction to Potrace

Potrace™ is a tool for transforming a bitmap (PBM, PGM, PPM, or BMP format) into one of several vector file formats.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/potrace/potrace-1.15.tar.gz
Download MD5 sum: 60cecdaa9d14e0008f96b68dce77d246
Download size: 636 KB
Estimated disk space required: 7.5 MB (including tests)
Estimated build time: less than 0.1 SBU (including tests)

Potrace Dependencies

Installation of Potrace

Install Potrace by running the following commands:

./configure --prefix=/usr                        \
            --disable-static                     \
            --docdir=/usr/share/doc/potrace-1.15 \
            --enable-a4                          \
            --enable-metric                      \
            --with-libpotrace                    &&
make

To run the test suite, issue: make check.

Now, as the root user:

make install

Command Explanations

--enable-a4: Use A4 as the default paper size.

--enable-metric: Use metric units (centimeters) as default

--disable-static: This switch prevents installation of static versions of the libraries.

--with-libpotrace: Install the library and headers.

Installed Programs: mkbitmap, potrace

Installed Libraries: libpotrace.so,

Installed Directories: /usr/share/doc/potrace-1.15

Short Descriptions

mkbitmap	transforms images into bitmaps with scaling and filtering.
potrace	transforms bitmaps into vector graphics.
`libpotrace.so`	is a library for transforming bitmaps into vector graphics

Last updated on 2017-08-25 11:57:45 -0700

Qpdf-6.0.0

Introduction to Qpdf

The Qpdf package contains command-line programs and library that do structural, content-preserving transformations on PDF files.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/qpdf/qpdf-6.0.0.tar.gz
Download MD5 sum: e014bd3ecf1c4d1a520bbc14d84ac20e
Download size: 8 MB
Estimated disk space required: 108 MB (with tests)
Estimated build time: 1.0 SBU (with tests)

Qpdf Dependencies

Required

PCRE-8.41

Optional

fop-2.2 and libxslt-1.1.29

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/qpdf

Installation of Qpdf

Install Qpdf by running the following commands:

./configure --prefix=/usr    \
            --disable-static \
            --docdir=/usr/share/doc/qpdf-6.0.0 &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: fix-qdf, qpdf, and zlib-flate

Installed Library: libqpdf.so

Installed Directories: /usr/include/qpdf and /usr/share/doc/qpdf-6.0.0

Short Descriptions

fix-qdf	is used to repair PDF files in QDF form after editing.
qpdf	is used to convert one PDF file to another equivalent PDF file.
zlib-flate	is a raw zlib compression program.
`libqpdf.so`	contains the Qpdf API functions.

Last updated on 2017-08-23 19:39:45 -0700

Chapter 11. General Utilities

This chapter contains various utilities that do not fit conveniently into other chapters. Programs include a command line calculator, several utilities for manipulating text and graphics, a program to interface with a palm-pilot, a program for entering PIN numbers and pass-phrases, and a hash generator.

Asciidoc-8.6.9

Introduction to Asciidoc

The Asciidoc package is a text document format for writing notes, documentation, articles, books, ebooks, slideshows, web pages, man pages and blogs. AsciiDoc files can be translated to many formats including HTML, PDF, EPUB, and man page.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/asciidoc/asciidoc-8.6.9.tar.gz
Download MD5 sum: c59018f105be8d022714b826b0be130a
Download size: 888 KB
Estimated disk space required: 3.9 MB
Estimated build time: less than 0.1 SBU

Asciidoc Dependencies

Required

Python-2.7.13 or Python-3.6.2

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/asciidoc

Installation of Asciidoc

Install Asciidoc by running the following commands:

./configure --prefix=/usr     \
            --sysconfdir=/etc \
            --docdir=/usr/share/doc/asciidoc-8.6.9 &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
make docs

Installed Programs: a2x (symlink to a2x.py), a2x.py, asciidoc (symlink to asciidoc.py), and asciidoc.py

Installed Libraries: None

Installed Directories: /etc/asciidoc

Short Descriptions

a2x	is a toolchain manager for AsciiDoc (converts Asciidoc text files to other file formats).
asciidoc	converts an AsciiDoc text file to HTML or DocBook

Last updated on 2017-08-24 18:56:23 -0700

Bogofilter-1.2.4

Introduction to Bogofilter

The Bogofilter application is a mail filter that classifies mail as spam or ham (non-spam) by a statistical analysis of the message's header and content (body).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/bogofilter/bogofilter-1.2.4.tar.gz
Download MD5 sum: 6ce27a692d2d4881e9898f3798dcf91c
Download size: 1.9 MB
Estimated disk space required: 16 MB
Estimated build time: 0.1 SBU

Bogofilter Dependencies

Required

Berkeley DB-6.2.32

Optional

SQLite-3.20.0, QDBM and TokyoCabinet

Note

If you do not install the recommended Gsl-2.4 package then a statically linked shipped version will be used instead.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/bogofilter

Installation of Bogofilter

Install Bogofilter by running the following commands:

./configure --prefix=/usr --sysconfdir=/etc/bogofilter &&
make

This application does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--with-database=: This switch allows you to change the default database from db to either qdbm, sqlite3 or tokyocabinet.

Installed Programs: bf_compact, bf_copy, bf_tar, bogofilter, bogolexer, bogotune, bogoupgrade and bogoutil

Installed Libraries: None

Installed Directories: /etc/bogofilter

Short Descriptions

bf_compact	creates a more compact bogofilter working directory with a dump/load cycle.
bf_copy	copies a bogofilter working directory to another directory.
bf_tar	bundles a bogofilter working directory in tar format and copies it to standard output.
bogofilter	is a fast Bayesian spam filter.
bogolexer	used to separate messages into tokens and to test new versions of the lexer.l code.
bogotune	tries to find optimum parameter settings for bogofilter.
bogoupgrade	upgrades bogofilter database to current version.
bogoutil	dumps, loads, and maintains bogofilter database files.

Last updated on 2017-08-30 17:02:22 -0700

chrpath-0.16

Introduction to chrpath

The chrpath modify the dynamic library load path (rpath and runpath) of compiled programs and libraries.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://alioth.debian.org/frs/download.php/latestfile/813/chrpath-0.16.tar.gz
Download MD5 sum: 2bf8d1d1ee345fc8a7915576f5649982
Download size: 132 KB
Estimated disk space required: 1 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/chrpath

Installation of chrpath

Install chrpath by running the following commands:

./configure --prefix=/usr &&
make

This package does not come with a test suite.

Now, as the root user:

make docdir=/usr/share/doc/chrpath-0.16 install

Installed Program: chrpath

Installed Libraries: None

Installed Directory: /usr/share/doc/chrpath-0.16

Short Descriptions

chrpath

changes the rpath or runpath in ELF files.

Last updated on 2017-08-23 21:43:54 -0700

Compface-1.5.2

Introduction to Compface

Compface provides utilities and a library to convert from/to X-Face format, a 48x48 bitmap format used to carry thumbnails of email authors in a mail header.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://anduin.linuxfromscratch.org/BLFS/compface/compface-1.5.2.tar.gz
Download (FTP): ftp://anduin.linuxfromscratch.org/BLFS/compface/compface-1.5.2.tar.gz
Download MD5 sum: 62f4f79c0861ad292ba3cf77b4c48319
Download size: 47 KB
Estimated disk space required: 520 KB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/compface

Installation of Compface

Install Compface by running the following commands:

./configure --prefix=/usr --mandir=/usr/share/man &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
install -m755 -v xbm2xface.pl /usr/bin

Installed Programs: compface, uncompface and xbm2xface.pl

Installed Library: libcompface.{so,a}

Installed Directories: None

Short Descriptions

compface	is a filter for generating highly compressed representations of 48x48x1 face image files.
uncompface	is an inverse filter which performs an inverse transformation with no loss of data.
xbm2xface.pl	is a script to generate xfaces.
`libcompface.{so,a}`	allows the compression and decompression algorithms to be used in other programs such as MTAs.

Last updated on 2017-08-23 21:43:54 -0700

desktop-file-utils-0.23

Introduction to Desktop File Utils

The Desktop File Utils package contains command line utilities for working with Desktop entries. These utilities are used by Desktop Environments and other applications to manipulate the MIME-types application databases and help adhere to the Desktop Entry Specification.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.freedesktop.org/software/desktop-file-utils/releases/desktop-file-utils-0.23.tar.xz
Download MD5 sum: 599133d51cc9a41bfec186414906b6f1
Download size: 132 KB
Estimated disk space required: 1.9 MB
Estimated build time: less than 0.1 SBU

Desktop File Utils Dependencies

Required

Optional

Emacs-25.2

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/desktop-file-utils

Installation of Desktop File Utils

Install Desktop File Utils by running the following commands:

./configure --prefix=/usr &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Configuring Desktop File Utils

Configuration Information

The XDG Base Directory specification defines the standard locations for applications to place data and configuration files. These files can be used, for instance, to define the menu structure and menu items in a desktop environment.

The default location for configuration files to be installed is /etc/xdg, and the default locations for data files are /usr/local/share and /usr/share. These locations can be extended with the environment variables XDG_CONFIG_DIRS and XDG_DATA_DIRS, respectively. The GNOME, KDE and XFCE environments respect these settings.

When a package installs a .desktop file to a location in one of the base data directories, the database that maps MIME-types to available applications can be updated. For instance, the cache file at /usr/share/applications/mimeinfo.cache can be rebuilt by executing the following command as the root user:

update-desktop-database /usr/share/applications

Installed Programs: desktop-file-edit, desktop-file-install, desktop-file-validate and update-desktop-database

Installed Libraries: None

Installed Directories: None

Short Descriptions

desktop-file-edit	is used to modify an existing desktop file entry.
desktop-file-install	is used to install a new desktop file entry. It is also used to rebuild or modify the MIME-types application database.
desktop-file-validate	is used to verify the integrity of a desktop file.
update-desktop-database	is used to update the MIME-types application database.

Last updated on 2017-08-20 20:24:54 -0700

Graphviz-2.40.1

Introduction to Graphviz

The Graphviz package contains graph visualization software. Graph visualization is a way of representing structural information as diagrams of abstract graphs and networks. Graphviz has several main graph layout programs. It also has web and interactive graphical interfaces, auxiliary tools, libraries, and language bindings.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://graphviz.org/pub/graphviz/stable/SOURCES/graphviz-2.40.1.tar.gz
Download MD5 sum: 4ea6fd64603536406166600bcc296fc8
Download size: 24 MB
Estimated disk space required: 177 MB
Estimated build time: 0.7 SBU (using parallelism=4)

Additional Downloads

Optional patch to use Qt-5.9.1: http://www.linuxfromscratch.org/patches/blfs/8.1/graphviz-2.40.1-qt5-1.patch

Graphviz Dependencies

Optional

libglade-2.6.4, ghostscript-9.21, GTK+-2.24.31, Qt-5.9.1, DevIL, Electric Fence, libLASi, GD Library, and glitz

Optional (To Build Language Bindings)

SWIG-3.0.12 (SWIG must be installed or no bindings will be built), Guile-2.2.2, OpenJDK-1.8.0.141, Lua-5.3.4, PHP-7.1.8, Python-2.7.13, Ruby-2.4.1, Tcl-8.6.7, Tk-8.6.7, Io, Mono, OCaml, and R

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/graphviz

Installation of Graphviz

If Ruby-2.4.1 is installed, and you want to build Ruby bindings, fix ruby's detection:

sed -e '/ruby/s/1\.9/2.4/' -i configure.ac

If Qt-5.9.1 is installed, and you want to build the gvedit graph editor, issue:

patch -p1 -i ../graphviz-2.40.1-qt5-1.patch

Install Graphviz by running the following commands:

sed -i '/LIBPOSTFIX="64"/s/64//' configure.ac &&

autoreconf                &&
./configure --prefix=/usr &&
make

This package does not come with a test suite that provides meaningful results.

Now, as the root user:

make install

If desired, create a symbolic link in the system documents directory to the documentation installed in /usr/share/graphviz/doc using the following command as the root user:

ln -v -s /usr/share/graphviz/doc \
         /usr/share/doc/graphviz-2.40.1

Command Explanations

sed ... configure.ac: This command is needed to avoid installing files in /usr/lib64.

--with-javaincludedir="$JAVA_HOME/include -I$JAVA_HOME/include/linux": If you have built OpenJDK-1.8.0.141 in /opt, and you want to build the JAVA bindings, it is necessary to specify the location of the JAVA header files to configure. The configure switch is designed for only one directory, but two directories need to be included. This is possible nevertheless by using the -I switch inside the variable.

Configuring Graphviz

Config Files

/usr/lib/graphviz/config

Configuration Information

There are no specific configuration requirements for Graphviz. You may consider installing the additional plugins and tools available from the download page at http://www.graphviz.org/Download_source.php for additional capabilities. If additional plugins are installed, you can run dot -c (as the root user) to update the config file in /usr/lib/graphviz.

Installed Programs: acyclic, bcomps, ccomps, circo, cluster, diffimg, dijkstra, dot, dot2gxl, dot_builtins, dotty, edgepaint, fdp, gc, gml2gv, graphml2gv, gv2gml, gv2gxl, gvcolor, gvedit, gvgen, gvmap, gvmap.sh, gvpack, gvpr, gxl2dot, gxl2gv, lefty, lneato, mm2gv, neato, nop, osage, patchwork, prune, sccmap, sfdp, tred, twopi, unflatten, and vimdot

Installed Libraries: libcdt.so, libcgraph.so, libgvc.so, libgvpr.so, libpathplan.so, libxdot.so, and several plugins in /usr/lib/graphviz. There are also several in subdirectories of /usr/lib/{lua,perl5,php,python2.7,tcl8.6}. Unfortunately, some libraries are duplicated.

Installed Directories: /usr/include/graphviz, /usr/lib/graphviz, /usr/lib/tcl8.6/graphviz, /usr/share/doc/graphviz-2.40.1, and /usr/share/graphviz

Short Descriptions

acyclic	is a filter that takes a directed graph as input and outputs a copy of the graph with sufficient edges reversed to make the graph acyclic.
bcomps	decomposes graphs into their biconnected components, printing the components to standard output.
ccomps	decomposes graphs into their connected components, printing the components to standard output.
circo	draws graphs using a circular layout.
cluster	takes as input a graph in DOT format, finds node clusters and augments the graph with this information.
diffimg	(needs GD Library) generates an image where each pixel is the difference between the corresponding pixel in each of the two source images.
dijkstra	reads a stream of graphs and for each computes the distance of every node from sourcenode.
dot	draws directed graphs. It works well on DAGs and other graphs that can be drawn as hierarchies. It reads attributed graph files and writes drawings. By default, the output format dot is the input file with layout coordinates appended.
dot2gxl	converts between graphs represented in GXL and in the DOT language. Unless a conversion type is specified using a flag, gxl2dot will deduce the type of conversion from the suffix of the input file, a `.dot` suffix causing a conversion from DOT to GXL, and a `.gxl` suffix causing a conversion from GXL to DOT.
dotty	is a graph editor for the X Window System. It may be run as a standalone editor, or as a front end for applications that use graphs. It can control multiple windows viewing different graphs.
edgepaint	edge coloring to disambiguate crossing edges.
fdp	draws undirected graphs using a “spring” model. It relies on a force-directed approach in the spirit of Fruchterman and Reingold.
gc	is a graph analogue to wc in that it prints to standard output the number of nodes, edges, connected components or clusters contained in the input files. It also prints a total count for all graphs if more than one graph is given.
gml2gv	converts a graph specified in the GML format to a graph in the GV (formerly DOT) format.
graphml2gv	converts a graph specified in the GRAPHML format to a graph in the GV (formerly DOT) format.
gv2gml	converts a graph specified in the GV format to a graph in the GML format.
gv2gxl	converts a graph specified in the GV format to a graph in the GXL format.
gvcolor	is a filter that sets node colors from initial seed values. Colors flow along edges from tail to head, and are averaged (as HSB vectors) at nodes.
gvedit	provides a simple graph editor and viewer. It allows many graphs to be viewed at the same time. The text of each graph is displayed in its own text window.
gvgen	generates a variety of simple, regularly-structured abstract graphs.
gvmap	takes as input a graph in DOT format, finds node clusters and produces a rendering of the graph as a geographic-style map, with clusters highlighted, in xdot format.
gvmap.sh	is a pipeline for running gvmap.
gvpack	reads in a stream of graphs, combines the graphs into a single layout, and produces a single graph serving as the union of the input graphs.
gvpr	is a graph stream editor inspired by awk. It copies input graphs to its output, possibly transforming their structure and attributes, creating new graphs, or printing arbitrary information.
gxl2dot	converts between graphs represented in GXL and in the DOT language. Unless a conversion type is specified using a flag, gxl2dot will deduce the type of conversion from the suffix of the input file, a `.dot` suffix causing a conversion from DOT to GXL, and a `.gxl` suffix causing a conversion from GXL to DOT.
gxl2gv	converts between graphs represented in GXL and in the GV language.
lefty	is a two-view graphics editor for technical pictures.
lneato	is a graph editor for the X Window System. It may be run as a standalone editor, or as a front end for applications that use graphs. It can control multiple windows viewing different graphs.
mm2gv	converts a sparse matrix of the Matrix Market format to a graph in the GV (formerly DOT) format.
neato	draws undirected graphs using “spring” models. Input files must be formatted in the dot attributed graph language. By default, the output of neato is the input graph with layout coordinates appended.
nop	reads a stream of graphs and prints each in pretty-printed (canonical) format on stdout. If no files are given, it reads from stdin.
osage	draws clustered graphs. As input, it takes any graph in the DOT format.
patchwork	draws clustered graphs using a squarified treemap layout. As input, it takes any graph in the DOT format.
prune	reads directed graphs in the same format used by dot and removes subgraphs rooted at nodes specified on the command line via options.
sccmap	decomposes digraphs into strongly connected components and an auxiliary map of the relationship between components. In this map, each component is collapsed into a node. The resulting graphs are printed to stdout.
sfdp	draws undirected graphs using the “spring” model, but it uses a multi-scale approach to produce layouts of large graphs in a reasonably short time.
tred	computes the transitive reduction of directed graphs, and prints the resulting graphs to standard output. This removes edges implied by transitivity. Nodes and subgraphs are not otherwise affected.
twopi	draws graphs using a radial layout. Basically, one node is chosen as the center and put at the origin. The remaining nodes are placed on a sequence of concentric circles centered about the origin, each a fixed radial distance from the previous circle.
unflatten	is a preprocessor to dot that is used to improve the aspect ratio of graphs having many leaves or disconnected nodes. The usual layout for such a graph is generally very wide or tall.
vimdot	is a simple script which launches the gvim or vim editor along with a GUI window showing the dot output of the edited file.
`libcdt.so`	manages run-time dictionaries using standard container data types: unordered set/multiset, ordered set/multiset, list, stack, and queue.
`libcgraph.so`	supports graph programming by maintaining graphs in memory and reading and writing graph files. Graphs are composed of nodes, edges, and nested subgraphs.
`libgvc.so`	provides a context for applications wishing to manipulate and render graphs. It provides a command line parsing, common rendering code, and a plugin mechanism for renderers.
`libpathplan.so`	contains functions to find the shortest path between two points in a simple polygon.
`libxdot.so`	provides support for parsing and deparsing graphical operations specificed by the xdot language.

Last updated on 2017-08-29 05:43:57 -0700

GTK-Doc-1.26

Introduction to GTK-Doc

The GTK-Doc package contains a code documenter. This is useful for extracting specially formatted comments from the code to create API documentation. This package is optional; if it is not installed, packages will not build the documentation. This does not mean that you will not have any documentation. If GTK-Doc is not available, the install process will copy any pre-built documentation to your system.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/gtk-doc/1.26/gtk-doc-1.26.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/gtk-doc/1.26/gtk-doc-1.26.tar.xz
Download MD5 sum: 1ad4a1dbf804889fdc85f8eec45e8696
Download size: 692 KB
Estimated disk space required: 16 MB (with tests)
Estimated build time: 0.2 SBU (with tests)

GTK-Doc Dependencies

Required

docbook-xml-4.5, docbook-xsl-1.79.1, itstool-2.0.2, libxslt-1.1.29, and Python-2.7.13

Optional

dblatex or fop-2.2 (XML PDF support), GLib-2.52.3 (for the test suite), GNOME Doc Utils and Which-2.21 (required for the test suite and gtk-doc documentation), and six (for some tests)

Required (runtime)

six-1.10.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/gtk-doc

Installation of GTK-Doc

Install GTK-Doc by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Installed Programs: gtkdocize, gtkdoc-check, gtkdoc-depscan, gtkdoc-fixxref, gtkdoc-mkdb, gtkdoc-mkhtml, gtkdoc-mkman, gtkdoc-mkpdf, gtkdoc-rebase, gtkdoc-scan, and gtkdoc-scangobj

Installed Libraries: None

Installed Directories: /usr/lib/cmake/GtkDoc, /usr/share/gtk-doc, and /usr/share/help/*/gtk-doc-manual

Short Descriptions

gtkdoc*

these are all shell, or Python scripts used by package Makefile scripts to generate documentation for the package being built.

Last updated on 2017-08-29 13:15:22 -0700

Hd2u-1.0.3

Introduction to Hd2u

The hd2u package contains an any to any text format converter.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://hany.sk/~hany/_data/hd2u/hd2u-1.0.3.tgz
Download MD5 sum: 8f6668fafb279aa19f956ec0515717b6
Download size: 64 KB
Estimated disk space required: 380 KB
Estimated build time: less than 0.1 SBU

Hd2u Dependencies

Required

popt-1.16

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/hd2u

Installation of Hd2u

Install hd2u by running the following commands:

./configure --prefix=/usr &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Program: dos2unix

Installed Libraries: None

Installed Directories: None

Short Descriptions

dos2unix

converts text between various OS formats (such as converting from DOS format to Unix).

Last updated on 2017-08-23 21:43:54 -0700

Highlight-3.39

Introduction to Highlight

Highlight is an utility that converts source code to formatted text with syntax highlighting.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.andre-simon.de/zip/highlight-3.39.tar.bz2
Download MD5 sum: 09eb1c78c8599125a0a7fe616e850b76
Download size: 1.2 MB
Estimated disk space required: 17 MB (with gui)
Estimated build time: 0.9 SBU (with gui)

Highlight Dependencies

Required

Boost-1.64.0 and Lua-5.3.4

Optional

Qt-5.9.1 (to build the GUI front-end)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/highlight

Installation of Highlight

To build Highlight run the following command:

make

To build the Qt5 GUI front-end, run the following command:

make gui

This package does not come with a test suite.

To install Highlight, run the following command as the root user:

make install

To install the GUI program, run the following command as the root user:

make install-gui

Installed Programs: highlight

Installed Libraries: None

Installed Directories: /etc/highlight, /usr/share/doc/highlight, and /usr/share/highlight

Short Descriptions

highlight

is a universal source code to formatted text converter.

Last updated on 2017-08-19 15:43:35 -0700

IBus-1.5.16

Introduction to IBus

IBus is an Intelligent Input Bus. It is a new input framework for Linux OS. It provides a full featured and user friendly input method user interface.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/ibus/ibus/releases/download/1.5.16/ibus-1.5.16.tar.gz
Download MD5 sum: 31ea7c1259c7285bd9d71f3000cbd95b
Download size: 2.3 MB
Estimated disk space required: 56 MB (with tests)
Estimated build time: 0.7 SBU (with tests)

IBus Dependencies

Required

DConf-0.26.0, ISO Codes-3.75, and Vala-0.36.4

Optional

D-Bus Python-1.2.4 and PyGObject-3.24.1 (both to build the Python support library), GTK-Doc-1.26, Python-3.6.2, PyXDG-0.25 (for the ibus-setup), and libxkbcommon-0.7.2, Wayland-1.14.0 (both to build the Wayland support programs), and EmojiOne

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/ibus

Installation of IBus

Fix an issue with deprecated schema entries:

sed -i 's@/desktop/ibus@/org/freedesktop/ibus@g' \
    data/ibus.schemas.in \
    data/dconf/org.freedesktop.ibus.gschema.xml.in

Install IBus by running the following commands:

./configure --prefix=/usr             \
            --sysconfdir=/etc         \
            --disable-emoji-dict      &&
rm -f tools/main.c                    &&
make

To test the results, issue: make -k check. Some tests may fail for unknown reasons.

Now, as the root user:

make install

Command Explanations

sed -ri ... data/ibus.schemas ...: This sed fixes deprecated entries in the gsettings schema templates installed by this package.

--disable-emoji-dict: This switch disables the use of emoticon dictionaries. Omit if you installed the optional EmojiOne package.

rm -f tools/main.c: This command removes a generated file that was not removed when packaging.

--disable-gtk2: This switch disables building the GTK+ 2 immodule. Use it if you have not installed GTK+ 2.

--enable-python-library: This switch enables building the Python support library. Use it if have installed the optional dependencies.

--enable-wayland: This switch enables building the Wayland support programs. Use it if you have installed the optional dependencies.

--with-python=python3: This switch makes the configure script look for Python 3. Use it if you want to build the Python 3 support library alongside the Python 2 one.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: ibus, ibus-daemon, and ibus-setup

Installed Library: libibus-1.0.so and im-ibus.so (GTK+ Immodule)

Installed Directories: /etc/dconf/db/ibus.d, /usr/include/ibus-1.0, /usr/lib/python2.7/site-packages/ibus, /usr/share/gtk-doc/html/ibus, and /usr/share/ibus

Short Descriptions

ibus-daemon	is the Intelligent Input Bus Daemon.
ibus-setup	is the GTK+ program used to configure the ibus-daemon.
`libibus-1.0.so`	contains the IBus API functions.

Last updated on 2017-08-22 13:27:15 -0700

ImageMagick-6.9.9-9

Introduction to ImageMagick-6 libraries

ImageMagick underwent many changes in its libraries between versions 6 and 7. Most packages in BLFS which use ImageMagick can use version 7, but for the others this page will install only the libraries, headers and general documentation (not programs, manpages, perl modules), and it will rename the unversioned pkgconfig files so that they do not overwrite the same-named files from version 7.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.imagemagick.org/download/releases/ImageMagick-6.9.9-9.tar.xz
Download (FTP): ftp://ftp.imagemagick.org/pub/ImageMagick/releases/ImageMagick-6.9.9-9.tar.xz
Download MD5 sum: 182239bb642ca23f86206bf027caf536
Download size: 8.4 MB
Estimated disk space required: 180 MB, with typical dependencies (add 32 MB for the tests)
Estimated build time: 2.2 SBU - typical build (add 1.7 SBU for the tests)

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/ImageMagick-6.9.9-9-libs_only-1.patch

Note

The ImageMagick source releases are updated frequently and the version shown above may no longer be available from the download locations. You can download a more recent version and use the existing BLFS instructions to install it. Chances are that it will work just fine, but this has not been tested by the BLFS team. If the package version shown above is not available from the locations shown above, or from the legacy/ directory at ftp.ImageMagick.org/pub/ImageMagick you can download it from the BLFS package server at Oregon State University: ftp://ftp.osuosl.org/pub/blfs/conglomeration/ImageMagick/.

ImageMagick-6 Dependencies

The optional dependencies listed below should be installed if you need support for the specific format or the conversion tool the dependency provides. Many of the dependencies' capabilities and uses are described in the “MAGICK DELEGATES” section of the README.txt file located in the source tree. Additional information about the dependencies can be found in the Install-unix.txt file located in the source tree as well as issuing the ./configure --help command. A summary of this information, as well as some additional notes can be viewed on-line at http://www.imagemagick.org/script/advanced-unix-installation.php.

Optional System Utilities

Cups-2.2.4, cURL-7.55.1, FFmpeg-3.3.3, fftw-3.3.6-pl2 p7zip-16.02 (LZMA), SANE-1.0.27, Wget-1.19.1, xdg-utils-1.1.2, xterm-330, Dmalloc, Electric Fence, PGP or GnuPG-2.1.23 (you'll have to do some hacking to use GnuPG), Profiles, and ufraw (for raw formats listed in http://www.imagemagick.org/www/formats.html)

Optional Graphics Libraries

JasPer-2.0.12, Little CMS-1.19 or Little CMS-2.8, libexif-0.6.21, libjpeg-turbo-1.5.2, libpng-1.6.31, librsvg-2.40.18, LibTIFF-4.0.8, libwebp-0.6.0, OpenJPEG-2.2.0, Pango-1.40.10, DjVuLibre, FlashPIX (libfpx), FLIF, JBIG-KIT, libgxps, libraqm, Liquid Rescale, OpenEXR, and RALCGM (or ralcgm)

Optional Graphics Utilities

Dejavu fonts, ghostscript-9.21, Gimp-2.8.22, Graphviz-2.40.1, Inkscape-0.92.2, Blender, corefonts, GhostPCL, Gnuplot, POV-Ray, and Radiance

Optional Conversion Tools

Enscript-1.6.6, texlive-20170524 (or install-tl-unx) AutoTrace, GeoExpress Command Line Utilities, AKA MrSID Utilities (binary package), hp2xx, html2ps, libwmf, UniConvertor, and Utah Raster Toolkit (or URT-3.1b)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/imagemagick

Installation of ImageMagick-6 libraries

Install ImageMagick by running the following commands:

patch -Np1 -i ../ImageMagick-6.9.9-9-libs_only-1.patch &&
./configure --prefix=/usr     \
            --sysconfdir=/etc \
            --enable-hdri     \
            --with-modules    \
            --disable-static  &&
make

Now, as the root user:

make DOCUMENTATION_PATH=/usr/share/doc/imagemagick-6.9.9 install-libs-only

To test the installation, issue: make check. Note that the EPS, PS, and PDF tests require a working Ghostscript. One test in 'make check' needs “Helvetica” from “Ghostscript Standard Fonts”, which are optionally installed in ghostscript-9.21 - that test, and one other, might fail, but all the validation can still pass.

Command Explanations

patch -Np1 -i ../ImageMagick-6.9.9-imagemagick6_libs_only-1.patch: Move unversioned pkgconfig files to versioned names and provide an option to only install libraries and associated files.

--enable-hdri: Enables building of a high dynamic range version of ImageMagick.

--with-modules: Enables support for dynamically loadable modules.

--disable-static: This switch prevents installation of static versions of the libraries.

--with-gslib: Enables support to use the Ghostscript shared library.

--with-rsvg: Enables support to use the librsvg library.

--with-autotrace: Enables support to use the Autotrace library.

--with-wmf: Enables support to use the libwmf library.

--with-gvc: Enables support to use GraphViz.

--with-windows-font-dir= <Some/Directory>: This option specifies the directory where the Windows CoreFonts are installed.

--with-dejavu-font-dir= <Some/Directory>: This option specifies the directory where the DejaVu fonts are installed.

The options and parameters listed above are the only ones you should have to pass to the configure script to activate all the delegate dependencies. All other dependencies will be automatically detected and utilized in the build if they are installed.

Installed Programs: None

Installed Libraries: libMagickCore-6.Q16HDRI.so, libMagickWand-6.Q16HDRI.so and libMagick++-6.Q16HDRI.so

Installed Directories: /etc/ImageMagick-6, /usr/include/ImageMagick-6, /usr/lib/ImageMagick-6.9.9, /usr/share/doc/ImageMagick-6.9.9, and /usr/share/ImageMagick-6

Short Descriptions

`libMagickCore-6.Q16HDRI.so`	provides the C API for ImageMagick.
`libMagickWand-6.Q16HDRI.so`	is the recommended C API for ImageMagick. Unlike the MagickCore API it uses only a few opaque types.
`libMagick++-6.Q16HDRI.so`	provides the C++ API for ImageMagick.

Last updated on 2017-08-24 19:07:28 -0700

ImageMagick-7.0.6-10

Introduction to ImageMagick

ImageMagick is a collection of tools and libraries to read, write, and manipulate an image in various image formats. Image processing operations are available from the command line. Bindings for Perl and C++ are also available.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.imagemagick.org/download/releases/ImageMagick-7.0.6-10.tar.xz
Download (FTP): ftp://ftp.imagemagick.org/pub/ImageMagick/releases/ImageMagick-7.0.6-10.tar.xz
Download MD5 sum: 29031b3cc7a6e44b2334ad6692ba1736
Download size: 8.2 MB
Estimated disk space required: 184 MB, with typical dependencies
Estimated build time: 1.0 SBU - typical build with parallelism=4(add 3.2 SBU for the the validation suite)

Note

ImageMagick Dependencies

Optional System Utilities

Cups-2.2.4, cURL-7.55.1, FFmpeg-3.3.3, fftw-3.3.6-pl2, p7zip-16.02 (LZMA), SANE-1.0.27, Wget-1.19.1, xdg-utils-1.1.2, xterm-330, Dmalloc, Electric Fence, PGP or GnuPG-2.1.23 (you'll have to do some hacking to use GnuPG), Profiles, and ufraw (for raw formats listed in http://www.imagemagick.org/www/formats.html)

Optional Graphics Libraries

Optional Graphics Utilities

Dejavu fonts, ghostscript-9.21, Gimp-2.8.22, Graphviz-2.40.1, Inkscape-0.92.2, Blender, corefonts, GhostPCL, Gnuplot, POV-Ray, and Radiance

Optional Conversion Tools

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/imagemagick

Installation of ImageMagick

Install ImageMagick by running the following commands:

./configure --prefix=/usr     \
            --sysconfdir=/etc \
            --enable-hdri     \
            --with-modules    \
            --with-perl       \
            --disable-static  &&
make

Now, as the root user:

make DOCUMENTATION_PATH=/usr/share/doc/imagemagick-7.0.6 install

To test the installation, issue: make check. A more comprehensive test is the ImageMagick validation suite. If make check has not been executed, run make tests/validate to compile it. Issue tests/validate 2>&1 | tee validate.log to run the validation suite. The result summary may be obtained with grep "validation suite" validate.log. Note that the EPS, PS, and PDF tests require a working Ghostscript. One test in 'make check' needs “Helvetica” from “Ghostscript Standard Fonts”, which are optionally installed in ghostscript-9.21 - that test, and one other, might fail, but all the validation can still pass.

Command Explanations

--enable-hdri: Enables building of a high dynamic range version of ImageMagick.

--with-modules: Enables support for dynamically loadable modules.

--with-perl: Enables building and installing of PerlMagick.

--disable-static: This switch prevents installation of static versions of the libraries.

--with-gslib: Enables support to use the Ghostscript shared library.

--with-rsvg: Enables support to use the librsvg library.

--with-autotrace: Enables support to use the Autotrace library.

--with-wmf: Enables support to use the libwmf library.

--with-gvc: Enables support to use GraphViz.

--with-windows-font-dir= <Some/Directory>: This option specifies the directory where the Windows CoreFonts are installed.

--with-dejavu-font-dir= <Some/Directory>: This option specifies the directory where the DejaVu fonts are installed.

Installed Programs: magick, Magick++-config, MagickCore-config, and MagickWand-config. (animate, compare, composite, conjure, convert, display, identify, import, magick-script, mogrify, montage, and stream are all symbolic links to magick)

Installed Libraries: libMagickCore-7.Q16HDRI.so, libMagickWand-7.Q16HDRI.so and libMagick++-7.Q16HDRI.so

Installed Directories: /etc/ImageMagick-7, /usr/include/ImageMagick-7, /usr/lib/ImageMagick-7.0.6, /usr/lib/perl5/site_perl/<5.x.y>/<arch-linux>/{,auto}/Image/Magick, /usr/share/doc/ImageMagick-7.0.6, and /usr/share/ImageMagick-7

Short Descriptions

animate	animates a sequence of images.
compare	compares an image to a reconstructed image.
composite	composites various images into the given base image.
conjure	processes a MSL script to create an image.
convert	converts image(s) from one format to another.
display	displays an image.
identify	describes the format and characteristics of an image file.
import	captures an X window.
Magick{++,Core,Wand}-config	show information about the installed versions of the ImageMagick libraries.
mogrify	transforms an image.
montage	composites various images into a new image.
stream	streams one or more pixel components of an image or portion of the image to your choice of storage formats.
`Image::Magick`	allows the reading, manipulation and writing of a large number of image file formats using the ImageMagick library. Run make in the `PerlMagick/demo` directory of the package source tree after the package is installed to see a nice demo of the module's capabilities.
`libMagickCore-7.Q16HDRI.so`	provides the C API for ImageMagick.
`libMagickWand-7.Q16HDRI.so`	is the recommended C API for ImageMagick. Unlike the MagickCore API it uses only a few opaque types.
`libMagick++-7.Q16HDRI.so`	provides the C++ API for ImageMagick.

Last updated on 2017-08-29 05:39:52 -0700

ISO Codes-3.75

Introduction to ISO Codes

The ISO Codes package contains a list of country, language and currency names and it is used as a central database for accessing this data.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://pkg-isocodes.alioth.debian.org/downloads/iso-codes-3.75.tar.xz
Download MD5 sum: 9ba173b69d4360003414f23837597a92
Download size: 3.3 MB
Estimated disk space required: 78 MB
Estimated build time: 0.2 SBU (with tests)

ISO Codes Dependencies

Required

Python-3.6.2

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/iso-codes

Installation of ISO Codes

Install ISO Codes by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Note

If you install ISO codes over a previous installed version, the install step will fail when creating some symlinks. In order to properly update them, run:

sed -i '/^LN_S/s/s/sfvn/' */Makefile

Now, as the root user:

make install

Installed Programs: None

Installed Libraries: None

Installed Directory: /usr/share/iso-codes, /usr/share/xml/iso-codes

Last updated on 2017-08-21 16:43:13 -0700

lsof-4.89

Introduction to lsof

The lsof package is useful to LiSt Open Files for a given running application or process.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.mirrorservice.org/sites/lsof.itap.purdue.edu/pub/tools/unix/lsof/lsof_4.89.tar.bz2
Download MD5 sum: 1b9cd34f3fb86856a125abbf2be3a386
Download size: 768 KB
Estimated disk space required: 9.5 MB
Estimated build time: less than 0.1 SBU

lsof Dependencies

Required

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/lsof

Installation of lsof

The contents of the lsof tarball include another tarball with the source code, which needs, in turn, to be unpacked. Install lsof by running the following commands:

tar -xf lsof_4.89_src.tar  &&
cd lsof_4.89_src           &&
./Configure -n linux       &&
make CFGL="-L./lib -ltirpc"

This package does not come with a working test suite.

Now, as the root user:

install -v -m0755 -o root -g root lsof /usr/bin &&
install -v lsof.8 /usr/share/man/man8

Command Explanations

./Configure -n linux: Avoid AFS, customization, and inventory checks, and use the linux dialect.

make CFGL="-L./lib -ltirpc": Add the libtirpc libraries location to the make command.

Installed Program: lsof

Installed Libraries: None

Installed Directories: None

Short Descriptions

lsof

lists open files for running processes.

Last updated on 2017-08-20 15:06:11 -0700

pinentry-1.0.0

Introduction to PIN-Entry

The PIN-Entry package contains a collection of simple PIN or pass-phrase entry dialogs which utilize the Assuan protocol as described by the Ägypten project. PIN-Entry programs are usually invoked by the gpg-agent daemon, but can be run from the command line as well. There are programs for various text-based and GUI environments, including interfaces designed for Ncurses (text-based), and for the common GTK and Qt toolkits.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.gnupg.org/ftp/gcrypt/pinentry/pinentry-1.0.0.tar.bz2
Download (FTP): ftp://ftp.gnupg.org/gcrypt/pinentry/pinentry-1.0.0.tar.bz2
Download MD5 sum: 4a3fad8b31f9b4c5526c8837495015dc
Download size: 428 KB
Estimated disk space required: 7.7 MB
Estimated build time: less than 0.1 SBU

PIN-Entry Dependencies

Required

Libassuan-2.4.3 and libgpg-error-1.27

Optional

Emacs-25.2, Gcr-3.20.0, GTK+-2.24.31, GTK+-3.22.18, libsecret-0.18.5, and Qt-5.9.1

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/pinentry

Installation of PIN-Entry

Install PIN-Entry by running the following commands:

./configure --prefix=/usr &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--enable-inside-emacs=yes/no: Default is no.

--enable-pinentry-qt=yes/no: Default is yes.

--enable-pinentry-gtk2=yes/no: Default is yes. Even if other pinentry-* is installed, pinentry will be a symlink to pinentry-gtk-2.

--enable-pinentry-gnome3=yes/no: Default is yes. Actually, it is the gtk3 pinentry.

Installed Programs: pinentry (symlink), pinentry-curses, pinentry-emacs, pinentry-gnome3, pinentry-gtk-2, pinentry-qt, and pinentry-tty

Installed Libraries: None

Installed Directory: None

Short Descriptions

pinentry	is a symbolic link to the default PIN-Entry program.
pinentry-curses	is an Ncurses text-based PIN-Entry helper program.
pinentry-emacs	is an Emacs version of the PIN-Entry helper program.
pinentry-gnome3	is a GNOME-3 PIN-Entry helper program.
pinentry-gtk-2	is a GTK+2 PIN-Entry program program.
pinentry-qt	is a Qt4 or 5 PIN-Entry helper program.
pinentry-tty	is a tty PIN-Entry helper program.

Last updated on 2017-08-26 21:14:29 -0700

Rarian-0.8.1

Introduction to Rarian

The Rarian package is a documentation metadata library based on the proposed Freedesktop.org spec. Rarian is designed to be a replacement for ScrollKeeper.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/rarian/0.8/rarian-0.8.1.tar.bz2
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/rarian/0.8/rarian-0.8.1.tar.bz2
Download MD5 sum: 75091185e13da67a0ff4279de1757b94
Download size: 317 KB
Estimated disk space required: 6 MB
Estimated build time: 0.2 SBU

Rarian Dependencies

Installation of Rarian

Install Rarian by running the following commands:

./configure --prefix=/usr        \
            --disable-static     \
            --localstatedir=/var &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: rarian-example, rarian-sk-config, rarian-sk-extract, rarian-sk-gen-uuid, rarian-sk-get-cl, rarian-sk-get-content-list, rarian-sk-get-extended-content-list, rarian-sk-get-scripts, rarian-sk-install, rarian-sk-migrate, rarian-sk-preinstall, rarian-sk-rebuild, and rarian-sk-update

Installed Library: librarian.so

Installed Directories: /usr/include/rarian, /usr/share/help, /usr/share/librarian/manual, /usr/share/librarian/Templates/C, and /var/lib/rarian

Short Descriptions

rarian-example	prints a nice list of all available documents found by the library.
rarian-sk-config	emulates scrollkeeper-config.
rarian-sk-extract	is a wrapper around xsltproc to mimic scrollkeeper-extract.
rarian-sk-gen-uuid	generates a unique (random) uuid.
rarian-sk-get-cl	gets a content list (category tree).
rarian-sk-get-content-list	is a simple wrapper to make calling scrollkeeper-get-cl easier.
rarian-sk-get-extended-content-list	is a simple wrapper to make calling scrollkeeper-get-cl (extended) easier.
rarian-sk-get-scripts	emulates scrollkeeper-get-index-from-index-from-docpath, scrollkeeper-get-toc-from-docpath, and scrollkeeper-get-toc-from-id.
rarian-sk-install	emulates scrollkeeper-install and scrollkeeper-uninstall.
rarian-sk-migrate	takes in a directory full of omf's, reads and parses them and spews out an equivalent scroll file.
rarian-sk-preinstall	creates the omf file by reading an existing omf file and replacing the url for a resource with the url.
rarian-sk-rebuild	is a simple wrapper script to emulate scrollkeeper-rebuilddb.
rarian-sk-update	is compatible with the scrollkeeper-update script that's required to be run when installing new omf files. It converts the omf files into new-style scrolls.
`librarian.{so,a}`	is the API to build a list of available meta data files and allows access to these.

Last updated on 2017-08-29 10:55:51 -0700

Rep-gtk-0.90.8.3

Introduction to Rep-gtk

The rep-gtk package contains a Lisp and GTK binding. This is useful for extending GTK-2 and GDK libraries with Lisp. Starting at rep-gtk-0.15, the package contains the bindings to GTK and uses the same instructions. Both can be installed, if needed.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://download.tuxfamily.org/librep/rep-gtk/rep-gtk_0.90.8.3.tar.xz
Download MD5 sum: b20f72cf00d316d35fa7f84a6e7532af
Download size: 120 KB
Estimated disk space required: 13 MB
Estimated build time: 0.1 SBU

Rep-gtk Dependencies

Required

GTK+-2.24.31 and librep-0.92.7

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/rep-gtk

Installation of Rep-gtk

Install rep-gtk by running the following commands:

./autogen.sh --prefix=/usr &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Programs: None

Installed Libraries: Lisp bindings

Installed Directory: /usr/include/rep-gtk and /usr/lib/rep/gui

Short Descriptions

Lisp bindings

are libraries stored in /usr/lib/rep/gui/ that assist communication between Lisp and the GTK libraries.

Last updated on 2017-08-25 21:58:04 -0700

Screen-4.5.1

Introduction to Screen

Screen is a terminal multiplexor that runs several separate processes, typically interactive shells, on a single physical character-based terminal. Each virtual terminal emulates a DEC VT100 plus several ANSI X3.64 and ISO 2022 functions and also provides configurable input and output translation, serial port support, configurable logging, multi-user support, and many character encodings, including UTF-8. Screen sessions can be detached and resumed later on a different terminal.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/screen/screen-4.5.1.tar.gz
Download (FTP): ftp://ftp.gnu.org/gnu/screen/screen-4.5.1.tar.gz
Download MD5 sum: a8c5da2f42f8a18fa4dada2419d1549b
Download size: 944 KB
Estimated disk space required: 9.2 MB
Estimated build time: 0.1 SBU

Screen Dependencies

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/screen

Installation of Screen

Install Screen by running the following commands:

./configure --prefix=/usr                     \
            --infodir=/usr/share/info         \
            --mandir=/usr/share/man           \
            --with-socket-dir=/run/screen     \
            --with-pty-group=5                \
            --with-sys-screenrc=/etc/screenrc &&

sed -i -e "s%/usr/local/etc/screenrc%/etc/screenrc%" {etc,doc}/* &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
install -m 644 etc/etcscreenrc /etc/screenrc

Command Explanations

--with-socket-dir=/run/screen: This option places the per-user sockets in a standard location.

--with-sys-screenrc=/etc/screenrc: This option places the global screenrc file in /etc.

--with-pty-group=5: This option sets the gid to the value used by LFS.

Note

Older versions of LFS use the value 4 for the tty group. If you are using LFS version 7.1 or older, change the pty-group option to 4.

sed -i -e "s%/usr/local/etc/screenrc%/etc/screenrc%" {etc,doc}/*: This command corrects the configuration and documentation files to the location that is used here for the global screenrc file.

Configuring Screen

Config Files

/etc/screenrc and ~/.screenrc

Configuration Information

You may want to look at the example configuration file that was installed and customize it for your needs.

Installed Program: screen (symlink) and screen-4.5.1

Installed Libraries: None

Installed Directory: /usr/share/screen and /run/screen

Short Descriptions

screen

is a terminal multiplexor with VT100/ANSI terminal emulation.

Last updated on 2017-08-21 11:12:53 -0700

shared-mime-info-1.8

Introduction to Shared Mime Info

The Shared Mime Info package contains a MIME database. This allows central updates of MIME information for all supporting applications.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://people.freedesktop.org/~hadess/shared-mime-info-1.8.tar.xz
Download MD5 sum: f6dcadce764605552fc956563efa058c
Download size: 576 KB
Estimated disk space required: 11 MB
Estimated build time: 0.1 SBU (on a minimal system, up to 0.4 SBU on a fully loaded desktop)

Shared Mime Info Dependencies

Required

GLib-2.52.3 and libxml2-2.9.4

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/shared-mime-info

Installation of Shared Mime Info

Note

If your processor is not a very recent Intel, you may need to use make -j1 for this package.

Install Shared Mime Info by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Installed Program: update-mime-database

Installed Library: None

Installed Directory: /usr/share/mime

Short Descriptions

update-mime-database

assists in adding MIME data to the database.

Last updated on 2017-08-20 20:24:54 -0700

Sharutils-4.15.2

Introduction to Sharutils

The Sharutils package contains utilities that can create 'shell' archives.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/sharutils/sharutils-4.15.2.tar.xz
Download (FTP): ftp://ftp.gnu.org/gnu/sharutils/sharutils-4.15.2.tar.xz
Download MD5 sum: 5975ce21da36491d7aa6dc2b0d9788e0
Download size: 1.1 MB
Estimated disk space required: 22 MB (with the test suite)
Estimated build time: 0.4 SBU (with the test suite)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/sharutils

Installation of Sharutils

Install Sharutils by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue make check.

Now, as the root user:

make install

Installed Programs: shar, unshar, uudecode and uuencode

Installed Libraries: None

Installed Directories: None

Short Descriptions

shar	creates "shell archives" (or shar files) which are in text format and can be mailed.
unshar	unpacks a shar file.
uudecode	reads a file (or by default the standard input) and writes an encoded version to the standard output. The encoding uses only printing ASCII characters.
uuencode	reads a file (or by default the standard input) and decodes the uuencoded version to the standard output.

Last updated on 2017-08-16 21:41:37 -0700

tidy-html5-5.4.0

Introduction to Tidy HTML5

The Tidy HTML5 package contains a command line tool and libraries used to read HTML, XHTML and XML files and write cleaned up markup. It detects and corrects many common coding errors and strives to produce visually equivalent markup that is both W3C compliant and compatible with most browsers.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/htacg/tidy-html5/releases/download/5.4.0/tidy-html5-5.4.0.tar.gz
Download MD5 sum: 7e121e1da7e21dc47610b87aae4b4f65
Download size: 512 KB
Estimated disk space required: 8.4 MB
Estimated build time: 0.2 SBU

Tidy HTML5 Dependencies

Required

Installation of Tidy HTML5

Install Tidy HTML5 by running the following commands:

cd build/cmake &&

cmake -DCMAKE_INSTALL_PREFIX=/usr \
      -DCMAKE_BUILD_TYPE=Release  \
      -DBUILD_TAB2SPACE=ON        \
      ../..    &&

make

This package does not come with a test suite.

Now, as the root user:

make install &&
install -v -m755 tab2space /usr/bin

Command Explanations

-DCMAKE_BUILD_TYPE=Release: This switch is used to build the release library without any debug `assert` in the code.

-DBUILD_TAB2SPACE=ON: This switch is used to enable building the tab2space utility.

Configuring Tidy HTML5

Config Files

The absolute path of the file specified in $HTML_TIDY.

Configuration Information

The default configuration options can be set in the file defined in $HTML_TIDY. Additional configuration options can be passed to tidy via command line parameters or the -config <file> parameter.

Installed Programs: tab2space and tidy

Installed Library: libtidy.so and libtidys.a

Installed Directory: /usr/share/doc/tidy-5.4.0

Short Descriptions

tab2space	is a utility to expand tabs and ensure consistent line endings.
tidy	validates, corrects, and pretty-prints HTML files.
`libtidy.so and libtidys.a`	library provides the Tidy HTML5 API functions to tidy and can also be called by other programs.

Last updated on 2017-08-18 12:42:43 -0700

Time-1.7

Introduction to Time

The time utility is a program that measures many of the CPU resources, such as time and memory, that other programs use. The GNU version can format the output in arbitrary ways by using a printf-style format string to include various resource measurements.

Although the shell has a builtin command providing similar functionalities, this utility is reuired by the LSB.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/time/time-1.7.tar.gz
Download (FTP): ftp://ftp.gnu.org/gnu/time/time-1.7.tar.gz
Download MD5 sum: e38d2b8b34b1ca259cf7b053caac32b3
Download size: 101 KB
Estimated disk space required: 640 KB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/time

Installation of Time

Install Time by running the following commands:

sed -i 's/$(ACLOCAL)//' Makefile.in                                            &&
sed -i 's/lu", ptok ((UL) resp->ru.ru_maxrss)/ld", resp->ru.ru_maxrss/' time.c &&

./configure --prefix=/usr --infodir=/usr/share/info                            &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Program: time

Short Descriptions

time

reports various statistics about an executed command.

Last updated on 2017-08-23 21:43:54 -0700

tree-1.7.0

Introduction to tree

The tree application, as the name suggests, is useful to display, in a terminal, directory contents, including directories, files, links.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://mama.indstate.edu/users/ice/tree/src/tree-1.7.0.tgz
Download (FTP): ftp://mama.indstate.edu/linux/tree/tree-1.7.0.tgz
Download MD5 sum: abe3e03e469c542d8e157cdd93f4d8a6
Download size: 48 KB
Estimated disk space required: 656 KB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/tree

Installation of tree

Install tree by running the following commands:

make

This package does not come with a test suite.

Now, as the root user:

make MANDIR=/usr/share/man/man1 install &&
chmod -v 644 /usr/share/man/man1/tree.1

Installed Program: tree

Installed Libraries: None

Installed Directories: None

Short Descriptions

tree

displays a directory tree in a terminal.

Last updated on 2017-08-23 21:43:54 -0700

unixODBC-2.3.4

Introduction to unixODBC

The unixODBC package is an Open Source ODBC (Open DataBase Connectivity) sub-system and an ODBC SDK for Linux, Mac OSX, and UNIX. ODBC is an open specification for providing application developers with a predictable API with which to access data sources. Data sources include optional SQL Servers and any data source with an ODBC Driver. unixODBC contains the following components used to assist with the manipulation of ODBC data sources: a driver manager, an installer library and command line tool, command line tools to help install a driver and work with SQL, drivers and driver setup libraries.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (FTP): ftp://ftp.unixodbc.org/pub/unixODBC/unixODBC-2.3.4.tar.gz
Download MD5 sum: bd25d261ca1808c947cb687e2034be81
Download size: 1.8 MB
Estimated disk space required: 34 MB
Estimated build time: 0.4 SBU

unixODBC Dependencies

Optional

Mini SQL and Pth-2.0.7

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/unixodbc

Installation of unixODBC

Install unixODBC by running the following commands:

./configure --prefix=/usr \
            --sysconfdir=/etc/unixODBC &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&

find doc -name "Makefile*" -delete                &&
chmod 644 doc/{lst,ProgrammerManual/Tutorial}/*   &&

install -v -m755 -d /usr/share/doc/unixODBC-2.3.4 &&
cp      -v -R doc/* /usr/share/doc/unixODBC-2.3.4

Command Explanations

--enable-drivers: This parameter enables building the drivers that were installed by default in previous versions.

--enable-drivers-conf: This parameter enables building the driver configuration libraries that were installed by default in previous versions.

Configuring unixODBC

Config Files

/etc/unixODBC/*

Configuration Information

The files in /etc/unixODBC are meant to be configured by the system administrator (or the ODBC site administrator if appropriate privileges are granted to /etc/unixODBC). These files are not meant to be directly edited. The ODBC installer library is responsible for reading and writing the unixODBC config files.

Unfortunately, there are not many man, or any info pages for the various programs available in the unixODBC package. Along with the information in the “Short Descriptions” below and the documentation installed in /usr/share/doc/unixODBC-2.3.4, there are many README files throughout the source tree where the use and functionality of the programs can be found. Additionally, you can use the parameter -? for syntax and usage information. Lastly, the unixODBC web site at http://www.unixodbc.org/ has very good information.

Installed Programs: dltest, isql, iusql, odbc_config, odbcinst, and slencheck

Installed Libraries: libodbc.so, libodbccr.so, and libodbcinst.so

Installed Directories: /etc/unixODBC and /usr/share/doc/unixODBC-2.3.4

Short Descriptions

dltest	is a utility used to check a share library to see if it can be loaded and if a given symbol exists in it.
isql	is a utility which can be used to submit SQL to a data source and to format/output results. It can be used in batch or interactive mode.
iusql	provides the same functionality as the isql program.
odbc_config	is used to find out details about the installation of the unixODBC package.
odbcinst	is a utility created for install script/RPM writers. It is a command line interface to key functionality in the `libodbcinst` library. It does not copy any files (i.e., libraries) but it will modify the ODBC System Information for the user.
slencheck	is a utility which attempts to check whether an ODBC driver was built with 32-bit or 64-bit SQLLEN types.

Last updated on 2017-08-20 20:24:54 -0700

Xdg-user-dirs-0.16

Introduction to Xdg-user-dirs

Xdg-user-dirs is a tool to help manage “well known” user directories like the desktop folder and the music folder. It also handles localization (i.e. translation) of the filenames.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://user-dirs.freedesktop.org/releases/xdg-user-dirs-0.16.tar.gz
Download MD5 sum: 2c0703d02df610c9eaf0c22431bdabae
Download size: 252 KB
Estimated disk space required: 1.9 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/xdg-user-dirs

Installation of Xdg-user-dirs

Install xdg-user-dirs by running the following commands:

./configure --prefix=/usr --sysconfdir=/etc &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Program(s): xdg-user-dir and xdg-user-dirs-update.

Installed Librar(y,ies): None.

Installed Director(y,ies): None.

Short Descriptions

xdg-user-dir	looks up the current path for one of the XDG user directories.
xdg-user-dirs-update	creates localized versions of the user directories.

Last updated on 2017-08-26 15:47:53 -0700

Chapter 12. System Utilities

This chapter contains mainly hardware utilities. It also contains some applications used by other applications in the book for installation or configuration purposes.

acpid-2.0.28

Introduction to acpid

The acpid (Advanced Configuration and Power Interface event daemon) is a completely flexible, totally extensible daemon for delivering ACPI events. It listens on netlink interface and when an event occurs, executes programs to handle the event. The programs it executes are configured through a set of configuration files, which can be dropped into place by packages or by the user.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/acpid2/acpid-2.0.28.tar.xz
Download MD5 sum: 0432407b5ff75ae8e08afb43052fde2b
Download size: 158 KB
Estimated disk space required: 1.9 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/acpid

Installation of acpid

Install acpid by running the following commands:

./configure --prefix=/usr \
            --docdir=/usr/share/doc/acpid-2.0.28 &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&

install -v -m755 -d /etc/acpi/events &&

cp -r samples /usr/share/doc/acpid-2.0.28

Configuring acpid

acpid is configured by user defined events. Place event files under /etc/acpi/events directory. If an event occurs, acpid recurses through the event files in order to see if the regex defined after "event" matches. If they do, action is executed.

The following brief example will suspend the system when the laptop lid is closed (it requires pm-utils-1.4.1):

cat > /etc/acpi/events/lid << "EOF"
event=button/lid
action=/etc/acpi/lid.sh
EOF

cat > /etc/acpi/lid.sh << "EOF"
#!/bin/sh
/bin/grep -q open /proc/acpi/button/lid/LID/state && exit 0
/usr/sbin/pm-suspend
EOF
chmod +x /etc/acpi/lid.sh

Unfortunately, not every computer labels ACPI events in the same way. To determine how your buttons are recognized, use the acpi_listen tool. Also, look in package documentation's samples directory for more examples.

Systemd Socket

To start the acpid daemon at boot, install the systemd unit from the blfs-systemd-units-20160602 package by running the following command as the root user:

make install-acpid

Note

This package uses socket based activation and will be started when something needs it. No standalone unit file is provided for this package.

Installed Programs: acpid, acpi_listen, and kacpimon

Installed Libraries: None

Installed Directories: /etc/acpi and /usr/share/doc/acpid-2.0.28

Short Descriptions

acpid	is a program that listens for ACPI events and executes the rules that match the received event.
acpi_listen	is a simple tool which connects to acpid and listens for events.
kacpimon	is a monitor program that connects to three sources of ACPI events (events file, netlink and input layer) and then reports on what it sees while it is connected.

Last updated on 2017-08-23 21:43:54 -0700

at-3.1.20

Introduction to at

The at package provide delayed job execution and batch processing. It is required for Linux Standards Base (LSB) conformance.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.de.debian.org/debian/pool/main/a/at/at_3.1.20.orig.tar.gz
Download (FTP): ftp://ftp.de.debian.org/debian/pool/main/a/at/at_3.1.20.orig.tar.gz
Download MD5 sum: e7bd7b785b2cbb17e133d6bdc0fb099e
Download size: 128 KB
Estimated disk space required: 1.8 MB
Estimated build time: less than 0.1 SBU

at Dependencies

Required

An MTA

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/at

Installation of at

Before building at, as the root user you should create the group and user atd which will run the atd daemon. Also ensure the working directory for the daemon exists:

groupadd -g 17 atd                                                  &&
useradd -d /dev/null -c "atd daemon" -g atd -s /bin/false -u 17 atd &&
mkdir -p /var/spool/cron

Fix Makefile.in so that the documentation directory is installed in the specified docdir:

sed -i '/docdir/s/=.*/= @docdir@/' Makefile.in

Regenerate the build files to be consistent with this package version:

autoreconf

Install at with the following commands:

./configure --with-daemon_username=atd        \
            --with-daemon_groupname=atd       \
            SENDMAIL=/usr/sbin/sendmail       \
            --with-systemdsystemunitdir=/lib/systemd/system &&

make -j1

This package does not come with a test suite.

Now, as the root user:

make install \
        docdir=/usr/share/doc/at-3.1.20 \
      atdocdir=/usr/share/doc/at-3.1.20

Configuring at

Config Files

/etc/at.allow and /etc/at.deny determines who can submit jobs via at or batch.

Systemd Unit

To start the atd daemon at boot, enable the previously installed systemd unit by running the following command as the root user:

systemctl enable atd

Installed Programs: at, atd, atq (symlink), atrm (symlink), atrun, and batch

Installed Libraries: None

Installed Directories: /var/spool/cron/at{jobs,spool} and /usr/share/doc/at-3.1.20

Short Descriptions

at	queues, examines or deletes jobs for later execution.
atd	is the daemon that runs jobs queued for later execution.
atq	lists the user's pending jobs, or all jobs, if superuser.
atrm	deletes jobs, identified by their job number.
atrun	runs jobs queued for later execution.
batch	is a script that executes commands when system load levels permit.

Last updated on 2017-08-23 21:43:54 -0700

autofs-5.1.3

Introduction to Autofs

Autofs controls the operation of the automount daemons. The automount daemons automatically mount filesystems when they are accessed and unmount them after a period of inactivity. This is done based on a set of pre-configured maps.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.kernel.org/pub/linux/daemons/autofs/v5/autofs-5.1.3.tar.xz
Download MD5 sum: 57a6791e596b8b8ee2c4c50420881180
Download size: 296 KB
Estimated disk space required: 7.7 MB
Estimated build time: 0.1 SBU

Autofs Dependencies

Required

rpcsvc-proto-1.2,

Optional

libtirpc-1.0.2, nfs-utils-2.1.1, libxml2-2.9.4, MIT Kerberos V5-1.15.1, OpenLDAP-2.4.45 (client only), and Cyrus SASL-2.1.26

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/autofs

Kernel Configuration

Verify that automounter kernel support has been enabled:

File systems --->
  <*/M> Kernel automounter version 4 support (also supports v3) [CONFIG_AUTOFS4_FS]

Optionally, enable the following options in the kernel configuration:

File systems  --->
  [*] Network File Systems  --->                                      [CONFIG_NETWORK_FILESYSTEMS]
    <*/M> NFS client support                                          [CONFIG_NFS_FS]
    <*/M> CIFS support (advanced network filesystem, SMBFS successor) [CONFIG_CIFS]

Recompile and install the new kernel, if necessary.

Installation of Autofs

Install Autofs by running the following commands:

./configure --prefix=/         \
            --with-systemd     \            
            --without-openldap \
            --mandir=/usr/share/man &&

CFLAGS+='-I/usr/include/tirpc/' make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--with-systemd: This switch enables installation of the bundled systemd units.

--without-openldap: This switch disables openldap if found. If openldap is desired, omit this switch. Note that openldap support in autofs requires MIT Kerberos V5-1.15.1.

--with-libtirpc: This switch enables libtirpc support if available.

Configuring Autofs

Config Files

/etc/sysconfig/autofs.conf, /etc/auto.master, /etc/auto.misc, and /etc/auto.net

Configuration Information

The installation process creates auto.master, auto.misc, auto.smb, and auto.net. Replace the auto.master file with the following commands as the root user:

mv /etc/auto.master /etc/auto.master.bak &&
cat > /etc/auto.master << "EOF"
# Begin /etc/auto.master

/media/auto  /etc/auto.misc  --ghost
#/home        /etc/auto.home

# End /etc/auto.master
EOF

This file creates a new media directory, /media/auto that will overlay any existing directory of the same name. In this example, the file, /etc/auto.misc, has a line:

cd   -fstype=iso9660,ro,nosuid,nodev :/dev/cdrom

that will mount a cdrom as /media/auto/cd if that directory is accessed. The --ghost option tells the automounter to create “ghost” versions (i.e. empty directories) of all the mount points listed in the configuration file regardless whether any of the file systems are actually mounted or not. This is very convenient and highly recommended, because it will show you the available auto-mountable file systems as existing directories, even when their file systems aren't currently mounted. Without the --ghost option, you'll have to remember the names of the directories. As soon as you try to access one of them, the directory will be created and the file system will be mounted. When the file system gets unmounted again, the directory is destroyed too, unless the --ghost option was given.

Note

An alternative method would be to specify another automount location such as /var/lib/auto/cdrom and create a symbolic link from /media/cdrom to the automount location.

The auto.misc file must be configured to your working hardware. The loaded configuration file should load your cdrom if /dev/cdrom is active or it can be edited to match your device setup. Examples for floppies are available in the file and easily activated. Documentation for this file is available using the man 5 autofs command.

In the second line, if enabled, a user's home directory would be mounted via NFS upon login. The /etc/home.auto would need to exist and have an entry similar to:

joe  example.org:/export/home/joe

where the directory /export/home/joe is exported via NFS from the system example.org. NFS shares are covered on the next page.

This package could also be used to mount SMB shares, however that feature is not configured in these instructions. For additional configuration information, see the man pages for auto.master(5). There are also web resources such as this AUTOFS HOWTO available.

Systemd Unit

To start Autofs at boot, enable the previously installed systemd unit by running the following command as the root user:

systemctl enable autofs

Note

You can also specify OPTIONS variable in the /etc/sysconfig/autofs file with any additional parameters that you might want to pass to the automount daemon.

Installed Program: automount

Installed Libraries: lookup_dir.so, lookup_file.so, lookup_files.so, lookup_hosts.so, lookup_ldap.so, lookup_multi.so, lookup_nis.so, lookup_nisplus.so, lookup_program.so, lookup_userhome.so, lookup_yp.so, mount_afs.so, mount_autofs.so, mount_bind.so, mount_changer.so, mount_ext2.so, mount_ext3.so, mount_ext4.so, mount_generic.so, mount_nfs.so, mount_nfs4.so, parse_amd.so, and parse_sun.so

Installed Directories: /lib/autofs

Short Descriptions

automount

is the daemon that performs the mounting when a request is made for the device.

Last updated on 2017-08-29 10:55:51 -0700

BlueZ-5.46

Introduction to BlueZ

The BlueZ package contains the Bluetooth protocol stack for Linux.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.kernel.org/pub/linux/bluetooth/bluez-5.46.tar.xz
Download MD5 sum: 913f35d6fa4ca5772c53adb936bf1947
Download size: 1.6 MB
Estimated disk space required: 55 MB (add 13 MB for tests)
Estimated build time: 0.5 SBU (add 0.3 SBU for tests)

Additional Downloads

Optional patch (required to work properly with gnome-bluetooth and/or kde bluedevil): http://www.linuxfromscratch.org/patches/blfs/8.1/bluez-5.46-obexd_without_systemd-1.patch

BlueZ Dependencies

Required

dbus-1.10.22, GLib-2.52.3, and libical-2.0.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/bluez

Kernel Configuration

Enable the following options in the kernel configuration and recompile the kernel if necessary:

[*] Networking support --->                [CONFIG_NET]
  </M> Bluetooth subsystem support --->    [CONFIG_BT]
    <*/M> RFCOMM protocol support          [CONFIG_BT_RFCOMM]
    [*]   RFCOMM TTY support               [CONFIG_BT_RFCOMM_TTY]
    <*/M> BNEP protocol support            [CONFIG_BT_BNEP]
    [*]   Multicast filter support         [CONFIG_BT_BNEP_MC_FILTER]
    [*]   Protocol filter support          [CONFIG_BT_BNEP_PROTO_FILTER]
    <*/M> HIDP protocol support            [CONFIG_BT_HIDP]
        Bluetooth device drivers --->
          (Select the appropriate drivers for your Bluetooth hardware)

  <*/M> RF switch subsystem support --->   [CONFIG_RFKILL]

Installation of BlueZ

If you are going to use BlueZ with gnome-bluetooth and/or kde bluedevil, apply the following patch:

patch -Np1 -i ../bluez-5.46-obexd_without_systemd-1.patch

Install BlueZ by running the following commands:

./configure --prefix=/usr         \
            --sysconfdir=/etc     \
            --localstatedir=/var  \
            --enable-library      &&
make

To test the results, issue: make check.

Now, as the root user:

make install &&
ln -svf ../libexec/bluetooth/bluetoothd /usr/sbin

Install the main configuration file as the root user:

install -v -dm755 /etc/bluetooth &&
install -v -m644 src/main.conf /etc/bluetooth/main.conf

If desired, install the API documentation as the root user:

install -v -dm755 /usr/share/doc/bluez-5.46 &&
install -v -m644 doc/*.txt /usr/share/doc/bluez-5.46

Command Explanations

--enable-library: This switch enables building the BlueZ 4 compatibility library which is required by some applications.

ln -svf ../libexec/bluetooth/bluetoothd /usr/sbin: This command makes access to the bluetooth daemon more convenient.

Configuring BlueZ

Configuration Files

/etc/bluetooth/main.conf is installed automatically during the install. Additionally, there are three supplementary configuration files. /etc/sysconfig/bluetooth is installed as a part of the boot script below. In addition, you optionally can install the following, as the root user:

cat > /etc/bluetooth/rfcomm.conf << "EOF"
# Start rfcomm.conf
# Set up the RFCOMM configuration of the Bluetooth subsystem in the Linux kernel.
# Use one line per command
# See the rfcomm man page for options


# End of rfcomm.conf
EOF

cat > /etc/bluetooth/uart.conf << "EOF"
# Start uart.conf
# Attach serial devices via UART HCI to BlueZ stack
# Use one line per device
# See the hciattach man page for options

# End of uart.conf
EOF

Systemd Socket

To start the bluetoothd daemon at boot, enable the previously installed systemd unit by running the following command as the root user:

systemctl enable bluetooth

Note

Systemd will start the Bluetooth daemon only when a bluetooth device is detected on the system.

Installed Programs: bccmd, bluemoon, bluetoothctl, bluetoothd (symlink), btattach, btmon, ciptool, hciattach, hciconfig, hcidump, hcitool, hex2hcd, l2ping, l2test, mpris-proxy, rctest, rfcomm, and sdptool

Installed Library: libbluetooth.so

Installed Directories: /etc/bluetooth, /usr/{include,libexec}/bluetooth, and /usr/share/doc/bluez-5.46

Short Descriptions

bccmd	is used to issue BlueCore commands to Cambridge Silicon Radio devices.
bluemoon	is a Bluemoon configuration utility.
bluetoothctl	is the interactive Bluetooth control program.
bluetoothd	is the Bluetooth daemon.
btmon	provides access to the Bluetooth subsystem monitor infrastructure for reading HCI traces.
ciptool	is used to set up, maintain, and inspect the CIP configuration of the Bluetooth subsystem in the Linux kernel.
hciattach	is used to attach a serial UART to the Bluetooth stack as HCI transport interface.
hciconfig	is used to configure Bluetooth devices.
hcidump	reads raw HCI data coming from and going to a Bluetooth device and prints to screen commands, events and data in a human-readable form.
hcitool	is used to configure Bluetooth connections and send some special command to Bluetooth devices.
hex2hcd	is used to convert a file needed by Broadcom devices to hcd (Broadcom bluetooth firmware) format.
l2ping	is used to send a L2CAP echo request to the Bluetooth MAC address given in dotted hex notation.
l2test	is a L2CAP testing program.
rctest	is used to test RFCOMM communications on the Bluetooth stack.
rfcomm	is used to set up, maintain, and inspect the RFCOMM configuration of the Bluetooth subsystem in the Linux kernel.
sdptool	is used to perform SDP queries on Bluetooth devices.
`libbluetooth.so`	contains the BlueZ 4 API functions.

Last updated on 2017-08-22 13:27:15 -0700

Colord-1.2.12

Introduction to Colord

Colord is a system activated daemon that maps devices to color profiles. It is used by GNOME Color Manager for system integration and use when there are no users logged in.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.freedesktop.org/software/colord/releases/colord-1.2.12.tar.xz
Download MD5 sum: 80b106ba18a43c7eeaf2d9a2b8c5725b
Download size: 1.2 MB
Estimated disk space required: 37 MB (without tests)
Estimated build time: 0.4 SBU (without tests)

Colord Dependencies

Required

dbus-1.10.22, GLib-2.52.3, Little CMS-2.8, and SQLite-3.20.0

Required (for the tests)

RRDtool (required to build the sensord program)

Optional

DocBook-utils-0.6.14, gnome-desktop-3.24.2 and colord-gtk-0.1.26 (to build the example tools), GTK-Doc-1.26, libxslt-1.1.29, SANE-1.0.27, ArgllCMS, and Bash Completion,

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/colord

Installation of Colord

There should be a dedicated user and group to take control of the colord daemon after it is started. Issue the following commands as the root user:

groupadd -g 71 colord &&
useradd -c "Color Daemon Owner" -d /var/lib/colord -u 71 \
        -g colord -s /bin/false colord

Install Colord by running the following commands:

./configure --prefix=/usr                \
            --sysconfdir=/etc            \
            --localstatedir=/var         \
            --with-daemon-user=colord    \
            --enable-vala                \
            --disable-argyllcms-sensor   \
            --disable-bash-completion    \
            --disable-static &&
make

Now, as the root user:

make install

To test the results, issue: make -k check. For unknown reasons, some tests may fail. Note that the system-wide D-Bus daemon must be running or the tests will fail.

Command Explanations

--with-daemon-user=colord: This switch is used so the colord daemon will run as an unprivileged user instead of root user.

--enable-vala: This switch enables building of the Vala bindings. Remove if you don't have Vala-0.36.4 installed.

--disable-argyllcms-sensor: Disables ArgllCMS sensor driver.

--disable-bash-completion: This switch disables Bash Completion support for Colord apps.

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this switch if GTK-Doc is installed and you wish to build and install the API documentation.

--disable-gusb: Use this switch if you don't have libgusb installed.

--disable-udev: Use this switch if you don't have GUdev installed.

--disable-polkit: Use this switch if you don't have Polkit installed.

Installed Programs: cd-create-profile, cd-fix-profile, cd-iccdump, cd-it8, and colormgr

Installed Libraries: libcolord.so, libcolordprivate.so, and libcolorhug.so

Installed Directories: /usr/include/colord-1, /usr/lib/colord-{plugins,sensors}, /usr/share/color{,d}, /usr/share/gtk-doc/html/colord, and /var/lib/colord

Short Descriptions

cd-create-profile	is a Color Manager Profile Creation Tool.
cd-fix-profile	is a tool used to fix metadata in ICC profiles.
cd-iccdump	dumps the contents of an ICC profile as human readable text.
cd-it8	is a Color Manager Testing Tool.
colormgr	is a text-mode program that allows you to interact with colord on the command line.
`libcolord.so`	contains the Colord API functions.

Last updated on 2017-08-22 13:27:15 -0700

Colord-1.3.5

Introduction to Colord

Colord is a system service that makes it easy to manage, install, and generate color profiles. It is used mainly by GNOME Color Manager for system integration and use when no users are logged in.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.freedesktop.org/software/colord/releases/colord-1.3.5.tar.xz
Download MD5 sum: a8e7fcf0a45383ca7a65cef91ca5e019
Download size: 1.2 MB
Estimated disk space required: 44 MB (with tests)
Estimated build time: 0.7 SBU (with tests)

Colord Dependencies

Required

dbus-1.10.22, GLib-2.52.3, Little CMS-2.8, and SQLite-3.20.0

Optional

DocBook-utils-0.6.14, gnome-desktop-3.24.2 and colord-gtk-0.1.26 (to build the example tools), GTK-Doc-1.26, libxslt-1.1.29, SANE-1.0.27, ArgLLCMS, and Bash Completion

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/colord1

Installation of Colord

Warning

This package will overwrite any previous version of Colord that you may have on your system. This package is a development version and is only intended to be used by gnome-color-manager at this time.

There should be a dedicated user and group to take control of the colord daemon after it has started. Issue the following commands as the root user:

groupadd -g 71 colord &&
useradd -c "Color Daemon Owner" -d /var/lib/colord -u 71 \
        -g colord -s /bin/false colord

Install Colord by running the following commands:

./configure --prefix=/usr              \
            --sysconfdir=/etc          \
            --localstatedir=/var       \
            --with-daemon-user=colord  \
            --enable-vala              \
            --enable-daemon            \
            --enable-session-helper    \
            --enable-libcolordcompat   \
            --disable-rpath            \
            --disable-argyllcms-sensor \
            --disable-bash-completion  \
            --disable-static &&
make

Now, as the root user:

make install

To test the results, issue: make -k check. At least one test, ./lib/colord/.libs/lt-cd-test-daemon, may fail. The test suite must be run after the package is installed, and the system-wide D-Bus Daemon must be running.

Command Explanations

--with-daemon-user=colord: This switch is used so the colord daemon will run as an unprivileged user instead of the root user.

--enable-vala: This switch enables building the Vala bindings. Remove if you don't have Vala-0.36.4 installed.

--enable-daemon: This switch enables building the Colord daemon.

--enable-session-helper: This switch enables building the session helper for Colord.

--enable-libcolordcompat: This switch enables building a compatibility library for older packages that use Colord.

--disable-rpath: This switch prevents the build process from hard-coding library paths into its executables.

--disable-argyllcms-sensor: This switch disables the ArgLLCMS sensor driver. Omit if you have ArgLLCMS installed and wish to use it.

--disable-bash-completion: This switch disables Bash Completion support for Colord applications.

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

--disable-gusb: Use this switch if you don't have libgusb installed.

--disable-udev: Use this switch if you don't have libgudev installed.

--disable-polkit: Use this switch if you don't have polkit installed.

Installed Programs: cd-create-profile, cd-fix-profile, cd-iccdump, cd-it8, and colormgr

Installed Libraries: libcolord.so, libcolordcompat.so, libcolordprivate.so, and libcolorhug.so

Installed Directories: /usr/include/colord-1, /usr/lib/colord-{plugins,sensors}, /usr/share/color{d}, /usr/share/gtk-doc/html/colord, and /var/lib/colord

Short Descriptions

cd-create-profile	is the Color Manager Profile Creation Tool.
cd-fix-profile	is a tool used to fix metadata in ICC profiles.
cd-iccdump	dumps the contents of an ICC profile as human readable text.
cd-it8	is the Color Manager Testing Tool.
colormgr	is a text-mode program that allows you to interact with colord on the command line.
`libcolord.so`	contains the Colord API functions.
`libcolordcompat.so`	contains legacy API functions for compatibility with older applications.
`libcolordprivate.so`	contains internal API functions for the programs included with Colord.
`libcolorhug.so`	contains a simple display hardware colorimiter.

Last updated on 2017-08-20 20:24:54 -0700

cpio-2.12

Introduction to cpio

The cpio package contains tools for archiving.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/cpio/cpio-2.12.tar.bz2
Download (FTP): ftp://ftp.gnu.org/gnu/cpio/cpio-2.12.tar.bz2
Download MD5 sum: 93eea9f07c0058c097891c73e4955456
Download size: 1.2 MB
Estimated disk space required: 18 MB (with tests and docs)
Estimated build time: 0.3 SBU (with tests and docs)

CPIO Dependencies

Optional

texlive-20170524 (or install-tl-unx)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/cpio

Installation of cpio

Install cpio by running the following commands:

./configure --prefix=/usr \
            --bindir=/bin \
            --enable-mt   \
            --with-rmt=/usr/libexec/rmt &&
make &&
makeinfo --html            -o doc/html      doc/cpio.texi &&
makeinfo --html --no-split -o doc/cpio.html doc/cpio.texi &&
makeinfo --plaintext       -o doc/cpio.txt  doc/cpio.texi

If you have texlive-20170524 installed and wish to create PDF or Postscript documentation, issue one or both of the following commands:

make -C doc pdf &&
make -C doc ps

To test the results, issue: make check.

Now, as the root user:

make install &&
install -v -m755 -d /usr/share/doc/cpio-2.12/html &&
install -v -m644    doc/html/* \
                    /usr/share/doc/cpio-2.12/html &&
install -v -m644    doc/cpio.{html,txt} \
                    /usr/share/doc/cpio-2.12

If you built PDF or Postscript documentation, install it by issuing the following commands as the root user:

install -v -m644 doc/cpio.{pdf,ps,dvi} \
                 /usr/share/doc/cpio-2.12

Command Explanations

--bindir=/bin: This parameter installs cpio to /bin instead of /usr/bin as recommended by the FHS guidelines.

--enable-mt: This parameter forces the building and installation of the mt program.

--with-rmt=/usr/libexec/rmt: This parameter inhibits building the rmt program as it is already installed by the Tar package in LFS.

Installed Programs: cpio and mt

Installed Libraries: None

Installed Directories: /usr/share/doc/cpio-2.12

Short Descriptions

cpio	copies files to and from archives.
mt	controls magnetic tape drive operations.

Last updated on 2017-08-20 20:24:54 -0700

cups-pk-helper-0.2.6

Introduction to cups-pk-helper

The cups-pk-helper package contains a PolicyKit helper used to configure Cups with fine-grained privileges.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.freedesktop.org/software/cups-pk-helper/releases/cups-pk-helper-0.2.6.tar.xz
Download MD5 sum: a9045c7db6e502d6496da8fc71d8820e
Download size: 160 KB
Estimated disk space required: 5.9 MB
Estimated build time: less than 0.1 SBU

cups-pk-helper Dependencies

Required

Cups-2.2.4 and Polkit-0.113+git_2919920+js38

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/cups-pk-helper

Installation of cups-pk-helper

Install cups-pk-helper by running the following commands:

./configure --prefix=/usr --sysconfdir=/etc &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Programs: cups-pk-helper-mechanism (library executable)

Installed Libraries: None

Installed Directories: None

Last updated on 2017-08-30 15:02:32 -0700

dbus-1.10.22

Introduction to D-Bus

Even though D-Bus was built in LFS, there are some features provided by the package that other BLFS packages need, but their dependencies didn't fit into LFS.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://dbus.freedesktop.org/releases/dbus/dbus-1.10.22.tar.gz
Download MD5 sum: baaa10b7cb49086ad91179a8decfadc5
Download size: 1.9 MB
Estimated disk space required: 27 MB (add 33 MB for the tests)
Estimated build time: 0.4 SBU (add 2.4 SBU for the tests)

D-Bus Dependencies

Required

Systemd-234

Optional

For the tests: dbus-glib-0.108, D-Bus Python-1.2.4, PyGObject-2.28.6 (built with gobject-introspection support), and Valgrind-3.13.0; for documentation: Doxygen-1.8.13, xmlto-0.0.28, Ducktype, and Yelp Tools

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/dbus

Installation of D-Bus

Install D-Bus by running the following commands (you may wish to review the output from ./configure --help first and add any desired parameters to the configure command shown below):

./configure --prefix=/usr                        \
            --sysconfdir=/etc                    \
            --localstatedir=/var                 \
            --enable-user-session                \
            --disable-doxygen-docs               \
            --disable-xml-docs                   \
            --disable-static                     \
            --docdir=/usr/share/doc/dbus-1.10.22 \
            --with-console-auth-dir=/run/console \
            --with-system-pid-file=/run/dbus/pid \
            --with-system-socket=/run/dbus/system_bus_socket &&
make

See below for test instructions.

Warning

Installing the package will override all files installed by D-Bus in LFS. It is critical that nothing uses D-Bus libraries or programs during the installation. The best way to ensure that these libraries are not being used is to run the installation in rescue mode. To switch to rescue mode, run the following command as the root user (from a TTY):

systemctl start rescue.target

Now, as the root user:

make install

The shared library needs to be moved to /lib, and as a result the .so file in /usr/lib will need to be recreated. Run the following command as the root user:

mv -v /usr/lib/libdbus-1.so.* /lib &&
ln -sfv ../../lib/$(readlink /usr/lib/libdbus-1.so) /usr/lib/libdbus-1.so

If you are using a DESTDIR install, dbus-daemon-launch-helper needs to be fixed afterwards. Issue, as root user:

chown -v root:messagebus /usr/libexec/dbus-daemon-launch-helper &&
chmod -v      4750       /usr/libexec/dbus-daemon-launch-helper

If not in chroot, at this point, you should reload the systemd daemon, and reenter multi-user mode with the following commands (as the root user):

systemctl daemon-reload
systemctl start multi-user.target

The dbus tests cannot be run until after dbus-glib-0.108 has been installed. They must be run as an unprivileged user from a local session with bus address. If you want to run only the unit tests, replace, below, --enable-tests by --enable-embedded-tests, otherwise, D-Bus Python-1.2.4 has to be installed, before. The tests require passing additional parameters to configure and exposing additional functionality in the binaries. These interfaces are not intended to be used in a production build of D-Bus. If you would like to run the tests, issue the following commands (for the tests, you don't need to build the docs):

make distclean                     &&
./configure --enable-tests         \
            --enable-asserts       \
            --disable-doxygen-docs \
            --disable-xml-docs     &&
make                               &&
make check

The “estimated disk space required” reported above is obtained in a build using the switches disabling documents generation. This and the use of the make distclean command implies that the build directory size is smaller than the one for a full build with documents generated.

There has been a report that the tests may fail if running inside a Midnight Commander shell. You may get out-of-memory error messages when running the tests. These are normal and can be safely ignored.

Command Explanations

--disable-doxygen-docs: This switch disables doxygen documentation build and install, if you have doxygen installed. If doxygen is installed, and you wish to build them, remove this parameter.

--disable-xml-docs: This switch disables html documentation build and install, if you have xmlto installed. If xmlto is installed, and you wish to build them, remove this parameter.

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-user-session: This parameter enables per-user DBus sessions with systemd.

--with-console-auth-dir=/run/console/: This parameter specifies location of the ConsoleKit auth dir.

--with-system-pid-file=/run/dbus/pid: This parameter specifies the location of the PID file.

--with-system-socket=/run/dbus/system_bus_socket: This parameter specifies the location of the system bus socket.

--enable-tests: Build extra parts of the code to support all tests. Configure will end with a NOTE warning about increased size of libraries and decreased security.

--enable-embedded-tests: Build extra parts of the code to support only unit tests. Configure will end with a NOTE warning about increased size of libraries and decreased security.

--enable-asserts: Enable debugging code to run assertions for statements normally assumed to be true. This prevents a warning that '--enable-tests' on its own is only useful for profiling and might not give true results for all tests, but adds its own NOTE that this should not be used in a production build.

Configuring D-Bus

Config Files

/etc/dbus-1/session.conf, /etc/dbus-1/system.conf and /etc/dbus-1/system.d/*

Configuration Information

The configuration files listed above should probably not be modified. If changes are required, you should create /etc/dbus-1/session-local.conf and/or /etc/dbus-1/system-local.conf and make any desired changes to these files.

If any packages install a D-Bus .service file outside of the standard /usr/share/dbus-1/services directory, that directory should be added to the local session configuration. For instance, /usr/local/share/dbus-1/services can be added by performing the following commands as the root user:

cat > /etc/dbus-1/session-local.conf << "EOF"
<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>

  <!-- Search for .service files in /usr/local -->
  <servicedir>/usr/local/share/dbus-1/services</servicedir>

</busconfig>
EOF

D-Bus Session Daemon

There are many methods you can use to start a session daemon using the dbus-launch command. Review the dbus-launch man page for details about the available parameters and options. Here are some suggestions and examples:

Add dbus-launch to the line in the ~/.xinitrc file that starts your graphical desktop environment.
If you use xdm or some other display manager that calls the ~/.xsession file, you can add dbus-launch to the line in your ~/.xsession file that starts your graphical desktop environment. The syntax would be similar to the example in the ~/.xinitrc file.
The examples shown previously use dbus-launch to specify a program to be run. This has the benefit (when also using the --exit-with-session parameter) of stopping the session daemon when the specified program is stopped. You can also start the session daemon in your system or personal startup scripts by adding the following lines:
```
# Start the D-Bus session daemon
eval `dbus-launch`
export DBUS_SESSION_BUS_ADDRESS
```
This method will not stop the session daemon when you exit your shell, therefore you should add the following line to your ~/.bash_logout file:
```
# Kill the D-Bus session daemon
kill $DBUS_SESSION_BUS_PID
```
A hint has been written that provides ways to start scripts using the KDM session manager of KDE. The concepts in this hint could possibly be used with other session managers as well. The hint is located at http://www.linuxfromscratch.org/hints/downloads/files/execute-session-scripts-using-kdm.txt.

A list of the installed files, along with their short descriptions can be found at ../../../../lfs/view/8.1-systemd/chapter06/dbus.html#contents-dbus.

Last updated on 2017-08-20 19:38:12 -0700

Fcron-3.2.0

Introduction to Fcron

The Fcron package contains a periodical command scheduler which aims at replacing Vixie Cron.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://fcron.free.fr/archives/fcron-3.2.0.src.tar.gz
Download MD5 sum: 4b031c2fba32a98fa814d1557158b0e9
Download size: 584 KB
Estimated disk space required: 5.1 MB
Estimated build time: 0.1 SBU

Fcron Dependencies

Optional

An MTA, text editor (default is vi from the Vim-8.0.586 package), Linux-PAM-1.3.0, and DocBook-utils-0.6.14

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/fcron

Installation of Fcron

For security reasons, an unprivileged user and group for Fcron should be created (perform as the root user):

groupadd -g 22 fcron &&
useradd -d /dev/null -c "Fcron User" -g fcron -s /bin/false -u 22 fcron

Install Fcron by running the following commands:

./configure --prefix=/usr          \
            --sysconfdir=/etc      \
            --localstatedir=/var   \
            --without-sendmail     \
            --with-boot-install=no &&
make

This package does not come with a test suite.

Now, as the root user:

make install

DESTDIR install must be done as root user.

Command Explanations

--without-sendmail: By default, Fcron will attempt to use the sendmail command from an MTA package to email you the results of the fcron script. This switch is used to disable default email notification. Omit the switch to enable the default. Alternatively, you can use the --with-sendmail=</path/to/MTA command> to use a different mailer command.

--with-boot-install=no: This prevents installation of the bootscript included with the package.

--with-editor=</path/to/editor>: This switch allows you to set the default text editor.

--with-dsssl-dir=</path/to/dsssl-stylesheets>: May be used if you have DocBook-utils-0.6.14 installed. Currently, the dsssl stylesheets are located at /usr/share/sgml/docbook/dsssl-stylesheets-1.79.

Configuring Fcron

Config Files

/etc/fcron.conf, /etc/fcron.allow, and /etc/fcron.deny

Configuration Information

There are no required changes in any of the config files. Configuration information can be found in the man page for fcron.conf.

fcron scripts are written using fcrontab. Refer to the fcrontab man page for proper parameters to address your situation.

If Linux-PAM is installed, two PAM configuration files are installed in /etc/pam.d. Alternatively if /etc/pam.d is not used, the installation will append two configuration sections to the existing /etc/pam.conf file. You should ensure the files match your preferences. Modify them as required to suit your needs.

Systemd Unit

Enable fcron to start at boot using the previously installed systemd unit.

systemctl enable fcron

Installed Programs: fcron, fcrondyn, fcronsighup, and fcrontab

Installed Libraries: None

Installed Directories: /usr/share/doc/fcron-3.2.0 and /var/spool/fcron

Short Descriptions

fcron	is the scheduling daemon.
fcrondyn	is a user tool intended to interact with a running fcron daemon.
fcronsighup	instructs fcron to reread the Fcron tables.
fcrontab	is a program used to install, edit, list and remove the tables used by fcron.

Last updated on 2017-08-20 15:06:11 -0700

GPM-1.20.7

Introduction to GPM

The GPM (General Purpose Mouse daemon) package contains a mouse server for the console and xterm. It not only provides cut and paste support generally, but its library component is used by various software such as Links to provide mouse support to the application. It is useful on desktops, especially if following (Beyond) Linux From Scratch instructions; it's often much easier (and less error prone) to cut and paste between two console windows than to type everything by hand!

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.nico.schottelius.org/software/gpm/archives/gpm-1.20.7.tar.bz2
Download MD5 sum: bf84143905a6a903dbd4d4b911a2a2b8
Download size: 820 KB
Estimated disk space required: 7.4 MB
Estimated build time: 0.1 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/gpm-1.20.7-glibc_2.26-1.patch

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/GPM

Installation of GPM

Install GPM by running the following commands:

sed -i -e 's:<gpm.h>:"headers/gpm.h":' src/prog/{display-buttons,display-coords,get-versions}.c &&
patch -Np1 -i ../gpm-1.20.7-glibc_2.26-1.patch &&
./autogen.sh                                &&
./configure --prefix=/usr --sysconfdir=/etc &&
make

This package does not come with a test suite.

Now, as the root user:

make install                                          &&

install-info --dir-file=/usr/share/info/dir           \
             /usr/share/info/gpm.info                 &&

ln -sfv libgpm.so.2.1.0 /usr/lib/libgpm.so            &&
install -v -m644 conf/gpm-root.conf /etc              &&

install -v -m755 -d /usr/share/doc/gpm-1.20.7/support &&
install -v -m644    doc/support/*                     \
                    /usr/share/doc/gpm-1.20.7/support &&
install -v -m644    doc/{FAQ,HACK_GPM,README*}        \
                    /usr/share/doc/gpm-1.20.7

Command Explanations

./autogen.sh: This command creates the missing configure script.

install-info ...: This package installs an .info file, but does not update the system dir file. This command makes the update.

ln -v -sfn libgpm.so.2.1.0 /usr/lib/libgpm.so: This command is used to create (or update) the .so symlink to the library.

Configuring GPM

Systemd Unit

To start the gpm daemon at boot, install the systemd unit from the blfs-systemd-units-20160602 package by running the following command as the root user:

make install-gpm

Config Files

/etc/gpm-root.conf and ~/.gpm-root: The default and individual user gpm-root configuration files.

Configuration Information

GPM is by default started with the following parameters: -m /dev/input/mice -t imps2. If the mentioned parameters don't suit your needs, you can override them by running the following commands as the root user:

install -v -dm755 /etc/systemd/system/gpm.service.d
echo "ExecStart=/usr/sbin/gpm <list of parameters>" > /etc/systemd/system/gpm.service.d/99-user.conf

Installed Programs: disable-paste, display-buttons, display-coords, get-versions, gpm, gpm-root, hltest, mev, and mouse-test

Installed Library: libgpm.{so.a}

Installed Directory: /usr/share/doc/gpm-1.20.7

Short Descriptions

disable-paste	is a security mechanism used to disable the paste buffer.
display-buttons	is a simple program that reports the mouse buttons being pressed and released.
display-coords	is a simple program that reports the mouse coordinates.
get-versions	is used to report the GPM library and server versions.
gpm	is a cut and paste utility and mouse server for virtual consoles.
gpm-root	is a default handler for gpm. It is used to draw menus on the root window.
hltest	is a simple sample application using the high-level library, meant to be read by programmers trying to use the high-level library.
mev	is a program to report mouse events.
mouse-test	is a tool for determining the mouse type and device it's attached to.
`libgpm.{so.a}`	contains the API functions to access the GPM daemon.

Last updated on 2017-08-17 12:47:47 -0700

Hdparm-9.52

Introduction to Hdparm

The Hdparm package contains a utility that is useful for controlling ATA/IDE controllers and hard drives both to increase performance and sometimes to increase stability.

This package is known to build and work properly using an LFS-8.1 platform.

Warning

As well as being useful, incorrect usage of Hdparm can destroy your information and in rare cases, drives. Use with caution and make sure you know what you are doing. If in doubt, it is recommended that you leave the default kernel parameters alone.

Package Information

Download (HTTP): https://downloads.sourceforge.net/hdparm/hdparm-9.52.tar.gz
Download MD5 sum: 410539d0bf3cc247181594581edbfb53
Download size: 140 KB
Estimated disk space required: 1.0 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/hdparm

Installation of Hdparm

Build Hdparm by running the following command:

make

This package does not come with a test suite.

Now, as the root user:

make install

Note

Note that by default, hdparm is installed in /sbin as some systems may require it during the boot process before /usr is mounted. If you wish to install hdparm under the /usr hierarchy, then replace the above command with the following:

make binprefix=/usr install

Installed Program: hdparm

Installed Libraries: None

Installed Directories: None

Short Descriptions

hdparm

provides a command-line interface to various hard disk ioctls supported by the stock Linux ATA/IDE device driver subsystem.

Last updated on 2017-08-23 21:43:54 -0700

lm_sensors-3.4.0

Introduction to lm_sensors

The lm_sensors package provides user-space support for the hardware monitoring drivers in the Linux kernel. This is useful for monitoring the temperature of the CPU and adjusting the performance of some hardware (such as cooling fans).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gwdg.de/pub/linux/misc/lm-sensors/lm_sensors-3.4.0.tar.bz2
Download (FTP): ftp://ftp.gwdg.de/pub/linux/misc/lm-sensors/lm_sensors-3.4.0.tar.bz2
Download MD5 sum: c03675ae9d43d60322110c679416901a
Download size: 172 KB
Estimated disk space required: 2.4 MB
Estimated build time: less than 0.1 SBU

lm_sensors Dependencies

Required

Which-2.21

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/lm_sensors

Kernel Configuration

Getting your kernel config right is an iterative process that may require that you recompile your kernel a couple of times. The simplest way to go about it is to start by enabling modules and then compile everything that may be needed by Lm Sensors as a module:

[*] Enable loadable module support  --->  [CONFIG_MODULES]

Bus options (PCI etc.)  --->
  [*] PCI support                         [CONFIG_PCI]

Device Drivers  --->
  I2C support --->
    <*/M> I2C device interface            [CONFIG_I2C_CHARDEV]
    I2C Hardware Bus support  --->
      <M> (configure all of them as modules)
  <*/M> Hardware Monitoring support  ---> [CONFIG_HWMON]
    <M> (configure all of them as modules)

Recompile your kernel and reboot into the new kernel. Don't forget to make modules_install We will come back to the kernel in the Configuring section below.

Installation of lm_sensors

Install lm_sensors by running the following commands:

make PREFIX=/usr        \
     BUILD_STATIC_LIB=0 \
     MANDIR=/usr/share/man

This package does not come with a test suite.

Now, as the root user:

make PREFIX=/usr        \
     BUILD_STATIC_LIB=0 \
     MANDIR=/usr/share/man install &&

install -v -m755 -d /usr/share/doc/lm_sensors-3.4.0 &&
cp -rv              README INSTALL doc/* \
                    /usr/share/doc/lm_sensors-3.4.0

Command Explanations

BUILD_STATIC_LIB=0: This parameter disables compiling and installing the static version of libsensors.

PROG_EXTRA=sensord: This parameter enables compiling sensord, a daemon that can monitor your system at regular intervals. Compiling sensord requires RRDtool. Compiling RRDtool 1.4.6 requires a sed: sed -i '/ sv_undef/d' bindings/perl-shared/RRDs.xs.

Configuring Lm Sensors

Config File

/etc/sensors3.conf

Configuration Information

To find out what hardware sensors your system has, issue the following command as the root user:

sensors-detect

The appropriate modules should have been loaded and a summary is displayed at the end. Now you know what is needed and you can recompile your kernel to enable just the options you need (i.e., don't enable the modules you cannot use).

Installed Programs: fancontrol, isadump, isaset, pwmconfig, sensors, sensors-conf-convert, sensors-detect, and optionally, sensord

Installed Library: libsensors.so

Installed Directories: /etc/sensors.d, /usr/include/sensors and /usr/share/doc/lm_sensors-3.4.0

Short Descriptions

fancontrol	is a shell script for use with lm_sensors. It reads its configuration from a file, then calculates fan speeds from temperatures and sets the corresponding PWM outputs to the computed values.
isadump	is a small helper program to examine registers visible through the ISA bus. It is intended to probe any chip that lives on the ISA bus working with an address register and a data register (I2C-like access) or a flat range (of up to 256 bytes).
isaset	is a small helper program to set registers visible through the ISA bus.
pwmconfig	tests the pulse width modulation (PWM) outputs of sensors and configures fancontrol.
sensors	prints the current readings of all sensor chips.
sensors-conf-convert	is a Perl script to convert lm-sensors version 2 configuration files to work with version 3.
sensors-detect	is a Perl script that will walk you through the process of scanning your system for various hardware monitoring chips (sensors) supported by `libsensors`, or more generally by the lm_sensors tool suite.
sensord	(optional) is a daemon that can be used to periodically log sensor readings.
`libsensors.so`	contains the lm_sensors API functions.

Last updated on 2017-08-20 15:06:11 -0700

Logrotate-3.11.0

Introduction to Logrotate

The logrotate package allows automatic rotation, compression, removal, and mailing of log files.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/logrotate/logrotate/releases/download/3.11.0/logrotate-3.11.0.tar.xz
Download MD5 sum: 3a9280e4caeb837427a2d54518fbcdac
Download size: 132 KB
Estimated disk space required: 1.7 MB
Estimated build time: 0.1 SBU

Logrotate Dependencies

Required

popt-1.16

Optional

An MTA (runtime)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/logrotate

Installation of Logrotate

Install logrotate by running the following command:

sed -i '/exit 5/s/^/echo uncompress failed -- skipping #/' test/test &&

./configure --prefix=/usr &&
make

To test the results, issue: make test.

Now, as the root user:

make install

Command Explanations

sed ... test/test: Prevents the tests from failing due to a problem in the test script.

Configuring Logrotate

Logrotate needs a configuration file, which must be passed as an argument to the command when executed. Create the file as the root user:

cat > /etc/logrotate.conf << EOF
# Begin of /etc/logrotate.conf

# Rotate log files weekly
weekly

# Don't mail logs to anybody
nomail

# If the log file is empty, it will not be rotated
notifempty

# Number of backups that will be kept
# This will keep the 2 newest backups only
rotate 2

# Create new empty files after rotating old ones
# This will create empty log files, with owner
# set to root, group set to sys, and permissions 644
create 0664 root sys

# Compress the backups with gzip
compress

# No packages own lastlog or wtmp -- rotate them here
/var/log/wtmp {
    monthly
    create 0664 root utmp
    rotate 1
}

/var/log/lastlog {
    monthly
    rotate 1
}

# Some packages drop log rotation info in this directory
# so we include any file in it.
include /etc/logrotate.d

# End of /etc/logrotate.conf
EOF

chmod -v 0644 /etc/logrotate.conf

Now create the /etc/logrotate.d directory as the root user:

 mkdir -p /etc/logrotate.d

At this point additional log rotation commands can be entered, typically in the /etc/logrotate.d directory. For example:

cat > /etc/logrotate.d/sys.log << EOF
/var/log/sys.log {
   # If the log file is larger than 100kb, rotate it
   size   100k
   rotate 5
   weekly
   postrotate
      /bin/killall -HUP syslogd
   endscript
}
EOF

chmod -v 0644 /etc/logrotate.d/sys.log

You can designate multiple files in one entry:

cat > /etc/logrotate.d/example.log << EOF
file1
file2
file3 {
   ...
   postrotate
    ...
   endscript
}
EOF

chmod -v 0644 /etc/logrotate.d/example.log

You can use in the same line the list of files: file1 file2 file3. See the logrotate man page or http://www.techrepublic.com/article/manage-linux-log-files-with-logrotate/ for more examples.

The command logrotate /etc/logrotate.conf can be run manually, however, the command should be run daily. Other useful commands are logrotate -d /etc/logrotate.conf for debugging purposes and logrotate -f /etc/logrotate.conf forcing the logrotate commands to be run immediately. Combining the previous options -df, you can debug the effect of the force command. When debugging, the command is only simulated, not really run, thus, eventual non-existing errors appear, when some intermediate files are expected, because they are not actually created.

To set up Fcron-3.2.0 to run logrotate ... at 3AM daily, root's crontab should be edited to add:

0 3 * * *   /usr/sbin/logrotate /etc/logrotate.conf

Installed Programs: logrotate

Installed Library: None

Installed Directories: None

Short Descriptions

logrotate

performs the log maintenance functions defined in the configuration files.

Last updated on 2017-08-20 15:06:11 -0700

MC-4.8.19

Introduction to MC

MC (Midnight Commander) is a text-mode full-screen file manager and visual shell. It provides a clear, user-friendly, and somewhat protected interface to a Unix system while making many frequent file operations more efficient and preserving the full power of the command prompt.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.midnight-commander.org/mc-4.8.19.tar.xz
Download (FTP): ftp://ftp.osuosl.org/pub/midnightcommander/mc-4.8.19.tar.xz
Download MD5 sum: 57209d138c0adcb9ea01dfe6bbb4cb87
Download size: 2.4 MB
Estimated disk space required: 179 MB (with tests)
Estimated build time: 1.0 SBU (with tests)

MC Dependencies

Required

GLib-2.52.3 and PCRE-8.41

Optional

Doxygen-1.8.13, GPM-1.20.7, Samba-4.6.7, UnZip-6.0, X Window System, and Zip-3.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/MC

Installation of MC

Install MC by running the following commands:

./configure --prefix=/usr \
            --sysconfdir=/etc \
            --enable-charset &&
make

To test the results, issue: make check. One test concerning rpm files fails.

Now, as the root user:

make install &&
cp -v doc/keybind-migration.txt /usr/share/mc

Command Explanations

--sysconfdir=/etc: This switch places the global configureation directory in /etc.

--enable-charset: This switch adds support to mcedit for editing files in encodings different from the one implied by the current locale.

Configuring MC

Config Files

~/.config/mc/*

Configuration Information

The ~/.config/mc directory and its contents are created when you start mc for the first time. Then you can edit the main ~/.config/mc/ini configuration file manually or through the MC shell. Consult the mc(1) man page for details.

Note

On 8.x versions of mc, keybind names used in mc.keymap.* files are changed. This is described in keybind-migration.txt.

Installed Programs: mc and the symlinks mcdiff, mcedit and mcview

Installed Libraries: None

Installed Directories: /etc/mc and /usr/{libexec,share}/mc

Short Descriptions

cons.saver	is used internally by mc for saving and restoring the text behind the panels on Linux text console.
mc	is a visual shell.
mcdiff	is an internal visual diff tool.
mcedit	is an internal file editor.
mcview	is an internal file viewer.

Last updated on 2017-08-28 20:59:34 -0700

ModemManager-1.6.8

Introduction to ModemManager

ModemManager provides a unified high level API for communicating with mobile broadband modems, regardless of the protocol used to communicate with the actual device.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.freedesktop.org/software/ModemManager/ModemManager-1.6.8.tar.xz
Download MD5 sum: ac08d539ec3dc35db8d6b7c8d6c660ff
Download size: 1.4 MB
Estimated disk space required: 82 MB (with tests)
Estimated build time: 1.0 SBU (with tests)

ModemManager Dependencies

Required

libgudev-231

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/ModemManager

Installation of ModemManager

Install ModemManager by running the following commands:

./configure --prefix=/usr                 \
            --sysconfdir=/etc             \
            --localstatedir=/var          \
            --enable-more-warnings=no     \
            --with-suspend-resume=systemd \
            --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--with-suspend-resume=systemd: This switch forces ModemManager to use the systemd power management facilities.

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Configuring ModemManager

Systemd Units

To start the ModemManager daemon at boot, enable the previously installed systemd unit by running the following command as the root user:

systemctl enable ModemManager

Installed Programs: mmcli and ModemManager

Installed Libraries: libmm-glib.so

Installed Directories: /usr/include/libmm-glib, /usr/include/ModemManager, /usr/lib/ModemManager, /usr/share/gtk-doc/html/libmm-glib, and /usr/share/gtk-doc/html/ModemManager

Short Descriptions

mmcli	is an utility used to control and monitor the ModemManager.
ModemManager	is a D-Bus service used to communicate with modems.
`libmm-glib.so`	contains API functions for communicating with mobile broadband modems, regardless of the protocol used to communicate with the actual device.

Last updated on 2017-08-24 18:56:23 -0700

obex-data-server-0.4.6

Introduction to OBEX Data Server

OBEX Data Server package contains D-Bus service providing high-level OBEX client and server side functionality.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://tadas.dailyda.com/software/obex-data-server-0.4.6.tar.gz
Download MD5 sum: 961ca5db6fe9c97024e133cc6203cc4d
Download size: 196 KB
Estimated disk space required: 2.2 MB
Estimated build time: less than 0.1 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/obex-data-server-0.4.6-build-fixes-1.patch

OBEX Data Server Dependencies

Required

BlueZ-5.46, dbus-glib-0.108, ImageMagick-7.0.6-10 or gdk-pixbuf-2.36.8, libusb-compat-0.1.5, and OpenOBEX-1.7.2

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/obex-data-server

Installation of OBEX Data Server

Install OBEX Data Server by running the following commands:

patch -Np1 -i ../obex-data-server-0.4.6-build-fixes-1.patch &&

./configure --prefix=/usr --sysconfdir=/etc &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Program: obex-data-server

Installed Libraries: None

Installed Directory: /etc/obex-data-server

Short Descriptions

obex-data-server

is a D-Bus service providing OBEX functionality.

Last updated on 2017-08-28 20:59:34 -0700

p7zip-16.02

Introduction to p7zip

p7zip is the Unix command-line port of 7-Zip, a file archiver that archives with high compression ratios. It handles 7z, ZIP, GZIP, BZIP2, XZ, TAR, APM, ARJ, CAB, CHM, CPIO, CramFS, DEB, DMG, FAT, HFS, ISO, LZH, LZMA, LZMA2, MBR, MSI, MSLZ, NSIS, NTFS, RAR RPM, SquashFS, UDF, VHD, WIM, XAR and Z formats.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/p7zip/p7zip_16.02_src_all.tar.bz2
Download MD5 sum: a0128d661cfe7cc8c121e73519c54fbf
Download size: 4.0 MB
Estimated disk space required: 33 MB
Estimated build time: 1.3 SBU (with tests)

p7zip Dependencies

Optional

wxWidgets

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/p7zip

Installation of p7zip

Install p7zip by running the following commands:

make all3

To test the results, issue: make test.

Now, as the root user:

make DEST_HOME=/usr \
     DEST_MAN=/usr/share/man \
     DEST_SHARE_DOC=/usr/share/doc/p7zip-16.02 install

Note

If using DESTDIR techniques, use DEST_DIR instead.

Installed Programs: 7z, 7za, and 7zr

Installed Libraries: None

Installed Directory: /usr/lib/p7zip and /usr/share/doc/p7zip-16.02

Short Descriptions

7z	is a file archiver utility.
7za	is a stand-alone executable handling less archive formats than 7z.
7zr	is a minimal version of 7za that handles only 7z archives.

Last updated on 2017-08-23 21:43:54 -0700

Pax-070715

Introduction to Pax

pax is an archiving utility created by POSIX and defined by the POSIX.1-2001 standard. Rather than sort out the incompatible options that have crept up between tar and cpio, along with their implementations across various versions of UNIX, the IEEE designed a new archive utility. The name “pax” is an acronym for portable archive exchange. Furthermore, “pax” means “peace” in Latin, so its name implies that it shall create peace between the tar and cpio format supporters. The command invocation and command structure is somewhat a unification of both tar and cpio.

pax has been required to be present in LSB conformant systems since LSB version 3.0.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/heirloom/heirloom-070715.tar.bz2
Download MD5 sum: d846be4b268b1d55b6ffcef847f09979
Download size: 977 KB
Estimated disk space required: 9.2 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/pax

Installation of Pax

This package has somewhat unusual installation instructions, because pax is part of a larger set of utilities included in the same tarball. Issue the following commands:

sed -i build/mk.config                   \
    -e '/LIBZ/s@ -Wl[^ ]*@@g'            \
    -e '/LIBBZ2/{s@^#@@;s@ -Wl[^ ]*@@g}' \
    -e '/BZLIB/s@0@1@'                   &&

make makefiles                           &&
make -C libcommon                        &&
make -C libuxre                          &&
make -C cpio

Now, as the root user:

install -v -m755 cpio/pax_su3 /usr/bin/pax &&
install -v -m644 cpio/pax.1 /usr/share/man/man1

Command Explanations

sed ...: This changes the configuration file build/mk.config so that the system zlib and libbz2 are used and linked as shared libraries.

make makefiles: This command builds all the makefiles.

make -C lib...: First builds the necessary libraries.

make -C cpio: Then builds the archive utilities.

Installed Program: pax.

Short Descriptions

pax

copies files to and from archives in several formats.

Last updated on 2017-08-23 21:43:54 -0700

pciutils-3.5.5

Introduction to PCI Utils

The PCI Utils package contains a set of programs for listing PCI devices, inspecting their status and setting their configuration registers.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.kernel.org/pub/software/utils/pciutils/pciutils-3.5.5.tar.xz
Download MD5 sum: 238d9969cc0de8b9105d972007d9d546
Download size: 317 KB
Estimated disk space required: 3.6 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/pciutils

Installation of PCI Utils

Install PCI Utils by running the following commands:

make PREFIX=/usr                \
     SHAREDIR=/usr/share/hwdata \
     SHARED=yes

This package does not come with a test suite.

Now, as the root user:

make PREFIX=/usr                \
     SHAREDIR=/usr/share/hwdata \
     SHARED=yes                 \
     install install-lib        &&

chmod -v 755 /usr/lib/libpci.so

Command Explanations

SHARED=yes: This parameter enables building of the shared library instead of the static one.

ZLIB=no: This option prevents compression of the pci.ids file.

Configuring PCI Utils

The pci.ids data file is constantly being updated. To get a current version of this file, run update-pciids as the root user. This program requires the Which-2.21 script or program to find cURL-7.55.1, Lynx-2.8.8rel.2 or Wget-1.19.1 which are used to download the most current file, and then replace the existing file in /usr/share/hwdata.

You may wish to add an entry to root's (or any other user who has write privilege to /usr/share/hwdata) crontab to automatically update the pci.ids file periodically.

Installed Programs: lspci, setpci, and update-pciids

Installed Library: libpci.so

Installed Directory: /usr/include/pci and /usr/share/hwdata

Short Descriptions

lspci	is a utility for displaying information about all PCI buses in the system and all devices connected to them.
setpci	is a utility for querying and configuring PCI devices.
update-pciids	fetches the current version of the PCI ID list. Requires cURL-7.55.1, Lynx-2.8.8rel.2 or Wget-1.19.1.
`libpci.so`	is library that allows applications to access the PCI subsystem.

Last updated on 2017-08-20 15:06:11 -0700

pm-utils-1.4.1

Introduction to Power Management Utilities

The Power Management Utilities is a small collection of scripts to suspend and hibernate computer that can be used to run user supplied scripts on suspend and resume.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://pm-utils.freedesktop.org/releases/pm-utils-1.4.1.tar.gz
Download MD5 sum: 1742a556089c36c3a89eb1b957da5a60
Download size: 204 KB
Estimated disk space required: 1.6 MB
Estimated build time: 0.1 SBU

Power Management Utilities Dependencies

Optional

xmlto-0.0.28 (to generate man pages)

Optional (runtime)

Hdparm-9.52, Wireless Tools-29, ethtool, and vbetool

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/pm-utils

Kernel Configuration

If needed, enable the following options in the kernel configuration and recompile the kernel:

Power management and ACPI options --->
    <*> Suspend to RAM and standby            [CONFIG_SUSPEND]
    <*> Hibernation (aka 'suspend to disk')   [CONFIG_HIBERNATION]

Suspend to RAM allows the system to enter sleep states in which main memory is powered and thus its contents are preserved. The method cuts power to most parts of the machine aside from the RAM. Because of the large power savings, it is advisable for laptops to automatically enter this mode when the computer is running on batteries and the lid is closed (or the user is inactive for some time).

Suspend to disk (Hibernation) saves the machine's state into swap space and completely powers off the machine. When the machine is powered on, the state is restored. Until then, there is zero power consumption. Suspend to RAM and hibernation are normally appropriate for portable devices such as laptops, but can be used on workstations. The capability is not really appropriate for servers.

To use hibernation, the kernel parameter resume=/dev/<swap_partition> has to be used on the kernel command line (in grub.cfg). The swap partition should be at least the size of the physical RAM on the system.

Installation of Power Management Utilities

Install Power Management Utilities by running the following commands:

./configure --prefix=/usr     \
            --sysconfdir=/etc \
            --docdir=/usr/share/doc/pm-utils-1.4.1 &&
make

This package does not come with a test suite.

Now, as the root user:

make install

If you don't have xmlto-0.0.28 installed, copy pregenerated man pages:

install -v -m644 man/*.1 /usr/share/man/man1 &&
install -v -m644 man/*.8 /usr/share/man/man8 &&
ln -sv pm-action.8 /usr/share/man/man8/pm-suspend.8 &&
ln -sv pm-action.8 /usr/share/man/man8/pm-hibernate.8 &&
ln -sv pm-action.8 /usr/share/man/man8/pm-suspend-hybrid.8

Configuring Power Management Utilities

Suspend or resume functionality can be easily modified by installing files into the /etc/pm/sleep.d directory. These files, known as hooks, are run when the system is put into a sleep state or resumed. Default hooks are located in /usr/lib/pm-utils/sleep.d, and user hooks should be put in /etc/pm/sleep.d. See the pm-action(8) man page for more information.

In order to use hibernation with GRUB and a swap partition, you need to add kernel parameter resume=swap_partition (i.e. resume=/dev/sda1) to the kernel line in the /boot/grub/grub.cfg configuration file.

Installed Programs: on_ac_power, pm-hibernate, pm-is-supported, pm-powersave, pm-suspend and pm-suspend-hybrid

Installed Libraries: None

Installed Directories: /etc/pm, /usr/lib/pm-utils and /usr/share/doc/pm-utils-1.4.1

Short Descriptions

on_ac_power	is a script that determines whether the system is running on AC power (rather than a battery).
pm-hibernate	is a symlink to pm-action script that puts the computer into hibernate mode (the system is fully powered off and system state is saved to disk).
pm-is-supported	is a script that checks whether power management features such as suspend and hibernate are supported.
pm-powersave	is a script that puts the computer into powersaving (low power) mode.
pm-suspend	is a symlink to pm-action script that puts the computer into suspend mode (most devices are shut down and system state is saved in RAM).
pm-suspend-hybrid	is a symlink to pm-action script that puts the computer into hybrid-suspend mode (the system does everything it needs to hibernate, but suspends instead of shutting down).

Last updated on 2017-08-20 15:06:11 -0700

Raptor-2.0.15

Introduction to Raptor

Raptor is a C library that provides a set of parsers and serializers that generate Resource Description Framework (RDF) triples.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://download.librdf.org/source/raptor2-2.0.15.tar.gz
Download MD5 sum: a39f6c07ddb20d7dd2ff1f95fa21e2cd
Download size: 1.9 MB
Estimated disk space required: 28 MB (additional 1 MB for the tests)
Estimated build time: 0.2 SBU (additional 0.5 SBU for the tests)

Raptor Dependencies

Required

cURL-7.55.1 and libxslt-1.1.29

Optional

GTK-Doc-1.26, ICU-59.1 and libyajl

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/raptor

Installation of Raptor

Install Raptor by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--with-icu-config=/usr/bin/icu-config: Use this switch if you have installed ICU-59.1 and wish to build Raptor with its support.

Installed Programs: rapper

Installed Libraries: libraptor2.so

Installed Directories: /usr/include/raptor2 and /usr/share/gtk-doc/html/raptor2

Short Descriptions

rapper	is a RDF parsing and serializing utility.
`libraptor2.so`	contains the Raptor API functions.

Last updated on 2017-08-28 20:59:34 -0700

Rasqal-0.9.33

Introduction to Rasqal

Rasqal is a C library that handles Resource Description Framework (RDF) query language syntaxes, query construction, and execution of queries returning results as bindings, boolean, RDF graphs/triples or syntaxes.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://download.librdf.org/source/rasqal-0.9.33.tar.gz
Download MD5 sum: 1f5def51ca0026cd192958ef07228b52
Download size: 1.6 MB
Estimated disk space required: 22 MB (additional 4 MB for the tests)
Estimated build time: 0.3 SBU (additional 0.7 SBU for the tests)

Rasqal Dependencies

Required

Raptor-2.0.15

Optional

PCRE-8.41 and libgcrypt-1.8.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/rasqal

Installation of Rasqal

Install Rasqal by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: rasqal-config and roqet

Installed Library: librasqal.so

Installed Directories: /usr/include/rasqal and /usr/share/gtk-doc/html/rasqal

Short Descriptions

rasqal-config	is an utility for retrieving the installation options of Rasqal.
roqet	is an RDF query utility.

Last updated on 2017-08-28 20:59:34 -0700

Redland-1.0.17

Introduction to Redland

Redland is a set of free software C libraries that provide support for the Resource Description Framework (RDF).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://download.librdf.org/source/redland-1.0.17.tar.gz
Download MD5 sum: e5be03eda13ef68aabab6e42aa67715e
Download size: 1.6 MB
Estimated disk space required: 18 MB
Estimated build time: 0.2 SBU

Redland Dependencies

Required

Rasqal-0.9.33

Optional

Berkeley DB-6.2.32, libiodbc-3.52.12, SQLite-3.20.0, MariaDB-10.2.8 or MySQL, PostgreSQL-9.6.4, virtuoso, and 3store

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/redland

Installation of Redland

Install Redland by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: rdfproc, redland-config and redland-db-upgrade

Installed Libraries: librdf.so and /usr/lib/redland/librdf_storage_*.so

Installed Directories: /usr/lib/redland, /usr/share/gtk-doc/html/redland and /usr/share/redland

Short Descriptions

rdfproc	is the Redland RDF processor utility.
redland-config	is a script to get information about the installed version of Redland.
redland-db-upgrade	upgrades older Redland databases to 0.9.12 format.

Last updated on 2017-08-28 20:59:34 -0700

sg3_utils-1.42

Introduction to sg3_utils

The sg3_utils package contains low level utilities for devices that use a SCSI command set. Apart from SCSI parallel interface (SPI) devices, the SCSI command set is used by ATAPI devices (CD/DVDs and tapes), USB mass storage devices, Fibre Channel disks, IEEE 1394 storage devices (that use the "SBP" protocol), SAS, iSCSI and FCoE devices (amongst others).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://sg.danny.cz/sg/p/sg3_utils-1.42.tar.xz
Download MD5 sum: 913ac2c9069d2ba44e05565a445810ab
Download size: 752 KB
Estimated disk space required: 23 MB
Estimated build time: 0.2 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/sg3_utils

Installation of sg3_utils

Install sg3_utils by running the following commands:

./configure --prefix=/usr --disable-static &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: scsi_logging_level, scsi_mandat, scsi_readcap, scsi_ready, scsi_satl, scsi_start, scsi_stop, scsi_temperature, sg_compare_and_write, sg_copy_results, sg_dd, sg_decode_sense, sg_emc_trespass, sg_format, sg_get_config, sg_get_lba_status, sg_ident, sg_inq, sg_logs, sg_luns, sg_map, sg_map26, sg_modes, sg_opcodes, sg_persist, sg_prevent, sg_raw, sg_rbuf, sg_rdac, sg_read, sg_read_block_limits, sg_read_buffer, sg_read_long, sg_readcap, sg_reassign, sg_referrals, sg_rep_zones, sg_requests, sg_reset, sg_reset_wp, sg_rmsn, sg_rtpg, sg_safte, sg_sanitize, sg_sat_identify, sg_sat_phy_event, sg_sat_read_gplog, sg_sat_set_features, sg_scan, sg_senddiag, sg_ses, sg_ses_microcode, sg_start, sg_stpg, sg_sync, sg_test_rwbuf, sg_turs, sg_unmap, sg_verify, sg_vpd, sg_wr_mode, sg_write_buffer, sg_write_long, sg_write_same, sg_write_verify, sg_xcopy, sginfo, sgm_dd, and sgp_dd

Installed Library: libsgutils2.so

Installed Directories: None

Short Descriptions

scsi_logging_level	accesses Linux SCSI logging level information.
scsi_mandat	checks SCSI device support for mandatory commands.
scsi_readcap	does the SCSI READ CAPACITY command on disks.
scsi_ready	does the SCSI TEST UNIT READY on devices.
scsi_satl	checks for SCSI to ATA Translation (SAT) device support.
scsi_start	starts one or more SCSI disks.
scsi_stop	stops one or more SCSI disks.
scsi_temperature	fetches the temperature of a SCSI device.
sg_compare_and_write	sends the SCSI COMPARE AND WRITE command to device.
sg_copy_results	sends the SCSI RECEIVE COPY RESULTS command (XCOPY related).
sg_dd	copies data to and from files and devices. Specialised for devices that understand the SCSI command set.
sg_decode_sense	takes SCSI sense data in binary or as a sequence of ASCII hexadecimal bytes and decodes it.
sg_emc_trespass	changes ownership of a LUN from another Service-Processor to this one.
sg_format	formats or resizes a SCSI disk (perhaps changes its block size).
sg_get_config	sends a SCSI GET CONFIGURATION command (MMC-4 +).
sg_get_lba_status	sends the SCSI GET LBA STATUS command.
sg_ident	sends a SCSI REPORT or SET IDENTIFYING INFORMATION command.
sginfo	access mode page information for a SCSI (or ATAPI) device.
sg_inq	sends a SCSI INQUIRY or ATA IDENTIFY (PACKET) DEVICE command and outputs the response.
sg_logs	access log pages with SCSI LOG SENSE command.
sg_luns	sends the SCSI REPORT LUNS command.
sg_map	displays mapping between linux sg and other SCSI devices.
sg_map26	maps a special file to a SCSI generic (sg) device (or vice versa).
sgm_dd	copies data to and from files and devices. Specialized for devices that understand the SCSI command set and does memory mapped transfers from sg devices.
sg_modes	reads mode pages with SCSI MODE SENSE command.
sg_opcodes	reports information on supported SCSI commands or task management functions.
sgp_dd	copies data to and from files and devices. Specialized for devices that understand the SCSI command set.
sg_persist	sends a SCSI PERSISTENT RESERVE (IN or OUT) command to manipulate registrations and reservations.
sg_prevent	sends a SCSI PREVENT ALLOW MEDIUM REMOVAL command.
sg_raw	sends an arbitrary SCSI command to a device.
sg_rbuf	reads data using SCSI READ BUFFER command.
sg_rdac	displays or modifies RDAC Redundant Controller Page.
sg_read	reads blocks of data continually from the same offset.
sg_read_block_limits	sends a SCSI READ BLOCK LIMITS command.
sg_read_buffer	sends a SCSI READ BUFFER command.
sg_readcap	sends a SCSI READ CAPACITY command.
sg_read_long	sends a SCSI READ LONG command.
sg_reassign	sends a SCSI REASSIGN BLOCKS command.
sg_referrals	sends the SCSI REPORT REFERRALS command.
sg_rep_zones	sends a SCSI REPORT ZONES command.
sg_requests	sends one or more SCSI REQUEST SENSE commands.
sg_reset	sends SCSI device, target, bus or host reset; or checks reset state.
sg_reset_wp	sends a SCSI RESET WRITE POINTER command.
sg_rmsn	sends a SCSI READ MEDIA SERIAL NUMBER command.
sg_rtpg	sends a SCSI REPORT TARGET PORT GROUPS command.
sg_safte	fetches status from a SCSI Accessed Fault-Tolerant Enclosure (SAF-TE) device.
sg_sanitize	sends a SCSI SANITIZE command.
sg_sat_identify	sends an ATA IDENTIFY (PACKET) DEVICE command via a SCSI to ATA Translation (SAT) layer.
sg_sat_phy_event	sends an ATA READ LOG EXT command via a SAT pass through to fetch log page 11h which contains SATA phy event counters.
sg_sat_read_gplog	uses an ATA READ LOG EXT command via a SCSI to ATA Translation (SAT) layer.
sg_sat_set_features	sends an ATA SET FEATURES command via a SCSI to ATA Translation (SAT) layer.
sg_scan	does a scan of sg devices (or given SCSI/ATAPI/ATA devices) and prints the results.
sg_senddiag	performs a SCSI SEND DIAGNOSTIC command.
sg_ses	sends controls and fetch status from a SCSI Enclosure Services (SES) device.
sg_ses_microcode	sends microcode to a SCSI enclosure.
sg_start	sends a SCSI START STOP UNIT command to start, stop, load or eject medium.
sg_stpg	sends a SCSI SET TARGET PORT GROUPS command.
sg_sync	sends the scsi command synchronize cache.
sg_test_rwbuf	tests the SCSI host adapter by issuing write and read operations on a device's buffer and calculating checksums.
sg_turs	sends one or more SCSI TEST UNIT READY commands.
sg_unmap	sends a SCSI UNMAP command.
sg_verify	invokes SCSI VERIFY command(s) on a block device.
sg_vpd	fetches Vital Product Data (VPD) pages using a SCSI INQUIRY command.
sg_write_buffer	sends a SCSI WRITE BUFFER command.
sg_write_long	sends the SCSI WRITE LONG command.
sg_write_same	sends the SCSI WRITE SAME command.
sg_write_verify	sends the SCSI WRITE AND VERIFY command.
sg_wr_mode	writes mode page.
sg_xcopy	copies data to and from files and devices using SCSI EXTENDED COPY (XCOPY).
`libsgutils2.so`	contains the sg3_utils API functions.

Last updated on 2017-08-23 21:43:54 -0700

Sysstat-11.6.0

Introduction to Sysstat

The Sysstat package contains utilities to monitor system performance and usage activity. Sysstat contains the sar utility, common to many commercial Unixes, and tools you can schedule via cron to collect and historize performance and activity data.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://perso.wanadoo.fr/sebastien.godard/sysstat-11.6.0.tar.xz
Download MD5 sum: e03e6dfd1d2acd0128e964526c447146
Download size: 460 KB
Estimated disk space required: 7.0 MB
Estimated build time: 0.1 SBU

Sysstat Dependencies

There are no build-time requirements for this package; however, it is designed to be controlled by a cron daemon such as Fcron-3.2.0.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/sysstat

Installation of Sysstat

Install Sysstat by running the following commands:

sa_lib_dir=/usr/lib/sa    \
sa_dir=/var/log/sa        \
conf_dir=/etc/sysconfig   \
./configure --prefix=/usr \
            --disable-file-attr &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Install the systemd unit by running the following command as the root user:

install -v -m644 sysstat.service /lib/systemd/system/sysstat.service

Fix the systemd unit by running the following command as the root user:

sed -i "/^Also=/d" /lib/systemd/system/sysstat.service

Command Explanations

sa_lib_dir: This environment variable specifies the location of the package-specific library directory.

sa_dir: This environment variable specifies the location of the directory containing the data files.

conf_dir: This environment variable specifies the location of the system configuration directory.

--disable-file-attr: Do not set attributes on files being installed. This parameter causes the installation to ignore the man group variable resulting in the man files having root: root ownership.

Note

Run ./configure --help to see other influential environment variables you can pass to configure. You may want to use the history and compressafter variables to customize the amount of data files kept on the system.

Configuring Sysstat

Config Files

/etc/sysconfig/sysstat and /etc/sysconfig/sysstat.ioconf

Cron Information

To begin gathering Sysstat history information, you must add to, or create a privileged user's crontab. The history data location is /var/log/sa. The user running Sysstat utilities via cron must have write access to this location.

Below is an example of what to install in the crontab. Adjust the parameters to suit your needs. Use man sa1 and man sa2 for information about the commands.

# 8am-7pm activity reports every 10 minutes during weekdays
0 8-18 * * 1-5 /usr/lib/sa/sa1 600 6 &

# 7pm-8am activity reports every hour during weekdays
0 19-7 * * 1-5 /usr/lib/sa/sa1 &

# Activity reports every hour on Saturday and Sunday
0 * * * 0,6 /usr/lib/sa/sa1 &

# Daily summary prepared at 19:05
5 19 * * * /usr/lib/sa/sa2 -A &

Ensure you submit the revised crontab to the cron daemon.

System Startup Information

At system startup, a LINUX RESTART message must be inserted in the daily data file to reinitialize the kernel counters. This can be automated by enabling the previously installed systemd unit by running the following command as the root user:

systemctl enable sysstat

Installed Programs: cifsiostat, iostat, mpstat, pidstat, sadf, sar, and tapestat

Installed Libraries: None

Installed Directories: /usr/lib/sa, /usr/share/doc/sysstat-11.6.0 and /var/log/sa

Short Descriptions

cifsiostat	displays statistics about read and write operations on CIFS filesystems.
iostat	reports CPU statistics and input/output statistics for devices and partitions.
mpstat	writes activities for each available processor.
pidstat	is used for monitoring individual tasks currently being managed by the Linux kernel.
sadf	is used for displaying the contents of data files created by the sar command. But unlike sar, sadf can write its data in many different formats.
sar	is used for displaying the contents of elected cumulative activity counters in the operating system.
tapestat	is used for monitoring the activity of tape drives connected to a system.

Last updated on 2017-08-24 20:14:11 -0700

Systemd-234

Introduction to systemd

While systemd was installed when building LFS, there are many features provided by the package that were not included in the initial installation because Linux-PAM was not yet installed. The systemd package needs to be rebuilt to provide a working systemd-logind service, which provides many additional features for dependent packages.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://anduin.linuxfromscratch.org/sources/other/systemd/systemd-234-lfs.tar.xz
Download MD5 sum: be1338f2775713dc33da74ac0146e37b
Download size: 4.0 MB
Estimated disk space required: 371 MB (an additional 29 MB for tests)
Estimated build time: 7.7 SBU (an additional 0.5 SBU for tests)

systemd Dependencies

Required

Recommended Runtime Dependencies

Polkit-0.113+git_2919920+js38 and Python-3.6.2 (required for the test suite)

Optional

Certificate Authority Certificates, cURL-7.55.1, elfutils-0.170, GnuTLS-3.5.14, Iptables-1.6.1, libgcrypt-1.8.0, libidn-1.33, libxkbcommon-0.7.2, qemu-2.9.0, Valgrind-3.13.0, zsh-5.4.2 (for the zsh completions), cryptsetup, gnu-efi, kexec-tools, libmicrohttpd, libseccomp, lz4, qrencode, quota-tools and Sphinx

Optional (to rebuild the manual pages)

docbook-xml-4.5, docbook-xsl-1.79.1, libxslt-1.1.29, and lxml-3.8.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/systemd

Installation of systemd

Rebuild systemd by running the following commands:

./configure --prefix=/usr            \
            --sysconfdir=/etc        \
            --localstatedir=/var     \
            --with-rootprefix=       \
            --with-rootlibdir=/lib   \
            --enable-split-usr       \
            --disable-firstboot      \
            --disable-ldconfig       \
            --disable-sysusers       \
            --disable-manpages       \
            --with-default-dnssec=no \
            --docdir=/usr/share/doc/systemd-234 &&
make

Note

For the best results, make sure you run the testsuite from a system that is booted by the same systemd version you are rebuilding.

To test the results, issue: make check.

Warning

Installing the package will overwrite all files installed by systemd in LFS. It is critical that nothing uses either systemd or Udev libraries during the installation. The best way to ensure that these libraries are not being used is to run the installation in rescue mode. To switch to rescue mode, run the following command as the root user (from a TTY):

systemctl start rescue.target

Now, as the root user:

make install

If RPM is not installed, remove an unnecessary directory by running the following command as the root user:

rm -rfv /usr/lib/rpm

Configuring systemd

The /etc/pam.d/system-session file needs to be modified and a new file needs to be created in order for systemd-logind to work correctly. Run the following commands as the root user:

cat >> /etc/pam.d/system-session << "EOF"
# Begin Systemd addition
    
session   required    pam_loginuid.so
session   optional    pam_systemd.so

# End Systemd addition
EOF

cat > /etc/pam.d/systemd-user << "EOF"
# Begin /etc/pam.d/systemd-user

account  required pam_access.so
account  include  system-account

session  required pam_env.so
session  required pam_limits.so
session  include  system-session

auth     required pam_deny.so
password required pam_deny.so

# End /etc/pam.d/systemd-user
EOF

At this point, you should reload the systemd daemon, and reenter multi-user mode with the following commands (as the root user):

systemctl daemon-reload
systemctl start multi-user.target

Warning

If upgrading from a previous version of systemd and an initrd is used for system boot, you should generate a new initrd before rebooting the system.

A list of the installed files, along with their short descriptions can be found at ../../../../lfs/view/8.1/chapter06/systemd.html#contents-systemd.

Listed below are the newly installed libraries and directories along with short descriptions.

Installed Programs: None

Installed Libraries: pam_systemd.so (in /lib/security)

Installed Directories: None

Short Descriptions

pam_systemd.so

is a PAM module used to register user sessions with the systemd login manager, systemd-logind.

Last updated on 2017-08-25 21:58:04 -0700

UDisks-1.0.5

Introduction to UDisks

The UDisks package provides a storage daemon that implements well-defined D-Bus interfaces that can be used to query and manipulate storage devices.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://hal.freedesktop.org/releases/udisks-1.0.5.tar.gz
Download MD5 sum: 70d48dcfe523a74cd7c7fbbc2847fcdd
Download size: 720 KB
Estimated disk space required: 12 MB
Estimated build time: 0.1 SBU

udisks Dependencies

Required

dbus-glib-0.108, libatasmart-0.19, libgudev-231, LVM2-2.02.171, parted-3.2, Polkit-0.113+git_2919920+js38, and sg3_utils-1.42

Optional

GTK-Doc-1.26, libxslt-1.1.29 and Sudo-1.8.20p2 (to run the test)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/udisks

Installation of UDisks

Fix a build issue with glibc-2.24:

sed 's@#include <stdio\.h>@#include <sys/stat.h>\n#include <stdio.h>@' \
    -i src/helpers/job-drive-detach.c

Install UDisks by running the following commands:

./configure --prefix=/usr        \
            --sysconfdir=/etc    \
            --localstatedir=/var &&
make

To test the results, issue: make check.

Now, as the root user:

make profiledir=/etc/bash_completion.d install

Command Explanations

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: udisks, udisks-daemon, udisks-tcp-bridge, and umount.udisks

Installed Libraries: None

Installed Directories: /usr/share/gtk-doc/html/udisks and /var/lib/udisks

Short Descriptions

udisks	is a simple command line interface for the UDisks Daemon.
udisks-tcp-bridge	is the UDisks TCP/IP bridge.
udisks-daemon	is the UDisks Daemon.

Last updated on 2017-08-28 20:59:34 -0700

UDisks-2.7.2

Introduction to UDisks

The UDisks package provides a daemon, tools and libraries to access and manipulate disks and storage devices.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/storaged-project/udisks/releases/download/udisks-2.7.2/udisks-2.7.2.tar.bz2
Download MD5 sum: 587651b3864ba396e2702dca765dbda0
Download size: 1.2 MB
Estimated disk space required: 46 MB (with tests)
Estimated build time: 0.3 SBU (with tests)

UDisks Dependencies

Required

libatasmart-0.19, libblockdev-2.11-1, libgudev-231, libxslt-1.1.29, and Polkit-0.113+git_2919920+js38

Required at runtime

btrfs-progs-4.12, dosfstools-4.1, gptfdisk-1.0.3, mdadm-4.0, and xfsprogs-4.12.0

Optional (Required if building GNOME)

Optional

GTK-Doc-1.26, LVM2-2.02.171, ntfs-3g-2017.3.23, and libiscsi

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/udisks2

Installation of UDisks

Install UDisks by running the following commands:

./configure --prefix=/usr        \
            --sysconfdir=/etc    \
            --localstatedir=/var \
            --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: udisksctl, udisksd, and umount.udisks2

Installed Library: libudisks2.so

Installed Directories: /etc/udisks2, /usr/include/udisks2, /usr/lib/udisks2, /usr/libexec/udisks2, /usr/share/gtk-doc/html/udisks2, and /var/lib/udisks2

Short Descriptions

udisksctl	is a command-line program used to interact with the udisksd daemon.
udisksd	is the UDisks daemon itself.
umount.udisks2	is a command-line program used to unmount file systems that have been mounted by the UDisks daemon.
`libudisks2.so`	contains the UDisks API functions.

Last updated on 2017-08-24 18:56:23 -0700

UnRar-5.5.8

Introduction to UnRar

The UnRar package contains a RAR extraction utility used for extracting files from RAR archives. RAR archives are usually created with WinRAR, primarily in a Windows environment.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.rarlab.com/rar/unrarsrc-5.5.8.tar.gz
Download MD5 sum: 8d74b4d16b1317c4b1081e5f44025180
Download size: 220 KB
Estimated disk space required: 2.1 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/unrar

Installation of UnRar

Install UnRar by running the following commands:

make -f makefile

This package does not come with a test suite.

Now, as the root user:

install -v -m755 unrar /usr/bin

Installed Program: unrar

Installed Libraries: None

Installed Directories: None

Short Descriptions

unrar

uncompresses a RAR archive.

Last updated on 2017-08-26 15:47:53 -0700

UnZip-6.0

Introduction to UnZip

The UnZip package contains ZIP extraction utilities. These are useful for extracting files from ZIP archives. ZIP archives are created with PKZIP or Info-ZIP utilities, primarily in a DOS environment.

This package is known to build and work properly using an LFS-8.1 platform.

Caution

The previous version of the UnZip package had some locale related issues. Currently there are no BLFS editors capable of testing these locale issues. Therefore, the locale related information is left on this page, but has not been tested. A more general discussion of these problems can be found in the Program Assumes Encoding section of the Locale Related Issues page.

Package Information

Download (HTTP): https://downloads.sourceforge.net/infozip/unzip60.tar.gz
Download (FTP): ftp://ftp.info-zip.org/pub/infozip/src/unzip60.tgz
Download MD5 sum: 62b490407489521db863b523a7f86375
Download size: 1.3 MB
Estimated disk space required: 9 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/unzip

UnZip Locale Issues

Note

Use of UnZip in the JDK, Mozilla, DocBook or any other BLFS package installation is not a problem, as BLFS instructions never use UnZip to extract a file with non-ASCII characters in the file's name.

The UnZip package assumes that filenames stored in the ZIP archives created on non-Unix systems are encoded in CP850, and that they should be converted to ISO-8859-1 when writing files onto the filesystem. Such assumptions are not always valid. In fact, inside the ZIP archive, filenames are encoded in the DOS codepage that is in use in the relevant country, and the filenames on disk should be in the locale encoding. In MS Windows, the OemToChar() C function (from User32.DLL) does the correct conversion (which is indeed the conversion from CP850 to a superset of ISO-8859-1 if MS Windows is set up to use the US English language), but there is no equivalent in Linux.

When using unzip to unpack a ZIP archive containing non-ASCII filenames, the filenames are damaged because unzip uses improper conversion when any of its encoding assumptions are incorrect. For example, in the ru_RU.KOI8-R locale, conversion of filenames from CP866 to KOI8-R is required, but conversion from CP850 to ISO-8859-1 is done, which produces filenames consisting of undecipherable characters instead of words (the closest equivalent understandable example for English-only users is rot13). There are several ways around this limitation:

1) For unpacking ZIP archives with filenames containing non-ASCII characters, use WinZip while running the Wine Windows emulator.

2) After running unzip, fix the damage made to the filenames using the convmv tool (http://j3e.de/linux/convmv/). The following is an example for the ru_RU.KOI8-R locale:

Step 1. Undo the conversion done by unzip:
convmv -f iso-8859-1 -t cp850 -r --nosmart --notest \
    </path/to/unzipped/files>
Step 2. Do the correct conversion instead:
convmv -f cp866 -t koi8-r -r --nosmart --notest \
    </path/to/unzipped/files>

Installation of UnZip

make -f unix/Makefile generic

The test suite does not work for present target “generic”.

Now, as the root user:

make prefix=/usr MANDIR=/usr/share/man/man1 \
 -f unix/Makefile install

Command Explanations

make -f unix/Makefile generic: This target begins by running a configure script (unlike the older targets such as linux and linux_noasm) which creates a flags file that is then used in the build. This ensures that the 32-bit x86 build receives the right flags to unzip files which which are larger than 2GB when extracted.

Installed Programs: funzip, unzip, unzipfsx, zipgrep, and zipinfo

Installed Libraries: None

Installed Directories: None

Short Descriptions

funzip	allows the output of unzip commands to be redirected.
unzip	lists, tests or extracts files from a `ZIP` archive.
unzipfsx	is a self-extracting stub that can be prepended to a `ZIP` archive. Files in this format allow the recipient to decompress the archive without installing UnZip.
zipgrep	searches files in a `ZIP` archive for lines matching a pattern.
zipinfo	produces technical information about the files in a `ZIP` archive, including file access permissions, encryption status, type of compression, etc.

Last updated on 2017-08-16 21:41:37 -0700

UPower-0.99.5

Introduction to UPower

The UPower package provides an interface to enumerating power devices, listening to device events and querying history and statistics. Any application or service on the system can access the org.freedesktop.UPower service via the system message bus.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://upower.freedesktop.org/releases/upower-0.99.5.tar.xz
Download MD5 sum: ec57b4b7bf0af568f9a7a5603c921d97
Download size: 422 KB
Estimated disk space required: 12 MB (add 2 MB for tests)
Estimated build time: 0.2 SBU

UPower Dependencies

Required

dbus-glib-0.108, libgudev-231, libusb-1.0.21, and Polkit-0.113+git_2919920+js38

Optional (Required if building GNOME)

Optional

GTK-Doc-1.26 and Python-3.6.2, with PyGObject-3.24.1, umockdev, and python-dbusmock (for part of the testsuite).

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/upower

Installation of UPower

Install UPower by running the following commands:

./configure --prefix=/usr        \
            --sysconfdir=/etc    \
            --localstatedir=/var \
            --enable-deprecated  \
            --disable-static     &&
make

To test the results, issue: make check. Some checks may not pass due to missing files. Test suite should be run from a local GUI session started with dbus-launch.

Now, as the root user:

make install

Command Explanations

--enable-deprecated: This switch enables deprecated functionality which is still needed by some applications.

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Configuring UPower

Systemd Unit

To start the UPower service at boot, enable the previously installed systemd unit by running the following command as the root user:

systemctl enable upower

Installed Program: upower

Installed Libraries: libupower-glib.so

Installed Directories: /etc/UPower, /usr/include/libupower-glib, and /var/lib/upower

Short Descriptions

upower	is the UPower command line tool.
`libupower-glib.so`	contains the UPower API functions.

Last updated on 2017-08-21 16:43:13 -0700

usbutils-008

Introduction to USB Utils

The USB Utils package contains utilities used to display information about USB buses in the system and the devices connected to them.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.kernel.org/pub/linux/utils/usb/usbutils/usbutils-008.tar.xz
Download MD5 sum: 2780b6ae21264c888f8f30fb2aab1259
Download size: 284 KB
Estimated disk space required: 3.8 MB
Estimated build time: less than 0.1 SBU

USB Utils Dependencies

Required

libusb-1.0.21

Required Runtime

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/usbutils

Installation of USB Utils

Install USB Utils by running the following commands:

sed -i '/^usbids/ s:usb.ids:hwdata/&:' lsusb.py &&

./configure --prefix=/usr --datadir=/usr/share/hwdata &&
make

This package does not come with a test suite.

Now, as the root user:

make install

To install the usb.ids data file, using Wget-1.19.1, run, as the root user:

install -dm755 /usr/share/hwdata/ &&
wget http://www.linux-usb.org/usb.ids -O /usr/share/hwdata/usb.ids

The script lsusb.py displays information in a more easily readable form than lsusb. To find the options, use lsusb.py -h. One form of use recommended by the developer is lsusb.py -ciu.

Command Explanations

sed ... lsusb.py: Instructs lsusb.py where to search usb.ids.

Configuring USB Utils

The usb.ids data file is constantly being updated. To get a current version of this file, using Wget-1.19.1, periodically run again, as the root user:

wget http://www.linux-usb.org/usb.ids -O /usr/share/hwdata/usb.ids

You may wish to add an entry to root's (or any other user who has write privilege to /usr/share/hwdata) crontab to automatically update the usb.ids file periodically.

Installed Programs: lsusb, lsusb.py, usb-devices, and usbhid-dump

Installed Libraries: None

Installed Directories: None

Short Descriptions

lsusb	is a utility for displaying information about all USB buses in the system and all devices connected to them, but not in human friendly form.
lsusb.py	displays information about all USB buses in the system and all devices connected to them in reasonable human friendly form.
usb-devices	is a shell script that displays details of USB buses and devices connected to them. It is designed to be used if /proc/bus/usb/devices is not available on your system.
usbhid-dump	is used to dump report descriptors and streams from HID (human interface device) interfaces of USB devices.

Last updated on 2017-08-20 15:06:11 -0700

Which-2.21 and Alternatives

The presence or absence of the which program in the main LFS book is probably one of the most contentious issues on the mailing lists. It has resulted in at least one flame war in the past. To hopefully put an end to this once and for all, presented here are two options for equipping your system with which. The question of which “which” is for you to decide.

The first option is to install the actual GNU which package.

This package is known to build and work properly using an LFS-8.1 platform.

Introduction to Which

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/which/which-2.21.tar.gz
Download (FTP): ftp://ftp.gnu.org/gnu/which/which-2.21.tar.gz
Download MD5 sum: 097ff1a324ae02e0a3b0369f07a7544a
Download size: 148 KB
Estimated disk space required: 1 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/which

Installation of Which

Install which by running the following commands:

./configure --prefix=/usr &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Program: which

Installed Libraries: None

Installed Directories: None

Short Descriptions

which

shows the full path of (shell) commands installed in your PATH.

The 'which' Script

The second option (for those who don't want to install the package) is to create a simple script (execute as the root user):

cat > /usr/bin/which << "EOF"
#!/bin/bash
type -pa "$@" | head -n 1 ; exit ${PIPESTATUS[0]}
EOF
chmod -v 755 /usr/bin/which
chown -v root:root /usr/bin/which

This should work OK and is probably the easiest solution for most cases, but is not the most comprehensive implementation.

Last updated on 2017-08-16 21:41:37 -0700

Zip-3.0

Introduction to Zip

The Zip package contains Zip utilities. These are useful for compressing files into ZIP archives.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/infozip/zip30.tar.gz
Download (FTP): ftp://ftp.info-zip.org/pub/infozip/src/zip30.tgz
Download MD5 sum: 7b74551e63f8ee6aab6fbc86676c0d37
Download size: 1.1 MB
Estimated disk space required: 6.4 MB
Estimated build time: 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/zip

Installation of Zip

Install Zip by running the following commands:

make -f unix/Makefile generic_gcc

This package does not come with a test suite.

Now, as the root user:

make prefix=/usr MANDIR=/usr/share/man/man1 -f unix/Makefile install

Command Explanations

make prefix=/usr -f unix/Makefile install: This command overrides the prefix variable that is set to /usr/local in the unix/Makefile. Alternatives to generic_gcc can be seen with a make -f unix/Makefile list command.

Installed Programs: zip, zipcloak, zipnote, and zipsplit

Installed Libraries: None

Installed Directories: None

Short Descriptions

zip	compresses files into a `ZIP` archive.
zipcloak	is a utility to encrypt and decrypt a `ZIP` archive.
zipnote	reads or writes comments stored in a `ZIP` file.
zipsplit	is a utility to split `ZIP` files into smaller files.

Last updated on 2017-08-16 21:41:37 -0700

Chapter 13. Programming

A base LFS system can be used as a development platform, however the base system only includes language support for C, C++ and Perl. This chapter provides instructions to build many popular programming environments to greatly expand your system's development capabilities.

Autoconf-2.13

Introduction to Autoconf-2.13

Autoconf-2.13 is an old version of Autoconf . This old version accepts switches which are not valid in more recent versions. Now that firefox has started to use python2 for configuring, this old version is required even if configure files have not been changed.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/autoconf/autoconf-2.13.tar.gz
Download (FTP): ftp://ftp.gnu.org/gnu/autoconf/autoconf-2.13.tar.gz
Download MD5 sum: 9de56d4a161a723228220b0f425dc711
Download size: 434 KB
Estimated disk space required: 2.8 MB
Estimated build time: less than 0.1 SBU (additional 0.1 SBU for the tests)

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/autoconf-2.13-consolidated_fixes-1.patch

Autoconf-2.13 Dependencies

Optional

DejaGnu-1.6 (Required for the tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/autoconf213

Installation of Autoconf-2.13

Install Autoconf by running the following commands:

patch -Np1 -i ../autoconf-2.13-consolidated_fixes-1.patch &&
mv -v autoconf.texi autoconf213.texi                      &&
rm -v autoconf.info                                       &&
./configure --prefix=/usr --program-suffix=2.13           &&
make

To test the installation, if you have installed DejaGnu-1.6, issue make check (all 253 tests should pass).

Now, as the root user:

make install                                      &&
install -v -m644 autoconf213.info /usr/share/info &&
install-info --info-dir=/usr/share/info autoconf213.info

Command Explanations

mv -v autoconf.texi autoconf213.texi: ensure that the info file added by this package will not overwrite the more recent version.

rm -v autoconf.info: ensure that the info file will be created by the current version of texinfo.

--program-suffix=2.13: ensure that the installed programs have the version added to their names, so that only a script which specifically looks for these old versions will find them.

install -v -m644 ...: the patch removes install-info from the Makefile because that would install (and if necessary recreate) standards.info which is an old version, so now autoconf213.info has to be manually installed.

Installed Programs: autoconf-2.13, autoheader-2.13, autoreconf-2.13, autoscan-2.13, autoupdate-2.13, ifnames-2.13

Installed Library: None

Installed Directory: /usr/share/autoconf-2.13

Short Descriptions

autoconf-2.13	Produces shell scripts that automatically configure software source code packages to adapt to many kinds of Unix-like systems.
autoheader-2.13	is a tool for creating template files of C #define statements for configure to use
autoreconf-2.13	This automatically runs autoconf-2.13, autoheader-2.13, aclocal, automake, gettextize and libtoolize in the right order when changes have been made to autoconf or automake template files.
autoscan-2.13	Can be used as a preliminary step in creating a `configure.in` file.
autoupdate-2.13	Modifies a `configure.in` file that still calls autoconf macros by their old names to use the current macro names.
ifnames-2.13	Prints the identifiers that the package uses in C preprocessor conditionals [If a package has already been set up to have some portability, this program can help determine what configure needs to check for. It can also fill in gaps in a configure.in file generated by autoscan.]

Last updated on 2017-08-20 15:06:11 -0700

Check-0.11.0

Introduction to Check

Check is a unit testing framework for C. It was installed by LFS in the temporary /tools directory. These instructions install it permanently.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/libcheck/check/releases/download/0.11.0/check-0.11.0.tar.gz
Download MD5 sum: 9b90522b31f5628c2e0f55dda348e558
Download size: 736 KB
Estimated disk space required: 9.5 MB (add 1.2 MB for the tests)
Estimated build time: 0.1 SBU (add 3.4 SBU for the tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/check

Installation of Check

Install Check by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the installation, issue make check.

Now, as the root user:

make docdir=/usr/share/doc/check-0.11.0 install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Program: checkmk

Installed Library: libcheck.so

Installed Directory: /usr/share/doc/check-0.11.0

Short Descriptions

checkmk	is an Awk script used for generating C unit tests for use with the Check unit testing framework.
`libcheck.so`	contains the Check API functions.

Last updated on 2017-08-21 11:12:53 -0700

Clisp-2.49

Introduction to Clisp

GNU Clisp is a Common Lisp implementation which includes an interpreter, compiler, debugger, and many extensions.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/clisp/latest/clisp-2.49.tar.bz2
Download (FTP): ftp://ftp.gnu.org/gnu/clisp/latest/clisp-2.49.tar.bz2
Download MD5 sum: 1962b99d5e530390ec3829236d168649
Download size: 7.8 MB
Estimated disk space required: 163 MB (add 8 MB for tests)
Estimated build time: 0.9 SBU (18 SBU with tests)

Additional Downloads

Optional patch: http://www.linuxfromscratch.org/patches/blfs/8.1/clisp-2.49-readline7_fixes-1.patch (required if building against libffcall)

Clisp Dependencies

Optional

libffcall

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/clisp

Installation of Clisp

Note

This package does not support parallel build.

Remove two tests, which fail for unknown reasons:

sed -i -e '/socket/d' -e '/"streams"/d' tests/tests.lisp

Install Clisp by running the following commands:

If you are building clisp against libffcall, apply the patch to fix a build failure with current readline:

patch -Np1 -i ../clisp-2.49-readline7_fixes-1.patch

Install Clisp by running the following commands:

mkdir build &&
cd    build &&

../configure --srcdir=../                       \
             --prefix=/usr                      \
             --docdir=/usr/share/doc/clisp-2.49 \
             --with-libsigsegv-prefix=/usr &&

ulimit -s 16384 &&
make -j1

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

ulimit -s 16384: this increases the maximum stack size, as recommended by the configure.

--docdir=/usr/share/doc/clisp-2.49: this ensures the html documentation will go into a versioned directory instead of straight into /usr/share/html/.

--with-libsigsegv-prefix=/usr: use this to tell configure that you have installed libsigsegv in /usr, otherwise it will not be found.

--with-libffcall-prefix=/usr: use this to tell configure that you have installed the optional libffcall in /usr, otherwise like libsigsegv it will not be found.

Installed Programs: clisp, clisp-link

Installed Libraries: various static libraries in /usr/lib/clisp-2.49/base/

Installed Directories: /usr/lib/clisp-2.49 /usr/share/doc/clisp-2.49 /usr/share/emacs/site-lisp;

Short Descriptions

clisp	is an ANSI Common Lisp compiler, interpreter, and debugger
clisp-link	is used to link an external module to clisp

Last updated on 2017-08-26 10:08:22 -0700

CMake-3.9.1

Introduction to CMake

The CMake package contains a modern toolset used for generating Makefiles. It is a successor of the auto-generated configure script and aims to be platform- and compiler-independent. A significant user of CMake is KDE since version 4.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://cmake.org/files/v3.9/cmake-3.9.1.tar.gz
Download MD5 sum: 00f43c6a56d4903436317c14f9ca7f37
Download size: 7.4 MB
Estimated disk space required: 335 MB (add 375 MB for tests)
Estimated build time: 2.2 SBU (add 2.8 SBU for tests, both using parallelism=4)

CMake Dependencies

Optional

Qt-5.9.1 (for the Qt-based GUI), Subversion-1.9.7 (for testing), libuv, and Sphinx (for building documents)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/cmake

Installation of CMake

Install CMake by running the following commands:

sed -i '/CMAKE_USE_LIBUV 1/s/1/0/' CMakeLists.txt     &&
sed -i '/"lib64"/s/64//' Modules/GNUInstallDirs.cmake &&

./bootstrap --prefix=/usr        \
            --system-libs        \
            --mandir=/share/man  \
            --no-system-jsoncpp  \
            --no-system-librhash \
            --docdir=/share/doc/cmake-3.9.1 &&
make

To test the results, issue: bin/ctest -j<N> -O cmake-3.9.1-test.log, where <N> is an integer between 1 and the number of system cores.

Now, as the root user:

make install

Command Explanations

sed ... CMakeLists.txt: This command disables the attempt to use the external libuv library.

sed ... Modules/GNUInstallDirs.cmake: This command disables applications using cmake from attempting to install files in /usr/lib64/.

--system-libs: This switch forces the build system to link against Zlib, Bzip2, cURL, Expat and libarchive installed on the system.

--no-system-jsoncpp: This switch removes the JSON-C++ library from the list of system libraries. A bundled version of that library is used instead.

--qt-gui: This switch enables building of the Qt-based GUI for CMake.

Installed Programs: ccmake, cmake, cmake-gui (optional), cpack and ctest

Installed Libraries: None

Installed Directories: /usr/share/cmake-3.9 and /usr/share/doc/cmake-3.9.1

Short Descriptions

ccmake	is a curses based interactive frontend to cmake.
cmake	is the makefile generator.
cmake-gui	(optional) is the Qt-based frontent to cmake.
cpack	is the CMake packaging program.
ctest	is a testing utility for cmake-generated build trees.

Last updated on 2017-08-18 12:42:43 -0700

DejaGnu-1.6

Introduction to DejaGnu

DejaGnu is a framework for running test suites on GNU tools. It is written in expect, which uses Tcl (Tool command language). It was installed by LFS in the temporary /tools directory. These instructions install it permanently.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/dejagnu/dejagnu-1.6.tar.gz
Download (FTP): ftp://ftp.gnu.org/gnu/dejagnu/dejagnu-1.6.tar.gz
Download MD5 sum: 1fdc2eb0d592c4f89d82d24dfdf02f0b
Download size: 512 KB
Estimated disk space required: 3.2 MB
Estimated build time: less than 0.1 SBU

DejaGnu Dependencies

Required

Expect-5.45

Optional

DocBook-utils-0.6.14 and docbook2X (both looked for by the configure script but not used in the build)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/dejagnu

Installation of DejaGnu

Install DejaGnu by running the following commands:

./configure --prefix=/usr &&
makeinfo --html --no-split -o doc/dejagnu.html doc/dejagnu.texi &&
makeinfo --plaintext       -o doc/dejagnu.txt  doc/dejagnu.texi

To test the results, issue make check.

Now, as the root user:

make install &&
install -v -dm755   /usr/share/doc/dejagnu-1.6 &&
install -v -m644    doc/dejagnu.{html,txt} \
                    /usr/share/doc/dejagnu-1.6

Installed Program: runtest

Installed Libraries: None

Installed Directory: /usr/share/dejagnu

Short Descriptions

runtest

is the DejaGnu test driver program. It is used to control what tests to run, and variations on how to run them.

Last updated on 2017-08-21 11:12:53 -0700

Doxygen-1.8.13

Introduction to Doxygen

The Doxygen package contains a documentation system for C++, C, Java, Objective-C, Corba IDL and to some extent PHP, C# and D. It is useful for generating HTML documentation and/or an off-line reference manual from a set of documented source files. There is also support for generating output in RTF, PostScript, hyperlinked PDF, compressed HTML, and Unix man pages. The documentation is extracted directly from the sources, which makes it much easier to keep the documentation consistent with the source code.

You can also configure Doxygen to extract the code structure from undocumented source files. This is very useful to quickly find your way in large source distributions. Used along with Graphviz, you can also visualize the relations between the various elements by means of include dependency graphs, inheritance diagrams, and collaboration diagrams, which are all generated automatically.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.stack.nl/pub/doxygen/doxygen-1.8.13.src.tar.gz
Download (FTP): ftp://ftp.stack.nl/pub/doxygen/doxygen-1.8.13.src.tar.gz
Download MD5 sum: 0fa414975f8cd6d30e126c28327c1f7c
Download size: 4.7 MB
Estimated disk space required: 180 MB (with all programs, docs, and tests)
Estimated build time: 2.2 SBU (with all programs, docs, and tests)

Doxygen Dependencies

Required

Optional

Graphviz-2.40.1, ghostscript-9.21, libxml2-2.9.4 (required for the tests), LLVM-4.0.1 (with clang), Python-2.7.13 or Python-3.6.2, Qt-5.9.1 (for doxywizard), texlive-20170524 (or install-tl-unx), and xapian-1.4.4 (for doxyindexer)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/doxygen

Installation of Doxygen

Install Doxygen by running the following commands:

mkdir -v build &&
cd       build &&

cmake -G "Unix Makefiles"         \
      -DCMAKE_BUILD_TYPE=Release  \
      -DCMAKE_INSTALL_PREFIX=/usr \
      -Wno-dev .. &&

make

To test the results, issue: make tests.

If you wish to generate the package documentation, you must have Python, TeX Live (for HTML docs) and Ghostscript (for PDF docs) installed, then issue the following command:

cmake -DDOC_INSTALL_DIR=share/doc/doxygen-1.8.13 -Dbuild_doc=ON .. &&

make docs

Now, as the root user:

make install &&
install -vm644 ../doc/*.1 /usr/share/man/man1

If you have generated the package documentation, then the man pages are automatically installed, and you do not need to run the last install ... command.

Command Explanations

-Dbuild_wizard=ON: Use this switch if Qt5 is installed and you wish to build the GUI front-end.

-Dbuild_search=ON: Use this switch if xapian is installed and you wish to build external search tools (doxysearch.cgi and doxyindexer).

-Duse_libclang=ON: Use this switch if llvm with clang are installed, to add support for libclang parsing.

Configuring Doxygen

There is no real configuration necessary for the Doxygen package although three additional packages are required if you wish to use extended capabilities. If you need to use the language translation features, you must have Python-2.7.13 installed. If you require formulas to create PDF documentation, then you must have texlive-20170524 installed. If you require formulas to convert PostScript files to bitmaps, then you must have ghostscript-9.21 installed.

Installed Programs: doxygen and optionally, doxywizard, doxyindexer and doxysearch.cgi

Installed Libraries: None

Installed Directory: /usr/share/doc/doxygen-1.8.13

Short Descriptions

doxygen	is a command-line based utility used to generate template configuration files and then generate documentation from these templates. Use doxygen --help for an explanation of the command-line parameters.
doxywizard	is a GUI front-end for configuring and running doxygen.
doxyindexer	generates a search index called `doxysearch.db` from one or more search data files produced by doxygen. See, e.g. http://www.stack.nl/~dimitri/doxygen/manual/extsearch.html.
doxysearch.cgi	is a CGI program to search the data indexed by doxyindexer.

Last updated on 2017-08-24 18:56:23 -0700

elfutils-0.170

Introduction to elfutils

The elfutils package contains a set of utilities and libraries for handling ELF (Executable and Linkable Format) files.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://sourceware.org/ftp/elfutils/0.170/elfutils-0.170.tar.bz2
Download (FTP): ftp://sourceware.org/pub/elfutils/0.170/elfutils-0.170.tar.bz2
Download MD5 sum: 03599aee98c9b726c7a732a2dd0245d5
Download size: 8.0 MB
Estimated disk space required: 78 MB (with tests)
Estimated build time: 0.9 SBU (with tests)

elfutils Dependencies

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/elfutils

Installation of elfutils

Install elfutils by running the following commands:

./configure --prefix=/usr --program-prefix="eu-" &&
make

To test the results, issue: make check. One test, run-strip-nothing.sh, is known to fail.

Now, as the root user:

make install

Command Explanations

--program-prefix="eu-": This switch renames installed programs to avoid conflict with Binutils programs installed in LFS.

--enable-valgrind: Run all tests under valgrind.

Installed Programs: eu-addr2line, eu-ar, eu-elfcmp, eu-elfcompress, eu-elflint, eu-findtextrel, eu-make-debug-archive, eu-nm, eu-objdump, eu-ranlib, eu-readelf, eu-size, eu-stack, eu-strings, eu-strip, and eu-unstrip

Installed Libraries: libasm.{a,so}, libdw.{a,so}, libebl.a, libelf.{a,so}, and some for different architectures under /usr/lib/elfutils

Installed Directories: /usr/include/elfutils and /usr/lib/elfutils

Short Descriptions

eu-addr2line	converts addresses into file names and line numbers.
eu-ar	creates, modifies, and extracts from archives.
eu-elfcmp	compares relevant parts of two ELF files for equality.
eu-elfcompress	compresses or decompresses sections in an ELF file.
eu-elflint	does pedantic checking of ELF files compliance with gABI/psABI spec.
eu-findtextrel	locates the source of text relocations in FILEs (a.out by default).
eu-nm	lists symbols from FILEs (a.out by default).
eu-objdump	shows information from FILEs (a.out by default).
eu-ranlib	generates an index to speed up access to archives.
eu-readelf	prints information from ELF files in human-readable form.
eu-size	lists section sizes of FILEs (a.out by default).
eu-stack	prints a stack for each thread in a process or core file.
eu-strings	prints the strings of printable characters in files.
eu-strip	discards symbols from object files.
eu-unstrip	combines stripped files with separate symbols and debug information.

Last updated on 2017-08-19 20:26:54 -0700

Expect-5.45

Introduction to Expect

The Expect package was installed in the LFS temporary tools directory for testing other packages. These procedures install it in a permanent location. It contains tools for automating interactive applications such as telnet, ftp, passwd, fsck, rlogin, tip, etc. Expect is also useful for testing these same applications as well as easing all sorts of tasks that are prohibitively difficult with anything else.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/expect/expect5.45.tar.gz
Download MD5 sum: 44e1a4f4c877e9ddc5a542dfa7ecc92b
Download size: 620 KB
Estimated disk space required: 4.1 MB
Estimated build time: 0.2 SBU

Expect Dependencies

Required

Tcl-8.6.7

Optional

Tk-8.6.7

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/expect

Installation of Expect

Install Expect by running the following commands:

./configure --prefix=/usr           \
            --with-tcl=/usr/lib     \
            --enable-shared         \
            --mandir=/usr/share/man \
            --with-tclinclude=/usr/include &&
make

To test the results, issue: make test.

Now, as the root user:

make install &&
ln -svf expect5.45/libexpect5.45.so /usr/lib

Command Explanations

-with-tcl=/usr/lib: This parameter is used to tell the configure script where the tclConfig.sh is located.

--enable-shared: This option enables building the shared library.

ln -sf ...: This command creates a required link to the shared library.

Configuring Expect

Config Files

$exp_library/expect.rc and ~/.expect.rc

Configuration Information

Reference the expect man page for information about utilizing the expect.rc configuration files. Additionally, many of the tools contained in the Expect package will use their own configuration files. Reference the respective man page, or examine the script directly for configuration file information.

Installed Programs: autoexpect, autopasswd, cryptdir, decryptdir, dislocate, expect, ftp-rfc, kibitz, lpunlock, mkpasswd, passmass, rftp, rlogin-cwd, timed-read, timed-run, unbuffer, weather, and optionally (if Expect was linked against Tk), multixterm, tknewsbiff, tkpasswd, xkibitz, and xpstat

Installed Library: libexpect5.45.so

Installed Directory: /usr/lib/expect5.45

Short Descriptions

autoexpect	generates an Expect script from watching a session.
autopasswd	is a wrapper to make passwd(1) be non-interactive.
cryptdir	encrypts all files in a directory.
decryptdir	decrypts all files in a directory.
dislocate	allows processes to be disconnected and reconnected to a terminal.
expect	is a program that “talks” to other interactive programs according to a script.
ftp-rfc	retrieves an RFC (or the index) from UUNET.
kibitz	allows two (or more) people to interact with one shell (or any arbitrary program).
lpunlock	unhangs a printer which claims it is “waiting for lock”.
mkpasswd	generates passwords and can apply them automatically to users.
passmass	changes a password on multiple machines.
rftp	is much like ftp except it uses `~g` and `~p` instead of `mget` and `mput`.
rlogin-cwd	is rlogin except it uses the local current directory as the current working directory on the remote machine.
timed-read	reads a complete line from stdin and aborts after a given number of seconds.
timed-run	runs a program for a given amount of time.
unbuffer	disables the output buffering that occurs when program output is redirected.
weather	retrieves a weather report (courtesy University of Michigan) for a given city or geographical area.
multixterm	creates multiple xterms that can be driven together or separately.
tknewsbiff	pops up a window when there is unread news in your favorite newsgroups and removes the window after you've read the news.
tkpasswd	is a script to change passwords using expect and Tk.
xkibitz	allows users in separate xterms to share one shell (or any program that runs in an xterm).
xpstat	is a script that acts as a front-end for xpilot.
`libexpect5.45.so`	contains functions that allow Expect to be used as a Tcl extension or to be used directly from C or C++ (without Tcl).

Last updated on 2017-08-21 11:12:53 -0700

GCC-7.2.0

Introduction to GCC

The GCC package contains the GNU Compiler Collection. This page describes the installation of compilers for the following languages: C, C++, Fortran, Objective C, Objective C++, and Go. One additional languages , Ada is available in the collection. It has specific requirements, so it is described in a separate page (GCC-Ada-7.2.0). Since C and C++ are installed in LFS, this page is either for upgrading C and C++, or for installing additional compilers.

This package is known to build and work properly using an LFS-8.1 platform.

Caution

If you are upgrading GCC from any other version prior to 7.2.0, then you must be careful compiling 3rd party kernel modules. You should ensure that the kernel and all its native modules are also compiled using the same version of GCC that you use to build the 3rd party module. This issue does not affect native kernel (and kernel modules) updates, as the instructions below are a complete reinstallation of GCC. If you have existing 3rd party modules installed, ensure they are recompiled using the updated version of GCC. As always, never update the kernel headers from the ones used when Glibc was compiled during LFS.

Some system headers need to be fixed to be used with GCC. This is done during the installation of GCC, and the “fixed” headers are installed in /usr/lib/gcc/<machine triplet>/<GCC version>/include-fixed . This is harmless if GCC is built during the LFS stage. But if you reinstall GCC in BLFS, some of the BLFS packages may be “fixed”. If one of those packages is reinstalled afterwards, the “fixed” headers are not updated, which may lead to version mismatches. In case that happens, the “fixed” headers must be updated by running (as root): /usr/libexec/gcc/x86_64-pc-linux-gnu/7.1.0/install-tools/mkheaders . The machine triplet may be different on a 32bit system.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/gcc/gcc-7.2.0/gcc-7.2.0.tar.xz
Download (FTP): ftp://ftp.gnu.org/gnu/gcc/gcc-7.2.0/gcc-7.2.0.tar.xz
Download MD5 sum: ff370482573133a7fcdd96cd2f552292
Download size: 59 MB
Estimated disk space required: 7.4 GB (with tests)
Estimated build time: 60 SBU (with tests and parallelism=4)

GCC Dependencies

Installation of GCC

Important

Even if you specify only languages other than C and C++ to the ./configure command below, the installation process will overwrite your existing GCC C and C++ compilers and libraries. Having the Tcl, Expect and DejaGnu packages installed before beginning the build is highly recommended so you can run the full suite of tests.

Do not continue with the make install command until you are confident the build was successful. You can compare your test results with those found at http://gcc.gnu.org/ml/gcc-testresults/. You may also want to refer to the information found in the GCC section of Chapter 6 in the LFS book (../../../../lfs/view/8.1/chapter06/gcc.html).

The instructions below are intentionally performing a “bootstrap” process. Bootstrapping is needed for robustness and is highly recommended when upgrading the compilers version. To disable bootstrap anyways, add --disable-bootstrap to the ./configure options below.

Install GCC by running the following commands:

case $(uname -m) in
  x86_64)
    sed -e '/m64=/s/lib64/lib/' \
        -i.orig gcc/config/i386/t-linux64
  ;;
esac

mkdir build                                          &&
cd    build                                          &&

../configure                                         \
    --prefix=/usr                                    \
    --disable-multilib                               \
    --with-system-zlib                               \
    --enable-languages=c,c++,fortran,go,objc,obj-c++ &&
make

If you have installed additional packages such as Valgrind and GDB, the GCC part of the testsuite will run more tests than in LFS. Some of those will report FAIL and others XPASS (pass when expected to FAIL). To run the tests, issue:

ulimit -s 32768 &&
make -k check

The tests are very long, and the results may be hard to find in the logs, specially if you use parallel jobs with make. You can get a summary of the tests with:

../contrib/test_summary

Now, as the root user:

make install &&

mkdir -pv /usr/share/gdb/auto-load/usr/lib              &&
mv -v /usr/lib/*gdb.py /usr/share/gdb/auto-load/usr/lib &&

chown -v -R root:root \
    /usr/lib/gcc/*linux-gnu/7.2.0/include{,-fixed}

Some packages expect to find the C preprocessor in /lib or may refer to the C compiler under the name cc. The following symbolic links are not needed if you have followed the LFS instructions, since they have been already created. If you do not have them on your system, issue as the root user:

ln -v -sf ../usr/bin/cpp /lib          &&
ln -v -sf gcc /usr/bin/cc              &&
install -v -dm755 /usr/lib/bfd-plugins &&
ln -sfv ../../libexec/gcc/$(gcc -dumpmachine)/7.2.0/liblto_plugin.so /usr/lib/bfd-plugins/

Command Explanations

mkdir build; cd build: The GCC documentation recommends building the package in a dedicated build directory.

--disable-multilib: This parameter ensures that files are created for the specific architecture of your computer.

--with-system-zlib: Uses the system zlib instead of the bundled one. zlib is used for compressing and uncompressing GCC's intermediate language in LTO (Link Time Optimization) object files.

--enable-languages=c,c++,fortran,go,objc,obj-c++: This command identifies which languages to build. You may modify this command to remove undesired languages. Two other languages can be added, besides ADA, which is described on a separate page: BRIG (add brig to the list of enabled languages), a binary format for HSAIL (Heterogeneous System Architecture Intermediate Language), and JIT (add jit to the list of enabled languages), a library which can be linked into interpreters that want to generate machine code “on the fly” at run-time. They have not been tested by the BLFS developers.

--with-default-libstdcxx-abi=gcc4-compatible: Use this switch if you are upgrading from a GCC version prior to 5.1.0, and you do not want to recompile all the libraries written in C++.

ulimit -s 32768: This command prevents several tests from running out of stack space.

make -k check: This command runs the test suite without stopping if any errors are encountered.

../contrib/test_summary: This command will produce a summary of the test suite results. You can append | grep -A7 Summ to the command to produce an even more condensed version of the summary. You may also wish to redirect the output to a file for review and comparison later on.

mv -v /usr/lib/*gdb.py ...: The installation stage puts some files used by gdb under the /usr/lib directory. This generates spurious error messages when performing ldconfig. This command moves the files to another location.

chown -v -R root:root /usr/lib/gcc/*linux-gnu/...: If the package is built by a user other than root, the ownership of the installed include directory (and its content) will be incorrect. This command changes the ownership to the root user and group.

Some program and library names and descriptions are not listed here, but can be found at ../../../../lfs/view/8.1/chapter06/gcc.html#contents-gcc as they were initially installed during the building of LFS.

Installed Programs: gccgo, go, gofmt, and gfortran, hard-linked to architecture specific names

Installed Libraries: libgfortran.{so,a}, libgo.{so,a}, libgobegin.a, libgolibbegin.a, libobjc.{so,a}, and numerous other run-time libraries and executables

Installed Directories: /usr/lib/go

Short Descriptions

gccgo	is a GCC-based compiler for the Go language.
go	is a tool for managing Go source code.
gofmt	is a tool for formatting Go source code.
gfortran	is a GCC-based compiler for the Fortran language.

Last updated on 2017-08-26 09:42:24 -0700

GCC-Ada-7.2.0

Introduction to the GCC Ada compiler

Ada is a modern programming language designed for large, long-lived applications — and embedded systems in particular — where reliability and efficiency are essential. It has a set of unique technical features that make it highly effective for use in large, complex and safety-critical projects.

The compiler and associated tools on this page are known as the GNAT technology, developed by the Adacore company, using the GCC backend. Since parts of the Ada compiler are written in Ada, there is a circular dependency on an Ada compiler. The instructions below first install a binary compiler. You do not need to do that if you already have built GNAT tools.

This package is known to build and work properly using an LFS-8.1 platform.

Caution

Using the instructions on this page will have the effect that the C and C++ compiler and libraries will be reinstalled, overwriting the ones on your system. This may lead to some issues. Please read the notes and caution on the GCC-7.2.0 page.

Note

If you want to install other compilers in the GCC collection, do that first, or specify ada in the --enable-languages switch to configure. If you rebuild GCC without enabling ada after running the instructions on this page, the new compiler will not be able to compile ADA anymore.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/gcc/gcc-7.2.0/gcc-7.2.0.tar.xz
Download (FTP): ftp://ftp.gnu.org/gnu/gcc/gcc-7.2.0/gcc-7.2.0.tar.xz
Download MD5 sum: ff370482573133a7fcdd96cd2f552292
Download size: 59 MB
Estimated disk space required: 8.9 GB (1.5 GB added if GNAT install dir is not removed)
Estimated build time: 56 SBU (with tests and parallelism=4)

Additional Downloads

Note

You will need to install GNAT temporarily to satisfy the circular dependency. You may point your browser to the AdaCore download page, choose your platform and 2016 (64 bit machines) or 2014 (32 bit machines), then select the file to download. Alternatively, direct links to the 64 bit and 32 bit linux versions are given below.

GNAT 64 bit binary: http://mirrors.cdn.adacore.com/art/591c6d80c7a447af2deed1d7
GNAT 64 bit MD5 sum: 226dac83d9e6490fc8542ac0934a1db0
GNAT 64 bit size: 473 MB
GNAT 32 bit binary: http://mirrors.cdn.adacore.com/art/564b3e9dc8e196b040fbe248
GNAT 32 bit MD5 sum: 69423c7ad8d9759377d4fff71a78992d
GNAT 32 bit size: 222 MB

GCC Ada Dependencies

Installation of the GNAT binary

Before unpacking and changing into the GCC source directory, first unpack the GNAT tarball, and change to the GNAT directory. Then, install the GNAT binary by running the following command as the root user:

make ins-all prefix=/opt/gnat

The GNAT compiler can be invoked by executing the gcc binary installed in /opt/gnat/bin.

You may now remove the GNAT source directory if desired.

Prepare to compile GCC by placing the GNAT version of gcc at the beginning of the PATH variable by using the following commands:

PATH_HOLD=$PATH &&
export PATH=/opt/gnat/bin:$PATH_HOLD

Doing so has the drawback that the GCC and Binutils executables are taken from the just installed GNAT package, but the versions of those executables are outdated compared to those installed in LFS. This is not important for the GCC compilers, since they recompile themselves during the bootstrap process. On the other hand, the outdated ld and as tools are used all along. In order to use the LFS tools, issue as the root user:

find /opt/gnat -name ld -exec mv -v {} {}.old \;
find /opt/gnat -name as -exec mv -v {} {}.old \;

Installation of GCC Ada

Install GCC Ada by running the following commands:

case $(uname -m) in
  x86_64)
    sed -e '/m64=/s/lib64/lib/' \
        -i.orig gcc/config/i386/t-linux64
  ;;
esac

mkdir build &&
cd    build &&

../configure               \
    --prefix=/usr          \
    --disable-multilib     \
    --with-system-zlib     \
    --enable-languages=ada &&
make

ulimit -s 32768 &&
make -k check

The tests are very long, and the results may be hard to find in the logs, specially if you use parallel jobs with make. You can get a summary of the tests with:

../contrib/test_summary

Now, as the root user:

make install                                               &&
mkdir -pv /usr/share/gdb/auto-load/usr/lib                 &&
mv -v /usr/lib/*gdb.py /usr/share/gdb/auto-load/usr/lib    &&

chown -v -R root:root \
    /usr/lib/gcc/*linux-gnu/7.2.0/include{,-fixed} \
    /usr/lib/gcc/*linux-gnu/7.2.0/ada{lib,include}

You should now remove the GNAT installation and perform other cleanups. First, as the root user:

rm -rf /opt/gnat

Then, as a normal user:

export PATH=$PATH_HOLD &&
unset PATH_HOLD

Command Explanations

mkdir build; cd build: The GCC documentation recommends building the package in a dedicated build directory.

--disable-multilib: This parameter ensures that files are created for the specific architecture of your computer.

--with-system-zlib: Uses the system zlib instead of the bundled one. zlib is used for compressing and uncompressing GCC's intermediate language in LTO (Link Time Optimization) object files.

--enable-languages=ada: Instructs the build system to build the Ada tools and compiler. It is unavoidable that the C and C++ compilers be built too.

--with-default-libstdcxx-abi=gcc4-compatible: Use this switch if you are building GNAT tools using a GCC version prior to 5.1.0, and you do not want to recompile all the libraries written in C++.

ulimit -s 32768: This command prevents several tests from running out of stack space.

make -k check: This command runs the test suite without stopping if any errors are encountered.

chown -v -R root:root /usr/lib/gcc/*linux-gnu/...: If the package is built by a user other than root, the ownership of the installed include and adalib directories (and their contents) will be incorrect. These commands change the ownership to the root user and group.

Installed Programs: gnat, gnatbind, gnatchop, gnatclean, gnatfind, gnatkr, gnatlink, gnatls, gnatmake, gnatname, gnatprep, gnatxref

Installed Libraries: libgnarl.{so,a}, libgnat.{so,a} in /usr/lib/gcc/<arch-triplet>/7.2.0/adalib

Installed Directories: /usr/lib/gcc/<arch-triplet>/7.2.0/ada{include,lib} and /usr/lib/gcc/<arch-triplet>/7.2.0/plugin/include/ada

Only the Ada specific files are listed here. Others can be found at ../../../../lfs/view/8.1/chapter06/gcc.html#contents-gcc as they were initially installed during the building of LFS.

Short Descriptions

gnat	is a wrapper that accepts a number of commands and calls the corresponding tool from the list below.
gnatbind	is used to bind compiled objects.
gnatchop	is useful for renaming files to meet the standard Ada default file naming conventions.
gnatclean	is used to remove files associated with a GNAT project.
gnatfind	is intended for locating definition and/or references to specified entities in a GNAT project.
gnatkr	is used to determine the crunched name for a given file, when crunched to a specified maximum length.
gnatlink	is used to link programs and build an executable file.
gnatls	is the compiled unit browser.
gnatmake	is the Ada compiler, which performs compilation, binding and linking.
gnatname	will list the files associated with a GNAT project.
gnatprep	is the GNAT external preprocessor.
gnatxref	is similar to gnatfind, but generates a full report of all cross-references.

Last updated on 2017-08-26 09:42:24 -0700

GC-7.6.0

Introduction to GC

The GC package contains the Boehm-Demers-Weiser conservative garbage collector, which can be used as a garbage collecting replacement for the C malloc function or C++ new operator. It allows you to allocate memory basically as you normally would, without explicitly deallocating memory that is no longer useful. The collector automatically recycles memory when it determines that it can no longer be otherwise accessed. The collector is also used by a number of programming language implementations that either use C as intermediate code, want to facilitate easier interoperation with C libraries, or just prefer the simple collector interface. Alternatively, the garbage collector may be used as a leak detector for C or C++ programs, though that is not its primary goal.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.hboehm.info/gc/gc_source/gc-7.6.0.tar.gz
Download MD5 sum: bf46ccbdaccfa3186c2ab87191c8855a
Download size: 1.1 MB
Estimated disk space required: 13 MB (with tests)
Estimated build time: 0.2 SBU (with tests)

Required

libatomic_ops-7.4.6

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/gc

Installation of GC

Install GC by running the following commands:

sed -i 's#pkgdata#doc#' doc/doc.am &&
autoreconf -fi  &&
./configure --prefix=/usr      \
            --enable-cplusplus \
            --disable-static   \
            --docdir=/usr/share/doc/gc-7.6.0 &&
make

To test the results, issue: make check.

Now, as the root user:

make install &&
install -v -m644 doc/gc.man /usr/share/man/man3/gc_malloc.3 &&
ln -sfv gc_malloc.3 /usr/share/man/man3/gc.3

Command Explanations

sed -i 's#pkgdata#doc#' doc/doc.am and --docdir=/usr/share/doc/gc-7.6.0: These commands are used so the package will install the documentation in a versioned directory.

autoreconf -fi: This regenerates the configure script and the Makefile.in files.

--enable-cplusplus: This parameter enables the building and installing of the C++ library along with the standard C library.

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: None

Installed Libraries: libcord.so, libgc.so and libgccpp.so

Installed Directories: /usr/include/gc and /usr/share/doc/gc-7.6.0

Short Descriptions

`libgc.so`	contains a C interface to the conservative garbage collector, primarily designed to replace the C malloc function.
`libgccpp.so`	contains a C++ interface to the conservative garbage collector.

Last updated on 2017-08-21 11:12:53 -0700

GDB-8.0

Introduction to GDB

GDB, the GNU Project debugger, allows you to see what is going on “inside” another program while it executes -- or what another program was doing at the moment it crashed. Note that GDB is most effective when tracing programs and libraries that were built with debugging symbols and not stripped.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/gdb/gdb-8.0.tar.xz
Download (FTP): ftp://ftp.gnu.org/gnu/gdb/gdb-8.0.tar.xz
Download MD5 sum: c3d35cd949084be53b92cc1e03485f88
Download size: 19 MB
Estimated disk space required: 450 MB (add 193 MB for tests, add 677 MB for docs)
Estimated build time: 4.3 SBU (add 27 SBU for tests, add 0.7 for docs)

GDB Dependencies

Optional

DejaGnu-1.6 (for tests), Doxygen-1.8.13, GCC-7.2.0 (gfortran, for some tests), Guile-2.2.2 (currently broken), Python-2.7.13, rustc-1.19.0 (for some tests), Valgrind-3.13.0, and SystemTap (run-time dependency, also used in a few tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/gdb

Installation of GDB

Install GDB by running the following commands:

./configure --prefix=/usr --with-system-readline --without-guile &&
make

Optionally, to build the API documentation using Doxygen-1.8.13, run:

make -C gdb/doc doxy

To test the results, issue:

pushd gdb/testsuite &&
make  site.exp      &&
echo  "set gdb_test_timeout 120" >> site.exp &&
runtest TRANSCRIPT=y
popd

See gdb/testsuite/README and TestingGDB. There are many problems with the test suite:

Clean directories are needed if re-running the tests. For that reason, it is recommended to make a copy of the compiled source code directory before the tests in case you need to run the tests again.
Results depend on installed compilers.
There are a large number of timeouts (there is a variable that can be set to increase time for timeout, but changing it will result in a different number of tests being run).
There are failures associated with system readline 6.x.
A few tests assume that the header file <sys/sdt.h>, part of SystemTap, is present.
About 3% of the tests fail (out of over 35000 tests).

Now, as the root user:

make -C gdb install

If you have built the API documentation, it is now in gdb/doc/doxy. You can install it (as the root user):

install -d /usr/share/doc/gdb-8.0 &&
rm -rf gdb/doc/doxy/xml &&
cp -Rv gdb/doc/doxy /usr/share/doc/gdb-8.0

Command Explanations

--without-guile: This switch disables support for Guile since version 2.2 changed the way that C ports were handled.

--with-system-readline: This switch forces GDB to use the copy of Readline installed in LFS.

Installed Programs: gcore, gdb and gdbserver

Installed Library: libinproctrace.so

Installed Directories: /usr/{include,share}/gdb and /usr/share/doc/gdb-8.0

Short Descriptions

gcore	generates a core dump of a running program.
gdb	is the GNU Debugger.
gdbserver	is a remote server for the GNU debugger (it allows programs to be debugged from a different machine).
`libinproctrace.so`	contains functions for the in-process tracing agent. The agent allows for installing fast tracepoints, listing static tracepoint markers, probing static tracepoints markers, and starting trace monitoring.

Last updated on 2017-08-23 10:58:13 -0700

Git-2.14.1

Introduction to Git

Git is a free and open source, distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Every Git clone is a full-fledged repository with complete history and full revision tracking capabilities, not dependent on network access or a central server. Branching and merging are fast and easy to do. Git is used for version control of files, much like tools such as Mercurial-4.3.1, Bazaar, Subversion-1.9.7, CVS, Perforce, and Team Foundation Server.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.kernel.org/pub/software/scm/git/git-2.14.1.tar.xz
Download MD5 sum: a55bc6a2164d3ef1c3e5fc2f0c1d0d52
Download size: 4.6 MB
Estimated disk space required: 542 MB (with optional dependencies and documentation, add 24MB if building the docs)
Estimated build time: 0.3 SBU (with parallelism=4, add 2.1 SBU if building documentation, add 1.4 SBU for tests with parallelism=4)

Additional Downloads

https://www.kernel.org/pub/software/scm/git/git-manpages-2.14.1.tar.xz (not needed if you've installed asciidoc-8.6.9, xmlto-0.0.28, and prefer to rebuild them)
https://www.kernel.org/pub/software/scm/git/git-htmldocs-2.14.1.tar.xz and other docs (not needed if you've installed asciidoc-8.6.9 and want to rebuild the documentation).

Git Dependencies

Optional

pcre2-10.30 (or the deprecated PCRE-8.41), in either case configured with --enable-jit, Subversion-1.9.7 with Perl bindings (for git svn), Tk-8.6.7 (gitk, a simple Git repository viewer, uses Tk at runtime), and Valgrind-3.13.0

Optional (to create the man pages, html docs and other docs)

xmlto-0.0.28 and asciidoc-8.6.9 or AsciiDoctor, and also dblatex (for the PDF version of the user manual), and docbook2x to create info pages

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/git

Installation of Git

Install Git by running the following commands:

./configure --prefix=/usr --with-gitconfig=/etc/gitconfig &&
make

You can build the man pages and/or html docs, or use downloaded ones. If you choose to build them, use next two following instructions.

If you have installed asciidoc-8.6.9 you can create the html version of the man pages and other docs:

make html

If you have installed asciidoc-8.6.9 and xmlto-0.0.28 you can create the man pages:

make man

The test suite can be run in parallel mode. To run the test suite, issue: make test. If run as a normal user, 0 tests should be reported as failed in the final summary.

Now, as the root user:

make install

If you created the man pages and/or html docs

Install the man pages as root user:

make install-man

Install the html docs as root user:

make htmldir=/usr/share/doc/git-2.14.1 install-html

If you downloaded the man pages and/or html docs

If you downloaded the man pages untar them as the root user:

tar -xf ../git-manpages-2.14.1.tar.xz \
    -C /usr/share/man --no-same-owner --no-overwrite-dir

If you downloaded the html docs untar them as the root user:

mkdir -vp   /usr/share/doc/git-2.14.1 &&
tar   -xf   ../git-htmldocs-2.14.1.tar.xz \
      -C    /usr/share/doc/git-2.14.1 --no-same-owner --no-overwrite-dir &&

find        /usr/share/doc/git-2.14.1 -type d -exec chmod 755 {} \; &&
find        /usr/share/doc/git-2.14.1 -type f -exec chmod 644 {} \;

Reorganize text and html in the html-docs (both methods)

For both methods, the html-docs include a lot of plain text files. Reorganize the files as the root user:

mkdir -vp /usr/share/doc/git-2.14.1/man-pages/{html,text}         &&
mv        /usr/share/doc/git-2.14.1/{git*.txt,man-pages/text}     &&
mv        /usr/share/doc/git-2.14.1/{git*.,index.,man-pages/}html &&

mkdir -vp /usr/share/doc/git-2.14.1/technical/{html,text}         &&
mv        /usr/share/doc/git-2.14.1/technical/{*.txt,text}        &&
mv        /usr/share/doc/git-2.14.1/technical/{*.,}html           &&

mkdir -vp /usr/share/doc/git-2.14.1/howto/{html,text}             &&
mv        /usr/share/doc/git-2.14.1/howto/{*.txt,text}            &&
mv        /usr/share/doc/git-2.14.1/howto/{*.,}html               &&

sed -i '/^<a href=/s|howto/|&html/|' /usr/share/doc/git-2.14.1/howto-index.html &&
sed -i '/^\* link:/s|howto/|&html/|' /usr/share/doc/git-2.14.1/howto-index.txt

Command Explanations

--with-gitconfig=/etc/gitconfig: This sets /etc/gitconfig as the file that stores the default, system wide, Git settings.

--without-python: Use this switch if Python is not installed.

--with-libpcre2: Use this switch if PCRE2 is installed and has been built with the non-default JIT enabled.

--with-libpcre2: As an alternative to PCRE2, use this switch if the deprecated PCRE is installed and has been built with the non-default JIT enabled.

tar -xf ../git-manpages-2.14.1.tar.gz -C /usr/share/man --no-same-owner: This untars git-manpages-2.14.1.tar.gz. The -C option makes tar change directory to /usr/share/man before it starts to decompress the docs. The --no-same-owner option stops tar from preserving the user and group details of the files. This is useful as that user or group may not exist on your system; this could (potentially) be a security risk.

mv /usr/share/doc/git-2.14.1 ...: These commands move some of the files into subfolders to make it easier to sort through the docs and find what you're looking for.

find ... chmod ...: These commands correct the permissions in the shipped documentation tar file.

Configuring Git

Config Files

~/.gitconfig and /etc/gitconfig

Installed Programs: git, git-receive-pack and git-upload-archive (hardlinked to each other), git-cvsserver, git-shell, git-upload-pack, and gitk

Installed Libraries: None

Installed Directories: /usr/lib/perl5/site_perl/<5.x.y>{,<arch>-linux/auto}/Git, /usr/libexec/git-core and /usr/share/{doc/git-2.14.1,git-core,git-gui,gitk,gitweb}

Short Descriptions

git	is the stupid content tracker.
git-cvsserver	is a CVS server emulator for Git.
gitk	is a graphical Git repository browser (needs Tk-8.6.7).
git-receive-pack	is invoked by git send-pack and updates the repository with the information fed from the remote end.
git-shell	is a login shell for SSH accounts to provide restricted Git access.
git-upload-archive	is invoked by git archive --remote and sends a generated archive to the other end over the git protocol.
git-upload-pack	is invoked by git fetch-pack, it discovers what objects the other side is missing, and sends them after packing.

Last updated on 2017-08-20 15:06:11 -0700

Guile-2.2.2

Introduction to Guile

The Guile package contains the GNU Project's extension language library. Guile also contains a stand alone Scheme interpreter.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/guile/guile-2.2.2.tar.xz
Download (FTP): ftp://ftp.gnu.org/gnu/guile/guile-2.2.2.tar.xz
Download MD5 sum: d3c002bcf92dbf68f6de45803874db0f
Download size: 10.3 MB
Estimated disk space required: 176 MB (add 3 MB for tests)
Estimated build time: 9.3 SBU (add 0.5 SBU for tests)

Guile Dependencies

Required

GC-7.6.0, libffi-3.2.1 and libunistring-0.9.7

Optional

Emacs-25.2 and GDB-8.0 (run-time only dependencies).

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/guile

Installation of Guile

Install Guile by running the following commands:

./configure --prefix=/usr    \
            --disable-static \
            --docdir=/usr/share/doc/guile-2.2.2 &&
make      &&
make html &&

makeinfo --plaintext -o doc/r5rs/r5rs.txt doc/r5rs/r5rs.texi &&
makeinfo --plaintext -o doc/ref/guile.txt doc/ref/guile.texi

To test the results, issue: ./check-guile.

Now, as the root user:

make install      &&
make install-html &&

mv /usr/lib/libguile-*-gdb.scm /usr/share/gdb/auto-load/usr/lib &&
mv /usr/share/doc/guile-2.2.2/{guile.html,ref} &&
mv /usr/share/doc/guile-2.2.2/r5rs{.html,}     &&

find examples -name "Makefile*" -delete         &&
cp -vR examples   /usr/share/doc/guile-2.2.2   &&

for DIRNAME in r5rs ref; do
  install -v -m644  doc/${DIRNAME}/*.txt \
                    /usr/share/doc/guile-2.2.2/${DIRNAME}
done &&
unset DIRNAME

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Programs: guild, guile, guile-config, guile-snarf and guile-tools

Installed Libraries: libguile-2.0.so and libguilereadline-v-18.so

Installed Directories: /usr/include/guile, /usr/lib/guile, /usr/share/doc/guile-2.2.2 and /usr/share/guile

Short Descriptions

guile	is a stand-alone Scheme interpreter for Guile.
guile-config	is a Guile script which provides the information necessary to link your programs against the Guile library, in much the same way PkgConfig does.
guile-snarf	is a script to parse declarations in your C code for Scheme visible C functions.
guild	is a wrapper program installed along with guile, which knows where a particular module is installed and calls it, passing its arguments to the program.
guile-tools	is a symlink to guild.

Last updated on 2017-08-20 20:24:54 -0700

Librep-0.92.7

Introduction to Librep

The librep package contains a Lisp system. This is useful for scripting or for applications that may use the Lisp interpreter as an extension language.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://download.tuxfamily.org/librep/librep_0.92.7.tar.xz
Download MD5 sum: 036195b371006848e29ed6f50ddc8475
Download size: 840 KB
Estimated disk space required: 10 MB
Estimated build time: 0.3 SBU

Librep Dependencies

Optional

libffi-3.2.1

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/librep

Installation of Librep

Install librep by running the following commands:

./configure --prefix=/usr --disable-static &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Programs: rep, rep-remote, rep-xgettext, and repdoc

Installed Libraries: librep.so and numerous modules installed in the /usr/lib/rep hierarchy

Installed Directories: /usr/lib/rep, /usr/share/emacs/site-lisp, and /usr/share/rep

Short Descriptions

rep	is the Lisp interpreter.
`librep.so`	contains the functions necessary for the Lisp interpreter.

Last updated on 2017-08-26 15:47:53 -0700

LLVM-4.0.1

Introduction to LLVM

The LLVM package contains a collection of modular and reusable compiler and toolchain technologies. The Low Level Virtual Machine (LLVM) Core libraries provide a modern source and target-independent optimizer, along with code generation support for many popular CPUs (as well as some less common ones!). These libraries are built around a well specified code representation known as the LLVM intermediate representation ("LLVM IR").

The optional Clang and Compiler RT packages provide new C, C++, Objective C and Objective C++ front-ends and runtime libraries for the LLVM.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://llvm.org/releases/4.0.1/llvm-4.0.1.src.tar.xz
Download MD5 sum: a818e70321b91e2bb2d47e60edd5408f
Download size: 20 MB
Estimated disk space required: 1.8 GB (with Clang, add 8.2 GB for tests)
Estimated build time: 19 SBU (with Clang and parallelism=4, add 14 SBU for tests using 12 cores)

Optional Downloads

Clang

Download: http://llvm.org/releases/4.0.1/cfe-4.0.1.src.tar.xz
Download MD5 sum: a6c7b3e953f8b93e252af5917df7db97
Download size: 11 MB

Compiler RT

Download: http://llvm.org/releases/4.0.1/compiler-rt-4.0.1.src.tar.xz
Download MD5 sum: 0227ac853ce422125f8bb08f6ad5c995
Download size: 1.4 MB

Optional patch: http://www.linuxfromscratch.org/patches/blfs/8.1/compiler-rt-4.0.1-glibc-2.26-1.patch (required if using compiler-rt)

LLVM Dependencies

Required

Optional

Doxygen-1.8.13, Graphviz-2.40.1, libxml2-2.9.4, texlive-20170524 (or install-tl-unx), Valgrind-3.13.0, Zip-3.0, OCaml, and Sphinx

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/llvm

Installation of LLVM

If you have downloaded the optional packages, install them into the source tree by running the following commands:

tar -xf ../cfe-4.0.1.src.tar.xz -C tools &&
tar -xf ../compiler-rt-4.0.1.src.tar.xz -C projects &&

mv tools/cfe-4.0.1.src tools/clang &&
mv projects/compiler-rt-4.0.1.src projects/compiler-rt

patch -Np1 -d projects/compiler-rt < ../compiler-rt-4.0.1-glibc-2.26-1.patch

Install LLVM by running the following commands:

mkdir -v build &&
cd       build &&

CC=gcc CXX=g++                              \
cmake -DCMAKE_INSTALL_PREFIX=/usr           \
      -DLLVM_ENABLE_FFI=ON                  \
      -DCMAKE_BUILD_TYPE=Release            \
      -DLLVM_BUILD_LLVM_DYLIB=ON            \
      -DLLVM_TARGETS_TO_BUILD="host;AMDGPU" \
      -Wno-dev ..                           &&
make

If you have installed Sphinx and wish to generate the html documentation and manual pages, issue the following commands:

cmake -DLLVM_ENABLE_SPHINX=ON         \
      -DSPHINX_WARNINGS_AS_ERRORS=OFF \
      -Wno-dev ..                     &&
make docs-llvm-html  docs-llvm-man

If you have downloaded the optional packages, the clang documentation can be built too:

make docs-clang-html docs-clang-man

To test the results, issue: make check-all. Tests are run using the maximum number of processors/threads available. Note that the Address Sanitizer tests are known to fail, and that 19 tests fail because of the removal of an obsolete header.

Now, as the root user:

make install

If you have built the documentation, install it by running the following command as the root user:

install -v -m644 docs/man/* /usr/share/man/man1             &&
install -v -d -m755 /usr/share/doc/llvm-4.0.1/llvm-html     &&
cp -Rv docs/html/* /usr/share/doc/llvm-4.0.1/llvm-html

The clang documentation can be installed in the same way (again as the root user):

install -v -m644 tools/clang/docs/man/* /usr/share/man/man1 &&
install -v -d -m755 /usr/share/doc/llvm-4.0.1/clang-html    &&
cp -Rv tools/clang/docs/html/* /usr/share/doc/llvm-4.0.1/clang-html

Command Explanations

-DLLVM_ENABLE_FFI=ON: This switch enables LLVM to use libffi. Remove if you did not install libffi.

-DLLVM_BUILD_LLVM_DYLIB=ON: builds libraries as static and links all of them into an unique shared one. This is the recommended way of building a shared library.

-DCMAKE_BUILD_TYPE=Release: This switch enables compiler optimizations in order to speed up the code and reduce its size. It also disables some compile checks, not necessary on a production system.

-DLLVM_TARGETS_TO_BUILD="host;AMDGPU": This switch enables building for the same target as the host, and also for the r600 AMD GPU used by the Mesa r600 and radeonsi drivers. Default is all. You can use a semicolon separated list. Valid targets are: host, X86, Sparc, PowerPC, ARM, AArch64, Mips, Hexagon, Xcore, MSP430, NVPTX, SystemZ, AMDGPU, BPF, CppBackend, or all.

-DLLVM_LINK_LLVM_DYLIB=ON: Used in conjunction with -DLLVM_BUILD_LLVM_DYLIB=ON, this switch enables linking the tools against the shared library instead of the static ones.

-DBUILD_SHARED_LIBS=ON: if used instead of -DLLVM_BUILD_LLVM_DYLIB=ON, builds all the LLVM libraries (about 60) as shared libraries instead of static.

-DLLVM_ENABLE_DOXYGEN: Enables the generation of browsable HTML documentation if you have installed Doxygen-1.8.13. You should run make doxygen-html afterwards, and install the generated documentation manually.

Installed Programs: bugpoint, c-index-test, clang, clang++ (symlinks to clang-<version>), clang-<version>, clang-check, clang-cl, clang-format, git-clang-format, llc, lli, llvm-ar, llvm-as, llvm-bcanalyzer, llvm-config, llvm-cov, llvm-c-test, llvm-cxxdump, llvm-diff, llvm-dis, llvm-dsymutil, llvm-dwarfdump, llvm-dwp, llvm-extract, llvm-lib (symlink to llvm-ar), llvm-link, llvm-lto, llvm-mc, llvm-mcmarkup, llvm-nm, llvm-objdump, llvm-pdbdump, llvm-profdata, llvm-ranlib (symlink to llvm-ar), llvm-readobj, llvm-rtdyld, llvm-size, llvm-split, llvm-stress, llvm-symbolizer, llvm-tblgen, obj2yaml, opt, sancov, sanstats, scan-build, scan-view, verify-uselistorder, and yaml2obj

Installed Libraries: BugpointPasses.so, LLVMHello.so, libLLVM.so, libLLVM*.a (57 libraries), libLTO.so, libclang.so and libclang*.a (24 libraries)

Installed Directories: /usr/include/{clang,clang-c,llvm,llvm-c}, /usr/lib/{clang,cmake/{clang,llvm}} and /usr/share/{clang,scan-build,scan-view,doc/llvm-4.0.1}

Short Descriptions

bugpoint	is the automatic test case reduction tool.
clang	is the Clang C, C++, and Objective-C compiler.
clang-format	is a tool to format C/C++/Java/JavaScript/Objective-C/Protobuf code.
llc	is the LLVM static compiler.
lli	is used to directly execute programs from LLVM bitcode.
llvm-ar	is the LLVM archiver.
llvm-as	is the LLVM assembler.
llvm-bcanalyzer	is the LLVM bitcode analyzer.
llvm-config	Prints LLVM compilation options.
llvm-cov	is used to emit coverage information.
llvm-c-test	is a bytecode disassembler.
llvm-cxxdump	is used as a C++ ABI Data Dumper.
llvm-diff	is the LLVM structural 'diff'.
llvm-dis	is the LLVM disassembler.
llvm-dsymutil	is a tool used to manipulate archived DWARF debug symbol files, compatible with the Darwin command dsymutil.
llvm-dwarfdump	prints the content of DWARF sections in object files.
llvm-dwp	merges split DWARF files.
llvm-extract	is used to extract a function from an LLVM module.
llvm-link	is the LLVM linker.
llvm-lto	is the LLVM LTO (link time optimization) linker.
llvm-mc	is a standalone machine code assembler/disassembler.
llvm-nm	is used to list LLVM bitcode and object file's symbol table.
llvm-objdump	is an LLVM object file dumper.
llvm-pdbdump	is used as PDB Dumper.
llvm-profdata	is a small tool to manipulate and print profile data files.
llvm-ranlib	is used to generate an index for a LLVM archive.
llvm-readobj	displays low-level format-specific information about object files.
llvm-rtdyld	is the LLVM MC-JIT tool.
llvm-size	is the LLVM object size dumper.
llvm-split	is the LLVM module splitter.
llvm-stress	is used to generate random `.ll` files.
llvm-symbolizer	converts adresses into source code locations.
llvm-tblgen	is the LLVM Target Description To C++ Code Generator.
obj2yaml	takes an object file,and produces a YAML representation of the file.
opt	is the LLVM optimizer.
sancov	is the sanitizer coverage processing tool.
sanstats	is the sanitizer statistics processing tool.
scan-build	is a Perl script that invokes the Clang static analyzer.
scan-view	is a viewer for Clang static analyzer results.
verify-uselistorder	is the LLVM tool to verify use-list order.
yaml2obj	takes a YAML representation of an object file and converts it to a binary file.

Last updated on 2017-08-23 21:43:54 -0700

Lua-5.3.4

Introduction to Lua

Lua is a powerful light-weight programming language designed for extending applications. It is also frequently used as a general-purpose, stand-alone language. Lua is implemented as a small library of C functions, written in ANSI C, and compiles unmodified in all known platforms. The implementation goals are simplicity, efficiency, portability, and low embedding cost. The result is a fast language engine with small footprint, making it ideal in embedded systems too.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.lua.org/ftp/lua-5.3.4.tar.gz
Download MD5 sum: 53a9c68bcc0eda58bdc2095ad5cdfc63
Download size: 300 KB
Estimated disk space required: 2.8 MB (with Basic tests)
Estimated build time: less than 0.1 SBU (with Basic tests)

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/lua-5.3.4-shared_library-1.patch
Optional Test Suite Download (HTTP): http://www.lua.org/tests/lua-5.3.4-tests.tar.gz
Optional Test Suite Download MD5 sum: b14fe3748c1cb2d74e3acd1943629ba3
Optional Test Suite Download size: 104 KB

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/lua

Installation of Lua

Some packages check for the pkg-config file for Lua, which is created with:

cat > lua.pc << "EOF"
V=5.3
R=5.3.4

prefix=/usr
INSTALL_BIN=${prefix}/bin
INSTALL_INC=${prefix}/include
INSTALL_LIB=${prefix}/lib
INSTALL_MAN=${prefix}/share/man/man1
INSTALL_LMOD=${prefix}/share/lua/${V}
INSTALL_CMOD=${prefix}/lib/lua/${V}
exec_prefix=${prefix}
libdir=${exec_prefix}/lib
includedir=${prefix}/include

Name: Lua
Description: An Extensible Extension Language
Version: ${R}
Requires:
Libs: -L${libdir} -llua -lm -ldl
Cflags: -I${includedir}
EOF

Install Lua by running the following commands:

patch -Np1 -i ../lua-5.3.4-shared_library-1.patch &&
sed -i '/#define LUA_ROOT/s:/usr/local/:/usr/:' src/luaconf.h &&

make MYCFLAGS="-DLUA_COMPAT_5_2 -DLUA_COMPAT_5_1" linux

To test the results, issue: make test. “This will run the interpreter and print its version.”. More comprehensive tests can be performed if you downloaded the "Test suite" tarball. Those tests need to be executed after the package is installed, thus we defer to the description below.

Now, as the root user:

make INSTALL_TOP=/usr                \
     INSTALL_DATA="cp -d"            \
     INSTALL_MAN=/usr/share/man/man1 \
     TO_LIB="liblua.so liblua.so.5.3 liblua.so.5.3.4" \
     install &&

mkdir -pv                      /usr/share/doc/lua-5.3.4 &&
cp -v doc/*.{html,css,gif,png} /usr/share/doc/lua-5.3.4 &&

install -v -m644 -D lua.pc /usr/lib/pkgconfig/lua.pc

Here we describe only the "Basic tests". Untar the tarball and change to the lua-5.3.4-tests directory, then issue lua -e "_U=true" all.lua. If the tests finish without error, you will see a message containing the string "final OK".

Command Explanations

sed -i ... src/luaconf.h: This command changes the Lua search path to match the install path.

MYCFLAGS="-DLUA_COMPAT_5_2 -DLUA_COMPAT_5_1": This environment variable includes compatibility layers with Lua 5.1 and 5.2 in the build.

Installed Programs: lua and luac

Installed Library: liblua.so

Installed Directories: /usr/{lib,share}/lua and /usr/share/doc/lua-5.3.4

Short Descriptions

lua	is the standalone Lua interpreter.
luac	is the Lua compiler.
`liblua.so`	contains the Lua API functions.

Last updated on 2017-08-21 23:29:00 -0700

Mercurial-4.3.1

Introduction to Mercurial

Mercurial is a distributed source control management tool similar to Git and Bazaar. Mercurial is written in Python and is used by projects such as Mozilla and Vim.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.mercurial-scm.org/release/mercurial-4.3.1.tar.gz
Download MD5 sum: b9cbdcf0bd41a2b385b35b9fbfeb0eea
Download size: 5.2 MB
Estimated disk space required: 68 MB (add 403 MB for tests)
Estimated build time: 0.2 SBU (add 7.2 SBU for tests using -j4)

Mercurial Dependencies

Required

Optional

git-2.14.1, GnuPG-2.1.23 (gpg2 with Python bindings), OpenSSH-7.5p1 (runtime, to access ssh://... repositories), Subversion-1.9.7 (with Python bindings), Bazaar, CVS, Docutils (required to build the documentation), pyflakes, pygments, and pyOpenSSL

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/mercurial

Installation of Mercurial

Build Mercurial by issuing the following command:

make build

To build the documentation (requires Docutils), issue:

make doc

To run the test suite, issue:

rm -rf tests/tmp &&

TESTFLAGS="-j<N> --tmpdir tmp --blacklist blacklists/failed-tests" \
make check

where <N> is an integer between one and the number of ( processor X threads ), inclusive. One test, test-gpg.t, fails if GnuPG-2.1.23 is not installed. In order to investigate any other apparently failing tests, you may use the run-tests.py script. To see the almost forty switches, some of them very useful, issue tests/run-tests.py --help. Running the following commands, you will execute only the tests that failed before:

pushd tests  &&
  rm -rf tmp &&

  ./run-tests.py - -tmpdir tmp test-gpg.t &&
popd

Normally, the previous failures will be confirmed. However, if you add the switch "- -debug" before "- -tmpdir", and run again, some failures are gone, which seems to be a problem with the test suite. If this happens, normally, from now on, there will be no more such failures whether you use the debug switch or not.

An interesting switch is "- -time", which will generate at the end of the test suite execution, a table with all executed tests and respective start, end, user, system and real times. Notice that the switches may be used with make check, including them in the TESTFLAGS environment variable.

Install Mercurial by running the following command (as root):

make PREFIX=/usr install-bin

If you built the documentation, install it by running the following command (as root):

make PREFIX=/usr install-doc

After installed, two very quick and simple tests should run correctly. First one needs some configuration:

cat >> ~/.hgrc << "EOF"
[ui]
username = <user_name> <user@mail>
EOF

where you must replace <user_name> and <your@mail> (mail is optional and can be omitted). With the user identity defined, run hg debuginstall and several lines will be displayed, the last one reading "no problems detected". Another quick and simple test is just hg, which should output basic commands that can be used with hg.

Configuring Mercurial

Config Files

/etc/mercurial/hgrc and ~/.hgrc

The great majority of extensions are disabled by default. Run hg help extensions if you need to enable any, e.g. when investigating test failures. You will obtain the lists of enabled and disabled extensions, and more information, such as how to enable or disable them using configuration files.

If you have installed the Certificate Authority Certificates and want Mercurial to use them, as the root user, issue:

install -v -d -m755 /etc/mercurial &&
cat > /etc/mercurial/hgrc << "EOF"
[web]
cacerts = /etc/ssl/ca-bundle.crt
EOF

Installed Programs: hg

Installed Libraries: several internal modules under /usr/lib/python2.7/site-packages/mercurial

Installed Directories: /etc/mercurial and /usr/lib/python2.7/site-packages/{hgdemandimport,hgext,hgext3rd,mercurial}

Short Descriptions

hg	is the program file for mercurial.

Last updated on 2017-08-29 10:55:51 -0700

NASM-2.13.01

Introduction to NASM

NASM (Netwide Assembler) is an 80x86 assembler designed for portability and modularity. It includes a disassembler as well.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.nasm.us/pub/nasm/releasebuilds/2.13.01/nasm-2.13.01.tar.xz
Download MD5 sum: b3ae134bd1b5ead73d659286f568da95
Download size: 784 KB
Estimated disk space required: 28 MB
Estimated build time: 0.2 SBU

Additional Downloads

Optional documentation: http://www.nasm.us/pub/nasm/releasebuilds/2.13.01/nasm-2.13.01-xdoc.tar.xz

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/nasm

Installation of NASM

If you downloaded the optional documentation, put it into the source tree:

tar -xf ../nasm-2.13.01-xdoc.tar.xz --strip-components=1

Install NASM by running the following commands:

./configure --prefix=/usr &&
make

This package does not come with a test suite.

Now, as the root user:

make install

If you downloaded the optional documentation, install it with the following instructions as the root user:

install -m755 -d         /usr/share/doc/nasm-2.13.01/html  &&
cp -v doc/html/*.html    /usr/share/doc/nasm-2.13.01/html  &&
cp -v doc/*.{txt,ps,pdf} /usr/share/doc/nasm-2.13.01

Installed Programs: nasm and ndisasm

Installed Libraries: None

Installed Directory: /usr/share/doc/nasm-2.13.01

Short Descriptions

nasm	is a portable 80x86 assembler.
ndisasm	is an 80x86 binary file disassembler.

Last updated on 2017-08-20 20:24:54 -0700

Ninja-1.7.2

Introduction to Ninja

Ninja is a small build system with a focus on speed.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/ninja-build/ninja/archive/v1.7.2/ninja-1.7.2.tar.gz
Download MD5 sum: 7b482218757acbaeac4d4d54a3cd94e1
Download size: 176 KB
Estimated disk space required: 58.0 MB
Estimated build time: 0.2 SBU

Ninja Dependencies

Required

Optional

re2c (only needed to modify the build), Emacs-25.2 (to generate lisp files), asciidoc-8.6.9 (to build the manual), and Doxygen-1.8.13 (to build API documentation)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/ninja

Installation of Ninja

Install Ninja by running the following commands:

./configure.py --bootstrap

If Emacs is installed and you wish to build lisp files:

emacs -Q --batch -f batch-byte-compile misc/ninja-mode.el

To test the results, issue the following commands:

./configure.py &&
./ninja ninja_test &&
./ninja_test --gtest_filter=-SubprocessTest.SetWithLots

Now, as the root user:

install -vm755 ninja /usr/bin/ &&
install -vDm644 misc/ninja.vim \
                /usr/share/vim/vim80/syntax/ninja.vim &&
install -vDm644 misc/bash-completion \
                /usr/share/bash-completion/completions/ninja &&
install -vDm644 misc/zsh-completion \
                /usr/share/zsh/site-functions/_ninja

If Emacs is installed, while still the root user:

install -vDm644 misc/ninja-mode.el \
                /usr/share/emacs/site-lisp/ninja-mode.el
install -vDm644 misc/ninja-mode.elc \
                /usr/share/emacs/site-lisp/ninja-mode.elc

If you have asciidoc-8.6.9 installed and wish to build the HTML manual, execute the following commands (as the root user):

ninja manual &&
install -vDm644 doc/manual.html /usr/share/doc/ninja-1.7.2/manual.html

If you have Doxygen-1.8.13 installed and wish to build the API documentation, execute the following commands (as the root user):

ninja doxygen &&
install -vDdm644 doc/doxygen/html/* /usr/share/doc/ninja-1.7.2/

Command Explanations

emacs -Q --batch -f batch-byte-compile misc/ninja-mode.el: regenerates the emacs lisp files.

Installed Programs: ninja

Installed Library: none

Installed Directories: /usr/share/doc/ninja-1.7.2

Short Descriptions

ninja

is the Ninja build system.

Last updated on 2017-08-21 23:29:00 -0700

NPAPI-SDK-0.27.2

Introduction to NPAPI-SDK

NPAPI-SDK is a bundle of Netscape Plugin Application Programming Interface headers by Mozilla. This package provides a clear way to install those headers and depend on them.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://bitbucket.org/mgorny/npapi-sdk/downloads/npapi-sdk-0.27.2.tar.bz2
Download MD5 sum: e81db61e206cd615cf56c4a9f301e636
Download size: 65 KB
Estimated disk space required: 520 KB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/NPAPI-SDK

Installation of NPAPI-SDK

Install NPAPI-SDK by running the following commands:

./configure --prefix=/usr

This package does not come with a test suite.

Now, as the root user:

make install

Installed Programs: None

Installed Libraries: None

Installed Directory: /usr/include/npapi-sdk

Last updated on 2017-08-26 13:10:53 -0700

Perl Modules

Introduction to Perl Modules

The Perl module packages add useful objects to the Perl language. Modules utilized by packages throughout BLFS are listed here, along with their dependencies. Installation of the modules shown on this page should be accomplished by installing the dependencies in the order listed. The Perl Module standard build and installation instructions are shown at the bottom of this page.

If a module is used by more than one other module on this page, but not by other packages in the book, it is listed by name here at the top level (but without a version) to slightly reduce the complexity of the XML source for this page.

Where a module is shown as '(for the testsuite)' it is required if you wish to run the test for the module which uses it. In these cases, only the required or recommended dependencies are listed - there might be other modules which allow more tests to be run, but omitting them will still allow the tests to PASS.

Note

For unversioned modules on this page, if you are building without using the CPAN automated install you should check when the current version was released. If it is recent you should review the 'Changes' link for it at http://search .cpan.org in case the dependencies have altered.

Archive::Zip-1.59

The Archive::Zip module allows a Perl program to create, manipulate, read, and write Zip archive files. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Archive::Zip-1.59
https://www.cpan.org/authors/id/P/PH/PHRED/Archive-Zip-1.59.tar.gz
MD5 sum: b649a593391573f9382cef8c08d1d5ba
- Test::MockModule - This uses the instructions for packages using Build.PL
  (http://search.cpan.org/dist/Test-MockModule/)
  - SUPER
    (http://search.cpan.org/dist/SUPER/) (for the testsuite)
    
    Sub::Identify

autovivification-0.17

The autovivification module allows you to lexically disable autovivification. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

autovivification-0.17
https://www.cpan.org/authors/id/V/VP/VPIT/autovivification-0.17.tar.gz
MD5 sum: 925c7d4c64c623db02845b355e3c6a19

Business::ISBN-3.004

The Business::ISBN module is for work with International Standard Book Numbers. This module and its dependencies use the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Business::ISBN-3.004
https://www.cpan.org/authors/id/B/BD/BDFOY/Business-ISBN-3.004.tar.gz
MD5 sum: 60b36c0a92cf51e9027ec3d9f38e7224
- Business::ISBN::Data
  (http://search.cpan.org/dist/Business-ISBN-Data/)
- Mojolicious
  (http://search.cpan.org/dist/Mojolicious/)

Business::ISMN-1.131

The Business::ISMN module is for work with International Standard Music Numbers. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Business::ISMN-1.131
https://www.cpan.org/authors/id/B/BD/BDFOY/Business-ISMN-1.131.tar.gz
MD5 sum: 87e36c8ccc9a9434494a849b7cf2fcc5
- Tie::Cycle
  (http://search.cpan.org/~bdfoy/Tie-Cycle/)

Business::ISSN-1.002

The Business::ISSN module is for work with International Standard Serial Numbers. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Business::ISSN-1.002
https://www.cpan.org/authors/id/B/BD/BDFOY/Business-ISSN-1.002.tar.gz
MD5 sum: c226db6cdb9dfe77d17ad1d540b49f47

Capture::Tiny

The Capture::Tiny module captures STDOUT and STDERR from Perl, XS (eXternal Subroutine, i.e. written in C or C++) or external programs. This module uses the standard build and installation instructions.

Capture::Tiny
(http://search.cpan.org/dist/Capture-Tiny/)

Class::Accessor-0.34

This module generators accessors/mutators for your class. It uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Class::Accessor-0.34
https://www.cpan.org/authors/id/K/KA/KASEI/Class-Accessor-0.34.tar.gz
MD5 sum: 0d9640d237a13276145f7e44b4855b89

Data::Compare-1.25

The Data::Compare module compares two perl data structures. This module and its dependencies use the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Data::Compare-1.25
https://www.cpan.org/authors/id/D/DC/DCANTRELL/Data-Compare-1.25.tar.gz
MD5 sum: 6a397ab5833237f3ca05ed7277b19a7a
- File::Find::Rule
  (http://search.cpan.org/~rclamp/File-Find-Rule/)
  - Number::Compare
    (http://search.cpan.org/dist/Number-Compare/)
  - Text::Glob
    (http://search.cpan.org/dist/Text-Glob/)

Data::Dump-1.23

This module provides pretty printing of data structures. It uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Data::Dump-1.23
https://www.cpan.org/authors/id/G/GA/GAAS/Data-Dump-1.23.tar.gz
MD5 sum: 762c111e525c82ff23d62c90821b26e9

Data::Uniqid-0.12

This module provides three simple routines for generating unique IDs. It uses the standard build and installation instructions but requires a patch because one of its tests fails in recent builds.

Additional Download

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/Data-Uniqid-0.12-disable_failing_test-1.patch

This package is known to build and work properly using an LFS-8.1 platform.

Data::Uniqid-0.12
https://www.cpan.org/authors/id/M/MW/MWX/Data-Uniqid-0.12.tar.gz
MD5 sum: 6bab3b5da09fedfdf60ce2629a7367db

DateTime

DateTime provides a date and time object for perl. It and its dependencies use the standard build and installation instructions except for those needing Module::Build-0.4224, which use instructions for packages using Build.PL.

This package is known to build and work properly using an LFS-8.1 platform.

DateTime
(http://search.cpan.org/dist/DateTime)
- CPAN::Meta::Check
  (http://search.cpan.org/dist/CPAN-Meta-Check/)
  - Test::Deep
    (http://search.cpan.org/dist/Test-Deep/)
- namespace::autoclean
  (http://search.cpan.org/dist/namespace-autoclean/)
  - B::Hooks::EndOfScope
    (http://search.cpan.org/dist/B-Hooks-EndOfScope/)
    
    Module::Implementation
    
    Sub::Exporter::Progressive
    (http://search.cpan.org/dist/Sub-Exporter-Progressive/)
    
    Variable::Magic
    (http://search.cpan.org/dist/Variable-Magic/)
  - Sub::Identify
  - namespace::clean
    (http://search.cpan.org/dist/namespace-clean/)
    
    Package::Stash
    (http://search.cpan.org/dist/Package-Stash/)
    
    Dist::CheckConflicts
    (http://search.cpan.org/dist/Dist-CheckConflicts/)
    
    Package::Stash::XS
    (http://search .cpan.org/dist/Package-Stash-XS/)
    
    Test::Requires (for the testsuite)
- Specio
  (http://search.cpan.org/dist/Specio/)
  - Devel::StackTrace
    (http://search.cpan.org/dist/Devel-StackTrace/)
  - Eval::Closure
    (http://search.cpan.org/dist/Eval-Closure/)
  - MRO::Compat
    (http://search.cpan.org/dist/MRO-Compat/)
  - Role::Tiny
    (http://search.cpan.org/dist/Role-Tiny/)
  - Test::Needs
  - Sub::Quote
    (http://search.cpan.org/dist/Sub-Quote/) (for the testsuite)
    
    Test::Fatal (for the testsuite)
- Params::ValidationCompiler
  (http://search.cpan.org/dist/Params-ValidationCompiler/)
  - Exception::Class
    (http://search.cpan.org/dist/Exception-Class/)
    
    Class::Data::Inheritable
    (http://search.cpan.org/dist/Class-Data-Inheritable/)
  - Test2::Plugin::NoWarnings
    (http://search.cpan.org/dist/Test2-Plugin-NoWarnings/) (for the testsuite)
    
    Test2::Suite
    (http://search.cpan.org/dist/Test2-Suite/)
    
    Importer
    (http://search.cpan.org/dist/Importer/)
    (this is a core module, but a newer version is needed)
    
    Test::Simple
    (http://search.cpan.org/dist/Test-Simple/)
    
    Sub::Info
    (http://search.cpan.org/dist/Sub-Info/)
    
    Term::Table
    (http://search.cpan.org/dist/Term-Table/)
  - Test::Without::Module
    (http://search.cpan.org/dist/Test-Without-Module/)
- DateTime::Locale
  (http://search.cpan.org/dist/DateTime-Locale/)
  - File::ShareDir::Install
    (http://search.cpan.org/dist/File-ShareDir-Install/)
    
    Module::Build::Tiny
    (http://search.cpan.org/dist/Module-Build-Tiny/)
    
    ExtUtils::Config
    (http://search.cpan.org/dist/Extutils-Config)
    
    ExtUtils::Helpers
    (http://search.cpan.org/dist/Extutils-Helpers)
    
    ExtUtils::InstallPaths
    (http://search.cpan.org/dist/Extutils-InstallPaths)
    
    Module::Build-0.4224
  - Scalar::List::Utils
  - File::ShareDir
    (http://search.cpan.org/dist/File-ShareDir) (for the testsuite)
    
    Class::Inspector
    (http://search.cpan.org/dist/Class-Inspector)
  - Test::File::ShareDir
    (http://search.cpan.org/dist/Test-File-ShareDir) (for the testsuite)
    
    Class::Tiny
    (http://search.cpan.org/dist/Class-Tiny)
    
    File::Copy::Recursive
    (http://search.cpan.org/dist/File-Copy-Recursive)
    
    Path::Tiny
    (http://search.cpan.org/dist/Path-Tiny)
    
    Scope::Guard
    (http://search.cpan.org/dist/Scope-Guard)
    
    Test::Fatal
  - Test::Warnings (for the testsuite)
- DateTime::TimeZone
  (http://search.cpan.org/dist/DateTime-TimeZone/)
  - Class::Singleton
    (http://search.cpan.org/dist/Class-Singleton/)
  - Try::Tiny

DateTime::Calendar::Julian-0.04

DateTime::Calendar::Julian implements the Julian Calendar. This module and its dependencies use the standard build and installation instructions except for those needing Module::Build-0.4224, which use instructions for packages using Build.PL.

This package is known to build and work properly using an LFS-8.1 platform.

DateTime::Calendar::Julian-0.04
https://www.cpan.org/authors/id/P/PI/PIJLL/DateTime-Calendar-Julian-0.04.tar.gz
MD5 sum: de688324eb33a27449ac2a5bfe1453a0
- DateTime

DateTime::Format::Builder-0.81

DateTime::Format::Builder creates DateTime parser classes and objects. This module and its dependencies use the standard build and installation instructions except for those needing Module::Build-0.4224, which use instructions for packages using Build.PL.

This package is known to build and work properly using an LFS-8.1 platform.

DateTime::Format::Builder-0.81
https://www.cpan.org/authors/id/D/DR/DROLSKY/DateTime-Format-Builder-0.81.tar.gz
MD5 sum: 21d950a9425c0173d6191697bf9dc4dc
- Class::Factory::Util
  (http://search.cpan.org/dist/Class-Factory-Util/)
  - Module::Build-0.4224
- DateTime
- DateTime::Format::Strptime
  (http://search.cpan.org/dist/DateTime-Format-Strptime/)
  - Package::DeprecationManager
    (http://search.cpan.org/dist/Package-DeprecationManager/)
    
    Params::Util
    (http://search.cpan.org/dist/Params-Util/)
    
    Sub::Install
    (http://search.cpan.org/dist/Sub-Install/)
    
    Sub::Name
    (http://search.cpan.org/dist/Sub-Name/)
Params::Validate
(http::/search.cpan.org/dist/Params-Validate/) - uses instructions for packages using Build.PL

Encode::EUCJPASCII-0.03

Encode::EUCJPASCII provides an eucJP-open (Extended Unix Code, Japanese) mapping. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Encode::EUCJPASCII-0.03
https://www.cpan.org/authors/id/N/NE/NEZUMI/Encode-EUCJPASCII-0.03.tar.gz
MD5 sum: 5daa65f55b7c2050bb0713d9e95f239d

Encode::HanExtra-0.23

The Encode::HanExtra module provides extra sets of Chinese Encodings. This module uses the 'unsafe' variant of the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Encode::HanExtra-0.23
https://www.cpan.org/authors/id/A/AU/AUDREYT/Encode-HanExtra-0.23.tar.gz
MD5 sum: e1d3bc32c1c8ee304235a06fbcd5d5a4

Encode::JIS2K-0.03

The Encode::JIS2K module provides JIS X 0212 (aka JIS 2000) Encodings. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Encode::JIS2K-0.03
https://www.cpan.org/authors/id/D/DA/DANKOGAI/Encode-JIS2K-0.03.tar.gz
MD5 sum: 60539471aa408a2b793cd45a6ce651db

Error-0.17025

The Error module provides Error/exception handling in an object-oriented way. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Error-0.17025
https://www.cpan.org/authors/id/S/SH/SHLOMIF/Error-0.17025.tar.gz
MD5 sum: 1a2ee7f0dc44f9ee76661a16bbbc0c48

File::BaseDir-0.07

The File::BaseDir module compares two perl data structures. This module and its dependencies use the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

File::BaseDir-0.07
https://www.cpan.org/authors/id/K/KI/KIMRYAN/File-BaseDir-0.07.tar.gz
MD5 sum: 5d10401970d209049c8491d2906c3e13
- Module::Build-0.4224
- File::Which-1.21
- IPC::System::Simple
  (http://search.cpan.org/~pjf/IPC-System-Simple/)

File::Slurp-9999.19

The File::Slurp module provides Simple and Efficient Reading/Writing/Modifying of Complete Files. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

File::Slurp-9999.19
https://www.cpan.org/authors/id/U/UR/URI/File-Slurp-9999.19.tar.gz
MD5 sum: 7d584cd15c4f8b9547765eff8c4ef078

File::Which-1.21

File::Which provides a portable implementation of the 'which' utility. This module and its dependencies use the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

File::Which-1.21
https://www.cpan.org/authors/id/P/PL/PLICEASE/File-Which-1.21.tar.gz
MD5 sum: 115a6efe5d7e9621237fcb655c7a0980

HTML::Parser-3.72

The HTML::Parser distribution is a collection of modules that parse and extract information from HTML documents. This module and the dependency modules use the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

HTML::Parser-3.72
https://www.cpan.org/authors/id/G/GA/GAAS/HTML-Parser-3.72.tar.gz
MD5 sum: eb7505e5f626913350df9dd4a03d54a8
- HTML::Tagset
  (http://search.cpan.org/~petdance/HTML-Tagset/)
- libwww-perl-6.26 (circular; howevever, it can be installed after HTML::Parser as it is only a run-time requirement for the included HTML::HeadParser module)

IPC::Run3-0.048

The IPC::Run3 module is used to run a subprocess with input/ouput redirection. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

IPC::Run3-0.048
https://www.cpan.org/authors/id/R/RJ/RJBS/IPC-Run3-0.048.tar.gz
MD5 sum: 5a8cec571c51a118b265cf6e24e55761

libwww-perl-6.26 (a.k.a. Bundle::LWP)

The libwww-perl (Bundle::LWP) collection is a set of Perl modules which provide a simple and consistent application programming interface to the World-Wide Web. The main focus of the library is to provide classes and functions that allow you to write WWW clients. The library also contains modules that are of more general use and even classes that help you implement simple HTTP servers. The LWP collection and all its dependency modules use the standard build and installation instructions. The dependencies should be installed in the order listed below. Ensure you install the dependency chain for each module before installing the modules.

This package is known to build and work properly using an LFS-8.1 platform.

libwww-perl-6.26
https://www.cpan.org/authors/id/O/OA/OALDERS/libwww-perl-6.26.tar.gz
MD5 sum: 457bf4a4f40af3e2f43653329a9c6ab7
- Encode::Locale
  (http://search.cpan.org/~gaas/Encode-Locale/)
- HTML::Form
  (http://search.cpan.org/~gaas/HTML-Form/)
  - URI-1.72
  - HTML::Parser-3.72
  - HTTP::Message
    (http://search.cpan.org/~gaas/HTTP-Message/)
    
    HTTP::Date
    (http://search.cpan.org/~gaas/HTTP-Date/)
    
    IO::HTML
    (http://search.cpan.org/~cjm/IO-HTML/)
    
    LWP::MediaTypes
    (http://search.cpan.org/~gaas/LWP-MediaTypes/)
    
    Try::Tiny (for the testsuite)
- HTTP::Cookies
  (http://search.cpan.org/~gaas/HTTP-Cookies/)
- HTTP::Negotiate
  (http://search.cpan.org/~gaas/HTTP-Negotiate/)
- Net::HTTP
  (http://search.cpan.org/~gaas/Net-HTTP/)
- WWW::RobotRules
  (http://search.cpan.org/~gaas/WWW-RobotRules/)
- HTTP::Daemon
  (http://search.cpan.org/~gaas/HTTP-Daemon/)
- File::Listing
  (http://search.cpan.org/~gaas/File-Listing/)
- Test::RequiresInternet (for the testsuite)
  (http://search.cpan.org/~mallen/Test-RequiresInternet/)
- Test::Fatal (for the testsuite)

After the LWP installation, if you want HTTPS protocol support, install LWP::Protocol::https-6.06

Lingua::Translit-0.27 (Lingua::Translit)

Lingua::Translit and its translit program transliterate text between writing systems. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Lingua::Translit-0.27
https://www.cpan.org/authors/id/A/AL/ALINKE/Lingua-Translit-0.27.tar.gz
MD5 sum: e95386614b65b32a8ed9c1a24ae110f8

List::AllUtils-0.14

The List::Allutils module combines List::Util and List::MoreUtils in one bite-sized package. This module and its dependencies use the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

List::AllUtils-0.14
https://www.cpan.org/authors/id/D/DR/DROLSKY/List-AllUtils-0.14.tar.gz
MD5 sum: 5d7f33d6b21aa461c12b002e20a2cbb6
- List::SomeUtils
  (http://search.cpan.org/dist/List-SomeUtils/) (for the testsuite)
  - List::SomeUtils::XS
    (http://search.cpan.org/dist/List-SomeUtils::XS/)
    
    Test::LeakTrace
    (http://search.cpan.org/dist/Test-LeakTrace/) (for the testsuite) - this uses the 'unsafe' variant of the Standard Installation
  - Module::Implementation
- List::UtilsBy
  (http://search.cpan.org/dist/List-UtilsBy/)
- Number::Compare
  (http://search.cpan.org/dist/Number-Compare/)
- Scalar::List::Utils
- Test::Warnings (for the testsuite)
- Text::Glob
  (http://search.cpan.org/dist/Text-Glob/)

List::MoreUtils-0.419

List::MoreUtils provides the stuff missing in List::Util. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

List::MoreUtils-0.419
https://www.cpan.org/authors/id/R/RE/REHSACK/List-MoreUtils-0.419.tar.gz
MD5 sum: 0a5462045de148c807d3f18e5074064f
- XSLoader
  (http://search.cpan.org/dist/XSLoader/)
  
  XSLoader is a core perl module, but the version in perl-5.24.1 is not new enough.
- Exporter::Tiny
  (http://search.cpan.org/dist/Exporter-Tiny/) (for the testsuite)

Log::Log4perl-1.49

Log::Log4perl provides a Log4j implementation for perl. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Log::Log4perl-1.49
https://www.cpan.org/authors/id/M/MS/MSCHILLI/Log-Log4perl-1.49.tar.gz
MD5 sum: 8e96fb5e236c92445947eceb903326ba

LWP::Protocol::https-6.06

LWP::Protocol::https provides https support for LWP::UserAgent (i.e. for LWP). This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

LWP::Protocol::https-6.06
https://www.cpan.org/authors/id/M/MS/MSCHILLI/LWP-Protocol-https-6.06.tar.gz
MD5 sum: 404c7984521699ab4a6973f155f1726f
- OpenSSL-1.1.0f
- libwww-perl-6.26
- IO::Socket::SSL
  (http://search.cpan.org/~behroozi/IO-Socket-SSL/)
  - Net::SSLeay
    (http://search.cpan.org/dist/Net-SSLeay/)
    When scripting, pipe the perl Makefile.PL command through yes "" |, since some user input is sought
- Mozilla::CA
  (http://search.cpan.org/~abh/Mozilla-CA/)

Module::Build-0.4224

Module::Build allows perl modules to be built without a make command being present. This module uses the standard build and installation instructions.

Note

When creating the Makefile, this module will report

inc_bundling_support....disabled
requires:
! inc::latest is not installed

but inc::latest is experimental and not needed.

This package is known to build and work properly using an LFS-8.1 platform.

Module::Build-0.4224
https://www.cpan.org/authors/id/L/LE/LEONT/Module-Build-0.4224.tar.gz
MD5 sum: b74c2f6e84b60aad3a3defd30b6f0f4d

Module::Implementation

Module::Implementation loads one of several alternate underlying implementation of a module (e.g. eXternal Subroutine or pure Perl, or an implementation for a given OS). This module and its dependencies use the standard build and installation instructions except for those needing Module::Build-0.4224, which use instructions for packages using Build.PL.

This package is known to build and work properly using an LFS-8.1 platform.

Module::Implementation
(http://search.cpan.org/dist/Module-Implementation)
- Module::Runtime
- Try::Tiny
- Test::Fatal (for the testsuite)
- Test::Requires (for the testsuite)

Module::Runtime

Module::Runtime provides functions to deal with runtime handling of Perl modules. This module itself uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Module::Runtime
(http://search.cpan.org/dist/Module-Runtime/)
- Module::Build-0.4224

Net::DNS-1.12

Net::DNS is a DNS resolver implemented in Perl. It can be used to perform nearly any type of DNS query from a Perl script. The Net::DNS module and all its dependencies are installed using the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Net::DNS-1.12
https://www.cpan.org/authors/id/N/NL/NLNETLABS/Net-DNS-1.12.tar.gz
MD5 sum: 7e7c6cf8184df4d49500a003d998764a
- Digest::HMAC
  (http://search.cpan.org/~gaas/Digest-HMAC/) (for the testsuite)
- IO::Socket::INET6
  (http://search.cpan.org/~shlomif/IO-Socket-INET6-2.72/) (required for IPv6 support)
  - Socket6
    (http://search.cpan.org/~umemoto/Socket6/)
- IO
  (http://search.cpan.org/~gbarr/IO/)
  (for the IO::Socket module, which is a core module, but whose version is too old in 5.24.1)

Parse::Yapp-1.21

Parse::Yapp is a Perl extension for generating and using LALR parsers.. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Parse::Yapp-1.21
https://www.cpan.org/authors/id/W/WB/WBRASWELL/Parse-Yapp-1.21.tar.gz
MD5 sum: 69584d5b0f0304bb2a23cffcd982c5de

Regexp::Common-2017060201

Regexp::Common provides commonly requested regular expressions. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Regexp::Common-2017060201
https://www.cpan.org/authors/id/A/AB/ABIGAIL/Regexp-Common-2017060201.tar.gz
MD5 sum: b1bb40759b84154990f36a160160fb94

Scalar::List::Utils

Scalar::List::Utils provides a selection of list and scalar subroutines. This is a core module, but the version in perl-5.24.1 is not new enough for the packages which link to this module. If you are using perl-5.26.0, the version included in that is adequate. This module uses the standard build and installation instructions.

Scalar::List::Utils
(http://search.cpan.org/dist/Scalar-List-Utils/)

SGMLSpm-1.1

The SGMLSpm module is a Perl library used for parsing the output from James Clark's SGMLS and NSGMLS parsers. This modules uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Before beginning the build, issue the following command to prevent an error:

chmod -v 644 MYMETA.yml

After the package has been installed, run the following command as the root user:

ln -sv sgmlspl.pl /usr/bin/sgmlspl

SGMLSpm-1.1
https://www.cpan.org/authors/id/R/RA/RAAB/SGMLSpm-1.1.tar.gz
MD5 sum: 746c74ae969992cedb1a2879b4168090

Sort::Key-1.33

Sort::Key provides a set of functions to sort lists of values by some calculated key value. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Sort::Key-1.33
https://www.cpan.org/authors/id/S/SA/SALVA/Sort-Key-1.33.tar.gz
MD5 sum: a37ab0da0cfdc26e57b4c79e39f6d98f

Sub::Identify

Sub::Identify allows you to retrieve the real names of code references. It uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Sub::Identify
(http://search.cpan.org/dist/Sub-Identify/)

Test::Command-0.11

This module tests the exit status, STDOUT, or STDERR, of an external command. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Test::Command-0.11
https://www.cpan.org/authors/id/D/DA/DANBOO/Test-Command-0.11.tar.gz
MD5 sum: 9ab83c4695961dbe92cd86efe08f0634

Test::Differences-0.64

Test::Differences - Test strings and data structures and show differences if not ok. This module and its dependency modules use the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Test::Differences-0.64
https://www.cpan.org/authors/id/D/DC/DCANTRELL/Test-Differences-0.64.tar.gz
MD5 sum: ecfda620fe133e36a6e392d94ab8424d
- Text::Diff (for the testsuite)
  (http://search.cpan.org/~ovid/Text-Diff/)
  - Algorithm::Diff (for the testsuite)
    (http://search.cpan.org/~tyemq/Algorithm-Diff/)
- Capture::Tiny

Test::Fatal

The Test::Fatal module provides simple helpers for testing code which throws exceptions. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Test::Fatal
(http://search.cpan.org/dist/Test-Fatal/)
- Try::Tiny

Test::Needs

The Test::Needs module skips tests when a module is not available.

This package is known to build and work properly using an LFS-8.1 platform.

Test::Needs
(http://search.cpan.org/dist/Test-Needs/)

Test::Requires

The Test::Requires module checks if another (optional) module can be loaded, and if not it skips all the current tests. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Test::Requires
(http://search.cpan.org/dist/Test-Requires/)

Test::Warnings

The Test::Warnings module tests for warnings and the lack of them. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Test::Warnings
(http://search.cpan.org/dist/Test-Warnings/)

Text::BibTeX-0.81

Text::BibTeX provides an interface to read and parse BibTeX files. This module uses the instructions for packages using Build.PL, but except where noted, its dependencies are installed using the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Text::BibTeX-0.81
https://www.cpan.org/authors/id/A/AM/AMBS/Text-BibTeX-0.81.tar.gz
MD5 sum: a754759c80ab484c9f2b02b2fd4467c9
- Config::AutoConf
  (http://search.cpan.org/dist/Config-AutoConf/)
  - Capture::Tiny
- ExtUtils-LibBuilder
  (http://search.cpan.org/dist/LibBuilder/)
  this uses the instructions for packages using Build.PL
  - Module::Build-0.4224

Text::CSV-1.95

Text::CSV is a comma-separated values manipulator, using XS (eXternal Subroutine - for subroutines written in C or C++) or pure perl. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Text::CSV-1.95
https://www.cpan.org/authors/id/I/IS/ISHIGAKI/Text-CSV-1.95.tar.gz
MD5 sum: 1e076b4b1f8ba6a5003bf93f3c437a9e
- Text::CSV_XS
  (http://search.cpan.org/dist/Text-CSV_XS/)
  
  This is Recommended by Text-CSV but Required for biber-2.7.
  
  Note
  
  GNU tar dislikes Text-CSV_XS-1.26.tar.gz and reports it does not look like a tar file : decompress it with gunzip before extracting it.

Text::Roman-3.5

Text::Roman allows conversion between Roman and Arabic algorisms (number systems, e.g. MCMXLV and 1945). This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Text::Roman-3.5
https://www.cpan.org/authors/id/S/SY/SYP/Text-Roman-3.5.tar.gz
MD5 sum: 1f6b09c0cc1f4425b565ff787a39fd83

Try::Tiny

The Try::Tiny module provides minimal try/catch with proper preservation of $0. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Try::Tiny
(http://search.cpan.org/dist/Try-Tiny/)

Unicode::Collate-1.19

Unicode::Collate provides a Unicode collation algorithm. This module uses the 'unsafe' variant of the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Unicode::Collate-1.19
https://www.cpan.org/authors/id/S/SA/SADAHIRO/Unicode-Collate-1.19.tar.gz
MD5 sum: 6f9dcc7801fa2516993dcb59f8b61f6d

Unicode::LineBreak-2017.004

Unicode::LineBreak provides a UAX #14 Unicode Line Breaking Algorithm. This module and its dependencies use the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

Unicode::LineBreak-2017.004
https://www.cpan.org/authors/id/N/NE/NEZUMI/Unicode-LineBreak-2017.004.tar.gz
MD5 sum: de7672227922260ac92d20bbad29660b
- MIME::Charset
  (http://search.cpan.org/dist/MIME-Charset/)
  When scripting, pipe the perl Makefile.PL command through yes "" |, since some user input is sought
- Wget-1.19.1 (to download two files from unicode.org in the testsuite)

URI-1.72

This module implements the URI class. Objects of this class represent "Uniform Resource Identifier references" as specified in RFC 2396 (and updated by RFC 2732). A Uniform Resource Identifier is a compact string of characters that identifies an abstract or physical resource. A Uniform Resource Identifier can be further classified as either a Uniform Resource Locator (URL) or a Uniform Resource Name (URN). The distinction between URL and URN does not matter to the URI class interface. A "URI-reference" is a URI that may have additional information attached in the form of a fragment identifier. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

URI-1.72
https://www.cpan.org/authors/id/E/ET/ETHER/URI-1.72.tar.gz
MD5 sum: cd56d81ed429efaa97e7f3ff08851b48
- Test::Needs (for the testsuite)

XML::LibXML

The XML::LibXML is a perl binding for libxml2-2.9.4. This module uses the standard build and installation instructions.

Upstream blacklists the current version of libxml2-2.9.4 on the grounds of "schema regression" and the build will warn that the version of libxml2 is incompatible, but it appears to work.

This package is known to build and work properly using an LFS-8.1 platform.

XML::LibXML
(http://search.cpan.org/dist/XML-LibXML/)
- XML::SAX
- libxml2-2.9.4

XML::LibXML::Simple-0.97

The XML::LibXML::Simple module is a rewrite of XML::Simple to use the XML::LibXML parser for XML structures,instead of the plain Perl or SAX parsers. This module and all dependency modules use the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

XML::LibXML::Simple-0.97
https://www.cpan.org/authors/id/G/GR/GRANTM/XML-LibXML-Simple-0.97.tar.gz
MD5 sum: 1cd2e8e3421160c42277523d5b2f4dd2
- XML::LibXML
- File::Slurp::Tiny
  (http://search.cpan.org/dist/File-Slurp-Tiny/)

XML::LibXSLT-1.95

The XML::LibXSLT module provides an interface to libxslt. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

XML::LibXSLT-1.95
https://www.cpan.org/authors/id/S/SH/SHLOMIF/XML-LibXSLT-1.95.tar.gz
MD5 sum: adf26f5195e18087c89ef3e7f7d97c43
- libxslt-1.1.29

XML::SAX

XML::SAX provides a simple API for XML. This module uses the standard build and installation instructions.

Note: this module does not support parallel builds.

This package is known to build and work properly using an LFS-8.1 platform.

XML::SAX
(http://search.cpan.org/dist/XML-SAX/)
- libxml2-2.9.4
- XML::NamespaceSupport
  (http://search.cpan.org/~perigrin/XML-NamespaceSupport/)
- XML::SAX::Base
  (http://search.cpan.org/~grantm/XML-SAX-Base/)

XML::Simple-2.24

The XML::Simple module is a Perl extension that provides an easy API to read and write XML (especially config files). This module and all dependency modules use the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

XML::Simple-2.24
https://www.cpan.org/authors/id/G/GR/GRANTM/XML-Simple-2.24.tar.gz
MD5 sum: 1cd2e8e3421160c42277523d5b2f4dd2
- XML::SAX
- XML::SAX::Expat
  (http://search.cpan.org/~bjoern/XML-SAX-Expat/)
  (Note: this package does not support parallel build)
- XML::LibXML (recommended for faster parsing)
- Tie::IxHash
  (http://search.cpan.org/~chorny/Tie-IxHash/)
  (optionally used in the test suite)

XML::Writer-0.625

XML::Writer provides a Perl extension for writing XML documents. This module uses the standard build and installation instructions.

This package is known to build and work properly using an LFS-8.1 platform.

XML::Writer-0.625
https://www.cpan.org/authors/id/J/JO/JOSEPHW/XML-Writer-0.625.tar.gz
MD5 sum: b9c2420c243c6a36ce45a008740fcede

Standard Installation of Perl Modules

Install Perl modules by running the following commands:

For Data::Uniqid-0.12, first apply the required patch with:

patch -Np1 -i ../Data-Uniqid-0.12-disable_failing_test-1.patch

Then, or for all other modules using the standard installation, proceed with:

perl Makefile.PL &&
make &&
make test

Note

If the module is described as using the unsafe variant of the Standard Installation, and you are using perl-5.26.0 or later, (the use of the current directory in @INC was removed for security reasons) you should change the perl invocation to:

PERL_USE_UNSAFE_INC=1 &&

If, however, you are using the Auto Installation described below, that environment variable will be set whenever the cpan shell install is used.

Now, as the root user:

make install

Note

When reinstalling a Perl module, sometimes older versions of the module being reinstalled are in other directories specified in @INC. To delete all other versions of the module being reinstalled (not simply older ones) set the UNINST variable:

make install UNINST=1

Installation of Perl Modules which use Build.PL

Install Perl modules which use Build.PL by running the following commands:

perl Build.PL &&
./Build &&
./Build test

Now, as the root user:

./Build install

(Alternate) Auto Installation of Perl Modules.

There is an alternate way of installing the modules using the cpan shell install command. The command automatically downloads the source from the CPAN archive, extracts it, runs the compilation, testing and installation commands mentioned above, and removes the build source tree. You may still need to install dependent library packages before running the automated installation method.

The first time you run cpan, you'll be prompted to enter some information regarding download locations and methods. This information is retained in files located in ~/.cpan. Start the cpan shell by issuing 'cpan' as the root user. Any module may now be installed from the cpan> prompt with the command:

install <Module::Name>

For additional commands and help, issue 'help' from the cpan> prompt.

Alternatively, for scripted or non-interactive installations, use the following syntax as the root user to install one or more modules:

cpan -i <Module1::Name> <Module2::Name>

Review the cpan.1 man page for additional parameters you can pass to cpan on the command line.

Most of these modules only install into the perl directories, but a few will also install programs (mostly, perl scripts), or even a library, into /usr

Installed Programs: Archive::Zip: crc32 File::Find::Rule: findrule libwww-perl: lwp-download, lwp-dump, lwp-mirror, lwp-request Lingua::Translit: translit Log::Log4perl: l4p-tmpl Module::Build config_data Mojolicious hypnotoad, mojo, morbo Text::BibTeX: biblex, bibparse, dumpnames

Installed Libraries: Text::BibTeX: libbtparse.so

Short Descriptions

crc32	computes and prints to stdout the CRC-32 values of the given files.
findrule	is a command line wrapper to File:Find:Rule.
lwp-download	is a script to fetch a large file from the web.
lwp-dump	is used to see what headers and content is returned for a URL.
lwp-mirror	is a simple mirror utility.
lwp-request	is a simple command line user agent.
translit	transliterates text between writing systems using various standards.
l4p-templ	prints out the text of a template Log4perl configuration for starting a new Log4perl configuration file.
config_data	is used to query or change the configuration of perl modules.
hypnotoad	is an HTTP and WebSocket server.
mojo	is used to list and run Mojolicious commands.
morbo	is an HTTP and WebSocket development server.
biblex	performs lexical analysis on a BibTeX file.
bibparse	parses a series of BibTeX files with command line options to control the string post-processing behaviour.
dumpnames	parses a BibTeX file, splitting 'author' and 'editor' fields into lists of names, and then dumps everything to stdout.
`libbtparse.so`	is a library for parsing and processing BibTeX data files.

Last updated on 2017-08-30 16:29:05 -0700

PHP-7.1.8

Introduction to PHP

PHP is the PHP Hypertext Preprocessor. Primarily used in dynamic web sites, it allows for programming code to be directly embedded into the HTML markup. It is also useful as a general purpose scripting language.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.php.net/distributions/php-7.1.8.tar.xz
Download MD5 sum: 937dba5d7f12bca3c6864db52ea499e1
Download size: 12 MB
Estimated disk space required: 459 MB (add 2 MB for tests)
Estimated build time: 0.9 SBU (using parallelism=4, add 2.5 SBU for tests)

Additional Downloads

Pre-built documentation (optional): http://www.php.net/download-docs.php

PHP Dependencies

Optional System Utilities and Libraries

Aspell-0.60.6.1, enchant-1.6.0, libxslt-1.1.29, an MTA (that provides a sendmail command), PCRE-8.41, Pth-2.0.7, Dmalloc, Net-SNMP, OSSP mm, re2c, and XMLRPC-EPI

Optional Graphics Utilities and Libraries

FreeType-2.8, libexif-0.6.21, libjpeg-turbo-1.5.2, libpng-1.6.31, LibTIFF-4.0.8, X Window System, FDF Toolkit, GD, and t1lib

Optional Web Utilities

cURL-7.55.1, tidy-html5-5.4.0, Caudium, Hyperwave, mnoGoSearch, Roxen WebServer, and WDDX

Optional Data Management Utilities and Libraries

Berkeley DB-6.2.32 (Note that PHP does not officially support versions above 5.3), MariaDB-10.2.8 or MySQL, OpenLDAP-2.4.45, PostgreSQL-9.6.4, SQLite-3.20.0, unixODBC-2.3.4, Adabas, Birdstep, cdb, DBMaker, Empress, FrontBase, Mini SQL, Monetra, and QDBM

PHP also provides support for many commercial database tools such as Oracle, SAP and ODBC Router.

Optional Security/Encryption Utilities and Libraries

OpenSSL-1.1.0f, Cyrus SASL-2.1.26, MIT Kerberos V5-1.15.1, libmcrypt, and mhash

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/php

Installation of PHP

You can use PHP for server-side scripting, command-line scripting or client-side GUI applications. This book provides instructions for setting up PHP for server-side scripting as it is the most common form.

Note

PHP has many more configure options that will enable support for various things. You can use ./configure --help to see a full list of the available options. Also, use of the PHP web site is highly recommended, as their online docs are very good. An example of a configure command that utilizes many of the most common dependencies can be found at http://anduin.linuxfromscratch.org/BLFS/files/php_configure.txt.

If, for whatever reason, you don't have libxml2-2.9.4 installed, you need to add --disable-libxml to the configure command in the instructions below. Note that this will prevent the pear command from being built.

Install PHP by running the following commands:

./configure --prefix=/usr                \
            --sysconfdir=/etc            \
            --localstatedir=/var         \
            --datadir=/usr/share/php     \
            --mandir=/usr/share/man      \
            --enable-fpm                 \
            --with-fpm-user=apache       \
            --with-fpm-group=apache      \
            --with-fpm-systemd           \
            --with-config-file-path=/etc \
            --with-zlib                  \
            --enable-bcmath              \
            --with-bz2                   \
            --enable-calendar            \
            --enable-dba=shared          \
            --with-gdbm                  \
            --with-gmp                   \
            --enable-ftp                 \
            --with-gettext               \
            --enable-mbstring            \
            --with-readline              &&
make

To test the results, issue: make test. A few tests may fail, in which case you are asked whether you want to send the report to the PHP developers. If you want to automate the test, you may prefix the command with yes "n" | .

Now, as the root user:

make install                                     &&
install -v -m644 php.ini-production /etc/php.ini &&

install -v -m755 -d /usr/share/doc/php-7.1.8 &&
install -v -m644    CODING_STANDARDS EXTENSIONS INSTALL NEWS README* UPGRADING* php.gif \
                    /usr/share/doc/php-7.1.8 &&
ln -v -sfn          /usr/lib/php/doc/Archive_Tar/docs/Archive_Tar.txt \
                    /usr/share/doc/php-7.1.8 &&
ln -v -sfn          /usr/lib/php/doc/Structures_Graph/docs \
                    /usr/share/doc/php-7.1.8

The default configuration files for the fastCGI process manager are installed only if they do not already exist on the system. If this is the first installation, they should be renamed, as the root user:

if [ -f /etc/php-fpm.conf.default ]; then
  mv -v /etc/php-fpm.conf{.default,} &&
  mv -v /etc/php-fpm.d/www.conf{.default,}
fi

The pre-built HTML documentation is packaged in two forms: a tarball containing many individual files, useful for quick loading into your browser, and one large individual file, which is useful for using the search utility of your browser. If you downloaded either, or both, of the documentation files, issue the following commands as the root user to install them (note these instructions assume English docs, modify the tarball names below if necessary).

For the “Single HTML” file:

install -v -m644 ../php_manual_en.html.gz \
    /usr/share/doc/php-7.1.8 &&
gunzip -v /usr/share/doc/php-7.1.8/php_manual_en.html.gz

For the “Many HTML files” tarball:

tar -xvf ../php_manual_en.tar.gz \
    -C /usr/share/doc/php-7.1.8 --no-same-owner

Command Explanations

sed -i "s|lsystemd-daemon|lsystemd|g" configure: This command fixes the detection of the systemd library.

--datadir=/usr/share/php: This works around a bug in the build machinery, which installs some data to a wrong location.

--enable-fpm: This parameter allows building the fastCGI Process Manager.

--with-fpm-systemd: This parameter allows the FastCGI Process Manager to integrate with systemd.

--with-config-file-path=/etc: This parameter makes PHP look for the php.ini configuration file in /etc.

--with-zlib: This parameter adds support for Zlib compression.

--enable-bcmath: Enables bc style precision math functions.

--with-bz2: Adds support for Bzip2 compression functions.

--enable-calendar: This parameter provides support for calendar conversion.

--enable-dba=shared: This parameter enables support for database (dbm-style) abstraction layer functions.

--enable-ftp: This parameter enables FTP functions.

--with-gettext: Enables functions that use Gettext text translation.

--enable-mbstring: This parameter enables multibyte string support.

--with-readline: This parameter enables command line Readline support.

--disable-libxml: This option allows building PHP without libxml2 installed.

--with-apxs2: Instead of building the fastCGI process manager, it is possible to build an apache module. This has some performance penalty for heavy loaded servers, but may be easier to set up. This switch is incompatible with the --enable-fpm and --with-fpm-... switches.

--with-mysqli=shared: This option includes MySQLi support.

--with-mysql-sock=/run/mysqld/mysqld.sock: Location of the MySQL unix socket pointer.

--with-pdo-mysql=shared: This option includes PDO: MySQL support.

--with-tidy=shared: This option includes tidy library support.

Configuring PHP

Config Files

/etc/php.ini, /etc/pear.conf, /etc/php-fpm.conf, and /etc/php-fpm.d/www.conf

Configuration Information

The file used as the default /etc/php.ini configuration file is recommended by the PHP development team. This file modifies the default behavior of PHP. If no /etc/php.ini is used, all configuration settings fall to the defaults. You should review the comments in this file and ensure the changes are acceptable in your particular environment.

The fastCGI process manager uses the configuration file /etc/php-fpm.conf. The default file shipped with PHP includes all the /etc/php-fpm.d/*.conf in turn. There is a shipped /etc/php-fpm.d/www.conf file, that contains the parameters related to the interaction with the Apache Web server.

You may have noticed the following from the output of the make install command:

You may want to add: /usr/lib/php to your php.ini include_path

If desired, add the entry using the following command as the root user:

sed -i 's@php/includes"@&\ninclude_path = ".:/usr/lib/php"@' \
    /etc/php.ini

To enable fastCGI support in the Apache web server, two LoadModule directives must be added to the httpd.conf file. They are commented out, so just issue the following command as root user:

sed -i -e '/proxy_module/s/^#//'      \
       -e '/proxy_fcgi_module/s/^#//' \
       /etc/httpd/httpd.conf

Those modules accept various ProxyPass directives. One possibility is (as the root user):

echo \
'ProxyPassMatch ^/(.*\.php)$ fcgi://127.0.0.1:9000/srv/www/$1' >> \
/etc/httpd/httpd.conf

Additionally, it may be useful to add an entry for index.php to the DirectoryIndex directive of the httpd.conf file. Lastly, adding a line to setup the .phps extension to show highlighted PHP source may be desirable:

AddType application/x-httpd-php-source .phps

You'll need to restart the Apache web server after making any modifications to the httpd.conf file.

Systemd Unit

To start the php-fpm daemon at boot, install the systemd unit from the blfs-systemd-units-20160602 package by running the following command as the root user:

make install-php-fpm

Installed Programs: pear, peardev, pecl, phar (symlink), phar.phar, php, php-cgi, php-config, php-fpm, phpdbg, and phpize

Installed Libraries: dba.{so,a} and opcache.{so,a} in /usr/lib/php/extensions/no-debug-non-zts-20151012

Installed Directories: /etc/php-fpm.d, /usr/{include,lib,share}/php and /usr/share/doc/php-7.1.8

Short Descriptions

php	is a command line interface that enables you to parse and execute PHP code.
pear	is the PHP Extension and Application Repository (PEAR) package manager.
php-fpm	is the fastCGI process manager for PHP.
phpdbg	is the interactive PHP debugger.

Last updated on 2017-08-26 09:42:24 -0700

Python-2.7.13

Introduction to Python 2

The Python 2 package contains the Python development environment. It is useful for object-oriented programming, writing scripts, prototyping large programs or developing entire applications. This version is for backward compatibility with other dependent packages.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.python.org/ftp/python/2.7.13/Python-2.7.13.tar.xz
Download MD5 sum: 53b43534153bb2a0363f08bae8b9d990
Download size: 12 MB
Estimated disk space required: 253 MB (additional 18 MB for tests)
Estimated build time: 0.8 SBU (additional 4.3 SBU for tests)

Additional Downloads

Optional HTML Documentation

Download (HTTP): https://docs.python.org/2.7/archives/python-2.7.13-docs-html.tar.bz2

Python 2 Dependencies

Optional

BlueZ-5.46 and Valgrind-3.13.0

Optional (For Additional Modules)

OpenSSL-1.1.0f, SQLite-3.20.0 and Tk-8.6.7

Note

If you are building Thunderbird-52.3.0 or Firefox-55.0.3 you must install openssl before you build Python 2.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/Python

Installation of Python 2

Install Python 2 by running the following commands:

./configure --prefix=/usr       \
            --enable-shared     \
            --with-system-expat \
            --with-system-ffi   \
            --with-ensurepip=yes \
            --enable-unicode=ucs4 &&
make

To test the results, issue: make -k test. One test fails for unknown reasons.

Now, as the root user:

make install &&
chmod -v 755 /usr/lib/libpython2.7.so.1.0

Since Python 2 is in maintenance mode, and Python 3 is recommended by upstream for development, you probably do not need to install the documentation. However, if you still want to install documentation for both Python versions, be sure to define the PYTHONDOCS variable for the version you want to use, each time you need to consult the documentation. If you have downloaded the preformatted documentation from http://docs.python.org/download.html, install it as the root user:

install -v -dm755 /usr/share/doc/python-2.7.13 &&

tar --strip-components=1                     \
    --no-same-owner                          \
    --directory /usr/share/doc/python-2.7.13 \
    -xvf ../python-2.7.13-docs-html.tar.bz2 &&

find /usr/share/doc/python-2.7.13 -type d -exec chmod 0755 {} \; &&
find /usr/share/doc/python-2.7.13 -type f -exec chmod 0644 {} \;

Command Explanations

--with-system-expat: This switch enables linking against system version of Expat.

--with-system-ffi: This switch enables linking against system version of libffi. Remove if you have not installed libffi-3.2.1.

--with-ensurepip=yes : This switch enables building pip and setuptools packaging programs. setuptools is needed for building some Python modules.

--enable-unicode=ucs4: This switch enables 32bit Unicode support in Python.

--with-dbmliborder=bdb:gdbm:ndbm: Use this switch if you want to build Python DBM Module against Berkeley DB instead of GDBM.

chmod ...: Fix permissions for libraries to be consistent with other libraries.

Configuring Python 2

In order for python to find the installed documentation, you must add the following environment variable to individual user's or the system's profile:

export PYTHONDOCS=/usr/share/doc/python-2.7.13

Installed Programs: 2to3, pydoc, python (symlink), python-config (symlink), python2 (symlink), python2-config (symlink), python2.7, python2.7-config, smtpd.py, and idle

Installed Library: libpython2.7.so

Installed Directories: /usr/{include,lib}/python2.7 and /usr/share/doc/python-2.7.13

Short Descriptions

2to3	is a Python program that reads Python 2.x source code and applies a series of fixes to transform it into valid Python 3.x code.
idle	is a wrapper script that opens a Python aware GUI editor. For this script to run, you must have installed Tk before Python so that the Tkinter Python module is built.
pydoc	is the Python documentation tool.
python	is an interpreted, interactive, object-oriented programming language.
python2.7	is a version-specific name for the python program.
smtpd.py	is an SMTP proxy implemented in Python.

Last updated on 2017-08-18 12:42:43 -0700

Python-3.6.2

Introduction to Python 3

The Python 3 package contains the Python development environment. This is useful for object-oriented programming, writing scripts, prototyping large programs or developing entire applications.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.python.org/ftp/python/3.6.2/Python-3.6.2.tar.xz
Download MD5 sum: 2c68846471994897278364fc18730dd9
Download size: 16 MB
Estimated disk space required: 345 MB (with docs; add 30 MB for the tests)
Estimated build time: 1.1 SBU (add 3.4 SBU for tests)

Additional Downloads

Optional HTML Documentation

Download (HTTP): https://docs.python.org/3.6/archives/python-3.6.2-docs-html.tar.bz2

Python 3 Dependencies

Optional

BlueZ-5.46, GDB-8.0 (required for some tests), and Valgrind-3.13.0

Optional (For Additional Modules)

Berkeley DB-6.2.32, OpenSSL-1.1.0f, SQLite-3.20.0 and Tk-8.6.7

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/Python3

Installation of Python 3

Install Python 3 by running the following commands:

CXX="/usr/bin/g++"              \
./configure --prefix=/usr       \
            --enable-shared     \
            --with-system-expat \
            --with-system-ffi   \
            --with-ensurepip=yes &&
make

The test suite must be run separately, using an X terminal (see below).

Now, as the root user:

make install &&
chmod -v 755 /usr/lib/libpython3.6m.so &&
chmod -v 755 /usr/lib/libpython3.so

If you have downloaded the preformatted documentation from http://docs.python.org/download.html, install it as the root user:

install -v -dm755 /usr/share/doc/python-3.6.2/html &&
tar --strip-components=1 \
    --no-same-owner \
    --no-same-permissions \
    -C /usr/share/doc/python-3.6.2/html \
    -xvf ../python-3.6.2-docs-html.tar.bz2

The test suite must be run separately from the build, either before or after the package is built and installed. Do not run make install, after running the test suite. To build and install the package, you need to start with a fresh or clean source tree. For the test, you also need a clean source code, so either start by removing the source code directory and starting over, by uncompressing the source tarball or by running make clean. Then configure again, adding “--with-pydebug” to the configure switches above, run make, then make test. Remember that tests must be executed using an X terminal. One test fails. The test SBU highly depends on the speed of the internet connexion.

Command Explanations

CXX="/usr/bin/g++" ./configure ...: Avoid an annoying message during configuration.

--with-system-expat: This switch enables linking against the system version of Expat.

--with-system-ffi: This switch enables linking against system version of libffi. Remove if you have not installed libffi-3.2.1.

--with-ensurepip=yes : This switch enables building pip and setuptools packaging programs. setuptools is needed for building some Python modules.

--with-dbmliborder=bdb:gdbm:ndbm: Use this switch if you want to build Python DBM Module against Berkeley DB instead of GDBM.

chmod ...: Fix permissions for shared libraries to be consistent with other libraries.

Configuring Python 3

In order for python3 to find the installed documentation, create the following version independent symlink:

ln -svfn python-3.6.2 /usr/share/doc/python-3

and add the following environment variable to the individual user's or system's profile:

export PYTHONDOCS=/usr/share/doc/python-3/html

Installed Programs: 2to3 (symlink), 2to3-3.6, idle3 (symlink), and idle3.6 pydoc3 (symlink), pydoc3.6, python3 (symlink); python3.6 and python3.6m (hardlinked); python3-config (symlink), python3.6-config (symlink), python3.6m-config, pyvenv (symlink), pyvenv-3.6,

Installed Libraries: libpython3.6m.so and libpython3.so

Installed Directories: /usr/include/python3.6m, /usr/lib/python3.6, and /usr/share/doc/python-3.6.2

Short Descriptions

idle3	is a wrapper script that opens a Python aware GUI editor. For this script to run, you must have installed Tk before Python so that the Tkinter Python module is built.
pydoc3	is the Python documentation tool.
python3	is an interpreted, interactive, object-oriented programming language.
python3.6	is a version-specific name for the python program.
pyvenv	creates virtual Python environments in one or more target directories.

Last updated on 2017-08-18 12:42:43 -0700

Python Modules

Introduction to Python Modules

The Python module packages add useful objects to the Python language. Modules utilized by packages throughout BLFS are listed here, along with their dependencies. Installation of the modules shown on this page is meant to follow from top to bottom to handle optional dependencies in each module.

D-Bus Python-1.2.4
PyAtSpi2-2.24.0
PyCairo-1.15.1
PyCrypto-2.6.1
PyGObject-2.28.6
PyGObject-3.24.1
PyGTK-2.24.0
PyXDG-0.25
funcsigs-1.0.2
Beaker-1.9.0
lxml-3.8.0
MarkupSafe-1.0
Jinja2-2.9.6
Mako-1.0.4
Scour-0.36
six-1.10.0
PyYAML-3.12

D-Bus Python

Introduction to D-Bus Python Module

D-Bus Python provides Python bindings to the D-Bus.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://dbus.freedesktop.org/releases/dbus-python/dbus-python-1.2.4.tar.gz
Download MD5 sum: 7372a588c83a7232b4e08159bfd48fe5
Download size: 600 KB
Estimated disk space required: 9.3 MB (both versions with tests)
Estimated build time: 0.4 SBU (both versions with tests)

D-Bus Python Dependencies

Required

dbus-glib-0.108 and Python-2.7.13 and/or Python-3.6.2

Optional (Required to build the API and HTML Documentation)

Epydoc and Docutils

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/dbus-python

Installation of D-Bus Python

Note

Both Python 2 and Python 3 modules can be built and installed without any conflicts.

To build D-Bus Python as the Python 2 module, run the following commands:

mkdir python2 &&
pushd python2 &&
PYTHON=/usr/bin/python     \
../configure --prefix=/usr --docdir=/usr/share/doc/dbus-python-1.2.4 &&
make &&
popd

To test the results, issue: make -C python2 check.

To build D-Bus Python as the Python 3 module, run the following commands:

mkdir python3 &&
pushd python3 &&
PYTHON=/usr/bin/python3    \
../configure --prefix=/usr --docdir=/usr/share/doc/dbus-python-1.2.4 &&
make &&
popd

To test the results, issue: make -C python3 check.

To install the Python 2 module, run the following command as the root user:

make -C python2 install

To install the Python 3 module, run the following command as the root user:

make -C python3 install

Installed Programs: None

Installed Libraries: None

Installed Directories: /usr/share/doc/dbus-python-1.2.4 and /usr/lib/python2.7/site-packages/dbus and/or /usr/lib/python3.6/site-packages/dbus

PyAtSpi2-2.24.0

Introduction to PyAtSpi2

The PyAtSpi2 package contains Python bindings for the core components of the GNOME Accessibility.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/pyatspi/2.24/pyatspi-2.24.0.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/pyatspi/2.24/pyatspi-2.24.0.tar.xz
Download MD5 sum: db049a2306a93ef32e3d5a3412918e75
Download size: 292 KB
Estimated disk space required: 3.6 MB
Estimated build time: less than 0.1 SBU

PyAtSpi2 Dependencies

Required

PyGObject-3.24.1

Installation of PyAtSpi2

Note

Both Python 2 and Python 3 modules can be built and installed without any conflicts.

To build PyAtSpi2 as the Python 2 module, run the following commands:

mkdir python2 &&
pushd python2 &&
../configure --prefix=/usr --with-python=/usr/bin/python &&
make &&
popd

To build PyAtSpi2 as the Python 3 module, run the following commands:

mkdir python3 &&
pushd python3 &&
../configure --prefix=/usr --with-python=/usr/bin/python3 &&
make &&
popd

This package does not come with a testsuite.

To install the Python 2 module, run the following command as the root user:

make -C python2 install

To install the Python 3 module, run the following command as the root user:

make -C python3 install

Installed Programs: None

Installed Libraries: None

Installed Directories: /usr/lib/python2.7/site-packages/pyatspi and/or /usr/lib/python3.6/site-packages/pyatspi

PyCairo-1.15.1

Introduction to PyCairo Module

PyCairo provides Python bindings to Cairo.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/pygobject/pycairo/releases/download/v1.15.1/pycairo-1.15.1.tar.gz
Download MD5 sum: 29620ad9b0fa4a7052760e4fa4b71b4c
Download size: 172 KB
Estimated disk space required: 4.5 MB
Estimated build time: less than 0.1 SBU

PyCairo Dependencies

Required

Cairo-1.14.10, Python-2.7.13, and/or Python-3.6.2

Optional

Hypothesis (for tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/pycairo

Installation of PyCairo

Install PyCairo for Python2 by running the following commands:

python2 setup.py build

This package does not come with a test suite.

Now, as the root user:

python2 setup.py install --optimize=1

Install PyCairo for Python3 by running the following commands:

python3 setup.py build

This package does not come with a test suite.

Now, as the root user:

python3 setup.py install --optimize=1

Installed Programs: None

Installed Libraries: _cairo.so (python2) and _cairo.cpython-36m-x86_64-linux-gnu.so (python3)

Installed Directories: /usr/lib/python2.7/site-packages/cairo and /usr/lib/python3.6/site-packages/cairo

PyCrypto-2.6.1

Introduction to the PyCrypto Module

PyCrypto is a collection of both secure hash functions (such as SHA256 and RIPEMD160), and various encryption algorithms (AES, DES, RSA, ElGamal, etc.).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://files.pythonhosted.org/packages/source/p/pycrypto/pycrypto-2.6.1.tar.gz
Download MD5 sum: 55a61a054aa66812daf5161a0d5d7eda
Download size: 440 KB
Estimated disk space required: 14 MB
Estimated build time: 0.1 SBU

PyCrypto Dependencies

Required

Python-2.7.13 and/or Python-3.6.2

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/pycrypto

Installation of PyCrypto

Note

Both Python 2 and Python 3 modules can be built and installed without any conflicts.

To build the Python 2 module, run the following command:

python setup.py build

To install the Python 2 module, run the following command as the root user:

python setup.py install --optimize=1

To build the Python 3 module, run the following command:

python3 setup.py build

To install the Python 3 module, run the following command as the root user:

python3 setup.py install --optimize=1

Installed Programs: None

Installed Libraries: pycrypto-2.6.1-py2.7.egg-info and/or pycrypto-2.6.1-py3.6.egg-info

Installed Directories: /usr/lib/python2.7/site-packages/Crypto and/or /usr/lib/python3.6/site-packages/Crypto

PyGObject-2.28.6

Introduction to PyGObject Module

PyGObject-2.28.6 provides Python 2 bindings to the GObject class from GLib.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/pygobject/2.28/pygobject-2.28.6.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/pygobject/2.28/pygobject-2.28.6.tar.xz
Download MD5 sum: 9415cb7f2b3a847f2310ccea258b101e
Download size: 732 KB
Estimated disk space required: 24 MB
Estimated build time: 0.2 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/pygobject-2.28.6-fixes-1.patch

PyGObject Dependencies

Required

GLib-2.52.3 and PyCairo-1.15.1 (Python 2)

Optional

gobject-introspection-1.52.1 and libxslt-1.1.29 (to Build Documentation)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/pygobject2

Installation of PyGObject

Install PyGObject by running the following commands:

patch -Np1 -i ../pygobject-2.28.6-fixes-1.patch   &&
./configure --prefix=/usr --disable-introspection &&
make

This package does not have a working testsuite.

Now, as the root user:

make install

Command Explanations

--disable-introspection: Omit this switch if you have installed gobject-introspection-1.52.1. Note that it conflicts with PyGObject-3.24.1.

--disable-docs: This option disables the rebuilding of the html documentation if libxslt-1.1.29 is installed.

Installed Programs: pygobject-codegen-2.0

Installed Libraries: libpyglib-2.0-python.so, _gio.so, unix.so, _glib.so and _gobject.so.

Installed Directories: /usr/include/pygtk-2.0, /usr/lib/python2.7/site-packages/gtk-2.0/{gio,glib,gobject}, /usr/share/gtk-doc/html/pygobject and /usr/share/pygobject/2.0

PyGObject-3.24.1

Introduction to PyGObject3 Module

PyGObject3 provides Python bindings to the GObject class from GLib.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/pygobject/3.24/pygobject-3.24.1.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/pygobject/3.24/pygobject-3.24.1.tar.xz
Download MD5 sum: 69a843311d0f0385dff376e11a2d83d2
Download size: 744 KB
Estimated disk space required: 25 MB (both modules, with tests)
Estimated build time: 0.5 SBU (both modules, with tests)

PyGObject3 Dependencies

Required

gobject-introspection-1.52.1 and PyCairo-1.15.1 (for Python 2 and/or Python 3 bindings)

Optional (for the tests)

pep8 and pyflakes

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/pygobject3

Installation of PyGObject3

Note

Both Python 2 and Python 3 modules can be built and installed without any conflicts.

To build PyGObject3 as the Python 2 module, run the following commands:

mkdir python2 &&
pushd python2 &&
../configure --prefix=/usr --with-python=/usr/bin/python &&
make &&
popd

To test the results, issue: make -C python2 check. An already active graphical session with bus address is necessary to run the tests.

To build PyGObject3 as the Python 3 module, run the following commands:

mkdir python3 &&
pushd python3 &&
../configure --prefix=/usr --with-python=/usr/bin/python3 &&
make &&
popd

To test the results, issue: make -C python3 check. An already active graphical session with bus address is necessary to run the tests.

To install the Python 2 module, run the following command as the root user:

make -C python2 install

To install the Python 3 module, run the following command as the root user:

make -C python3 install

Installed Programs: None

Installed Library: /usr/lib/python2.7/site-packages/gi/_gi{,_cairo}.so and/or /usr/lib/python3.6/site-packages/gi/_gi{,_cairo}.cpython-35m-<arch>-linux-gnu.so

Installed Directories: /usr/include/pygobject-3.0, and /usr/lib/python2.7/site-packages/{gi,pygtkcompat} and/or /usr/lib/python3.6/site-packages/{gi,pygtkcompat}

PyGTK-2.24.0

Introduction to PyGTK Module

PyGTK lets you to easily create programs with a graphical user interface using the Python programming language.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/pygtk/2.24/pygtk-2.24.0.tar.bz2
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/pygtk/2.24/pygtk-2.24.0.tar.bz2
Download MD5 sum: a1051d5794fd7696d3c1af6422d17a49
Download size: 2.2 MB
Estimated disk space required: 83 MB
Estimated build time: 0.7 SBU

PyGTK Dependencies

Required

PyGObject-2.28.6

Required (atk module)

ATK-2.24.0

Required (pango module)

Pango-1.40.10

Required (pangocairo module)

PyCairo-1.15.1 (Python 2) and Pango-1.40.10

Required (gtk and gtk.unixprint modules)

PyCairo-1.15.1 (Python 2) and GTK+-2.24.31.

Required (gtk.glade module)

PyCairo-1.15.1 (Python 2) and libglade-2.6.4.

Optional

NumPy

Optional (to Build Documentation)

libxslt-1.1.29

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/pygtk

Installation of PyGTK

Install PyGTK by running the following commands:

./configure --prefix=/usr &&
make

The tests must be run from an active X display. If this is so, issue: make check.

Now, as the root user:

make install

Command Explanations

--enable-docs: This option enables rebuilding the html documentation if libxslt-1.1.29 is installed.

Installed Programs: pygtk-codegen-2.0 and pygtk-demo.

Installed Libraries: atk.so, _gtk.so, glade.so, gtkunixprint.so, pango.so and pangocairo.so.

Installed Directories: /usr/include/pygtk-2.0, /usr/lib/pygtk, /usr/lib/python2.7/site-packages/gtk-2.0, /usr/share/gtk-doc/html/pygtk and /usr/share/pygtk.

Short Descriptions

pygtk-codegen-2.0	is a wrapper script to run the PyGTK codegen module.
pygtk-demo	is a Python wrapper to run the PyGTK demo program.

PyXDG-0.25

Introduction to PyXDG Module

PyXDG is a Python library to access freedesktop.org standards.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://people.freedesktop.org/~takluyver/pyxdg-0.25.tar.gz
Download MD5 sum: bedcdb3a0ed85986d40044c87f23477c
Download size: 48 KB
Estimated disk space required: 800 KB
Estimated build time: less than 0.1 SBU

PyXDG Dependencies

Required

Python-2.7.13 and/or Python-3.6.2

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/pyxdg

Installation of PyXDG

Note

Both Python 2 and Python 3 modules can be built and installed without any conflicts.

To install the Python 2 module, run the following command as the root user:

python setup.py install --optimize=1

To install the Python 3 module, run the following command as the root user:

python3 setup.py install --optimize=1

Installed Directory: /usr/lib/python2.7/site-packages/xdg and/or /usr/lib/python3.6/site-packages/xdg

funcsigs-1.0.2

Introduction to the funcsigs Module

funcsigs is a is a backport of the PEP 362 function signature features from Python 3.3's inspect module for Python 2.x.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://files.pythonhosted.org/packages/source/f/funcsigs/funcsigs-1.0.2.tar.gz
Download MD5 sum: 7e583285b1fb8a76305d6d68f4ccc14e
Download size: 32 KB
Estimated disk space required: 440 KB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/funcsigs

Installation of funcsigs

To install the Python 2 module, run the following command as the root user:

python setup.py install --optimize=1

Note

This module is included with Python distributions after 3.3.

Installed Programs: None

Installed Libraries: None

Installed Directories: /usr/lib/python2.7/site-packages/funcsigs-1.0.2-py2.7.egg-info

Beaker-1.9.0

Introduction to Beaker Module

Beaker is a Python module that implements caching and sessions WSGI middleware for use with web applications and stand-alone Python scripts and applications.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://files.pythonhosted.org/packages/source/B/Beaker/Beaker-1.9.0.tar.gz
Download MD5 sum: 38b3fcdfa24faf97c6cf66991eb54e9c
Download size: 40 KB
Estimated disk space required: 900 KB
Estimated build time: less than 0.1 SBU

Beaker Dependencies

Optional

funcsigs-1.0.2 (required for Python-2.7)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/Beaker

Installation of Beaker

Note

Both Python 2 and Python 3 modules can be built and installed without any conflicts.

To install the Python 2 module, run the following command as the root user:

python setup.py install --optimize=1

To install the Python 3 module, run the following command as the root user:

python3 setup.py install --optimize=1

Installed Programs: None

Installed Libraries: None

Installed Directories: /usr/lib/python2.7/site-packages/beaker, /usr/lib/python2.7/site-packages/Beaker-1.9.0-py2.7.egg-info and/or /usr/lib/python3.6/site-packages/beaker, /usr/lib/python3.6/site-packages/Beaker-1.9.0-py3.6.egg-info

lxml-3.8.0

Introduction to lxml

lxml provides Python bindings for libxslt-1.1.29 and libxml2-2.9.4.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://files.pythonhosted.org/packages/source/l/lxml/lxml-3.8.0.tar.gz
Download MD5 sum: e54e2fae44d684d6b9c636fe189e93ff
Download size: 3.6 MB
Estimated disk space required: 104 MB
Estimated build time: 1.3 SBU

lxml Dependencies

Required

libxslt-1.1.29

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/lxml

Installation of lxml

Note

Both Python 2 and Python 3 modules can be built and installed without any conflicts.

To install the Python 2 module, run the following commands as the root user:

python setup.py build &&
python setup.py install --optimize=1

To install the Python 3 module, run the following commands as the root user:

python3 setup.py clean &&
python3 setup.py build &&
python3 setup.py install --optimize=1

Installed Programs: None

Installed Libraries: None

Installed Directories: /usr/lib/python2.7/site-packages/lxml-3.8.0-py2.7-linux-$ARCH.egg and/or /usr/lib/python3.6/site-packages/lxml-3.8.0-py3.6-linux-$ARCH.egg

MarkupSafe-1.0

Introduction to MarkupSafe Module

MarkupSafe is a Python module that implements a XML/HTML/XHTML Markup safe string.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://files.pythonhosted.org/packages/source/M/MarkupSafe/MarkupSafe-1.0.tar.gz
Download MD5 sum: 2fcedc9284d50e577b5192e8e3578355
Download size: 16 KB
Estimated disk space required: 872 KB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/MarkupSafe

Installation of MarkupSafe

Note

Both Python 2 and Python 3 modules can be built and installed without any conflicts.

To build the Python 2 module, run the following command:

python setup.py build

To install the Python 2 module, run the following command as the root user:

python setup.py install --optimize=1

To build the Python 3 module, run the following command:

python3 setup.py build

To install the Python 3 module, run the following command as the root user:

python3 setup.py install --optimize=1

Installed Programs: None

Installed Libraries: None

Installed Directories: /usr/lib/python2.7/site-packages/markupsafe, /usr/lib/python2.7/site-packages/MarkupSafe-1.0-py2.7.egg-info and/or /usr/lib/python3.6/site-packages/markupsafe, /usr/lib/python3.6/site-packages/MarkupSafe-1.0-py3.6.egg-info

Jinja2-2.9.6

Introduction to Jinja2 Module

Jinja2 is a Python module that implements a simple pythonic template language.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://files.pythonhosted.org/packages/source/J/Jinja2/Jinja2-2.9.6.tar.gz
Download MD5 sum: 6411537324b4dba0956aaa8109f3c77b
Download size: 428 KB
Estimated disk space required: 10 MB
Estimated build time: less than 0.1 SBU

Jinja2 Dependencies

Required

MarkupSafe-1.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/Jinja2

Installation of Jinja2

Note

Both Python 2 and Python 3 modules can be built and installed without any conflicts.

To install the Python 2 module, run the following command as the root user:

python setup.py install --optimize=1

To install the Python 3 module, run the following command as the root user:

python3 setup.py install --optimize=1

Installed Programs: None

Installed Libraries: None

Installed Directories: /usr/lib/python2.7/site-packages/Jinja2, /usr/lib/python2.7/site-packages/Jinja2-2.9.6-py2.7.egg-info and/or /usr/lib/python3.6/site-packages/Jinja2, /usr/lib/python3.6/site-packages/Jinja2-2.9.6-py3.6.egg-info

Mako-1.0.4

Introduction to Mako Module

Mako is a Python module that implements hyperfast and lightweight templating for the Python platform.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://files.pythonhosted.org/packages/source/M/Mako/Mako-1.0.4.tar.gz
Download MD5 sum: c5fc31a323dd4990683d2f2da02d4e20
Download size: 564 KB
Estimated disk space required: 5.6 MB
Estimated build time: less than 0.1 SBU

Mako Dependencies

Required

Beaker-1.9.0 and MarkupSafe-1.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/Mako

Installation of Mako

Note

Both Python 2 and Python 3 modules can be built and installed without any conflicts.

To install the Python 2 module, run the following command as the root user:

python setup.py install --optimize=1

To install the Python 3 module, run the following command as the root user:

sed -i "s:mako-render:&3:g" setup.py &&
python3 setup.py install --optimize=1

Command Explanations

sed -i "s:mako-render:&3:g" setup.py: This sed prevents setup.py from overwriting an already installed script by the Python 2 module. Remove it if you are building this module only for Python 3.

Installed Programs: mako-render and/or mako-render3

Installed Libraries: None

Installed Directories: /usr/lib/python2.7/site-packages/mako, /usr/lib/python2.7/site-packages/Mako-1.0.4-py2.7.egg-info and/or /usr/lib/python3.6/site-packages/mako, /usr/lib/python3.6/site-packages/Mako-1.0.4-py3.6.egg-info

PyYAML-3.12

Introduction to PyYAML Module

PyYAML is a Python module that implements the next generation YAML parser and emitter.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://pyyaml.org/download/pyyaml/PyYAML-3.12.tar.gz
Download MD5 sum: 4c129761b661d181ebf7ff4eb2d79950
Download size: 248 KB
Estimated disk space required: 10 MB
Estimated build time: 0.1 SBU

PyYAML Dependencies

Required

Python-2.7.13 and/or Python-3.6.2 and YAML-0.1.7

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/PyYAML

Installation of PyYAML

Note

Both Python 2 and Python 3 modules can be built and installed without any conflicts.

To build the Python 2 module, run the following command:

python setup.py build

To install the Python 2 module, run the following command as the root user:

python setup.py install --optimize=1

To build the Python 3 module, run the following command:

python3 setup.py build

To install the Python 3 module, run the following command as the root user:

python3 setup.py install --optimize=1

Installed Programs: None

Installed Libraries: _yaml.so

Installed Directories: /usr/lib/python2.7/site-packages/yaml and/or /usr/lib/python3.6/site-packages/yaml,

Scour-0.36

Introduction to Scour

Scour is an SVG (Scalable Vector Graphics) optimizer/cleaner that reduces their size by optimizing structure and removing unnecessary data.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/scour-project/scour/archive/v0.36/scour-0.36.tar.gz
Download MD5 sum: f7d03395a9ce51f822e5741034783e04
Download size: 90 KB
Estimated disk space required: 1.6 MB
Estimated build time: less than 0.1 SBU

Scour Dependencies

Optional (for the main test)

Six

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/scour

Installation of scour

Note

Although this package installs modules for Python 2 or Python 3 they are usually invoked by scour which is a script using the version of Python for which it was compiled.

For the moment, use of Python 2 will normally be adequate.

To build the Python 2 module, issue:

python setup.py build

To partially test the results, issue: python testcss.py. If you have installed Six you can run the main tests by issuing: python testscour.py.

To install the Python 2 module run the following command as the root user:

python setup.py install --optimize=1

Note

If you wish to install the Python 3 modules, change 'python' to 'python3' in each of the above steps.

Installed Programs: scour

Installed Libraries: None

Installed Directories: None

Short Descriptions

scour

is a program to optimize and clean SVG files.

six-1.10.0

Introduction to Six Module

Six is a Python 2 and 3 compatibility library.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://pypi.io/packages/source/s/six/six-1.10.0.tar.gz
Download MD5 sum: 34eed507548117b2ab523ab14b2f8b55
Download size: 32 KB
Estimated disk space required: 356 KB
Estimated build time: less than 0.1 SBU

Six Dependencies

Required Dependencies

Python-2.7.13 and/or Python-3.6.2

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/six

Installation of six

Install six for Python2 by running the following commands:

python2 setup.py build

This package does not come with a test suite.

Now, as the root user:

python2 setup.py install --optimize=1

Install six for Python3 by running the following commands:

python3 setup.py build

This package does not come with a test suite.

Now, as the root user:

python3 setup.py install --optimize=1

Installed Programs: None

Installed Module: six.py

Installed Directories: /usr/lib/python2.7/site-packages/six-1.10.0-py2.7.egg and/or /usr/lib/python3.6/site-packages/six-1.10.0-py3.6.egg

Last updated on 2017-08-21 13:22:19 -0700

Ruby-2.4.1

Introduction to Ruby

The Ruby package contains the Ruby development environment. This is useful for object-oriented scripting.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://cache.ruby-lang.org/pub/ruby/2.4/ruby-2.4.1.tar.xz
Download MD5 sum: 894467211c4ae1dbf8a41bb0d58bbc89
Download size: 9.5 MB
Estimated disk space required: 338 MB, with checks (add 247 MB for C API docs)
Estimated build time: 2.4 SBU, with checks (add 0.5 SBU for C API docs)

Ruby Dependencies

Optional

Berkeley DB-6.2.32, Doxygen-1.8.13, Graphviz-2.40.1, libffi-3.2.1, OpenSSL-1.1.0f, Tk-8.6.7, Valgrind-3.13.0, and YAML-0.1.7

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/ruby

Installation of Ruby

Install Ruby by running the following command:

./configure --prefix=/usr   \
            --enable-shared \
            --docdir=/usr/share/doc/ruby-2.4.1 &&
make

Optionally, build the CAPI documents by running the following commands:

make capi

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--enable-shared: This switch enables building of the libruby shared library.

--disable-install-doc: This switch disables building and installing rdoc indexes and C API documents.

--disable-install-rdoc: This switch disables building and installing rdoc indexes.

--disable-install-capi: This switch disables building and installing C API documents.

Installed Programs: erb, gem, irb, rake, rdoc, ri, and ruby

Installed Libraries: libruby.so and libruby-static.a

Installed Directories: /usr/include/ruby-2.4.0 /usr/lib/ruby, /usr/share/doc/ruby-2.4.1 and /usr/share/ri

Short Descriptions

erb	is Tiny eRuby. It interprets a Ruby code embedded text file.
gem	command for RubyGems - a sophisticated package manager for Ruby.
irb	is the interactive interface for Ruby.
rake	a make-like build utility for Ruby.
rdoc	generates Ruby documentation.
ri	displays documentation from a database on Ruby classes, modules, and methods.
ruby	is an interpreted scripting language for quick and easy object-oriented programming.
`libruby.so`	contains the API functions required by Ruby.

Last updated on 2017-08-20 20:24:54 -0700

Rustc-1.19.0

Introduction to Rust

The Rust programming language is designed to be a safe, concurrent, practical language.

As with many other programming languages, rustc (the rust compiler) needs a binary from which to bootstrap. It will download a stage0 binary, and several cargo files (these are actually .tar.gz source archives) at the start of the build, so you cannot compile it without an internet connection.

The current rustbuild build-system will use all available processors, although it does not scale well and often falls back to just using one core while waiting for a library to compile.

At the moment Rust does not provide any guarantees of a stable ABI.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://static.rust-lang.org/dist/rustc-1.19.0-src.tar.gz
Download (FTP):
Download MD5 sum: 75e779670ac79edf023497a9c37eb35d
Download size: 48 MB
Estimated disk space required: 4.2 GB (362 MB installed), (add 0.6GB for tests) plus 273MB for ~/.cargo files
Estimated build time: 33 SBU (add 14 SBU for tests, both with 4 processors)

Rust Dependencies

Required

cURL-7.55.1, CMake-3.9.1, Python-2.7.13

Optional

GDB-8.0 (used by debuginfo-gdb in the testsuite), Ninja-1.7.2

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/rust

Installation of Rust

Note

This package is updated on a six-weekly release cycle. Because it is such a large and slow package to build, and is at the moment only used by one package in this book, the BLFS editors take the view that it should only be updated when that is necessary.

First create a suitable config.toml file which will configure the build :

cat <<EOF > config.toml
# see src/bootstrap/config.toml.example for more possible options
[llvm]
targets = "X86"

[build]
# install cargo as well as rust
extended = true

[install]
prefix = "/usr"
docdir = "share/doc/rustc-1.19.0"
channel = "stable"
EOF

Now install Rust by running the following commands:

./x.py build

To run the tests issue ./x.py test --verbose --no-fail-fast >../rustc-testlog: as with the build, that will use all available CPUs. This runs maniy suites of tests (in an apparently random order), three may fail: compile-fail/issue-37131.rs and run-make/target-without-atomics both try to compile for the thumbv6m-none-eabi target, but the BLFS build does not cater for that, and all 105 tests in debuginfo-gdb will fail if gdb has not been installed.

If you wish to look at the numbers for the results, you can find the total number of tests which were considered by running:

grep 'running .* tests' ../rustc-testlog | awk '{ sum += $2 } END { print sum }'

That should report 14029 tests. Similarly, the total tests which failed can be found by running:

grep '^test result:' ../rustc-testlog | awk  '{ sum += $6 } END { print sum }'

And similarly for the tests which passed use $4, for those which were ignored (i.e. skipped) use $8 (and $10 for 'measured', $12 for 'filtered out' but both are probably zero). The breakdown does not match the overall total.

Now, as the root user:

./x.py install

Command Explanations

targets = "X86": this avoids building all the available linux cross-compilers (Aarch64, MIPS, PowerPC, SystemZ, etc).

extended = true: this installs Cargo alongside Rust.

channel = "stable": this ensures only stable features can be used, the default in config.toml is to use development features, which is not appropriate for a released version.

--verbose: this switch can sometimes provide more information about a test which fails.

--no-fail-fast: this switch ensures that the testsuite will not stop at the first error.

Installed Programs: cargo, rust-gdb, rust-lldb, rustc, rustdoc.

Installed Libraries: Many lib*<16-byte-hash>.so libraries.

Installed Directories: ~/.cargo, /usr/lib/rustlib, /usr/share/doc/rustc-1.19.0, and /usr/share/zsh/site-functions/

Short Descriptions

cargo	is the Package Manager for Rust.
rust-gdb	is a Python wrapper script for gdb.
rust-lldb	is a Python wrapper script for LLDB (the LLVM debugger).
rustc	is the rust compiler.
rustdoc	generates documentation from rust source code.
`libstd-<16-byte-hash>.so`	is the Rust Standard Library, the foundation of portable Rust software.

Last updated on 2017-08-29 11:35:03 -0700

SCons-2.5.1

Introduction to SCons

SCons is a tool for building software (and other files) implemented in Python.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/scons/scons-2.5.1.tar.gz
Download MD5 sum: aaaf09e1351a598f98d17b0cf1103e7a
Download size: 608 KB
Estimated disk space required: 5.3 MB
Estimated build time: less than 0.1 SBU

SCons Dependencies

Required

Optional

docbook-xsl-1.79.1, libxml2-2.9.4, and libxslt-1.1.29

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/scons

Installation of SCons

Install SCons by running the following commands as the root user:

python setup.py install --prefix=/usr  \
                        --standard-lib \
                        --optimize=1   \
                        --install-data=/usr/share

Installed Programs: scons, scons-2.5.1, sconsign, sconsign-2.5.1, scons-time, and scons-time-2.5.1

Installed Libraries: None

Installed Directory: /usr/lib/python2.7/site-packages/SCons

Short Descriptions

scons	is a software construction tool.
sconsign	prints SCons `.sconsign` file information.
scons-time	generates and displays SCons timing information.

Last updated on 2017-08-18 12:42:43 -0700

slang-2.3.1

Introduction to slang

S-Lang (slang) is an interpreted language that may be embedded into an application to make the application extensible. It provides facilities required by interactive applications such as display/screen management, keyboard input and keymaps.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.jedsoft.org/releases/slang/slang-2.3.1.tar.bz2
Download MD5 sum: bd46d1dc17a50c72004ad842829d7b1f
Download size: 1.5 MB
Estimated disk space required: 41 MB (with tests)
Estimated build time: 0.6 SBU (with tests)

Slang Dependencies

Optional

libpng-1.6.31, PCRE-8.41, and Oniguruma

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/slang

Installation of Slang

Note

This package does not support parallel build.

Install slang by running the following commands:

./configure --prefix=/usr \
            --sysconfdir=/etc \
            --with-readline=gnu &&
make -j1

To test the results, issue: make check. Note that this will also create a static version of the library which will then be installed in the next step.

Now, as the root user:

make install_doc_dir=/usr/share/doc/slang-2.3.1   \
     SLSH_DOC_DIR=/usr/share/doc/slang-2.3.1/slsh \
     install-all &&

chmod -v 755 /usr/lib/libslang.so.2.3.1 \
             /usr/lib/slang/v2/modules/*.so

Command Explanations

--with-readline=gnu: This parameter sets GNU Readline to be used by the parser interface instead of the slang internal version.

make install_doc_dir=/usr/share/doc/slang-2.3.1 SLSH_DOC_DIR=/usr/share/doc/slang-2.3.1/slsh install-all: This command installs the static library as well as the dynamic shared version and related modules. It also changes the documentation installation directories to a versioned directory.

Configuring slang

Config Files

~/.slshrc and /etc/slsh.rc

Installed Program: slsh

Installed Libraries: libslang.{so,a} and numerous support modules

Installed Directories: /usr/lib/slang, /usr/share/doc/slang-2.3.1 and /usr/share/slsh

Short Descriptions

slsh

is a simple program for interpreting slang scripts. It supports dynamic loading of slang modules and includes a Readline interface for interactive use.

Last updated on 2017-08-23 17:35:52 -0700

Subversion-1.9.7

Introduction to Subversion

Subversion is a version control system that is designed to be a compelling replacement for CVS in the open source community. It extends and enhances CVS' feature set, while maintaining a similar interface for those already familiar with CVS. These instructions install the client and server software used to manipulate a Subversion repository. Creation of a repository is covered at Running a Subversion Server.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://archive.apache.org/dist/subversion/subversion-1.9.7.tar.bz2
Download MD5 sum: 05b0c677681073920f938c1f322e0be2
Download size: 7.6 MB
Estimated disk space required: 198 MB (add 173 MB for bindings, 24 MB for docs, 1 GB for tests)
Estimated build time: 1.2 SBU (add 1.4 SBU for bindings, 6.0 SBU for tests)

Subversion Dependencies

Required

Apr-Util-1.6.0 and SQLite-3.20.0

Optional

Apache-2.4.27, Cyrus SASL-2.1.26, dbus-1.10.22, Python-2.7.13 (with sqlite support for the tests), Ruby-2.4.1, and SWIG-3.0.12 (for building Perl, Python and Ruby bindings)

Optional (for the Java Bindings)

One of OpenJDK-1.8.0.141, Dante or Jikes, and JUnit-4.11 (to test the Java bindings)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/subversion

Installation of Subversion

Note

This package may fail during the make phase when using multiple processors. If this occurs try continuing with make -j1 or redo the entire build process with fresh sources using -j1.

Install Subversion by running the following commands:

./configure --prefix=/usr    \
            --disable-static \
            --with-apache-libexecdir &&
make

If you have Doxygen-1.8.13 installed and you wish to build the API documentation, issue: doxygen doc/doxygen.conf.

If you passed the --enable-javahl parameter to configure and wish to build the Java bindings, issue the following command:

make javahl

If you want to compile Perl, Python2, or Ruby bindings, issue any of the following command:

make swig-pl # for Perl
make swig-py \
     swig_pydir=/usr/lib/python2.7/site-packages/libsvn \
     swig_pydir_extra=/usr/lib/python2.7/site-packages/svn # for Python
make swig-rb # for Ruby

To test the results, issue: make check.

To test the results of the Java bindings build, issue make check-javahl. The JUnit testing framework must be installed, and the location of the JUnit jar has to be specified by passing the --with-junit=<path to junit jar> parameter to configure.

To test the results of any of the SWIG bindings, you can use any of the following commands: make check-swig-pl, make check-swig-py, or make check-swig-rb.

Now, as the root user:

make install &&

install -v -m755 -d /usr/share/doc/subversion-1.9.7 &&
cp      -v -R       doc/* \
                    /usr/share/doc/subversion-1.9.7

If you built the Java bindings, issue the following command as the root user to install them:

 make install-javahl

If you built the Perl, Python2, or Ruby bindings, issue any of the following commands as the root user to install them:

make install-swig-pl
make install-swig-py \
      swig_pydir=/usr/lib/python2.7/site-packages/libsvn \
      swig_pydir_extra=/usr/lib/python2.7/site-packages/svn
make install-swig-rb

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--with-apache-libexecdir: If Apache-2.4.27 is installed, the shared Apache modules are built. This switch allows to have those modules installed to Apache's configured module dir instead of /usr/libexec. It has no effect if Apache is not installed.

--enable-javahl: enables compilation of Java high level bindings. Running make javahl is necessary to do the compilation.

--with-junit=<location of the junit jar file>: gives the location of the junit jar, otherwise the javahl tests cannot be run.

--disable-gmock: Do not use the Googlemock testing framework.

Configuring Subversion

Config Files

~/.subversion/config and /etc/subversion/config

Configuration Information

/etc/subversion/config is the Subversion system-wide configuration file. This file is used to specify defaults for different svn commands.

~/.subversion/config is the user's personal configuration file. It is used to override the system-wide defaults set in /etc/subversion/config.

Installed Programs: svn, svnadmin, svnbench, svndumpfilter, svnfsfs, svnlook, svnmucc, svnrdump, svnserve, svnsync, and svnversion

Installed Libraries: libsvn_*-1.so and optionally, a Java library, the mod_dav_svn.so and and mod_authz_svn.so Apache HTTP DSO modules and various Perl, Python and Ruby modules.

Installed Directories: /usr/include/subversion-1, /usr/lib/perl5/site_perl/<5.x.y>/<arch-linux>/{,auto/}SVN, /usr/lib/python2.7/site-packages/{libsvn,svn}, /usr/lib/ruby/site_ruby/<x.y.z>/{,<arch-linux>-linux/}svn, /usr/lib/svn-javahl, and /usr/share/doc/subversion-1.9.7

Short Descriptions

svn	is a command-line client program used to access Subversion repositories.
svnadmin	is a tool for creating, tweaking or repairing a Subversion repository.
svnbench	is a benchmarking tool.
svndumpfilter	is a program for filtering Subversion repository dumpfile format streams.
svnfsfs	is the FSFS (FileSystem atop of the FileSystem - Subversion filesystem implementation) repository manipulation tool.
svnlook	is a tool for inspecting a Subversion repository.
svnmucc	is a Multiple URL Command Client for Subversion.
svnrdump	is a tool for dumping or loading a remote Subversion repository.
svnserve	is a custom standalone server program, able to run as a daemon process or invoked by SSH.
svnsync	is a Subversion repository synchronisation tool.
svnversion	is used to report the version number and state of a working Subversion repository copy.
`libsvn_*-1.so`	are the support libraries used by the Subversion programs.
`mod_authz_svn.so`	is a plug-in module for the Apache HTTP server, used to authenticate users to a Subversion repository over the Internet or an intranet.
`mod_dav_svn.so`	is a plug-in module for the Apache HTTP server, used to make a Subversion repository available to others over the Internet or an intranet.

Last updated on 2017-08-18 12:42:43 -0700

Running a Subversion Server

This section will describe how to set up, administer and secure a Subversion server.

Subversion Server Dependencies

Required

Subversion-1.9.7 and OpenSSH-7.5p1

Setting up a Subversion Server.

The following instructions will install a Subversion server, which will be set up to use OpenSSH as the secure remote access method, with svnserve available for anonymous access.

Configuration of the Subversion server consists of the following steps:

1. Setup Users, Groups, and Permissions

You'll need to be user root for the initial portion of configuration. Create the svn user and group with the following commands:

groupadd -g 56 svn &&
useradd -c "SVN Owner" -d /home/svn -m -g svn -s /bin/false -u 56 svn

If you plan to have multiple repositories, you should have a group dedicated to each repository for ease of administration. Create the svntest group for the test repository and add the svn user to that group with the following commands:

groupadd -g 57 svntest &&
usermod -G svntest -a svn

Additionally you should set umask 002 while working with a repository so that all new files will be writable by owner and group. This is made mandatory by creating a wrapper script for svn and svnserve:

mv /usr/bin/svn /usr/bin/svn.orig &&
mv /usr/bin/svnserve /usr/bin/svnserve.orig &&
cat >> /usr/bin/svn << "EOF"
#!/bin/sh
umask 002
/usr/bin/svn.orig "$@"
EOF
cat >> /usr/bin/svnserve << "EOF"
#!/bin/sh
umask 002
/usr/bin/svnserve.orig "$@"
EOF
chmod 0755 /usr/bin/svn{,serve}

Note

If you use Apache for working with the repository over HTTP, even for anonymous access, you should wrap /usr/sbin/httpd in a similar script.

2. Create a Subversion repository.

There are several ways to set up a subversion repository. It is recommended to have a look at the SVN Book corresponding chapter. A basic repository can be set up with the instructions below.

Create a new Subversion repository with the following commands (as the root user):

install -v -m 0755 -d /srv/svn &&
install -v -m 0755 -o svn -g svn -d /srv/svn/repositories &&
svnadmin create /srv/svn/repositories/svntest

Now that the repository is created, it should be populated with something useful. You'll need to have a predefined directory layout set up exactly as you want your repository to look. For example, here is a sample BLFS layout setup with a root of svntest/. You'll need to setup a directory tree similar to the following:

svntest/            # The name of the repository
   trunk/           # Contains the existing source tree
      BOOK/
      bootscripts/
      edguide/
      patches/
      scripts/
   branches/        # Needed for additional branches
   tags/            # Needed for tagging release points

Once you've created your directory layout as shown above, you are ready to do the initial import:

svn import -m "Initial import." \
    </path/to/source/tree>      \
    file:///srv/svn/repositories/svntest

Now change owner and group information on the repository, and add an unprivileged user to the svn and svntest groups:

chown -R svn:svntest /srv/svn/repositories/svntest    &&
chmod -R g+w         /srv/svn/repositories/svntest    &&
chmod g+s            /srv/svn/repositories/svntest/db &&
usermod -G svn,svntest -a <username>

svntest is the group assigned to the svntest repository. As mentioned earlier, this eases administration of multiple repositories when using OpenSSH for authentication. Going forward, you'll need to add your unprivileged user, and any additional users that you wish to have write access to the repository, to the svn and svntest groups.

In addition, you'll notice that the new repository's db directory is set-groupID. If the reasoning is not immediately obvious, when using any external authentication method (such as ssh), the sticky bit is set so that all new files will be owned by the user, but group of svntest. Anyone in the svntest group can create files, but still give the entire group write access to those files. This avoids locking out other users from the repository.

Now, return to an unprivileged user account, and take a look at the new repository using svnlook:

svnlook tree /srv/svn/repositories/svntest/

Note

You may need to log out and back in again to refresh your group memberships. 'su <username>' should work as well.

3. Configure the Server

As mentioned previously, these instructions will configure the server to use only ssh for write access to the repository and to provide anonymous access using svnserve. There are several other ways to provide access to the repository. These additional configurations are best explained at http://svnbook.red-bean.com/.

Access configuration needs to be done for each repository. Create the svnserve.conf file for the svntest repository using the following commands:

cp /srv/svn/repositories/svntest/conf/svnserve.conf \
   /srv/svn/repositories/svntest/conf/svnserve.conf.default &&

cat > /srv/svn/repositories/svntest/conf/svnserve.conf << "EOF"
[general]
anon-access = read
auth-access = write
EOF

There is not a lot to the configuration file at all. You'll notice that only the general section is required. Take a look at the svnserve.conf.default file for information on using svnserve's built-in authentication method.

4. Starting the Server

To start the server at boot time, install the svnserve.service unit from the blfs-systemd-units-20160602 package.

make install-svnserve

Additionally, the instructions above require that svn server uses umask 002 so that all new files will be writable by owner and group. This can be achieved by creating a systemd unit override file by running the following command:

mkdir -p /etc/systemd/system/svnserve.service.d 
echo "UMask=0002" > /etc/systemd/system/svnserve.service.d/99-user.conf

Options which are passed to svnserve daemon can be changed in /etc/default/svnserve.

Last updated on 2016-06-08 20:56:23 -0700

SWIG-3.0.12

Introduction to SWIG

SWIG (Simplified Wrapper and Interface Generator) is a compiler that integrates C and C++ with languages including Perl, Python, Tcl, Ruby, PHP, Java, C#, D, Go, Lua, Octave, R, Scheme, Ocaml, Modula-3, Common Lisp, and Pike. SWIG can also export its parse tree into Lisp s-expressions and XML.

SWIG reads annotated C/C++ header files and creates wrapper code (glue code) in order to make the corresponding C/C++ libraries available to the listed languages, or to extend C/C++ programs with a scripting language.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/swig/swig-3.0.12.tar.gz
Download MD5 sum: 82133dfa7bba75ff9ad98a7046be687c
Download size: 7.8 MB
Estimated disk space required: 91 MB (1.7 GB with tests)
Estimated build time: 0.3 SBU (26 SBU for tests)

SWIG Dependencies

Required

PCRE-8.41

Optional

Boost-1.64.0 for tests, and any of the languages mentioned in the introduction, as run-time dependencies

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/swig

Installation of SWIG

If you plan to run the tests, some fixes are needed for using Perl-5.26:

sed -i 's/\$(PERL5_SCRIPT/-I. &/' Examples/Makefile.in &&
sed -i 's/\$command 2/-I. &/' Examples/test-suite/perl5/run-perl-test.pl

Install SWIG by running the following commands:

./configure --prefix=/usr                      \
            --without-clisp                    \
            --without-maximum-compile-warnings &&
make

To test the results, issue: make -k check TCL_INCLUDE= GOGCC=true. The (un)setting of the two variables GOGCC and TCL_INCLUDE is necessary, since they are not correctly set by configure. The tests are only executed for the languages installed on your machine, so the disk space and SBU values given for the tests may vary, and should be considered as mere orders of magnitude. If you have both Python-2.7.13 and Python-3.6.2 installed, the Python-3 tests are not run. You can run tests for Python-3 by issuing PY3=1 make check-python-examples followed by PY3=1 make check-python-test-suite. According to SWIG's documentation, the failure of some tests should not be considered harmful.

Now, as the root user:

make install &&
install -v -m755 -d /usr/share/doc/swig-3.0.12 &&
cp -v -R Doc/* /usr/share/doc/swig-3.0.12

Command Explanations

--without-maximum-compile-warnings: disables compiler ansi conformance enforcement, which triggers errors in the Lua headers (starting with Lua 5.3).

--without-<language>: allows disabling the building of tests and examples for <language>, but all the languages capabilities of SWIG are always built. We use it for Clisp, because the SWIG implementation is very incomplete and a lot of tests fail.

Installed Programs: swig and ccache-swig

Installed Library: None

Installed Directories: /usr/share/doc/swig-3.0.12 and /usr/share/swig

Short Descriptions

swig	takes an interface file containing C/C++ declarations and SWIG special instructions, and generates the corresponding wrapper code needed to build extension modules.
ccache-swig	is a compiler cache, which speeds up re-compilation of C/C++/SWIG code.

Last updated on 2017-08-26 09:42:24 -0700

Tcl-8.6.7

Introduction to Tcl

The Tcl package contains the Tool Command Language, a robust general-purpose scripting language.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/tcl/tcl8.6.7-src.tar.gz
Download MD5 sum: 5673aaf45b5de5d8dd80bb3daaeb8838
Download size: 9.2 MB
Estimated disk space required: 65 MB (including html documentation)
Estimated build time: 0.9 SBU (additional 2.9 SBU for the tests)

Additional Downloads

Optional Documentation

Download (HTTP): https://downloads.sourceforge.net/tcl/tcl8.6.7-html.tar.gz
Download MD5 sum: 0da678eaf3041346030898c23c14e97e
Download size: 1.2 MB

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/tcl

Installation of Tcl

This package is also installed in LFS during the bootstrap phase. As it is not installed during Chapter 6 of LFS, installation instructions are included here in BLFS.

If you downloaded the optional documentation, unpack the tarball by issuing the following command:

tar -xf ../tcl8.6.7-html.tar.gz --strip-components=1

Install Tcl by running the following commands:

export SRCDIR=`pwd` &&

cd unix &&

./configure --prefix=/usr           \
            --mandir=/usr/share/man \
            $([ $(uname -m) = x86_64 ] && echo --enable-64bit) &&
make &&

sed -e "s#$SRCDIR/unix#/usr/lib#" \
    -e "s#$SRCDIR#/usr/include#"  \
    -i tclConfig.sh               &&

sed -e "s#$SRCDIR/unix/pkgs/tdbc1.0.5#/usr/lib/tdbc1.0.5#" \
    -e "s#$SRCDIR/pkgs/tdbc1.0.5/generic#/usr/include#"    \
    -e "s#$SRCDIR/pkgs/tdbc1.0.5/library#/usr/lib/tcl8.6#" \
    -e "s#$SRCDIR/pkgs/tdbc1.0.5#/usr/include#"            \
    -i pkgs/tdbc1.0.5/tdbcConfig.sh                        &&

sed -e "s#$SRCDIR/unix/pkgs/itcl4.1.0#/usr/lib/itcl4.1.0#" \
    -e "s#$SRCDIR/pkgs/itcl4.1.0/generic#/usr/include#"    \
    -e "s#$SRCDIR/pkgs/itcl4.1.0#/usr/include#"            \
    -i pkgs/itcl4.1.0/itclConfig.sh                        &&

unset SRCDIR

To test the results, issue: make test. Tests known to fail: cmdAH.test and tdbcodbc.test.

Now, as the root user:

make install &&
make install-private-headers &&
ln -v -sf tclsh8.6 /usr/bin/tclsh &&
chmod -v 755 /usr/lib/libtcl8.6.so

If you downloaded the optional documentation, install it by issuing the following commands as the root user:

mkdir -v -p /usr/share/doc/tcl-8.6.7 &&
cp -v -r  ../html/* /usr/share/doc/tcl-8.6.7

Command Explanations

$([ $(uname -m) = x86_64 ] && echo --enable-64bit): This switch is used to enable 64 bit support in Tcl on 64 bit operating systems.

make install-private-headers: This command is used to install the Tcl library interface headers used by other packages if they link to the Tcl library.

ln -v -sf tclsh8.6 /usr/bin/tclsh: This command is used to create a compatibility symbolic link to the tclsh8.6 file as many packages expect a file named tclsh.

sed -e ...: The Tcl package expects that its source tree is preserved so that packages depending on it for their compilation can utilize it. These sed remove the references to the build directory and replace them with saner system-wide locations.

Installed Programs: tclsh and tclsh8.6

Installed Libraries: libtcl8.6.so and libtclstub8.6.a

Installed Directories: /usr/lib/itcl4.0.1, /usr/lib/sqlite3.8.6 /usr/lib/tcl8, /usr/lib/tcl8.6, /usr/lib/tdbc1.0.1, /usr/lib/tdbcmysql1.0.1, /usr/lib/tdbcodbc1.0.1, /usr/lib/tdbcpostgres1.0.1, /usr/lib/thread2.7.1, /usr/share/doc/tcl-8.6.7, and /usr/share/man/mann

Short Descriptions

tclsh	is a symlink to the tclsh8.6 program.
tclsh8.6	is a simple shell containing the Tcl interpreter.
`libtcl8.6.so`	contains the API functions required by Tcl.

Last updated on 2017-08-16 21:41:37 -0700

Tk-8.6.7

Introduction to Tk

The Tk package contains a TCL GUI Toolkit.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/tcl/tk8.6.7-src.tar.gz
Download MD5 sum: 46ea9c0165c515d87393700f4891ab6f
Download size: 4.1 MB
Estimated disk space required: 24 MB
Estimated build time: 0.3 SBU

Tk Dependencies

Required

Tcl-8.6.7 and Xorg Libraries

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/tk

Installation of Tk

Install Tk by running the following commands:

cd unix &&
./configure --prefix=/usr \
            --mandir=/usr/share/man \
            $([ $(uname -m) = x86_64 ] && echo --enable-64bit) &&

make &&

sed -e "s@^\(TK_SRC_DIR='\).*@\1/usr/include'@" \
    -e "/TK_B/s@='\(-L\)\?.*unix@='\1/usr/lib@" \
    -i tkConfig.sh

Running the tests is not recommended. Failures will be reported during the tests, depending on the screen resolution/capabilities, fonts installed and other X related parameters, but the end report can show 0 failures. Some tests will steal focus and some might crash your X Server. To test the results anyway, issue: make test. Ensure you run it from an X Window display device with the GLX extensions loaded, but even so, tests might hang.

Now, as the root user:

make install &&
make install-private-headers &&
ln -v -sf wish8.6 /usr/bin/wish &&
chmod -v 755 /usr/lib/libtk8.6.so

Command Explanations

$([ $(uname -m) = x86_64 ] && echo --enable-64bit): This switch is used to enable 64 bit support in Tk on 64 bit operating systems.

make install-private-headers: This command is used to install the Tk library interface headers used by other packages if they link to the Tk library.

ln -v -sf wish8.6 /usr/bin/wish: This command is used to create a compatibility symbolic link to the wish8.6 file as many packages expect a file named wish.

sed -e ... tkConfig.sh: The Tk package expects that its source tree is preserved so that packages depending on it for their compilation can utilize it. This sed removes the references to the build directory and replaces them with saner system-wide locations.

Installed Programs: wish and wish8.6

Installed Libraries: libtk8.6.so and libtkstub8.6.a

Installed Directory: /usr/lib/tk8.6

Short Descriptions

wish	is a symlink to the wish8.6 program.
wish8.6	is a simple shell containing the Tk toolkit that creates a main window and then processes Tcl commands.
`libtk8.6.so`	contains the API functions required by Tk.

Last updated on 2017-08-20 15:06:11 -0700

Vala-0.36.4

Introduction to Vala

Vala is a new programming language that aims to bring modern programming language features to GNOME developers without imposing any additional runtime requirements and without using a different ABI compared to applications and libraries written in C.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/vala/0.36/vala-0.36.4.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/vala/0.36/vala-0.36.4.tar.xz
Download MD5 sum: 3c19014093f1a3d995357253b463082c
Download size: 2.7 MB
Estimated disk space required: 112 MB (including tests)
Estimated build time: 1.0 SBU (including tests)

Vala Dependencies

Required

Optional

dbus-1.10.22 (Required for the tests) and libxslt-1.1.29 (Required for generating the documentation)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/vala

Installation of Vala

Install Vala by running the following commands:

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Installed Programs: vala, valac, vala-gen-introspect, vapicheck, and vapigen (symlinks); vala-0.36, valac-0.36, vala-gen-introspect-0.36, vapicheck-0.36, and vapigen-0.36

Installed Library: libvala-0.36.so

Installed Directories: /usr/include/vala-0.36, /usr/lib/vala-0.36, /usr/share/devhelp/books/vala-0.36, /usr/share/vala, and /usr/share/vala-0.36

Short Descriptions

valac	is a compiler that translates Vala source code into C source and header files.
vala-gen-introspect	generates a GI file for GObject and GLib based packages.
vapicheck	verifies the generated bindings.
vapigen	is an utility which generates Vala API (VAPI) files from GI files.
`libvala-0.36.so`	contains the Vala API functions.

Last updated on 2017-08-20 20:24:54 -0700

Valgrind-3.13.0

Introduction to Valgrind

Valgrind is an instrumentation framework for building dynamic analysis tools. There are Valgrind tools that can automatically detect many memory management and threading bugs, and profile programs in detail. Valgrind can also be used to build new tools.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://sourceware.org/ftp/valgrind/valgrind-3.13.0.tar.bz2
Download (FTP): ftp://sourceware.org/pub/valgrind/valgrind-3.13.0.tar.bz2
Download MD5 sum: 817dd08f1e8a66336b9ff206400a5369
Download size: 14 MB
Estimated disk space required: 347 MB (additional 228 MB for tests)
Estimated build time: 1.1 SBU (additional 5.1 SBU for tests)

Valgrind Dependencies

Optional

BIND-9.11.2 or BIND Utilities-9.11.2 (for tests), Boost-1.64.0, GDB-8.0 (for tests), LLVM-4.0.1 (with Clang), and Which-2.21 (for tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/valgrind

Installation of Valgrind

Install Valgrind by running the following commands:

sed -i 's|/doc/valgrind||' docs/Makefile.in &&

./configure --prefix=/usr \
            --datadir=/usr/share/doc/valgrind-3.13.0 &&
make

Note

To run the tests for this package, valgrind requires a version of the /lib/ld-2.26.so (or later) library with debugging symbols present. Normally in LFS these debugging symbols are stripped at the end of Chapter 6. To get this library, glibc must be rebuilt with the current glibc version using the same compiler that was used to build LFS. The ld.so can then be renamed to ld-2.26.so.dbg and copied to /lib. Then a symlink needs to be changed:

ln -sfv ld-2.26.so.dbg /lib/ld-linux-x86-64.so.2

Adjust the above instruction as needed for a 32-bit system or for a different version of glibc.

In addition, other glibc libraries with debugging symbols present may be needed for some tests.

To test the results, issue: make regtest. The tests may hang forever if GDB-8.0 is not installed. Some tests are known to hang also, depending on the version of glibc. Problematic tests can be disabled by changing the prereq: line in the corresponding .vgtest file to prereq: false. For example:

sed -e 's@prereq:.*@prereq: false@' \
    -i {helgrind,drd}/tests/pth_cond_destroy_busy.vgtest

Note

The OpenMP tests are skipped if libgomp has been compiled with --enable-linux-futex (the default). If needed, just recompile the libgomp library from the gcc build tree, passing --disable-linux-futex to configure, storing the library to some place and changing the link from /usr/lib/libgomp.so.1 to point to the new library.

Now, as the root user:

make install

Command Explanations

sed -i ... docs/Makefile.in : This sed provides for installing the documentation in a versioned directory.

Installed Programs: callgrind_annotate, callgrind_control, cg_annotate, cg_diff, cg_merge, ms_print, valgrind, valgrind-di-server, valgrind-listener, and vgdb

Installed Library: libcoregrind-<Arch>-linux.a, libreplacemalloc_toolpreload-<Arch>-linux.a, libvex-<Arch>-linux.a, libvexmultiarch-amd64-linux.a, vgpreload_core-<Arch>-linux.so, vgpreload_drd-<Arch>-linux.so, vgpreload_exp-dhat-<Arch>-linux.so, vgpreload_exp-sgcheck-<Arch>-linux.so, vgpreload_helgrind-<Arch>-linux.so, vgpreload_massif-<Arch>-linux.so, and vgpreload_memcheck-<Arch>-linux.so, where <Arch> is x86 or amd64

Installed Directories: /usr/lib/valgrind, /usr/include/valgrind, and /usr/share/doc/valgrind-3.13.0

Short Descriptions

valgrind	is a program for debugging and profiling Linux executables.
callgrind_annotate	takes an output file produced by the Valgrind tool Callgrind and prints the information in an easy-to-read form.
callgrind_control	controls programs being run by the Valgrind tool Callgrind.
cg_annotate	is a post-processing tool for the Valgrind tool Cachegrind.
cg_diff	compares two Cachegrind output files.
cg_merge	merges multiple Cachegrind output files into one.
ms_print	takes an output file produced by the Valgrind tool Massif and prints the information in an easy-to-read form.
valgrind-di-server	is a server that reads debuginfo from objects stored on a different machine.
valgrind-listener	listens on a socket for Valgrind commentary.
vgdb	is an intermediary between Valgrind and GDB or a shell.

Last updated on 2017-08-23 21:43:54 -0700

yasm-1.3.0

Introduction to yasm

Yasm is a complete rewrite of the NASM-2.13.01 assembler. It supports the x86 and AMD64 instruction sets, accepts NASM and GAS assembler syntaxes and outputs binary, ELF32 and ELF64 object formats.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.tortall.net/projects/yasm/releases/yasm-1.3.0.tar.gz
Download MD5 sum: fc9e586751ff789b34b1f21d572d96af
Download size: 1.5 MB
Estimated disk space required: 27 MB (additional 12 MB for the tests)
Estimated build time: 0.1 SBU (additional 0.1 SBU for the tests)

yasm Dependencies

Optional

Python-2.7.13 or Python-3.6.2, and Cython

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/yasm

Installation of yasm

Install yasm by running the following commands:

sed -i 's#) ytasm.*#)#' Makefile.in &&

./configure --prefix=/usr &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

sed -i 's#) ytasm.*#)#' Makefile.in: This sed prevents it compiling 2 programs (vsyasm and ytasm) that are only of use on Microsoft Windows.

Installed Program: yasm

Installed Library: libyasm.a

Installed Directory: /usr/include/libyasm

Short Descriptions

yasm	is a portable, retargetable assembler that supports the x86 and AMD64 instruction sets, accepts NASM and GAS assembler syntaxes and outputs binaries in ELF32 and ELF64 object formats.
`libyasm.a`	provides all of the core functionality of yasm, for manipulating machine instructions and object file constructs.

Last updated on 2017-08-20 15:06:11 -0700

Other Programming Tools

Introduction

This section is provided to show you some additional programming tools for which instructions have not yet been created in the book or for those that are not appropriate for the book. Note that these packages may not have been tested by the BLFS team, but their mention here is meant to be a convenient source of additional information.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/OtherProgrammingTools

Programming Frameworks, Languages and Compilers

A+

A+ is a powerful and efficient programming language. It is freely available under the GNU General Public License. It embodies a rich set of functions and operators, a modern graphical user interface with many widgets and automatic synchronization of widgets and variables, asynchronous execution of functions associated with variables and events, dynamic loading of user compiled subroutines, and many other features. Execution is by a rather efficient interpreter. A+ was created at Morgan Stanley. Primarily used in a computationally-intensive business environment, many critical applications written in A+ have withstood the demands of real world developers over many years. Written in an interpreted language, A+ applications tend to be portable.

Project Home Page: http://www.aplusdev.org/
Download Location: http://www.aplusdev.org/Download/index.html

ABC

ABC is an interactive programming language and environment for personal computing, originally intended as a good replacement for BASIC. It was designed by first doing a task analysis of the programming task. ABC is easy to learn (an hour or so for someone who has already programmed), and yet easy to use. Originally intended as a language for beginners, it has evolved into a powerful tool for beginners and experts alike. Some features of the language include: a powerful collection of only five data types that easily combines strong typing, yet without declarations, no limitations (such as max int), apart from sheer exhaustion of memory refinements to support top-down programming, nesting by indentation and programs typically are one fourth or one fifth the size of the equivalent Pascal or C program.

Project Home Page: http://homepages.cwi.nl/~steven/abc/
Download Location: http://homepages.cwi.nl/~steven/abc/implementations.html

ALF

ALF is a language which combines functional and logic programming techniques. The foundation of ALF is Horn clause logic with equality which consists of predicates and Horn clauses for logic programming, and functions and equations for functional programming. The ALF system is an efficient implementation of the combination of resolution, narrowing, rewriting and rejection. Similarly to Prolog, ALF uses a backtracking strategy corresponding to a depth-first search in the derivation tree.

Project Home Page: http://www.informatik.uni-kiel.de/~mh/systems/ALF.html
Download Location: http://www.informatik.uni-kiel.de/~mh/systems/ALF/

ASM

ASM is a Java bytecode manipulation framework. It can be used to dynamically generate stub classes or other proxy classes, directly in binary form, or to dynamically modify classes at load time, i.e., just before they are loaded into the Java Virtual Machine. ASM offers similar functionalities as BCEL or SERP, but is much smaller (33KB instead of 350KB for BCEL and 150KB for SERP) and faster than these tools (the overhead of a load time class transformation is of the order of 60% with ASM, 700% or more with BCEL, and 1100% or more with SERP). Indeed ASM was designed to be used in a dynamic way (though it works statically as well) and was therefore designed and implemented to be as small and as fast as possible.

Project Home Page: http://asm.objectweb.org/
Download Location: http://forge.objectweb.org/projects/asm/

BCPL

BCPL is a simple typeless language that was designed in 1966 by Martin Richards and implemented for the first time at MIT in the Spring of 1967.

Project Home Page: http://www.cl.cam.ac.uk/users/mr/BCPL.html
Download Location: http://www.cl.cam.ac.uk/users/mr/BCPL/

BETA

BETA is developed within the Scandinavian School of object-orientation, where the first object-oriented language, Simula, was developed. BETA is a modern language in the Simula tradition. The resulting language is smaller than Simula in spite of being considerably more expressive. BETA is a strongly typed language like Simula, Eiffel and C++, with most type checking being carried out at compile-time. It is well known that it is not possible to obtain all type checking at compile time without sacrificing the expressiveness of the language. BETA has optimum balance between compile-time type checking and run-time type checking.

Project Home Page: http://www.daimi.au.dk/~beta/
Download Location: ftp://ftp.daimi.au.dk/pub/beta/

<bigwig>

<bigwig> is a high-level programming language for developing interactive Web services. Programs are compiled into a conglomerate of lower-level technologies such as C code, HTTP, HTML, JavaScript, and SSL, all running on top of a runtime system based on an Apache Web server module. It is a descendant of the Mawl project but is a completely new design and implementation with vastly expanded ambitions. The <bigwig> language is really a collection of tiny domain-specific languages focusing on different aspects of interactive Web services. These contributing languages are held together by a C-like skeleton language. Thus, <bigwig> has the look and feel of C-programs but with special data and control structures.

Project Home Page: http://www.brics.dk/bigwig/
Download Location: http://www.brics.dk/bigwig/download/

Bigloo

Bigloo is a Scheme implementation devoted to one goal: enabling Scheme based programming style where C(++) is usually required. Bigloo attempts to make Scheme practical by offering features usually presented by traditional programming languages but not offered by Scheme and functional programming. Bigloo compiles Scheme modules and delivers small and fast stand-alone binary executables. It enables full connections between Scheme and C programs, between Scheme and Java programs, and between Scheme and C# programs.

Project Home Page: http://www-sop.inria.fr/mimosa/fp/Bigloo/
Download Location: ftp://ftp-sop.inria.fr/mimosa/fp/Bigloo/

C--

C-- is a portable assembly language that can be generated by a front end and implemented by any of several code generators. It serves as an interface between high-level compilers and retargetable, optimizing code generators. Authors of front ends and code generators can cooperate easily.

Project Home Page: http://www.cminusminus.org/
Download Location: http://www.cminusminus.org/code.html

Caml

Caml is a general-purpose programming language, designed with program safety and reliability in mind. It is very expressive, yet easy to learn and use. Caml supports functional, imperative, and object-oriented programming styles. It has been developed and distributed by INRIA, France's national research institute for computer science, since 1985. The Objective Caml system is the main implementation of the Caml language. It features a powerful module system and a full-fledged object-oriented layer. It comes with a native-code compiler that supports numerous architectures, for high performance; a bytecode compiler, for increased portability; and an interactive loop, for experimentation and rapid development.

Project Home Page: http://caml.inria.fr/
Download Location: http://caml.inria.fr/pub/distrib/

Ch

Ch is an embeddable C/C++ interpreter for cross-platform scripting, shell programming, 2D/3D plotting, numerical computing, and embedded scripting.

Project Home Page: http://www.softintegration.com/
Download Location: http://www.softintegration.com/products/chstandard/download/

Clean

Clean is a general purpose, state-of-the-art, pure and lazy functional programming language designed for making real-world applications. Clean is the only functional language in the world which offers uniqueness typing. This type system makes it possible in a pure functional language to incorporate destructive updates of arbitrary data structures (including arrays) and to make direct interfaces to the outside imperative world. The type system makes it possible to develop efficient applications.

Project Home Page: http://wiki.clean.cs.ru.nl/Clean
Download Location: http://wiki.clean.cs.ru.nl/Download_Clean

Cyclone

Cyclone is a programming language based on C that is safe, meaning that it rules out programs that have buffer overflows, dangling pointers, format string attacks, and so on. High-level, type-safe languages, such as Java, Scheme, or ML also provide safety, but they don't give the same control over data representations and memory management that C does (witness the fact that the run-time systems for these languages are usually written in C.) Furthermore, porting legacy C code to these languages or interfacing with legacy C libraries is a difficult and error-prone process. The goal of Cyclone is to give programmers the same low-level control and performance of C without sacrificing safety, and to make it easy to port or interface with legacy C code.

Project Home Page: http://cyclone.thelanguage.org/
Download Location: http://cyclone.thelanguage.org/wiki/Download/

D

D is a general purpose systems and applications programming language. It is a higher level language than C++, but retains the ability to write high performance code and interface directly with the operating system APIs and with hardware. D is well suited to writing medium to large scale million line programs with teams of developers. It is easy to learn, provides many capabilities to aid the programmer, and is well suited to aggressive compiler optimization technology. D is not a scripting language, nor an interpreted language. It doesn't come with a VM, a religion, or an overriding philosophy. It's a practical language for practical programmers who need to get the job done quickly, reliably, and leave behind maintainable, easy to understand code. D is the culmination of decades of experience implementing compilers for many diverse languages, and attempting to construct large projects using those languages. It draws inspiration from those other languages (most especially C++) and tempers it with experience and real world practicality.

Project Home Page: http://www.digitalmars.com/d/
Download Location: ftp://ftp.digitalmars.com/

DMDScript

DMDScript is Digital Mars' implementation of the ECMA 262 scripting language. Netscape's implementation is called JavaScript, Microsoft's implementation is called JScript. DMDScript is much faster than other implementations, which you can verify with the included benchmark.

Project Home Page: http://www.digitalmars.com/dscript/index.html
Download Location: ftp://ftp.digitalmars.com/

DotGNU Portable.NET

DotGNU Portable.NET goal is to build a suite of free software tools to build and execute .NET applications, including a C# compiler, assembler, disassembler, and runtime engine. While the initial target platform was GNU/Linux, it is also known to run under Windows, Solaris, NetBSD, FreeBSD, and MacOS X. The runtime engine has been tested on the x86, PowerPC, ARM, Sparc, PARISC, s390, Alpha, and IA-64 processors. DotGNU Portable.NET is part of the DotGNU project, built in accordance with the requirements of the GNU Project. DotGNU Portable.NET is focused on compatibility with the ECMA specifications for CLI. There are other projects under the DotGNU meta-project to build other necessary pieces of infrastructure, and to explore non-CLI approaches to virtual machine implementation.

Project Home Page: http://www.gnu.org/software/dotgnu/
Download Location: http://www.gnu.org/software/dotgnu/pnet-packages.html

Dylan

Dylan is an advanced, object-oriented, dynamic language which supports rapid program development. When needed, programs can be optimized for more efficient execution by supplying more type information to the compiler. Nearly all entities in Dylan (including functions, classes, and basic data types such as integers) are first class objects. Additionally, Dylan supports multiple inheritance, polymorphism, multiple dispatch, keyword arguments, object introspection, macros, and many other advanced features... --Peter Hinely.

Project Home Page: http://www.opendylan.org/
Download Location: http://opendylan.org/download/index.html

E

E is a secure distributed Java-based pure-object platform and p2p scripting language. It has two parts: ELib and the E Language. Elib provides the stuff that goes on between objects. As a pure-Java library, ELib provides for inter-process capability-secure distributed programming. Its cryptographic capability protocol enables mutually suspicious Java processes to cooperate safely, and its event-loop concurrency and promise pipelining enable high performance deadlock free distributed pure-object computing. The E Language can be used to express what happens within an object. It provides a convenient and familiar notation for the ELib computational model, so you can program in one model rather than two. Under the covers, this notation expands into Kernel-E, a minimalist lambda-language much like Scheme or Smalltalk. Objects written in the E language are only able to interact with other objects according to ELib's semantics, enabling object granularity intra-process security, including the ability to safely run untrusted mobile code (such as caplets).

Project Home Page: http://www.erights.org/
Download Location: http://www.erights.org/download/

elastiC

elastiC is a portable high-level object-oriented interpreted language with a C like syntax. Its main characteristics are: open source, interpreted, has portable bytecode compilation, dynamic typing, automatic real very fast garbage collection, object oriented with meta-programming support (a la Smalltalk), functional programming support (Scheme-like closures with lexical scoping, and eval-like functionality), hierarchical namespaces, a rich set of useful built-in types (dynamic arrays, dictionaries, symbols, ...), extensible with C (you can add functions, types, classes, methods, packages, ...), embeddable in C. elastiC has been strongly influenced by C, Smalltalk, Scheme and Python and tries to merge the best characteristics of all these languages, while still coherently maintaining its unique personality.

Project Home Page: http://www.elasticworld.org/
Download Location: http://www.elasticworld.org/download.html

Erlang/OTP

Erlang/OTP is a development environment based on Erlang. Erlang is a programming language which has many features more commonly associated with an operating system than with a programming language: concurrent processes, scheduling, memory management, distribution, networking, etc. The initial open-source Erlang release contains the implementation of Erlang, as well as a large part of Ericsson's middleware for building distributed high-availability systems. Erlang is characterized by the following features: robustness, soft real-time, hot code upgrades and incremental code loading.

Project Home Page: http://www.erlang.org/
Download Location: http://www.erlang.org/download.html

Euphoria

Euphoria is a simple, flexible, and easy-to-learn programming language. It lets you quickly and easily develop programs for Windows, DOS, Linux and FreeBSD. Euphoria was first released in 1993. Since then Rapid Deployment Software has been steadily improving it with the help of a growing number of enthusiastic users. Although Euphoria provides subscript checking, uninitialized variable checking and numerous other run-time checks, it is extremely fast. People have used it to develop high-speed DOS games, Windows GUI programs, and X Window System programs. It is also very useful for CGI (Web-based) programming.

Project Home Page: http://www.rapideuphoria.com/
Download Location: http://www.rapideuphoria.com/v20.htm

Felix

Felix is an advanced Algol like procedural programming language with a strong functional subsystem. It features ML style static typing, first class functions, pattern matching, garbage collection, polymorphism, and has built in support for high performance microthreading, regular expressions and context free parsing. The system provides a scripting harness so the language can be used like other scripting languages such as Python and Perl, but underneath it generates native code to obtain high performance. A key feature of the system is that it uses the C/C++ object model, and provides an advanced binding sublanguage to support integration with C/C++ at both the source and object levels, both for embedding C/C++ data types and functions into Felix, and for embedding Felix into existing C++ architectures. The Felix compiler is written in Objective Caml, and generates ISO C++ which should compile on any platform.

Project Home Page: http://felix.sourceforge.net/
Download Location: http://felix-lang.org/$/usr/local/lib/felix/tarballs

ferite

ferite is a scripting language and engine all in one manageable chunk. It is designed to be easily extended in terms of API, and to be used within other applications making them more configurable and useful to the end user. It has a syntax similar to a number of other languages but remains clean and its own language.

Project Home Page: http://www.ferite.org/
Download Location: http://www.ferite.org/download.html

Forth

Forth is a stack-based, extensible language without type-checking. It is probably best known for its "reverse Polish" (postfix) arithmetic notation, familiar to users of Hewlett-Packard calculators. Forth is a real-time programming language originally developed to control telescopes. Forth has many unique features and applications: it can compile itself into a new compiler, reverse-polish coding, edit time error checking and compiling (similar to BASIC), extremely efficient thread based language, can be used to debug itself, extensible; thus can become what ever you need it to be. The links below lead to the website of the Forth Interest Group (FIG), a world-wide, non-profit organization for education in and the promotion of the Forth computer language. Another worthwhile website dedicated to the Forth community is http://wiki.forthfreak.net/.

Project Home Page: http://www.forth.org/
Download Location: http://www.forth.org/compilers.html

GNU Smalltalk

GNU Smalltalk is a free implementation of the Smalltalk-80 language which runs on most versions on Unix and, in general, everywhere you can find a POSIX-compliance library. An uncommon feature of it is that it is well-versed to scripting tasks and headless processing. See http://www.gnu.org/software/smalltalk/manual/html_node/Overview.html for a more detailed explanation of GNU Smalltalk.

Project Home Page: http://smalltalk.gnu.org/
Download Location: https://ftp.gnu.org/gnu/smalltalk/

Haskell

Haskell is a computer programming language. In particular, it is a polymorphicly typed, lazy, purely functional language, quite different from most other programming languages. The language is named for Haskell Brooks Curry, whose work in mathematical logic serves as a foundation for functional languages. Haskell is based on lambda calculus. There are many implementations of Haskell, among them:

GHC: http://www.haskell.org/ghc/
Helium: http://www.cs.uu.nl/wiki/bin/view/Helium/WebHome
Hugs: http://www.haskell.org/hugs/
nhc98: http://www.haskell.org/nhc98/

HLA (High Level Assembly)

The HLA language was developed as a tool to help teach assembly language programming and machine organization to University students at the University of California, Riverside. The basic idea was to teach students assembly language programming by leveraging their knowledge of high level languages like C/C++ and Pascal/Delphi. At the same time, HLA was designed to allow advanced assembly language programmers write more readable and more powerful assembly language code.

Project Home Page: http://www.plantation-productions.com/Webster/HighLevelAsm/index.html
Download Location: http://www.plantation-productions.com/Webster/HighLevelAsm/dnld.html

Icon

Icon is a high-level, general-purpose programming language with a large repertoire of features for processing data structures and character strings. It is an imperative, procedural language with a syntax reminiscent of C and Pascal, but with semantics at a much higher level.

Project Home Page: http://www.cs.arizona.edu/icon/
Download Location: ftp://ftp.cs.arizona.edu/icon/

Io

Io is a small, prototype-based programming language. The ideas in Io are mostly inspired by Smalltalk (all values are objects), Self (prototype-based), NewtonScript (differential inheritance), Act1 (actors and futures for concurrency), LISP (code is a runtime inspectable/modifiable tree) and Lua (small, embeddable).

Project Home Page: http://iolanguage.org
Download Location: http://iobin.suspended-chord.info/

J

J is a modern, high-level, general-purpose, high-performance programming language. It is portable and runs on Windows, Unix, Mac, and PocketPC handhelds, both as a GUI and in a console. True 64-bit J systems are available for XP64 or Linux64, on AMD64 or Intel EM64T platforms. J systems can be installed and distributed for free.

Project Home Page: http://www.jsoftware.com/
Download Location: http://www.jsoftware.com/stable.htm

Jamaica

Jamaica, the JVM Macro Assembler, is an easy-to-learn and easy-to-use assembly language for JVM bytecode programming. It uses Java syntax to define a JVM class except for the method body that takes bytecode instructions, including Jamaica's built-in macros. In Jamaica, bytecode instructions use mnemonics and symbolic names for all variables, parameters, data fields, constants and labels.

Project Home Page: http://judoscript.org/jamaica.html
Download Location: http://judoscript.org/download.html

Joy

Joy is a purely functional programming language. Whereas all other functional programming languages are based on the application of functions to arguments, Joy is based on the composition of functions. All such functions take a stack as an argument and produce a stack as a value. Consequently much of Joy looks like ordinary postfix notation. However, in Joy a function can consume any number of parameters from the stack and leave any number of results on the stack. The concatenation of appropriate programs denotes the composition of the functions which the programs denote.

Project Home Page: http://www.latrobe.edu.au/humanities/research/research-projects/past-projects/joy-programming-language

Judo

Judo is a practical, functional scripting language. It is designed to cover the use cases of not only algorithmic/object-oriented/multi-threaded programming and Java scripting but also a number of major application domain tasks, such as scripting for JDBC, WSDL, ActiveX, OS, multiple file/data formats, etc. Despite its rich functionality, the base language is extremely simple, and domain support syntax is totally intuitive to domain experts, so that even though you have never programmed in Judo, you would have little trouble figuring out what the code does.

Project Home Page: http://judoscript.org/judo.html
Download Location: http://judoscript.org/download.html

JWIG

JWIG is a Java-based high-level programming language for development of interactive Web services. It contains an advanced session model, a flexible mechanism for dynamic construction of XML documents, in particular XHTML, and a powerful API for simplifying use of the HTTP protocol and many other aspects of Web service programming. To support program development, JWIG provides a unique suite of highly specialized program analysers that at compile time verify for a given program that no runtime errors can occur while building documents or receiving form input, and that all documents being shown are valid according to the document type definition for XHTML 1.0. The main goal of the JWIG project is to simplify development of complex Web services, compared to alternatives, such as, Servlets, JSP, ASP, and PHP. JWIG is a descendant of the <bigwig> research language.

Project Home Page: http://www.brics.dk/JWIG/
Download Location: http://www.brics.dk/JWIG/download.html

Lava

Lava is a name unfortunately chosen for several unrelated software development languages/projects. So it doesn't appear as though BLFS has a preference for one over another, the project web sites are listed below, without descriptions of the capabilities or features for any of them.

Project Home Page: http://lavape.sourceforge.net/index.htm
Project Home Page: http://mathias.tripod.com/IavaHomepage.html

Mercury

Mercury is a new logic/functional programming language, which combines the clarity and expressiveness of declarative programming with advanced static analysis and error detection features. Its highly optimized execution algorithm delivers efficiency far in excess of existing logic programming systems, and close to conventional programming systems. Mercury addresses the problems of large-scale program development, allowing modularity, separate compilation, and numerous optimization/time trade-offs.

Project Home Page: http://mercurylang.org/
Download Location: http://mercurylang.org/download.html

Mono

Mono provides the necessary software to develop and run .NET client and server applications on Linux, Solaris, Mac OS X, Windows, and Unix. Sponsored by Novell, the Mono open source project has an active and enthusiastic contributing community and is positioned to become the leading choice for development of Linux applications.

Project Home Page: http://www.mono-project.com/Main_Page
Download Location: http://ftp.novell.com/pub/mono/archive/

MPD

MPD is a variant of the SR programming language. SR has a Pascal-like syntax and uses guarded commands for control statements. MPD has a C-like syntax and C-like control statements. However, the main components of the two languages are the same: resources, globals, operations, procs, procedures, processes, and virtual machines. Moreover, MPD supports the same variety of concurrent programming mechanisms as SR: co statements, semaphores, call/send/forward invocations, and receive and input statements.

Project Home Page: http://www.cs.arizona.edu/mpd/
Download Location: http://www.cs.arizona.edu/mpd/download/

Nemerle

Nemerle is a high-level statically-typed programming language for the .NET platform. It offers functional, object-oriented and imperative features. It has a simple C#-like syntax and a powerful meta-programming system. Features that come from the functional land are variants, pattern matching, type inference and parameter polymorphism (aka generics). The meta-programming system allows great compiler extensibility, embedding domain specific languages, partial evaluation and aspect-oriented programming.

Project Home Page: http://nemerle.org/About
Download Location: http://nemerle.org/Downloads

Octave

GNU Octave is a high-level language, primarily intended for numerical computations. It provides a convenient command line interface for solving linear and nonlinear problems numerically, and for performing other numerical experiments using a language that is mostly compatible with Matlab. It may also be used as a batch-oriented language. Octave has extensive tools for solving common numerical linear algebra problems, finding the roots of nonlinear equations, integrating ordinary functions, manipulating polynomials, and integrating ordinary differential and differential-algebraic equations. It is easily extensible and customizable via user-defined functions written in Octave's own language, or using dynamically loaded modules written in C++, C, Fortran, or other languages.

Project Home Page: http://www.gnu.org/software/octave/
Download Location: http://www.gnu.org/software/octave/download.html

OO2C (Optimizing Oberon-2 Compiler)

OO2C is an Oberon-2 development platform. It consists of an optimizing compiler, a number of related tools, a set of standard library modules and a reference manual. Oberon-2 is a general-purpose programming language in the tradition of Pascal and Modula-2. Its most important features are block structure, modularity, separate compilation, static typing with strong type checking (also across module boundaries) and type extension with type-bound procedures. Type extension makes Oberon-2 an object-oriented language.

Project Home Page: http://sourceforge.net/projects/ooc/
Download Location: https://downloads.sourceforge.net/ooc/

Ordered Graph Data Language (OGDL)

OGDL is a structured textual format that represents information in the form of graphs, where the nodes are strings and the arcs or edges are spaces or indentation.

Project Home Page: http://ogdl.sourceforge.net/
Download Location: https://downloads.sourceforge.net/ogdl/

Pike

Pike is a dynamic programming language with a syntax similar to Java and C. It is simple to learn, does not require long compilation passes and has powerful built-in data types allowing simple and really fast data manipulation. Pike is released under the GNU GPL, GNU LGPL and MPL.

Project Home Page: http://pike.ida.liu.se/
Download Location: http://pike.ida.liu.se/download/pub/pike

Pyrex

Pyrex is a language specially designed for writing Python extension modules. It's designed to bridge the gap between the nice, high-level, easy-to-use world of Python and the messy, low-level world of C. Pyrex lets you write code that mixes Python and C data types any way you want, and compiles it into a C extension for Python.

Project Home Page: http://www.cosc.canterbury.ac.nz/greg.ewing/python/Pyrex/

Q

Q is a functional programming language based on term rewriting. Thus, a Q program or “script” is simply a collection of equations which are used to evaluate expressions in a symbolic fashion. The equations establish algebraic identities and are interpreted as rewriting rules in order to reduce expressions to “normal forms”.

Project Home Page: http://q-lang.sourceforge.net/
Download Location: https://downloads.sourceforge.net/q-lang/

R

R is a language and environment for statistical computing and graphics. It is a GNU project similar to the S language and environment which was developed at Bell Laboratories (formerly AT&T, now Lucent Technologies) by John Chambers and colleagues. R can be considered as a different implementation of S. There are some important differences, but much code written for S runs unaltered under R. R provides a wide variety of statistical (linear and nonlinear modelling, classical statistical tests, time-series analysis, classification, clustering, ...) and graphical techniques, and is highly extensible. The S language is often the vehicle of choice for research in statistical methodology, and R provides an Open Source route to participation in that activity.

Project Home Page: http://www.r-project.org/
Download Location: http://cran.r-project.org/mirrors.html

Regina Rexx

Regina is a Rexx interpreter that has been ported to most Unix platforms (Linux, FreeBSD, Solaris, AIX, HP-UX, etc.) and also to OS/2, eCS, DOS, Win9x/Me/NT/2k/XP, Amiga, AROS, QNX4.x, QNX6.x BeOS, MacOS X, EPOC32, AtheOS, OpenVMS, SkyOS and OpenEdition. Rexx is a programming language that was designed to be easy to use for inexperienced programmers yet powerful enough for experienced users. It is also a language ideally suited as a macro language for other applications.

Project Home Page: http://regina-rexx.sourceforge.net/
Download Location: https://downloads.sourceforge.net/regina-rexx

Small Device C Compiler (SDCC)

SDCC is a Freeware, retargetable, optimizing ANSI-C compiler that targets the Intel 8051, Maxim 80DS390 and the Zilog Z80 based MCUs. Work is in progress on supporting the Motorola 68HC08 as well as Microchip PIC16 and PIC18 series. The entire source code for the compiler is distributed under GPL.

Project Home Page: http://sdcc.sourceforge.net/
Download Location: http://sdcc.sourceforge.net/snap.php#Source

SmartEiffel (The GNU Eiffel Compiler)

SmartEiffel claims to be “the fastest and the slimmest multi-platform Eiffel compiler on Earth”. Eiffel is an object-oriented programming language which emphasizes the production of robust software. Its syntax is keyword-oriented in the ALGOL and Pascal tradition. Eiffel is strongly statically typed, with automatic memory management (typically implemented by garbage collection). Distinguishing characteristics of Eiffel include Design by contract (DbC), liberal use of inheritance including multiple inheritance, a type system handling both value and reference semantics, and generic classes. Eiffel has a unified type system—all types in Eiffel are classes, so it is possible to create subclasses of the basic classes such as INTEGER. Eiffel has operator overloading, including the ability to define new operators, but does not have method overloading.

Project Home Page: http://smarteiffel.loria.fr/
Download Location: https://gforge.inria.fr/frs/?group_id=184

Squeak

Squeak is an open, highly-portable Smalltalk implementation whose virtual machine is written entirely in Smalltalk, making it easy to debug, analyze, and change. To achieve practical performance, a translator produces an equivalent C program whose performance is comparable to commercial Smalltalks. Other noteworthy aspects of Squeak include: real-time sound and music synthesis written entirely in Smalltalk, extensions of BitBlt to handle color of any depth and anti-aliased image rotation and scaling, network access support that allows simple construction of servers and other useful facilities, it runs bit-identical on many platforms (Windows, Mac, Unix, and others), a compact object format that typically requires only a single word of overhead per object and a simple yet efficient incremental garbage collector for 32-bit direct pointers efficient bulk-mutation of objects.

Project Home Page: http://www.squeak.org/
Download Location: http://www.squeak.org/Download/

SR (Synchronizing Resources)

SR is a language for writing concurrent programs. The main language constructs are resources and operations. Resources encapsulate processes and variables they share; operations provide the primary mechanism for process interaction. SR provides a novel integration of the mechanisms for invoking and servicing operations. Consequently, all of local and remote procedure call, rendezvous, message passing, dynamic process creation, multicast, and semaphores are supported. SR also supports shared global variables and operations.

Project Home Page: http://www.cs.arizona.edu/sr/index.html
Download Location: ftp://ftp.cs.arizona.edu/sr/

Standard ML

Standard ML is a safe, modular, strict, functional, polymorphic programming language with compile-time type checking and type inference, garbage collection, exception handling, immutable data types and updatable references, abstract data types, and parametric modules. It has efficient implementations and a formal definition with a proof of soundness. There are many implementations of Standard ML, among them:

ML Kit: http://www.it-c.dk/research/mlkit/
MLton: http://mlton.org/
Poly/ML: http://www.polyml.org/
Standard ML of New Jersey: http://www.smlnj.org/

Steel Bank Common Lisp (SBCL)

SBCL is an open source (free software) compiler and runtime system for ANSI Common Lisp. It provides an interactive environment including an integrated native compiler, a debugger, and many extensions. SBCL runs on a number of platforms.

Project Home Page: http://www.sbcl.org/
Download Location: https://downloads.sourceforge.net/sbcl/

Tiny C Compiler (TCC)

Tiny C Compiler is a small C compiler that can be used to compile and execute C code everywhere, for example on rescue disks (about 100KB for x86 TCC executable, including C preprocessor, C compiler, assembler and linker). TCC is fast. It generates optimized x86 code, has no byte code overhead and compiles, assembles and links several times faster than GCC. TCC is versatile, any C dynamic library can be used directly. It is heading toward full ISOC99 compliance and can compile itself. The compiler is safe as it includes an optional memory and bound checker. Bound checked code can be mixed freely with standard code. TCC compiles and executes C source directly. No linking or assembly necessary. A full C preprocessor and GNU-like assembler is included. It is C script supported; just add “#!/usr/local/bin/tcc -run” on the first line of your C source, and execute it directly from the command line. With libtcc, you can use TCC as a backend for dynamic code generation.

Project Home Page: http://bellard.org/tcc/
Download Location: http://download.savannah.gnu.org/releases-noredirect/tinycc/

TinyCOBOL

TinyCOBOL is a COBOL compiler being developed by members of the free software community. The mission is to produce a COBOL compiler based on the COBOL 85 standards. TinyCOBOL is available for the Intel architecture (IA32) and compatible processors on the following platforms: BeOS, FreeBSD, Linux and MinGW on Windows.

Project Home Page: http://sourceforge.net/projects/tiny-cobol/
Download Location: https://downloads.sourceforge.net/tiny-cobol/

Yorick

Yorick is an interpreted programming language, designed for postprocessing or steering large scientific simulation codes. Smaller scientific simulations or calculations, such as the flow past an airfoil or the motion of a drumhead, can be written as standalone yorick programs. The language features a compact syntax for many common array operations, so it processes large arrays of numbers very efficiently. Unlike most interpreters, which are several hundred times slower than compiled code for number crunching, Yorick can approach to within a factor of four or five of compiled speed for many common tasks. Superficially, Yorick code resembles C code, but Yorick variables are never explicitly declared and have a dynamic scoping similar to many Lisp dialects. The “unofficial” home page for Yorick can be found at http://www.maumae.net/yorick.

Project Home Page: http://yorick.sourceforge.net/index.php
Download Location: http://sourceforge.net/projects/yorick/files/

ZPL

ZPL is an array programming language designed from first principles for fast execution on both sequential and parallel computers. It provides a convenient high-level programming medium for supercomputers and large-scale clusters with efficiency comparable to hand-coded message passing. It is the perfect alternative to using a sequential language like C or Fortran and a message passing library like MPI.

Project Home Page: http://www.cs.washington.edu/research/zpl/home/index.html
Download Location: http://www.cs.washington.edu/research/zpl/download/download.html

Programming Libraries and Bindings

Byte Code Engineering Library (BCEL)

BECL is intended to give users a convenient possibility to analyze, create, and manipulate (binary) Java class files (those ending with .class). Classes are represented by objects which contain all the symbolic information of the given class: methods, fields and byte code instructions, in particular. Such objects can be read from an existing file, be transformed by a program (e.g., a class loader at run-time) and dumped to a file again. An even more interesting application is the creation of classes from scratch at run-time. The Byte Code Engineering Library may be also useful if you want to learn about the Java Virtual Machine (JVM) and the format of Java .class files. BCEL is already being used successfully in several projects such as compilers, optimizers, obfuscators, code generators and analysis tools.

Project Home Page: http://jakarta.apache.org/bcel/index.html
Download Location: http://archive.apache.org/dist/jakarta/bcel/

Choco

Choco is a Java library for constraint satisfaction problems (CSP), constraint programming (CP) and explanation-based constraint solving (e-CP). It is built on a event-based propagation mechanism with backtrackable structures.

Project Home Page: http://sourceforge.net/projects/choco/
Download Location: http://choco.sourceforge.net/download.html

GOB (GObject Builder)

GOB (GOB2 anyway) is a preprocessor for making GObjects with inline C code so that generated files are not edited. Syntax is inspired by Java and Yacc or Lex. The implementation is intentionally kept simple, and no C actual code parsing is done.

Project Home Page: http://www.5z.com/jirka/gob.html
Download Location: http://ftp.5z.com/pub/gob/

GTK+/GNOME Language Bindings (wrappers)

GTK+/GNOME language bindings allow GTK+ to be used from other programming languages, in the style of those languages.

Project Home Page: http://www.gtk.org/language-bindings.php

Java-GNOME

Java-GNOME is a set of Java bindings for the GNOME and GTK+ libraries that allow GNOME and GTK+ applications to be written in Java. The Java-GNOME API has been carefully designed to be easy to use, maintaining a good OO paradigm, yet still wrapping the entire functionality of the underlying libraries. Java-GNOME can be used with the Eclipse development environment and Glade user interface designer to create applications with ease.

Project Home Page: http://java-gnome.sourceforge.net/4.0/
Download Location: http://java-gnome.sourceforge.net/4.0/get/

gtk2-perl

gtk2-perl is the collective name for a set of Perl bindings for GTK+ 2.x and various related libraries. These modules make it easy to write GTK and GNOME applications using a natural, Perlish, object-oriented syntax.

Project Home Page: http://gtk2-perl.sourceforge.net/
Download Location: https://downloads.sourceforge.net/gtk2-perl

KDE Language Bindings

KDE and most KDE applications are implemented using the C++ programming language, however there are number of bindings to other languages are available. These include scripting languages like Perl, Python and Ruby, and systems programming languages such as Java and C#.

Project Home Page: http://techbase.kde.org/Development/Languages

Numerical Python (Numpy)

Numerical Python adds a fast array facility to the Python language.

Project Home Page: http://numeric.scipy.org/
Download Location: https://downloads.sourceforge.net/numpy/

Perl Scripts and Additional Modules

There are many Perl scripts and additional modules located on the Comprehensive Perl Archive Network (CPAN) web site. Here you will find “All Things Perl”.

Project Home Page: http://cpan.org/

Integrated Development Environments

A-A-P

A-A-P makes it easy to locate, download, build and install software. It also supports browsing source code, developing programs, managing different versions and distribution of software and documentation. This means that A-A-P is useful both for users and for developers.

Project Home Page: http://www.a-a-p.org/index.html
Download Location: http://www.a-a-p.org/download.html

Anjuta

Anujuta is a versatile Integrated Development Environment (IDE) for C and C++ on GNU/Linux. It has been written for GTK/GNOME and features a number of advanced programming facilities. These include project management, application wizards, an on-board interactive debugger, and a powerful source editor with source browsing and syntax highlighting.

Project Home Page: http://projects.gnome.org/anjuta/index.shtml
Download Location: http://projects.gnome.org/anjuta/downloads.html

Eclipse

Eclipse is an open source community whose projects are focused on providing an extensible development platform and application frameworks for building software. Eclipse contains many projects, including an Integrated Development Environment (IDE) for Java.

Project Home Page: http://www.eclipse.org/
Download Location: http://www.eclipse.org/downloads/

Mozart

The Mozart Programming System is an advanced development platform for intelligent, distributed applications. Mozart is based on the Oz language, which supports declarative programming, object-oriented programming, constraint programming, and concurrency as part of a coherent whole. For distribution, Mozart provides a true network transparent implementation with support for network awareness, openness, and fault tolerance. Security is upcoming. It is an ideal platform for both general-purpose distributed applications as well as for hard problems requiring sophisticated optimization and inferencing abilities.

Project Home Page: http://mozart.github.io/
Download Location: https://github.com/mozart/mozart2#downloads

Other Development Tools

cachecc1

cachecc1 is a GCC cache. It can be compared with the well known ccache package. It has some unique features including the use of an LD_PRELOADed shared object to catch invocations to cc1, cc1plus and as, it transparently supports all build methods, it can cache GCC bootstraps and it can be combined with distcc to transparently distribute compilations.

Project Home Page: http://cachecc1.sourceforge.net/
Download Location: https://downloads.sourceforge.net/cachecc1

ccache

ccache is a compiler cache. It acts as a caching pre-processor to C/C++ compilers, using the -E compiler switch and a hash to detect when a compilation can be satisfied from cache. This often results in 5 to 10 times faster speeds in common compilations.

Project Home Page: http://ccache.samba.org/
Download Location: http://samba.org/ftp/ccache/

DDD (GNU Data Display Debugger)

GNU DDD is a graphical front-end for command-line debuggers such as GDB, DBX, WDB, Ladebug, JDB, XDB, the Perl debugger, the Bash debugger, or the Python debugger. Besides “usual” front-end features such as viewing source texts, DDD has an interactive graphical data display, where data structures are displayed as graphs..

Project Home Page: http://www.gnu.org/software/ddd/
Download Location: https://ftp.gnu.org/gnu/ddd/

distcc

distcc is a program to distribute builds of C, C++, Objective C or Objective C++ code across several machines on a network. distcc should always generate the same results as a local build, is simple to install and use, and is usually much faster than a local compile. distcc does not require all machines to share a filesystem, have synchronized clocks, or to have the same libraries or header files installed. They can even have different processors or operating systems, if cross-compilers are installed.

Project Home Page: http://distcc.samba.org/
Download Location: http://distcc.samba.org/download.html

Exuberant Ctags

Exuberant Ctags generates an index (or tag) file of language objects found in source files that allows these items to be quickly and easily located by a text editor or other utility. A tag signifies a language object for which an index entry is available (or, alternatively, the index entry created for that object). Tag generation is supported for the following languages: Assembler, AWK, ASP, BETA, Bourne/Korn/Zsh Shell, C, C++, COBOL, Eiffel, Fortran, Java, Lisp, Lua, Make, Pascal, Perl, PHP, Python, REXX, Ruby, S-Lang, Scheme, Tcl, Vim, and YACC. A list of editors and tools utilizing tag files may be found at http://ctags.sourceforge.net/tools.html.

Project Home Page: http://ctags.sourceforge.net/
Download Location: https://downloads.sourceforge.net/ctags/

gocache (GNU Object Cache)

ccache is a clone of ccache, with the goal of supporting compilers other than GCC and adding additional features. Embedded compilers will especially be in focus.

Project Home Page: http://sourceforge.net/projects/gocache/
Download Location: https://downloads.sourceforge.net/gocache/

OProfile

OProfile is a system-wide profiler for Linux systems, capable of profiling all running code at low overhead. OProfile is released under the GNU GPL. It consists of a kernel driver and a daemon for collecting sample data, and several post-profiling tools for turning data into information. OProfile leverages the hardware performance counters of the CPU to enable profiling of a wide variety of interesting statistics, which can also be used for basic time-spent profiling. All code is profiled: hardware and software interrupt handlers, kernel modules, the kernel, shared libraries, and applications. OProfile is currently in alpha status; however it has proven stable over a large number of differing configurations. It is being used on machines ranging from laptops to 16-way NUMA-Q boxes.

Project Home Page: http://oprofile.sourceforge.net/news/
Download Location: http://oprofile.sourceforge.net/download/

strace

strace is a system call tracer, i.e., a debugging tool which prints out a trace of all the system calls made by another process or program.

Project Home Page: http://sourceforge.net/projects/strace/
Download Location: https://downloads.sourceforge.net/strace/

Last updated on 2017-08-15 11:49:48 -0700

Java

Last updated on 2015-09-20 15:38:20 -0700

Java-1.8.0.141

About Java

Java is different from most of the packages in LFS and BLFS. It is a programming language that works with files of byte codes to obtain instructions and executes then in a Java Virtual Machine (JVM). An introductory java program looks like:

public class HelloWorld
{
    public static void main(String[] args)
    {
        System.out.println("Hello, World");
    }
}

This program is saved as HelloWorld.java. The file name, HelloWorld, must match the class name. It is then converted into byte code with javac HelloWorld.java. The output file is HelloWorld.class. The program is executed with java HelloWorld. This creates a JVM and runs the code. The 'class' extension must not be specified.

Several class files can be combined into one file with the jar command. This is similar to the standard tar command. For instance, the command jar cf myjar.jar *.class will combine all class files in a directory into one jar file. These act as library files.

The JVM can search for and use classes in jar files automatically. It uses the CLASSPATH environment variable to search for jar files. This is a standard list of colon-separated directory names similar to the PATH environment variable.

Binary JDK Information

Creating a JVM from source requires a set of circular dependencies. The first thing that's needed is a set of programs called a Java Development Kit (JDK). This set of programs includes java, javac, jar, and several others. It also includes several base jar files.

To start, we set up a binary installation of the JDK created by the BLFS editors. It is installed in the /opt directory to allow for multiple installations, including a source based version.

This package is known to build and work properly using an LFS-8.1 platform.

Binary Package Information

Binary download (x86): http://anduin.linuxfromscratch.org/BLFS/OpenJDK/OpenJDK-1.8.0.141/OpenJDK-1.8.0.141-i686-bin.tar.xz
Download MD5 sum: 08ea7bd6d308382d9fb605ffe1599d15
Download size (binary): 57 MB
Estimated disk space required: 167 MB

Binary download (x86_64): http://anduin.linuxfromscratch.org/BLFS/OpenJDK/OpenJDK-1.8.0.141/OpenJDK-1.8.0.141-x86_64-bin.tar.xz
Download MD5 sum: e924a6923dc156e9f65ca53fffcdcf30
Download size (binary): 58 MB
Estimated disk space required: 170 MB

Java Binary Runtime Dependencies

alsa-lib-1.1.4.1, Cups-2.2.4, giflib-5.1.4, and Xorg Libraries

Installation of the Java BinaryJDK

Begin by extracting the appropriate binary tarball for your architecture and changing to the extracted directory. Install the binary OpenJDK with the following commands as the root user:

install -vdm755 /opt/OpenJDK-1.8.0.141-bin &&
mv -v * /opt/OpenJDK-1.8.0.141-bin         &&
chown -R root:root /opt/OpenJDK-1.8.0.141-bin

The binary version is now installed. You may create a symlink to that version by issuing, as the root user:

ln -sfn OpenJDK-1.8.0.141-bin /opt/jdk

You may now proceed to Configuring the JAVA environment, where the instructions assume that the above link exists.

Last updated on 2017-08-21 23:29:00 -0700

OpenJDK-1.8.0.141

Introduction to OpenJDK

OpenJDK is an open-source implementation of Oracle's Java Standard Edition platform. OpenJDK is useful for developing Java programs, and provides a complete runtime environment to run Java programs.

This package is known to build and work properly using an LFS-8.1 platform.

Note

A browser plugin and webstart implementation is provided by the Icedtea project. To provide a complete implementation, you will need to later install IcedTea-Web-1.7.

OpenJDK is GPL'd code, with a special exception made for non-free projects to use these classes in their proprietary products. In similar fashion to the LGPL, which allows non-free programs to link to libraries provided by free software, the GNU General Public License, version 2, with the Classpath Exception allows third party programs to use classes provided by free software without the requirement that the third party software also be free. As with the LGPL, any modifications made to the free software portions of a third party application, must also be made freely available.

Note

The OpenJDK source includes a very thorough, open source test suite using the JTreg test harness. The testing instructions below allow to test the just built JDK for reasonable compatibility with the proprietary Oracle JDK. However, in order for an independent implementation to claim compatibility, it must pass a proprietary JCK/TCK test suite. No claims of compatibility, even partial compatibility, may be made without passing an approved test suite.

Oracle does provide free community access, on a case by case basis, to a closed toolkit to ensure 100% compatibility with its proprietary JDK. Neither the binary version provided on the Java-1.8.0.141 page nor the JVM built with the instructions below have been tested against the TCK. Any version that is built using the instructions given, cannot claim to be compatible with the proprietary JDK, without the user applying for, and completing the compatibility tests themselves.

With that in mind, the binaries produced using this build method are regularly tested against the TCK by the members listed on the site above. In addition to the community license above, an educational, non-commercial license for the TCK can be obtained from here.

Source Package Information

OpenJDK Root Package
Download: http://hg.openjdk.java.net/jdk8u/jdk8u/archive/jdk8u141-b15.tar.bz2
Download MD5 sum: df3504e95d6e88924babb3821d4210a6
Download Size: 498 KB
In addition to the root package, the instructions below first download seven subproject tarballs, whose total size is 63 MB.
Estimated disk space required: 3.5 GB (additional 529 MB for tests)
Estimated build time: 4.3 SBU with 8 jobs in parallel (up to 120 SBU for tests, see below)

Additional Downloads

Optional test harness
Download: http://anduin.linuxfromscratch.org/BLFS/OpenJDK/OpenJDK-1.8.0.141/jtreg-4.2-b08-891.tar.gz
Download MD5 sum: f409d5313b5d9aa81bb6868082fda161
Download Size: 6.8 MB
Optional package (to get an icon for the openjdk-8-policytool.desktop file): http://icedtea.classpath.org/download/source/icedtea-web-1.7.tar.gz

OpenJDK Dependencies

Required Dependencies

An existing binary (Java-1.8.0.141 or an earlier built version of this package. The instructions below assume that you are using Configuring the JAVA environment), alsa-lib-1.1.4.1, cpio-2.12, Cups-2.2.4, UnZip-6.0, Which-2.21, Xorg Libraries, and Zip-3.0

Optional

Mercurial-4.3.1 and an X Window manager such as twm-1.0.9 (for the tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/openjdk

Installation of OpenJDK

Unlike other packages in BLFS, the OpenJDK source packages are distributed in multiple tarballs. You need to first extract the source root from jdk8u141-b15.tar.bz2, change into the extracted directory, then proceed with the following instructions:

cat > subprojects.md5 << EOF &&
4061c0f2dc553cf92847e4a39a03ea4e  corba.tar.bz2
269a0fde90b9ab5ca19fa82bdb3d6485  hotspot.tar.bz2
a1dfcd15119dd10db6e91dc2019f14e7  jaxp.tar.bz2
16f904d990cb6a3c84ebb81bd6bea1e7  jaxws.tar.bz2
4fb652cdd6fee5f2873b00404e9a01f3  langtools.tar.bz2
c4a99c9c5293bb5c174366664843c8ce  jdk.tar.bz2
c2f06cd8d6e90f3dcc57bec53f419afe  nashorn.tar.bz2
EOF

for subproject in corba hotspot jaxp jaxws langtools jdk nashorn; do
  wget -c http://hg.openjdk.java.net/jdk8u/jdk8u/${subproject}/archive/jdk8u141-b15.tar.bz2 \
       -O ${subproject}.tar.bz2
done &&

md5sum -c subprojects.md5 &&

for subproject in corba hotspot jaxp jaxws langtools jdk nashorn; do
  mkdir -pv ${subproject} &&
  tar -xf ${subproject}.tar.bz2 --strip-components=1 -C ${subproject}
done

If you have downloaded the optional test harness, unpack it too:

tar -xf ../jtreg-4.2-b08-891.tar.gz

Note

Before proceeding, you should ensure that your environment PATH variable contains the location of the Java compiler used for bootstrapping OpenJDK. This is the only requirement for the environment. Modern Java installations do not need JAVA_HOME and CLASSPATH is not used here. Furthermore, OpenJDK developers recommend to unset JAVA_HOME.

The build system does not support the -j switch in MAKEFLAGS.

Configure and build the package with the following commands (--with-milestone value can be modified to fit user preferences):

unset JAVA_HOME               &&
sh ./configure                \
   --with-update-version=141  \
   --with-build-number=b15    \
   --with-milestone=BLFS      \
   --enable-unlimited-crypto  \
   --with-zlib=system         \
   --with-giflib=system       \
   --with-extra-cflags="-std=c++98 -Wno-error -fno-delete-null-pointer-checks -fno-lifetime-dse" \
   --with-extra-cxxflags="-std=c++98 -fno-delete-null-pointer-checks -fno-lifetime-dse" &&
make DEBUG_BINARIES=true SCTP_WERROR= all  &&
find build/*/images/j2sdk-image -iname \*.diz -delete

Note

Testing will involve the interplay of pairs of JVMs using the networking interface, so networking must be started. If it isn't, not only will these tests fail, but the test cleanup will leave orphaned JVMs running. There will be many of them. Rebooting may be the easiest recovery.

Testing the newly built JVM involves several steps. First, it is better to run the test suite in a frame buffer on a different display, using Xvfb:

if [ -n "$DISPLAY" ]; then
  OLD_DISP=$DISPLAY
fi
export DISPLAY=:20
nohup Xvfb $DISPLAY                              \
           -fbdir $(pwd)                         \
           -pixdepths 8 16 24 32 > Xvfb.out 2>&1 &
echo $! > Xvfb.pid
echo Waiting for Xvfb to initialize; sleep 1
nohup twm -display $DISPLAY \
          -f /dev/null > twm.out 2>&1            &
echo $! > twm.pid
echo Waiting for twm to initialize; sleep 1
xhost +

Then, it is necessary to modify some files:

echo -e "
jdk_all = :jdk_core           \\
          :jdk_svc            \\
          :jdk_beans          \\
          :jdk_imageio        \\
          :jdk_sound          \\
          :jdk_sctp           \\
          com/sun/awt         \\
          javax/accessibility \\
          javax/print         \\
          sun/pisces          \\
          com/sun/java/swing" >> jdk/test/TEST.groups &&
sed -e 's/all:.*jck.*/all: jtreg/'      \
    -e '/^JTREG /s@\$(JT_PLATFORM)/@@'  \
    -i langtools/test/Makefile

Some variables have to be set:

JT_JAVA=$(type -p javac | sed 's@/bin.*@@') &&
JT_HOME=$(pwd)/jtreg                        &&
PRODUCT_HOME=$(echo $(pwd)/build/*/images/j2sdk-image)

The tests are run as follows:

LANG=C make -k -C test                       \
            JT_HOME=${JT_HOME}               \
            JT_JAVA=${JT_JAVA}               \
            PRODUCT_HOME=${PRODUCT_HOME} all || true
LANG=C ${JT_HOME}/bin/jtreg -a -v:fail,error \
                -dir:$(pwd)/hotspot/test     \
                -k:\!ignore                  \
                -jdk:${PRODUCT_HOME}         \
                :jdk || true

Tests duration depends on various factors such as the network speed and the number of concurrent VM, which is computed from the number of cores and threads, and the amount of RAM installed. A maximum of 120 SBU has been observed, but it may be as “low” as 80 SBU.

The test results can be compared to these results, although they usually are run on a newer version. About 30 tests are known to fail, but the exact number depends on various conditions, like whether the computer is connected to network, or to a printer, and on the options given to configure (--enable-unlimited-crypto is known to trigger failures, but those come from the code in the tests, not from the installation). Also, some tests may timeout if the machine is under load.

Next some cleanup has to be done. The instructions below only stop the frame buffer, but it has been reported that some java VM may be left running after the tests, so it is necessary to check orphaned processes:

kill -9 `cat twm.pid`  &&
kill -9 `cat Xvfb.pid` &&
rm -f Xvfb.out twm.out &&
rm -f Xvfb.pid twm.pid &&
if [ -n "$OLD_DISP" ]; then
  DISPLAY=$OLD_DISP
fi

Install the package with the following commands as the root user:

cp -RT build/*/images/j2sdk-image /opt/OpenJDK-1.8.0.141 &&
chown -R root:root /opt/OpenJDK-1.8.0.141

There are now two OpenJDK SDKs installed in /opt. You should decide on which one you would like to use as the default. Normally, you would opt for the just installed OpenJDK. If so, do the following as the root user:

ln -v -nsf OpenJDK-1.8.0.141 /opt/jdk

If desired, you may install a .desktop file corresponding to an entry in a desktop menu for policytool. First, you need to obtain an icon from IcedTea-Web-1.7:

tar -xf ../icedtea-web-1.7.tar.gz  \
        icedtea-web-1.7/javaws.png \
        --strip-components=1

Now, as root user:

mkdir -pv /usr/share/applications &&

cat > /usr/share/applications/openjdk-8-policytool.desktop << "EOF" &&
[Desktop Entry]
Name=OpenJDK Java Policy Tool
Name[pt_BR]=OpenJDK Java - Ferramenta de Política
Comment=OpenJDK Java Policy Tool
Comment[pt_BR]=OpenJDK Java - Ferramenta de Política
Exec=/opt/jdk/bin/policytool
Terminal=false
Type=Application
Icon=javaws
Categories=Settings;
EOF

install -v -Dm0644 javaws.png /usr/share/pixmaps/javaws.png

The choice of pt_BR is just an example. You can add any translation by adding lines corresponding to your locale, e.g. for fr_FR, “Name[fr_FR]=” and “Comment[fr_FR]=” with the appropriate text as values.

Command Explanations

sh configure...: the top level configure is a wrapper around the autotools one. It is not executable and must be run through sh.

--with-boot-jdk: This switch provides the location of the temporary JDK. It is normally not needed if java is found in the PATH.

--with-update-version: Currently, the build system does not include the update number in the version string. It has to be specified here.

--with-build-number: Again, the build system does not include the build number in the version string. It has to be specified here too.

--with-milestone: Used to customize the version string.

--enable-unlimited-crypto: Because of limitations on the usage of cryptography in some countries, there is the possibility to limit the size of encryption keys and the use of some algorithms in a policy file. This switch allows to ship a policy file with no restriction. It is the responsibility of the user to ensure proper adherence to the law.

--with-zlib=system, --with-giflib=system: Allows to use the system libraries instead of the bundled ones.

--with-extra-cflags=... --with-extra-cxxflags=...: Works around some defects in the code brought to light by the GCC 6 more rigorous checking of the C/C++ constructs. Remove those switches if compiling with GCC 5.

--with-jobs=N: Allows setting the number of jobs for make equal to N. The default is the result of a calculation involving the available memory and the number of processors. Note that even if you specify N=1, some parallelization may be used during the build. The SBU given above are with N=4, on a single processor, 4-core, virtual machine, with 4 GB of memory.

--with-cacerts-file=...: Specifies where to find a cacerts file, /etc/ssl/java/cacerts on a BLFS system. Otherwise, an empty one is created. You can use the make-ca.sh --force command to generate it, once you have installed the Java binaries.

make DEBUG_BINARIES=true SCTP_WERROR= all: The build fails on 32 bit machines if DEBUG_BINARIES is not set to true. Unsetting SCTP_WERROR is part of the workarounds needed to use GCC 6. You may omit that part of the command if using GCC 5.

find ... -iname '*.diz' -delete: This command removes redundant files.

Configuring OpenJDK

Configuration Information

Normally, the JAVA environment has been configured after installing the binary version, and can be used with the just built package as well. Review Configuring the JAVA environment in case you want to modify something.

To test if the man pages are correctly installed, issue source /etc/profile and man java to display the respective man page.

Install or update the JRE Certificate Authority Certificates (cacerts) file

OpenJDK uses its own format for the CA certificates. Those certificates are located in a file named /etc/ssl/java/cacerts. That file should be generated using the system PKI trust store. The instructions on the Certificate Authority Certificates page should be used to update the file located in /etc/ssl/java. Setup a symlink in the default location as the root user:

ln -sfv /etc/ssl/java/cacerts /opt/jdk/jre/lib/security/cacerts

Use the following commands to check if the cacerts file has been successfully installed:

cd /opt/jdk
bin/keytool -list -keystore /etc/ssl/java/cacerts

At the prompt "Enter keystore password:", enter "changeit" (the default). If the cacerts file was installed correctly, you will see a list of the certificates with related information for each one. If not, you need to reinstall them.

Installed Programs: appletviewer, extcheck, idlj, jar, jarsigner, java, javac, javadoc, javah, javap, java-rmi.cgi, jcmd, jconsole, jdb, jdeps, jhat, jinfo, jjs, jmap, jps, jrunscript, jsadebugd, jstack, jstat, jstatd, keytool, native2ascii, orbd, pack200, policytool, rmic, rmid, rmiregistry, schemagen, serialver, servertool, tnameserv, unpack200, wsgen, wsimport, and xjc

Installed Libraries: /opt/OpenJDK-1.8.0.141/lib/*, and /opt/OpenJDK-1.8.0.141/jre/lib/*

Installed Directory: /opt/OpenJDK-1.8.0.141

Short Descriptions

appletviewer	allows to run applets outside of a web browser.
extcheck	checks a specified jar file for title and version conflicts with any extensions installed in the OpenJDK software.
idlj	generates Java bindings from a given IDL file.
jar	combines multiple files into a single jar archive.
jarsigner	signs jar files and verifies the signatures and integrity of a signed jar file.
java	launches a Java application by starting a Java runtime environment, loading a specified class and invoking its main method.
javac	reads class and interface definitions, written in the Java programming language, and compiles them into bytecode class files.
javadoc	parses the declarations and documentation comments in a set of Java source files and produces a corresponding set of HTML pages describing the classes, interfaces, constructors, methods, and fields.
javah	generates C header and source files that are needed to implement native methods.
javap	disassembles a Java class file.
java-rmi.cgi	is the Java RMI client.
jcmd	is a utility to send diagnostic command requests to a running Java Virtual Machine.
jconsole	is a graphical console tool to monitor and manage both local and remote Java applications and virtual machines.
jdb	is a simple command-line debugger for Java classes.
jdeps	shows the package-level or class-level dependencies of Java class files.
jhat	parses a java heap dump file and allows viewing it in a web browser.
jinfo	prints Java configuration information for a given Java process, core file, or a remote debug server.
jjs	is a command-line tool used to invoke the Nashorn engine. It can be used to interpret one or several script files, or to run an interactive shell.
jmap	prints shared object memory maps or heap memory details of a given process, core file, or a remote debug server.
jps	lists the instrumented JVMs on the target system.
jrunscript	is a command line script shell.
jsadebugd	attaches to a Java process or core file and acts as a debug server.
jstack	prints Java stack traces of Java threads for a given Java process, core file, or a remote debug server.
jstat	displays performance statistics for an instrumented JVM.
jstatd	is an RMI server application that monitors for the creation and termination of instrumented JVMs.
keytool	is a key and certificate management utility.
native2ascii	converts files that contain non-supported character encoding into files containing Latin-1 or Unicode-encoded characters.
orbd	is used to enable clients to transparently locate and invoke persistent objects on servers in the CORBA environment.
pack200	is a Java application that transforms a jar file into a compressed pack200 file using the Java gzip compressor.
policytool	creates and manages a policy file graphically.
rmic	generates stub and skeleton class files for remote objects from the names of compiled Java classes that contain remote object implementations.
rmid	starts the activation system daemon.
rmiregistry	creates and starts a remote object registry on the specified port on the current host.
schemagen	is a Java XML binding schema generator.
serialver	returns the serialVersionUID for one or more classes in a form suitable for copying into an evolving class.
servertool	provides an ease-of-use interface for application programmers to register, unregister, startup and shutdown a server.
tnameserv	starts the Java IDL name server.
unpack200	is a native implementation that transforms a packed file produced by pack200 into a jar file.
wsgen	generates JAX-WS portable artifacts used in JAX-WS web services.
wsimport	generates JAX-WS portable artifacts.
xjc	is a Java XML binding compiler.

Last updated on 2017-08-30 17:11:31 -0700

Configuring the JAVA environment

After the package installation is complete, the next step is to make sure that the system can properly find the files. If you set up your login scripts as recommended in The Bash Shell Startup Files, update the environment by creating the openjdk.sh script, as the root user:

cat > /etc/profile.d/openjdk.sh << "EOF"
# Begin /etc/profile.d/openjdk.sh

# Set JAVA_HOME directory
JAVA_HOME=/opt/jdk

# Adjust PATH
pathappend $JAVA_HOME/bin

# Add to MANPATH
pathappend $JAVA_HOME/man MANPATH

# Auto Java CLASSPATH: Copy jar files to, or create symlinks in, the
# /usr/share/java directory. Note that having gcj jars with OpenJDK 8
# may lead to errors.

AUTO_CLASSPATH_DIR=/usr/share/java

pathprepend . CLASSPATH

for dir in `find ${AUTO_CLASSPATH_DIR} -type d 2>/dev/null`; do
    pathappend $dir CLASSPATH
done

for jar in `find ${AUTO_CLASSPATH_DIR} -name "*.jar" 2>/dev/null`; do
    pathappend $jar CLASSPATH
done

export JAVA_HOME
unset AUTO_CLASSPATH_DIR dir jar

# End /etc/profile.d/openjdk.sh
EOF

For allowing mandb to include the OpenJDK man pages in its database, issue, as the root user:

cat >> /etc/man_db.conf << "EOF" &&
# Begin Java addition
MANDATORY_MANPATH     /opt/jdk/man
MANPATH_MAP           /opt/jdk/bin     /opt/jdk/man
MANDB_MAP             /opt/jdk/man     /var/cache/man/jdk
# End Java addition
EOF

mkdir -p /var/cache/man
mandb -c /opt/jdk/man

The installation of the JRE Certificate Authority Certificates (cacerts) is described in the JRE Certificate Authority Certificates section. If you are using the binary version, those certificates may already be installed.

Last updated on 2016-08-28 02:28:15 -0700

apache-ant-1.10.1

Introduction to Apache Ant

The Apache Ant package is a Java-based build tool. In theory, it is like the make command, but without make's wrinkles. Ant is different. Instead of a model that is extended with shell-based commands, Ant is extended using Java classes. Instead of writing shell commands, the configuration files are XML-based, calling out a target tree that executes various tasks. Each task is run by an object that implements a particular task interface.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://archive.apache.org/dist/ant/source/apache-ant-1.10.1-src.tar.xz
Download MD5 sum: ebecbe7488c624b06bc6a264a3a7c4ec
Download size: 3.4 MB
Estimated disk space required: 121 MB
Estimated build time: 0.3 SBU (with a JVM using 4 cores)

Additional Downloads

Required file: http://repo1.maven.org/maven2/junit/junit/4.11/junit-4.11.jar
Required file: http://repo1.maven.org/maven2/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3.jar

Apache Ant Dependencies

Required

A JDK (Java Binary or OpenJDK-1.8.0.141) and GLib-2.52.3

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/apache-ant

Installation of Apache Ant

Note

You may need additional libraries to satisfy the build requirements of various packages installed using Apache Ant. Review the table at http://ant.apache.org/manual/install.html#librarydependencies for any prerequisite libraries you may need. Place any needed libraries in lib/optional.

Unpack and copy the junit and hamcrest jar files to the local directory tree.

cp -v ../junit-4.11.jar \
      ../hamcrest-core-1.3.jar lib/optional

Install Apache Ant by running the following commands:

The unit regression tests are performed during the build step below unless JUnit is not installed. Now, as the root user:

./build.sh -Ddist.dir=/opt/ant-1.10.1 dist &&
ln -v -sfn ant-1.10.1 /opt/ant

Note

Make sure the JAVA_HOME environment variable is set for the root user.

Command Explanations

cp -v ... lib/optional: This command copies the JUnit and hamcrest jar files into the directory where Apache Ant will look for them.

./build.sh -Ddist.dir=/opt/ant-1.10.1 dist: This command does everything. It builds, tests, then installs the package into /opt/ant-1.10.1.

ln -v -sfn ant-1.10.1 /opt/ant: This command is optional, and creates a convenience symlink.

Configuring Apache Ant

Config Files

/etc/ant/ant.conf, ~/.ant/ant.conf, and ~/.antrc

Configuration Information

Some packages will require ant to be in the search path and the ANT_HOME environment variable defined. Satisfy these requirements by issuing, as the root user:

cat > /etc/profile.d/ant.sh << EOF
# Begin /etc/profile.d/ant.sh

pathappend /opt/ant/bin
export ANT_HOME=/opt/ant

# End /etc/profile.d/ant.sh
EOF

The above instrutions assume you have configured your system as described in The Bash Shell Startup Files.

Installed Programs: ant, antRun, antRun.pl, complete-ant-cmd.pl, runant.pl, and runant.py

Installed Libraries: ant*.jar

Installed Directories: /opt/ant-1.10.1

Short Descriptions

ant	is a Java based build tool used by many packages instead of the conventional make program.
antRun	is a support script used to start ant build scripts in a given directory.
antRun.pl	is a Perl script that provides similar functionality offered by the antRun script.
complete-ant-cmd.pl	is a Perl script that allows Bash to complete an ant command-line.
runant.pl	is a Perl wrapper script used to invoke ant.
runant.py	is a Python wrapper script used to invoke ant.
`ant*.jar`	files are the Apache Ant Java class libraries.

Last updated on 2017-08-26 09:42:24 -0700

JUnit-4.11

Introduction to JUnit

The JUnit package contains a simple, open source framework to write and run repeatable tests. It is an instance of the xUnit architecture for unit testing frameworks. JUnit features include assertions for testing expected results, test fixtures for sharing common test data, and test runners for running tests.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://launchpad.net/debian/+archive/primary/+files/junit4_4.11.orig.tar.gz
Download MD5 sum: b4d163832583dcec8bedb5427c795cc4
Download size: 1.7 MB
Estimated disk space required: 34 MB
Estimated build time: 0.1 SBU

Additional Downloads

Required file: http://repo1.maven.org/maven2/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3.jar
Required file: http://repo1.maven.org/maven2/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3-sources.jar

JUnit Dependencies

Required

apache-ant-1.10.1 and UnZip-6.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/junit

Installation of JUnit

The javadoc command coming with OpenJDK 8 has become much stricter than before regarding the conformance of the Javadoc comments in source code to HTML. The Junit documentation does not meet that standard, so the conformance checks have to be disabled. This can be done with the following command:

sed -i '\@/docs/@a<arg value="-Xdoclint:none"/>' build.xml

Now place the required hamcrest jar files where needed and build the package:

cp -v ../hamcrest-core-1.3{,-sources}.jar lib/ &&
ant populate-dist

Test the package by issuing ant dist. One test fails for unknown reason.

Install the files in the final location as the root user:

install -v -m755 -d /usr/share/{doc,java}/junit-4.11 &&
chown -R root:root .                                 &&

cp -v -R junit*/javadoc/*             /usr/share/doc/junit-4.11  &&
cp -v junit*/junit*.jar               /usr/share/java/junit-4.11 &&
cp -v hamcrest-1.3/hamcrest-core*.jar /usr/share/java/junit-4.11

If you have followed the instructions in Configuring the JAVA environment, there is nothing more to do: the CLASSPATH variable would be automatically updated.

Installed Programs: None

Installed Libraries: hamcrest-core and junit jar files

Installed Directories: /usr/share/doc/junit-4.11 and /usr/share/java/junit-4.11

Short Descriptions

junit jar files

contains java classes to support the xUnit framework testing architecture.

Last updated on 2017-08-26 09:42:24 -0700

Part IV. Networking

Chapter 14. Connecting to a Network

The LFS book covers setting up networking by connecting to a LAN with a static IP address. There are other methods used to obtain an IP address and connect to a LAN and other networks (such as the Internet). The most popular methods (DHCP and PPP) are covered in this chapter.

DHCP stands for Dynamic Host Configuration Protocol. It is a protocol used by many sites to automatically provide information such as IP addresses, subnet masks and routing information to computers. If your network uses DHCP, you will need a DHCP client in order to connect to it.

PPP stands for Point-to-Point Protocol. It is a data link protocol commonly used for establishing authenticated IP connections over a phone line with a modem, or over radio waves with a cellular phone. There is also a variant (PPPoE) that works over Ethernet and is used by cable providers to authenticate the Internet connections.

Advanced Network Setup

Network Bridge

Kernel Configuration

Enable the following options in the kernel configuration and recompile the kernel if necessary:

Networking support: Y
  Networking options:
    802.1d Ethernet Bridging: M or Y

Setting up a Network Bridge

In this section we are are going to discuss how to set up a network bridge using systemd-networkd. In the examples below, eth0 represents the external interface that is being bridged, while br0 represents the bridge interface.

To create a bridge interface, create the following configuration file by running the following command as the root user:

cat > /etc/systemd/network/50-br0.netdev << EOF
[NetDev]
Name=br0
Kind=bridge
EOF

To assign a network interface to a bridge, create the following configuration file by running the following command as the root user:

cat > /etc/systemd/network/51-eth0.network << EOF
[Match]
Name=eth0

[Network]
Bridge=br0
EOF

Repeat the process for any other interfaces that need to be bridged. Note that it is important that nothing assigns any addresses to the bridged interfaces. If you are using NetworkManager-1.8.2 or Wicd-1.7.4, make sure you configure them to ignore the bridged interfaces, as well as the bridge interface itself.

If you are on a network which uses DHCP for assigning ip addresses, create the following configuration file by running the following command as the root user:

cat > /etc/systemd/network/60-br0.network << EOF
[Match]
Name=br0

[Network]
DHCP=yes
EOF

Alternatively, if using a static ip setup, create the following configuration file by running the following command as the root user:

cat > /etc/systemd/network/60-br0.network << EOF
[Match]
Name=br0

[Network]
Address=192.168.0.2/24
Gateway=192.168.0.1
DNS=192.168.0.1
EOF

To bring up the bridge interface, simply restart the systemd-networkd daemon by running the following command as the root user:

systemctl restart systemd-networkd

Last updated on 2016-06-03 22:29:03 -0700

dhcpcd-6.11.5

Introduction to dhcpcd

dhcpcd is an implementation of the DHCP client specified in RFC2131. A DHCP client is useful for connecting your computer to a network which uses DHCP to assign network addresses. dhcpcd strives to be a fully featured, yet very lightweight DHCP client.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://roy.marples.name/downloads/dhcpcd/dhcpcd-6.11.5.tar.xz
Download (FTP): ftp://roy.marples.name/pub/dhcpcd/dhcpcd-6.11.5.tar.xz
Download MD5 sum: 2465624b62c1154f0e89dc69c42c849b
Download size: 196 KB
Estimated disk space required: 2.7 MB
Estimated build time: less than 0.1 SBU

dhcpcd Dependencies

Optional

LLVM-4.0.1 (with Clang)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/dhcpcd

Installation of dhcpcd

Install dhcpcd by running the following commands:

./configure --libexecdir=/lib/dhcpcd \
            --dbdir=/var/lib/dhcpcd  &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--libexecdir=/lib/dhcpcd: The default /libexec is not FHS-compliant. Since this directory may need to be available early in the boot, /usr/libexec cannot be used either.

--dbdir=/var/lib/dhcpcd: The default /var/db is not FHS-compliant

--with-hook=...: You can optionally install more hooks, for example to install some configuration files such as ntp.conf. The set of hooks is in the dhcpcd-hooks directory in the build tree.

Configuring dhcpcd

Config Files

/etc/dhcpcd.conf

General Configuration Information

If you want to configure network interfaces at boot using dhcpcd, you need to install the systemd unit included in blfs-systemd-units-20160602 package by running the following command as the root user:

make install-dhcpcd

Whenever dhcpcd configures or shuts down a network interface, it executes hook scripts. For more details about those scripts, see the dhcpcd-run-hooks and dhcpcd man pages.

Note

The default behavior of dhcpcd sets the hostname and mtu settings. It also overwrites /etc/resolv.conf and /etc/ntp.conf. These modifications to system files and settings on system configuration files are done by hooks which are stored in /lib/dhcpcd/dhcpcd-hooks. Setup dhcpcd by removing or adding hooks from/to that directory. The execution of hooks can be disabled by using the --nohook (-C) command line option or by the nohook option in the /etc/dhcpcd.conf file.

Note

Make sure that you disable the systemd-networkd service or configure it not to manage the interfaces you want to manage with dhcpcd.

At this point you can test if dhcpcd is behaving as expected by running the following command as the root user:

systemctl start dhcpcd@eth0

To start dhcpcd on a specific interface at boot, enable the previously installed systemd unit by running the following command as the root user:

systemctl enable dhcpcd@eth0

Replace eth0 with the actual interface name.

Installed Program: dhcpcd

Installed Library: /lib/dhcpcd/dev/udev.so

Installed Directory: /{,var/}lib/dhcpcd and /usr/share/dhcpcd

Short Descriptions

dhcpcd	is an implementation of the DHCP client specified in RFC2131.
`udev.so`	add udev support for interface arrival and departure; this is because udev likes to rename the interface, which it can't do if dhcpcd grabs it first.

Last updated on 2017-08-25 14:22:07 -0700

DHCP-4.3.6

Introduction to ISC DHCP

The ISC DHCP package contains both the client and server programs for DHCP. dhclient (the client) is used for connecting to a network which uses DHCP to assign network addresses. dhcpd (the server) is used for assigning network addresses on private networks.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (FTP): ftp://ftp.isc.org/isc/dhcp/4.3.6/dhcp-4.3.6.tar.gz
Download MD5 sum: afa6e9b3eb7539ea048421a82c668adc
Download size: 9.7 MB
Estimated disk space required: 177 MB
Estimated build time: 0.5 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/dhcp

Kernel Configuration

You must have Packet Socket support:

[*] Networking support --->          [CONFIG_NET]
      Networking options --->
        <*> Packet socket            [CONFIG_PACKET]

If you do not have IPv6 support:

[*] Networking support --->          [CONFIG_NET]
      Networking Options --->
        <*> The IPv6 Protocol --->   [CONFIG_IPV6]

compiled in, then you must use the “missing_ipv6” patch.

Installation of ISC DHCP

Note

This package does not support parallel build.

Note

Be careful with the instructions below. The single and double quotes are important because the defined variables are used verbatim in the code.

Install ISC DHCP by running the following commands:

CFLAGS="-D_PATH_DHCLIENT_SCRIPT='\"/sbin/dhclient-script\"'         \
        -D_PATH_DHCPD_CONF='\"/etc/dhcp/dhcpd.conf\"'               \
        -D_PATH_DHCLIENT_CONF='\"/etc/dhcp/dhclient.conf\"'"        &&

./configure --prefix=/usr                                           \
            --sysconfdir=/etc/dhcp                                  \
            --localstatedir=/var                                    \
            --with-srv-lease-file=/var/lib/dhcpd/dhcpd.leases       \
            --with-srv6-lease-file=/var/lib/dhcpd/dhcpd6.leases     \
            --with-cli-lease-file=/var/lib/dhclient/dhclient.leases \
            --with-cli6-lease-file=/var/lib/dhclient/dhclient6.leases &&
make -j1

This package does not come with a test suite.

If you only want to install the ISC DHCP client, issue the following commands as the root user:

make -C client install         &&
mv -v /usr/sbin/dhclient /sbin &&
install -v -m755 client/scripts/linux /sbin/dhclient-script

Skip to the section called “Client Configuration” in order to configure the client

If you only want to install the ISC DHCP server, issue the following command as the root user:

make -C server install

Skip to the section called “Server Configuration” in order to configure the server.

Alternatively, you can install whole package which includes the client, server, relay, static libraries and development headers by running the following commands as the root user:

make install                   &&
mv -v /usr/sbin/dhclient /sbin &&
install -v -m755 client/scripts/linux /sbin/dhclient-script

Configuring ISC DHCP

Config Files

/etc/dhcp/dhclient.conf and /etc/dhcp/dhcpd.conf

Client Configuration

Create a basic /etc/dhcp/dhclient.conf by running the following command as the root user:

install -vdm755 /etc/dhcp &&
cat > /etc/dhcp/dhclient.conf << "EOF"
# Begin /etc/dhcp/dhclient.conf
#
# Basic dhclient.conf(5)

#prepend domain-name-servers 127.0.0.1;
request subnet-mask, broadcast-address, time-offset, routers,
        domain-name, domain-name-servers, domain-search, host-name,
        netbios-name-servers, netbios-scope, interface-mtu,
        ntp-servers;
require subnet-mask, domain-name-servers;
#timeout 60;
#retry 60;
#reboot 10;
#select-timeout 5;
#initial-interval 2;

# End /etc/dhcp/dhclient.conf
EOF

See man 5 dhclient.conf for additional options.

Now create the /var/lib/dhclient directory which will contain DHCP Client leases by running the following command as the root user:

install -v -dm 755 /var/lib/dhclient

If you want to configure network interfaces at boot using dhclient, you need to install the dhclient@.service unit included in the blfs-systemd-units-20160602 package by running the following command as the root user:

make install-dhclient

Note

Make sure that you disable the systemd-networkd service or configure it not to manage the interfaces you want to manage with dhclient.

At this point you can test if dhclient is behaving as expected by running the following command as the root user:

systemctl start dhclient@eth0

To start dhclient on a specific interface at boot, enable the previously installed systemd unit by running the following command as the root user:

systemctl enable dhclient@eth0

Replace eth0 with the actual interface name.

Server Configuration

Note that you only need the DHCP server if you want to issue LAN addresses over your network. The DHCP client doesn't need the server in order to function properly.

Start with creating /etc/dhcp/dhcpd.conf by running the following command as the root user:

cat > /etc/dhcp/dhcpd.conf << "EOF"
# Begin /etc/dhcp/dhcpd.conf
#
# Example dhcpd.conf(5)

# Use this to enble / disable dynamic dns updates globally.
ddns-update-style none;

# option definitions common to all supported networks...
option domain-name "example.org";
option domain-name-servers ns1.example.org, ns2.example.org;

default-lease-time 600;
max-lease-time 7200;

# This is a very basic subnet declaration.
subnet 10.254.239.0 netmask 255.255.255.224 {
  range 10.254.239.10 10.254.239.20;
  option routers rtr-239-0-1.example.org, rtr-239-0-2.example.org;
}

# End /etc/dhcp/dhcpd.conf
EOF

Adjust the file to suit your needs. See man 5 dhcpd.conf for additional options.

Now create the /var/lib/dhcpd directory which will contain DHCP Server leases by running the following command as the root user:

install -v -dm 755 /var/lib/dhcpd

If you want to start the DHCP Server at boot, install the dhcpd.service unit included in the blfs-systemd-units-20160602 package:

make install-dhcpd

You will need to edit the /etc/default/dhcpd in order to set the interface on which dhcpd will serve the DHCP requests.

Installed Programs: dhclient, dhclient-script, dhcpd, dhcrelay and omshell

Installed Libraries: libdhcpctl.a and libomapi.a

Installed Directories: /etc/dhcp, /usr/include/dhcpctl, /usr/include/isc-dhcp, /usr/include/omapip, /var/lib/dhclient and /var/lib/dhcpd

Short Descriptions

dhclient	is the implementation of the DHCP client.
dhclient-script	is used by dhclient to (re)configure interfaces. It can make extra changes by invoking custom dhclient-{entry,exit}-hooks.
dhcpd	implements Dynamic Host Configuration Protocol (DHCP) and Internet Bootstrap Protocol (BOOTP) requests for network addresses.
dhcrelay	provides a means to accept DHCP and BOOTP requests on a subnet without a DHCP server and relay them to a DHCP server on another subnet.
omshell	provides an interactive way to connect to, query and possibly change the ISC DHCP Server's state via OMAPI, the Object Management API.

Last updated on 2017-08-30 19:55:44 -0700

Chapter 15. Networking Programs

These applications are generally client applications used to access the appropriate server across the building or across the world. Tcpwrappers and portmap are support programs for daemons that you may have running on your machine.

bridge-utils-1.6

Introduction to bridge-utils

The bridge-utils package contains a utility needed to create and manage bridge devices. This is useful in setting up networks for a hosted virtual machine (VM).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.kernel.org/pub/linux/utils/net/bridge-utils/bridge-utils-1.6.tar.xz
Download MD5 sum: 541ae1c50cc268056693608920e6c908
Download size: 32 KB
Estimated disk space required: 916 KB
Estimated build time: less than 0.1 SBU

bridge-utils Dependencies

Optional (to run tests)

Net-tools-CVS_20101030

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/bridge

Kernel Configuration

Enable the following options in the kernel configuration and recompile the kernel if necessary:

[*] Networking support --->            [CONFIG_NET]
      Networking options --->
        <*/M> 802.1d Ethernet Bridging [CONFIG_BRIDGE]

Installation of bridge-utils

Install bridge-utils by running the following commands:

autoconf                  &&
./configure --prefix=/usr &&
make

Testing the results requires running the six shell scripts in the tools/ directory. Two of the tests require two ethernet ports. Some tests will not preserve the current network configuration. See tests/README for details.

Now, as the root user:

make install

Configuring bridge-utils

Configuration Information

TBA

Installed Program: brctl

Installed Libraries: None

Installed Directories: None

Short Descriptions

brctl

is a program used to set up, maintain, and inspect the ethernet bridge configuration in the linux kernel.

Last updated on 2017-08-18 12:42:43 -0700

cifs-utils-6.7

Introduction to cifs-utils

The cifs-utils provides a means for mounting SMB/CIFS shares on a Linux system.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.samba.org/ftp/linux-cifs/cifs-utils/cifs-utils-6.7.tar.bz2
Download MD5 sum: af3ae1d27aca624c4daac5bf3eb0d4c1
Download size: 356 KB
Estimated disk space required: 3.1 MB
Estimated build time: less than 0.1 SBU

cifs-utils Dependencies

Required

Talloc-2.1.10

Optional

keyutils-1.5.10 (required to build PAM module), Linux-PAM-1.3.0, MIT Kerberos V5-1.15.1, Samba-4.6.7, and libcap-ng or libcap-2.25 with PAM

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/cifsutils

Kernel Configuration

Enable the following options in the kernel configuration and recompile the kernel if necessary:

File systems  --->
  [*] Network File Systems  --->                                      [CONFIG_NETWORK_FILESYSTEMS]
    <*/M> CIFS support (advanced network filesystem, SMBFS successor) [CONFIG_CIFS]

Installation of cifs-utils

Install cifs-utils by running the following commands:

autoreconf -fiv &&
./configure --prefix=/usr \
            --disable-pam &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--disable-pam: Do not build PAM support. Remove it and use --with-pamdir (see below), if Linux-PAM-1.3.0 is installed and you wish PAM support.

--with-pamdir=/lib/security: Install the PAM module in /lib/security.

Installed Programs: getcifsacl, mount.cifs and setcifsacl; optional: cifs.idmap, cifs.upcall and cifscreds

Installed Library: /usr/lib/cifs-utils/idmapwb.so and optionally PAM module /lib/security/pam_cifscreds.so

Installed Directory: /usr/lib/cifs-utils

Short Descriptions

cifs.idmap	is a userspace helper program for the linux CIFS client filesystem. There are a number of activities that the kernel cannot easily do itself. This program is a callout program that does these things for the kernel and then returns the result. It is not intended to be run from the command-line.
cifs.upcall	is a userspace helper program for the linux CIFS client filesystem. It is intended to be run when the kernel calls request-key for a particular key type. It is not intended to be run from the command-line.
cifscreds	is a tool for managing credentials (username and password) for the purpose of establishing sessions in multiuser mounts.
getcifsacl	is a userspace helper to display an ACL in a security descriptor for Common Internet File System (CIFS).
mount.cifs	mounts a Linux CIFS filesystem. It is usually invoked indirectly by the mount(8) command when using the "-t cifs" option.
setcifsacl	is intended to alter an ACL of a security descriptor for a file system object.

Last updated on 2017-08-24 15:03:00 -0700

NcFTP-3.2.6

Introduction to NcFTP

The NcFTP package contains a powerful and flexible interface to the Internet standard File Transfer Protocol. It is intended to replace or supplement the stock ftp program.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (FTP): ftp://ftp.ncftp.com/ncftp/ncftp-3.2.6-src.tar.xz
Download MD5 sum: 42d0f896d69a4d603ec097546444245f
Download size: 412 KB
Estimated disk space required: 6.6 MB
Estimated build time: 0.2 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/ncftp

Installation of NcFTP

There are two ways to build NcFTP. The first (and optimal) way builds most of the functionality as a shared library and then builds and installs the program linked against this library. The second method simply links all of the functionality into the binary statically. This doesn't make the dynamic library available for linking by other applications. You need to choose which method best suits you. Note that the second method does not create an entirely statically linked binary; only the libncftp parts are statically linked in, in this case. Be aware that building and using the shared library is covered by the Clarified Artistic License; however, developing applications that utilize the shared library is subject to a different license.

To install NcFTP using the first (and optimal) method, run the following commands:

./configure --prefix=/usr --sysconfdir=/etc &&
make -C libncftp shared &&
make

This package does not come with a test suite.

Now, as the root user:

make -C libncftp soinstall &&
make install

To install NcFTP using the second method (with the libncftp functionality linked in statically) run the following commands:

./configure --prefix=/usr --sysconfdir=/etc &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

make -C ... && make -C ...: These commands make and install the dynamic library libncftp which is then used to link against when compiling the main program.

Configuring NcFTP

Config Files

/etc/ncftp.* and ~/.ncftp/*; especially /etc/ncftp.prefs_v3 and ~/.ncftp/prefs_v3

Configuration Information

Most NcFTP configuration is done while in the program, and the configuration files are dealt with automatically. One exception to this is ~/.ncftp/prefs_v3. There are various options to alter in there, including:

yes-i-know-about-NcFTPd=yes

This disables the splash screen advertising the NcFTPd server.

There are other options in the prefs_v3 file. Most of these are self-explanatory. Global defaults can be set in /etc/ncftp.prefs_v3.

Installed Programs: ncftp, ncftpbatch, ncftpbookmarks, ncftpget, ncftpls, ncftpput, and ncftpspooler

Installed Library: libncftp.so

Installed Directories: None

Short Descriptions

ncftp	is a browser program for File Transfer Protocol.
ncftpbatch	is an individual batch FTP job processor.
ncftpbookmarks	is the NcFTP Bookmark Editor (NCurses-based).
ncftpget	is an internet file transfer program for scripts used to retrieve files.
ncftpls	is an internet file transfer program for scripts used to list files.
ncftpput	is an internet file transfer program for scripts used to transfer files.
ncftpspooler	is a global batch FTP job processor daemon.

Last updated on 2017-08-24 15:03:00 -0700

Net-tools-CVS_20101030

Introduction to Net-tools

The Net-tools package is a collection of programs for controlling the network subsystem of the Linux kernel.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://anduin.linuxfromscratch.org/BLFS/net-tools/net-tools-CVS_20101030.tar.gz
Download (FTP): ftp://anduin.linuxfromscratch.org/BLFS/net-tools/net-tools-CVS_20101030.tar.gz
Download MD5 sum: 6be14ed473cacdd68edeaa9605adc469
Download size: 222 KB
Estimated disk space required: 7.0 MB
Estimated build time: less than 0.1 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/net-tools-CVS_20101030-remove_dups-1.patch

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/net-tools

Installation of Net-tools

The instructions below automate the configuration process by piping yes to the make config command. If you wish to run the interactive configuration process (by changing the instruction to just make config), but you are not sure how to answer all the questions, then just accept the defaults. This will be just fine in the majority of cases. What you're asked here is a bunch of questions about which network protocols you've enabled in your kernel. The default answers will enable the tools from this package to work with the most common protocols: TCP, PPP, and several others. You still need to actually enable these protocols in the kernel—what you do here is merely tell the package to include support for those protocols in its programs, but it's up to the kernel to make the protocols available.

Note

This package has several unneeded protocols and hardware device specific functions that are obsolete. To only build the minimum needed for your system, skip the yes command and answer each question interactively. The minimum needed options are 'UNIX protocol family' and 'INET (TCP/IP) protocol family'.

The patch below cleans up the installation so that it does not overwrite the ifconfig and hostname programs that were installed in LFS.

Install Net-tools by running the following commands:

patch -Np1 -i ../net-tools-CVS_20101030-remove_dups-1.patch &&
sed -i '/#include <netinet\/ip.h>/d'  iptunnel.c &&

yes "" | make config &&
make

This package does not come with a test suite.

Now, as the root user:

make update

Command Explanations

sed -i '/#include <netinet\/ip.h>/d' iptunnel.c: This fixes build breakage with linux-4.8 headers.

yes "" | make config: Piping yes to make config skips the interactive configuration and accepts the defaults.

Installed Programs: arp, ipmaddr, iptunnel, mii-tool, nameif, netstat, plipconfig, rarp, route, and slattach

Installed Libraries: None

Installed Directories: None

Short Descriptions

arp	is used to manipulate the kernel's ARP cache, usually to add or delete an entry, or to dump the entire cache.
ipmaddr	adds, deletes and shows an interface's multicast addresses.
iptunnel	adds, changes, deletes and shows an interface's tunnels.
mii-tool	checks or sets the status of a network interface's Media Independent Interface (MII) unit.
nameif	names network interfaces based on MAC addresses.
netstat	is used to report network connections, routing tables, and interface statistics.
plipconfig	is used to fine tune the PLIP device parameters, to improve its performance.
rarp	is used to manipulate the kernel's RARP table.
route	is used to manipulate the IP routing table.
slattach	attaches a network interface to a serial line. This allows you to use normal terminal lines for point-to-point links to other computers.

Last updated on 2017-08-18 12:42:43 -0700

NFS-Utils-2.1.1

Introduction to NFS Utilities

The NFS Utilities package contains the userspace server and client tools necessary to use the kernel's NFS abilities. NFS is a protocol that allows sharing file systems over the network.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/nfs/nfs-utils-2.1.1.tar.bz2
Download MD5 sum: 1157abcfaa8670f990f408cf280426b4
Download size: 801 KB
Estimated disk space required: 16 MB
Estimated build time: 0.1 SBU

NFS Utilities Dependencies

Required

Optional

LVM2-2.02.171 (libdevmapper for NFSv4 support), libnfsidmap-0.26 (for NFSv4 support), libnsl-1.1.0 (for NIS client support), SQLite-3.20.0, MIT Kerberos V5-1.15.1 or libgssapi, and librpcsecgss (for GSS and RPC security support) and libcap-2.25 with PAM

Required (runtime)

rpcbind-0.2.4

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/nfs-utils

Kernel Configuration

Enable the following options in the kernel configuration (choose client and/or server support as appropriate) and recompile the kernel if necessary:

File systems  --->
  [*] Network File Systems  --->         [CONFIG_NETWORK_FILESYSTEMS]
    <*/M> NFS client support             [CONFIG_NFS_FS]
    <*/M> NFS server support             [CONFIG_NFSD]

Select the appropriate sub-options that appear when the above options are selected.

Note

In BLFS we assume that nfs v3 will be used. If the server offers nfs v4 (for linux, CONFIG_NFSD_V4) then auto-negotiation for v3 will fail and you will need to add nfsver=3 to the mount options. This also applies if that option is enabled in the client's kernel, for example in a distro trying to mount from a BLFS v3 server.

Installation of NFS Utilities

Before you compile the program, ensure that the nobody user and nogroup group have been created as done in the current LFS book. You can add them by running the following commands as the root user:

groupadd -g 99 nogroup &&
useradd -c "Unprivileged Nobody" -d /dev/null -g nogroup \
    -s /bin/false -u 99 nobody

Note

The classic uid and gid values are 65534 which is also -2 when interpreted as a signed 16-bit number. These values impact other files on some filesystems that do not have support for sparse files. The nobody and nogroup values are relatively arbitrary. The impact on a server is nil if the exports file is configured correctly. If it is misconfigured, an ls -l or ps listing will show a uid or gid number of 65534 instead of a name. The client uses nobody only as the user running rpc.statd.

Install NFS Utilities by running the following commands:

sed -i '/fcntl.h/a#include <stdint.h>' support/nsm/rpc.c &&

./configure --prefix=/usr          \
            --sysconfdir=/etc      \
            --sbindir=/sbin        \
            --without-tcp-wrappers \
            --disable-nfsv4        \
            --disable-gss &&
make

Now, as the root user:

make install                   &&
chmod u+w,go+r /sbin/mount.nfs &&
chown nobody.nogroup /var/lib/nfs

The tests for this package require that the package be installed and configured as specified below. In addition, the the daemon from rpcbind-0.2.4 needs to be running and the tests need to be run as the root user.

To test the results, issue, as root: make check.

Command Explanations

sed ... support/nsm/rpc.c: This sed it required to fix a build issue with glibc-2.26 and later.

--without-tcp-wrappers: This option is needed because TCP Wrappers is not in BLFS.

--disable-nfsv4: This allows the package to be built when libnfsidmap has not been installed.

--disable-gss: Disables support for RPCSEC GSS (RPC Security).

chown nobody.nogroup /var/lib/nfs: The rpc.statd program uses the ownership of this directory to set it's UID and GID. This command sets those to unprivileged entries.

Configuring NFS Utilities

Server Configuration

/etc/exports contains the exported directories on NFS servers. Refer to the exports.5 manual page for the syntax of this file. Also refer to the "NFS HowTo" available at http://nfs.sourceforge.net/nfs-howto/ for information on how to configure the servers and clients in a secure manner. For example, for sharing the /home directory over the local network, the following line may be added:

/home 192.168.0.0/24(rw,subtree_check,anonuid=99,anongid=99)

Note

Be sure to replace the directory, network address. and prefix above to match your network. The only space in the line above should be between the directory and the network address.

Systemd Units

Install the NFSv4 server units included in the blfs-systemd-units-20160602 package to start the server at boot.

make install-nfsv4-server

If you have disabled NFSv4 support, run the following command as the root user to omit the NFSv4 specific systemd units:

make install-nfs-server

You can edit the /etc/default/nfs-utils file to change the startup options for NFS daemons. Defaults should be fine for most use cases.

Client Configuration

/etc/fstab contains the directories that are to be mounted on the client. Alternately the partitions can be mounted by using the mount command with the proper options. To mount the /home and /usr partitions, add the following to the /etc/fstab:

<server-name>:/home  /home nfs   rw,_netdev 0 0
<server-name>:/usr   /usr  nfs   ro,_netdev 0 0

The options which can be used are specified in man 5 nfs. If both the client and server are running recent versions of linux, most of the options will be negotiated. You can specify either rw or ro, _netdev if the filesystem is to be automatically mounted at boot, or noauto (and perhaps user) for other filesystems.

If the fileserver is not running a recent version of linux, you may need to specifiy other options.

If you are using systemd, you may need to enable autofs v4 in your kernel, and add the option comment=systemd.automount. Some machines need this, because systemd tries to mount the external fs's before the network is up, others do not need it. An alternative is for root to run mount -a.

Systemd Units

Note

The following systemd units are not required if the nfs-server units are installed.

Install the units included in the blfs-systemd-units-20160602 package to start the client services at boot.

make install-nfs-client

Installed Programs: exportfs, mountstats, mount.nfs, mount.nfs4 (link to mount.nfs), nfsiostat, nfsstat, osd_login, rpc.mountd, rpc.nfsd, rpc.statd, rpcdebug, showmount, sm-notify, start-statd, umount.nfs (link to mount.nfs), and umount.nfs4 (link to mount.nfs)

Installed Libraries: None

Installed Directories: /var/lib/nfs

Short Descriptions

exportfs	maintains a list of NFS exported file systems.
mountstats	displays NFS client per-mount statistics.
mount.nfs	is used to mount a network share using NFS
mount.nfs4	is used to mount a network share using NFSv4
nfsiostat	reports input/output statistics for network filesystems.
nfsstat	displays statistics kept about NFS client and server activity.
osd_login	is a script that is a part of the autologin feature mandated by the pnfs-objects standard.
rpc.mountd	implements the NFS mount protocol on an NFS server.
rpc.nfsd	implements the user level part of the NFS service on the server.
rpc.statd	is used by the NFS file locking service. Run on both sides, client as well as server, when you want file locking enabled.
rpcdebug	sets or clears the kernel's NFS client and server debug flags.
showmount	displays mount information for an NFS server.
sm-notify	is used to send Network Status Monitor reboot messages.
start-statd	is a script called by nfsmount when mounting a filesystem with locking enabled, if statd does not appear to be running. It can be customised with whatever flags are appropriate for the site.
umount.nfs	is used to unmount a network share using NFS
umount.nfs4	is used to unmount a network share using NFSv4

Last updated on 2017-08-23 23:54:51 -0700

ntp-4.2.8p10

Introduction to ntp

The ntp package contains a client and server to keep the time synchronized between various computers over a network. This package is the official reference implementation of the NTP protocol.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.eecis.udel.edu/~ntp/ntp_spool/ntp4/ntp-4.2/ntp-4.2.8p10.tar.gz
Download MD5 sum: 745384ed0dedb3f66b33fe84d66466f9
Download size: 6.7 MB
Estimated disk space required: 102 MB (with tests)
Estimated build time: 0.7 SBU (with tests)

ntp Dependencies

Optional

libcap-2.25 with PAM, libevent-2.1.8, OpenSSL-1.1.0f, libedit, and libopts from AutoGen

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/ntp

Installation of ntp

There should be a dedicated user and group to take control of the ntpd daemon after it is started. Issue the following commands as the root user:

groupadd -g 87 ntp &&
useradd -c "Network Time Protocol" -d /var/lib/ntp -u 87 \
        -g ntp -s /bin/false ntp

The update-leap command needs to be fixed in order to run properly:

sed -e "s/https/http/"              \
    -e 's/"(\\S+)"/"?([^\\s"]+)"?/' \
    -i scripts/update-leap/update-leap.in

Install ntp by running the following commands:

./configure CFLAGS="-O2 -g -fPIC" \
            --prefix=/usr         \
            --bindir=/usr/sbin    \
            --sysconfdir=/etc     \
            --enable-linuxcaps    \
            --with-lineeditlibs=readline \
            --docdir=/usr/share/doc/ntp-4.2.8p10 &&
make

To test the results, issue: make check.

Now, as the root user:

make install &&
install -v -o ntp -g ntp -d /var/lib/ntp

Command Explanations

CFLAGS="-O2 -g -fPIC": This environment variable is necessary to generate Position Independent Code needed for use in the package libraries.

--bindir=/usr/sbin: This parameter places the administrative programs in /usr/sbin.

--enable-linuxcaps: ntpd is run as user ntp, so use Linux capabilities for non-root clock control.

--with-lineeditlibs=readline: This switch enables Readline support for ntpdc and ntpq programs. If omitted, libedit will be used if installed, otherwise no readline capabilites will be compiled.

Configuring ntp

Config Files

/etc/ntp.conf

Configuration Information

The following configuration file first defines various ntp servers with open access from different continents. Second, it creates a drift file where ntpd stores the frequency offset and a pid file to store the ntpd process ID. Third, it defines the location for the leap-second definition file /etc/ntp.leapseconds, that the update-leap script checks and updates, when necessary. This script can be run as a cron job and the ntp developers recommend a frequency of about three weeks for the updates. Since the documentation included with the package is sparse, visit the ntp website at http://www.ntp.org/ and http://www.pool.ntp.org/ for more information.

cat > /etc/ntp.conf << "EOF"
# Asia
server 0.asia.pool.ntp.org

# Australia
server 0.oceania.pool.ntp.org

# Europe
server 0.europe.pool.ntp.org

# North America
server 0.north-america.pool.ntp.org

# South America
server 2.south-america.pool.ntp.org

driftfile /var/lib/ntp/ntp.drift
pidfile   /var/run/ntpd.pid

leapfile  /etc/ntp.leapseconds
EOF

You may wish to add a “Security session”. For explanations, see https://www.eecis.udel.edu/~mills/ntp/html/accopt.html#restrict.

cat >> /etc/ntp.conf << "EOF"
# Security session
restrict    default limited kod nomodify notrap nopeer noquery
restrict -6 default limited kod nomodify notrap nopeer noquery

restrict 127.0.0.1
restrict ::1
EOF

Synchronizing the Time

There are two options. Option one is to run ntpd continuously and allow it to synchronize the time in a gradual manner. The other option is to run ntpd periodically (using cron) and update the time each time ntpd is scheduled.

If you choose Option one, then install the ntpd.service unit included in the blfs-systemd-units-20160602 package.

make install-ntpd

If you prefer to run ntpd periodically, add the following command to root's crontab:

ntpd -q

Installed Programs: calc_tickadj, ntp-keygen, ntp-wait, ntpd, ntpdate, ntpdc, ntpq, ntptime, ntptrace, sntp, tickadj and update-leap

Installed Libraries: None

Installed Directories: /usr/share/ntp, /usr/share/doc/ntp-4.2.8 and /var/lib/ntp

Short Descriptions

calc_tickadj	calculates optimal value for tick given ntp drift file.
ntp-keygen	generates cryptographic data files used by the NTPv4 authentication and identification schemes.
ntp-wait	is useful at boot time, to delay the boot sequence until ntpd has set the time.
ntpd	is a ntp daemon that runs in the background and keeps the date and time synchronized based on response from configured ntp servers. It also functions as a ntp server.
ntpdate	is a client program that sets the date and time based on the response from an ntp server. This command is deprecated.
ntpdc	is used to query the ntp daemon about its current state and to request changes in that state.
ntpq	is a utility program used to monitor ntpd operations and determine performance.
ntptime	reads and displays time-related kernel variables.
ntptrace	traces a chain of ntp servers back to the primary source.
sntp	is a Simple Network Time Protocol (SNTP) client.
tickadj	reads, and optionally modifies, several timekeeping-related variables in older kernels that do not have support for precision timekeeping.
update-leap	is a script to verify and, if necessary, update the leap-second definition file.

Last updated on 2017-08-20 15:06:11 -0700

rpcbind-0.2.4

Introduction to rpcbind

The rpcbind program is a replacement for portmap. It is required for import or export of Network File System (NFS) shared directories.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/rpcbind/rpcbind-0.2.4.tar.bz2
Download MD5 sum: cf10cd41ed8228fc54c316191c1f07fe
Download size: 120 KB
Estimated disk space required: 1.6 MB
Estimated build time: less than 0.1 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/rpcbind-0.2.4-vulnerability_fixes-1.patch

rpcbind Dependencies

Required

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/rpcbind

Installation of rpcbind

There should be a dedicated user and group to take control of the rpcbind daemon after it is started. Issue the following commands as the root user:

groupadd -g 28 rpc &&
useradd -c "RPC Bind Daemon Owner" -d /dev/null -g rpc \
        -s /bin/false -u 28 rpc

In order to get rpcbind to work properly, first fix the package to use correct service name:

sed -i "/servname/s:rpcbind:sunrpc:" src/rpcbind.c

Install rpcbind by running the following commands:

patch -Np1 -i ../rpcbind-0.2.4-vulnerability_fixes-1.patch &&

./configure --prefix=/usr       \
            --bindir=/sbin      \
            --enable-warmstarts \
            --with-rpcuser=rpc  &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--with-rpcuser=rpc: This switch is used so the rpcbind daemon will run as an unprivileged user instead of the root user.

Configuring rpcbind

Systemd Unit

Install the rpcbind.service unit included in the blfs-systemd-units-20160602 package.

make install-rpcbind

Installed Program: rpcbind and rpcinfo

Installed Libraries: None

Installed Directories: None

Short Descriptions

rpcbind	is a server that converts RPC program numbers into universal addresses. It must be running on the host to be able to make RPC calls on a server on that machine.
rpcinfo	makes an RPC call to an RPC server and reports data according to the requested options.

Last updated on 2017-08-18 12:42:43 -0700

rsync-3.1.2

Introduction to rsync

The rsync package contains the rsync utility. This is useful for synchronizing large file archives over a network.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.samba.org/ftp/rsync/src/rsync-3.1.2.tar.gz
Download MD5 sum: 0f758d7e000c0f7f7d3792610fad70cb
Download size: 872 KB
Estimated disk space required: 11 MB (with tests - additional 45 MB for HTML API documentation)
Estimated build time: 0.5 SBU (with tests)

rsync Dependencies

Installation of rsync

For security reasons, running the rsync server as an unprivileged user and group is encouraged. If you intend to run rsync as a daemon, create the rsyncd user and group with the following commands issued by the root user:

groupadd -g 48 rsyncd &&
useradd -c "rsyncd Daemon" -d /home/rsync -g rsyncd \
    -s /bin/false -u 48 rsyncd

Install rsync by running the following commands:

./configure --prefix=/usr --without-included-zlib &&
make

If you have Doxygen-1.8.13 installed and wish to build HTML API documentation, issue doxygen.

To test the results, issue: make check.

Now, as the root user:

make install

If you built the documentation, install it using the following commands as the root user:

install -v -m755 -d          /usr/share/doc/rsync-3.1.2/api &&
install -v -m644 dox/html/*  /usr/share/doc/rsync-3.1.2/api

Command Explanations

--without-included-zlib: This switch enables compilation with system-installed zlib library.

Configuring rsync

Config Files

/etc/rsyncd.conf

Configuration Information

For client access to remote files, you may need to install the OpenSSH-7.5p1 package to connect to the remote server.

This is a simple download-only configuration to set up running rsync as a server. See the rsyncd.conf(5) man-page for additional options (i.e., user authentication).

cat > /etc/rsyncd.conf << "EOF"
# This is a basic rsync configuration file
# It exports a single module without user authentication.

motd file = /home/rsync/welcome.msg
use chroot = yes

[localhost]
    path = /home/rsync
    comment = Default rsync module
    read only = yes
    list = yes
    uid = rsyncd
    gid = rsyncd

EOF

You can find additional configuration information and general documentation about rsync at http://rsync.samba.org/documentation.html.

Systemd Unit

Note that you only want to start the rsync server if you want to provide an rsync archive on your local machine. You don't need this unit to run the rsync client.

Install the rsyncd.service unit included in the blfs-systemd-units-20160602 package.

make install-rsyncd

Note

This package comes with two types of units: A service file and a socket file. The service file will start rsync daemon once at boot and it will keep running until the system shuts down. The socket file will make systemd listen on rsync port (Default 873, needs to be edited for anything else) and will start rsync daemon when something tries to connect to that port and stop the daemon when the connection is terminated. This is called socket activation and is analogous to using {,x}inetd on a SysVinit based system.

By default, the first method is used - rsync daemon is started at boot and stopped at shutdown. If the socket method is desired, you need to run as the root user:

systemctl stop rsyncd &&
systemctl disable rsyncd &&
systemctl enable rsyncd.socket &&
systemctl start rsyncd.socket

Note that socket method is only useful for remote backups. For local backups you'll need the service method.

Installed Program: rsync

Installed Libraries: None

Installed Directories: Optionally, /usr/share/doc/rsync-3.1.2

Short Descriptions

rsync

is a replacement for rcp (and scp) that has many more features. It uses the “rsync algorithm” which provides a very fast method of syncing remote files. It does this by sending just the differences in the files across the link, without requiring that both sets of files are present at one end of the link beforehand.

Last updated on 2017-08-20 15:06:11 -0700

Samba-4.6.7

Introduction to Samba

The Samba package provides file and print services to SMB/CIFS clients and Windows networking to Linux clients. Samba can also be configured as a Windows Domain Controller replacement, a file/print server acting as a member of a Windows Active Directory domain and a NetBIOS (rfc1001/1002) nameserver (which among other things provides LAN browsing support).

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.samba.org/ftp/samba/stable/samba-4.6.7.tar.gz
Download MD5 sum: c6ee5c766016d59908c8fb672fbbd445
Download size: 21 MB
Estimated disk space required: 566 MB (add 371 MB for quicktest, add up to 1.6 GB additional for developer tests)
Estimated build time: 8.5 SBU (add 4.2 SBU for quicktest, and up to 280 SBU to run developer tests)

Samba Dependencies

Required

Optional

Avahi-0.7, Cups-2.2.4, Cyrus SASL-2.1.26, GDB-8.0, git-2.14.1, GnuPG-2.1.23 (required for ADS and testsuite), GnuTLS-3.5.14, libarchive-3.3.2, libcap-2.25 with PAM, libgcrypt-1.8.0, Linux-PAM-1.3.0, MIT Kerberos V5-1.15.1, NSS-3.32, popt-1.16, Talloc-2.1.10 (included), Vala-0.36.4, Valgrind-3.13.0 (optionally used by the test suite), xfsprogs-4.12.0, ctdb (included), Gamin, Heimdal (currently not working), libaio, libunwind, ldb (included), M2Crypto (required for ADS), OpenAFS, PyGPGME (recommended for ADS), tevent (included), and tdb (included)

Optional (for the Developer Test Suite)

Install in listed order: six, argparse, extras, py, enum34, hypothesis, pytest, coverage, pytest-cov, doctools, unittest2, testtools, fixtures, python-mimeparse, contextlib2, traceback2, linecache2, testscenarios, testresources, virtualenv, pbr, and python-subunit

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/samba4

Installation of Samba

Fix a test that always fails:

echo "^samba4.rpc.echo.*on.*ncacn_np.*with.*object.*nt4_dc" >> selftest/knownfail

Install Samba by running the following commands:

./configure                            \
    --prefix=/usr                      \
    --sysconfdir=/etc                  \
    --localstatedir=/var               \
    --with-piddir=/run/samba           \
    --with-pammodulesdir=/lib/security \
    --enable-fhs                       \
    --without-ad-dc                    \
    --enable-selftest                  &&
make

To test the results, as the root user, issue: make quicktest. The test suite will produce lines that look like failures, but these are innocuous. The last few lines of output should report "ALL OK" for a good test run. A summary of any failures can be found in ./st/summary.

Note

Additionally, developer test suites are available. If you've installed the optional python modules above, you can run these tests with make test. It is not recommended for the average builder at nearly 100 SBU, and you should expect ~80 errors and ~30 failures from the 3000+ tests.

Now, as the root user:

make install &&

mv -v /usr/lib/libnss_win{s,bind}.so*   /lib                       &&
ln -v -sf ../../lib/libnss_winbind.so.2 /usr/lib/libnss_winbind.so &&
ln -v -sf ../../lib/libnss_wins.so.2    /usr/lib/libnss_wins.so    &&

install -v -m644    examples/smb.conf.default /etc/samba &&

mkdir -pv /etc/openldap/schema                        &&

install -v -m644    examples/LDAP/README              \
                    /etc/openldap/schema/README.LDAP  &&

install -v -m644    examples/LDAP/samba*              \
                    /etc/openldap/schema              &&

install -v -m755    examples/LDAP/{get*,ol*} \
                    /etc/openldap/schema

Command Explanations

--enable-fhs: Assigns all other file paths in a manner compliant with the Filesystem Hierarchy Standard (FHS).

--without-ad-dc: Disable Active Directory Domain Controller functionality. See Setup a Samba Active Directory Domain Controller for detailed information. Remove this switch if you've installed the Python modules needed for ADS support. Note that BLFS does not provide a samba bootscript for an Active Directory domain controller.

--with-selftest-prefix=SELFTEST_PREFIX: This option specifies the test suite work directory (default=./st).

mv -v /usr/lib/libnss_win{s,bind}.so* /lib: The nss libraries are installed in /usr/lib by default. Move them to /lib.

ln -v -sf ../../lib/libnss_winbind.so.2 /usr/lib/libnss_winbind.so and ln -v -sf ../../lib/libnss_wins.so.2 /usr/lib/libnss_wins.so: These symlinks are required when applications build against these libraries.

install -v -m644 examples/LDAP/* /etc/openldap/schema: These commands are used to copy sample Samba schemas to the OpenLDAP schema directory.

install -v -m644 ../examples/smb.conf.default /etc/samba: This copies a default smb.conf file into /etc/samba. This sample configuration will not work until you copy it to /etc/samba/smb.conf and make the appropriate changes for your installation. See the configuration section for minimum values which must be set.

Configuring Samba

Config Files

/etc/samba/smb.conf

Printing to SMB Clients

If you use CUPS for print services, and you wish to print to a printer attached to an SMB client, you need to create an SMB backend device. To create the device, issue the following command as the root user:

ln -v -sf /usr/bin/smbspool /usr/lib/cups/backend/smb

Configuration Information

Due to the complexity and the many various uses for Samba, complete configuration for all the package's capabilities is well beyond the scope of the BLFS book. This section provides instructions to configure the /etc/samba/smb.conf file for two common scenarios. The complete contents of /etc/samba/smb.conf will depend on the purpose of Samba installation.

Note

You may find it easier to copy the configuration parameters shown below into an empty /etc/samba/smb.conf file instead of copying and editing the default file as mentioned in the “Command Explanations” section. How you create/edit the /etc/samba/smb.conf file will be left up to you. Do ensure the file is only writeable by the root user (mode 644).

Scenario 1: Minimal Standalone Client-Only Installation

Choose this variant if you only want to transfer files using smbclient, mount Windows shares and print to Windows printers, and don't want to share your files and printers to Windows machines.

A /etc/samba/smb.conf file with the following three parameters is sufficient:

[global]
    workgroup = MYGROUP
    dos charset = cp850
    unix charset = ISO-8859-1

The values in this example specify that the computer belongs to a Windows workgroup named “MYGROUP”, uses the “cp850” character set on the wire when talking to MS-DOS and MS Windows 9x, and that the filenames are stored in the “ISO-8859-1” encoding on the disk. Adjust these values appropriately for your installation. The “unix charset” value must be the same as the output of locale charmap when executed with the LANG variable set to your preferred locale, otherwise the ls command may not display correct filenames of downloaded files.

There is no need to run any Samba servers in this scenario, thus you don't need to install the provided bootscripts.

Scenario 2: Standalone File/Print Server

Choose this variant if you want to share your files and printers to Windows machines in your workgroup in addition to the capabilities described in Scenario 1.

In this case, the /etc/samba/smb.conf.default file may be a good template to start from. Also add “dos charset” and “unix charset” parameters to the “[global]” section as described in Scenario 1 in order to prevent filename corruption. For security reasons, you may wish to define path = /home/alice/shared-files, assuming your user name is alice and you only want to share the files in that directory, instead of your entire home. Then, replace homes by shared-files and change also the “comment” if used the configuration file below or the /etc/samba/smb.conf.default to create yours.

The following configuration file creates a separate share for each user's home directory and also makes all printers available to Windows machines:

[global]
    workgroup = MYGROUP
    dos charset = cp850
    unix charset = ISO-8859-1

[homes]
    comment = Home Directories
    browseable = no
    writable = yes

[printers]
    comment = All Printers
    path = /var/spool/samba
    browseable = no
    guest ok = no
    printable = yes

Other parameters you may wish to customize in the “[global]” section include:

    server string =
    security =
    hosts allow =
    load printers =
    log file =
    max log size =
    socket options =
    local master =

Reference the comments in the /etc/samba/smb.conf.default file for information regarding these parameters.

Since the smbd and nmbd daemons are needed in this case, install the samba bootscript. Be sure to run smbpasswd (with the -a option to add users) to enable and set passwords for all accounts that need Samba access. Using the default Samba passdb backend, any user you attempt to add will also be required to exist in the /etc/passwd file.

Advanced Requirements

More complex scenarios involving domain control or membership are possible. Such setups are advanced topics and cannot be adequately covered in BLFS. Many complete books have been written on these topics alone. Note that in some domain membership scenarios, the winbindd daemon and the corresponding bootscript are needed.

There is quite a bit of documentation available which covers many of these advanced configurations. Point your web browser to the links below to view some of the documentation included with the Samba package:

Using Samba, 2nd Edition; a popular book published by O'Reilly http://www.samba.org/samba/docs/using_samba/toc.html
The Official Samba HOWTO and Reference Guide http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/
Samba-3 by Example http://www.samba.org/samba/docs/man/Samba-Guide/

Systemd Units

The default Samba installation uses the nobody user for guest access to the server. This can be overridden by setting the guest account = parameter in the /etc/samba/smb.conf file. If you utilize the guest account = parameter, ensure this user exists in the /etc/passwd file.

To start the Samba daemons at boot, install the systemd units from the blfs-systemd-units-20160602 package by running the following command as the root user:

make install-samba

To start the winbindd daemon at boot, install the systemd unit from the blfs-systemd-units-20160602 package by running the following command as the root user:

make install-winbindd

Note

This package comes with two types of units: A service file and a socket file. The service file will start the smbd daemon once at boot and it will keep running until the system shuts down. The socket file will make systemd listen on the smbd port (Default 445, needs to be edited for anything else) and will start the smbd daemon when something tries to connect to that port and stop the daemon when the connection is terminated. This is called socket activation and is analogous to using {,x}inetd on a SysVinit based system.

By default, the first method is used - the smbd daemon is started at boot and stopped at shutdown. If the socket method is desired, you need to run the following commands as the root user:

systemctl stop smbd &&
systemctl disable smbd &&
systemctl enable smbd.socket &&
systemctl start smbd.socket

Note that only the smbd daemon can be socket activated.

Installed Programs: cifsdd, dbwrap_tool, eventlogadm, findsmb,gentest, ldbadd, ldbdel, ldbedit, ldbmodify, ldbrename, ldbsearch, locktest, masktest, mvxattr, ndrdump, net, nmbd, nmblookup, ntlm_auth, oLschema2ldif, pdbedit, pidl, profiles, regdiff, regpatch, regshell, regtree, rpcclient, samba, samba_dnsupdate, samba_kcc, samba-regedit, samba_spnupdate, samba-tool, samba_upgradedns, sharesec, smbcacls, smbclient, smbcontrol, smbcquotas, smbd, smbget, smbpasswd, smbspool, smbstatus, smbtar, smbtorture, smbtree, tdbbackup, tdbdump, tdbrestore, tdbtool, testparm, wbinfo, and winbindd

Installed Libraries: libdcerpc-binding.so, libdcerpc-samr.so, libdcerpc-server.so, libdcerpc.so, libndr-krb5pac.so, libndr-nbt.so, libndr.so, libndr-standard.so, libnetapi.so, libnss_winbind.so, libnss_wins.so, libsamba-credentials.so, libsamba-errors.so, libsamba-hostconfig.so, libsamba-passdb.so, libsamba-policy.so, libsamba-util.so, libsamdb.so, libsmbclient.so, libsmbconf.so, libsmbldap.so, libtevent-util.so, libwbclient.so, and winbind_krb5_locator.so; the pam_winbind.so PAM library; and assorted character set, filesystem and support modules under /usr/lib/{python2.7,samba}

Installed Directories: /etc/samba, /run/samba, /usr/include/samba-4.0, /usr/lib/perl5/vendor_perl/5.x.y/Parse/Pidl/{Samba{3,4},Wireshark}, /usr/lib/python2.7/site-packages/samba, /usr/{lib,share}/samba, and /var/{cache,lib,lock,log,run}/samba

Short Descriptions

cifsdd	is the dd command for SMB.
dbwrap_tool	is used to read and manipulate TDB/CTDB databases using the dbwrap interface.
eventlogadm	is used to write records to eventlogs from STDIN, add the specified source and DLL eventlog registry entries and display the active eventlog names (from `smb.conf`).
findsmb	is used to list info about machines that respond to SMB name queries on a subnet.
gentest	is used to run random generic SMB operations against two SMB servers and show the differences in behavior.
ldbadd	is a command-line utility for adding records to an LDB database.
ldbdel	is a command-line program for deleting LDB database records.
ldbedit	allows you to edit LDB databases using your preferred editor.
ldbmodify	allows you to modify records in an LDB database.
ldbrename	allows you to edit LDB databases using your preferred editor.
ldbsearch	searches an LDB database for records matching a specified expression.
locktest	is used to find differences in locking between two SMB servers.
masktest	is used to find differences in wildcard matching between Samba's implementation and that of a remote server.
mvxattr	is used to recursively rename extended attributes.
ndrdump	is a DCE/RPC Packet Parser and Dumper.
net	is a tool for administration of Samba and remote CIFS servers, similar to the net utility for DOS/Windows.
nmbd	is the Samba NetBIOS name server.
nmblookup	is used to query NetBIOS names and map them to IP addresses.
ntlm_auth	is a tool to allow external access to Winbind's NTLM authentication function.
oLschema2ldif	converts LDAP schema's to LDB-compatible LDIF.
pdbedit	is a tool used to manage the SAM database.
pidl	is an IDL (Interface Definition Language) compiler written in Perl.
profiles	is a utility that reports and changes SIDs in Windows registry files. It currently only supports Windows NT.
regdiff	is a Diff program for Windows registry files.
regpatch	applies registry patches to registry files.
regshell	is a Windows registry file browser using readline.
regtree	is a text-mode registry viewer.
rpcclient	is used to execute MS-RPC client side functions.
samba	is a server to provide AD and SMB/CIFS services to clients.
samba_dnsupdate	is used to update our DNS names using TSIG-GSS.
samba_kcc	is a script used to compute your KCC (Knowledge Consistency Checker) topology.
samba-regedit	is a ncurses based tool to manage the Samba registry.
samba_spnupdate	is a script to update the servicePrincipalName names from spn_update_list.
samba-tool	is the main Samba administration tool.
samba_upgradedns	is a Unix SMB/CIFS implementation.
sharesec	manipulates share ACL permissions on SMB file shares.
smbcacls	is used to manipulate Windows NT access control lists.
smbclient	is a SMB/CIFS access utility, similar to FTP.
smbcontrol	is used to control running smbd, nmbd and winbindd daemons.
smbcquotas	is used to manipulate Windows NT quotas on SMB file shares.
smbd	is the main Samba daemon which provides SMB/CIFS services to clients.
smbget	is a simple utility with wget-like semantics, that can download files from SMB servers. You can specify the files you would like to download on the command-line.
smbpasswd	changes a user's Samba password.
smbspool	sends a print job to an SMB printer.
smbstatus	reports current Samba connections.
smbtar	is a shell script used for backing up SMB/CIFS shares directly to Linux tape drives or a file.
smbtorture	is a testsuite that runs several tests against a SMB server.
smbtree	is a text-based SMB network browser.
tdbbackup	is a tool for backing up or validating the integrity of Samba `.tdb` files.
tdbdump	is a tool used to print the contents of a Samba `.tdb` file.
tdbrestore	is a tool for creating a Samba `.tdb` file out of a ntdbdump.
tdbtool	is a tool which allows simple database manipulation from the command line.
testparm	checks an `smb.conf` file for proper syntax.
wbinfo	queries a running winbindd daemon.
winbindd	resolves names from Windows NT servers.
`libnss_winbind.so`	provides Name Service Switch API functions for resolving names from NT servers.
`libnss_wins.so`	provides API functions for Samba's implementation of the Windows Internet Naming Service.
`libnetapi.so`	provides the API functions for the administration tools used for Samba and remote CIFS servers.
`libsmbclient.so`	provides the API functions for the Samba SMB client tools.
`libwbclient.so`	provides API functions for Windows domain client services.

Last updated on 2017-08-20 18:24:53 -0700

Wget-1.19.1

Introduction to Wget

The Wget package contains a utility useful for non-interactive downloading of files from the Web.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://ftp.gnu.org/gnu/wget/wget-1.19.1.tar.xz
Download (FTP): ftp://ftp.gnu.org/gnu/wget/wget-1.19.1.tar.xz
Download MD5 sum: d30d82186b93fcabb4116ff513bfa9bd
Download size: 2.0 MB
Estimated disk space required: 32 MB (with tests)
Estimated build time: 0.4 SBU (with tests)

Wget Dependencies

Optional

GnuTLS-3.5.14, GPGME-1.9.0, libidn-1.33, PCRE-8.41, Valgrind-3.13.0 (optional for the test suite), IO::Socket::SSL, HTTP::Daemon (both required for the test suite), and libpsl

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/wget

Installation of Wget

Install Wget by running the following commands:

./configure --prefix=/usr      \
            --sysconfdir=/etc  \
            --with-ssl=openssl &&
make

To test the results, issue: make check. The HTTPS tests fail if valgrind is enabled.

Now, as the root user:

make install

Command Explanations

--sysconfdir=/etc: This relocates the configuration file from /usr/etc to /etc.

--with-ssl=openssl: This allows the program to use OpenSSL-1.1.0f instead of GnuTLS-3.5.14.

--enable-valgrind-tests: This allows the tests to be run under valgrind.

Configuring Wget

Config Files

/etc/wgetrc and ~/.wgetrc

Installed Program: wget

Installed Libraries: None

Installed Directories: None

Short Descriptions

wget

retrieves files from the Web using the HTTP, HTTPS and FTP protocols. It is designed to be non-interactive, for background or unattended operations.

Last updated on 2017-08-16 21:41:37 -0700

Wireless Tools-29

Introduction to Wireless Tools

The Wireless Extension (WE) is a generic API in the Linux kernel allowing a driver to expose configuration and statistics specific to common Wireless LANs to user space. A single set of tools can support all the variations of Wireless LANs, regardless of their type as long as the driver supports Wireless Extensions. WE parameters may also be changed on the fly without restarting the driver (or Linux).

The Wireless Tools (WT) package is a set of tools allowing manipulation of the Wireless Extensions. They use a textual interface to support the full Wireless Extension.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/wireless_tools.29.tar.gz
Download MD5 sum: e06c222e186f7cc013fd272d023710cb
Download size: 288 KB
Estimated disk space required: 2.0 MB
Estimated build time: less than 0.1 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/wireless_tools-29-fix_iwlist_scanning-1.patch

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/WirelessTools

Kernel Configuration

To use Wireless Tools, the kernel must have the appropriate drivers and other support available. The appropriate bus must also be available. For many laptops, the PCMCIA bus (CONFIG_PCCARD) needs to be built. In some cases, this bus support will also need to be built for embedded wireless cards. The appropriate bridge support also needs to be built. For many modern laptops, the CardBus host bridge (CONFIG_YENTA) will be needed.

In addition to the bus, the actual driver for the specific wireless card must also be available. There are many wireless cards and they don't all work with Linux. The first place to look for card support is the kernel. The drivers are located in Device Drivers → Network Device Support → Wireless LAN (non-hamradio). There are also external drivers available for some very common cards. For more information, look at the user notes.

After the correct drivers are loaded, the interface will appear in /proc/net/wireless.

Installation of Wireless Tools

First, apply a patch that fixes a problem when numerous networks available:

patch -Np1 -i ../wireless_tools-29-fix_iwlist_scanning-1.patch

To install Wireless Tools, use the following commands:

make

This package does not come with a test suite.

Now, as the root user:

make PREFIX=/usr INSTALL_MAN=/usr/share/man install

Command Explanations

INSTALL_MAN=/usr/share/man: Install manual pages in /usr/share/man instead of /usr/man

Installed Programs: ifrename, iwconfig, iwevent, iwgetid, iwlist, iwpriv, and iwspy

Installed Library: libiw.so

Installed Directories: None

Short Descriptions

ifrename	renames network interfaces based on various static criteria.
iwconfig	configures a wireless network interface.
iwevent	displays wireless events generated by drivers and setting changes.
iwgetid	reports ESSID, NWID or AP/Cell Address of wireless networks.
iwlist	gets detailed wireless information from a wireless interface.
iwpriv	configures optional (private) parameters of a wireless network interface.
iwspy	gets wireless statistics from specific node.
`libiw.so`	contains functions required by the wireless programs and provides an API for other programs.

Last updated on 2017-08-23 21:43:54 -0700

wpa_supplicant-2.6

Introduction to WPA Supplicant

WPA Supplicant is a Wi-Fi Protected Access (WPA) client and IEEE 802.1X supplicant. It implements WPA key negotiation with a WPA Authenticator and Extensible Authentication Protocol (EAP) authentication with an Authentication Server. In addition, it controls the roaming and IEEE 802.11 authentication/association of the wireless LAN driver. This is useful for connecting to a password protected wireless access point.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://w1.fi/releases/wpa_supplicant-2.6.tar.gz
Download MD5 sum: 091569eb4440b7d7f2b4276dbfc03c3c
Download size: 2.6 MB
Estimated disk space required: 36 MB
Estimated build time: 0.4 SBU (includes optional gui)

WPA Supplicant Dependencies

Optional

dbus-1.10.22, libxml2-2.9.4, and Qt-5.9.1

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/wpa_supplicant

Kernel Configuration

Enable the following options in the kernel configuration as well as specific device drivers for your hardware and recompile the kernel if necessary:

[*] Networking support  --->                              [CONFIG_NET]
  [*] Wireless  --->                                      [CONFIG_WIRELESS]
    <*/M> cfg80211 - wireless configuration API           [CONFIG_CFG80211]
    [*]     cfg80211 wireless extensions compatibility    [CONFIG_CFG80211_WEXT]
    <*/M> Generic IEEE 802.11 Networking Stack (mac80211) [CONFIG_MAC80211]
Device Drivers  --->
  [*] Network device support  --->                        [CONFIG_NETDEVICES]
    [*] Wireless LAN  --->                                [CONFIG_WLAN]

Open the submenu and select the options that support your hardware: lspci from pciutils-3.5.5 can be used to view your hardware configuration.

Installation of WPA Supplicant

First you will need to create an initial configuration file for the build process. You can read wpa_supplicant/README and wpa_supplicant/defconfig for the explanation of the following options as well as other options that can be used. Create a build configuration file that should work for standard WiFi setups by running the following command:

cat > wpa_supplicant/.config << "EOF"
CONFIG_BACKEND=file
CONFIG_CTRL_IFACE=y
CONFIG_DEBUG_FILE=y
CONFIG_DEBUG_SYSLOG=y
CONFIG_DEBUG_SYSLOG_FACILITY=LOG_DAEMON
CONFIG_DRIVER_NL80211=y
CONFIG_DRIVER_WEXT=y
CONFIG_DRIVER_WIRED=y
CONFIG_EAP_GTC=y
CONFIG_EAP_LEAP=y
CONFIG_EAP_MD5=y
CONFIG_EAP_MSCHAPV2=y
CONFIG_EAP_OTP=y
CONFIG_EAP_PEAP=y
CONFIG_EAP_TLS=y
CONFIG_EAP_TTLS=y
CONFIG_IEEE8021X_EAPOL=y
CONFIG_IPV6=y
CONFIG_LIBNL32=y
CONFIG_PEERKEY=y
CONFIG_PKCS12=y
CONFIG_READLINE=y
CONFIG_SMARTCARD=y
CONFIG_WPS=y
CFLAGS += -I/usr/include/libnl3
EOF

If you wish to use WPA Supplicant with NetworkManager-1.8.2, make sure that you have installed dbus-1.10.22 and libxml2-2.9.4, then add the following options to the WPA Supplicant build configuration file by running the following command:

cat >> wpa_supplicant/.config << "EOF"
CONFIG_CTRL_IFACE_DBUS=y
CONFIG_CTRL_IFACE_DBUS_NEW=y
CONFIG_CTRL_IFACE_DBUS_INTRO=y
EOF

Install WPA Supplicant by running the following commands:

cd wpa_supplicant &&
make BINDIR=/sbin LIBDIR=/lib

If you have installed Qt-5.9.1 and wish to build the WPA Supplicant GUI program, run the following commands:

Note

The following directory name is labelled qt4, but is compatible with Qt-5.9.1.

pushd wpa_gui-qt4 &&
qmake wpa_gui.pro &&
make &&
popd

This package does not come with a test suite.

Now, as the root user:

install -v -m755 wpa_{cli,passphrase,supplicant} /sbin/ &&
install -v -m644 doc/docbook/wpa_supplicant.conf.5 /usr/share/man/man5/ &&
install -v -m644 doc/docbook/wpa_{cli,passphrase,supplicant}.8 /usr/share/man/man8/

Install the systemd support files by running the following command as the root user:

install -v -m644 systemd/*.service /lib/systemd/system/

If you have built WPA Supplicant with D-Bus support, you will need to install D-Bus configuration files. Install them by running the following commands as the root user:

install -v -m644 dbus/fi.{epitest.hostap.WPASupplicant,w1.wpa_supplicant1}.service \
                 /usr/share/dbus-1/system-services/ &&
install -v -d -m755 /etc/dbus-1/system.d &&
install -v -m644 dbus/dbus-wpa_supplicant.conf \
                 /etc/dbus-1/system.d/wpa_supplicant.conf

Additionally, enable the wpa_supplicant.service so that systemd can properly activate the D-Bus service. Note that the per-connection service and the D-Bus service cannot be enabled at the same time. Run the following command as the root user:

systemctl enable wpa_supplicant

If you have built the WPA Supplicant GUI program, install it by running the following commands as the root user:

install -v -m755 wpa_gui-qt4/wpa_gui /usr/bin/ &&
install -v -m644 doc/docbook/wpa_gui.8 /usr/share/man/man8/ &&
install -v -m644 wpa_gui-qt4/wpa_gui.desktop /usr/share/applications/ &&
install -v -m644 wpa_gui-qt4/icons/wpa_gui.svg /usr/share/pixmaps/

Note

You will need to restart the system D-Bus daemon before you can use the WPA Supplicant D-Bus interface.

Note

This package installs desktop files into the /usr/share/applications hierarchy and you can improve system performance and memory usage by updating /usr/share/applications/mimeinfo.cache. To perform the update you must have desktop-file-utils-0.23 installed and issue the following command as the root user:

update-desktop-database

Configuring wpa_supplicant

Config File

/etc/wpa_supplicant/wpa_supplicant-*.conf

Configuration Information

To connect to an access point that uses a password, you need to put the pre-shared key in /etc/wpa_supplicant/wpa_supplicant-wifi0.conf. SSID is the string that the access point/router transmits to identify itself. Run the following command as the root user:

install -v -dm755 /etc/wpa_supplicant &&
wpa_passphrase SSID SECRET_PASSWORD > /etc/wpa_supplicant/wpa_supplicant-wifi0.conf

/etc/sysconfig/wpa_supplicant-wifi0.conf can hold the details of several access points. When wpa_supplicant is started, it will scan for the SSIDs it can see and choose the appropriate password to connect.

If you want to connect to an access point that isn't password protected, put an entry like this in /etc/sysconfig/wpa_supplicant-wifi0.conf. Replace "Some-SSID" with the SSID of the access point/router.

network={
  ssid="Some-SSID"
  key_mgmt=NONE
}

Connecting to a new access point that is not in the configuration file can be accomplished manually via the command line or GUI, but it must be done via a privileged user. To do that, add the following to the configuration file:

ctrl_interface=DIR=/run/wpa_supplicant GROUP=<privileged group>
update_config=1

Replace the <privileged group> above with a system group where members have the ability to connect to a wireless access point.

There are many options that you could use to tweak how you connect to each access point. They are described in some detail in the wpa_supplicant/wpa_supplicant.conf file in the source tree.

Connecting to an Access Point

There are 3 types of systemd units that were installed:

wpa_supplicant@.service
wpa_supplicant-nl80211@.service
wpa_supplicant-wired@.service

The only difference between 3 of them is what driver is used for connecting (-D option). The first one uses the default driver, the second one uses the nl80211 driver and the third one uses the wired driver.

You can connect to the wireless access point by running the following command as the root user:

systemctl start wpa_supplicant@wlan0

To connect to the wireless access point at boot, simply enable the appropriate wpa_supplicant service by running the following command as the root user:

systemctl enable wpa_supplicant@wlan0

Depending on your setup, you can replace the wpa_supplicant@.service with any other listed above.

To assign a network address to your wireless interface, consult the General Network Configuration page in LFS.

Installed Programs: wpa_gui, wpa_supplicant, wpa_passphrase and wpa_cli

Installed Libraries: None

Installed Directories: None

Short Descriptions

wpa_gui	is a graphical frontend program for interacting with wpa_supplicant.
wpa_supplicant	is a daemon that can connect to a password protected wireless access point.
wpa_passphrase	takes an SSID and a password and generates a simple configuration that wpa_supplicant can understand.
wpa_cli	is a command line interface used to control a running wpa_supplicant daemon.

Last updated on 2017-08-30 13:28:29 -0700

Other Networking Programs

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/othernetprogs

NCPFS contains client and administration tools for use with Novell networks. See the User Notes for details.

Last updated on 2007-04-04 12:42:53 -0700

Chapter 16. Networking Utilities

This chapter contains some tools that come in handy when the network needs investigating.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/basicnetworkingutilities

Avahi-0.7

Introduction to Avahi

The Avahi package is a system which facilitates service discovery on a local network.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/lathiat/avahi/releases/download/v0.7/avahi-0.7.tar.gz
Download MD5 sum: d76c59d0882ac6c256d70a2a585362a6
Download size: 1.3 MB
Estimated disk space required: 23 MB
Estimated build time: 0.3 SBU

Avahi Dependencies

Required

Optional

D-Bus Python-1.2.4 and PyGTK-2.24.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/avahi

Installation of Avahi

There should be a dedicated user and group to take control of the avahi-daemon daemon after it is started. Issue the following commands as the root user:

groupadd -fg 84 avahi &&
useradd -c "Avahi Daemon Owner" -d /var/run/avahi-daemon -u 84 \
        -g avahi -s /bin/false avahi

There should also be a dedicated priviliged access group for Avahi clients. Issue the following command as the root user:

groupadd -fg 86 netdev

Install Avahi by running the following commands:

./configure --prefix=/usr        \
            --sysconfdir=/etc    \
            --localstatedir=/var \
            --disable-static     \
            --disable-mono       \
            --disable-monodoc    \
            --disable-python     \
            --disable-qt3        \
            --disable-qt4        \
            --enable-core-docs   \
            --with-distro=none   \
            --with-systemdsystemunitdir=/lib/systemd/system &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--disable-mono: This parameter disables the Mono bindings.

--disable-monodoc: This parameter disables documentation for the Mono bindings.

--disable-python: This parameter disables the scripts that depend on Python. It also allows a regular install to complete successfully.

--disable-qt3: This parameter disables the attempt to build the obsolete Qt3 portions of the package.

--disable-qt4: This parameter disables the attempt to build the obsolete Qt4Core portions of the package.

--enable-core-docs: This parameter enables the building of documentation.

--with-distro=none: There is an obsolete boot script in the distribution for LFS. This option disables it.

--with-systemdsystemunitdir=/lib/systemd/system: This parameter is used to set the correct installation directory for systemd units.

--disable-dbus: This parameter disables the use of D-Bus.

--disable-gtk: This parameter disables the use of GTK+2.

--disable-gtk3: This parameter disables the use of GTK+3.

--disable-libdaemon: This parameter disables the use of libdaemon. If you use this option, avahi-daemon won't be built.

--enable-tests: This option enables the building of tests and examples.

--enable-compat-howl: This option enables the compatibility layer for HOWL.

--enable-compat-libdns_sd: This option enables the compatibility layer for libdns_sd.

Configuring avahi

Boot Script

To start the avahi-daemon daemon at boot, enable the previously installed systemd unit by running the following command as the root user:

systemctl enable avahi-daemon

To start the avahi-dnsconfd daemon at boot, enable the previously installed systemd unit by running the following command as the root user:

systemctl enable avahi-dnsconfd

Installed Programs: avahi-autoipd, avahi-bookmarks, avahi-browse, avahi-browse-domains, avahi-daemon, avahi-discover, avahi-discover-standalone, avahi-dnsconfd, avahi-publish, avahi-publish-address, avahi-publish-service, avahi-resolve, avahi-resolve-address, avahi-resolve-host-name, avahi-set-host-name, bshell, bssh, and bvnc

Installed Libraries: libavahi-client.so, libavahi-common.so, libavahi-core.so, libavahi-glib.so, libavahi-gobject.so, libavahi-ui-gtk3.so,, libavahi-ui.so, libdns_sd.so, and libhowl.so,

Installed Directories: /etc/avahi/services, /usr/{include/{avahi-client,avahi-common, avahi-compat-howl/{corby,discovery,rendezvous,salt}, avahi-compat-libdns_sd,avahi-core,avahi-glib,avahi-gobject,avahi-ui}, lib/{avahi,python2.7/site-packages/{avahi, avahi_discover}},share/{avahi/interfaces,locale/en_NZ/LC_MESSAGES}}

Short Descriptions

avahi-autoipd	is a IPv4LL network address configuration daemon.
avahi-bookmarks	is a Web service showing mDNS/DNS-SD announced HTTP services using the Avahi daemon.
avahi-browse	browses for mDNS/DNS-SD services using the Avahi daemon.
avahi-browse-domains	browses for mDNS/DNS-SD services using the Avahi daemon.
avahi-daemon	is the Avahi mDNS/DNS-SD daemon.
avahi-discover	browses for mDNS/DNS-SD services using the Avahi daemon.
avahi-discover-standalone	browses for mDNS/DNS-SD services using the Avahi daemon.
avahi-dnsconfd	is a Unicast DNS server from mDNS/DNS-SD configuration daemon.
avahi-publish	registers a mDNS/DNS-SD service or host name or address mapping using the Avahi daemon.
avahi-publish-address	registers a mDNS/DNS-SD service or host name or address mapping using the Avahi daemon.
avahi-publish-service	registers a mDNS/DNS-SD service or host name or address mapping using the Avahi daemon.
avahi-resolve	resolves one or more mDNS/DNS host name(s) to IP address(es) (and vice versa) using the Avahi daemon.
avahi-resolve-address	resolves one or more mDNS/DNS host name(s) to IP address(es) (and vice versa) using the Avahi daemon.
avahi-resolve-host-name	resolves one or more mDNS/DNS host name(s) to IP address(es) (and vice versa) using the Avahi daemon.
avahi-set-host-name	changes the mDNS host name.
bssh	browses for SSH servers on the local network.
bvnc	browses for VNC servers on the local network.

Last updated on 2017-08-24 18:56:23 -0700

BIND Utilities-9.11.2

Introduction to BIND Utilities

BIND Utilities is not a separate package, it is a collection of the client side programs that are included with BIND-9.11.2. The BIND package includes the client side programs nslookup, dig and host. If you install BIND server, these programs will be installed automatically. This section is for those users who don't need the complete BIND server, but need these client side applications.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (FTP): ftp://ftp.isc.org/isc/bind9/9.11.2/bind-9.11.2.tar.gz
Download MD5 sum: efca7e5a63a07efba264da9be2fbb57f
Download size: 9.3 MB
Estimated disk space required: 125 MB
Estimated build time: 0.6 SBU

BIND Utilities Dependencies

Optional

libcap-2.25 with PAM, libxml2-2.9.4, and OpenSSL-1.1.0f

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/bind-utils

Installation of BIND Utilities

Install BIND Utilities by running the following commands:

./configure --prefix=/usr &&
make -C lib/dns &&
make -C lib/isc &&
make -C lib/bind9 &&
make -C lib/isccfg &&
make -C lib/lwres &&
make -C bin/dig

This portion of the package does not come with a test suite.

Now, as the root user:

make -C bin/dig install

Command Explanations

make -C lib/...: These commands build the libraries that are needed for the client programs.

make -C bin/dig: This command builds the client programs.

Installed Programs: dig, host, and nslookup

Installed Libraries: None

Installed Directories: None

Short Descriptions

See the program descriptions in the BIND-9.11.2 section.

Last updated on 2017-08-23 21:43:54 -0700

mod_dnssd-0.6

Introduction to mod_dnssd

The mod_dnssd package is an Apache HTTPD module which adds Zeroconf support via DNS-SD using Avahi. This allows Apache to advertise itself and the websites available to clients compatible with the protocol.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://0pointer.de/lennart/projects/mod_dnssd/mod_dnssd-0.6.tar.gz
Download MD5 sum: bed3d95a98168bf0515922d1c05020c5
Download size: 84 KB
Estimated disk space required: 1 MB
Estimated build time: less than 0.1 SBU

mod_dnssd Dependencies

Required

Apache-2.4.27 and Avahi-0.7

Optional

Lynx-2.8.8rel.2

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/mod_dnssd

Installation of mod_dnssd

Install mod_dnssd by running the following commands:

sed -i 's/unixd_setup_child/ap_&/' src/mod_dnssd.c &&

./configure --prefix=/usr \
            --disable-lynx &&
make

This package does not come with a test suite.

Now, as the root user:

make install
sed -i 's| usr| /usr|' /etc/httpd/httpd.conf

Command Explanations

sed ... src/mod_dnssd.c: Fix an external function call that has been updated since this package was released.

--disable-lynx: This parameter turns off Lynx usage for documentation generation. Remove it if you have Lynx installed.

sed ... /etc/httpd/httpd.conf: Fix a directory path that the intallation procedure incorrectly puts in the httpd configuration file.

Installed Programs: None

Installed Library: mod_dnssd.so

Installed Directories: None

Short Descriptions

mod_dnssd.so

is the Apache HTTPD module.

Last updated on 2017-08-30 18:21:03 -0700

NetworkManager-1.8.2

Introduction to NetworkManager

NetworkManager is a set of co-operative tools that make networking simple and straightforward. Whether WiFi, wired, 3G, or Bluetooth, NetworkManager allows you to quickly move from one network to another: Once a network has been configured and joined once, it can be detected and re-joined automatically the next time it's available.

This package is known to build and work properly using an LFS-8.1 platform.

Note

Make sure that you disable the systemd-networkd service or configure it not to manage the interfaces you want to manage with NetworkManager.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/NetworkManager/1.8/NetworkManager-1.8.2.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/NetworkManager/1.8/NetworkManager-1.8.2.tar.xz
Download MD5 sum:
Download size: 3.6 MB
Estimated disk space required: 560 MB (with tests)
Estimated build time: 2.2 SBU (with parallelism=4, with tests)

NetworkManager Dependencies

Required

dbus-glib-0.108, libndp-1.6, libnl-3.3.0, and NSS-3.32

Optional

BlueZ-5.46, GTK-Doc-1.26, Qt-5.9.1 (for examples), ModemManager-1.6.8, Valgrind-3.13.0, dnsmasq, Jansson, libteam, PPP, and RP-PPPoE

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/NetworkManager

Installation of NetworkManager

If Qt-5.9.1 is installed and the Qt based examples are desired, fix the configure script:

sed -e '/Qt[CDN]/s/Qt/Qt5/g'       \
    -e 's/moc_location/host_bins/' \
    -i configure

Install NetworkManager by running the following commands:

CXXFLAGS="-O2 -fPIC"                                        \
./configure --prefix=/usr                                   \
            --sysconfdir=/etc                               \
            --localstatedir=/var                            \
            --with-nmtui                                    \
            --disable-ppp                                   \
            --disable-json-validation                       \
            --with-session-tracking=systemd                 \
            --with-systemdsystemunitdir=/lib/systemd/system \
            --docdir=/usr/share/doc/network-manager-1.8.2 &&
make

An already active graphical session with bus address is necessary to run the tests. To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

CXXFLAGS="-O2 -fPIC": These compiler options are necessary to build the Qt5 based examples.

--with-nmtui: This parameter enables build of nmtui.

--with-session-tracking=systemd: This switch is used to set systemd-logind as the default program for session tracking.

--with-systemdsystemunitdir=/lib/systemd/system: This switch is used to set the correct installation directory for systemd units.

--disable-ppp: This parameter disables PPP support in NetworkManager.

--disable-json-validation: This parameter allows building without Jansson, which is needed for “team” configuration validation (team is one way of bonding network interfaces for increased throughput).

--enable-gtk-doc: Use this switch if you have installed GTK-Doc-1.26 and wish to build the API manuals.

--without-iptables: Use this switch if you don't have Iptables installed.

--disable-introspection: Use this switch if gobject-introspection-1.52.1 is installed and you want to build without introspection support. This also removes the need for PyGObject-3.24.1.

Configuring NetworkManager

Config Files

/etc/NetworkManager/NetworkManager.conf

Configuration Information

For NetworkManager to work, at least a minimal configuration file must be present. Such file is not installed with make install. Issue the following command as the root user to create minimal NetworkManager.conf file:

cat >> /etc/NetworkManager/NetworkManager.conf << "EOF"
[main]
plugins=keyfile
EOF

You can add dns=none to suppress changes to /etc/resolv.conf. See man 5 NetworkManager.conf for any additional options.

To allow regular users permission to configure network connections, you should add them to the netdev group, and create a polkit rule that grants access. Run the following commands as the root user:

groupadd -fg 86 netdev &&
/usr/sbin/usermod -a -G netdev <username>

cat > /usr/share/polkit-1/rules.d/org.freedesktop.NetworkManager.rules << "EOF"
polkit.addRule(function(action, subject) {
    if (action.id.indexOf("org.freedesktop.NetworkManager.") == 0 && subject.isInGroup("netdev")) {
        return polkit.Result.YES;
    }
});
EOF

Systemd Unit

To start the NetworkManager daemon at boot, enable the previously installed systemd unit by running the following command as the root user:

Note

If using Network Manager to manage an interface, any previous configuration for that interface should be removed, and the interface brought down prior to starting Network Manager.

systemctl enable NetworkManager

NetworkManager also ships a systemd unit called NetworkManager-wait-online.service which can be used to prevent services that require network connectivity from starting until NetworkManager has established the connection. To enable it, run the following command as the root user:

systemctl enable NetworkManager-wait-online

Installed Programs: NetworkManager, nmcli, nm-online, nmtui, and, symlinked to nmtui: nmtui-connect, nmtui-edit, and nmtui-hostname

Installed Libraries: libnm-glib.so, libnm-glib-vpn.so, libnm.so, libnm-util.so, and modules under /usr/lib/NetworkManager

Installed Directories: /etc/NetworkManager, /usr/include/{libnm,libnm-glib,NetworkManager}, /usr/lib/NetworkManager, /usr/share/doc/NetworkManager-1.8.2, /usr/share/gtk-doc/html/{libnm,libnm-glib,libnm-util,NetworkManager} (if the documentation is built), and /var/{lib,run}/NetworkManager

Short Descriptions

nmcli	is a command-line tool for controlling NetworkManager and getting its status.
nm-online	is a utility to find out whether you are online.
nmtui	is an interactive ncurses based interface for nmcli.
nmtui-connect	is an interactive ncurses based interface connection to activate/deactivate connections.
nmtui-edit	is an interactive ncurses based interface connection editor.
nmtui-hostname	is an interactive ncurses based interface hostname editor.
NetworkManager	is the network management daemon.
`libnm-glib.so`	contains functions used by NetworkManager.
`libnm-glib-vpn.so`	contains functions used by NetworkManager VPN plugins.
`libnm-util.so`	contains functions used by NetworkManager utils.

Last updated on 2017-08-25 14:22:07 -0700

Nmap-7.60

Introduction to Nmap

Nmap is a utility for network exploration and security auditing. It supports ping scanning, port scanning and TCP/IP fingerprinting.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://nmap.org/dist/nmap-7.60.tar.bz2
Download MD5 sum: 4e454266559ddf2c4e2109866c62560c
Download size: 9.9 MB
Estimated disk space required: 114 MB (add 21 MB for tests)
Estimated build time: 0.9 SBU (add 0.2 SBU for tests)

Nmap Dependencies

Note

These packages are recommended because if they're not installed, the build process will compile and link against its own (often older) version.

libpcap-1.8.1, PCRE-8.41 and liblinear-211

Optional

OpenSSL-1.1.0f, PyGTK-2.24.0 (required for zenmap), Python-2.7.13 (required for ndiff) and Subversion-1.9.7 (required for nmap-update)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/nmap

Installation of Nmap

Install Nmap by running the following commands:

./configure --prefix=/usr --with-liblua=included &&
make

If you wish to run the test suite, run the following command:

sed -i 's/lib./lib/' zenmap/test/run_tests.py

To test the results, issue: make check as the root user. Tests need a graphical session.

Now, as the root user:

make install

Command Explanations

--with-liblua=included: This switch is required to fix compilation with lua 5.3.

Installed Programs: ncat, ndiff, nmap, nmapfe, nmap-update, nping, uninstall_ndiff, uninstall_zenmap, xnmap and zenmap

Installed Libraries: None

Installed Directories: /usr/lib/python2.7/site-packages/{radialnet,zenmapCore,zenmapGUI}, and /usr/share/{ncat,nmap,zenmap}

Short Descriptions

ncat	is a utility for reading and writing data across networks from the command line.
ndiff	is a tool to aid in the comparison of Nmap scans.
nmap	is a utility for network exploration and security auditing. It supports ping scanning, port scanning and TCP/IP fingerprinting.
nmapfe	is a symbolic link to zenmap.
nmap-update	is an updater for Nmap architecture-independent files.
nping	is an open-source tool for network packet generation, response analysis and response time measurement.
uninstall_ndiff	is a Python script to uninstall ndiff.
uninstall_zenmap	is a Python script to uninstall zenmap.
xnmap	is a symbolic link to zenmap.
zenmap	is a Python based graphical nmap frontend viewer.

Last updated on 2017-08-29 12:34:24 -0700

Traceroute-2.1.0

Introduction to Traceroute

The Traceroute package contains a program which is used to display the network route that packets take to reach a specified host. This is a standard network troubleshooting tool. If you find yourself unable to connect to another system, traceroute can help pinpoint the problem.

Note

This package overwrites the version of traceroute that was installed in the inetutils package in LFS. This version is more powerful and allows many more options than the standard version.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/traceroute/traceroute-2.1.0.tar.gz
Download MD5 sum: 84d329d67abc3fb83fc8cb12aeaddaba
Download size: 72 KB
Estimated disk space required: 588 KB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/traceroute

Installation of Traceroute

Install Traceroute by running the following commands:

make

This package does not come with a test suite.

Now, as the root user:

make prefix=/usr install                                 &&
mv /usr/bin/traceroute /bin                              &&
ln -sv -f traceroute /bin/traceroute6                    &&
ln -sv -f traceroute.8 /usr/share/man/man8/traceroute6.8 &&
rm -fv /usr/share/man/man1/traceroute.1

The traceroute.1 file that was installed in LFS by inetutils is no longer relevant. This package overwrites that version of traceroute and installs the man page in man chapter 8.

Installed Program: traceroute and traceroute6 (symlink)

Installed Libraries: None

Installed Directories: None

Short Descriptions

traceroute	does basically what it says: it traces the route your packets take from the host you are working on to another host on a network, showing all the intermediate hops (gateways) along the way.
traceroute6	is equivalent to traceroute -6.

Last updated on 2017-08-24 15:03:00 -0700

Whois-5.2.17

Introduction to Whois

Whois is a client-side application which queries the whois directory service for information pertaining to a particular domain name. This package will install two programs by default: whois and mkpasswd. The mkpasswd command is also installed by the Expect-5.45 package.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.debian.org/debian/pool/main/w/whois/whois_5.2.17.tar.xz
Download (FTP): ftp://ftp.debian.org/debian/pool/main/w/whois/whois_5.2.17.tar.xz
Download MD5 sum: 6f7a9462b4490cf272e2a37cff7d79e4
Download size: 84 KB
Estimated disk space required: 1.2 MB
Estimated build time: less than 0.1 SBU

Whois Dependencies

Optional

libidn-1.33

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/whois

Installation of Whois

Build the application with:

make

You can install the whois program, the mkpasswd program, and the locale files independently. Control your choice of what is installed with the following commands issued as the root user:

Note

Installing this version of mkpasswd will overwrite the same command installed by Expect-5.45.

make prefix=/usr install-whois
make prefix=/usr install-mkpasswd
make prefix=/usr install-pos

Command Explanations

HAVE_LIBIDN=1: This make variable adds internationalized string handling support to whois.

Installed Programs: whois and mkpasswd

Installed Libraries: None

Installed Directories: None

Short Descriptions

whois	is a client-side application which queries the whois directory service for information pertaining to a particular domain name.
mkpasswd	generate new password, optionally apply it to a user.

Last updated on 2017-08-20 15:06:11 -0700

Wicd-1.7.4

Introduction to Wicd

Wicd is a network manager written in Python. It simplifies network setup by automatically detecting and connecting to wireless and wired networks. Wicd includes support for WPA authentication and DHCP configuration. It provides Curses- and GTK-based graphical frontends for user-friendly control. An excellent KDE-based frontend is also available http://projects.kde.org/projects/extragear/network/wicd-kde.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://launchpad.net/wicd/1.7/1.7.4/+download/wicd-1.7.4.tar.gz
Download MD5 sum: aaa2e9f5320849e0b5d053099a6f0007
Download size: 536 KB
Estimated disk space required: 4.2 MB
Estimated build time: less than 0.1 SBU

Wicd Dependencies

Required

Python-2.7.13, D-Bus Python-1.2.4, Wireless Tools-29, and Net-tools-CVS_20101030 (Wicd needs mii-tool from this package)

Optional

pm-utils-1.4.1 (for suspend/resume integration), Urwid (for the Curses-based frontend), and Babel (for internationalization)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/wicd

Installation of Wicd

Install Wicd by running the following commands:

sed -e "/detection failed/ a                self.init='init/default/wicd'" \
    -i.orig setup.py &&

rm po/*.po           &&

python setup.py configure --no-install-kde     \
                          --no-install-acpi    \
                          --no-install-pmutils \
                          --no-install-init    \
                          --no-install-gnome-shell-extensions \
                          --docdir=/usr/share/doc/wicd-1.7.4

This package does not come with a test suite.

Now, as the root user, install the package:

python setup.py install

Command Explanations

sed ... -i.orig setup.py: Fix and issue while building with BLFS.

rm po/*.po: This command removes the international messages associated with this package. The command is required unless Babel is installed. If it is installed, po/ast.po still needs to be removed in order for the build to complete.

--no-install-kde: Prevent installation of an autostart desktop file for KDE. If you use KDE, you should instead install the Wicd KDE Client.

--no-install-acpi: Prevent installation of suspend and resume scripts for acpid. Omit this option if you use acpid.

--no-install-pmutils: Prevent installation of hooks for pm-utils. Omit this option if you use pm-utils.

--no-install-init: Prevent installation of service files twice. They are installed as a part of the sed to setup.py.

--no-install-gnome-shell-extensions: Prevent installation of the respective extensions. Remove this switch, if you are using Gnome Shell.

--wicdgroup=<group>: The group that will have permission to use the Wicd client (default is the users group).

Configuring Wicd

Config Files

/etc/wicd/manager-settings.conf, /etc/wicd/wired-settings.conf and /etc/wicd/wireless-settings.conf

Configuration Information

Note

Make sure that you disable the systemd-networkd service or configure it not to manage the interfaces you want to manage with Wicd.

To enable wicd at boot time, as the root user, run:

systemctl enable wicd

No manual configuration of Wicd is needed if you use the graphical frontends. If you are only going to use Wicd from command-line, you can configure it using the configuration files in /etc/wicd. For a list of available options, look at the man-pages for: wicd-manager-settings.conf, wicd-wired-settings.conf and wicd-wireless-settings.conf.

Be sure to add all users who are to have rights to open and close network connections with Wicd to the users group (or the group specified with the --wicdgroup configuration option).

Installed Programs: wicd, wicd-cli, wicd-client, wicd-curses (not functional if Urwid is not installed), and wicd-gtk

Installed Libraries: None

Installed Directories: /{etc,usr/share,var/lib,var/log,var/run}/wicd, /usr/lib/python2.7/site-packages/wicd and /usr/share/doc/wicd-1.7.4

Short Descriptions

wicd	is the wicd daemon.
wicd-cli	is a command line interface for configuring the wicd daemon.
wicd-client	is the wicd client. This script attempts to automatically choose the relevant configuration interface.
wicd-curses	is a curses interface for configuring the wicd daemon.
wicd-gtk	is a GTK interface for configuring the wicd daemon

Last updated on 2017-08-30 19:55:44 -0700

Wireshark-2.4.0

Introduction to Wireshark

The Wireshark package contains a network protocol analyzer, also known as a “sniffer”. This is useful for analyzing data captured “off the wire” from a live network connection, or data read from a capture file.

Wireshark provides both a graphical and a TTY-mode front-end for examining captured network packets from over 500 protocols, as well as the capability to read capture files from many other popular network analyzers.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.wireshark.org/download/src/all-versions/wireshark-2.4.0.tar.xz
Download MD5 sum: 655106f8cf3bb8f521336d3a8ab5b10b
Download size: 27 MB
Estimated disk space required: 1.9 GB (with default GUI front-end, and all optional dependencies available in the BLFS book)
Estimated build time: 10.3 SBU (with default GUI front-end and all optional dependencies available in the BLFS book)

Additional Downloads

Optional patch: http://www.linuxfromscratch.org/patches/blfs/8.1/wireshark-2.4.0-lua_5_3-1.patch (allows building the LUA bindings if Lua-5.3.4 is installed and LUA is not disabled by passing --without-lua to configure)
Additional Documentation: https://www.wireshark.org/download/docs/ (contains links to several different docs in a variety of formats)

Wireshark dependencies

Required

GLib-2.52.3 and libgcrypt-1.8.0

Optional

c-ares-1.12.0, GnuTLS-3.5.14, GTK+-3.22.18 or GTK+-2.24.31 (for the legacy GTK GUI), libnl-3.3.0, Lua-5.3.4, MIT Kerberos V5-1.15.1, nghttp2-1.25.0, OpenSSL-1.1.0f, SBC-1.3, libsmi, lz4, GeoIP, libssh, PortAudio (for GTK+ RTP player), Snappy, and Spandsp

Note

The Qt GUI front-end is built by default, if Qt-5.9.1 is found. If you want to build the GTK+ GUI front-end, some configure switches have to be set (see “Command Explanations”).

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/wireshark

Kernel Configuration

The kernel must have the Packet protocol enabled for Wireshark to capture live packets from the network:

[*] Networking support --->          [CONFIG_NET]
      Networking options --->
        <*/M> Packet socket          [CONFIG_PACKET]

If built as a module, the name is af_packet.ko.

Installation of Wireshark

Wireshark is a very large and complex application. These instructions provide additional security measures to ensure that only trusted users are allowed to view network traffic. First, set up a system group for wireshark. As the root user:

groupadd -g 62 wireshark

Continue to install Wireshark by running the following commands:

patch -Np1 -i ../wireshark-2.4.0-lua_5_3-1.patch  &&

./configure --prefix=/usr --sysconfdir=/etc &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&

install -v -m755 -d /usr/share/doc/wireshark-2.4.0 &&
install -v -m644    README{,.linux} doc/README.* doc/*.{pod,txt} \
                    /usr/share/doc/wireshark-2.4.0 &&

pushd /usr/share/doc/wireshark-2.4.0 &&
   for FILENAME in ../../wireshark/*.html; do
      ln -s -v -f $FILENAME .
   done &&
popd
unset FILENAME

If you downloaded any of the documentation files from the page listed in the 'Additional Downloads', install them by issuing the following commands as the root user:

install -v -m644 <Downloaded_Files> \
                 /usr/share/doc/wireshark-2.4.0

Now, set ownership and permissions of sensitive applications to only allow authorized users. As the root user:

chown -v root:wireshark /usr/bin/{tshark,dumpcap} &&
chmod -v 6550 /usr/bin/{tshark,dumpcap}

Finally, add any users to the wireshark group (as root user):

usermod -a -G wireshark <username>

If you are installing wireshark for the first time, it will be necessary to leave the session and login again, thus you will now have wireshark between your groups, otherwise, it will not run properly.

Command Explanations

--with-gtk=[yes/no/2/3]: For the Gtk+ GUI. Default is no. If both Gtk+2 and 3 are installed, and “yes” is selected, default is 3. Obviously, GTK+-2.24.31 or GTK+-3.22.18 must have been built for this to work.

--with-qt=[yes/no/4/5]: For the Qt GUI. Default is yes, if Qt-5.9.1 is found on the system.

--disable-wireshark: Use this switch if you have Qt installed but do not want to build any of the GUIs.

Configuring Wireshark

Config Files

/etc/wireshark.conf and ~/.config/wireshark/* (unless there is already ~/.wireshark/* in the system)

Configuration Information

Though the default configuration parameters are very sane, reference the configuration section of the Wireshark User's Guide for configuration information. Most of Wireshark's configuration can be accomplished using the menu options of the wireshark graphical interfaces.

Note

If you want to look at packets, make sure you don't filter them out with Iptables-1.6.1. If you want to exclude certain classes of packets, it is more efficient to do it with iptables than it is with Wireshark.

Installed Programs: capinfos, captype, dftest, dumpcap, editcap, idl2wrs, mergecap, randpkt, rawshark, reordercap, sharkd, text2pcap, tshark, wireshark, and wireshark-gtk (optional)

Installed Libraries: libwireshark.so, libwiretap.so, libwscodecs.so (optional), libwsutil.so, and numerous modules under /usr/lib/wireshark/plugins

Installed Directories: /usr/{lib,share}/wireshark and /usr/share/doc/wireshark-2.4.0

Short Descriptions

capinfos	reads a saved capture file and returns any or all of several statistics about that file. It is able to detect and read any capture supported by the Wireshark package.
captype	prints the file types of capture files.
dftest	is a display-filter-compiler test program.
dumpcap	is a network traffic dump tool. It lets you capture packet data from a live network and write the packets to a file.
editcap	edits and/or translates the format of capture files. It knows how to read libpcap capture files, including those of tcpdump, Wireshark and other tools that write captures in that format.
mergecap	combines multiple saved capture files into a single output file.
randpkt	creates random-packet capture files.
rawshark	dump and analyze raw libpcap data.
reordercap	reorder timestamps of input file frames into output file.
sharkd	is a daemon that listens on UNIX sockets.
text2pcap	reads in an ASCII hex dump and writes the data described into a libpcap-style capture file.
tshark	is a TTY-mode network protocol analyzer. It lets you capture packet data from a live network or read packets from a previously saved capture file.
wireshark	is the Qt GUI network protocol analyzer. It lets you interactively browse packet data from a live network or from a previously saved capture file.
wireshark-gtk	is the Gtk+ GUI network protocol analyzer. It lets you interactively browse packet data from a live network or from a previously saved capture file.
`libwireshark.so`	contains functions used by the Wireshark programs to perform filtering and packet capturing.
`libwiretap.so`	is a library being developed as a future replacement for `libpcap`, the current standard Unix library for packet capturing. For more information, see the `README` file in the source `wiretap` directory.

Last updated on 2017-08-29 12:34:24 -0700

Chapter 17. Networking Libraries

These applications are support libraries for other applications in the book. It is unlikely that you would just install these libraries, you will generally find that you will be referred to this chapter to satisfy a dependency of other applications.

c-ares-1.12.0

Introduction to c-ares

c-ares is a C library for asynchronous DNS requests.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://c-ares.haxx.se/download/c-ares-1.12.0.tar.gz
Download MD5 sum: 2ca44be1715cd2c5666a165d35788424
Download size: 1.7 MB
Estimated disk space required: 13 MB
Estimated build time: 0.4 SBU

Installation of c-ares

Install c-ares by running the following commands:

./configure --prefix=/usr --disable-static &&
make

This package does not include a test suite.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Library: libcares.so

Short Descriptions

libcares.so

A C library for asynchronous DNS requests.

Last updated on $

cURL-7.55.1

Introduction to cURL

The cURL package contains an utility and a library used for transferring files with URL syntax to any of the following protocols: FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS and FILE. Its ability to both download and upload files can be incorporated into other programs to support functions like streaming media.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://curl.haxx.se/download/curl-7.55.1.tar.xz
Download MD5 sum: ac4a59c38c47adc160ea71eace20257b
Download size: 2.1 MB
Estimated disk space required: 36 MB (additional 11 MB for tests)
Estimated build time: 0.3 SBU (additional 4.3 SBU for tests)

cURL Dependencies

Optional

c-ares-1.12.0, GnuTLS-3.5.14, MIT Kerberos V5-1.15.1, nghttp2-1.25.0, OpenLDAP-2.4.45, Samba-4.6.7, libidn2, libmetalink, libpsl, librtmp, libssh2, mbed TLS (formerly known as PolarSSL), and SPNEGO

Optional for Running the Test Suite

stunnel-5.42 (for the HTTPS and FTPS tests) and Valgrind-3.13.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/curl

Installation of cURL

Install cURL by running the following commands:

./configure --prefix=/usr                           \
            --disable-static                        \
            --enable-threaded-resolver              \
            --with-ca-path=/etc/ssl/certs &&
make

Note

To run the tests for this package, valgrind requires a version of the /lib/ld-2.23.so (or later) library with debugging symbols present. Normally in LFS these debugging symbols are stripped at the end of Chapter 6. To get this library, glibc must be rebuilt with the current glibc version using the same compiler that was used to build LFS. The ld-2.23.so can then be renamed to ld-2.23.so.dbg and copied to /lib. Then a symlink needs to be changed:

ln -sfv ld-2.23.so.dbg /lib/ld-linux-x86-64.so.2

Adjust the above instruction as needed for a 32-bit system or for a different version of glibc.

To run the test suite, issue: make test.

Now, as the root user:

make install &&

rm -rf docs/examples/.deps &&

find docs \( -name Makefile\* \
          -o -name \*.1       \
          -o -name \*.3 \)    \
          -exec rm {} \;      &&
install -v -d -m755 /usr/share/doc/curl-7.55.1 &&
cp -v -R docs/*     /usr/share/doc/curl-7.55.1

Simple tests to the new installed curl: curl --trace-ascii debugdump.txt http://www.example.com/ and curl --trace-ascii d.txt --trace-time http://example.com/. Inspect the locally created trace files debugdump.txt and d.txt, which contain version downloaded files information, etc. One file has the time for each action logged.

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-threaded-resolver: This switch enables cURL's builtin threaded DNS resolver.

--with-ca-path=/etc/ssl/certs: This switch sets the location of the BLFS Certificate Authority Certificates.

--with-gssapi: This parameter adds Kerberos 5 support to libcurl.

--without-ssl --with-gnutls: Use to build with GnuTLS support instead of OpenSSL for SSL/TLS.

--with-ca-bundle=/etc/ssl/ca-bundle.crt: Use this switch instead of --with-ca-path if building with GnuTLS support instead of OpenSSL for SSL/TLS.

find docs ... -exec rm {} \;: This command removes Makefiles and man files from the documentation directory that would otherwise be installed by the commands that follow.

Installed Programs: curl, and curl-config

Installed Library: libcurl.so

Installed Directories: /usr/include/curl and /usr/share/doc/curl-7.55.1

Short Descriptions

curl	is a command line tool for transferring files with URL syntax.
curl-config	prints information about the last compile, like libraries linked to and prefix setting.
`libcurl.so`	provides the API functions required by curl and other programs.

Last updated on 2017-08-18 14:56:07 -0700

GeoClue-2.4.7

Introduction to GeoClue

GeoClue is a modular geoinformation service built on top of the D-Bus messaging system. The goal of the GeoClue project is to make creating location-aware applications as simple as possible.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.freedesktop.org/software/geoclue/releases/2.4/geoclue-2.4.7.tar.xz
Download MD5 sum: e50086e742740413669ab72d8572db05
Download size: 360 KB
Estimated disk space required: 12 MB
Estimated build time: 0.2 SBU

GeoClue Dependencies

Required

JSON-GLib-1.2.8 and libsoup-2.58.2

Optional

libnotify-0.7.7

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/geoclue2

Installation of GeoClue

Install GeoClue by running the following commands:

./configure --prefix=/usr --sysconfdir=/etc &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--disable-3g-source: This switch disables the 3G backend. Use it if you have not installed the ModemManager package.

--disable-modem-gps-source: This switch disables the modem GPS backend. Use it if you have not installed the ModemManager package.

Installed Programs: None

Installed Libraries: libgeoclue-2.so

Installed Directories: /etc/geoclue, /usr/include/libgeoclue-2.0, and /usr/libexec/geoclue-2.0

Last updated on 2017-08-26 21:14:29 -0700

glib-networking-2.50.0

Introduction to GLib Networking

The GLib Networking package contains Network related gio modules for GLib.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/glib-networking/2.50/glib-networking-2.50.0.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/glib-networking/2.50/glib-networking-2.50.0.tar.xz
Download MD5 sum: 4d06d0224646f274918b1cb6da9a07f6
Download size: 428 KB
Estimated disk space required: 10 MB (with tests)
Estimated build time: 0.1 SBU (with tests)

GLib Networking Dependencies

Required

GLib-2.52.3, GnuTLS-3.5.14 and gsettings-desktop-schemas-3.24.0

Optional

libproxy

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/glib-networking

Installation of GLib Networking

Install GLib Networking by running the following commands:

./configure --prefix=/usr             \
            --without-ca-certificates \
            --disable-static          &&
make

To test the results, issue: make -k check.

Now, as the root user:

make install

Command Explanations

--without-ca-certificates: This parameter forces use of PKCS #11 modules for TLS certificate validation instead of a bundle of certificates.

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Program: None

Installed Libraries: libgiognomeproxy.so and libgiognutls.so (GIO Modules installed in /usr/lib/gio/modules)

Installed Directories: None

Last updated on 2017-08-23 17:35:52 -0700

ldns-1.7.0

Introduction to ldns

ldns is a fast DNS library with the goal to simplify DNS programming and to allow developers to easily create software conforming to current RFCs and Internet drafts. This packages also includes the drill tool.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.nlnetlabs.nl/downloads/ldns/ldns-1.7.0.tar.gz
Download MD5 sum: 74b75c9ba69fb3af2a0c26244ecfd9f6
Download size: 1.2 MB
Estimated disk space required: 28 MB (with docs)
Estimated build time: 0.2 SBU (with docs)

ldns Dependencies

Optional

Certificate Authority Certificates and libpcap-1.8.1 (for example programs), Python-2.7.13 and SWIG-3.0.12 (for Python bindings), and Doxygen-1.8.13 (for html documentation)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/ldns

Installation of ldns

Install ldns by running the following commands:

./configure --prefix=/usr           \
            --sysconfdir=/etc       \
            --disable-static        \
            --disable-dane-ta-usage \
            --with-drill            &&
make

If you have Doxygen-1.8.13 installed and want to build html documentation, run the following command:

make doc

This package does not come with a working test suite.

Now, as the root user:

make install

If you built html documentation, install it by running the following commands as the root user:

install -v -m755 -d /usr/share/doc/ldns-1.7.0 &&
install -v -m644 doc/html/* /usr/share/doc/ldns-1.7.0

Command Explanations

--disable-dane-ta-usage: This option disables DANE-TA (DNS-Based Authentication of Named Entities) support. Remove this opion if OpenSSL-1.1.0 or later is installed.

--disable-static: This switch prevents installation of static versions of the libraries.

--with-drill: This option enables building of the drill tool (used for obtaining debug information from DNS(SEC))

--with-examples: This option enables building of the example programs.

--with-pyldns: This option enables building of the Python bindings.

Installed Programs: drill and ldns-config

Installed Library: libldns.so and /usr/lib/python2.7/site-packages/_ldns.so

Installed Directories: /usr/include/ldns and /usr/share/doc/ldns-1.7.0

Short Descriptions

drill	is a tool like dig from BIND Utilities-9.11.2 designed to get all sorts of information out of the DNS.
ldns-config	shows compiler and linker flags for ldns usage.
`libldns.so`	provides the ldns API functions to programs.

Last updated on 2017-08-29 12:34:24 -0700

libevent-2.1.8

Introduction to libevent

libevent is an asynchronous event notification software library. The libevent API provides a mechanism to execute a callback function when a specific event occurs on a file descriptor or after a timeout has been reached. Furthermore, libevent also supports callbacks due to signals or regular timeouts.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/libevent/libevent/releases/download/release-2.1.8-stable/libevent-2.1.8-stable.tar.gz
Download MD5 sum: f3eeaed018542963b7d2416ef1135ecc
Download size: 1.0 MB
Estimated disk space required: 18 MB (add 1 MB for the tests and 6 MB for the API docs)
Estimated build time: 0.3 SBU (add 10 SBU for the tests)

libevent Dependencies

Optional

Doxygen-1.8.13 (for API documentation)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libevent

Installation of libevent

Install libevent by running the following commands:

./configure --prefix=/usr --disable-static &&
make

If you have Doxygen-1.8.13 installed and wish to build API documentation, issue doxygen Doxyfile.

To test the results, issue: make verify.

Now, as the root user:

make install

If you built the API documentation, install it by issuing the following commands as the root user:

install -v -m755 -d /usr/share/doc/libevent-2.1.8/api &&
cp      -v -R       doxygen/html/* \
                    /usr/share/doc/libevent-2.1.8/api

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

Installed Program: event_rpcgen.py

Installed Libraries: libevent_core.so, libevent_extra.so, libevent_openssl.so, libevent_pthreads.so and libevent.so

Installed Directory: /usr/include/event2 and /usr/share/doc/libevent-2.1.8

Last updated on 2017-08-22 13:27:15 -0700

libnl-3.3.0

Introduction to libnl

The libnl suite is a collection of libraries providing APIs to netlink protocol based Linux kernel interfaces.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/thom311/libnl/releases/download/libnl3_3_0/libnl-3.3.0.tar.gz
Download MD5 sum: ab3ef137cad95bdda5ff0ffa5175dfa5
Download size: 912 KB
Estimated disk space required: 28 MB (with tests and API documentation)
Estimated build time: 0.6 SBU (with tests and API documentation)

Optional Download

Download (HTTP): https://github.com/thom311/libnl/releases/download/libnl3_3_0/libnl-doc-3.3.0.tar.gz
Download MD5 sum: caea892c8c09e759d9e05698d9cc692c
Download size: 11 MB

libnl Dependencies

Optional

Check-0.11.0 (for tests)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libnl

Installation of libnl

Install libnl by running the following commands:

./configure --prefix=/usr     \
            --sysconfdir=/etc \
            --disable-static  &&
make

To test the results, issue: make check.

Now, as the root user:

make install

If you wish to install the API documentation, as the root user:

mkdir -vp /usr/share/doc/libnl-3.3.0 &&
tar -xf ../libnl-doc-3.3.0.tar.gz --strip-components=1 --no-same-owner \
    -C  /usr/share/doc/libnl-3.3.0

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--disable-cli: Use this parameter if you don't want to install cli tools provided by the package.

Installed Programs: genl-ctrl-list, idiag-socket-details, nl-class-add, nl-class-delete, nl-classid-lookup, nl-class-list, nl-cls-add, nl-cls-delete, nl-cls-list, nl-link-list, nl-pktloc-lookup, nl-qdisc-add, nl-qdisc-delete, nl-qdisc-list, and 32 other helper programs with nl- and nf- prefixes

Installed Libraries: libnl-3.so, libnl-cli-3.so, libnl-genl-3.so, libnl-idiag-3.so, libnl-nf-3.so, libnl-route-3.so, libnl-xfrm-3.so, and cli modules under /usr/lib/libnl/cli tree

Installed Directories: /etc/libnl, /usr/include/libnl3, /usr/lib/libnl, and /usr/share/doc/libnl-3.3.0

Short Descriptions

genl-ctrl-list	queries the Generic Netlink controller in the kernel and prints a list of all registered Generic Netlink families including the version of the interface that has been registered.
nl-class-add	adds, updates, or replaces Traffic Classes
nl-class-delete	deletes Traffic Classes
nl-classid-lookup	is used to resolve qdisc/class names to classid values and vice versa.
nl-class-list	lists Traffic Classes.
nl-cls-add	adds a classifier.
nl-cls-delete	deletes a classifier.
nl-cls-list	lists classifiers.
nl-link-list	dumps link attributes.
nl-pktloc-lookup	allows the lookup of packet location definitions.
nl-qdisc-add	adds queueing disciplines (qdiscs) in the kernel.
nl-qdisc-delete	deletes queueing disciplines (qdiscs) in the kernel.
nl-qdisc-list	lists queueing disciplines (qdiscs) in the kernel.
`libnl*-3.so`	These libraries contain API functions used to access Netlink interfaces in Linux kernel.

Last updated on 2017-08-24 15:03:00 -0700

libnsl-1.1.0

Introduction to libnsl

The libnsl package contains the public client interface for NIS(YP) and NIS+. It replaces the NIS library that used to be in GlibC.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/thkukuk/libnsl/archive/1.1.0/libnsl-1.1.0.tar.gz
Download MD5 sum: af13f06000c691bc19dfc82822ab5374
Download size: 212 KB
Estimated disk space required: 8.1 MB
Estimated build time: 0.3 SBU

libnsl Dependencies

Requried

rpcsvc-proto-1.2 and libtirpc-1.0.2

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libnsl

Installation of libnsl

Install libnsl by running the following commands:

autoreconf -fi                &&
./configure --sysconfdir=/etc &&
make

This package does not come with a test suite.

Now, as the root user:

make install                  &&
mv /usr/lib/libnsl.so.2* /lib &&
ln -sfv ../../lib/libnsl.so.2.0.0 /usr/lib/libnsl.so

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

mv -v /usr/lib/libnsl.so.2* ...: Move shared libraries into /lib so they are available before /usr is mounted.

Installed Programs: None

Installed Libraries: libnsl.{a,so}

Installed Directories: None

Short Descriptions

libnsl.{a,so}

provides the NIS (YP) API functions required by other programs.

Last updated on 2017-08-25 05:15:41 -0700

libpcap-1.8.1

Introduction to libpcap

libpcap provides functions for user-level packet capture, used in low-level network monitoring.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.tcpdump.org/release/libpcap-1.8.1.tar.gz
Download MD5 sum: 3d48f9cd171ff12b0efd9134b52f1447
Download size: 724 KB
Estimated disk space required: 7.1 MB
Estimated build time: less than 0.1 SBU

Additional Downloads

Recommended patch: http://www.linuxfromscratch.org/patches/blfs/8.1/libpcap-1.8.1-enable_bluetooth-1.patch (Needed for bluez-5.21)

libpcap Dependencies

Optional

BlueZ-5.46, libnl-3.3.0, libusb-1.0.21, Software distribution for the DAG, and Septel range of passive network monitoring cards.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libpcap

Installation of libpcap

Install libpcap by running the following commands:

patch -Np1 -i ../libpcap-1.8.1-enable_bluetooth-1.patch &&

./configure --prefix=/usr &&
make

This package does not come with a test suite.

If you want to disable installing the static library, use this sed:

sed -i '/INSTALL_DATA.*libpcap.a\|RANLIB.*libpcap.a/ s/^/#/' Makefile

Now, as the root user:

make install

Command Explanations

--enable-bluetooth=no: Necessary, if the recommended patch is not applied, because since 1.6.1 this application needs a fix, in order to build with bluez-5.21.

Installed Program: pcap-config

Installed Libraries: libpcap.so, libpcap.a (optional)

Installed Directory: /usr/include/pcap

Short Descriptions

pcap-config	provides configuration information for libpcap.
`libpcap.{a,so}`	are libraries used for user-level packet capture.

Last updated on 2017-08-29 12:34:24 -0700

libndp-1.6

Introduction to libndp

The libndp package provides a wrapper for IPv6 Neighbor Discovery Protocol. It also provides a tool named ndptool for sending and receiving NDP messages.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://libndp.org/files/libndp-1.6.tar.gz
Download MD5 sum: 1e54d26bcb4a4110bc3f90c5dd04f1a7
Download size: 356 KB
Estimated disk space required: 2.7 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libndp

Installation of libndp

Install libndp by running the following command:

./configure --prefix=/usr        \
            --sysconfdir=/etc    \
            --localstatedir=/var \
            --disable-static     &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Program: ndptool

Installed Library: libndp.so

Installed Directory: None

Short Descriptions

ndptool	is a tool for sending and receiving NDP messages.
`libndp.so`	provides a wrapper for the IPv6 Neighbor Discovery Protocol.

Last updated on 2017-08-25 14:22:07 -0700

libsoup-2.58.2

Introduction to libsoup

The libsoup is a HTTP client/server library for GNOME. It uses GObject and the GLib main loop to integrate with GNOME applications and it also has an asynchronous API for use in threaded applications.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.gnome.org/pub/gnome/sources/libsoup/2.58/libsoup-2.58.2.tar.xz
Download (FTP): ftp://ftp.gnome.org/pub/gnome/sources/libsoup/2.58/libsoup-2.58.2.tar.xz
Download MD5 sum: eb33adb459c2283efc5c7d09ccdbbcfc
Download size: 1.7 MB
Estimated disk space required: 23 MB (with tests)
Estimated build time: 0.6 SBU (with tests)

libsoup Dependencies

Required

glib-networking-2.50.0, libxml2-2.9.4 and SQLite-3.20.0

Optional

Apache-2.4.27 (required to run the test suite), cURL-7.55.1 (required to run the test suite), MIT Kerberos V5-1.15.1 (required to run the test suite), GTK-Doc-1.26, PHP-7.1.8 compiled with XMLRPC-EPI support (only used for the XMLRPC regression tests) and Samba-4.6.7 (ntlm_auth is required to run the test suite).

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libsoup

Installation of libsoup

Install libsoup by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--disable-vala: use this if you have not installed Vala, e.g. because you are not building GNOME.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: None

Installed Libraries: libsoup-2.4.so and libsoup-gnome-2.4.so

Installed Directories: /usr/include/libsoup-2.4, /usr/include/libsoup-gnome-2.4 and /usr/share/gtk-doc/html/libsoup-2.4

Short Descriptions

`libsoup-2.4.so`	provides functions for asynchronous HTTP connections.
`libsoup-gnome-2.4.so`	provides GNOME specific features.

Last updated on 2017-08-23 17:35:52 -0700

libtirpc-1.0.2

Introduction to libtirpc

The libtirpc package contains libraries that support programs that use the Remote Procedure Call (RPC) API. It replaces the RPC, but not the NIS library entries that used to be in glibc.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/libtirpc/libtirpc-1.0.2.tar.bz2
Download MD5 sum: d5a37f1dccec484f9cabe2b97e54e9a6
Download size: 500 KB
Estimated disk space required: 6.8 MB
Estimated build time: less than 0.1 SBU

libtirpc Dependencies

Optional

MIT Kerberos V5-1.15.1 for the GSSAPI

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/libtirpc

Installation of libtirpc

Note

If updating this package, you will also need to update any existing version of rpcbind-0.2.4

Fix a build issue with glibc-2.26:

sed '/stdlib.h/a#include <stdint.h>' -i src/xdr_sizeof.c

Fix a symbol name needed by NIS libraries:

sed '/key_secret_is/s/secret/secretkey/' -i src/libtirpc.map

Install libtirpc by running the following commands:

./configure --prefix=/usr                                   \
            --sysconfdir=/etc                               \
            --disable-static                                \
            --disable-gssapi                                &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
mv -v /usr/lib/libtirpc.so.* /lib &&
ln -sfv ../../lib/libtirpc.so.3.0.0 /usr/lib/libtirpc.so

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--disable-gssapi: This switch is needed if no GSSAPI is installed. Remove this switch if you have one installed (for example MIT Kerberos V5-1.15.1) and you wish to use it.

mv -v /usr/lib/libtirpc.so.* ...: Move shared libraries into /lib so they are available before /usr is mounted.

Installed Programs: None

Installed Libraries: libtirpc.so

Installed Directory: /usr/include/tirpc

Short Descriptions

libtirpc.so

provides the Remote Procedure Call (RPC) API functions required by other programs.

Last updated on 2017-08-23 23:54:51 -0700

neon-0.30.2

Introduction to neon

neon is an HTTP and WebDAV client library, with a C interface.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.webdav.org/neon/neon-0.30.2.tar.gz
Download MD5 sum: e28d77bf14032d7f5046b3930704ef41
Download size: 911 KB
Estimated disk space required: 8.5 MB (additional 18 MB for the tests)
Estimated build time: 0.1 SBU (additional 0.3 SBU for the tests)

neon Dependencies

Optional

libxml2-2.9.4, MIT Kerberos V5-1.15.1, libproxy, and pakchois,

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/neon

Installation of neon

Fix some code when building with gnutls-3.4 and later:

sed -e 's/client_set/set/'  \
    -e 's/gnutls_retr/&2/'  \
    -e 's/type = t/cert_&/' \
    -i src/ne_gnutls.c

Install neon by running the following commands:

./configure --prefix=/usr    \
            --with-ssl       \
            --enable-shared  \
            --disable-static &&
make

To test the results, issue: make check. Most of the ssl tests fail, using --with-ssl=gnutls.

Now, as the root user:

make install

Command Explanations

--with-ssl: This switch enables SSL support using OpenSSL or GnuTLS respectively. Remove it if you don't have any of these installed. To force GnuTLS usage when both are present, simply pass --with-ssl=gnutls and --with-ca-bundle=/etc/ssl/ca-bundle.crt to the configure script.

--disable-static: This switch prevents installation of static versions of the libraries.

--with-libxml2: This switch forces the use of libxml2 instead of Expat.

Installed Program: neon-config

Installed Library: libneon.so

Installed Directories: /usr/include/neon and /usr/share/doc/neon-0.30.2

Short Descriptions

neon-config	is a script that provide information about an installed copy of the neon library.
`libneon.so`	is used as a high-level interface to common HTTP and WebDAV methods.

Last updated on 2017-08-23 17:35:52 -0700

nghttp2-1.25.0

Introduction to nghttp2

nghttp2 is an implementation of HTTP/2 and its header compression algorithm, HPACK.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/nghttp2/nghttp2/releases/download/v1.25.0/nghttp2-1.25.0.tar.xz
Download MD5 sum: 2f9b40d404956a6a054fabb6a2401a12
Download size: 1.5 MB
Estimated disk space required: 17 MB
Estimated build time: 0.1 SBU

nghttp2 Dependencies

Optional

Boost-1.64.0, libevent-2.1.8, Python-2.7.13, CUnit (required for the testsuite), Cython, Jansson, jemalloc, libev, mruby, Spdylay, and Sphinx.

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/nghttp2

Installation of nghttp2

Install nghttp2 by running the following commands:

./configure --prefix=/usr     \
            --disable-static  \
            --enable-lib-only \
            --docdir=/usr/share/doc/nghttp2-1.25.0 &&
make

This package does not come with a usable test suite.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-lib-only: only build libnghttp2. Omit this switch if you'd like to build the example applications, Python bindings, or the C++ asio library.

Installed Programs: None

Installed Libraries: libnghttp2.so

Installed Directories: /usr/include/nghttp2

Short Descriptions

libnghttp2.so

an implementation of the Hypertext Transfer Protocol version 2 in C.

Last updated on 2017-08-20 19:03:10 -0700

rpcsvc-proto-1.2

Introduction to rpcsvc-proto

The rpcsvc-proto package contains the rcpsvc protocol.x files and headers, fromerly included with GlibC, that are not included in replacment libtirpc-1.0.2, along with the rpcgen program.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://github.com/thkukuk/rpcsvc-proto/archive/rpcsvc-proto-1.2.tar.gz
Download MD5 sum: 9b118a3026cc2ce8ded16c5f4f162042
Download size: 64 KB
Estimated disk space required: 2.6 MB
Estimated build time: less than 0.1 SBU

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/rpcsvc-proto

Installation of rpcsvc-proto

Install rpcsvc-proto by running the following commands:

autoreconf -fi                &&
./configure --sysconfdir=/etc &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Installed Programs: rpcgen

Installed Libraries: None

Installed Directories: /usr/include/rpcsvc

Short Descriptions

rpcgen

Generates C code to implement the RPC protocol.

Last updated on 2017-08-23 23:54:51 -0700

Serf-1.3.9

Introduction to Serf

The Serf package contains a C-based HTTP client library built upon the Apache Portable Runtime (APR) library. It multiplexes connections, running the read/write communication asynchronously. Memory copies and transformations are kept to a minimum to provide high performance operation.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://archive.apache.org/dist/serf/serf-1.3.9.tar.bz2
Download MD5 sum: 370a6340ff20366ab088012cd13f2b57
Download size: 144 KB
Estimated disk space required: 3.2 MB (additional 3 MB for the tests)
Estimated build time: less than 0.1 SBU (additional 0.5 SBU for the tests)

Serf Dependencies

Required

Apr-Util-1.6.0, OpenSSL-1.1.0f, and SCons-2.5.1

Optional

MIT Kerberos V5-1.15.1, for the GSSAPI

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/serf

Installation of Serf

Install Serf by running the following commands:

sed -i "/Append/s:RPATH=libdir,::"   SConstruct &&
sed -i "/Default/s:lib_static,::"    SConstruct &&
sed -i "/Alias/s:install_static,::"  SConstruct &&
scons PREFIX=/usr

To test the results, issue: scons check.

Now, as the root user:

scons PREFIX=/usr install

Command Explanations

sed -i "...": The first command removes the runtime path from a shared library and the next two commands disable building and installing of the static library.

GSSAPI=/usr: Use this switch if you have installed a GSSAPI library and you want serf to use it.

Installed Programs: None

Installed Library: libserf-1.so

Installed Directory: /usr/include/serf-1

Short Descriptions

libserf-1.so

contains the Serf API functions.

Last updated on 2017-08-25 21:58:04 -0700

uhttpmock-0.5.1

Introduction to uhttpmock

The uhttpmock package contains a library for mocking web service APIs which use HTTP or HTTPS.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://tecnocode.co.uk/downloads/uhttpmock/uhttpmock-0.5.1.tar.xz
Download MD5 sum: 3c566039f7b338d1f923b707a31e12a3
Download size: 308 KB
Estimated disk space required: 4.0 MB
Estimated build time: less than 0.1 SBU

uhttpmock Dependencies

Required

libsoup-2.58.2

Optional

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/uhttpmock

Installation of uhttpmock

Install uhttpmock by running the following commands:

./configure --prefix=/usr --disable-static &&
make

To test the results, issue: make check.

Now, as the root user:

make install

Command Explanations

--disable-static: This switch prevents installation of static versions of the libraries.

--enable-gtk-doc: Use this parameter if GTK-Doc is installed and you wish to rebuild and install the API documentation.

Installed Programs: None

Installed Libraries: libuhttpmock-0.0.so

Installed Directories: /usr/include/libuhttpmock-0.0 and /usr/share/gtk-doc/html/libuhttpmock-0.0

Short Descriptions

libuhttpmock-0.0.so

contains the uhttpmock API functions.

Last updated on 2017-08-28 23:13:49 -0700

Chapter 18. Text Web Browsers

People who are new to Unix-based systems tend to ask the question "Why on earth would I want a text-mode browser? I'm going to compile X and use Konqueror/Mozilla/Whatever!". Those who have been around systems for a while know that when (not if) you manage to mess up your graphical browser install and you need to look up some information on the web, a console based browser will save you. Also, there are quite a few people who prefer to use one of these browsers as their primary method of browsing; either to avoid the clutter and bandwidth which accompanies images or because they may use a text-to-speech synthesizer which can read the page to them (of use for instance to partially sighted or blind users). In this chapter you will find installation instructions for three console web browsers:

Links-2.14

Introduction to Links

Links is a text and graphics mode WWW browser. It includes support for rendering tables and frames, features background downloads, can display colors and has many other features.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://links.twibright.com/download/links-2.14.tar.bz2
Download MD5 sum: 0d11b388de22ba280008a36a409a34c6
Download size: 6.2 MB
Estimated disk space required: 48 MB (with --enable-graphics)
Estimated build time: 0.3 SBU (with --enable-graphics)

Links Dependencies

Optional

Graphics mode requires at least one of GPM-1.20.7 (mouse support to be used with a framebuffer-based console), SVGAlib, DirectFB, and X Window System

For decoding various image formats Links can utilize libpng-1.6.31, libjpeg-turbo-1.5.2, librsvg-2.40.18, and LibTIFF-4.0.8

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/LinksBrowser

Installation of Links

Install Links by running the following commands:

./configure --prefix=/usr --mandir=/usr/share/man &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
install -v -d -m755 /usr/share/doc/links-2.14 &&
install -v -m644 doc/links_cal/* KEYS BRAILLE_HOWTO \
    /usr/share/doc/links-2.14

Command Explanations

--enable-graphics: This switch enables support for graphics mode.

Configuring Links

Config Files

~/.links/*

Configuration Information

Links stores its configuration in per-user files in the ~/.links directory. These files are created automatically when links is run for the first time.

Installed Program: links

Installed Libraries: None

Installed Directories: /usr/share/doc/links-2.14

Short Descriptions

links

is a text and graphics mode WWW browser.

Last updated on 2017-08-20 15:06:11 -0700

Lynx-2.8.8rel.2

Introduction to Lynx

Lynx is a text based web browser.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://invisible-mirror.net/archives/lynx/tarballs/lynx2.8.8rel.2.tar.bz2
Download MD5 sum: b231c2aa34dfe7ca25681ef4e55ee7e8
Download size: 2.5 MB
Estimated disk space required: 31 MB
Estimated build time: 0.3 SBU

Additional Downloads

Patch to build with openssl-1.1: http://www.linuxfromscratch.org/patches/blfs/8.1/lynx-2.8.8rel.2-openssl_1.1.0-1.patch

Lynx Dependencies

Optional

GnuTLS-3.5.14 (experimental, to replace openssl), Zip-3.0, UnZip-6.0, an MTA (that provides a sendmail command), and Sharutils-4.15.2 (for a uudecode program)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/Lynx

Installation of Lynx

Apply a patch to build Lynx with openssl-1.1:

patch -p1 -i ../lynx-2.8.8rel.2-openssl_1.1.0-1.patch

Install Lynx by running the following commands:

./configure --prefix=/usr          \
            --sysconfdir=/etc/lynx \
            --datadir=/usr/share/doc/lynx-2.8.8rel.2 \
            --with-zlib            \
            --with-bzlib           \
            --with-ssl             \
            --with-screen=ncursesw \
            --enable-locale-charset &&
make

This package does not come with a test suite.

Now, as the root user:

make install-full &&
chgrp -v -R root /usr/share/doc/lynx-2.8.8rel.2/lynx_doc

Command Explanations

--sysconfdir=/etc/lynx: This parameter is used so that the configuration files are located in /etc/lynx instead of /usr/etc.

--datadir=/usr/share/doc/lynx-2.8.8rel.2: This parameter is used so that the documentation files are installed into /usr/share/doc/lynx-2.8.8rel.2 instead of /usr/share/lynx_{doc,help}.

--with-zlib: This enables support for linking libz into Lynx.

--with-bzlib: This enables support for linking libbz2 into Lynx.

--with-ssl: This enables support for linking SSL into Lynx.

--with-screen=ncursesw: This switch enables the use of advanced wide-character support present in the system NCurses library. This is needed for proper display of characters and line wrapping in multibyte locales.

--enable-locale-charset: This switch allows Lynx to deduce the proper character encoding for terminal output from the current locale. A configuration step is still needed (see below), but unlike the situation without this switch, the configuration step becomes the same for all users (without the switch one must specify the display character set explicitly). This is important for environments such as a LiveCD, where the amount of system-specific configuration steps has to be reduced to the minimum.

--enable-nls: This switch allows Lynx to print translated messages (such as questions about cookies and SSL certificates).

--with-gnutls: This enables experimental support for linking GnuTLS into Lynx. Remove the --with-ssl switch if you want to use gnutls.

make install-full: In addition to the standard installation, this target installs the documentation and help files.

chgrp -v -R root /usr/share/doc/lynx-2.8.8rel.2/lynx_doc: This command corrects the improper group ownership of installed documentation files.

Configuring Lynx

Config Files

/etc/lynx/lynx.cfg

Configuration Information

The proper way to get the display character set is to examine the current locale. However, Lynx does not do this by default. As the root user, change this setting:

sed -e '/#LOCALE/     a LOCALE_CHARSET:TRUE'     \
    -i /etc/lynx/lynx.cfg

The built-in editor in Lynx Breaks Multibyte Characters. This issue manifests itself in multibyte locales, e.g., as the Backspace key not erasing non-ASCII characters properly, and as incorrect data being sent to the network when one edits the contents of text areas. The only solution to this problem is to configure Lynx to use an external editor (bound to the “Ctrl+X e” key combination by default). Still as the root user:

sed -e '/#DEFAULT_ED/ a DEFAULT_EDITOR:vi'       \
    -i /etc/lynx/lynx.cfg

Lynx handles the following values of the DEFAULT_EDITOR option specially by adding cursor-positioning arguments: “emacs”, “jed”, “jmacs”, “joe”, “jove”, “jpico”, “jstar”, “nano”, “pico”, “rjoe”, “vi” (but not “vim”: in order to position the cursor in Vim-8.0.586, set this option to “vi”).

By default, Lynx doesn't save cookies between sessions. Again as the root user, change this setting:

sed -e '/#PERSIST/    a PERSISTENT_COOKIES:TRUE' \
    -i /etc/lynx/lynx.cfg

Many other system-wide settings such as proxies can also be set in the /etc/lynx/lynx.cfg file.

Installed Program: lynx

Installed Libraries: None

Installed Directories: /etc/lynx and /usr/share/doc/lynx-2.8.8rel.2

Short Descriptions

lynx

is a general purpose, text-based, distributed information browser for the World Wide Web.

Last updated on 2017-08-18 12:42:43 -0700

W3m-0.5.3

Introduction to W3m

w3m is primarily a pager but it can also be used as a text-mode WWW browser.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/w3m/w3m-0.5.3.tar.gz
Download MD5 sum: 1b845a983a50b8dec0169ac48479eacc
Download size: 2.1 MB
Estimated disk space required: 26 MB
Estimated build time: 0.3 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/w3m-0.5.3-bdwgc72-1.patch

W3m Dependencies

Required

GC-7.6.0

Optional

GPM-1.20.7, OpenSSL-1.0.2l Libraries, Imlib2-1.4.10, GTK+-2.24.31, Imlib (not recommended: obsolete, abandoned upstream, buggy, and gives no additional functionality as compared to other image loading libraries), gdk-pixbuf-2.36.8, Compface-1.5.2, and nkf, a Mail User Agent, and an External Browser

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/W3M

Installation of W3m

Install w3m by running the following commands:

patch -Np1 -i ../w3m-0.5.3-bdwgc72-1.patch &&
sed -i 's/file_handle/file_foo/' istream.{c,h} &&
sed -i 's#gdk-pixbuf-xlib-2.0#& x11#' configure &&

PKG_CONFIG_PATH="/usr/lib/openssl-1.0/pkgconfig:$PKG_CONFIG_PATH" \
    ./configure --prefix=/usr --sysconfdir=/etc  &&
make

This package does not come with a test suite.

Now, as the root user:

make install &&
install -v -m644 -D doc/keymap.default /etc/w3m/keymap &&
install -v -m644    doc/menu.default /etc/w3m/menu &&
install -v -m755 -d /usr/share/doc/w3m-0.5.3 &&
install -v -m644    doc/{HISTORY,READ*,keymap.*,menu.*,*.html} \
                    /usr/share/doc/w3m-0.5.3

Command Explanations

patch -p1 < ../w3m-0.5.3-bdwgc72-1.patch: This patch fixes compiling w3m with GC-7.2 installed.

sed -i 's/file_handle/file_foo/' istream.{c,h}: This sed renames the file_handle function to avoid a clash with a glibc function that has the same name, defined in /usr/include/bits/fcntl.h.

sed -i 's#gdk-pixbuf-xlib-2.0#& x11#' configure: This sed fixes compiling w3m using GTK+-2.24.31 as its image library. It has no impact if GTK+-2.24.31 is not installed.

--sysconfdir=/etc: This option puts the configuration files in /etc.

Configuring W3m

Config Files

/etc/w3m/* and ~/.w3m/*

Installed Programs: w3m and w3mman

Installed Libraries: None

Installed Directories: /usr/libexec/w3m, /usr/share/w3m, and /usr/share/doc/w3m-0.5.3

Short Descriptions

w3m	is a text based web browser and pager.
w3mman	is an interface to the on-line reference manuals in w3m.

Last updated on 2017-08-29 12:34:24 -0700

Chapter 19. Mail/News Clients

Mail Clients help you retrieve (Fetchmail), sort (Procmail), read and compose responses (Heirloom mailx, Mutt, Pine, Kmail, Balsa, Evolution, SeaMonkey) to email.

News clients also help you retrieve, sort, read and compose responses, but these messages travel through USENET (a worldwide bulletin board system) using the Network News Transfer Protocol (NNTP).

Alpine-2.21

Introduction to Alpine

Alpine is a text-based email client developed by the University of Washington.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://alpine.freeiz.com/alpine/release/src/alpine-2.21.tar.xz
Download MD5 sum: 02dad85c1be80ce020206f222ecf5ac8
Download size: 4.6 MB
Estimated disk space required: 122 MB
Estimated build time: 1.0 SBU

Alpine Dependencies

Optional

OpenLDAP-2.4.45, MIT Kerberos V5-1.15.1, Aspell-0.60.6.1, Tcl-8.6.7, and Linux-PAM-1.3.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/alpine

Installation of Alpine

Install Alpine by running the following commands:

LIBS+="-lcrypto" ./configure --prefix=/usr       \
                             --sysconfdir=/etc   \
                             --without-ldap      \
                             --without-krb5      \
                             --without-pam       \
                             --without-tcl       \
                             --with-ssl-dir=/usr \
                             --with-passfile=.pine-passfile &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

LIBS+="-lcrypto": Enable linking to OpenSSL-1.1.0f. Additional linker flags are required for Linux-PAM-1.3.0, -lpam, and for MIT Kerberos V5-1.15.1, -lkrb5.

--without-ldap: Disables LDAP support.

--without-krb5: Disables Kerberos support.

--without-pam: Disables Linux-PAM support.

--without-tcl: Disables TCL support.

--with-ssl-dir=/usr: Sets the root path to OpenSSL libraries and include files.

--with-passfile=.pine-passfile: Sets the password cache file.

--without-ssl: Disables OpenSSL support.

Configuring Alpine

Config Files

~/.pinerc

Configuration Information

It is not required to manually edit any configuration files to use the Alpine email client. Users can configure Alpine using the graphical configuration menu, which stores the changes in ~/.pinerc.

Installed Programs: alpine, pico, pilot, rpdump, and rpload

Installed Libraries: none

Installed Directories: none

Short Descriptions

alpine	is the Alpine mailer.
pico	is a standalone text editor similar to the Alpine message composer.
pilot	is a standalone file system navigator.
rpdump	is a utility for downloading a pinerc or address book to the local machine.
rpload	is a utility for uploading a local pinerc or address book to an IMAP server.

Last updated on 2017-08-30 17:02:22 -0700

Fetchmail-6.3.26

Introduction to Fetchmail

The Fetchmail package contains a mail retrieval program. It retrieves mail from remote mail servers and forwards it to the local (client) machine's delivery system, so it can then be read by normal mail user agents.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://downloads.sourceforge.net/fetchmail/fetchmail-6.3.26.tar.xz
Download MD5 sum: 61b66faad044afa26e142bb1791aa2b3
Download size: 1.2 MB
Estimated disk space required: 14 MB
Estimated build time: 0.1 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/fetchmail-6.3.26-disable_sslv3-1.patch

Fetchmail Dependencies

Optional

Python-2.7.13 and Tk-8.6.7

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/fetchmail

Installation of Fetchmail

Install Fetchmail by running the following commands:

patch -Np1 -i ../fetchmail-6.3.26-disable_sslv3-1.patch &&
./configure --prefix=/usr --with-ssl --enable-fallback=procmail &&
make

This package does not come with a test suite.

Now, as the root user:

make install

Command Explanations

--with-ssl: This enables SSL support, so that you can handle connections to secure POP3 and IMAP servers.

--enable-fallback=procmail: This tells Fetchmail to hand incoming mail to Procmail for delivery, if the port 25 mail server is not present or not responding.

Configuring Fetchmail

Config Files

~/.fetchmailrc

Configuration Information

cat > ~/.fetchmailrc << "EOF"
set logfile /var/log/fetchmail.log
set no bouncemail
set postmaster root

poll SERVERNAME :
    user <username> pass <password>;
    mda "/usr/bin/procmail -f %F -d %T";
EOF

chmod -v 0600 ~/.fetchmailrc

This is an example configuration that should suffice for most people. You can add as many users and servers as you need using the same syntax.

man fetchmail: Look for the section near the bottom named CONFIGURATION EXAMPLES. It gives some quick examples. There are countless other configuration options once you get used to it.

Installed Programs: fetchmail and fetchmailconf

Installed Libraries: None

Installed Directories: None

Short Descriptions

fetchmail	when executed as a user, this will source `~/.fetchmailrc` and download the appropriate mail.
fetchmailconf	it will assist you in setting up and editing a `~/.fetchmailrc` configuration file, by using a Tk GUI interface. It requires Python and it must have the Tkinker module available.

Last updated on 2017-08-26 17:08:59 -0700

mailx-12.5

Introduction to Heirloom mailx

The Heirloom mailx package (formerly known as the Nail package) contains mailx, a command-line Mail User Agent derived from Berkeley Mail. It is intended to provide the functionality of the POSIX mailx command with additional support for MIME messages, IMAP (including caching), POP3, SMTP, S/MIME, message threading/sorting, scoring, and filtering. Heirloom mailx is especially useful for writing scripts and batch processing.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://ftp.debian.org/debian/pool/main/h/heirloom-mailx/heirloom-mailx_12.5.orig.tar.gz
Download (FTP): ftp://ftp.debian.org/debian/pool/main/h/heirloom-mailx/heirloom-mailx_12.5.orig.tar.gz
Download MD5 sum: 29a6033ef1412824d02eb9d9213cb1f2
Download size: 317 KB
Estimated disk space required: 3.2 MB
Estimated build time: less than 0.1 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/heirloom-mailx-12.5-fixes-1.patch

Heirloom mailx Dependencies

Optional

OpenSSL-1.0.2l Libraries or NSS-3.32, MIT Kerberos V5-1.15.1 (for IMAP GSSAPI authentication), and an MTA

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/mailx

Installation of Heirloom mailx

Note

This package does not support parallel build.

Install Heirloom mailx by running the following commands.

patch -Np1 -i ../heirloom-mailx-12.5-fixes-1.patch &&

sed 's@<openssl@<openssl-1.0/openssl@' \
    -i openssl.c fio.c makeconfig      &&

make -j1 LDFLAGS+="-L /usr/lib/openssl-1.0/" \
     SENDMAIL=/usr/sbin/sendmail

This package does not come with a test suite.

Now, as the root user:

make PREFIX=/usr UCBINSTALL=/usr/bin/install install &&

ln -v -sf mailx /usr/bin/mail &&
ln -v -sf mailx /usr/bin/nail &&

install -v -m755 -d     /usr/share/doc/heirloom-mailx-12.5 &&
install -v -m644 README /usr/share/doc/heirloom-mailx-12.5

Command Explanations

make SENDMAIL=/usr/sbin/sendmail: This changes the default MTA path of /usr/lib/sendmail.

make PREFIX=/usr UCBINSTALL=/usr/bin/install install: This changes the default installation path of /usr/local and the default install command path of /usr/ucb.

Configuring Heirloom mailx

Config Files

/etc/nail.rc, ~/.mailrc and ~/.nailrc

Installed Programs: mail, mailx and nail

Installed Libraries: None

Installed Directories: None

Short Descriptions

mailx	is a command-line mail user agent compatible with the mailx command found on commercial Unix versions.
mail	is a symbolic link to mailx.
nail	is a symbolic link to mailx.

Last updated on 2017-08-30 19:14:49 -0700

Mutt-1.8.3

Introduction to Mutt

The Mutt package contains a Mail User Agent. This is useful for reading, writing, replying to, saving, and deleting your email.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (FTP): ftp://ftp.mutt.org/pub/mutt/mutt-1.8.3.tar.gz
Download MD5 sum: 8d1ff7275a3b4fbb0023145abe309cc8
Download size: 4.0 MB
Estimated disk space required: 38 MB (plus a further 5MB for the PDF manual)
Estimated build time: 0.3 SBU (plus a further 0.2 SBU to build the PDF manual)

Mutt Dependencies

Optional

Aspell-0.60.6.1, Cyrus SASL-2.1.26, GDB-8.0, GnuPG-2.1.23, GPGME-1.9.0, libgssapi, libidn-1.33, MIT Kerberos V5-1.15.1, Mixmaster, an MTA (that provides a sendmail command), slang-2.3.1, OpenSSL-1.1.0f or GnuTLS-3.5.14, Berkeley DB-6.2.32 or QDBM or Tokyo Cabinet

Optional (To Regenerate HTML Documentation)

libxslt-1.1.29 and either Lynx-2.8.8rel.2, w3m-0.5.3, or ELinks

Optional (To Generate PDF Manual)

docbook-dsssl-1.79, OpenJade-1.3.2, and texlive-20170524 (or install-tl-unx)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/mutt

Installation of Mutt

Mutt requires a group named mail. You can add this group, if it does not exist, with this command:

groupadd -g 34 mail

If you did not install an MTA, you need to modify the ownership of /var/mail with this command:

chgrp -v mail /var/mail

Mutt will rebuild the html documentation if libxslt is present, then use that to update the text manual - even if none of the specified browsers are present. That will create an empty text file, so we will save the shipped file.

Install Mutt by running the following commands:

cp -v doc/manual.txt{,.shipped} &&
./configure --prefix=/usr                           \
            --sysconfdir=/etc                       \
            --with-docdir=/usr/share/doc/mutt-1.8.3 \
            --enable-external-dotlock               \
            --enable-pop                            \
            --enable-imap                           \
            --enable-hcache                         \
            --enable-sidebar                        &&
make &&
test -s doc/manual.txt || mv -v doc/manual.txt{.shipped,}

To generate the PDF manual with texlive-20170524, run the following command:

make -C doc manual.pdf

This package does not come with a test suite.

Now, as the root user:

make install

If you generated the PDF manual, install it by issuing the following command as the root user:

install -v -m644 doc/manual.pdf \
    /usr/share/doc/mutt-1.8.3

Note

If you used a DESTDIR method to only install to a temporary location as a regular user (as part of a package menagement process), you will need to run the following as the root user after completing the real install:

chown root:mail /usr/bin/mutt_dotlock &&
chmod -v 2755 /usr/bin/mutt_dotlock

Command Explanations

--enable-external-dotlock: In some circumstances the mutt-dotlock program is not created. This switch ensures it is always created.

--enable-pop: This switch enables POP3 support.

--enable-imap: This switch enables IMAP support.

--enable-hcache: This switch enables header caching.

--enable-sidebar: This switch enables support for the sidebar (a list of mailboxes). It is off by default, but can be turned on by :set sidebar_visible in mutt (and off again with ':unset'), or it can be enabled in ~/.muttrc.

--enable-smtp: This switch enables SMTP relay support.

--with-ssl: This parameter adds SSL/TLS support from OpenSSL-1.1.0f in POP3/IMAP/SMTP if they are enabled.

--with-sasl: This parameter adds authentication support from Cyrus SASL-2.1.26 in POP3/IMAP/SMTP if they are enabled. Depending on the server configuration, this may not be needed for POP3 or IMAP. However, it is needed for SMTP authentication.

test -s doc/manual.txt || mv -v doc/manual.txt{.shipped,}: if the text manual is now empty (libxslt is installed, but without any of the specified text browsers), restore it from the copy.

Configuring Mutt

Config Files

/etc/Muttrc, ~/.muttrc, /etc/mime.types, ~/.mime.types

Configuration Information

No changes in these files are necessary to begin using Mutt. When you are ready to make changes, the man page for muttrc is a good starting place.

In order to utilize GnuPG, use the following command:

cat /usr/share/doc/mutt-1.8.3/samples/gpg.rc >> ~/.muttrc

Installed Programs: flea, mutt, mutt_dotlock, muttbug, pgpewrap, pgpring, and smime_keys

Installed Libraries: None

Installed Directories: /usr/share/doc/mutt-1.8.3

Short Descriptions

flea	is a bug submitter for Mutt.
mutt	is a Mail User Agent (MUA) which enables you to read, write and delete your email.
mutt_dotlock	implements the mail spool file lock.
muttbug	is a script that executes flea.
pgpewrap	prepares a command line for the GnuPG-2.1.23 utilities.
pgpring	is a key ring dumper for PGP. It is not needed for GnuPG-2.1.23.
smime_keys	manages a keystore for S/MIME certificates.

Last updated on 2017-08-26 17:08:59 -0700

Procmail-3.22

Introduction to Procmail

The Procmail package contains an autonomous mail processor. This is useful for filtering and sorting incoming mail.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): http://www.ring.gr.jp/archives/net/mail/procmail/procmail-3.22.tar.gz
Download (FTP): ftp://ftp.ucsb.edu/pub/mirrors/procmail/procmail-3.22.tar.gz
Download MD5 sum: 1678ea99b973eb77eda4ecf6acae53f1
Download size: 226 KB
Estimated disk space required: 1.7 MB
Estimated build time: less than 0.1 SBU

Procmail Dependencies

Installation of Procmail

This package does not come with a test suite.

Install Procmail by running the following commands as the root user:

sed -i 's/getline/get_line/' src/*.[ch] &&

make LOCKINGTEST=/tmp MANDIR=/usr/share/man install &&
make install-suid

Command Explanations

sed -i 's/getline/get_line/' src/*.[ch]: This renames procmail's getline function to avoid conflict with the getline function from glibc.

make LOCKINGTEST=/tmp install: This prevents make from asking you where to test file-locking patterns.

make install-suid: Modifies permissions of the installed files.

Configuring Procmail

Config Files

/etc/procmailrc and ~/.procmailrc

Configuration Information

Recipes have to be written and placed in ~/.procmailrc for execution. The procmailex man page is the starting place to learn how to write recipes. For additional information, see also http://pm-doc.sourceforge.net/.

Installed Programs: formail, lockfile, mailstat and procmail

Installed Libraries: None

Installed Directories: None

Short Descriptions

formail	is a filter that can be used to format mail into mailbox format.
lockfile	is a utility that can lock a file for single use interactively or in a script.
mailstat	prints a summary report of mail that has been filtered by procmail since the last time mailstat was ran.
procmail	is an autonomous mail processor. It performs all the functions of an MDA (Mail Delivery Agent).

Last updated on 2017-08-23 21:43:54 -0700

Other Mail and News Programs

Balsa-2.5.3 is a GTK2 based mail client.

SeaMonkey-2.48 includes both a mail client and newsreader in its installation.

Thunderbird-52.3.0 is a mail/news client based on the Mozilla code base.

Last updated on 2013-06-01 05:20:39 -0700

Part V. Servers

Chapter 20. Major Servers

Major servers are the programs that provide content or services to users or other programs.

Apache-2.4.27

Introduction to Apache HTTPD

The Apache HTTPD package contains an open-source HTTP server. It is useful for creating local intranet web sites or running huge web serving operations.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://archive.apache.org/dist/httpd/httpd-2.4.27.tar.bz2
Download MD5 sum: 97b6bbfa83c866dbe20ef317e3afd108
Download size: 6.2 MB
Estimated disk space required: 118 MB
Estimated build time: 0.7 SBU

Additional Downloads

Required patch: http://www.linuxfromscratch.org/patches/blfs/8.1/httpd-2.4.27-blfs_layout-1.patch

Apache HTTPD Dependencies

Required

Apr-Util-1.6.0 and PCRE-8.41

Optional

Berkeley DB-6.2.32, Doxygen-1.8.13, libxml2-2.9.4, Lynx-2.8.8rel.2 or Links-2.14 or ELinks, nghttp2-1.25.0, OpenLDAP-2.4.45 (Apr-Util-1.6.0 needs to be installed with ldap suport), rsync-3.1.2, Distcache, and Lua-5.3.4

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/apache

Installation of Apache HTTPD

For security reasons, running the server as an unprivileged user and group is strongly encouraged. Create the following group and user using the following commands as root:

groupadd -g 25 apache &&
useradd -c "Apache Server" -d /srv/www -g apache \
        -s /bin/false -u 25 apache

Build and install Apache HTTPD by running the following commands:

patch -Np1 -i ../httpd-2.4.27-blfs_layout-1.patch             &&

sed '/dir.*CFG_PREFIX/s@^@#@' -i support/apxs.in              &&

./configure --enable-authnz-fcgi                              \
            --enable-layout=BLFS                              \
            --enable-mods-shared="all cgi"                    \
            --enable-mpms-shared=all                          \
            --enable-suexec=shared                            \
            --with-apr=/usr/bin/apr-1-config                  \
            --with-apr-util=/usr/bin/apu-1-config             \
            --with-suexec-bin=/usr/lib/httpd/suexec           \
            --with-suexec-caller=apache                       \
            --with-suexec-docroot=/srv/www                    \
            --with-suexec-logfile=/var/log/httpd/suexec.log   \
            --with-suexec-uidmin=100                          \
            --with-suexec-userdir=public_html                 &&
make

This package does not come with a test suite.

Now, as the root user:

Note

This package does not install properly using DESTDIR techniques as an unpriviledged user.

make install  &&

mv -v /usr/sbin/suexec /usr/lib/httpd/suexec &&
chgrp apache           /usr/lib/httpd/suexec &&
chmod 4754             /usr/lib/httpd/suexec &&

chown -v -R apache:apache /srv/www

Command Explanations

sed '/dir.*CFG_PREFIX/s@^@#@'...: Forces the apxs utility to use absolute pathnames for modules, when instructed to do so.

--enable-authnz-fcgi: Build FastCGI authorizer-based authentication and authorization (mod_authnz_fcgi.so fast CGI module).

--enable-mods-shared="all cgi": The modules should be compiled and used as Dynamic Shared Objects (DSOs) so they can be included and excluded from the server using the run-time configuration directives.

--enable-mpms-shared=all: This switch ensures that all MPM (Multi Processing Modules) are built as Dynamic Shared Objects (DSOs), so the user can choose which one to use at runtime.

--enable-suexec: This switch enables building of the Apache suEXEC module which can be used to allow users to run CGI and SSI scripts under user IDs different from the user ID of the calling web server.

--with-suexec-*: These switches control suEXEC module behavior, such as default document root, minimal UID that can be used to run the script under the suEXEC. Please note that with minimal UID 100, you can't run CGI or SSI scripts under suEXEC as the apache user.

... /usr/lib/httpd/suexec: These commands put suexec wrapper into proper location, since it is not meant to be run directly. They also adjust proper permissions of the binary, making it setgid apache.

chown -R apache:apache /srv/www: By default, the installation process installs files (documentation, error messages, default icons, etc.) with the ownership of the user that extracted the files from the tar file. If you want to change the ownership to another user, you should do so at this point. The only requirement is that the document directories need to be accessible by the httpd process with (r-x) permissions and files need to be readable (r--) by the apache user.

Configuring Apache

Config Files

/etc/httpd/httpd.conf and /etc/httpd/extra/*

Configuration Information

See file:///usr/share/httpd/manual/configuring.html for detailed instructions on customising your Apache HTTP server configuration file.

Systemd Unit

If you want the Apache server to start automatically when the system is booted, install the httpd.service unit included in the blfs-systemd-units-20160602 package.

make install-httpd

Installed Programs: ab, apachectl, apxs, checkgid, dbmmanage, fcgistarter, htcacheclean, htdbm, htdigest, htpasswd, httpd, httxt2dbm, logresolve, rotatelogs, and suexec

Installed Libraries: Several libraries under /usr/lib/httpd/modules/

Installed Directories: /etc/httpd, /srv/www, /usr/include/httpd, /usr/lib/httpd, /usr/share/httpd, /var/log/httpd, and /var/run/httpd

Short Descriptions

ab	is a tool for benchmarking your Apache HTTP server.
apachectl	is a front end to the Apache HTTP server which is designed to help the administrator control the functioning of the Apache httpd daemon.
apxs	is a tool for building and installing extension modules for the Apache HTTP server.
checkgid	is a program that checks whether it can setgid to the group specified. This is to see if it is a valid group for Apache2 to use at runtime. If the user (should be run as superuser) is in that group, or can setgid to it, it will return 0.
dbmmanage	is used to create and update the DBM format files used to store usernames and passwords for basic authentication of HTTP users.
fcgistarter	is a tool to start a FastCGI program.
htcacheclean	is used to clean up the disk cache.
htdbm	is used to manipulate the DBM password databases.
htdigest	is used to create and update the flat-files used to store usernames, realms and passwords for digest authentication of HTTP users.
htpasswd	is used to create and update the flat-files used to store usernames and passwords for basic authentication of HTTP users.
httpd	is the Apache HTTP server program.
httxt2dbm	is used to generate DBM files from text, for use in RewriteMap.
logresolve	is a post-processing program to resolve IP-addresses in Apache's access log files.
rotatelogs	is a simple program for use in conjunction with Apache's piped log file feature.
suexec	allows users to run CGI and SSI applications as a different user.

Last updated on 2017-08-26 09:42:24 -0700

BIND-9.11.2

Introduction to BIND

The BIND package provides a DNS server and client utilities. If you are only interested in the utilities, refer to the BIND Utilities-9.11.2.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (FTP): ftp://ftp.isc.org/isc/bind9/9.11.2/bind-9.11.2.tar.gz
Download MD5 sum: efca7e5a63a07efba264da9be2fbb57f
Download size: 9.3 MB
Estimated disk space required: 119 MB (additional 192 MB for the test suite)
Estimated build time: 1.0 SBU (additional 30+ minutes, processor independent, to run the complete test suite)

Additional Downloads

Optional patch (if net-tools is not installed): http://www.linuxfromscratch.org/patches/blfs/8.1/bind-9.11.2-use_iproute2-1.patch

BIND Dependencies

Optional

libcap-2.25 with PAM, libxml2-2.9.4, MIT Kerberos V5-1.15.1, OpenSSL-1.1.0f, and geoip

Optional database backends

Berkeley DB-6.2.32, MariaDB-10.2.8 or MySQL, OpenLDAP-2.4.45, PostgreSQL-9.6.4, and unixODBC-2.3.4

Optional (to run the test suite)

Net::DNS-1.12 and Net-tools-CVS_20101030 (you may omit net-tools by using the optional patch to utilize iproute2, but the IPv6 tests will fail)

Optional (to rebuild the documentation)

Doxygen-1.8.13, libxslt-1.1.29, and texlive-20170524 (or install-tl-unx)

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/bind

Installation of BIND

If you have chosen not to install net-tools, apply the iproute2 patch with the following command:

patch -Np1 -i ../bind-9.11.2-use_iproute2-1.patch

Install BIND by running the following commands:

./configure --prefix=/usr           \
            --sysconfdir=/etc       \
            --localstatedir=/var    \
            --mandir=/usr/share/man \
            --enable-threads        \
            --with-libtool          \
            --disable-static        \
            --with-randomdev=/dev/urandom &&
make

Issue the following commands to run the complete suite of tests. First, as the root user, set up some test interfaces:

Note

If IPv6 is not enabled in the kernel, there will be several error messages: "RTNETLINK answers: Operation not permitted". These messages do not afffect the tests.

bin/tests/system/ifconfig.sh up

The test suite may indicate some skipped tests depending on what configuration options are used. Some tests are marked “UNTESTED ” if Net::DNS-1.12 is not installed. To run the tests, as an unprivileged user, execute:

make -k check

Again as root, clean up the test interfaces:

bin/tests/system/ifconfig.sh down

Finally, install the package as the root user:

make install &&

install -v -m755 -d /usr/share/doc/bind-9.11.2/{arm,misc} &&
install -v -m644    doc/arm/*.html \
                    /usr/share/doc/bind-9.11.2/arm &&
install -v -m644    doc/misc/{dnssec,ipv6,migrat*,options,rfc-compliance,roadmap,sdb} \
                    /usr/share/doc/bind-9.11.2/misc

Command Explanations

--sysconfdir=/etc: This parameter forces BIND to look for configuration files in /etc instead of /usr/etc.

--enable-threads: This parameter enables multi-threading capability.

--with-libtool: This parameter forces the building of dynamic libraries and links the installed binaries to these libraries.

--with-randomdev=/dev/urandom: This parameter specifes a non-blocking random device for use with digital signatures.

--enable-fetchlimit: Use this option if you want to be able to limit the rate of recursive client queries. This may be useful on servers which receive a large number of queries.

--disable-static: This switch prevents installation of static versions of the libraries.

cd doc; install ...: These commands install additional package documentation. Omit any or all of these commands if desired.

Configuring BIND

Config files

named.conf, root.hints, 127.0.0, rndc.conf and resolv.conf

Configuration Information

BIND will be configured to run in a chroot jail as an unprivileged user (named). This configuration is more secure in that a DNS compromise can only affect a few files in the named user's HOME directory.

Create the unprivileged user and group named:

groupadd -g 20 named &&
useradd -c "BIND Owner" -g named -s /bin/false -u 20 named &&
install -d -m770 -o named -g named /srv/named

Set up some files, directories and devices needed by BIND:

mkdir -p /srv/named &&
cd       /srv/named &&
mkdir -p dev etc/namedb/{slave,pz} usr/lib/engines var/run/named &&
mknod /srv/named/dev/null c 1 3 &&
mknod /srv/named/dev/urandom c 1 9 &&
chmod 666 /srv/named/dev/{null,urandom} &&
cp /etc/localtime etc &&
touch /srv/named/managed-keys.bind

The rndc.conf file contains information for controlling named operations with the rndc utility. Generate a key for use in the named.conf and rdnc.conf with the rndc-confgen command:

rndc-confgen -r /dev/urandom -b 512 > /etc/rndc.conf &&
sed '/conf/d;/^#/!d;s:^# ::' /etc/rndc.conf > /srv/named/etc/named.conf

Complete the named.conf file from which named will read the location of zone files, root name servers and secure DNS keys:

cat >> /srv/named/etc/named.conf << "EOF"
options {
    directory "/etc/namedb";
    pid-file "/var/run/named.pid";
    statistics-file "/var/run/named.stats";

};
zone "." {
    type hint;
    file "root.hints";
};
zone "0.0.127.in-addr.arpa" {
    type master;
    file "pz/127.0.0";
};

// Bind 9 now logs by default through syslog (except debug).
// These are the default logging rules.

logging {
    category default { default_syslog; default_debug; };
    category unmatched { null; };

  channel default_syslog {
      syslog daemon;                      // send to syslog's daemon
                                          // facility
      severity info;                      // only send priority info
                                          // and higher
  };

  channel default_debug {
      file "named.run";                   // write to named.run in
                                          // the working directory
                                          // Note: stderr is used instead
                                          // of "named.run"
                                          // if the server is started
                                          // with the '-f' option.
      severity dynamic;                   // log at the server's
                                          // current debug level
  };

  channel default_stderr {
      stderr;                             // writes to stderr
      severity info;                      // only send priority info
                                          // and higher
  };

  channel null {
      null;                               // toss anything sent to
                                          // this channel
  };
};
EOF

Create a zone file with the following contents:

cat > /srv/named/etc/namedb/pz/127.0.0 << "EOF"
$TTL 3D
@      IN      SOA     ns.local.domain. hostmaster.local.domain. (
                        1       ; Serial
                        8H      ; Refresh
                        2H      ; Retry
                        4W      ; Expire
                        1D)     ; Minimum TTL
                NS      ns.local.domain.
1               PTR     localhost.
EOF

Create the root.hints file with the following commands:

Note

Caution must be used to ensure there are no leading spaces in this file.

cat > /srv/named/etc/namedb/root.hints << "EOF"
.                       6D  IN      NS      A.ROOT-SERVERS.NET.
.                       6D  IN      NS      B.ROOT-SERVERS.NET.
.                       6D  IN      NS      C.ROOT-SERVERS.NET.
.                       6D  IN      NS      D.ROOT-SERVERS.NET.
.                       6D  IN      NS      E.ROOT-SERVERS.NET.
.                       6D  IN      NS      F.ROOT-SERVERS.NET.
.                       6D  IN      NS      G.ROOT-SERVERS.NET.
.                       6D  IN      NS      H.ROOT-SERVERS.NET.
.                       6D  IN      NS      I.ROOT-SERVERS.NET.
.                       6D  IN      NS      J.ROOT-SERVERS.NET.
.                       6D  IN      NS      K.ROOT-SERVERS.NET.
.                       6D  IN      NS      L.ROOT-SERVERS.NET.
.                       6D  IN      NS      M.ROOT-SERVERS.NET.
A.ROOT-SERVERS.NET.     6D  IN      A       198.41.0.4
A.ROOT-SERVERS.NET.     6D  IN      AAAA    2001:503:ba3e::2:30
B.ROOT-SERVERS.NET.     6D  IN      A       192.228.79.201
B.ROOT-SERVERS.NET.     6D  IN      AAAA    2001:500:200::b
C.ROOT-SERVERS.NET.     6D  IN      A       192.33.4.12
C.ROOT-SERVERS.NET.     6D  IN      AAAA    2001:500:2::c
D.ROOT-SERVERS.NET.     6D  IN      A       199.7.91.13
D.ROOT-SERVERS.NET.     6D  IN      AAAA    2001:500:2d::d
E.ROOT-SERVERS.NET.     6D  IN      A       192.203.230.10
E.ROOT-SERVERS.NET.     6D  IN      AAAA    2001:500:a8::e
F.ROOT-SERVERS.NET.     6D  IN      A       192.5.5.241
F.ROOT-SERVERS.NET.     6D  IN      AAAA    2001:500:2f::f
G.ROOT-SERVERS.NET.     6D  IN      A       192.112.36.4
G.ROOT-SERVERS.NET.     6D  IN      AAAA    2001:500:12::d0d
H.ROOT-SERVERS.NET.     6D  IN      A       198.97.190.53
H.ROOT-SERVERS.NET.     6D  IN      AAAA    2001:500:1::53
I.ROOT-SERVERS.NET.     6D  IN      A       192.36.148.17
I.ROOT-SERVERS.NET.     6D  IN      AAAA    2001:7fe::53
J.ROOT-SERVERS.NET.     6D  IN      A       192.58.128.30
J.ROOT-SERVERS.NET.     6D  IN      AAAA    2001:503:c27::2:30
K.ROOT-SERVERS.NET.     6D  IN      A       193.0.14.129
K.ROOT-SERVERS.NET.     6D  IN      AAAA    2001:7fd::1
L.ROOT-SERVERS.NET.     6D  IN      A       199.7.83.42
L.ROOT-SERVERS.NET.     6D  IN      AAAA    2001:500:9f::42
M.ROOT-SERVERS.NET.     6D  IN      A       202.12.27.33
M.ROOT-SERVERS.NET.     6D  IN      AAAA    2001:dc3::35
EOF

The root.hints file is a list of root name servers. This file must be updated periodically with the dig utility. A current copy of root.hints can be obtained from ftp://rs.internic.net/domain/named.root. For details, consult the "BIND 9 Administrator Reference Manual", included in every source archive of BIND 9 distributed by ISC, in HTML and PDF formats, also available at BIND 9 Administrator Reference Manual.

Create or modify resolv.conf to use the new name server with the following commands:

Note

Replace <yourdomain.com> with your own valid domain name.

cp /etc/resolv.conf /etc/resolv.conf.bak &&
cat > /etc/resolv.conf << "EOF"
search <yourdomain.com>
nameserver 127.0.0.1
EOF

Set permissions on the chroot jail with the following command:

chown -R named:named /srv/named

Systemd Unit

To start the DNS server at boot, install the named.service unit included in the blfs-systemd-units-20160602 package.

make install-named

Now start BIND with the following command:

systemctl start named

Testing BIND

Test out the new BIND 9 installation. First query the local host address with dig:

dig -x 127.0.0.1

Now try an external name lookup, taking note of the speed difference in repeated lookups due to the caching. Run the dig command twice on the same address:

dig www.linuxfromscratch.org &&
dig www.linuxfromscratch.org

You can see almost instantaneous results with the named caching lookups. Consult the BIND Administrator Reference Manual located at doc/arm/Bv9ARM.html in the package source tree, for further configuration options.

Installed Programs: arpaname, bind9-config hardlinked to isc-config.sh, ddns-confgen, delv, dig, dnssec-dsfromkey, dnssec-importkey, dnssec-keyfromlabel, dnssec-keygen, dnssec-revoke, dnssec-settime, dnssec-signzone, dnssec-verify, genrandom, host, isc-hmac-fixup, lwresd hardlinked to named, named-checkconf, named-checkzone, named-compilezone (symlink), named-journalprint, named-rrchecker, nsec3hash, nslookup, nsupdate, rndc, rndc-confgen, and tsig-keygen (symlink)

Installed Libraries: libbind9.so, libdns.so, libirs.so, libisc.so, libisccc.so, libisccfg.so, and liblwres.so

Installed Directories: /usr/include/{bind9,dns,dst,irs,isc,isccc,isccfg,lwres,pk11,pkcs11}, /usr/share/doc/bind-9.11.2 and /srv/named

Short Descriptions

arpaname	translates IP addresses to the corresponding ARPA names.
bind9-config	is hardlinked to isc-config.sh.
ddns-confgen	generates a key for use by nsupdate and named.
delv	is a new debugging tool that is a successor to dig.
dig	interrogates DNS servers.
dnssec-dsfromkey	outputs the Delegation Signer (DS) resource record (RR).
dnssec-importkey	reads a public DNSKEY record and generates a pair of .key/.private files.
dnssec-keyfromlabel	gets keys with the given label from a crypto hardware and builds key files for DNSSEC.
dnssec-keygen	is a key generator for secure DNS.
dnssec-revoke	sets the REVOKED bit on a DNSSEC key.
dnssec-settime	sets the key timing metadata for a DNSSEC key.
dnssec-signzone	generates signed versions of zone files.
dnssec-verify	verifies that a zone is fully signed for each algorithm found in the DNSKEY RRset for the zone, and that the NSEC / NSEC3 chains are complete.
genrandom	generates a file containing random data.
host	is a utility for DNS lookups.
isc-config.sh	prints information related to the installed version of ISC BIND.
isc-hmac-fixup	fixes HMAC keys generated by older versions of BIND.
lwresd	is a caching-only name server for local process use.
named	is the name server daemon.
named-checkconf	checks the syntax of `named.conf` files.
named-checkzone	checks zone file validity.
named-compilezone	is similar to named-checkzone, but it always dumps the zone contents to a specified file in a specified format.
named-journalprint	prints the zone journal in human-readable form.
named-rrchecker	reads an individual DNS resource record from standard input and checks if it is syntactically correct.
nsec3hash	generates an NSEC3 hash based on a set of NSEC3 parameters.
nslookup	is a program used to query Internet domain nameservers.
nsupdate	is used to submit DNS update requests.
rndc	controls the operation of BIND.
rndc-confgen	generates `rndc.conf` files.
tsig-keygen	is a symlink to ddns-confgen.

Last updated on 2017-08-29 17:44:28 -0700

ProFTPD-1.3.6

Introduction to ProFTPD

The ProFTPD package contains a secure and highly configurable FTP daemon. This is useful for serving large file archives over a network.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (FTP): ftp://ftp.proftpd.org/distrib/source/proftpd-1.3.6.tar.gz
Download MD5 sum: 13270911c42aac842435f18205546a1b
Download size: 19 MB
Estimated disk space required: 65 MB
Estimated build time: 0.3 SBU

ProFTPD Dependencies

Optional

libcap-2.25 with PAM, Linux-PAM-1.3.0, MariaDB-10.2.8 or MySQL, OpenSSL-1.1.0f, PCRE-8.41, and PostgreSQL-9.6.4

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/proftpd

Installation of ProFTPD

For security reasons, you should install ProFTPD using an unprivileged user and group. As the root user:

groupadd -g 46 proftpd                             &&
useradd -c proftpd -d /srv/ftp -g proftpd \
        -s /usr/bin/proftpdshell -u 46 proftpd     &&

install -v -d -m775 -o proftpd -g proftpd /srv/ftp &&
ln -v -s /bin/false /usr/bin/proftpdshell          &&
echo /usr/bin/proftpdshell >> /etc/shells

Install ProFTPD as an unprivileged user by running the following commands:

./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var/run &&
make

This packages does not come with a usable test suite.

Now, as the root user:

make install                                   &&
install -d -m755 /usr/share/doc/proftpd-1.3.6 &&
cp -Rv doc/*     /usr/share/doc/proftpd-1.3.6

Command Explanations

install -v -d -m775 -o proftpd -g proftpd /srv/ftp: Create the home directory for ProFTPD.

ln -v -s /bin/false /usr/bin/proftpdshell: Set the default shell as a link to an invalid shell.

echo /usr/bin/proftpdshell >> /etc/shells: Fake a valid shell for compatibility purposes.

Note

The above two commands can be omitted if the following directive is placed in the configuration file:

RequireValidShell off

By default, proftpd will require that users logging in have valid shells. The RequireValidShell directive turns off this requirement. This is only recommended if you are setting up your FTP server exclusively for anonymous downloads.

Note

Support for most of the dependency packages requires using options passed to the configure script. View the output from ./configure --help for complete information about enabling dependency packages.

Configuring ProFTPD

Config Files

/etc/proftpd.conf

Configuration Information

This is a simple, download-only sample configuration. See the ProFTPD documentation in /usr/share/doc/proftpd and consult the website at http://www.proftpd.org/ for example configurations.

cat > /etc/proftpd.conf << "EOF"
# This is a basic ProFTPD configuration file
# It establishes a single server and a single anonymous login.

ServerName                      "ProFTPD Default Installation"
ServerType                      standalone
DefaultServer                   on

# Port 21 is the standard FTP port.
Port                            21
# Umask 022 is a good standard umask to prevent new dirs and files
# from being group and world writable.
Umask                           022

# To prevent DoS attacks, set the maximum number of child processes
# to 30.  If you need to allow more than 30 concurrent connections
# at once, simply increase this value.  Note that this ONLY works
# in standalone mode, in inetd mode you should use an inetd server
# that allows you to limit maximum number of processes per service

MaxInstances                    30

# Set the user and group that the server normally runs at.
User                            proftpd
Group                           proftpd

# To cause every FTP user to be "jailed" (chrooted) into their home
# directory, uncomment this line.
#DefaultRoot ~


# Normally, files should be overwritable.
<Directory /*>
  AllowOverwrite                on
</Directory>

# A basic anonymous configuration, no upload directories.
<Anonymous ~proftpd>
  User                          proftpd
  Group                         proftpd
  # Clients should be able to login with "anonymous" as well as "proftpd"
  UserAlias                     anonymous proftpd

  # Limit the maximum number of anonymous logins
  MaxClients                    10

  # 'welcome.msg' should be displayed at login, and '.message' displayed
  # in each newly chdired directory.
  DisplayLogin                  welcome.msg
  DisplayChdir                  .message

  # Limit WRITE everywhere in the anonymous chroot
  <Limit WRITE>
    DenyAll
  </Limit>
</Anonymous>
EOF

Systemd Unit

Install the proftpd.service unit included in the blfs-systemd-units-20160602 package.

make install-proftpd

Installed Programs: ftpasswd, ftpcount, ftpdctl, ftpmail, ftpquota, ftpscrub, ftpshut, ftptop, ftpwho, in.proftpd (symlink to proftpd), proftpd, and prxs

Installed Libraries: None

Installed Directory: /usr/{include,lib}/proftpd

Short Descriptions

proftpd	is the FTP daemon.
ftpcount	shows the current number of connections.
ftpdctl	is used to control the proftpd daemon while it is running.
ftpasswd	is a Perl script designed to create and manage AuthUserFiles and AuthGroupFiles of the correct format for proftpd.
ftpmail	is a Perl script for sending email based on the proftpd TransferLog.
ftpquota	is a Perl script designed to create and manage limits and tally files for the mod_quotatab + mod_quotatab_file module combination for proftpd.
ftpscrub	provides a way to scrub the scoreboard file on demand.
ftpshut	shuts down all proftpd servers at a given time.
ftptop	displays running status on connections.
ftpwho	shows current process information for each session.
prxs	is a Perl script designed to compile and install third-party modules, from source code, as DSO modules for the installed proftpd.

Last updated on 2017-08-29 20:55:36 -0700

vsftpd-3.0.3

Introduction to vsftpd

The vsftpd package contains a very secure and very small FTP daemon. This is useful for serving files over a network.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://security.appspot.com/downloads/vsftpd-3.0.3.tar.gz
Download MD5 sum: da119d084bd3f98664636ea05b5bb398
Download size: 196 KB
Estimated disk space required: 2 MB
Estimated build time: less than 0.1 SBU

vsftpd Dependencies

Optional

libcap-2.25 with PAM, and Linux-PAM-1.3.0

User Notes: http://wiki.linuxfromscratch.org/blfs/wiki/vsftpd

Installation of vsftpd

For security reasons, running vsftpd as an unprivileged user and group is encouraged. Also, a user should be created to map anonymous users. As the root user, create the needed directories, users, and groups with the following commands:

install -v -d -m 0755 /usr/share/vsftpd/empty &&
install -v -d -m 0755 /home/ftp               &&
groupadd -g 47 vsftpd                         &&
groupadd -g 45 ftp                            &&

useradd -c "vsftpd User"  -d /dev/null -g vsftpd -s /bin/false -u 47 vsftpd &&
useradd -c anonymous_user -d /home/ftp -g ftp    -s /bin/false -u 45 ftp

Build vsftpd as an unprivileged user using the following command:

make

This package does not come with a test suite.

Once again, become the root user and install vsftpd with the following commands:

install -v -m 755 vsftpd        /usr/sbin/vsftpd    &&
install -v -m 644 vsftpd.8      /usr/share/man/man8 &&
install -v -m 644 vsftpd.conf.5 /usr/share/man/man5 &&
install -v -m 644 vsftpd.conf   /etc

Command Explanations

install -v -d ...: This creates the directory that anonymous users will use (/home/ftp) and the directory the daemon will chroot into (/usr/share/vsftpd/empty).

Note

/home/ftp should not be owned by the user vsftpd, or the user ftp.

echo "#define VSF_BUILD_TCPWRAPPERS" >>builddefs.h: Use this prior to make to add support for tcpwrappers.

echo "#define VSF_BUILD_SSL" >>builddefs.h: Use this prior to make to add support for SSL.

install -v -m ...: The Makefile uses non-standard installation paths. These commands install the files in /usr and /etc.

Configuring vsftpd

Config Files

/etc/vsftpd.conf

Configuration Information

vsftpd comes with a basic anonymous-only configuration file that was copied to /etc above. While still as root, this file should be modified because it is now recommended to run vsftpd in standalone mode. Also, you should specify the privilege separation user created above. Finally, you should specify the chroot directory. man vsftpd.conf will give you all the details.

cat >> /etc/vsftpd.conf << "EOF"
background=YES
listen=YES
nopriv_user=vsftpd
secure_chroot_dir=/usr/share/vsftpd/empty
EOF

To enable local logins, append the following to the /etc/vsftpd.conf file (as the root user):

cat >> /etc/vsftpd.conf << "EOF"
local_enable=YES
EOF

In addition, if using Linux-PAM and vsftpd with local user logins, you will need a Linux-PAM configuration file. As the root user, create the /etc/pam.d/vsftpd file, and add the needed configuration changes for Linux-PAM session support using the following commands:

cat > /etc/pam.d/vsftpd << "EOF" &&
# Begin /etc/pam.d/vsftpd
auth       required     /lib/security/pam_listfile.so item=user sense=deny \
                                                      file=/etc/ftpusers \
                                                      onerr=succeed
auth       required     pam_shells.so
auth       include      system-auth
account    include      system-account
session    include      system-session
EOF

cat >> /etc/vsftpd.conf << "EOF"
session_support=YES
pam_service_name=vsftpd
EOF

Systemd Unit

Install the vsftpd.service unit included in the blfs-systemd-units-20160602 package.

make install-vsftpd

Installed Program: vsftpd

Installed Libraries: None

Installed Directories: /usr/share/vsftpd, /home/ftp

Short Descriptions

vsftpd

is the FTP daemon.

Last updated on 2017-08-29 20:55:36 -0700

Chapter 21. Mail Server Software

MTAs are the programs which transport mail from one machine to the other. The traditional MTA is Sendmail, however there are several other choices.

As well as SMTP servers there is a POP server (qpopper) and an IMAP server (Courier-IMAP).

Dovecot-2.2.32

Introduction to Dovecot

Dovecot is an Internet Message Access Protocol (IMAP) and Post Office Protocol (POP) server, written primarily with security in mind. Dovecot aims to be lightweight, fast and easy to set up as well as highly configurable and easily extensible with plugins.

This package is known to build and work properly using an LFS-8.1 platform.

Package Information

Download (HTTP): https://www.dovecot.org/releases/2.2/dovecot-2.2.32.tar.gz
Download MD5 sum: 534feae88700ddc704584e0fc8ee5bdc
Download size: 5.8 MB
Estimated disk space required: 147 MB (add 6 MB for tests)
Estimated build time: 1.4 SBU (add 1.6 SBU for tests)

Dovecot Dependencies

Required