WebGen Linux Manual

Packages

Every program and library documented here is compiled from source and pinned by version + checksum in the build manifest. The compiler toolchain that builds the OS (gcc, rust, meson, …) is used at build time and not installed, so it is not listed.

Applications

The graphical programs that ship on the desktop.

  • macburger 0.1.2 — Network scanner and SSH manager: discovers hosts on a subnet, scans ports, fingerprints operating systems, and keeps a live dashboard with sparklines of the machines you manage.
  • webgen 0.14.0 — The WebGen web browser — Rust + GTK4 + WebKitGTK 6.
  • webgen-calc 0.1.1 — A calculator with correct operator precedence and parentheses, full keyboard input, and a history line above the current expression.
  • webgen-edit 0.8.1 — A native source editor (GTK4/libadwaita + GtkSourceView5): a file tree, syntax highlighting, and syntax checking as you type — an error icon in the gutter, a squiggle on the line, and a status bar that jumps to the first problem, across nine languages.
  • webgen-files 0.3.5 — A GTK4 file manager: browse, copy/paste, rename, delete, new folder, and “Open With…” handing a file to the app associated with its extension.
  • webgen-paint 0.2.1 — An MS-Paint-style raster editor: pencil, line, rectangle, ellipse, flood fill, eraser and eyedropper, with undo/redo, zoom to 3200% with a pixel grid, and paste straight from the clipboard.
  • webgen-pdf 0.1.1 — A PDF viewer built on Poppler — WebKit does not render PDFs.
  • webgen-settings 0.12.0 — System Settings: appearance, sound, date & time (timezone + NTP), network basics + Wi-Fi, firewall, processes, services, and per-app settings — driven through native CLIs, no D-Bus dependency.
  • webgen-shot 1.0.1 — Screenshots: the full screen, a selected region, or a single window, with an optional delay and copy-to-clipboard.
  • webgen-solitaire 0.3.1 — Klondike and Spider solitaire, drawn with Cairo.
  • webgen-swatch 0.3.1 — A colour tool.
  • webgen-terminal 0.2.2 — A tabbed terminal (VTE).

Command-line tools

First-party CLIs for managing the system.

  • webgen-tz 1.1 — System time & date: show/set the timezone, toggle NTP (chrony) on/off, sync now, or set the clock by hand.

Virtualisation

Running guest operating systems on the KVM host.

  • qemu 10.2.4 — QEMU/KVM — run guest operating systems on the host with near-native speed via the kernel’s KVM.

Kernel & hardware

The kernel, drivers, firmware and device database.

  • hwdata 0.409 — PCI/USB/vendor ID database used to name devices in the hardware self-report.
  • libdrm 2.4.134 — Userspace interface to the kernel’s Direct Rendering Manager (GPU access).
  • linux — The Linux kernel.
  • linux-firmware 20260622 — Vendor device firmware (Wi-Fi/GPU/NIC microcode).
  • wireless-regdb 2024.10.07 — The wireless regulatory database — which channels/power a Wi-Fi radio may use in each country.

Storage & filesystems

Mount, format, encrypt and reach any disk or share.

  • btrfs-progs 6.19.1 — Create and manage Btrfs filesystems (subvolumes, snapshots).
  • cifs-utils 7.6 — SMB/CIFS client tools — mount Windows/Samba shares (mount.cifs).
  • cryptsetup 2.7.5 — LUKS full-disk encryption: create, open, and manage encrypted volumes (dm-crypt, XTS in the kernel).
  • device-mapper 2.03.31 — The device-mapper userspace (libdevmapper) underpinning LUKS, multipath and LVM-style mappings.
  • dosfstools 4.2 — Create and check FAT/VFAT filesystems (mkfs.fat, fsck.fat) — EFI system partitions and USB sticks.
  • e2fsprogs 1.47.4 — Create and check ext2/3/4 filesystems — the default root filesystem.
  • efibootmgr 18 — Read and edit UEFI boot entries (NVRAM) — what the installer registers so the disk boots.
  • efivar 39 — Library/tools for UEFI variables, used by efibootmgr and the installer.
  • exfatprogs 1.4.2 — Create and check exFAT filesystems — large removable media.
  • keyutils 1.6.3 — Kernel key-management tooling, used by NFS/CIFS and cryptsetup.
  • libtirpc 1.3.7 — Transport-independent RPC library, needed by NFS.
  • mtools 4.0.49 — Access FAT/MS-DOS disk images without mounting.
  • nfs-utils 2.8.7 — NFS client (and server) tooling — mount and export network filesystems.
  • parted 3.7 — Create and edit partition tables (GPT/MBR).
  • squashfs-tools 4.7.5 — Build the compressed read-only squashfs the live ISO ships as.
  • xfsprogs 6.19.0 — Create and check XFS filesystems.
  • xorriso 1.5.8 — Author ISO 9660/UEFI-bootable images — how the release ISO is assembled.

Networking

Wi-Fi, addressing, the firewall and time.

  • chrony 4.8 — The NTP client (chronyd) that keeps the clock synced; managed from Settings → Date & Time.
  • curl 8.21.0 — HTTP(S) transfer tool + library; wgpkg uses it to fetch the index and packages.
  • dhcpcd 10.3.2 — DHCP client — leases IP addresses on wired and wireless links at boot.
  • ell 0.83 — Embedded Linux Library — iwd’s runtime.
  • iproute2 7.1.0 — The ip suite — addresses, routes, links, bridges, tap devices for guest networking.
  • iputils 20250605 — ping and friends.
  • iwd 3.12 — iNet Wireless Daemon — scan, connect and persist Wi-Fi networks (iwctl).
  • libmnl 1.0.5 — Minimal netlink library used by nftables.
  • libnftnl 1.3.0 — Low-level netlink library for the nftables expression API.
  • libnl 3.12.0 — Netlink library for talking to the kernel networking stack.
  • libpsl 0.21.5 — Public-suffix list handling (cookie/domain boundaries).
  • nftables 1.1.5 — The nft firewall.
  • nghttp2 1.66.0 — HTTP/2 library used by curl and the browser stack.
  • openssh 10.4p1 — SSH server and client — remote administration is enabled by default (the firewall opens 22).

Audio

The PipeWire sound stack.

  • alsa-lib 1.2.13 — The kernel-facing ALSA library — the base of the sound stack.
  • alsa-ucm-conf 1.2.14 — ALSA Use-Case Manager profiles for modern codecs.
  • lua 5.4.7 — The scripting language WirePlumber’s policy is written in.
  • pipewire 1.4.2 — The audio server — routes sound between apps and devices; PulseAudio-compatible.
  • wireplumber 0.5.8 — PipeWire’s session/policy manager (device selection, routing).

Security

Mandatory access control, scanning, TLS, privilege.

  • apparmor 4.1.0 — AppArmor userland (apparmor_parser).
  • ca-certificates 2025-07 — The trusted CA root bundle for TLS.
  • gnutls 3.8.10 — TLS library used by the app/glib networking stack.
  • libgcrypt 1.11.2 — General-purpose crypto library.
  • libgpg-error 1.55 — Shared error/status codes for the GnuPG-family libraries.
  • linux-pam 1.7.1 — Pluggable Authentication Modules — the login/auth policy layer used by the greeter and sudo.
  • nettle 3.10.2 — Low-level crypto primitives (GnuTLS).
  • openssl 3.5.7 — TLS/crypto library and openssl tool.
  • rkhunter 1.4.6 — Rootkit Hunter — a quiet nightly local scanner (cron) that logs warnings to /var/log/rkhunter.log.
  • sudo 1.9.17p2 — Run commands as another user under policy — the wheel group has admin rights.

Desktop & session

The Wayland compositor, login and shell.

  • cage 0.3.1 — A single-app Wayland kiosk compositor — hosts the greeter.
  • foot 1.27.0 — A fast Wayland terminal (the fallback/menu terminal).
  • fuzzel 1.14.1 — The application launcher (Super+D).
  • greetd 0.10.3 — The login daemon that launches the greeter and then the session.
  • grub 2.12 — The bootloader.
  • gtk4 4.18.6 — The GTK 4 toolkit the native apps are built with.
  • gtksourceview 5.14.2 — Source-editing widget used by webgen-edit.
  • labwc 0.20.1 — The Wayland compositor (window manager) — a stacking, Openbox-like WM.
  • libadwaita 1.6.10 — GNOME’s Adwaita widgets/styling for GTK4 apps.
  • libinput 1.31.3 — Input device handling (touchpad, mouse, keyboard).
  • libxkbcommon 1.13.2 — Keyboard layout/keymap handling.
  • seatd 0.9.3 — Seat/session management — grants access to input and GPU devices without root.
  • vte 0.74.2 — Terminal-emulator widget used by webgen-terminal.
  • wayland 1.25.0 — The Wayland display protocol libraries.
  • wayland-protocols 1.49 — Standard Wayland protocol extensions.
  • wbg 1.3.0 — Wallpaper setter for the desktop.
  • webgen-greeter 0.1.0 — The WebGen login screen (GTK4) shown by greetd/cage.
  • wlroots 0.20.2 — The compositor building-block library labwc is built on.
  • yambar 1.11.0 — The status bar (clock, indicators).

Packaging & updates

The wgpkg package manager and update plane.

  • wgpkg 0.5.0 — The WebGen package manager (app/userspace update plane): pack, install/remove, and update from a signed network repo.

Base system

Core Unix userland, init and device management.

  • bash 5.3 — The default shell.
  • coreutils 9.11 — The core file/text/shell utilities (ls, cp, cat, …).
  • cpio 2.15 — Archive tool used to build the initramfs.
  • cronie 1.7.2 — The cron daemon (crond) — runs scheduled jobs such as the nightly rkhunter scan.
  • dbus 1.16.2 — The desktop/system message bus.
  • eudev 3.2.14 — The device manager — creates /dev nodes and autoloads driver modules as hardware appears.
  • kmod 34 — Load, unload and inspect kernel modules (modprobe, lsmod, depmod).
  • procps-ng 4.0.6 — Process tools (ps, top, kill, pgrep) reading /proc.
  • shadow 4.19.4 — User/password management (login, useradd, passwd; SHA-512 hashing).
  • sqlite 3530300 — The embedded SQL database library used by several apps.
  • sysvinit 3.04 — The init system (PID 1) and runlevels.
  • util-linux 2.41.5 — Essential system utilities (mount, lsblk, fdisk, hwclock, …).