sq: update, +cust

--
x64 only

cp up Dockerfile.custom

ali's reg

fix

dockerfile: core, fix theme ins

# deb12: clipit 88M;

diodon 6597 kB

base# deb12.out: language-pack-gnome-zh-hans

base  x11-xkb-utils xkb-data

xkb ref # https://github.com/jlesage/docker-baseimage-gui/blob/master/src/tigervnc/build.sh

compile2: gen entry.sh

x11-xkb-utils libopus0 \

COPY --from=stage-tiger /usr/share/X11/xkb/ /usr/share/X11/xkb/

#    xkb-data:/usr/share/X11/xkb/

try notes deps

a

s

left needed

vncpasswd

back v1.12.0

buildx xrdp no-compile

#1.20.7.tar.bz2 >21.1.7.tar.gz;

full plat x64

fix

compile2: try tiger 1.13.1

compile2: xorg 21.1.7

compile2: 21.1.7.tar.gz

notes patch

cpl2

base: # TEMP@deb12

base: up repo

base non-free-firmware

DOCKERFILE: RUN apt.sh libjpeg62-turbo openssl

up

up repo

#libLLVM-12.so.1@ubt2004 #libLLVM-15.so.1 #115M
  rm -f /usr/lib/*-linux-gnu/libLLVM*

dockerfile: x11-xkb-utils xkb-data

buildx: compile2 src #1.20.7 >21.1.7; 1.12.0> 1.13.1
        ver=1.13.1

buildx 21.1.7

--enable-static \

binutils-x86-64-linux-gnu

sd

openssl

try static

buildx # cache ##support multi-stage? (无用)

buildx compile2: plat x3

compile2 # cache ##support multi-stage?

$cache

buildx full compile2

# RUN /rootfs/usr/local/tigervnc/bin/Xvnc -version

libcrypt1

--with-cc-opt="-static" \
        --with-ld-opt="-static" \
        --with-cpu-opt="generic" \

compile2: patch before make

tiger common: make

fix

find /build/tigervnc-1.12.0/ |egrep Xvnc; \

# deb12.out: libjpeg8@ubt2004 > libjpeg62-turbo

compile2: no tigervnc/bin/Xvnc; # xorg-dev

open #make vncpasswd, vncconfig, vncviewver, ...

compile2: #   build the normal parts of TigerVNC first.

+libdrm-dev libxfont-dev mesa-common-dev \ @apt.sh

sort args; --enable-glx \

/build/tigervnc-1.12.0/CMakeFiles/CMakeError.log

fix

s

s

RUN apt update; apt install -y \; try libxcb-dri3-0

sort order

# TODO: 版本不一定对得上..v1.12.0; 手动ct-compileImg: 未执行本步;

base: notes # chansrv-err: libfdk-aac.so.2: cannot open shared object file: No such file

only tiger

buillx plat amd64

deb12/buildx.sh

@@ -28,15 +28,22 @@ compile2)
         ver=0.9.23 #0.9.16 (0.9.23.1 @23.10.14)
         file=xrdp-${ver}.tar.gz; test -s $file || curl -k -O -fSL https://ghproxy.com/https://github.com/neutrinolabs/xrdp/releases/download/v${ver}/$file
         # tiger
+        #1.20.7.tar.bz2 >21.1.7.tar.gz;    1.12.0> 1.13.1
+        ver=1.12.0 #1.13.1
         file=xorg-server-1.20.7.tar.bz2; test -s $file || curl -k -O -fSL https://www.x.org/pub/individual/xserver/$file #6.1M
-        file=tigervnc-1.12.0.tar.gz; test -s $file || curl -k -O -fSL https://ghproxy.com/https://github.com/TigerVNC/tigervnc/archive/v1.12.0/$file #1.5M
+        file=tigervnc-${ver}.tar.gz; test -s $file || curl -k -O -fSL https://ghproxy.com/https://github.com/TigerVNC/tigervnc/archive/v${ver}/$file #1.5M
         # curl -O -fsSL https://www.linuxfromscratch.org/patches/blfs/svn/tigervnc-1.12.0-configuration_fixes-1.patch
     cd $old;
     #  
     repo=registry-1.docker.io
     img="docker-headless:deb12-compile2"
+    # cache ##support multi-stage? (无用)
+    # ali="registry.cn-shenzhen.aliyuncs.com"
+    # cimg="docker-headless-cache:deb12-compile2"
+    # cache="--cache-from type=registry,ref=$ali/$ns/$cimg --cache-to type=registry,ref=$ali/$ns/$cimg"
+
     plat="--platform linux/amd64,linux/arm64,linux/arm" #,linux/arm
-    # plat="--platform linux/amd64"
+    plat="--platform linux/amd64"
     args="--provenance=false"
     args="""
     --provenance=false 
@@ -45,7 +52,7 @@ compile2)
     --build-arg COMPILE_TIGER=yes
     """
     # --network=host: docker buildx create --use --name mybuilder2 --buildkitd-flags '--allow-insecure-entitlement network.host'
-    docker buildx build $plat $args --push -t $ns/$img -f src/Dockerfile.compile2 . 
+    docker buildx build $cache $plat $args --push -t $ns/$img -f src/Dockerfile.compile2 . 
     ;;
 
 # +slim,base (docker-headless,weskit; use docker-headless's)
@@ -59,7 +66,7 @@ slim)
     cache="--cache-from type=registry,ref=$ali/$ns/$cimg --cache-to type=registry,ref=$ali/$ns/$cimg"
 
     plat="--platform linux/amd64,linux/arm64,linux/arm" ##linux/arm> linux/arm/v7
-    # plat="--platform linux/amd64"
+    plat="--platform linux/amd64"
     args="--provenance=false --build-arg FULL="
     docker buildx build $cache $plat $args --push -t $repo/$ns/$img -f src/Dockerfile.base . 
     ;;
@@ -72,10 +79,23 @@ base)
     cache="--cache-from type=registry,ref=$ali/$ns/$cimg --cache-to type=registry,ref=$ali/$ns/$cimg"
 
     plat="--platform linux/amd64,linux/arm64,linux/arm"
-    # plat="--platform linux/amd64"
+    plat="--platform linux/amd64"
     args="--provenance=false --build-arg FULL=/.."
     docker buildx build $cache $plat $args --push -t $repo/$ns/$img -f src/Dockerfile.base . 
     ;;   
+cust)
+    repo=registry-1.docker.io
+    img="docker-headless:deb12"
+    # cache
+    ali="registry.cn-shenzhen.aliyuncs.com"
+    cimg="docker-headless-cache:deb12"
+    cache="--cache-from type=registry,ref=$ali/$ns/$cimg --cache-to type=registry,ref=$ali/$ns/$cimg"
+
+    plat="--platform linux/amd64,linux/arm64,linux/arm"
+    plat="--platform linux/amd64"
+    args="--provenance=false --build-arg FULL=/.."
+    docker buildx build $cache $plat $args --push -t $repo/$ns/$img -f src/Dockerfile.custom . 
+    ;;       
 *)
     repo=registry-1.docker.io
     repo=registry.cn-shenzhen.aliyuncs.com #@ali's repo

deb12/src/Dockerfile

@@ -46,41 +46,58 @@ FROM debian:12-slim as files2
 FROM infrastlabs/docker-headless:deb12-base-v51slim
 # 轻量级桌面 openbox + tint2 + conky + stalonetray + pcmanfm + xcompmgr #http://t.zoukankan.com/huapox-p-3516155.html #huapox
 #   无thunar/lxappearance: 结合asbru纯SSH,音频场景（管维）
+# deb12: clipit 88M; diodon 6597 kB
 RUN apt.sh \
     # plank \ #compton-plank遮盖去域不可用
     # compton \
     xcompmgr \
     dunst \
-    hsetroot pnmixer clipit;
+    hsetroot pnmixer diodon;
 # TODO: drop deps of libgl1
 RUN apt.sh libunwind8 libxfont2 libgl1; \
-  rm -f /usr/lib/x86_64-linux-gnu/libLLVM-12.so.1; \
-  rm -f /usr/lib/aarch64-linux-gnu/libLLVM-12.so.1; 
+  #libLLVM-12.so.1@ubt2004 #libLLVM-15.so.1 #115M
+  rm -f /usr/lib/*-linux-gnu/libLLVM*
 
 RUN apt.sh ibus ibus-gtk ibus-gtk3 ibus-rime librime-data-wubi \
   flameshot
 # firefox> midori > ?
 # RUN apt.sh midori
 
 # +服务器维护工具(gparted, wifiPojie,..); core与latest差异化
+# deb12: language-pack-gnome-zh-hans @ubt2004
 RUN apt.sh \
   gparted \
   \
   # +papirus-icon-theme
   # dbus-x11 at-spi2-core
   thunar lxappearance \
-  language-pack-gnome-zh-hans papirus-icon-theme greybird-gtk-theme; \
-  rm -f /usr/share/backgrounds/greybird.svg; 
-  # \
-  # wget https://gitee.com/infrastlabs/docker-headless/raw/dev/_doc/assets/bunsen-papirus-icon-theme_10.3-2_all.deb; \
-  # dpkg -i bunsen-papirus-icon-theme_10.3-2_all.deb; rm -f bunsen-papirus-icon-theme_10.3-2_all.deb; \
-  # cd /usr/share/icons && rm -rf Papirus-Bunsen-Dark-bluegrey Papirus-Bunsen-Dark-grey Papirus-Dark Papirus-Light ePapirus; \
-  # \
-  # # Papirus left: 16x(clipit:21M) 64x(desktop:21M)
-  # cd /usr/share/icons/Papirus && rm -rf 18x* 22x* 24x* 32x*  48x* 64x* ; \
-  # ls -lh /usr/share/icons/Papirus; \
-  # \
-  # dpkg -l |grep bunsen && exit 0 || exit 1;
+  papirus-icon-theme greybird-gtk-theme; \
+  rm -f /usr/share/backgrounds/greybird.svg; \
+  \
+  wget https://gitee.com/infrastlabs/docker-headless/raw/dev/_doc/assets/bunsen-papirus-icon-theme_10.3-2_all.deb; \
+  dpkg -i bunsen-papirus-icon-theme_10.3-2_all.deb; rm -f bunsen-papirus-icon-theme_10.3-2_all.deb; \
+  cd /usr/share/icons && rm -rf Papirus-Bunsen-Dark-bluegrey Papirus-Bunsen-Dark-grey Papirus-Dark Papirus-Light ePapirus; \
+  \
+  # Papirus left: 16x(clipit:21M) 64x(desktop:21M)
+  cd /usr/share/icons/Papirus && rm -rf 18x* 22x* 24x* 32x*  48x* 64x* ; \
+  ls -lh /usr/share/icons/Papirus; \
+  \
+  dpkg -l |grep bunsen && exit 0 || exit 1;
+
+
+RUN export DOMAIN="mirrors.ustc.edu.cn"; \
+  rm -f /etc/apt/sources.list.d/debian.sources; \
+  test -z "$(echo $TARGETPLATFORM |grep arm)" && target=bookworm || target=bookworm-ports; \
+  echo "deb http://$DOMAIN/debian bookworm main contrib non-free" > /etc/apt/sources.list; \
+  echo "deb http://$DOMAIN/debian bookworm-updates main contrib non-free">> /etc/apt/sources.list; \
+  echo "deb http://$DOMAIN/debian bookworm-backports main non-free contrib">> /etc/apt/sources.list; \
+  echo "deb http://$DOMAIN/debian-security bookworm-security main non-free contrib">> /etc/apt/sources.list;
+# TEMP
+RUN apt.sh \
+  # xrdp-chansrv
+  libfdk-aac2 \
+  # tiger-Xvnc
+  libjpeg62-turbo openssl x11-xkb-utils xkb-data
 
 # 拆分包体与配置项两块，免频繁变动基础包
 # HEADLESS

deb12/src/Dockerfile.base

@@ -11,14 +11,16 @@ ENV \
 # mirrors.aliyun.com
 # mirrors.tencentyun.com
 ARG TARGETPLATFORM
-# RUN export DOMAIN="mirrors.ustc.edu.cn"; \
-#   rm -f /etc/apt/sources.list.d/debian.sources; \
-#   test -z "$(echo $TARGETPLATFORM |grep arm)" && target=bookworm || target=bookworm-ports; \
-#   echo "deb http://$DOMAIN/debian bookworm main contrib non-free" > /etc/apt/sources.list; \
-#   echo "deb http://$DOMAIN/debian bookworm-updates main contrib non-free">> /etc/apt/sources.list; \
-
+RUN export DOMAIN="mirrors.ustc.edu.cn"; \
+  rm -f /etc/apt/sources.list.d/debian.sources; \
+  test -z "$(echo $TARGETPLATFORM |grep arm)" && target=bookworm || target=bookworm-ports; \
+  echo "deb http://$DOMAIN/debian bookworm main contrib non-free non-free-firmware" > /etc/apt/sources.list; \
+  echo "deb http://$DOMAIN/debian bookworm-updates main contrib non-free non-free-firmware">> /etc/apt/sources.list; \
+  echo "deb http://$DOMAIN/debian bookworm-backports main non-free contrib non-free-firmware">> /etc/apt/sources.list; \
+  echo "deb http://$DOMAIN/debian-security bookworm-security main non-free contrib non-free-firmware">> /etc/apt/sources.list; \
+    \
 # https://mirrors.ustc.edu.cn/help/debian.html
-RUN sed -i 's/deb.debian.org/mirrors.ustc.edu.cn/g' /etc/apt/sources.list.d/debian.sources; \
+# RUN sed -i 's/deb.debian.org/mirrors.ustc.edu.cn/g' /etc/apt/sources.list.d/debian.sources; \
     \
   # default:echo -e;
   echo "path-exclude /usr/share/doc/*\n\
@@ -57,6 +59,7 @@ path-exclude /usr/share/lintian/*\n\
 # 预装软件: geany sakura ristretto sys-monitor engrampa asbru
 # xrdp-chansrv: libfdk-aac1 libopus0
 # strip: binutils
+# chansrv-err: libfdk-aac.so.2: cannot open shared object file: No such file
 # deb12.out: libfdk-aac1 
 RUN \
   # LOCALE 15.0 MB 
@@ -98,16 +101,24 @@ RUN echo a.1; \
   tar -zxf supervisord_0.7.3_Linux_$arch.tar.gz; \cp -a supervisord_0.7.3_Linux_$arch/supervisord /usr/local/bin/go-supervisord; \
   rm -rf /tmp/supervisord_0.7.3_Linux*; ls -lh /usr/local/bin/
 
+# TEMP@deb12
+RUN apt.sh \
+  # xrdp-chansrv
+  libfdk-aac2 \
+  # tiger-Xvnc
+  libjpeg62-turbo openssl x11-xkb-utils xkb-data
+
 ARG FULL=""
 # TODO: full瘦身: ibus-rime librime-data-wubi启动时安装;
   # Need to get 71.5 MB of archives. >> layer: 113M
+# deb12.out: language-pack-gnome-zh-hans 
 RUN test -z "$FULL" && exit 0 || echo fullInstall;\  
   # VIDEO: 30.5 MB
   # libllvm12 已包含 # libgl1-mesa-glx >libgl1-mesa-dri ##ex:  mesa-utils 
   apt.sh libgl1-mesa-glx mesa-utils libglu1-mesa \
   \
   tumbler gtk2-engines-pixbuf gnupg \
-  dbus-x11 at-spi2-core language-pack-gnome-zh-hans \
+  dbus-x11 at-spi2-core \
   \
   # FULL(icon,ibus,git,flameshot) 49.1 MB
   # \12.3 MB (默认输入法: IBus)

deb12/src/Dockerfile.compile2

@@ -96,52 +96,70 @@ RUN test "yes" != "$COMPILE_PULSE" && exit 0 || echo doMake; \
 # ref: https://github.com/abcdesktopio/tigervnc/blob/main/Dockerfile
 FROM stage-base as stage-tiger
 ARG COMPILE_TIGER="yes"
+
+# ins: dev, dep and sources
+# TODO: 版本不一定对得上..v1.12.0; 手动ct-compileImg: 未执行本步;
+# RUN apt update; \
+#   # 129 MB
+#   apt build-dep -y tigervnc 
+
 # deb12: Could NOT find X11 (missing: X11_X11_LIB)
 #  X11_X11_LIB: +xorg-dev
 #  +cmake
 #  apt install -y libfltk1.3-dev ##Could NOT find FLTK (missing: FLTK_LIBRARIES FLTK_INCLUDE_DIR)
-RUN apt.sh \
+# RUN apt.sh \
+RUN apt update; apt install -y \
   cmake libfltk1.3-dev libxi-dev libxshmfence-dev \
-  libx11-dev libxext-dev libxrender-dev libxtst-dev libxt-dev \
-  xorg-dev
-# ins: dev, dep and sources
-RUN apt update; \
-  # 129 MB 
-  apt build-dep -y tigervnc 
+  libxcb-dri3-0 \
+  libdrm-dev libxfont-dev mesa-common-dev \
+  libx11-dev libxext-dev libxrender-dev libxtst-dev libxt-dev
+  # xorg-dev
+
 # src
 ADD src/arm /src/arm
 WORKDIR /src/arm
 RUN mkdir -p /usr/local/tigervnc; \
   \
   mkdir -p /build; \
   tar -zxf tigervnc-1.12.0.tar.gz -C /build/; \
+  # tar -jxf xorg-server-1.20.7.tar.bz2; 21.1.7.tar.gz
   tar -jxf xorg-server-1.20.7.tar.bz2 --strip-components=1 -C /build/tigervnc-1.12.0/unix/xserver/; \
   \cp -a tigervnc-1.12.0-configuration_fixes-1.patch /build/; \
   \
   ls /build/tigervnc-1.12.0/unix/xserver/
 
 # apply patch: tigervnc-1.12.0; xserver120
 WORKDIR /build/tigervnc-1.12.0 
-RUN \
-  patch -Np1 -i ../tigervnc-1.12.0-configuration_fixes-1.patch; \
-  cd unix/xserver && patch -Np1 -i ../xserver120.patch;
+# RUN \
+#   patch -Np1 -i ../tigervnc-1.12.0-configuration_fixes-1.patch; \
+#   cd unix/xserver && patch -Np1 -i ../xserver21.1.1.patch;
 
 #make vncpasswd, vncconfig, vncviewver, ...
 # err with armv7:
 #   0 16.95 CMake Error at /usr/share/cmake-3.16/Modules/FindPackageHandleStandardArgs.cmake:146 (message):
 #   0 16.95   Could NOT find X11 (missing: X11_X11_LIB) ###ubt2004_armv7: 尝试go_vncpasswd
-# # deb12: gitac_ERR; tenVM2下手动正常
-# #   Dockerfile.compile2:148
-# #  --------------------
-# #   147 |     #0 16.95   Could NOT find X11 (missing: X11_X11_LIB)
-# RUN test "yes" != "$COMPILE_TIGER" && exit 0 || echo doMake; \
-#   cd /build/tigervnc-1.12.0; \
-#   # https://github.com/glfw/glfw/issues/1957
-#   # export CMAKE_LIBRARY_ARCHITECTURE=x86_64-unknown-linux-gnu; \
-#   export CMAKE_LIBRARY_ARCHITECTURE=x86_64-linux-gnu; \
-#   cmake -G "Unix Makefiles" -DCMAKE_INSTALL_PREFIX=/usr \
-#     -DCMAKE_BUILD_TYPE=Release -DINSTALL_SYSTEMD_UNITS=OFF -Wno-dev .; \
-#   make
+# deb12: gitac_ERR; tenVM2下手动正常
+#   Dockerfile.compile2:148
+#  --------------------
+#   147 |     #0 16.95   Could NOT find X11 (missing: X11_X11_LIB)
+# 
+# https://github.com/TigerVNC/tigervnc/issues/1534
+#   build the normal parts of TigerVNC first.
+#   Xvnc-build-err: No rule to make target '../../../../common/network/libnetwork.la', needed by 'Xvnc'.  Stop.
+
+# ref: https://github.com/abcdesktopio/tigervnc/blob/main/Dockerfile
+RUN test "yes" != "$COMPILE_TIGER" && exit 0 || echo doMake; \
+  patch -Np1 -i ../tigervnc-1.12.0-configuration_fixes-1.patch; \
+  cd unix/xserver && patch -Np1 -i ../xserver120.patch; \
+  \
+  cd /build/tigervnc-1.12.0; \
+  # https://github.com/glfw/glfw/issues/1957
+  # export CMAKE_LIBRARY_ARCHITECTURE=x86_64-unknown-linux-gnu; \
+  # export CMAKE_LIBRARY_ARCHITECTURE=x86_64-linux-gnu; \
+  cmake -G "Unix Makefiles" -DCMAKE_INSTALL_PREFIX=/usr \
+    -DCMAKE_BUILD_TYPE=Release -DINSTALL_SYSTEMD_UNITS=OFF -Wno-dev . ; \
+  cat /build/tigervnc-1.12.0/CMakeFiles/CMakeError.log; \
+  make;
 
 # make XServer [plat x3: 构建耗时 52min]
 WORKDIR /build/tigervnc-1.12.0/unix/xserver
@@ -151,24 +169,47 @@ WORKDIR /build/tigervnc-1.12.0/unix/xserver
 # 
 # https://github.com/TigerVNC/tigervnc/issues/740
 # deb12: --enable-dri3 >> --disable-dri3
+# https://github.com/TigerVNC/tigervnc/blob/master/contrib/packages/rpm/el7/SPECS/tigervnc.spec#L164
+# --disable-static > --enable-static \ #https://github.com/TigerVNC/tigervnc/issues/1534 #--enable-static无效(openssl_libcrypto.so.3)
 RUN test "yes" != "$COMPILE_TIGER" && exit 0 || echo doMake; \
     autoreconf -fiv; \
     CPPFLAGS="-I/usr/include/drm"       \
     ./configure $XORG_CONFIG            \
+        # build-nginx
+        # --with-cc-opt="-static" \
+        # --with-ld-opt="-static" \
+        # --with-cpu-opt="generic" \
+        \
+        # https://github.com/jlesage/docker-baseimage-gui/blob/master/src/tigervnc/build.sh
+        # 手动重buildOK; 
+        --sysconfdir=/etc/X11 \
+        --localstatedir=/var \
+        --with-xkb-path=/usr/share/X11/xkb \
+        --with-xkb-output=/var/lib/xkb \
+        --with-xkb-bin-directory=/usr/bin \
+      \
       --prefix=/usr/local/tigervnc \
-      --disable-xwayland    --disable-dri        --disable-dmx         \
+      --disable-xwayland                         --disable-dmx         \
       --disable-xorg        --disable-xnest      --disable-xvfb        \
       --disable-xwin        --disable-xephyr     --disable-kdrive      \
       --disable-devel-docs  --disable-config-hal --disable-config-udev \
       --disable-unit-tests  --disable-selective-werror                 \
-      --disable-dri3      --enable-dri2                  \
+      --disable-dri         --disable-dri3       --enable-dri2         \
+      --enable-glx \
+      # --enable-static \
       --with-pic \
-      --without-dtrace;                              \
-      make && make install; \
+      --without-dtrace ; \
+      # try1: CFLAGS="-static" LDFLAGS="-static"
+      make; \
+      find /build/tigervnc-1.12.0/ |egrep Xvnc; \
+      find /build/tigervnc-1.12.0/ |egrep "libos|librfb|librdr|libnetwork|libunixcommon"; \
+      \
+      make install; \
+      find /usr/local/tigervnc; \
     echo "finished!";
 # vncpasswd
 # alter_try: https://github.com/KarpelesLab/vncpasswd #golang实现
-# RUN cp /build/tigervnc-1.12.0/unix/vncpasswd/vncpasswd /usr/local/tigervnc/bin/
+RUN cp /build/tigervnc-1.12.0/unix/vncpasswd/vncpasswd /usr/local/tigervnc/bin/
 
 # https://github.com/TigerVNC/tigervnc/issues/800
 # LD_PRELOAD=/lib/aarch64-linux-gnu/libgcc_s.so.1 vncserver :2 -localhost no
@@ -182,20 +223,38 @@ RUN test "yes" != "$COMPILE_TIGER" && exit 0 || echo doMake; \
 # FROM scratch
 FROM debian:12-slim
 ARG TARGETPLATFORM
-RUN RUN sed -i 's/deb.debian.org/mirrors.ustc.edu.cn/g' /etc/apt/sources.list.d/debian.sources; \
+RUN sed -i 's/deb.debian.org/mirrors.ustc.edu.cn/g' /etc/apt/sources.list.d/debian.sources; \
   \
   echo 'apt update -qq && apt install -yq --no-install-recommends $@ && apt clean && rm -rf /var/lib/apt/lists/*; ' > /usr/local/bin/apt.sh \
     && chmod +x /usr/local/bin/apt.sh
 WORKDIR /rootfs/usr/local/tigervnc/bin
 COPY --from=stage-xrdp /usr/local/xrdp /rootfs/usr/local/xrdp
 COPY --from=stage-pulse /var/lib/xrdp-pulseaudio-installer /rootfs/var/lib/xrdp-pulseaudio-installer
 COPY --from=stage-tiger /usr/local/tigervnc /rootfs/usr/local/tigervnc
+# X11/xkb
+# COPY --from=stage-tiger /usr/share/X11/xkb/ /usr/share/X11/xkb/
+# COPY --from=stage-tiger /usr/share/X11/xkb/ /rootfs/usr/share/X11/xkb/
 # test
-# deb12.out: libjpeg8 
+# deb12.out: libjpeg8@ubt2004 > libjpeg62-turbo
+#  libjpeg62-turbo| error while loading shared libraries: libjpeg.so.62: cannot open shared object file
+#  openssl| error while loading shared libraries: libcrypto.so.3: cannot open shared object file
+#    try:binutils-x86-64-linux-gnu 6401 kB
+#  run-keymap-err:
+#    xkb-data:/usr/share/X11/xkb/
 RUN apt.sh \
   # --enable-xx ##还是需要libGL.so.1
-  libgl1 \
-  libunwind8 libpixman-1-0 libxfont2 \
-  libxau6 libxdmcp6
+  libjpeg62-turbo openssl \
+  x11-xkb-utils xkb-data \
+  \
+  libgl1 libxau6 libxdmcp6 \
+  libpixman-1-0 \
+  libxfont2
+  # libunwind8 \
+  # libopus0 \
+  # libcrypt1
 RUN find /rootfs; 
-# RUN /rootfs/usr/local/tigervnc/bin/Xvnc -version
+RUN /rootfs/usr/local/tigervnc/bin/Xvnc -version
+
+RUN echo "/rootfs/usr/local/tigervnc/bin/Xvnc -ac :50 -listen tcp -rfbauth=/etc/xrdp/vnc_pass -depth 16 -BlacklistThreshold=3 -BlacklistTimeout=1" > /entry.sh; \
+  chmod +x /entry.sh
+CMD ["/entry.sh"]