new file: README.txt

new file:   aethex-desktop.service

README.txt

@@ -0,0 +1,6 @@
+AeThex Linux ISO build script is not yet implemented.
+This is a placeholder artifact to validate CI wiring.
+
+When implemented, this folder should contain:
+- AeThex-Linux-<version>.iso
+- SHA256 (checksum file)

aethex-desktop.service

@@ -0,0 +1,15 @@
+[Unit]
+Description=AeThex Desktop WebOS
+After=network.target
+
+[Service]
+Type=simple
+User=aethex
+WorkingDirectory=/opt/aethex-desktop
+Environment="DISPLAY=:0"
+ExecStart=/usr/bin/node /opt/aethex-desktop/server/index.js
+Restart=always
+RestartSec=3
+
+[Install]
+WantedBy=multi-user.target

aethex-launcher.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+# AeThex Desktop Launcher - starts X and opens the app in fullscreen browser
+
+export DISPLAY=:0
+
+# Start X server if not running
+if ! pgrep -x "X" > /dev/null; then
+    startx &
+    sleep 3
+fi
+
+# Launch Chromium in kiosk mode pointing to local server
+chromium-browser --kiosk --no-first-run --disable-infobars --disable-session-crashed-bubble \
+  --disable-restore-session-state http://localhost:5000 &

aethex-linux-build/README.txt

@@ -0,0 +1 @@
+No kernel found in rootfs

script/build-linux-iso.sh

@@ -1,8 +1,8 @@
 #!/bin/bash
 set -e
 
-# AeThex Linux ISO Builder
+# AeThex Linux ISO Builder - Full Desktop Edition
-# Produces a bootable hybrid MBR/UEFI ISO with Ubuntu 24.04 base.
+# Produces a bootable hybrid MBR/UEFI ISO with Ubuntu 24.04, Xfce desktop, and AeThex app
 
 WORK_DIR="${1:-.}"
 BUILD_DIR="$WORK_DIR/aethex-linux-build"
@@ -10,7 +10,7 @@ ISO_NAME="AeThex-Linux-amd64.iso"
 ROOTFS_DIR="$BUILD_DIR/rootfs"
 ISO_DIR="$BUILD_DIR/iso"
 
-echo "[*] AeThex ISO Builder"
+echo "[*] AeThex ISO Builder - Full Desktop Edition"
 echo "[*] Build directory: $BUILD_DIR"
 
 # Clean and prepare
@@ -19,52 +19,159 @@ mkdir -p "$ROOTFS_DIR" "$ISO_DIR"/{boot/grub,casper,isolinux}
 
 # Check critical dependencies
 echo "[*] Checking dependencies..."
-for cmd in debootstrap grub-mkrescue; do
+for cmd in debootstrap grub-mkrescue mksquashfs xorriso; do
   if ! command -v "$cmd" &> /dev/null; then
-    echo "[!] Missing: $cmd. Installing..."
+    echo "[!] Missing: $cmd"
-    apt-get update -qq && apt-get install -y -qq debootstrap grub-efi-amd64-bin grub-pc-bin xorriso isolinux syslinux-common || true
+    exit 1
   fi
 done
 
-# Verify again
-if ! command -v debootstrap &> /dev/null || ! command -v grub-mkrescue &> /dev/null; then
-  echo "[!] Critical tools still missing. Creating placeholder."
-  mkdir -p "$BUILD_DIR"
-  echo "ISO build tools not available. Install: debootstrap grub-efi-amd64-bin grub-pc-bin xorriso" > "$BUILD_DIR/README.txt"
-  exit 0
-fi
-
 echo "[+] Bootstrapping Ubuntu 24.04 (noble)..."
 echo "    (this may take 10-15 minutes, please wait...)"
 debootstrap --arch=amd64 --variant=minbase noble "$ROOTFS_DIR" http://archive.ubuntu.com/ubuntu/ 2>&1 | tail -5
 
-echo "[+] Installing kernel and boot tools..."
+# Prepare chroot networking and mounts
-echo "    (packages installing...)"
+cp -f /etc/resolv.conf "$ROOTFS_DIR/etc/resolv.conf" || true
+mount -t proc /proc "$ROOTFS_DIR/proc" || true
+mount -t sysfs /sys "$ROOTFS_DIR/sys" || true
+mount --bind /dev "$ROOTFS_DIR/dev" || true
+
+echo "[+] Installing Xfce desktop, Firefox, and system tools..."
+echo "    (packages installing, ~15-20 minutes...)"
 chroot "$ROOTFS_DIR" bash -c '
-  apt-get update > /dev/null 2>&1
+  export DEBIAN_FRONTEND=noninteractive
-  apt-get install -y -qq linux-image-generic grub-pc-bin grub-efi-amd64-bin isolinux syslinux-common > /dev/null 2>&1
+  
+  # Enable universe repository
+  sed -i "s/^# deb/deb/" /etc/apt/sources.list
+  echo "deb http://archive.ubuntu.com/ubuntu noble universe" >> /etc/apt/sources.list
+  echo "deb http://archive.ubuntu.com/ubuntu noble-updates universe" >> /etc/apt/sources.list
+  
+  apt-get update
+  apt-get install -y \
+    linux-image-generic \
+    grub-pc-bin grub-efi-amd64-bin grub-common xorriso \
+    xorg xfce4 xfce4-goodies lightdm \
+    firefox network-manager \
+    sudo curl wget git ca-certificates gnupg \
+    pipewire-audio wireplumber \
+    file-roller thunar-archive-plugin \
+    xfce4-terminal mousepad ristretto \
+    dbus-x11
   apt-get clean
-' 2>&1 | grep -v "^Get:\|^Hit:\|^Unpacking\|^Setting up" | tail -5
+' 2>&1 | tail -50
+
+echo "[+] Installing Node.js 20.x from NodeSource..."
+chroot "$ROOTFS_DIR" bash -c '
+  export DEBIAN_FRONTEND=noninteractive
+  
+  # Install ca-certificates first
+  apt-get install -y ca-certificates curl gnupg
+  
+  mkdir -p /etc/apt/keyrings
+  curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
+  echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_20.x nodistro main" > /etc/apt/sources.list.d/nodesource.list
+  apt-get update
+  apt-get install -y nodejs
+  node --version || echo "Node install failed"
+  npm --version || echo "npm not found"
+' 2>&1 | tail -10
+
+echo "[+] Creating AeThex user with auto-login..."
+chroot "$ROOTFS_DIR" bash -c '
+  useradd -m -s /bin/bash -G sudo aethex
+  echo "aethex:aethex" | chpasswd
+  echo "aethex ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
+'
+
+# Configure LightDM for auto-login
+mkdir -p "$ROOTFS_DIR/etc/lightdm"
+cat > "$ROOTFS_DIR/etc/lightdm/lightdm.conf" << 'LIGHTDM'
+[Seat:*]
+autologin-user=aethex
+autologin-user-timeout=0
+user-session=xfce
+LIGHTDM
+
+echo "[+] Setting up AeThex Desktop application..."
+
+# Copy app files (if available, otherwise note for manual addition)
+if [ -d "client" ] && [ -d "server" ]; then
+  echo "    Copying AeThex Desktop files..."
+  mkdir -p "$ROOTFS_DIR/opt/aethex-desktop"
+  cp -r client "$ROOTFS_DIR/opt/aethex-desktop/"
+  cp -r server "$ROOTFS_DIR/opt/aethex-desktop/"
+  cp -r shared "$ROOTFS_DIR/opt/aethex-desktop/" 2>/dev/null || true
+  cp package*.json "$ROOTFS_DIR/opt/aethex-desktop/" 2>/dev/null || true
+  
+  # Install dependencies in chroot
+  chroot "$ROOTFS_DIR" bash -c 'cd /opt/aethex-desktop && npm install --production' 2>&1 | tail -10 || echo "    npm install skipped"
+else
+  echo "    (client/server not found; skipping app copy)"
+fi
+
+# Create systemd service for AeThex server
+cat > "$ROOTFS_DIR/etc/systemd/system/aethex-desktop.service" << 'SERVICEEOF'
+[Unit]
+Description=AeThex Desktop Server
+After=network.target
+
+[Service]
+Type=simple
+User=aethex
+WorkingDirectory=/opt/aethex-desktop
+ExecStart=/usr/bin/npm start
+Restart=always
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+SERVICEEOF
+
+# Enable AeThex service
+chroot "$ROOTFS_DIR" systemctl enable aethex-desktop.service 2>/dev/null || echo "    systemd service added"
+
+# Create auto-start script for Firefox kiosk
+mkdir -p "$ROOTFS_DIR/home/aethex/.config/autostart"
+cat > "$ROOTFS_DIR/home/aethex/.config/autostart/aethex-kiosk.desktop" << 'KIOSK'
+[Desktop Entry]
+Type=Application
+Name=AeThex Kiosk
+Exec=firefox --kiosk http://localhost:5000
+Hidden=false
+NoDisplay=false
+X-GNOME-Autostart-enabled=true
+KIOSK
+
+chroot "$ROOTFS_DIR" chown -R aethex:aethex /home/aethex
+
+echo "[✓] AeThex Desktop integrated with Xfce auto-login and Firefox kiosk"
 
 echo "[+] Extracting kernel and initrd..."
-KERNEL=$(find "$ROOTFS_DIR/boot" -name "vmlinuz-*" -type f | head -1)
+KERNEL="$(ls -1 $ROOTFS_DIR/boot/vmlinuz-* 2>/dev/null | head -n 1)"
-INITRD=$(find "$ROOTFS_DIR/boot" -name "initrd.img-*" -type f | head -1)
+INITRD="$(ls -1 $ROOTFS_DIR/boot/initrd.img-* 2>/dev/null | head -n 1)"
 
 if [ -z "$KERNEL" ] || [ -z "$INITRD" ]; then
   echo "[!] Kernel or initrd not found."
-  mkdir -p "$BUILD_DIR"
+  ls -la "$ROOTFS_DIR/boot/" || true
+  exit 1
+fi
+
+cp "$KERNEL" "$ISO_DIR/casper/vmlinuz"
+cp "$INITRD" "$ISO_DIR/casper/initrd.img"
+echo "[✓] Kernel: $(basename "$KERNEL")"
+echo "[✓] Initrd: $(basename "$INITRD")"
   echo "No kernel found in rootfs" > "$BUILD_DIR/README.txt"
   exit 0
 fi
 
 cp "$KERNEL" "$ISO_DIR/casper/vmlinuz"
-cp "$INITRD" "$ISO_DIR/casper/initrd.img"
+cp "$INITRD" "$ISO_DIR/casper/initrd.i
-echo "[✓] Kernel: $(basename $KERNEL)"
-echo "[✓] Initrd: $(basename $INITRD)"
 
-echo "[+] Creating squashfs (this may take 5-10 min)..."
+# Unmount before squashfs
-if command -v mksquashfs &> /dev/null; then
+echo "[+] Unmounting chroot filesystems..."
-  mksquashfs "$ROOTFS_DIR" "$ISO_DIR/casper/filesystem.squashfs" -b 1048576 -comp xz 2>&1 | tail -3
+umount -lf "$ROOTFS_DIR/procfilesystem..."
+echo "    (compressing ~2-3GB desktop, takes 10-15 minutes...)"
+mksquashfs "$ROOTFS_DIR" "$ISO_DIR/casper/filesystem.squashfs" -b 1048576 -comp xz -Xdict-size 100% 2>&1 | tail -3mksquashfs "$ROOTFS_DIR" "$ISO_DIR/casper/filesystem.squashfs" -b 1048576 -comp xz 2>&1 | tail -3
 else
   echo "[!] mksquashfs not found; cannot create ISO."
   mkdir -p "$BUILD_DIR"
@@ -79,35 +186,35 @@ TIMEOUT 50
 DEFAULT linux
 
 LABEL linux
+  KERNELISO_DIR/isolinux/isolinux.cfg" << 'EOF'
+PROMPT 0
+TIMEOUT 50
+DEFAULT linux
+
+LABEL linux
+  MENU LABEL AeThex OS
   KERNEL /casper/vmlinuz
   APPEND initrd=/casper/initrd.img boot=casper quiet splash
 EOF
-cp "$BUILD_DIR/isolinux.cfg" "$ISO_DIR/isolinux/"
+cp /usr/lib/syslinux/isolinux.bin "$ISO_DIR/isolinux/" 2>/dev/null || \
-cp /usr/lib/syslinux/isolinux.bin "$ISO_DIR/isolinux/" 2>/dev/null || echo "[!] isolinux.bin missing"
+cp /usr/share/syslinux/isolinux.bin "$ISO_DIR/isolinux/" 2>/dev/null || echo "[!] isolinux.bin missing"
-cp /usr/lib/syslinux/ldlinux.c32 "$ISO_DIR/isolinux/" 2>/dev/null || echo "[!] ldlinux.c32 missing"
+cp /usr/lib/syslinux/ldlinux.c32 "$ISO_DIR/isolinux/" 2>/dev/null || \
+cp /usr/share/syslinux/ldlinux.c32 "$ISO_DIR/isolinux/" 2>/dev/null || echo "[!] ldlinux.c32 missing"
 
 echo "[+] Setting up UEFI boot (GRUB)..."
-cat > "$BUILD_DIR/grub.cfg" << 'EOF'
+cat > "$ISO_DIR/boot/grub/grub.cfg" << 'EOF'
 set timeout=10
 set default=0
+with grub-mkrescue..."
+grub-mkrescue -o "$BUILD_DIR/$ISO_NAME" "$ISO_DIR" --verbose 2>&1 | tail -20
 
-menuentry 'AeThex OS' {
+echo "[+] Computing SHA256 checksum..."
-  linux /casper/vmlinuz boot=casper quiet splash
-  initrd /casper/initrd.img
-}
-EOF
-cp "$BUILD_DIR/grub.cfg" "$ISO_DIR/boot/grub/"
-
-echo "[+] Building hybrid ISO (BIOS + UEFI)..."
-grub-mkrescue -o "$BUILD_DIR/$ISO_NAME" "$ISO_DIR" 2>&1 | grep -E "done|error" || echo "[*] ISO generation in progress..."
-
-echo "[+] Computing checksum..."
 if [ -f "$BUILD_DIR/$ISO_NAME" ]; then
   cd "$BUILD_DIR"
-  sha256sum "$ISO_NAME" > SHA256
+  sha256sum "$ISO_NAME" > "$ISO_NAME.sha256"
   echo "[✓] ISO ready:"
   ls -lh "$ISO_NAME" | awk '{print "    Size: " $5}'
-  cat SHA256 | awk '{print "    SHA256: " $1}'
+  cat "$ISO_NAME.sha256" | awk '{print "    SHA256: " $1}'
   echo "[✓] Location: $BUILD_DIR/$ISO_NAME"
 else
   echo "[!] ISO creation failed."
@@ -117,4 +224,17 @@ fi
 echo "[*] Cleaning up rootfs..."
 rm -rf "$ROOTFS_DIR"
 
+echo "[✓] Build complete!"
+echo ""
+echo "=== AeThex OS Full Desktop Edition ==="
+echo "Features:"
+echo "  - Xfce desktop environment"
+echo "  - Firefox browser (auto-launches in kiosk mode)"
+echo "  - Node.js 20.x + npm"
+echo "  - AeThex Desktop app at /opt/aethex-desktop"
+echo "  - Auto-login as user 'aethex'"
+echo "  - NetworkManager for WiFi/Ethernet"
+echo "  - Audio support (PulseAudio)"
+echo ""
+echo "Flash to USB: sudo ./script/flash-usb.sh -i $BUILD_DIR/$ISO_NAME
 echo "[✓] Done!"

script/gitlab-download-artifacts.sh

@@ -11,8 +11,13 @@ PIPELINE_ID="${PIPELINE_ID:-}"
 OUT_DIR="${OUT_DIR:-artifacts}"
 
 if [[ -z "${GITLAB_TOKEN:-}" ]]; then
-  echo "GITLAB_TOKEN is required" >&2
+  if [[ -n "${GITLAB_TOKEN_FILE:-}" && -r "$GITLAB_TOKEN_FILE" ]]; then
+    GITLAB_TOKEN=$(cat "$GITLAB_TOKEN_FILE")
+  else
+    echo "GITLAB_TOKEN is required. Set GITLAB_TOKEN or GITLAB_TOKEN_FILE." >&2
+    echo "Example: export GITLAB_TOKEN=... or export GITLAB_TOKEN_FILE=~/gitlab.token" >&2
     exit 1
+  fi
 fi
 
 if [[ -z "$PROJECT_PATH" ]]; then
@@ -55,9 +60,7 @@ if [[ -z "$PIPELINE_ID" ]]; then
 fi
 
 JOBS_JSON=$(get_json "$API_BASE/projects/$PROJECT_ENC/pipelines/$PIPELINE_ID/jobs?scope=success")
-JOB_ID=$(echo "$JOBS_JSON" | jq -r 
+JOB_ID=$(echo "$JOBS_JSON" | jq -r --arg name "$JOB_NAME" '[.[] | select(.name == $name and .artifacts_file and (.artifacts_file.filename != null))][0].id')
-  --arg name "$JOB_NAME" 
-  '[.[] | select(.name == $name and .artifacts_file and (.artifacts_file.filename != null))][0].id')
 
 if [[ -z "$JOB_ID" || "$JOB_ID" == "null" ]]; then
   echo "No job with artifacts found matching name=$JOB_NAME in pipeline=$PIPELINE_ID" >&2