linux-desktop-manager 1.0.0__tar.gz

linux_desktop_manager-1.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Shashan Lumbhani
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

linux_desktop_manager-1.0.0/PKG-INFO

@@ -0,0 +1,182 @@
+Metadata-Version: 2.4
+Name: linux-desktop-manager
+Version: 1.0.0
+Summary: All-In-One Linux Desktop Environment & Remote Access Manager (XRDP, VNC, noVNC, X2Go, Tunnels) with Interactive Arrow-Key TUI & CLI
+Author-email: Shashan Lumbhani <lumbhanishashan1510@gmail.com>
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/soni-shashan/linux-desktop-manager
+Project-URL: Repository, https://github.com/soni-shashan/linux-desktop-manager
+Project-URL: Issues, https://github.com/soni-shashan/linux-desktop-manager/issues
+Keywords: linux,desktop-environment,remote-desktop,xrdp,vnc,novnc,x2go,cloudflared,tunnelmate,tui,cli
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Console
+Classifier: Intended Audience :: System Administrators
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: System :: Systems Administration
+Classifier: Topic :: Terminals
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: tunnelmate-cli>=1.1.8
+Requires-Dist: rich>=13.0.0
+Requires-Dist: questionary>=2.0.0
+Dynamic: license-file
+
+# ⚡ Linux Desktop Manager (`linux-desktop-manager`)
+
+> **All-In-One Linux Desktop Environment & Remote Access Orchestrator**  
+> *Interactive Arrow-Key TUI Menu, Full CLI Automation, 14 Desktops, 6 Remote Protocols, and Built-In TunnelMate Cloudflare Ingress.*
+
+**Author:** [Shashan Lumbhani](mailto:lumbhanishashan1510@gmail.com)  
+**License:** [MIT](LICENSE)  
+**Supported Distros:** Ubuntu, Debian, RHEL, Fedora, Rocky Linux, AlmaLinux, Arch Linux, CachyOS, openSUSE, Alpine Linux  
+**Environments:** Bare-Metal & Cloud VMs (Systemd) + Docker/LXC/Colab Containers (Non-Systemd)  
+**Ingress Engine:** Powered by [TunnelMate (`tunnelmate-cli`)](https://pypi.org/project/tunnelmate-cli/)
+
+---
+
+## 🚀 Features
+
+- **🎯 Interactive Arrow-Key TUI Menu:** Built with `questionary` and `rich` for seamless keyboard navigation over SSH.
+- **🖥️ 14 Desktop Environments & Window Managers:**
+  - *Full Desktops:* XFCE4 (Recommended), KDE Plasma, GNOME Shell, MATE, Cinnamon, LXQt, LXDE, Budgie, Deepin (DDE), Enlightenment.
+  - *Lightweight & Tiling WMs:* i3wm, Openbox, IceWM, Fluxbox.
+- **🌐 6 Remote Access Protocols & Web Consoles:**
+  - **XRDP Server (Port 3389):** Microsoft Remote Desktop (`mstsc.exe`, Remmina, macOS RDP).
+  - **OpenSSH Server + X11 Forwarding (Port 22):** Secure terminal with remote GUI application forwarding.
+  - **TigerVNC Server (Port 5901):** Display `:1` RFB protocol for standard VNC viewers.
+  - **noVNC HTML5 Web Desktop (Port 6080):** Zero-install browser desktop over WebSocket.
+  - **X2Go Server (Port 22):** Low-bandwidth high-speed remote session over SSH.
+  - **Cockpit Web Console (Port 9090):** Modern web administration console.
+- **⚡ Built-In Public Cloud Ingress (Powered by TunnelMate):**
+  - **TunnelMate Cloudflare TCP Tunnel (Windows RDP Port 3389):** Exposes Microsoft Remote Desktop over Cloudflare TCP protocol. Connect with `cloudflared access rdp --hostname <host> --url localhost:3389` and `mstsc.exe`.
+  - **TunnelMate Cloudflare HTTP Tunnel (Browser noVNC Port 6080):** Instantly generates public HTTPS links (`https://*.trycloudflare.com/vnc.html`) for noVNC browser desktop.
+- **🛡️ Integrated Security & Firewall:** 1-click port inspection and opening for UFW & Firewalld.
+- **👤 Multi-User & Session Manager:** Automatic setup of `~/.xsession`, `~/.xsessionrc`, Polkit colord popup suppression, and DBus daemon handling.
+- **🧹 Complete Clean Wipe:** Option to safely purge remote desktop services and restore server to clean state.
+
+---
+
+## 📦 Installation & Setup
+
+### Option 1: Install from PyPI
+
+```bash
+pip install linux-desktop-manager
+```
+
+### Option 2: Install from Source
+
+```bash
+git clone https://github.com/shashansoni/linux-desktop-manager.git
+cd linux-desktop-manager
+pip install -e .
+```
+
+---
+
+## 🎮 Usage
+
+### 1. Interactive Arrow-Key TUI Menu (Default)
+
+Launch the full interactive terminal menu with:
+
+```bash
+sudo linux-desktop-manager
+# or short alias:
+sudo ldm
+```
+
+Use your **Up/Down arrow keys**, **Space** to toggle checklist items, and **Enter** to select.
+
+---
+
+### 2. Command-Line (CLI) Automation
+
+You can also use `linux-desktop-manager` in headless scripts, cloud deployment pipelines, and Docker containers:
+
+```bash
+# View real-time status of services, active DE, and listening ports:
+sudo linux-desktop-manager --status
+
+# Install a desktop environment:
+sudo linux-desktop-manager --install-de xfce4
+
+# Switch default active session for user:
+sudo linux-desktop-manager --set-de xfce4 --user myuser
+
+# Manage individual services:
+sudo linux-desktop-manager --start xrdp
+sudo linux-desktop-manager --stop xrdp
+sudo linux-desktop-manager --restart tigervnc
+sudo linux-desktop-manager --install-service novnc
+
+# Control public cloud tunnels:
+sudo linux-desktop-manager --tunnel rdp      # Start TunnelMate Cloudflare TCP tunnel for Windows RDP (Port 3389)
+sudo linux-desktop-manager --tunnel cf       # Start TunnelMate Cloudflare HTTPS browser tunnel (Port 6080)
+sudo linux-desktop-manager --tunnel stop     # Stop all public tunnels
+
+# Open all remote desktop ports in firewall:
+sudo linux-desktop-manager --allow-ports
+
+# Clean wipe all remote desktop components:
+sudo linux-desktop-manager --purge-all
+```
+
+---
+
+## 🐍 Python Library API
+
+You can import `linux_desktop_manager` directly in your Python projects and orchestration scripts:
+
+```python
+from linux_desktop_manager import (
+    ServerEnv,
+    DesktopEnvManager,
+    RemoteServiceManager,
+    TunnelManager,
+    FirewallManager,
+    UserManager
+)
+
+# 1. Inspect Server Environment
+env = ServerEnv()
+print("OS:", env.os_info["pretty_name"])
+print("Package Manager:", env.pkg_mgr)
+print("Runtime Mode:", env.env_type)
+print("Listening Ports:", env.get_listening_ports())
+
+# 2. Manage Desktop Environments
+de_mgr = DesktopEnvManager(env)
+de_mgr.install_desktop("xfce4", target_user="ubuntu", set_as_default=True)
+
+# 3. Manage Remote Services
+svc_mgr = RemoteServiceManager(env)
+svc_mgr.install_service("xrdp", target_user="ubuntu")
+svc_mgr.start_service("xrdp")
+
+# 4. Manage Cloudflare Tunnels (Powered by TunnelMate)
+tunnel_mgr = TunnelManager()
+
+# Browser noVNC HTTP Ingress
+url = tunnel_mgr.start_cloudflare_tunnel(port=6080)
+print(f"Web Browser Desktop URL: {url}/vnc.html")
+
+# Windows RDP TCP Ingress
+rdp_url = tunnel_mgr.start_rdp_tcp_tunnel(port=3389)
+print(f"Windows RDP Cloudflare TCP Address: {rdp_url}")
+```
+
+---
+
+## 📄 License
+
+This project is licensed under the **MIT License**. Created by [Shashan Lumbhani](https://pypi.org/project/tunnelmate-cli/).

linux_desktop_manager-1.0.0/README.md

@@ -0,0 +1,150 @@
+# ⚡ Linux Desktop Manager (`linux-desktop-manager`)
+
+> **All-In-One Linux Desktop Environment & Remote Access Orchestrator**  
+> *Interactive Arrow-Key TUI Menu, Full CLI Automation, 14 Desktops, 6 Remote Protocols, and Built-In TunnelMate Cloudflare Ingress.*
+
+**Author:** [Shashan Lumbhani](mailto:lumbhanishashan1510@gmail.com)  
+**License:** [MIT](LICENSE)  
+**Supported Distros:** Ubuntu, Debian, RHEL, Fedora, Rocky Linux, AlmaLinux, Arch Linux, CachyOS, openSUSE, Alpine Linux  
+**Environments:** Bare-Metal & Cloud VMs (Systemd) + Docker/LXC/Colab Containers (Non-Systemd)  
+**Ingress Engine:** Powered by [TunnelMate (`tunnelmate-cli`)](https://pypi.org/project/tunnelmate-cli/)
+
+---
+
+## 🚀 Features
+
+- **🎯 Interactive Arrow-Key TUI Menu:** Built with `questionary` and `rich` for seamless keyboard navigation over SSH.
+- **🖥️ 14 Desktop Environments & Window Managers:**
+  - *Full Desktops:* XFCE4 (Recommended), KDE Plasma, GNOME Shell, MATE, Cinnamon, LXQt, LXDE, Budgie, Deepin (DDE), Enlightenment.
+  - *Lightweight & Tiling WMs:* i3wm, Openbox, IceWM, Fluxbox.
+- **🌐 6 Remote Access Protocols & Web Consoles:**
+  - **XRDP Server (Port 3389):** Microsoft Remote Desktop (`mstsc.exe`, Remmina, macOS RDP).
+  - **OpenSSH Server + X11 Forwarding (Port 22):** Secure terminal with remote GUI application forwarding.
+  - **TigerVNC Server (Port 5901):** Display `:1` RFB protocol for standard VNC viewers.
+  - **noVNC HTML5 Web Desktop (Port 6080):** Zero-install browser desktop over WebSocket.
+  - **X2Go Server (Port 22):** Low-bandwidth high-speed remote session over SSH.
+  - **Cockpit Web Console (Port 9090):** Modern web administration console.
+- **⚡ Built-In Public Cloud Ingress (Powered by TunnelMate):**
+  - **TunnelMate Cloudflare TCP Tunnel (Windows RDP Port 3389):** Exposes Microsoft Remote Desktop over Cloudflare TCP protocol. Connect with `cloudflared access rdp --hostname <host> --url localhost:3389` and `mstsc.exe`.
+  - **TunnelMate Cloudflare HTTP Tunnel (Browser noVNC Port 6080):** Instantly generates public HTTPS links (`https://*.trycloudflare.com/vnc.html`) for noVNC browser desktop.
+- **🛡️ Integrated Security & Firewall:** 1-click port inspection and opening for UFW & Firewalld.
+- **👤 Multi-User & Session Manager:** Automatic setup of `~/.xsession`, `~/.xsessionrc`, Polkit colord popup suppression, and DBus daemon handling.
+- **🧹 Complete Clean Wipe:** Option to safely purge remote desktop services and restore server to clean state.
+
+---
+
+## 📦 Installation & Setup
+
+### Option 1: Install from PyPI
+
+```bash
+pip install linux-desktop-manager
+```
+
+### Option 2: Install from Source
+
+```bash
+git clone https://github.com/shashansoni/linux-desktop-manager.git
+cd linux-desktop-manager
+pip install -e .
+```
+
+---
+
+## 🎮 Usage
+
+### 1. Interactive Arrow-Key TUI Menu (Default)
+
+Launch the full interactive terminal menu with:
+
+```bash
+sudo linux-desktop-manager
+# or short alias:
+sudo ldm
+```
+
+Use your **Up/Down arrow keys**, **Space** to toggle checklist items, and **Enter** to select.
+
+---
+
+### 2. Command-Line (CLI) Automation
+
+You can also use `linux-desktop-manager` in headless scripts, cloud deployment pipelines, and Docker containers:
+
+```bash
+# View real-time status of services, active DE, and listening ports:
+sudo linux-desktop-manager --status
+
+# Install a desktop environment:
+sudo linux-desktop-manager --install-de xfce4
+
+# Switch default active session for user:
+sudo linux-desktop-manager --set-de xfce4 --user myuser
+
+# Manage individual services:
+sudo linux-desktop-manager --start xrdp
+sudo linux-desktop-manager --stop xrdp
+sudo linux-desktop-manager --restart tigervnc
+sudo linux-desktop-manager --install-service novnc
+
+# Control public cloud tunnels:
+sudo linux-desktop-manager --tunnel rdp      # Start TunnelMate Cloudflare TCP tunnel for Windows RDP (Port 3389)
+sudo linux-desktop-manager --tunnel cf       # Start TunnelMate Cloudflare HTTPS browser tunnel (Port 6080)
+sudo linux-desktop-manager --tunnel stop     # Stop all public tunnels
+
+# Open all remote desktop ports in firewall:
+sudo linux-desktop-manager --allow-ports
+
+# Clean wipe all remote desktop components:
+sudo linux-desktop-manager --purge-all
+```
+
+---
+
+## 🐍 Python Library API
+
+You can import `linux_desktop_manager` directly in your Python projects and orchestration scripts:
+
+```python
+from linux_desktop_manager import (
+    ServerEnv,
+    DesktopEnvManager,
+    RemoteServiceManager,
+    TunnelManager,
+    FirewallManager,
+    UserManager
+)
+
+# 1. Inspect Server Environment
+env = ServerEnv()
+print("OS:", env.os_info["pretty_name"])
+print("Package Manager:", env.pkg_mgr)
+print("Runtime Mode:", env.env_type)
+print("Listening Ports:", env.get_listening_ports())
+
+# 2. Manage Desktop Environments
+de_mgr = DesktopEnvManager(env)
+de_mgr.install_desktop("xfce4", target_user="ubuntu", set_as_default=True)
+
+# 3. Manage Remote Services
+svc_mgr = RemoteServiceManager(env)
+svc_mgr.install_service("xrdp", target_user="ubuntu")
+svc_mgr.start_service("xrdp")
+
+# 4. Manage Cloudflare Tunnels (Powered by TunnelMate)
+tunnel_mgr = TunnelManager()
+
+# Browser noVNC HTTP Ingress
+url = tunnel_mgr.start_cloudflare_tunnel(port=6080)
+print(f"Web Browser Desktop URL: {url}/vnc.html")
+
+# Windows RDP TCP Ingress
+rdp_url = tunnel_mgr.start_rdp_tcp_tunnel(port=3389)
+print(f"Windows RDP Cloudflare TCP Address: {rdp_url}")
+```
+
+---
+
+## 📄 License
+
+This project is licensed under the **MIT License**. Created by [Shashan Lumbhani](https://pypi.org/project/tunnelmate-cli/).

linux_desktop_manager-1.0.0/pyproject.toml

@@ -0,0 +1,61 @@
+[build-system]
+requires = ["setuptools>=61.0", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "linux-desktop-manager"
+version = "1.0.0"
+description = "All-In-One Linux Desktop Environment & Remote Access Manager (XRDP, VNC, noVNC, X2Go, Tunnels) with Interactive Arrow-Key TUI & CLI"
+readme = "README.md"
+requires-python = ">=3.9"
+license = "MIT"
+authors = [
+    { name = "Shashan Lumbhani", email = "lumbhanishashan1510@gmail.com" }
+]
+keywords = [
+    "linux",
+    "desktop-environment",
+    "remote-desktop",
+    "xrdp",
+    "vnc",
+    "novnc",
+    "x2go",
+    "cloudflared",
+    "tunnelmate",
+    "tui",
+    "cli"
+]
+classifiers = [
+    "Development Status :: 5 - Production/Stable",
+    "Environment :: Console",
+    "Intended Audience :: System Administrators",
+    "Intended Audience :: Developers",
+    "Operating System :: POSIX :: Linux",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.9",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
+    "Topic :: System :: Systems Administration",
+    "Topic :: Terminals",
+]
+
+dependencies = [
+    "tunnelmate-cli>=1.1.8",
+    "rich>=13.0.0",
+    "questionary>=2.0.0",
+]
+
+[project.scripts]
+linux-desktop-manager = "linux_desktop_manager.cli:main"
+ldm = "linux_desktop_manager.cli:main"
+
+[project.urls]
+Homepage = "https://github.com/soni-shashan/linux-desktop-manager"
+Repository = "https://github.com/soni-shashan/linux-desktop-manager"
+Issues = "https://github.com/soni-shashan/linux-desktop-manager/issues"
+
+[tool.setuptools.packages.find]
+where = ["src"]

linux_desktop_manager-1.0.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

linux_desktop_manager-1.0.0/src/linux_desktop_manager/__init__.py

@@ -0,0 +1,29 @@
+"""
+Linux Desktop Manager by Shashan Lumbhani.
+All-In-One Linux Desktop Environment & Remote Ingress Orchestrator.
+"""
+
+from .server_env import ServerEnv
+from .desktop_env import DesktopEnvManager
+from .remote_services import RemoteServiceManager
+from .tunnels import TunnelManager
+from .users import UserManager
+from .firewall import FirewallManager
+from .interactive import run_interactive_menu
+from .cli import main
+
+__version__ = "1.0.0"
+__author__ = "Shashan Lumbhani"
+__license__ = "MIT"
+
+__all__ = [
+    "ServerEnv",
+    "DesktopEnvManager",
+    "RemoteServiceManager",
+    "TunnelManager",
+    "UserManager",
+    "FirewallManager",
+    "run_interactive_menu",
+    "main",
+    "__version__"
+]

linux_desktop_manager-1.0.0/src/linux_desktop_manager/__main__.py

@@ -0,0 +1,7 @@
+"""
+Executable module entry point for `python3 -m linux_desktop_manager`.
+"""
+from linux_desktop_manager.cli import main
+
+if __name__ == "__main__":
+    main()

linux_desktop_manager-1.0.0/src/linux_desktop_manager/cli.py

@@ -0,0 +1,216 @@
+"""
+Command-Line Interface (CLI) entry point for linux-desktop-manager.
+"""
+
+from __future__ import annotations
+
+import os
+import shutil
+import argparse
+import sys
+from .formatting import console, print_banner, print_services_table, print_desktops_table, print_connection_card
+from .server_env import ServerEnv
+from .desktop_env import DesktopEnvManager
+from .remote_services import RemoteServiceManager
+from .tunnels import TunnelManager
+from .firewall import FirewallManager
+from .users import UserManager
+from .interactive import run_interactive_menu
+
+
+def ensure_system_symlinks() -> None:
+    """Ensure /usr/local/bin/ldm and /usr/local/bin/linux-desktop-manager wrappers exist so 'sudo ldm' works directly."""
+    if os.geteuid() != 0:
+        return
+
+    wrapper_content = f"""#!/usr/bin/env bash
+# Auto-generated by Linux Desktop Manager Orchestrator
+# Preserves user site-packages and editable installs when running under sudo.
+if [ -n "$SUDO_USER" ] && [ "$SUDO_USER" != "root" ]; then
+    USER_HOME=$(getent passwd "$SUDO_USER" 2>/dev/null | cut -d: -f6)
+    [ -z "$USER_HOME" ] && USER_HOME="/home/$SUDO_USER"
+    for pdir in "$USER_HOME"/.local/lib/python*/site-packages; do
+        if [ -d "$pdir" ]; then
+            export PYTHONPATH="$pdir:$PYTHONPATH"
+            for pth in "$pdir"/*.pth; do
+                if [ -f "$pth" ]; then
+                    while IFS= read -r line || [ -n "$line" ]; do
+                        [[ "$line" =~ ^[#] ]] && continue
+                        [ -d "$line" ] && export PYTHONPATH="$line:$PYTHONPATH"
+                    done < "$pth"
+                fi
+            done
+        fi
+    done
+fi
+
+exec {sys.executable} -m linux_desktop_manager "$@"
+"""
+
+    for name in ["ldm", "linux-desktop-manager"]:
+        usr_bin_target = f"/usr/local/bin/{name}"
+        try:
+            needs_write = True
+            if os.path.exists(usr_bin_target) and not os.path.islink(usr_bin_target):
+                try:
+                    with open(usr_bin_target, "r") as f:
+                        content = f.read()
+                        if "linux_desktop_manager" in content and "pth" in content:
+                            needs_write = False
+                except Exception:
+                    pass
+
+            if needs_write:
+                if os.path.islink(usr_bin_target) or os.path.exists(usr_bin_target):
+                    os.remove(usr_bin_target)
+                with open(usr_bin_target, "w") as f:
+                    f.write(wrapper_content)
+                os.chmod(usr_bin_target, 0o755)
+        except Exception:
+            pass
+
+
+def check_elevation() -> None:
+    """Auto-elevates with sudo preserving user site-packages and editable paths if not root."""
+    if any(arg in sys.argv for arg in ["-h", "--help"]):
+        return
+
+    # If already root, ensure system wrappers exist in /usr/local/bin
+    if os.geteuid() == 0:
+        ensure_system_symlinks()
+        return
+
+    # Non-root user: Auto-elevate via sudo preserving all non-system sys.path entries
+    if shutil.which("sudo"):
+        console.print("[dim cyan]⚡ Elevated privileges required. Elevating with sudo...[/dim cyan]")
+        try:
+            user_paths = [p for p in sys.path if p and not p.startswith("/usr/lib") and os.path.isdir(p)]
+            pythonpath = ":".join(user_paths) if user_paths else ""
+
+            cmd = ["sudo", "env"]
+            if pythonpath:
+                cmd.append(f"PYTHONPATH={pythonpath}")
+            cmd.extend([sys.executable, "-m", "linux_desktop_manager"] + sys.argv[1:])
+
+            os.execvp("sudo", cmd)
+        except Exception as e:
+            console.print(f"[bold red]Elevation failed: {e}. Please run with sudo.[/bold red]")
+            sys.exit(1)
+    else:
+        console.print("[bold red]Root privileges are required to manage desktop environments and services.[/bold red]")
+        sys.exit(1)
+
+
+def main() -> None:
+    check_elevation()
+    parser = argparse.ArgumentParser(
+        prog="linux-desktop-manager",
+        description="⚡ Linux Desktop Environment & Remote Access Manager (CLI & Interactive TUI)",
+        epilog="""
+Examples:
+  sudo linux-desktop-manager                 # Launch full interactive Arrow-Key TUI menu
+  sudo linux-desktop-manager --status        # View current status of services and ports
+  sudo linux-desktop-manager --install-de xfce4
+  sudo linux-desktop-manager --start xrdp
+  sudo linux-desktop-manager --tunnel cf     # Expose Browser Desktop via TunnelMate
+        """
+    )
+    parser.add_argument("--tui", action="store_true", help="Launch interactive Arrow-Key TUI menu (default if no flags)")
+    parser.add_argument("--status", action="store_true", help="Print live service, desktop, and port status table")
+    parser.add_argument("--install-wizard", action="store_true", help="Launch step-by-step installation wizard")
+    parser.add_argument("--install-de", metavar="NAME", help="Install a desktop environment (e.g. xfce4, plasma, i3, gnome)")
+    parser.add_argument("--uninstall-de", metavar="NAME", help="Uninstall a desktop environment")
+    parser.add_argument("--set-de", metavar="NAME", help="Set default desktop session for target user")
+    parser.add_argument("--start", metavar="SERVICE", help="Start service (xrdp, openssh, tigervnc, novnc, x2go, cockpit)")
+    parser.add_argument("--stop", metavar="SERVICE", help="Stop service")
+    parser.add_argument("--restart", metavar="SERVICE", help="Restart service")
+    parser.add_argument("--install-service", metavar="SERVICE", help="Install and configure service")
+    parser.add_argument("--uninstall-service", metavar="SERVICE", help="Uninstall service")
+    parser.add_argument("--tunnel", choices=["cf", "rdp", "stop"], help="Manage public tunnels: cf (browser), rdp (TunnelMate TCP RDP), stop")
+    parser.add_argument("--allow-ports", action="store_true", help="Allow all remote desktop ports in firewall")
+    parser.add_argument("--purge-all", action="store_true", help="Purge all remote desktop services and configs")
+    parser.add_argument("--user", metavar="USERNAME", help="Specify target user (default: current/sudo user)")
+
+    args = parser.parse_args()
+
+    # If no flags passed or --tui, run the interactive arrow-key TUI menu
+    if len(sys.argv) == 1 or args.tui or args.install_wizard:
+        run_interactive_menu()
+        return
+
+    # CLI automated actions
+    server_env = ServerEnv()
+    desktop_mgr = DesktopEnvManager(server_env)
+    service_mgr = RemoteServiceManager(server_env)
+    tunnel_mgr = TunnelManager()
+    firewall_mgr = FirewallManager()
+    target_user = args.user or server_env.get_invoking_user()
+
+    if args.status:
+        print_banner()
+        print_services_table(service_mgr.get_all_services_status())
+        cf_url = tunnel_mgr.get_cloudflare_url()
+        rdp_tcp_url = tunnel_mgr.get_rdp_tcp_url()
+        local_ips = server_env.get_local_ips()
+        pub_ip = server_env.get_public_ip()
+        active_de = desktop_mgr.get_active_session(target_user) or "None"
+        print_connection_card(
+            user=target_user,
+            de_name=active_de,
+            local_ip=local_ips[0] if local_ips else "127.0.0.1",
+            public_ip=pub_ip,
+            cf_url=cf_url,
+            rdp_tcp_url=rdp_tcp_url
+        )
+    elif args.install_de:
+        console.print(f"[bold cyan]Installing desktop environment: {args.install_de}...[/bold cyan]")
+        desktop_mgr.install_desktop(args.install_de, target_user, set_as_default=True, live_callback=console.print)
+    elif args.uninstall_de:
+        console.print(f"[bold red]Uninstalling desktop environment: {args.uninstall_de}...[/bold red]")
+        desktop_mgr.uninstall_desktop(args.uninstall_de, live_callback=console.print)
+    elif args.set_de:
+        if desktop_mgr.set_default_session(args.set_de, target_user):
+            console.print(f"[bold green]✔ Default session for '{target_user}' set to {args.set_de}.[/bold green]")
+        else:
+            console.print("[bold red]Failed to set session.[/bold red]")
+    elif args.start:
+        service_mgr.start_service(args.start, target_user=target_user)
+        console.print(f"[bold green]✔ Started {args.start}.[/bold green]")
+    elif args.stop:
+        service_mgr.stop_service(args.stop)
+        console.print(f"[bold yellow]Stopped {args.stop}.[/bold yellow]")
+    elif args.restart:
+        service_mgr.restart_service(args.restart, target_user=target_user)
+        console.print(f"[bold green]✔ Restarted {args.restart}.[/bold green]")
+    elif args.install_service:
+        console.print(f"[bold cyan]Installing remote service: {args.install_service}...[/bold cyan]")
+        service_mgr.install_service(args.install_service, target_user=target_user, live_callback=console.print)
+    elif args.uninstall_service:
+        service_mgr.uninstall_service(args.uninstall_service, purge_configs=True, live_callback=console.print)
+    elif args.tunnel:
+        if args.tunnel == "cf":
+            url = tunnel_mgr.start_cloudflare_tunnel(port=6080, live_callback=console.print)
+            if url:
+                console.print(f"[bold green]✔ Cloudflare Browser URL: {url}/vnc.html[/bold green]")
+        elif args.tunnel == "rdp":
+            url = tunnel_mgr.start_rdp_tcp_tunnel(port=3389, live_callback=console.print)
+            if url:
+                clean_host = url.replace("https://", "").replace("http://", "").strip("/")
+                console.print(f"[bold green]✔ TunnelMate Cloudflare TCP RDP Assigned: {url}[/bold green]")
+                console.print(f"[dim cyan]Client Command: cloudflared access rdp --hostname {clean_host} --url localhost:3389[/dim cyan]")
+                console.print(f"[dim]Then open Windows mstsc to: localhost:3389[/dim]")
+        elif args.tunnel == "stop":
+            tunnel_mgr.stop_all_tunnels()
+            console.print("[yellow]All tunnels stopped.[/yellow]")
+    elif args.allow_ports:
+        firewall_mgr.allow_all_remote_ports()
+        console.print("[bold green]✔ All remote desktop ports allowed in firewall.[/bold green]")
+    elif args.purge_all:
+        for sid in ["novnc", "tigervnc", "xrdp", "x2go", "cockpit"]:
+            service_mgr.uninstall_service(sid, purge_configs=True, live_callback=console.print)
+        tunnel_mgr.stop_all_tunnels()
+        console.print("[bold green]✔ Clean wipe completed.[/bold green]")
+
+
+if __name__ == "__main__":
+    main()