I don't doubt vLite does several things very well. Otherwise I'd not be looking into this. But I want to make sure it doesn't make one thing very bad. If the sources will not be available, can I find a detailed documentation of the steps that vLite is performing? This would allow two things: 1) Users could write their own scripts, having full control of what they get. 2) An independent project could develop and share a validation tool which checks by providing checksums that no files are modified unexpectedly during the vLite installation. Max