diff --git a/build-rootfs.sh b/build-rootfs.sh
index 496f0309c0..5eefbb902f 100755
--- a/build-rootfs.sh
+++ b/build-rootfs.sh
@@ -112,6 +112,7 @@ mount --bind /sys "$ROOTFS_DIR/sys"
 mount --bind /run "$ROOTFS_DIR/run"
 
 # DNS resolution
+rm "$ROOTFS_DIR/etc/resolv.conf"
 cp /etc/resolv.conf "$ROOTFS_DIR/etc/resolv.conf"
 
 log "  ✓ Chroot environment ready"
@@ -1062,8 +1063,9 @@ SETUP_EOF
 
 chmod +x "$ROOTFS_DIR/tmp/setup.sh"
 
-# Copy libvlc stub into chroot (needed by bloat cleanup — ES links against libvlc.so.5)
-cp "$SCRIPT_DIR/scripts/libvlc-stub-aarch64.so" "$ROOTFS_DIR/tmp/libvlc-stub.so"
+# Build libvlc stub into chroot (needed by bloat cleanup — ES links against libvlc.so.5)
+aarch64-linux-gnu-gcc -shared -O2 -o "$ROOTFS_DIR/tmp/libvlc-stub.so" "$SCRIPT_DIR/scripts/vlc-stub.c"
+aarch64-linux-gnu-strip "$ROOTFS_DIR/tmp/libvlc-stub.so"
 
 # Copy modules.bad into chroot (installed by setup.sh to /etc/archr/)
 cp "$SCRIPT_DIR/config/modules.bad" "$ROOTFS_DIR/tmp/modules.bad"
diff --git a/setup-toolchain.sh b/setup-toolchain.sh
old mode 100644
new mode 100755