DaaC

Desktop as a Container

Guacamole
XRDP
noVNC (broken)

Prerequisites

This container requires systemd - so you will need enable the relevant SELinux policy

setsebool -P container_manage_cgroup 1

Build Arguments

If you want ldap auth set these build args:

ARG IPA_SERVER=""
ARG LDAP_BASEDN=""

If you want a local user set these build args:

ARG LOCAL_AUTH_USER=""
ARG LOCAL_AUTH_USER_PWHASH=""

If you want nfs home dirs set set this build args:

ARG NFS_HOMEDIR_SEVER=""

Set a desktop environment:

ARG DESKTOP="<gnome3, mate>"

Install OpenShift Developer Tools

ARG OC_DEV_TOOLS=true

Howto Build

buildah bud -f <xrdp, guacamole, html5>/Dockerfile \
            -t <xrdp, guacamole, html5> \
            --build-arg LOCAL_AUTH_USER_PWHASH=<password hash> --build-arg LOCAL_AUTH_USER=<user> \
            --build-arg DESKTOP=<mate, gnome3> \
            --build-arg OC_DEV_TOOLS=true \
            --squash --logfile ./buildlog .

Docker Build

For a docker build with guacamole that hooks it all together run.

You need a hashed password

docker build -f html5/Dockerfile \
            -t html5 \
            --build-arg LOCAL_AUTH_USER_PWHASH=<password hash> --build-arg LOCAL_AUTH_USER=<user> \
            --build-arg OC_DEV_TOOLS=true \
            --build-arg DESKTOP=<mate, gnome3> .

HowTo Run

If you are using the autofs mounts you will need to start the container with SYS_ADMIN capabilities, else just run normally.

-p exposes the 3389 or 8080 port on the host and forwards it through to the container
-dns sets DNS for the container if host is localhost
-cap-add run this a privileged container

With autofs home mounts

Mounting directly within in the container requires the container to run as privileged mode

podman run -p 8080:8080 --dns 8.8.8.8 -d --cap-add SYS_ADMIN -v /sys/fs/cgroup:/sys/fs/cgroup:ro  localhost/<xrdp, guacamole, html5>

docker run -p 127.0.0.1:8080:8080 -d --cap-add SYS_ADMIN -v /sys/fs/cgroup:/sys/fs/cgroup:ro <xrdp, guacamole, html5>

Non-Privileged

podman run -p 8080:8080 --dns 8.8.8.8 -d localhost/html5

How to access

Guacamole

Browse to: http://127.0.0.1:8080/root

How to Run on MiniShift

MiniShift File

kirikae/DaaC