├── xfce4-default-config.tgz
├── README.md
├── startup.sh
└── Dockerfile


/xfce4-default-config.tgz:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/cyverse/ubuntu-desktop-docker/HEAD/xfce4-default-config.tgz


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # ubuntu-desktop-docker
 2 | 
 3 | This is a container that has a full Guacamole installation, TurboVNC and Ubuntu XFCE desktop. This allows someone to have a simple all-in-one desktop through their web browser.
 4 | 
 5 | First, get the image by cloning this repository and building it:
 6 | ```
 7 | docker build -t ubuntu18-xfce-desktop .
 8 | ```
 9 | or by pulling from Docker Hub:
10 | ```
11 | docker pull cyverse/ubuntu18-xfce-desktop
12 | ```
13 | 
14 | Then, run it:
15 | ```
16 | docker run -ti -p 8080:8080 ubuntu18-xfce-desktop
17 | ```
18 | 
19 | When the container finishes starting up, it will present you with a link to access the desktop.
20 | 
21 | You can set the resolution during startup by using environment variables with: `-e RES=1280x1024`
22 | 
23 | By default, the container starts up with SSH and VNC connections enabled in Guacamole. The `-v` or `--vnc-only` option can be passed to the entrypoint to only enable VNC:
24 | ```
25 | docker run -ti -p 8080:8080 ubuntu18-xfce-desktop --vnc-only
26 | ```
27 | 


--------------------------------------------------------------------------------
/startup.sh:
--------------------------------------------------------------------------------
  1 | #!/bin/bash
  2 | 
  3 | help (){
  4 | echo "USAGE:
  5 | docker run -it -p 8080:8080 ubuntu-desktop-docker:<tag> <option>
  6 | 
  7 | OPTIONS:
  8 | -v, --vnc-only  only add VNC connection to Guacamole (no SSH Shell)
  9 | -h, --help      print out this help
 10 | 
 11 | For more information see: https://github.com/cyverse/ubuntu-desktop-docker"
 12 | }
 13 | 
 14 | vnc-only () {
 15 |   echo \
 16 | "<user-mapping>
 17 |     <authorize username=\"user\" password=\"password\">
 18 |         <connection name=\"VNC\">
 19 |             <protocol>vnc</protocol>
 20 |             <param name=\"hostname\">localhost</param>
 21 |             <param name=\"username\">user</param>
 22 |             <param name=\"password\">password</param>
 23 |             <param name=\"port\">5901</param>
 24 |             <param name=\"enable-sftp\">true</param>
 25 |             <param name=\"sftp-username\">user</param>
 26 |             <param name=\"sftp-password\">password</param>
 27 |             <param name=\"sftp-directory\">/home/user</param>
 28 |             <param name=\"sftp-root-directory\">/home/user</param>
 29 |             <param name=\"enable-audio\">true</param>
 30 |             <param name=\"audio-servername\">127.0.0.1</param>
 31 |         </connection>
 32 |     </authorize>
 33 | </user-mapping>" > /etc/guacamole/user-mapping.xml
 34 | 
 35 |   echo \
 36 | "*==================================================================*
 37 |   Use this link for direct VNC Desktop:
 38 |   http://localhost:8080/guacamole?username=user&password=password
 39 | 
 40 |   Once connected to the session, your user info is:
 41 |       Username: \"user\"
 42 |       Password: \"password\"
 43 | *==================================================================*" > /etc/help-msg
 44 | }
 45 | 
 46 | default () {
 47 |   echo \
 48 | "<user-mapping>
 49 |     <authorize username=\"user\" password=\"password\">
 50 |         <connection name=\"VNC\">
 51 |             <protocol>vnc</protocol>
 52 |             <param name=\"hostname\">localhost</param>
 53 |             <param name=\"username\">user</param>
 54 |             <param name=\"password\">password</param>
 55 |             <param name=\"port\">5901</param>
 56 |             <param name=\"enable-sftp\">true</param>
 57 |             <param name=\"sftp-username\">user</param>
 58 |             <param name=\"sftp-password\">password</param>
 59 |             <param name=\"sftp-directory\">/home/user</param>
 60 |             <param name=\"sftp-root-directory\">/home/user</param>
 61 |             <param name=\"enable-audio\">true</param>
 62 |             <param name=\"audio-servername\">127.0.0.1</param>
 63 |         </connection>
 64 |         <connection name=\"SSH\">
 65 |             <protocol>ssh</protocol>
 66 |             <param name=\"hostname\">localhost</param>
 67 |             <param name=\"username\">user</param>
 68 |             <param name=\"password\">password</param>
 69 |             <param name=\"port\">22</param>
 70 |             <param name=\"enable-sftp\">true</param>
 71 |             <param name=\"sftp-root-directory\">/home/user</param>
 72 |         </connection>
 73 |     </authorize>
 74 | </user-mapping>" > /etc/guacamole/user-mapping.xml
 75 | 
 76 |   echo \
 77 | "*==================================================================*
 78 |   For the Guacamole Homepage:
 79 |   http://localhost:8080/?username=user&password=password
 80 | 
 81 |   For direct VNC Desktop:
 82 |   http://localhost:8080/#/client/Vk5DAGMAZGVmYXVsdA==?username=user&password=password
 83 | 
 84 |   For direct SSH Shell:
 85 |   http://localhost:8080/#/client/U1NIAGMAZGVmYXVsdA==?username=user&password=password
 86 | 
 87 |   Once connected to the session, your user info is:
 88 |       Username: \"user\"
 89 |       Password: \"password\"
 90 | *==================================================================*" > /etc/help-msg
 91 | }
 92 | 
 93 | if [[ $1 =~ -h|--help ]]; then
 94 |   help
 95 |   exit 0
 96 | fi
 97 | 
 98 | if [[ $1 =~ -v|--vnc-only ]]; then
 99 |   vnc-only
100 | else
101 |   default
102 | fi
103 | 
104 | service ssh start &&   \
105 | service tomcat8 start; \
106 | #su user -c "USER=user vncserver -depth 24 -geometry $RES -name \"VNC\" :1" && \
107 | su user -c "USER=user /opt/TurboVNC/bin/vncserver -localhost -verbose -nohttpd -depth 24 -geometry $RES -securitytypes NONE -name \"VNC\" :1" && \
108 | cat /etc/help-msg && \
109 | guacd -L debug -f
110 | 


--------------------------------------------------------------------------------
/Dockerfile:
--------------------------------------------------------------------------------
  1 | FROM ubuntu:18.04
  2 | 
  3 | ARG    TURBOVNC_VERSION="2.2.1"
  4 | ENV    GUACAMOLE_HOME="/etc/guacamole"
  5 | ENV    RES "1920x1080"
  6 | EXPOSE 8080
  7 | 
  8 | WORKDIR /etc/guacamole
  9 | 
 10 | # Install locale and set
 11 | RUN apt-get update &&            \
 12 |     apt-get install -y           \
 13 |       locales &&                 \
 14 |     apt-get clean &&             \
 15 |     rm -rf /var/lib/apt/lists/*
 16 | # Before installing desktop, set the locale to UTF-8
 17 | # see https://stackoverflow.com/questions/28405902/how-to-set-the-locale-inside-a-ubuntu-docker-container
 18 | RUN sed -i -e 's/# en_US.UTF-8 UTF-8/en_US.UTF-8 UTF-8/' /etc/locale.gen && \
 19 |     locale-gen
 20 | ENV LANG en_US.UTF-8
 21 | ENV LANGUAGE en_US:en
 22 | ENV LC_ALL en_US.UTF-8
 23 | 
 24 | # Install libraries/dependencies
 25 | RUN apt-get update &&            \
 26 |     DEBIAN_FRONTEND=noninteractive apt-get install -y \
 27 |       software-properties-common \
 28 |       libjpeg-turbo8             \
 29 |       libjpeg-turbo8-dev         \
 30 |       libcairo2-dev              \
 31 |       libossp-uuid-dev           \
 32 |       libpng-dev                 \
 33 |       libpango1.0-dev            \
 34 |       libssh2-1-dev              \
 35 |       libssl-dev                 \
 36 |       libtasn1-bin               \
 37 |       libvorbis-dev              \
 38 |       libwebp-dev                \
 39 |       libpulse-dev               \
 40 | 
 41 |       # Install remaining dependencies, tools, and XFCE desktop
 42 |       bash-completion  \
 43 |       chromium-browser \
 44 |       gcc              \
 45 |       gcc-6            \
 46 |       make             \
 47 |       openssh-server   \
 48 |       sudo             \
 49 |       tomcat8          \
 50 |       vim              \
 51 |       wget             \
 52 |       xfce4            \
 53 | #      xfce4-goodies    \
 54 |       xauth            \
 55 | 
 56 |       # install libvncserver depencies
 57 |       libvncserver-dev \
 58 |       gtk2.0       &&  \
 59 | 
 60 |     apt-get clean &&             \
 61 |     rm -rf /var/lib/apt/lists/*
 62 | 
 63 | # install turbovnc
 64 | RUN wget "https://sourceforge.net/projects/turbovnc/files/${TURBOVNC_VERSION}/turbovnc_${TURBOVNC_VERSION}_amd64.deb/download" -O /opt/turbovnc.deb && \
 65 |     dpkg -i /opt/turbovnc.deb && \
 66 |     rm -f /opt/turbovnc.deb
 67 | 
 68 | # Download necessary Guacamole files
 69 | RUN rm -rf /var/lib/tomcat8/webapps/ROOT && \
 70 |     wget "http://apache.org/dyn/closer.cgi?action=download&filename=guacamole/1.0.0/binary/guacamole-1.0.0.war" -O /var/lib/tomcat8/webapps/ROOT.war && \
 71 |     wget "http://apache.org/dyn/closer.cgi?action=download&filename=guacamole/1.0.0/source/guacamole-server-1.0.0.tar.gz" -O /etc/guacamole/guacamole-server-1.0.0.tar.gz && \
 72 |     tar xvf /etc/guacamole/guacamole-server-1.0.0.tar.gz && \
 73 |     cd /etc/guacamole/guacamole-server-1.0.0 && \
 74 |    ./configure --with-init-dir=/etc/init.d &&   \
 75 |     make CC=gcc-6 &&                            \
 76 |     make install &&                             \
 77 |     ldconfig &&                                 \
 78 |     rm -r /etc/guacamole/guacamole-server-1.0.0*
 79 | 
 80 | # Create Guacamole configurations
 81 | RUN echo "user-mapping: /etc/guacamole/user-mapping.xml" > /etc/guacamole/guacamole.properties && \
 82 |     touch /etc/guacamole/user-mapping.xml
 83 | 
 84 | # Create user account with password-less sudo abilities
 85 | RUN useradd -s /bin/bash -g 100 -G sudo -m user && \
 86 |     /usr/bin/printf '%s\n%s\n' 'password' 'password'| passwd user && \
 87 |     echo "user ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
 88 | 
 89 | # Set VNC password
 90 | #RUN mkdir /home/user/.vnc && \
 91 | #    chown user /home/user/.vnc && \
 92 | #    /usr/bin/printf '%s\n%s\n%s\n' 'password' 'password' 'n' | su user -c /opt/TurboVNC/bin/vncpasswd
 93 | #RUN  echo -n 'password\npassword\nn\n' | su user -c vncpasswd
 94 | 
 95 | # Remove keyboard shortcut to allow bash_completion in xfce4-terminal
 96 | RUN echo "DISPLAY=:1 xfconf-query -c xfce4-keyboard-shortcuts -p \"/xfwm4/custom/<Super>Tab\" -r" >> /home/user/.bashrc
 97 | 
 98 | # Fix chromium-browser to run with no sandbox
 99 | RUN sed -i -e 's/Exec=chromium-browser/Exec=chromium-browser --no-sandbox/g' /usr/share/applications/chromium-browser.desktop
100 | 
101 | # enable pulse audio
102 | RUN echo "load-module module-native-protocol-tcp auth-ip-acl=127.0.0.1 auth-anonymous=1" >> /etc/pulse/default.pa
103 | 
104 | # Add help message
105 | RUN touch /etc/help-msg
106 | 
107 | WORKDIR /home/user/Desktop
108 | 
109 | COPY startup.sh /startup.sh
110 | RUN chmod +x /startup.sh
111 | 
112 | USER 1000:100
113 | 
114 | # copy and untar the default xfce4 config so that we don't get an annoying startup dialog
115 | COPY xfce4-default-config.tgz /home/user/xfce4-default-config.tgz
116 | RUN mkdir -p /home/user/.config/xfce4/ && \
117 |     tar -C /home/user/.config/xfce4/ --strip-components=1 -xvzf /home/user/xfce4-default-config.tgz && \
118 |     rm -f /home/user/xfce4-default-config.tgz
119 | 
120 | # Fix web browser panel launcher
121 | RUN sed -i -e 's/Exec=exo-open --launch WebBrowser %u/Exec=chromium-browser --no-sandbox/g' /home/user/.config/xfce4/panel/launcher-11/15389508853.desktop
122 | 
123 | ENTRYPOINT sudo -E /startup.sh
124 | 


--------------------------------------------------------------------------------