Live data from Hacker News

Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

docs.linuxserver.io

11–20 of 81 posts

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#12
post #4

Anyone have more info on this? Does it run systemd in those containers (I didn't see any systemd specific mounts). This would be interesting to try out, as docker (via compose) is a bit easier to manage than - for example - VMs with virt-manager/cockpit-machines.

No systemd, these just start a shell script on init that launches the WM. They're based around the open-source component of this product: https://www.kasmweb.com/docs/latest/index.html

I find that they are slightly more sluggish than Moonlight/Sunshine for remote streaming, but generally faster/better than x11vnc. Not quite good enough for gaming yet, but plenty for web browsing, Blender, etc.

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#13
post #5

> "Warning Do not put this on the Internet if you do not know what you are doing. By default this container has no authentication and the optional environment variables CUSTOM_USER and PASSWORD to enable basic http auth via the embedded NGINX server should only be used to locally secure the container from unwanted access on a local network. If exposing this to the Internet we recommend putting it behind a reverse pro…

Yeah, I made a mistake with my config. I had setup SWAG, with Authelia (i think?). Got password login working with 2fa. But my dumbass didn't realize I had left ports open. Logged in one day to find a terminal open with a message from someone who found my instance and got in. Called me stupid (I mean they're not wrong) and all kinds of things and deleted everything from my home drive to "teach me a lesson". Lesson pa…

> The only reason I don't have it set up is because I made the mistake of closing my free teir oracle cloud thinking I could spin up a fresh new instance and since then I haven't been able to get the free teir again.

People are automating the process of requesting new arm instances on free tier [1]. You would find it near impossible to compete without playing same game

[1] https://github.com/mohankumarpaluru/oracle-freetier-instance...

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#14
I've been using the LSIO Webtop images for a few years. They're awesome for composable desktops that I run behind a VPN for a quick and easy dirty connection at home.

Combine the Webtop images by forcing it's traffic through the Gluetun [0] container and you're up and running. These Webtop containers are nice and snappy as well thanks to Kasm. Awesome OSS.

[0] https://github.com/qdm12/gluetun

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#15
post #13
post #5

Earlier quoted context omitted.

Yeah, I made a mistake with my config. I had setup SWAG, with Authelia (i think?). Got password login working with 2fa. But my dumbass didn't realize I had left ports open. Logged in one day to find a terminal open with a message from someone who found my instance and got in. Called me stupid (I mean they're not wrong) and all kinds of things and deleted everything from my home drive to "teach me a lesson". Lesson pa…

> The only reason I don't have it set up is because I made the mistake of closing my free teir oracle cloud thinking I could spin up a fresh new instance and since then I haven't been able to get the free teir again. People are automating the process of requesting new arm instances on free tier [1]. You would find it near impossible to compete without playing same game [1] https://github.com/mohankumarpaluru/oracle-f…

Well, I know what I’m doing tomorrow when I get up.

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#16

> "Warning Do not put this on the Internet if you do not know what you are doing. By default this container has no authentication and the optional environment variables CUSTOM_USER and PASSWORD to enable basic http auth via the embedded NGINX server should only be used to locally secure the container from unwanted access on a local network. If exposing this to the Internet we recommend putting it behind a reverse pro…

Also note that their example docker config will allow anyone from the internet to connect, and even add a incoming rule in your host firewall to allow it. This is because they don't specify the port like -p 127.0.0.1:hostport:containerport (or the analog in the docker-compose config).

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#18

I've been using the LSIO Webtop images for a few years. They're awesome for composable desktops that I run behind a VPN for a quick and easy dirty connection at home. Combine the Webtop images by forcing it's traffic through the Gluetun [0] container and you're up and running. These Webtop containers are nice and snappy as well thanks to Kasm. Awesome OSS. [0] https://github.com/qdm12/gluetun

Could one build off this to run the desktops on the local host's display? I.e. as an IoT device with a display and some custom UI?

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#19
We had an application that had quite the complex build process, and targeted only macOS and Linux. The mechanical engineers all used Windows, and needed to use the application. Rather than buying them macbooks or having them manage a Linux box, I wound up building something like Webtop with webvnc, and deployed containers to google cloud. Engineers could go to a URL and access the application, no need to download or install anything. It worked pretty well, all things considered.

Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs

#20
post #5

> "Warning Do not put this on the Internet if you do not know what you are doing. By default this container has no authentication and the optional environment variables CUSTOM_USER and PASSWORD to enable basic http auth via the embedded NGINX server should only be used to locally secure the container from unwanted access on a local network. If exposing this to the Internet we recommend putting it behind a reverse pro…

Yeah, I made a mistake with my config. I had setup SWAG, with Authelia (i think?). Got password login working with 2fa. But my dumbass didn't realize I had left ports open. Logged in one day to find a terminal open with a message from someone who found my instance and got in. Called me stupid (I mean they're not wrong) and all kinds of things and deleted everything from my home drive to "teach me a lesson". Lesson pa…

There are operations that put cryptominers into any unauthenticated remote desktops they can find. Ask me how I know... Way friendlier than wiping your data though.
Post reply on HN