Skip to content

Instantly share code, notes, and snippets.

@misterunknown
Created March 29, 2019 13:47
Show Gist options
  • Save misterunknown/da748cdcfd67b9290ac979637532c492 to your computer and use it in GitHub Desktop.
Save misterunknown/da748cdcfd67b9290ac979637532c492 to your computer and use it in GitHub Desktop.
Alpine Linux: Virtual Desktop installation
#!/bin/sh
#
# This script installs a virtual desktop using Xvfb, x11vnc, mate-desktop,
# mate-session-manager and Apache Guacamole. It runs on Alpine Linux Edge.
#
# See also:
# https://www.reddit.com/r/selfhosted/comments/b6k8go/poc_a_desktop_in_a_container_on_a_server/
# This is the user, under which the MATE desktop will run
# Notice: For several reasons this shouldn't be root
USERNAME="myuser"
# Ensure the user exists
getent passwd $USERNAME >/dev/null || adduser -D $USERNAME
# Add my own repository, which provides guacamole-server and guacamole-client
wget -O /etc/apk/keys/marco-5b505a5e.rsa.pub "https://marco.alpinelinux.de/keys/marco-5b505a5e.rsa.pub"
echo "https://marco.alpinelinux.de/repo/edge/marco" >> /etc/apk/repositories
# Install necessary packages
apk add --upgrade-cache \
dbus-x11 \
guacamole-server \
guacamole-server-openrc \
guacamole-client \
libguac-client-vnc \
mate-desktop \
mate-desktop-environment \
mate-session-manager \
x11vnc \
xvfb \
# Deploy configuration
cat <<EOF > /etc/conf.d/xvfb
# xvfb config
# display
command_args="-screen :0 1280x800x24 -ac +extension GLX +render -noreset -shmem"
EOF
cat <<EOF > /etc/init.d/xvfb
#!/sbin/openrc-run
name="Xvfb framebuffer"
pidfile="/var/run/xvfb.pid"
command="/usr/bin/Xvfb"
command_args="${command_args:-}"
command_background="yes"
EOF
cat <<EOF > /etc/conf.d/x11vnc
# x11vnc config
# display
command_args="$command_args -display :0"
# listen only local
command_args="$command_args -localhost"
# persistent, shared server
command_args="$command_args -forever -shared -loop"
# X settings
command_args="$command_args -xrandr -cursor arrow"
# Logfile
command_args="$command_args -o /var/log/x11vnc.log"
# password
#command_args="$command_args -passwd verysecret123"
EOF
cat <<EOF > /etc/init.d/x11vnc
#!/sbin/openrc-run
name="x11vnc server"
pidfile="/var/run/x11vnc.pid"
command="/usr/bin/x11vnc"
command_args="${command_args:-}"
command_background="yes"
EOF
cat <<EOF > /etc/init.d/mate-session
#!/sbin/openrc-run
name="MATE session for $USERNAME"
pidfile="/var/run/mate-session.pid"
command_user="$USERNAME"
command="/usr/bin/mate-session"
command_args="${command_args:-}"
command_background="yes"
depend() {
need xvfb
}
EOF
cat <<EOF > /etc/conf.d/mate-session
# mate-session config
export DISPLAY=":0"
EOF
cat <<EOF > /etc/guacamole/user-mapping.xml
<?xml version="1.0" encoding="UTF-8"?>
<user-mapping>
<authorize username="admin" password="21232f297a57a5a743894a0e4a801fc3" encoding="md5">
<protocol>vnc</protocol>
<param name="hostname">localhost</param>
<param name="port">5900</param>
<!-- <param name="password">verysecret123</param> -->
</authorize>
</user-mapping>
EOF
# This is a workaround for a flaw in the package
mkdir -p /var/log/jetty/guacamole-{client,server}
for i in xvfb x11vnc mate-session
do
chmod +x /etc/init.d/${i}
rc-update add ${i}
done
for i in dbus guacamole-client guacamole-server
do
rc-update add ${i}
done
rc-service xvfb start
rc-service x11vnc start
rc-service dbus start
rc-service mate-session start
rc-service guacamole-server start
rc-service guacamole-client start
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment