Patched Apache Guacamole 1.6.0 running on Tomcat 10.1 (Jakarta EE 10) for linux/amd64.
49
Custom build of Apache Guacamole 1.6.0 updated to run on Apache Tomcat 10.1 (Eclipse Temurin JRE 17).
This image converts Guacamole's native javax.servlet packages to jakarta.servlet using the Apache Tomcat Jakarta EE Migration Tool, completely remediating legacy Tomcat 9.0.x vulnerabilities.
1.6.0-tomcat10, latest
linux/amd64tomcat:10.1-jre17-temurinjakarta.servlet)docker run -d \
--name guacamole \
-p 8080:8080 \
-e GUACAMOLE_HOME=/etc/guacamole \
-e POSTGRES_HOSTNAME=postgres-db \
-e POSTGRES_DATABASE=guacamole_db \
-e POSTGRES_USER=guacamole_user \
-e POSTGRES_PASSWORD=your_secure_password \
repository.ncr.ntnu.no/internal/guacamole:1.6.0-tomcat10
version: '3.8'
services:
guacd:
image: guacamole/guacd:1.6.0
restart: always
guacamole:
image: repository.ncr.ntnu.no/internal/guacamole:1.6.0-tomcat10
restart: always
ports:
- "8080:8080"
environment:
GUACD_HOSTNAME: guacd
GUACD_PORT: 4822
POSTGRES_HOSTNAME: postgres
POSTGRES_DATABASE: guacamole_db
POSTGRES_USER: guacamole_user
POSTGRES_PASSWORD_FILE: /run/secrets/guac_db_pass
ENABLE_FILE_ENVIRONMENT_PROPERTIES: "true"
secrets:
- guac_db_pass
depends_on:
- guacd
- postgres
postgres:
image: postgres:16-alpine
restart: always
environment:
POSTGRES_DB: guacamole_db
POSTGRES_USER: guacamole_user
POSTGRES_PASSWORD_FILE: /run/secrets/guac_db_pass
secrets:
- guac_db_pass
volumes:
- guac_db_data:/var/lib/postgresql/data
secrets:
guac_db_pass:
file: ./postgres_password.txt
volumes:
guac_db_data:
| Variable | Default | Description |
|---|---|---|
GUACD_HOSTNAME | localhost | Hostname/IP of the guacd proxy daemon |
GUACD_PORT | 4822 | Port of the guacd proxy daemon |
POSTGRES_HOSTNAME | — | PostgreSQL database server hostname |
POSTGRES_DATABASE | — | PostgreSQL database name |
MYSQL_HOSTNAME | — | MySQL database server hostname |
MSSQL_HOSTNAME | — | MSSQL database server hostname |
ENABLE_FILE_ENVIRONMENT_PROPERTIES | true | Allows reading database passwords from _FILE environment secrets |
BAN_ENABLED | true | Enables brute-force authentication ban protection |
9.0.106 to 10.1.x.apt-get upgrade in final stage.jakartaee-migration execution during multi-stage build.Licensed under the Apache License, Version 2.0.
Content type
Image
Digest
sha256:bf18913ba…
Size
289 MB
Last updated
2 days ago
docker pull 1889429/guacamole:1.6.0-tomcat10