dneuhaus76/dn-lxqt-xrdp repository overview

⁠dn-lxqt-xrdp

Debian 12 (bookworm based image with lxqt). Docker "only" image connect for xrdp (tested on arm64 raspberry pi 4 and amd64 "docker" vm)

REF: https://github.com/dneuhaus76/dn-lxqt-xrdp/⁠

⁠included

⁠supervisor (startup manager)

⁠xrdp (for connection)

⁠xfwm4 & lxqt

⁠Apps

• chromium (incl. keepassXC add-in)
  • configured with json-policy-file
• keepassXC (preconfigured for chromium)
• thunderbird
• featherpad,lximage,screengrab,qpdfview,qterminal,qps

⁠sound

• pipewire-module-xrdp

⁠local user

• name: user & pw:user

⁠run

⁠docker command

quick & dirty "fix" for "chromium sandbox mode" --cap-add=SYS_ADMIN

docker run -d -p 3389:3389 --cap-add=SYS_ADMIN dneuhaus76/dn-lxqt-xrdp:latest

⁠docker compose

But cap_add and security_opt like this is vulnerable and for debugging only - maybe switch to another browser like firefox and not use features as gvfs...

services:
  vdi:
    build:
      context: .
    image: dneuhaus76/dn-lxqt-xrdp
    container_name: dn-lxqt-xrdp
    shm_size: '2gb'
    restart: always

    volumes:
      - dn-lxqt-xrdp_home:/home

    cap_add:
      - SYS_ADMIN

    devices:
      - "/dev/fuse:/dev/fuse"

    security_opt:
      #- seccomp=./seccomp.json
      - apparmor:unconfined

    ports:
      - "3389:3389"

    networks:
      - dn-lxqt-xrdp

volumes:
  dn-lxqt-xrdp_home:
    name: "dn-lxqt-xrdp_home"

networks:
  dn-lxqt-xrdp:
    driver: bridge
    name: "dn-lxqt-xrdp"

⁠connect from an rdp-client

example: with sound redirection and current machines user-home into "thinclient_drives"

rdesktop -k de-ch -r sound:local -r disk:"$(hostname)"=/home/${USER} [myserver]

⁠chromium in docker:

Or maybe with another browser like firefox... https://medium.com/code-and-coffee/running-chromium-in-docker-without-selling-your-soul-433e591802f2⁠