friseer/synology-linux-toolbox repository overview

⁠Synology DS / DSM All-in-One Toolbox

A Debian-based all-in-one toolbox container built for Synology DS / DSM systems and also useful on other Docker hosts.

This image is for people who want a broad, ready-to-use working environment in one container: Synology users, home-lab users, system administrators, network admins, repo and mirror maintainers, package builders, troubleshooters, and general tinkerers. It is not limited to experts only.

The goal is simple: have the tools available in the container that are missing, limited, or inconvenient on the DSM host, so real work can be done directly and consistently.

⁠Why ipset is explicitly included

ipset is included on purpose and called out explicitly.

iptables can use a set match to check packets against IP sets defined by ipset, and it can also use the SET target to add or delete entries in those sets. In practice, this means iptables without ipset is a major limitation whenever you need to work with larger, reusable, or frequently changing IP or network lists.

Without ipset, firewall work often becomes more awkward, less scalable, and harder to maintain because you lose the clean set-based workflow and may end up needing many separate rules instead.

This matters on Synology DS / DSM, but it is not only a DS problem. It is generally useful anywhere iptables is available but ipset is missing or inconvenient.

⁠What this image is

This is not a web app.

It is a broad shell and toolbox container for:

• administration
• diagnostics and troubleshooting
• networking
• repository and mirror work
• package inspection
• Debian packaging
• RPM / repo-related tasks
• scripting
• general system maintenance

⁠Included tool areas

Examples of included tool areas:

• shell and terminal tools
• file and text tools
• network and debugging tools
• transfer and sync tools
• SSH client tools
• Python environment tools
• Debian packaging tools
• repository management tools
• RPM and distro helper tools

Examples of included commands and packages:

• bash, bash-completion, vim, nano, less, tmux, htop
• curl, wget, rsync, git, jq
• iproute2, iputils-ping, dnsutils, net-tools, iptables, ipset, conntrack, tcpdump
• lsof, strace, procps, psmisc, file, tree, ripgrep
• python3, python3-venv, python3-pip, perl
• build-essential, fakeroot, devscripts, debhelper, lintian, equivs, quilt, dpkg-dev
• reprepro, debootstrap
• rpm, rpm2cpio, createrepo-c, dnf, dnf-plugins-core

⁠Pull

docker pull friseer/synology-linux-toolbox:latest

⁠Quick start

mkdir -p work
docker run -d \
  --name linux-toolbox \
  --hostname linux-toolbox \
  --restart unless-stopped \
  --network host \
  --cap-add NET_ADMIN \
  --cap-add NET_RAW \
  -v "$(pwd)/work:/work" \
  -w /work \
  -it \
  friseer/synology-linux-toolbox:latest

⁠Open a shell

docker exec -it linux-toolbox bash

⁠Docker Compose

name: synology-linux-toolbox

services:
  linux-toolbox:
    image: friseer/synology-linux-toolbox:latest
    container_name: linux-toolbox
    hostname: linux-toolbox
    stdin_open: true
    tty: true
    restart: unless-stopped
    working_dir: /work
    network_mode: host
    cap_add:
      - NET_ADMIN
      - NET_RAW
    volumes:
      - ./work:/work

⁠Synology DSM example host path

On Synology systems, a host path such as this may be appropriate:

/volume1/docker/linux-toolbox/work:/work

⁠Default behavior

The container stays running in the background so it can be entered whenever needed.

⁠Tags

• latest for the default image
• dsm7.3 as an additional DSM-specific tag