jgsoftwares/openwrtsshgnomex11 repository overview

used Handy´s for Wiregaurd vpn
Doogee S61 PRO
Motorola Edge 30 Neo

http://demogitjava.ddns.net:8000/backup-demogitjava.ddns.net-2025-11-06.tar.gz⁠ \
start dockerd

dockerd --debug -H=unix:///var/run/docker.sock -H=0.0.0.0:2375 --iptables=true --bridge=none --default-cgroupns-mode=host --ip-masq=false --ipv6=false --default-runtime io.containerd.runc.v2 --data-root=/opt/docker --dns=95.85.95.85 --dns=2.56.220.2 --selinux-enabled=true --mtu=1500 --tls=false --seccomp-profile=unconfined --insecure-registry 192.168.10.56.5000

stop network interface lo or disable over console with -- ifconfig lo down
edit hosts file -etc-hosts - add your yourwanip yourdomain - remove localhost
client system Bodhi Linux
optional install Xehyr
sudo apt-get install xserver-xephyr \

a simple compose file

services: composeopenwrtx11ssh: stdin_open: true tty: true platform: linux/amd64 container_name: composeopenwrtx11ssh restart: unless-stopped network_mode: host cap_add: - NET_ADMIN - SYS_ADMIN privileged: true tmpfs: /opt/docker image: jgsoftwares/openwrtsshgnomex11:firejailxvfb

set timezone to Germany \ date --utc +2
client - server /etc/ssh/ ssh_config - sshd_config
# Cipher
Cipher [email protected] \

alpine:
opkg install alpine-repositories \

apk add --allow-untrusted

run the container in debug mode
docker run -dit -> enable debug mode

-e NETWORK_IF=vxlanwireguard
-e NETWORK_BRIDGE=vxlanwireguard
-e NETWORK_NONE=vxlanwireguard -e NETWORK_NONE=lo

docker run -dit --security-opt seccomp=unconfined --security-opt apparmor=docker-default --net=host --net=none --name openwrtx11ssh -e NETWORK_NONE=vxlanwireguard -e NETWORK_NONE=lo -v /root/git:/root/git -v /etc/config:/etc/config -v /var/run/docker.sock:/var/run/docker.sock --cgroupns=host -v /srv/www/htdocs:/srv/www/htdocs --add-host="host.docker.internal:host-gateway" --cap-add=NET_ADMIN --cap-add=NET_RAW --kernel-memory=6M --tmpfs /opt/docker jgsoftwares/openwrtsshgnomex11:fluxboxnetbeans /bin/ash

or run with firejail
worked only over 2 steps
docker run -d --security-opt seccomp=unconfined --security-opt apparmor=docker-default --net=host --name openwrtx11ssh -e NETWORK_NONE=green0 -v /root/git:/root/git -v /var/run/docker.sock:/var/run/docker.sock --cgroupns=host -v /srv/www/htdocs:/srv/www/htdocs --add-host="host.docker.internal:host-gateway" --cap-add=NET_ADMIN --cap-add=NET_RAW --cap-add=SYS_ADMIN --tmpfs /opt/docker jgsoftwares/openwrtsshgnomex11:firejailxvfb /bin/ash


docker exec -it openwrtx11ssh /bin/ash

firejail --noprofile --x11=xephyr --seccomp.keep=transmission-gtk --net=orange0 /usr/sbin/sshd -D
or with xvfb
firejail --noprofile --x11=xvfb --overlay --seccomp.keep=transmission-gtk --net=orange0 /usr/sbin/sshd -D
firejail --bandwidth=sshd set orange0 235 235

firejail --seccomp.keep=transmission-gtk --overlay --net=orange0 Xephyr :10 -extension MIT-SHM -screen 1920x1200 -xinerama -resizeable -glamor -br -nolisten tcp -dpi 0 -keybd eph yr,,,,xkblayout=de & DISPLAY=:10 LC_TIME="de_DE.ISO8859-1" LANG=de_DE.ISO-8859-1 QT_QPA_PLATFORM=xephyr GDK_BACKEND=xephyr XDG_SESSION_TYPE=xephyr \

install alpine packages
apk add --allow-untrusted gitg
#apk add --allow-untrusted xorg-server-xephyr
apk add --allow-untrusted xvfb
apk add --allow-untrusted screen
apk add --allow-untrusted nsjail
apk add --allow-untrusted nftables
apk add --allow-untrusted openssh-nftrules
apk add --allow-untrusted py3-opengl
opkg install kmod-nft-bridge \

Xephyr client server x11 with SHM

firejail Xephyr +extension MIT-SHM :10 -screen 1920x1080 -br -dpi 72 -keybd ephyr,,,,xkblayout=de & DISPLAY=:10 LC_TIME="de_DE.ISO8859-1" LANG=de_DE.ISO-8859-1 QT_QPA_PLATFORM=x11 GDK_BACKEND=Fluxbox XDG_SESSION_TYPE=Fluxbox ssh -t -i ~/.ssh/id_rsa -2 -4 -YX -c [email protected] -C [email protected] ash
/root/netbeans/netbeans/bin

firejail --bandwidth=sshd --overlay --name screen ./netbeans -J-Dnimrodlf.themeFile=/root/DarkTabaco.theme --cp:p /root/nimrodlf-1.2d.jar -J-Dsun.java2d.dpiaware=false --jdkhome /usr/lib/jvm/java-8-openjdk --laf com.nilo.plaf.nimrod.NimRODLookAndFeel -J-Dswing.aatext=true -J-Dawt.useSystemAAFontSettings=lcd -J-Dorg.netbeans.editor.aa.fractional=true -J-Xms4096m -J-Xmx4096m \

---

start a simple ssh session with firejail and Xehyr Server connect to server over wireguard vpn Xehyr connect

enabel MIT-SHM
firejail xephyr +extension MIT-SHM :10

firejail --caps.drop=all --seccomp --dns=95.85.95.85 --dns=2.56.220.2 --net=eth0 --protocol=unix --profile=/etc/firejail/ssh.profile --x11=xephyr --xephyr-screen=1920x1080 --nosound --novideo --nodbus --memory-deny-write-execute ssh -t -i ~/.ssh/id_rsa -2 -4 -YX -c [email protected] -C [email protected]


firejail --bandwidth=sshd set orange0 235 235 --join=Xephyr --net=orange0 --x11=xephyr bash


firejail --name=firefox --net=eth0 firefox
firejail --bandwidth=firefox set eth0 235 235

cd /root/netbeans/netbeans/bin

firejail --bandwidth=sshd --overlay --name screen screen ./netbeans -J-Dnimrodlf.themeFile=/root/DarkTabaco.theme --cp:p /root/nimrodlf-1.2d.jar -J-Dsun.java2d.dpiaware=false --jdkhome /usr/lib/jvm/java-8-openjdk --laf com.nilo.plaf.nimrod.NimRODLookAndFeel -J-Dswing.aatext=true -J-Dawt.useSystemAAFontSettings=lcd -J-Dorg.netbeans.editor.aa.fractional=true -J-Xms4096m -J-Xmx4096m

echo $DISPLAY -> display is set yourdomain:10.0

install firejail over the alpine repos
sandboxing with firejail
vi /etc/apk/repositories
http://dl-cdn.alpinelinux.org/alpine/v3.13/community⁠
opkg update
apk add --allow-untrusted firejail \
start bash shell with
firejail /bin/bash \

then start the Xephyr server over the console in container openwrtx11ssh

firejail --seccomp.keep=transmission-gtk --net=orange0 Xephyr :10 -extension MIT-SHM -screen 1920x1200 -xinerama -resizeable -glamor -br -nolisten tcp -dpi 0 -keybd eph yr,,,,xkblayout=de & DISPLAY=:10 LC_TIME="de_DE.ISO8859-1" LANG=de_DE.ISO-8859-1 QT_QPA_PLATFORM=xephyr GDK_BACKEND=xephyr XDG_SESSION_TYPE=xephyr
firejail --name=firefox --net=eth0 firefox
firejail --bandwidth=firefox set eth0 235 235
\

change diretory to netbeans with /root/netbeans/netbeans/bin

start netbeans with

dbus-launch --binary-syntax --close-stderr --exit-with-session ./netbeans -J-Dnimrodlf.themeFile=/root/DarkTabaco.theme --cp:p /root/nimrodlf-1.2d.jar -J-Dsun.java2d.dpiaware=false --jdkhome /usr/lib/jvm/java-11-openjdk --laf com.nilo.plaf.nimrod.NimRODLookAndFeel -J-Dswing.aatext=true -J-Dawt.useSystemAAFontSettings=lcd -J-Dorg.netbeans.editor.aa.fractional=true -J-Xms4096m -J-Xmx4096m

---

start nftables
rc-service nftables start \

run the openssh-server
/usr/sbin/sshd -D \

and in a second terminal start fluxbox server with
startx
nsjail start sandbox
#nsjail -- /bin/ash | /usr/sbin/sshd -D
nsjail -- /bin/ash | screen
nsjail -- /bin/ash | dbus-launch
firejail --noprofile --x11=xephyr --net=orange0 /usr/sbin/sshd -D

or with xvfb
firejail --seccomp.keep=transmission-gtk --overlay --noprofile --x11=xvfb --net=orange0 /usr/sbin/sshd -D

the default password is
root and
jj78mvpr52k1 by default
change password with passwd \

connect to server with Xephyr
firejail Xephyr +extension MIT-SHM :10 -screen 1920x1080 -br -dpi 72 -keybd ephyr,,,,xkblayout=de & DISPLAY=:10 LC_TIME="de_DE.ISO8859-1" LANG=de_DE.ISO-8859-1 QT_QPA_PLATFORM=x11 GDK_BACKEND=Fluxbox XDG_SESSION_TYPE=Fluxbox ssh -t -i ~/.ssh/id_rsa -2 -4 -YX -c [email protected] -C [email protected] ash

--------------------------------------------------------------
ssh session over vpn wireguard \

LC_TIME="de_DE.ISO8859-1" LANG=de_DE.ISO-8859-1 QT_QPA_PLATFORM=minimal GDK_BACKEND=Fluxbox XDG_SESSION_TYPE=Fluxbox ssh -t -i ~/.ssh/id_rsa -2 -4 -YX -c [email protected] -C [email protected]
or \

dbus-launch --binary-syntax --close-stderr --exit-with-session ssh -t -i ~/.ssh/id_rsa -2 -4 -YX -c [email protected] -C [email protected] \

-------------------------------------------------------------- \

to start netbeans edit netbeans.conf
/netbeans/netbeans/etc/netbeans.conf
with line
netbeans_jdkhome="/usr/lib/jvm/java-8-openjdk"
run netbeans with:
./netbeans -J-Dnimrodlf.themeFile=/root/DarkTabaco.theme --cp:p /root/nimrodlf-1.2d.jar -J-Dsun.java2d.dpiaware=false --laf com.nilo.plaf.nimrod.NimRODLookAndFeel or alternative over path /root/netbeans/netbeans/bin
./netbeans -> Metal LookAndFeel

path to netbeans
cd /root/netbeans/netbeans/bin \

start netbeans with openJDK
LC_TIME="de_DE.ISO8859-1" LANG=de_DE.ISO-8859-1 GDK_BACKEND=x11 ./netbeans -J-Dnimrodlf.themeFile=/root/DarkTabaco.theme --cp:p /root/nimrodlf-1.2d.jar -J-Dsun.java2d.dpiaware=false --jdkhome /usr/lib/jvm/java-11-openjdk --laf com.nilo.plaf.nimrod.NimRODLookAndFeel -J-Dswing.aatext=true -J-Dawt.useSystemAAFontSettings=lcd -J-Dorg.netbeans.editor.aa.fractional=true -J-Xms4096m -J-Xmx4096m

export QT_QPA_PLATFORM=vkkhrdisplay
start netbeans with openjdk8
LC_TIME="de_DE.ISO8859-1" LANG=de_DE.ISO-8859-1 XDG_SESSION_TYPE=Fluxbox QT_QPA_PLATFORM=vkkhrdisplay GDK_BACKEND=gnome-boxes ./netbeans -J-Dnimrodlf.themeFile=/root/DarkTabaco.theme --jdkhome /usr/lib/jvm/java-8-openjdk --cp:p /root/nimrodlf-1.2d.jar -J-Dsun.java2d.dpiaware=false --laf com.nilo.plaf.nimrod.NimRODLookAndFeel -J-Dswing.aatext=true -J-Dawt.useSystemAAFontSettings=lcd -J-Dorg.netbeans.editor.aa.fractional=true -J-Xms4096m -J-Xmx4096m
or

dbus-launch --binary-syntax --close-stderr --exit-with-session ./netbeans -J-Dnimrodlf.themeFile=/root/DarkTabaco.theme --cp:p /root/nimrodlf-1.2d.jar -J-Dsun.java2d.dpiaware=false --jdkhome /usr/lib/jvm/java-1.8.0-openjdk --laf com.nilo.plaf.nimrod.NimRODLookAndFeel -J-Dswing.aatext=true -J-Dawt.useSystemAAFontSettings=lcd -J-Dorg.netbeans.editor.aa.fractional=true -J-Xms4096m -J-Xmx4096m

or start over screen
apk add --allow-untrusted screen

run the openssh-server
/usr/sbin/sshd -D
and in a second terminal start fluxbox server with
startx


start the programm with command

screen ./netbeans -J-Dnimrodlf.themeFile=/root/DarkTabaco.theme --cp:p /root/nimrodlf-1.2d.jar -J-Dsun.java2d.dpiaware=false --jdkhome /usr/lib/jvm/java-8-openjdk --laf com.nilo.plaf.nimrod.NimRODLookAndFeel -J-Dswing.aatext=true -J-Dawt.useSystemAAFontSettings=lcd -J-Dorg.netbeans.editor.aa.fractional=true -J-Xms4096m -J-Xmx4096m