[{"_1":2,"_174":-5,"_175":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_150":151},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":11,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_88":-5,"_89":90,"_139":-5,"_140":11,"_141":21,"_142":11,"_143":-5,"_144":11,"_145":-5,"_146":147,"_148":91,"_149":-7},"canonicalUrl","https://hub.docker.com/r/pezhvak/ocserv/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","pezhvak","reponame","ocserv","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":62,"_64":65,"_66":-5,"_67":68,"_69":70,"_71":11,"_72":33,"_73":74,"_79":11,"_80":81,"_85":33,"_86":87},"categories",[],"content_types",[44],"image","date_registered","2021-01-25T23:31:47.545868Z","description","A lightweight Alpine based ocserv Docker image.","is_private","last_updated","2022-03-12T14:47:18.892983Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",2089,"repository_type","star_count",1,"status","status_description","active","source","collaborator_count",0,"full_description","

\n\n# docker-ocserv\n\n![GitHub](https://img.shields.io/github/license/pezhvak/docker-ocserv)\n![Docker Image Size (tag)](https://img.shields.io/docker/image-size/pezhvak/ocserv/latest)\n![Docker Pulls](https://img.shields.io/docker/pulls/pezhvak/ocserv)\n![Docker Image Version (latest semver)](https://img.shields.io/docker/v/pezhvak/ocserv)\n![Docker Cloud Automated build](https://img.shields.io/docker/cloud/automated/pezhvak/ocserv)\n![Docker Cloud Build Status](https://img.shields.io/docker/cloud/build/pezhvak/ocserv)\n\n

\n\n## About\n\nA lightweight Alpine based ocserv Docker image.\n\nYou can either start by using the [pre-built image](#using-built-image)\nor [build your own](#build-your-own-image) for more customization.\n\n### Table of Contents\n\n- [Installation](#installation)\n - [Using Built Image](#using-built-image)\n - [Versioning](#versioning)\n - [Generating SSL Certificate](#step-1-generating-ssl-certificate)\n - [Running Container](#step-2-running-your-container)\n - [Using Docker Compose](#option-1-docker-compose-recommended)\n - [Using Docker Run](#option-2-docker-run-command)\n - [Build your own image](#build-your-own-image)\n - [Updating](#updating)\n- [Usage](#usage)\n - [User Management](#user-management)\n - [Creating a new user](#create-a-new-user)\n - [Deleting a user](#delete-a-user)\n - [Locking a user](#lock-a-user)\n - [Unlocking a user](#unlock-a-user)\n - [Connecting To Server](#connecting-to-server)\n - [Using Terminal](#using-terminal)\n - [Using Clients](#using-clients)\n- [References](#references)\n\n# Installation\n\n## Using Built Image\n\nA [pre-built image](https://hub.docker.com/r/pezhvak/ocserv) is available with the best configurations out of the box.\nFollow the instructions bellow to get up and running.\n\n#### This setup includes:\n\n- 2 Device connections for each user (`max-same-clients=2`)\n- Up to 16 clients (`max-clients=16`)\n- 10.10.10.0/24 as the internal IP pool\n- Listens on port 1342 (can be changed by altering port mappings when you run the container)\n- Tunnels DNS to the server (`tunnel-all-dns=true`)\n\n***Note:*** All limits can be increased or set to be unlimited in `ocserv.conf`\nby [building your own image](#build-your-own-image).\n\n### Versioning\nBy default `docker-compose.yml` and the instructions written in this document uses the `latest`\ntag of the image which represents the latest commit in the `master` branch. beside that tagged commits\nare also available if you want to make sure no breaking changes enters your setup, for that checkout \n[tags](https://hub.docker.com/repository/docker/pezhvak/ocserv/tags) in our docker hub repo.\n\nHowever, if you like to get the cutting edge features you can always use the `next` tag\nwhich represents the latest commit in the `develop` branch.\n\n### STEP 1: Generating SSL Certificate\n\nNo matter what, if you want to build the image yourself, run the pre-built one with `docker run` or\nwith `docker-compose`, in all cases you will need an SSL certificate, It's up to you how you would like to generate it,\nperhaps you already have some kind of setup for that on your server, in case you don't, use the\nfollowing [image](https://hub.docker.com/r/certbot/certbot/) to generate one:\n\n***Note:*** You need to have a domain pointing to your server IP address and ports 80 and 443 available to be listened\nby the container for letsencrypt ACME challenge verification.\n\n```BASH\nsudo docker run -it --rm --name certbot -p 80:80 -p 443:443 \\\n -v $(pwd)/certs:/etc/letsencrypt certbot/certbot \\\n certonly --standalone -m -d -n --agree-tos\n```\n\ncan't create one (most often because ports 80 and 443 are not available on your server, or you don't have a domain), a\nfallback script will generate a self-signed certificate for you inside the container. The only difference is a warning\nmessage about the certificate not being trusted (due to being self-signed) when logging in.\n\n### STEP 2: Running Your Container\n\nNow that we are done with the certificate, you have to run the container somehow.\n\n***NOTE:*** If you haven't generated a certificate in the previous step, remove volume mountings to cert paths in your\nchosen method. as stated previously a self-signed certificate will be generated automatically with the downside of\nuntrusted certificate warning at the logging phase.\n\n#### OPTION 1: Docker Compose (Recommended)\n\nI highly recommend you to use docker-compose for running your container, feel free to change the port by\nediting `docer-compose.yml`. I highly recommend using docker-compose for running your container, feel free to change the\nport by editing `docker-compose.yml`.\n\n```BASH\nwget https://raw.githubusercontent.com/Pezhvak/docker-ocserv/develop/docker-compose.yml\n# IMPORTANT: Make sure you have updated the cert paths in volumes section \n# of the docker-compose.yml before running it.\ndocker-compose up -d\n```\n\n#### OPTION 2: Docker Run Command\n\nIf you prefer to use `docker run` all you have to do is to execute the following command:\n\n```BASH\ndocker run \\\n --name ocserv \\\n --restart=always \\\n -p 1342:443 \\\n -v $(pwd)/data/ocserv:/etc/ocserv/data \\\n -v $(pwd)/certs/live//fullchain.pem:/etc/ocserv/server-cert.pem \\\n -v $(pwd)/certs/live//privkey.pem:/etc/ocserv/server-key.pem \\\n pezhvak/ocserv \n```\n\nYour ocserv should be up and running now, you will have to create a user to be able to connect.\n\n### Updating\n\nTo update to the latest version, simply just pull the image from docker hub.\n\n#### For Docker Compose Installations\n\n```BASH\n# this will pull the image from docker hub\ndocker-compose pull\n# running up again will detect the newer image and recreates the container \ndocker-compose up -d\n```\n\n#### For Docker Run Installations\n```BASH\n# pull image from docker hub\ndocker pull pezhvak/ocserv\n# restart the container\ndocker restart ocserv\n```\n\n## Build Your Own Image\nAlthough it's easier to use [pre-built image](https://hub.docker.com/r/pezhvak/ocserv),\nbut it has its own downsides. namely, the limitations described [here](#this-setup-includes).\n\nIf you want to change the default configurations, you will have to build the image yourself, just clone the repo and\nchange the files you need.\n\nConfiguration files are stored in `config` directory. you can also modify\n`scripts/docker-entrypoint.sh` if needed.\n\n\n1- Clone the repository to your server:\n\n```BASH\ngit clone https://github.com/Pezhvak/docker-ocserv.git\ncd docker-ocserv\n```\n\n2- Build the image with your own settings, feel free to change `config/ocserv.conf` to your liking:\n\n```BASH\ndocker build -t .\n```\n\n3- Follow the steps of [Using Built Image](#using-built-image) (Change `pezhvak/ocserv` to your own image name)\n\n# Usage\n\n## User Management\n\nI have created a simple proxy shell (`ocuser`) in the image for easier interaction with `ocpasswd`.\n\n### Create a new user\n\nRemove the specified user to the password file (Password of the user will be asked)\n\n```BASH\ndocker exec -it ocserv ash -c \"ocuser create \"\n```\n\n### Delete a User\n\nRemove the specified user from the password file:\n\n```BASH\ndocker exec ocserv ash -c \"ocuser delete \"\n```\n\n### Lock a User\n\nPrevent the specified user from logging in:\n\n```BASH\ndocker exec ocserv ash -c \"ocuser lock \"\n```\n\n### Unlock a User\n\nRe-enable login for the specified user\n\n```BASH\ndocker exec ocserv ash -c \"ocuser unlock \"\n```\n\n## Connecting to Server\n\nNow that everything is set up and user is created, you can connect to server using terminal or one of the available\napplications:\n\n### Using Terminal\n\nMake sure you have installed `openconnect` on your machine, you can do that in MacOS using `brew install openconnect`.\n\n```BASH\necho \"\" | sudo openconnect : -u --passwd-on-stdin\n```\n\nYou can also create an alias in your `~/.bash_profile` (or `~/.zshrc` if you're using zsh) for easier access:\n\n```BASH\nalias vpn:oc=\"echo | sudo openconnect : -u --passwd-on-stdin\"\n```\n\n### Using Clients\n\n- [Android (Cisco AnyConnect)](https://play.google.com/store/apps/details?id=com.cisco.anyconnect.vpn.android.avf)\n- [Android (OpenConnect)](https://play.google.com/store/apps/details?id=com.github.digitalsoftwaresolutions.openconnect)\n- [iOS](https://apps.apple.com/us/app/cisco-anyconnect/id1135064690)\n- [MacOS](https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/smb5642-install-cisco-anyconnect-secure-mobility-client-on-a-mac-com-rev1.html)\n- [Windows](https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/smb5686-install-cisco-anyconnect-secure-mobility-client-on-a-windows.html)\n- [Ubuntu](https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/Kmgmt-785-AnyConnect-Linux-Ubuntu.html)\n\n# References\n\nI appreciate these repositories which inspired me and helped me to put the pieces together:\n\n- [soreana/cisco-anyconnect-server-docker](https://github.com/soreana/cisco-anyconnect-server-docker)\n- [TommyLau/docker-ocserv](https://github.com/TommyLau/docker-ocserv)\n","has_starred","hub_user","immutable_tags_settings",{"_75":11,"_76":77},"enabled","rules",[78],".*","is_automated","permissions",{"_82":21,"_83":11,"_84":11},"read","write","admin","user","storage_size",98488634,"orgData","recentTags",[91,129],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":100,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":109,"_126":118,"_127":65,"_128":21},"content_type","creator",4497199,"full_size",17281425,"id",134667449,"images",[101],{"_102":103,"_104":105,"_106":107,"_108":109,"_110":111,"_112":113,"_114":107,"_115":-5,"_116":96,"_63":65,"_117":-5},"architecture","amd64","digest","sha256:4aae2b4065251c8dc4b030db5034c79aea64f09c04b4c6ba17c4d3a00b20ba2f","features","","last_pulled","2026-10-04T21:41:32.261767042Z","last_pushed","2022-03-12T14:47:19Z","os","linux","os_features","os_version","size","variant","2022-03-12T14:47:18.737768Z","last_updater","last_updater_username","media_type","latest","repository",11108598,"tag_last_pulled","tag_last_pushed","tag_status","v2",{"_92":44,"_93":94,"_95":130,"_97":131,"_99":132,"_50":137,"_119":94,"_120":33,"_121":56,"_57":138,"_123":124,"_125":135,"_126":137,"_127":65,"_128":21},17070774,134724910,[133],{"_102":103,"_104":134,"_106":107,"_108":135,"_110":136,"_112":113,"_114":107,"_115":-5,"_116":130,"_63":65,"_117":-5},"sha256:716407fffed839774c75c7cbd1c84caa7688e262b9ea30e83a7868abe5cd190d","2026-10-02T14:17:42.182446455Z","2021-02-02T15:44:28Z","2021-02-03T15:42:22.841177Z","next","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":152,"_159":160,"_146":172,"_173":11},{"_40":153,"_42":154,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":155,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":62,"_64":65,"_66":-5,"_67":68,"_69":70,"_71":11,"_72":33,"_73":156,"_79":11,"_80":158,"_85":33,"_86":87},[],[44],[56],{"_75":11,"_76":157},[78],{"_82":21,"_83":11,"_84":11},"tags",{"_161":162,"_138":-5,"_163":-5,"_164":165},"count",2,"previous","results",[166,169],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":167,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":109,"_126":118,"_127":65,"_128":21},[168],{"_102":103,"_104":105,"_106":107,"_108":109,"_110":111,"_112":113,"_114":107,"_115":-5,"_116":96,"_63":65,"_117":-5},{"_92":44,"_93":94,"_95":130,"_97":131,"_99":170,"_50":137,"_119":94,"_120":33,"_121":56,"_57":138,"_123":124,"_125":135,"_126":137,"_127":65,"_128":21},[171],{"_102":103,"_104":134,"_106":107,"_108":135,"_110":136,"_112":113,"_114":107,"_115":-5,"_116":130,"_63":65,"_117":-5},[],"canDeleteTags","actionData","errors"]

pezhvak/ocserv

Tags for pezhvak/ocserv