trueability/guacamole-noauth repository overview

⁠Guacamole With NoAuth Extension

This project is based off of glyptodon/guacamole, but is intended for test, and or production environments where there is already a layer of security/authentication to protect access to Guacamole.

Please note that using the NoAuth extension is frowned upon by the Guacamole developers, and therefore you should really consider creating your own auth extension instead (we are working on it).

⁠Running

$ docker run -d --name guacd glyptodon/guacd

$ docker run -it \
    --name guacamole \
    --link guacd:guacd \
    -v /path/to/guacamole:/etc/guacamole \
    trueability/guacamole-noauth

Accessible at: http://localhost:8080/guacamole

⁠Volumes

The image requires a volume mounted /etc/guacamole that has (at least) the following file(s):

noauth-config.xml

An example configuration (and the one used by docker-compose for testing):

<configs>
    
    <!-- test-node ssh connection -->
    <config name="test-node-ssh" protocol="ssh">
        <param name="hostname" value="test-node" />
        <param name="port" value="22" />
        <param name="username" value="ubuntu" />
        <param name="password" value="oober-secure-password" />
    </config>

    <!-- test-node vnc connection -->
    <config name="test-node-vnc" protocol="vnc">
        <param name="hostname" value="test-node" />
        <param name="port" value="5901" />
        <param name="username" value="ubuntu" />
        <param name="password" value="oober-secure-password" />
    </config>

</configs>

⁠Security

You should run guacamole and guacd on localhost only. Then run something like an Nginx Reverse Proxy on the frontend using SSL and obfuscated URLs like https://acb769fe-e717-442c-93f9-89ed68844678.access.example.com/.