Public Repository

Last pushed: 8 months ago
Short Description
Guacamole With NoAuth Extension
Full Description

Guacamole With NoAuth Extension

This project is based off of glyptodon/guacamole, but is intended for test, and or production environments where there is already a layer of security/authentication to protect access to Guacamole.

Please note that using the NoAuth extension is frowned upon by the Guacamole developers, and therefore you should really consider creating your own auth extension instead (we are working on it).

Running

$ docker run -d --name guacd glyptodon/guacd

$ docker run -it \
    --name guacamole \
    --link guacd:guacd \
    -v /path/to/guacamole:/etc/guacamole \
    trueability/guacamole-noauth

Accessible at: http://localhost:8080/guacamole

Volumes

The image requires a volume mounted /etc/guacamole that has (at least) the
following file(s):

noauth-config.xml

An example configuration (and the one used by docker-compose for testing):

<configs>

    <!-- test-node ssh connection -->
    <config name="test-node-ssh" protocol="ssh">
        <param name="hostname" value="test-node" />
        <param name="port" value="22" />
        <param name="username" value="ubuntu" />
        <param name="password" value="oober-secure-password" />
    </config>

    <!-- test-node vnc connection -->
    <config name="test-node-vnc" protocol="vnc">
        <param name="hostname" value="test-node" />
        <param name="port" value="5901" />
        <param name="username" value="ubuntu" />
        <param name="password" value="oober-secure-password" />
    </config>

</configs>

Security

You should run guacamole and guacd on localhost only. Then run something like an Nginx Reverse Proxy on the frontend using SSL and obfuscated URLs like https://acb769fe-e717-442c-93f9-89ed68844678.access.example.com/.

Docker Pull Command
Owner
trueability