wenleigood/guacd-debian repository overview

⁠guacd-debian

Apache Guacamole⁠ guacd built on Debian (glibc) instead of Alpine (musl libc).

⁠Why?

The official guacamole/guacd image is based on Alpine Linux which uses musl libc. When guacd forks >50 child processes concurrently, musl's dynamic linker (ld-musl-x86_64.so.1) hits a race condition that causes segfaults (see GUACAMOLE-2135⁠). This affects guacd 1.5.5 and 1.6.0.

This image uses Debian Bookworm (glibc) to completely eliminate the issue.

⁠Key differences from the official image

⁠Build details

• 3-stage build: FreeRDP source compile -> guacd source compile (linked to custom FreeRDP) -> minimal runtime image
• FreeRDP must be source-compiled: System packages (apt install freerdp2-dev) won't generate guacamole channel plugins, causing NLA security negotiation failures
• Writable home directory: FreeRDP requires a writable home to store certificates; user home is set to /home/guacd with pre-created .config/freerdp/{certs,server} directories

⁠Quick Start

# Latest (1.6.0)
docker run -d --name guacd -p 4822:4822 wenleigood/guacd-debian:latest

# Specific version
docker run -d --name guacd -p 4822:4822 wenleigood/guacd-debian:1.5.5

⁠Tags

⁠Supported Protocols

• RDP (via source-compiled FreeRDP 2.11.5)
• VNC (via libvncclient)
• SSH (via libssh2)
• Telnet (via libtelnet)

⁠Repository Structure

1.5/Dockerfile    # guacd 1.5.5
1.6/Dockerfile    # guacd 1.6.0

Each version has its own Dockerfile. CI builds all versions in parallel via matrix strategy.

⁠Build Locally

# Build 1.6.0
docker build -t guacd-debian:1.6.0 1.6/

# Build 1.5.5
docker build -t guacd-debian:1.5.5 1.5/

⁠Build Arguments

⁠Health Check

Built-in health check via nc -z localhost 4822 (interval: 10s, timeout: 5s, retries: 3).

⁠License

Apache License 2.0 (same as Apache Guacamole)