| COPY / / # buildkit |
| LABEL org.opencontainers.image.authors=Kasm Tech "info@kasmweb.com" |
| LABEL com.kasmweb.image=true |
| ARG DISTRO=fedora43 |
| ARG EXTRA_SH=noop.sh |
| ARG LANG=en_US.UTF-8 |
| ARG LANGUAGE=en_US:en |
| ARG LC_ALL=en_US.UTF-8 |
| ARG START_PULSEAUDIO=1 |
| ARG START_XFCE4=1 |
| ARG TZ=Etc/UTC |
| ENV AUDIO_PORT=4901 DISPLAY=:1 DISTRO=fedora43 GOMP_SPINCOUNT=0 HOME=/home/kasm-user INST_SCRIPTS=/dockerstartup/install KASMVNC_AUTO_RECOVER=true KASM_VNC_PATH=/usr/share/kasmvnc LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8 LD_LIBRARY_PATH=/usr/local/lib/ MAX_FRAME_RATE=24 NO_VNC_PORT=6901 OMP_WAIT_POLICY=PASSIVE PULSE_RUNTIME_PATH=/var/run/pulse SDL_GAMECONTROLLERCONFIG=030000005e040000be02000014010000,XInput Controller,platform:Linux,a:b0,b:b1,x:b2,y:b3,back:b8,guide:b16,start:b9,leftstick:b10,rightstick:b11,leftshoulder:b4,rightshoulder:b5,dpup:b12,dpdown:b13,dpleft:b14,dpright:b15,leftx:a0,lefty:a1,rightx:a2,righty:a3,lefttrigger:b6,righttrigger:b7 SHELL=/bin/bash START_PULSEAUDIO=1 STARTUPDIR=/dockerstartup START_XFCE4=1 TERM=xterm VNC_COL_DEPTH=24 VNCOPTIONS=-PreferBandwidth -DynamicQualityMin=4 -DynamicQualityMax=7 -DLP_ClipDelay=0 VNC_PORT=5901 VNC_PORT=5901 VNC_PW=vncpassword VNC_RESOLUTION=1280x1024 VNC_RESOLUTION=1280x720 VNC_VIEW_ONLY_PW=vncviewonlypassword TZ=Etc/UTC |
| EXPOSE [4901/tcp 6901/tcp 5901/tcp] |
| WORKDIR /home/kasm-user |
| USER 1000 |
| ENTRYPOINT ["/dockerstartup/kasm_default_profile.sh" "/dockerstartup/vnc_startup.sh" "/dockerstartup/kasm_startup.sh"] |
| CMD ["--wait"] |
| USER root |
| ENV HOME /home/kasm-default-profile |
| ENV STARTUPDIR /dockerstartup |
| ENV INST_SCRIPTS $STARTUPDIR/install |
| WORKDIR $HOME |
| /bin/sh -c dnf install -y podman fuse-overlayfs passt wmctrl scrot firefox xdg-utils && dnf clean all |
| /bin/sh -c xdg-settings set default-web-browser firefox.desktop 2>/dev/null || true && mkdir -p $HOME/.local/share/applications && xdg-mime default firefox.desktop x-scheme-handler/http 2>/dev/null || true && xdg-mime default firefox.desktop x-scheme-handler/https 2>/dev/null || true |
| /bin/sh -c mv /usr/bin/pkexec /usr/bin/pkexec.real && printf '#!/bin/sh\nexec sudo "$@"\n' > /usr/bin/pkexec && chmod +x /usr/bin/pkexec |
| /bin/sh -c echo "kasm-user:100000:65536" >> /etc/subuid && echo "kasm-user:100000:65536" >> /etc/subgid && chmod u+s /usr/sbin/newuidmap /usr/sbin/newgidmap && mkdir -p /run/user/1000 && chown 1000:1000 /run/user/1000 |
| /bin/sh -c mkdir -p /etc/containers $HOME/.config/containers && printf '[storage]\ndriver = "overlay"\n\n[storage.options.overlay]\nmount_program = "/usr/bin/fuse-overlayfs"\nmountopt = "nodev,fsync=0"\n' > /etc/containers/storage.conf && cp /etc/containers/storage.conf $HOME/.config/containers/storage.conf && printf '[containers]\nlog_driver = "journald"\n\n[engine]\nevents_logger = "journald"\n' > /etc/containers/containers.conf |
| ENV XDG_RUNTIME_DIR=/run/user/1000 |
| /bin/sh -c curl -fsSL https://rpm.nodesource.com/setup_24.x | bash - && dnf install -y nodejs gcc-c++ make python3 pkgconf-pkg-config libsecret-devel nss at-spi2-atk alsa-lib mesa-libgbm && npm install -g pnpm@10 && dnf clean all |
| ENV PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1 |
| ENV CI=true |
| ENV ELECTRON_DISABLE_SANDBOX=1 |
| ENV VNC_RESOLUTION=1920x1080 |
| ENV KASM_SVC_AUDIO=0 |
| ENV ELECTRON_CACHE=/opt/electron-cache |
| ENV PNPM_HOME=/opt/pnpm-home |
| ARG NPM_REGISTRY |
| |1 NPM_REGISTRY= /bin/sh -c git clone --single-branch --branch main --depth 1 https://github.com/podman-desktop/podman-desktop.git /opt/podman-desktop && cd /opt/podman-desktop && pnpm config set store-dir /opt/pnpm-store && sed -i 's/ && playwright install chromium//' package.json && if [ -n "$NPM_REGISTRY" ]; then NPM_CONFIG_REGISTRY="$NPM_REGISTRY" pnpm install --ignore-scripts; else pnpm install --ignore-scripts; fi && mkdir -p /opt/electron-cache && node node_modules/electron/install.js && chown -R 1000:0 /opt/podman-desktop /opt/pnpm-store /opt/electron-cache /opt/pnpm-home |
| |1 NPM_REGISTRY= /bin/sh -c mkdir -p /opt/extension-src && chown 1000:0 /opt/extension-src |
| |1 NPM_REGISTRY= /bin/sh -c echo 'kasm-user ALL=(ALL) NOPASSWD: ALL' >> /etc/sudoers && usermod -aG systemd-journal kasm-user |
| |1 NPM_REGISTRY= /bin/sh -c mkdir -p $HOME/.local/share/containers/podman-desktop/configuration && echo '{ "welcome.version": "initial" }' > $HOME/.local/share/containers/podman-desktop/configuration/settings.json && mkdir -p /usr/share/podman-desktop |
| |1 NPM_REGISTRY= /bin/sh -c mkdir -p "$HOME/.config/Podman Desktop" && echo '{"electron":{"devtools":{"preferences":{"panel-selected-tab":"\"console\"","currentDockState":"\"undocked\""}}}}' > "$HOME/.config/Podman Desktop/Preferences" |
| |1 NPM_REGISTRY= /bin/sh -c mkdir -p $HOME/Desktop && printf '[Desktop Entry]\nType=Application\nName=Podman Desktop\nExec=sh -c "cd /opt/podman-desktop && npx electron . --no-sandbox"\nIcon=utilities-terminal\nTerminal=false\nCategories=Development;\n' > $HOME/Desktop/podman-desktop.desktop && printf '[Desktop Entry]\nType=Application\nName=Terminal\nExec=xfce4-terminal\nIcon=utilities-terminal\nTerminal=false\nCategories=System;\n' > $HOME/Desktop/terminal.desktop && printf '[Desktop Entry]\nType=Application\nName=Managed Config\nExec=xfce4-terminal --working-directory=/usr/share/podman-desktop\nIcon=folder\nTerminal=false\nCategories=System;\n' > $HOME/Desktop/managed-config.desktop && printf '[Desktop Entry]\nType=Application\nName=Firefox\nExec=firefox --no-remote\nIcon=firefox\nTerminal=false\nCategories=Network;WebBrowser;\n' > $HOME/Desktop/firefox.desktop && chmod +x $HOME/Desktop/*.desktop |
| COPY file:9cb10cdd558ec92387a26d43a8687d2471b65ecf38685156c0d8543c021c40ee in /usr/share/backgrounds/wallpaper.png |
| |1 NPM_REGISTRY= /bin/sh -c mkdir -p $HOME/.config/xfce4/xfconf/xfce-perchannel-xml && printf '<?xml version="1.0" encoding="UTF-8"?>\n<channel name="xfce4-desktop" version="1.0">\n <property name="backdrop" type="empty">\n <property name="screen0" type="empty">\n <property name="monitorVNC-0" type="empty">\n <property name="workspace0" type="empty">\n <property name="last-image" type="string" value="/usr/share/backgrounds/wallpaper.png"/>\n <property name="image-style" type="int" value="5"/>\n </property>\n </property>\n <property name="monitornone" type="empty">\n <property name="workspace0" type="empty">\n <property name="last-image" type="string" value="/usr/share/backgrounds/wallpaper.png"/>\n <property name="image-style" type="int" value="5"/>\n </property>\n </property>\n </property>\n </property>\n</channel>\n' > $HOME/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-desktop.xml && printf '<?xml version="1.0" encoding="UTF-8"?>\n<channel name="xsettings" version="1.0">\n <property name="Net" type="empty">\n <property name="EnableEventSounds" type="bool" value="false"/>\n <property name="EnableInputFeedbackSounds" type="bool" value="false"/>\n </property>\n</channel>\n' > $HOME/.config/xfce4/xfconf/xfce-perchannel-xml/xsettings.xml && printf '<?xml version="1.0" encoding="UTF-8"?>\n<channel name="xfce4-notifyd" version="1.0">\n <property name="do-not-disturb" type="bool" value="true"/>\n</channel>\n' > $HOME/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-notifyd.xml |
| |1 NPM_REGISTRY= /bin/sh -c printf '#!/bin/sh\nexec sleep infinity\n' > /usr/local/sbin/pcscd && chmod +x /usr/local/sbin/pcscd |
| COPY file:3580a279b46fa3a825860e2a6bde4d3c5f25cccee2e1c53ac1cc463301a65501 in $STARTUPDIR/custom_startup.sh |
| |1 NPM_REGISTRY= /bin/sh -c chmod +x $STARTUPDIR/custom_startup.sh |
| COPY file:51288cd3f735918af33890f1a2b2b50292c65924fa41ef048eeb8808777ca9c1 in /entrypoint.sh |
| |1 NPM_REGISTRY= /bin/sh -c chmod +x /entrypoint.sh |
| |1 NPM_REGISTRY= /bin/sh -c sed -i -E 's/^([[:space:]]*)require_ssl:[[:space:]]*true/\1require_ssl: false/' /usr/share/kasmvnc/kasmvnc_defaults.yaml |
| |1 NPM_REGISTRY= /bin/sh -c cat /usr/share/kasmvnc/kasmvnc_defaults.yaml |
| |1 NPM_REGISTRY= /bin/sh -c sed -i.bak 's/-sslOnly/-disableBasicAuth/' /dockerstartup/vnc_startup.sh |
| |1 NPM_REGISTRY= /bin/sh -c chown 1000:0 $HOME |
| |1 NPM_REGISTRY= /bin/sh -c $STARTUPDIR/set_user_permission.sh $HOME |
| ENV HOME /home/kasm-user |
| WORKDIR $HOME |
| |1 NPM_REGISTRY= /bin/sh -c mkdir -p $HOME && chown -R 1000:0 $HOME |
| VOLUME /home/kasm-user/.local/share/containers |
| USER 1000 |
| ENTRYPOINT ["/entrypoint.sh"] |
| CMD ["--wait"] |
