Docker Guacamole

A Docker Container for Apache Guacamole, a client-less remote desktop gateway. It supports standard protocols like VNC, RDP, and SSH over HTML5.

Supported Linux OS: amd64, arm64, ppc64el

This container runs the guacamole web client, the guacd server and a postgres database (version 13).

Usage (Multi-Arch)

docker run \
  -p 8080:8080 \
  -v </path/to/config>:/config \
  flcontainers/guacamole

Parameters

The parameters are split into two halves, separated by a colon, the left hand side representing the host and the right the container side.

-p 8080:8080 - Binds the service to port 8080 on the Docker host, required
-v /config - The config and database location, required
-v /etc/locatime - Recommended to sync container time with host (Docker)
-e TZ - Set Timezone (standard format: Europe/Berlin)
-e EXTENSIONS - See below for details.

Enabling Extensions

Extensions can be enabled using the -e EXTENSIONS variable. Multiple extensions can be enabled using a comma separated list without spaces.

For example:

docker run \
  -p 8080:8080 \
  -v </path/to/config>:/config \
  -v /etc/localtime:/etc/localtime:ro \
  -e TZ="UTC" \
  -e EXTENSIONS="auth-ldap,auth-duo" \
  flcontainers/guacamole

Extension List:

auth-duo
auth-header
auth-jdbc-mysql
auth-jdbc-postgresql
auth-jdbc-sqlserver
auth-json
auth-ldap
auth-quickconnect
auth-sso-openid
auth-sso-saml
auth-sso-cas
auth-totp
vault-ksm
history-recording-storage

More information: Guacamole release notes

You should only enable the extensions you require, if an extensions is not configured correctly in the guacamole.properties file it may prevent the system from loading. See the official documentation for more details.

Default User

The default username is guacadmin with password guacadmin.

Windows-based Docker Hosts

Mapped volumes behave differently when running Docker for Windows and you may encounter some issues with PostgreSQL file system permissions. To avoid these issues, and still retain your config between container upgrades and recreation, you can use the local volume driver, as shown in the docker-compose.yml example below. When using this setup be careful to gracefully stop the container or data may be lost.

version: "3"
services:
  guacamole:
    image: flcontainers/guacamole
    container_name: guacamole
    environment:
      TZ: 'UTC'
      EXTENSIONS: 'auth-totp,auth-ldap'
    volumes:
      - postgres:/config
      - /etc/localtime:/etc/localtime:ro
    ports:
      - 8080:8080
volumes:
  postgres:
    driver: local

License

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

flcontainers / guacamole

readme