Base
Hardened build
minimal ports, security patches applied at build time
Apache Guacamole with Keycloak SSO on Ubuntu 24.04 LTS
Azure
Application Infrastructure
browser based remote desktop access with single sign on already wired in
Overview
Apache Guacamole is a clientless remote desktop gateway: it delivers RDP, VNC and SSH sessions to a plain web browser, with no plugin and no client software on the user's machine. Keycloak is an identity and access management server speaking OpenID Connect and SAML. This image runs both on one machine with Keycloak already registered as Guacamole's identity provider, so the accounts that grant remote access live in a real directory rather than inside the remote access tool.
Why the cloudimg image
The OpenID Connect wiring between the two is done and proven rather than left as an exercise: on first boot the image builds its own realm, registers the client against that machine's own address, and refuses to finish unless it can watch an unauthenticated request get handed to the identity provider, a wrong password rejected, and the correct one return a working session. Every credential, and the TLS private key, is generated on first boot and unique to the machine, and the upstream default administrator account is removed from the database rather than merely disabled. Both databases sit on a dedicated data volume, and each image ships with a paired deployment guide and 24/7 support.
Common uses
- Give contractors and support staff browser based access to servers without handing out VPN or SSH keys
- Put single sign on, two factor authentication and central account revocation in front of remote access
- Reach isolated or jump-hosted machines from a managed browser session that leaves an audit trail
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Application Infrastructure
1Panel Server Management Panel on Ubuntu 24.04
Application Infrastructure
1Panel is an open source, web based control panel for managing a Linux server from the browser.
Apache Directory Server on Ubuntu 24.04 LTS
Application Infrastructure
Apache Directory Server (ApacheDS) is an extensible, embeddable LDAP v3 and Kerberos directory server written in Java by...
Ad
Apache Dubbo on Ubuntu 24.04 LTS
Application Infrastructure
Apache Dubbo is an RPC and microservice framework; this image ships the Dubbo Admin console with a ZooKeeper registry, h...
Apache Seata Server on Ubuntu 24.04 LTS
Application Infrastructure
Apache Seata is an open source distributed transaction solution for microservices.
Apache ShenYu on Ubuntu 24.04 LTS
Application Infrastructure
Apache ShenYu is a high-performance, reactive API gateway built for microservices.
Apache Solr 9 Ubuntu 24.04
Application Infrastructure
Apache Solr is the leading open-source search platform built on Apache Lucene, full-text search, faceted navigation, ric...