2026-09-25 15:32:37 +00:00
|
|
|
FROM fedora:44
|
|
|
|
|
|
|
|
|
|
ENV TARGET_USER=garrettmills
|
|
|
|
|
ENV TARGET_UID=1000
|
|
|
|
|
ENV TARGET_GID=1000
|
2026-10-06 20:14:44 +00:00
|
|
|
ENV DOCKER_RUN_DIR=/run/dind
|
2026-09-25 15:32:37 +00:00
|
|
|
|
2026-09-26 14:33:42 -05:00
|
|
|
COPY k8s.repo /etc/yum.repos.d/k8s.repo
|
2026-09-25 15:41:13 +00:00
|
|
|
COPY startup.bash /usr/sbin/startup.bash
|
2026-10-06 22:28:01 +00:00
|
|
|
COPY startwm-xfce.sh /etc/xrdp/startwm-xfce.sh
|
2026-09-25 15:41:13 +00:00
|
|
|
|
2026-09-25 15:32:37 +00:00
|
|
|
RUN dnf install -y \
|
2026-09-26 18:36:06 -05:00
|
|
|
https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-44.noarch.rpm \
|
|
|
|
|
https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-44.noarch.rpm \
|
2026-09-26 18:30:07 -05:00
|
|
|
&& dnf install -y \
|
2026-09-25 15:32:37 +00:00
|
|
|
zip unzip curl tar vim htop fish stow git openssh-clients gnupg2 make nodejs \
|
|
|
|
|
procps-ng rsync screen sudo which autojump hostname jq the_silver_searcher wget \
|
2026-09-26 18:30:07 -05:00
|
|
|
coreutils util-linux openssh-server bind-utils kubectl iproute iputils ffmpeg \
|
2026-09-26 20:28:33 -05:00
|
|
|
&& wget -O /etc/yum.repos.d/kanidm.repo https://download.opensuse.org/repositories/network:/idm/Fedora_44/network:idm.repo \
|
2026-10-06 20:14:44 +00:00
|
|
|
&& wget -O /etc/yum.repos.d/docker-ce.repo https://download.docker.com/linux/fedora/docker-ce.repo \
|
|
|
|
|
&& dnf install -y kanidm-clients docker-ce-cli docker-buildx-plugin docker-compose-plugin \
|
2026-10-06 22:28:01 +00:00
|
|
|
xfce4-session xfwm4 xfce4-panel xfdesktop xfce4-settings xfce4-terminal xfce4-appfinder \
|
|
|
|
|
xfce4-notifyd xfce4-screenshooter Thunar dbus-x11 dbus-daemon adwaita-icon-theme xdg-utils \
|
|
|
|
|
google-noto-sans-fonts google-noto-sans-mono-fonts liberation-fonts \
|
|
|
|
|
firefox thunderbird xrdp xorgxrdp openssl fuse3 \
|
2026-09-26 20:28:33 -05:00
|
|
|
&& dnf clean all -y \
|
2026-10-06 22:28:01 +00:00
|
|
|
&& chmod +x /usr/sbin/startup.bash /etc/xrdp/startwm-xfce.sh \
|
|
|
|
|
&& rm -f /etc/xrdp/cert.pem /etc/xrdp/key.pem /etc/xrdp/rsakeys.ini \
|
|
|
|
|
&& rm -f /etc/xdg/autostart/xfce-polkit.desktop /etc/xdg/autostart/geoclue-demo-agent.desktop /etc/xdg/autostart/localsearch-3.desktop \
|
|
|
|
|
&& sed -i \
|
|
|
|
|
-e 's|^security_layer=.*|security_layer=tls|' \
|
|
|
|
|
-e 's|^certificate=.*|certificate=/etc/xrdp/tls/cert.pem|' \
|
|
|
|
|
-e 's|^key_file=.*|key_file=/etc/xrdp/tls/key.pem|' \
|
|
|
|
|
-e 's|^autorun=.*|autorun=Xorg|' \
|
|
|
|
|
-e '/^\[Xvnc\]/,$d' \
|
|
|
|
|
/etc/xrdp/xrdp.ini \
|
|
|
|
|
&& sed -i \
|
|
|
|
|
-e 's|^EnableUserWindowManager=.*|EnableUserWindowManager=false|' \
|
|
|
|
|
-e 's|^DefaultWindowManager=.*|DefaultWindowManager=/etc/xrdp/startwm-xfce.sh|' \
|
|
|
|
|
-e 's|^AllowRootLogin=.*|AllowRootLogin=false|' \
|
|
|
|
|
/etc/xrdp/sesman.ini \
|
|
|
|
|
&& printf 'PasswordAuthentication no\nKbdInteractiveAuthentication no\n' > /etc/ssh/sshd_config.d/20-no-password.conf
|
|
|
|
|
|
|
|
|
|
EXPOSE 22 3389
|
2026-09-25 15:32:37 +00:00
|
|
|
|
2026-09-25 15:41:13 +00:00
|
|
|
CMD ["/usr/sbin/startup.bash"]
|
