X11docker runs on Linux and (with some setup and limitations) on MS Windows.
x11docker -desktop -size 320x240 x11docker/lxde (needs nested X server Xephyr). Several optional features like GPU, sound, webcam and printer support. No dependencies inside of images except for some optional features. Recommended: nxagent and Xephyr, alternatively image x11docker/xserver. No obliging dependencies on host beside X and one of docker, podman or nerdctl. Container user is same as host user to avoid root in container. Restricts container capabilities to bare minimum. Avoids X security leaks by running additional X servers. If you prefer podman over Docker, you don't need to care about this difference. The supported native Docker Engine package name is mostly docker.io or docker-ce, in opposite to the non-supported VM based docker-desktop package. 
If you install Docker from your distribution's repository, you'll likely get this native version. Instead, use x11docker with the native "Docker Engine Server version" that uses your host kernel to run containers. 
x11docker is not designed to support this VM based version. Since a while Docker distributes a version called "Docker Desktop" that runs Docker in a QEMU VM. X11docker wiki provides some how-to's for basic setups without x11docker. It is possible to run outdated versions or latest development versions side by side.įiles to work on can be shared between host and container. This can help to run or deploy software that is difficult to install on several systems due to dependency issues. Software can be installed in a deployable image with a rudimentary Linux system inside. This allows a sandbox environment that fairly well protects the host system from possibly malicious or buggy software.
Additionally x11docker does some security setup to enhance container isolation and to avoid X security leaks. X servers can run from host or in a container of image x11docker/xserver. It runs an X display server and provides it to containers. Docker, podman and nerdctl do not provide a display server that would allow to run applications with a graphical user interface. Container tools like Docker, podman and nerdctl allow to run applications in an isolated container environment.Ĭontainers need much less resources than virtual machines for similar tasks. X11docker allows to run graphical desktop applications (and entire desktops) in Linux containers. 
Installation from distribution repositories.Default preset for all x11docker sessions.Choice of X servers and Wayland compositors.Avoid X security leaks and enhance container security X11docker: Run GUI applications in Docker or podman containers.
0 kommentar(er)
