botiquino/nomachine

NoMachine on debian:13-slim with Xfce

I build this to keep a browser app permament open.
May be don't fit for advanced users, this lack a lot of packages to keep minimal.
This is builded with personal approach, trying to use a actual OS version, while keep so minimal how posible.

Warning

• This image is designed to be ephemeral and shouldn't be reused for multiple executions.
  To persist data, *** mounting a volume to /data/.
  Using stop/start will have problem, because the launch script is designed to create a new user on every run. (I evaluate use a default user and change login name, but this could broke some thing that depend on name instead of uid).
• Other recommendation, don't mount a real home or important path, the permission could broke some things.

Variations.

There are 2 variations, base and custom.

• base is minimal OS + packages to NoMachine work, good for build a custom image.
• custom start from base, this add my personal customization, not my data, this keep usable for everyone.

Details.

¹libgl1 can be omitted (this will save around ~172MB), but you will need keep sesion open (no use logout, only close window); if you logout, you will need relaunch the container or use it with some problems. I think NoMachine have some internal component for first login work ok, but don't know what could be.\

ENV vars

Suggested Usage

Run like a service, I use quadlets for this.
I make a nomachine dir at my home and symlink ~/.config/containers/systemd/

bash
/home/<MYUSER>/nomachine/
├── home                <=== This path is my home mount in nomachine.container
│   └── nxhome
│       ├── Desktop
│       └── Downloads
├── nomachine.container
├── nomachine.env
├── nomachine.network
└── nomachine.volume

bash
/home/<MYUSER>/.config/containers/systemd/
├── nomachine.container -> ../../../nomachine/nomachine.container
├── nomachine.network -> ../../../nomachine/nomachine.network
└── nomachine.volume -> ../../../nomachine/nomachine.volume

• ~/.config/containers/systemd/nomachine.container

systemd
[Container]
Image=docker.io/botiquino/nomachine:base

EnvironmentFile=%h/nomachine/nomachine.env

PublishPort=0.0.0.0:4000:4000/tcp
PublishPort=0.0.0.0:4000:4000/udp
Network=nomachine.network
# If you need origin IPs for logs. Use "pasta" or "slirp4netns". Avoid "host".
#Network=pasta
#Network=slirp4netns:port_handler=slirp4netns

Volume=nomachine.volume:/data/:Z
#Mount=type=bind,source=%h/nomachine/home/,destination=/data/,relabel=private

AddCapability=SYS_PTRACE

#Timezone=My/Timezone
AutoUpdate=registry


[Install]
WantedBy=default.target

• ~/nomachine/nomachine.env

systemd
NXUSER=my-user
NXPASS=my-top-sercret-password
NXPUBKEY=ssh-rsa AAAAB3NzaC...
# On base: you can use 'only password', 'only pubkey' or both.
# On custom: only pubkey is available to login, password is disabled; but password can be used to sudo.

# Fix home permissions.
# by default is false, but if you have problem, try changing to true for one run, this will do a "chown" recursive on home.
# WARNING: this can increase considerably the start time depending your files, I suggest disable after fix.
#FIXCHOWN=true

# Advanced custom user
#NXHOME=/data/nxhome
#NXUID=431
#NXGID=433

• ~/.config/containers/systemd/nomachine.network

systemd
[Network]
IPv6=true

• ~/.config/containers/systemd/nomachine.volume

systemd
[Volume]

Build

This is builded using personal intance of Forgejo, with WoodpeckerCI using buildah on podman rootless.
If you want to build your own image, the code is here

Disclaimer

I am not associated with any of the tools used on or for this build.
Use at your own discretion and responsibility. The letter at end of tag is not related to version of NoMachine, is my build correlative.

Links

• NoMachine
• https://hub.docker.com/_/debian