yucatovo/baidunetdisk-docker

BaiduNetdisk-Docker

一款基于 Linuxserver.io 的 https://github.com/linuxserver/docker-baseimage-kasmvnc%E4%BB%A5%E5%8F%8A%E7%99%BE%E5%BA%A6%E7%BD%91%E7%9B%98%E5%AE%98%E6%96%B9%E5%AE%A2%E6%88%B7%E7%AB%AF%E7%9A%84 Docker 镜像，支持 amd64 和 arm64 架构。

注意：本镜像尚未在 ARM64 平台上进行测试，无法保证其在 ARM64 平台上的可用性。

Note: This image has not been tested on the ARM64 platform, and its usability on ARM64 is not guaranteed.

镜像设置

该镜像部署了百度网盘桌面应用程序，并通过浏览器中的 KasmVNC 服务器提供其界面。该接口位于 http://your-ip:8080 或者 https://your-ip:8181。

默认情况下，主 GUI 没有设置密码。可选环境变量 PASSWORD 将允许为用户 abc 设置 http auth 密码。

所有基于 KasmVNC 的 GUI 容器中的选项

该容器基于 https://github.com/linuxserver/docker-baseimage-kasmvnc%EF%BC%8C%E8%BF%99%E6%84%8F%E5%91%B3%E7%9D%80%E6%9C%89%E9%A2%9D%E5%A4%96%E7%9A%84%E7%8E%AF%E5%A2%83%E5%8F%98%E9%87%8F%E5%92%8C%E8%BF%90%E8%A1%8C%E9%85%8D%E7%BD%AE%E6%9D%A5%E5%90%AF%E7%94%A8%E6%88%96%E7%A6%81%E7%94%A8%E7%89%B9%E5%AE%9A%E5%8A%9F%E8%83%BD%E3%80%82

可选环境变量

可选的运行配置

无损模式

通过将流质量预设更改为“Extreme”，该容器能够以高帧速率向您的 Web 浏览器提供真正的无损图像，更多信息请参见此处。为了从非 localhost 端点使用此模式，需要使用 8181 上的 HTTPS 端口。如果使用端口 8080 的反向代理，则需要按照https://github.com/linuxserver/docker-baseimage-kasmvnc#lossless%E6%89%80%E8%BF%B0%E8%AE%BE%E7%BD%AE%E7%89%B9%E5%AE%9A%E6%A0%87%E5%A4%B4%E3%80%82.

如何部署

为了帮助您开始从此镜像创建容器，您可以使用 docker-compose 或 docker cli。

Docker 部署：

docker-compose (推荐, 点击这里查看更多信息)

yaml
---
services:
  baidunetdisk:
    image: docker.io/yucatovo/baidunetdisk-docker:latest
    container_name: baidunetdisk
    security_opt:
      - seccomp:unconfined #可选
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asia/Shanghai
      - PASSWORD= #可选
      - CLI_ARGS= #可选
    volumes:
      - /配置文件位置:/config/
      - /下载位置:/config/baidunetdiskdownload
    ports:
      - 8080:8080
      - 8181:8181
    restart: unless-stopped

docker CLI (点击这里查看更多信息)

bash
docker run -d \
  --name=baidunetdisk \
  --security-opt seccomp=unconfined `#可选` \
  -e PUID=1000 \
  -e PGID=1000 \
  -e TZ=Asia/Shanghai \
  -e PASSWORD= `#可选` \
  -e CLI_ARGS= `#可选` \
  -p 8080:8080 \
  -p 8181:8181 \
  -v /配置文件位置:/config \
  -v /下载位置:/config/baidunetdiskdownload \
  --restart unless-stopped \
  docker.io/yucatovo/baidunetdisk-docker:latest

Podman 部署:

CLI

shell
podman run -d \
  --name=baidunetdisk \
  -e PUID=1000 \
  -e PGID=1000 \
  -e TZ=Asia/Shanghai \
  -e PASSWORD= `#可选` \
  -e CLI_ARGS= `#可选` \
  -p 8080:8080 \
  -p 8181:8181 \
  -p 8081:8081 \
  -v /配置文件位置:/config \
  -v /下载位置:/config/baidunetdiskdownload \
  --restart unless-stopped \
  docker.io/yucatovo/baidunetdisk-docker:latest

Deployment

shell
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: baidunetdisk-deployment
  annotations:
    io.containers.autoupdate: registry
spec:
  replicas: 1
  selector:
    matchLabels:
      app: baidunetdisk
  template:
    metadata:
      labels:
        app: baidunetdisk
    spec:
      restartPolicy: always
      containers:
        - name: baidunetdisk
          image: docker.io/yucatovo/baidunetdisk-docker:latest
          volumeMounts:
            - name: config-path
              mountPath: /config/
            - name: download-path
              mountPath: /config/baidunetdiskdownload/
          ports:
            - containerPort: 8080
              hostPort: 8080
              protocol: TCP
            - containerPort: 8181
              hostPort: 8181
              protocol: TCP
          env:
            - name: TZ
              value: "Asia/Shanghai"
            - name: DRINODE # 可选
              value: "/dev/dri/renderD128"
      volumes:
        - name: config-path
          hostPath:
            path: /配置文件位置
            type: Directory
        - name: download-path
          hostPath:
            path: /下载位置
            type: Directory

反代示例

Nginx

server {
    listen 443 ssl;
    listen [::]:443 ssl;
    http2 on;
    server_name 主机;

    # Allow big files
    client_max_body_size 128M;

    # SSL
    ssl_certificate /your/cert.pem;
    ssl_certificate_key /your/key.pem;
    ssl_session_cache shared:SSL:50m;
    ssl_session_timeout 4h;

    # Specify cipher
    ssl_protocols TLSv1.2 TLSv1.3;
    # 卡拉搜索推荐打开以加速 但是密钥轮换带来的加速并不明显 所以让客户端自行选择
    ssl_prefer_server_ciphers off;
    # 卡拉搜索推荐的列表:
    # ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
    # Mozilla中级推荐的列表:
    # ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305';
    ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305';
    # 关闭无法使用前向加密的功能
    # 详见 https://github.com/mozilla/server-side-tls/issues/135 https://www.imperialviolet.org/2013/06/27/botchingpfs.html
    ssl_session_tickets off;

    # OCSP
    ssl_stapling on;
    ssl_stapling_verify on;
    ssl_trusted_certificate /your/cert.pem;

    # To serve smaller requests (json/html/images etc) smaller ssl_buffer_size reduces latency but adds overhead
    # larger value decreases overhead but adds latency. Thus if TTFB is critical, use a smaller value (<=4K). See:
    # https://github.com/igrigorik/istlsfastyet.com/issues/63
    ssl_buffer_size 4k;

    location / {
        # 自己判断需要填写的后端地址
        set $baidunetdisk baidunetdisk;
        proxy_pass https://$baidunetdisk:8181;

        # 应用Wiki的配置
        # https://kasmweb.com/docs/latest/how_to/reverse_proxy.html
        # The following configurations must be configured when proxying to Kasm Workspaces
        # WebSocket Support
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";

        # Host and X headers
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        # Connectivity Options
        proxy_http_version 1.1;
        proxy_read_timeout 1800s;
        proxy_send_timeout 1800s;
        proxy_connect_timeout 1800s;
        proxy_buffering off;

        # Allow large requests to support file uploads to sessions
        client_max_body_size 10M;
        
        # Lossless 
        # https://github.com/linuxserver/docker-baseimage-kasmvnc
        add_header 'Cross-Origin-Embedder-Policy' 'require-corp';
        add_header 'Cross-Origin-Opener-Policy' 'same-origin';
        add_header 'Cross-Origin-Resource-Policy' 'same-site';
    }
}

注意事项

• KasmVNC 对于 Firefox 的支持不够好，推荐使用 Chromium 作为核心的浏览器获得最佳体验（比如 KasmVNC 的无缝剪贴板）。
• Podman 如果需要启用硬件加速，可能需要往 /etc/containers/containers.conf.d/ 添加配置（详见：https://github.com/containers/common/blob/main/docs/containers.conf.5.md%EF%BC%89%EF%BC%9A

 [containers]
 devices = ["/dev/dri/card1:rwm","/dev/dri/renderD128:rwm"]

• 如果遇到 Failed to close file descriptor for child process (Operation not permitted) 的错误，请使用 --security-opt seccomp=unconfined 启动（https://gist.github.com/nathabonfim59/b088db8752673e1e7acace8806390242%EF%BC%89%EF%BC%8C%E5%8F%AF%E8%83%BD%E4%BC%9A%E6%9C%89%E5%AE%89%E5%85%A8%E9%97%AE%E9%A2%98%E3%80%82
• Linuxserver.io 镜像不设置 PUID 和 PGID 变量的时候会默认使用 911 作为运行用户和组 ID，请确认用户权限正确。
• 由于本人手上并没有可以进行测试的 arm64 设备，所以对于 arm64 的支持可能有不足。如果您在使用的时候遇到了问题，可以直接下载百度网盘Linux版本或者尝试使用其他大佬所编写的镜像 https://github.com/eMUQI/baidunetdisk-arm64-vnc] https://github.com/gshang2017/docker] 查看是否能够正常运行。

感谢以下项目：

• https://github.com/linuxserver/docker-baseimage-kasmvnc
• https://github.com/eMUQI/baidunetdisk-arm64-vnc
• https://github.com/gshang2017/docker

截图

!https://raw.githubusercontent.com/YuCat-OVO/BaiduNetdisk-Docker/main/docs/arm.png

其他

同时也感谢参与反馈与测试的所有人