Kali Linux Docker Container with Desktop (via Browser)

Docker image can be found here uacmarine556/kali-linux-novnc.

Kali Linux docker container running with a full desktop, VNC, and noVNC so that you can access the desktop via your browser.

Build the Container

make build

Run the Container

make run

Access GUI

Web Browser

https://localhost:9020/vnc.html

See Configuration below for password instructions.

(Alternative) VNC Application

1. Ensure VNCEXPOSE is set to 1 in the Dockerfile before you run make build
2. Download VNC Viewer
3. Install the application
4. Connect with localhost:9021

Configuration

The default configuration is set as follows. Feel free to change this as required.

• -e VNCEXPOSE=0
  • By default, the VNC server runs on localhost within the container only and is not exposed.
  • Use -e VNCEXPOSE=1 to expose the VNC server and use a VNC client of your choice to connect to localhost:9021 with the default password changeme.
  • The default port mapping for the VNC server is configured with the -p 9021:5900 parameter.
• -e VNCPORT=5900
  • By default, the VNC server runs on port 5900 within the container.
  • Note: If you change this port, you also need to change the port mapping with the -p 9021:5900 parameter.
• -e VNCPWD=changeme
  • Change the default password of the VNC server.
• -e VNCDISPLAY=2560x1440
  • Change the default display resolution of the VNC connection.
• -e VNCDEPTH=16
  • Change the default display depth of the VNC connection. Possible values are 8, 16, 24, and 32. Higher values mean better quality but more bandwidth requirements.
• -e NOVNCPORT=8080
  • By default, the noVNC server runs on port 8080 within the container.
  • Note: If you change this port, you also need to change the port mapping with the -p 9020:8080 parameter.
• -v /your/path/to/cert.pem:/etc/ssl/certs/novnc_cert.pem -v /your/path/to/key.pem:/etc/ssl/certs/novnc_key.pem
  • By default, the container creates a new self-signed certificate for the noVNC connection at creation time.
  • You can optionally mount your self-signed certificate and key to the container.
  • Use openssl req -new -x509 -days 365 -nodes -out cert.pem -keyout key.pem to create a new certificate and key.

Customization

You can also build a custom image, i.e. if you want to use another Kali Desktop (mate, gnome, kde), update the KALI_DESKTOP argument in the Dockerfile.

Also, you can specify different Kali Linux metapackages, i.e. core, default, light, large, everything, or top10 by updating the KALI_METAPACKAGE argument in the Dockerfile.

See https://www.kali.org/news/major-metapackage-makeover/ for more details and metapackages.