jwetzell / docker-guacamole Goto Github PK

unfortunately there is no guacd.conf file in this container.
To configure tls internally to adhere zero trust approach, i've tried with this container
but the guacd process got called directly guacd -b 127.0.0.1
is it possible to shift the params in a conf file to set a few pasrameters?

Having trouble getting instance of Guacamole to connect to an LDAP server. I was able to get one of my instances of Guacamole to connect to a Synology NAS LDAP server. I'm having trouble getting a seperate instance to connect to an LDAP server (Azure AD LDAP Wrapper). A different Synology NAS was able to connect to the LDAP Wrapper server, and hosts a RADIUS server. I was wondering if you could add RADIUS support for authentication?

Environment:

• Guacamole Version: jwetzell/guacamole:latest
• Operating System: Docker

Describe Your Problem:
I use a docker-compose.yml with jwetzell/guacamole:arm32v7 but still get the 1.4.0 version of Guacamole instead of the latest.
What am I doing wrong?

Logs:

version: '3.8'
services:

  guacamole:
    hostname: guacamole
    image: jwetzell/guacamole:arm32v7
    ports:
      - 8080:8080
    volumes:
      - ./appdata/config:/config
    restart: unless-stopped

Screenshots:

Environment:

• Guacamole Version: latest
• Operating System: Raspbian

Waiting for postgres to come up...
Starting postgres...
LOG: could not translate host name "localhost", service "5432" to address: Temporary failure in name resolution
WARNING: could not create listen socket for "localhost"
FATAL: could not create any TCP/IP sockets
LOG: database system is shut down
/var/run/postgresql:5432 - no response

• Environment:
  Docker version 5:20.10.173-0debian-bullseye
• Guacamole Version:
  jwetzell/guacamole:Latest
• Operating System:
  OpenMediaVault / Debian 11 / Docker

Hello,
I currently have a problem with your container image. Once deployed I put my connections and I activate the screen recording by putting a folder accessible by my container.
I log in and I have log files in this folder, but when I log out and go to history I don't see a view button in log.

If I ever need to make any changes, please let me know every step of the way.

version: "3.9"
services:
  guacamole:
    container_name: Guacamole
    image: jwetzell/guacamole:latest
    healthcheck:
     test: curl -f http://localhost:8080/ || exit 1
    mem_limit: 6g
    cpu_shares: 1024
    security_opt:
      - no-new-privileges:false
    restart: always
    ports:
      - 8080:8080
    volumes:
      - ./guacamole:/config:rw
    environment:
      EXTENSIONS: history-recording-storage

Sincerely

Describe Your Problem:
I running Guacamole in docker, in front of this is a reverse proxy (nginx proxy manager)
In history tab I see all connections from a docker internal IP.
I wish to see the real client ip from which a client connectst

Settings in nginx proxy manager for X-Forwarded-For are set.
In guacamole I only added the totp extention.
So how can I get the client IP ?

Can you please add connection support for IPv6?

I'm suffering from a bug mentioned in above URL (GUACAMOLE-1717). A fix was recently merged in apache:master. Could you include it as well so that https://hub.docker.com/r/jwetzell/guacamole works correctly? Tnx!

Would it be possible to add in noauth? I use my own authentication over the top so currently I have to log in to two different forms to get to Guac.

Thanks!

Describe The Bug:

turning on EXTENSIONS auth-totp does not work
The "guacamole-auth-totp-1.5.5.jar" files do not copy across into the "/docker/guacamole/guacamole/extensions" folder and the totp never kicks in.

To Reproduce:

enable totp, reload contianer not that .jar files dont copy and if you sign in totp never starts
Expected behavior:

Logs:

Remove any sensative information.

Screenshots:

Environment:

• Guacamole Version:
• Operating System:

Hi,
I'm trying to deploy this image on Pi4 armv7l.
I can get the SSH working without any issues, but I'm having some problems using the VNC connection option.
Log below

guacamole | guacd[281]: INFO: Creating new client for protocol "vnc" guacamole | guacd[281]: INFO: Connection ID is "$617dcf84-cbc9-4c8e-bd1f-e0ff30292032" guacamole | guacd[430]: INFO: Cursor rendering: local guacamole | guacd[430]: INFO: User "@de8ff7aa-9fd5-40e1-8aa4-7ee89ea30214" joined connection "$617dcf84-cbc9-4c8e-bd1f-e0ff30292032" (1 users now present) guacamole | 15:13:43.585 [http-nio-8080-exec-5] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" connected to connection "1". guacamole | guacd[430]: ERROR: Unable to connect to VNC server. guacamole | guacd[430]: INFO: User "@de8ff7aa-9fd5-40e1-8aa4-7ee89ea30214" disconnected (0 users remain) guacamole | guacd[430]: INFO: Last user of connection "$617dcf84-cbc9-4c8e-bd1f-e0ff30292032" disconnected guacamole | 15:13:43.638 [http-nio-8080-exec-4] INFO o.a.g.tunnel.TunnelRequestService - User "guacadmin" disconnected from connection "1". Duration: 53 milliseconds guacamole | guacd[281]: INFO: Connection "$617dcf84-cbc9-4c8e-bd1f-e0ff30292032" removed. guacamole | Exception in thread "Thread-11" java.lang.IllegalStateException: Message will not be sent because the WebSocket session has been closed guacamole | at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:425) guacamole | at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:309) guacamole | at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:250) guacamole | at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:191) guacamole | at org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37) guacamole | at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152) guacamole | at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53) guacamole | at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)

Same image on x64 cpu works fine

Issue with guacamole please help as soon as possible

Unable to connect to ssh using guacamole. I am getting this error. Is this becuase my server asks fro fingerprint verification or any other reason

docker run
-p 4822:8080
-v /Portainer/AppData/Guacamole/Config:/config
jwetzell/guacamole:arm32v7

Please help!
I'm sure it's probably me, I don't really understand what I'm doing.

I'm using portainer to deploy this stack:

version: "2"
services:
  guacamole:
    container_name: Guacamole
    image: jwetzell/guacamole:latest
    volumes:
      - /volume1/docker/guacamole:/config
    ports:
      - 8080:8080

The deploy is successful and I open the login page but I can't login with "guacadmin". I look at the log file for clues and all I see is this and I'm not sure what to make of it:

[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] 30-defaults.sh: executing...
[cont-init.d] 30-defaults.sh: exited 0.
[cont-init.d] 40-postgres.sh: executing...
Database already configured
[cont-init.d] 40-postgres.sh: exited 0.
[cont-init.d] 50-extensions: executing...
[cont-init.d] 50-extensions: exited 0.
[cont-init.d] done.
[services.d] starting services
Starting guacamole guacd...
Starting postgres...
[services.d] done.
/var/run/postgresql:5432 - no response
Waiting for postgres to come up...
guacd[270]: INFO: Guacamole proxy daemon (guacd) version 1.5.0 started
guacd[270]: INFO: Listening on host 127.0.0.1, port 4822
LOG: could not bind IPv6 socket: Cannot assign requested address
HINT: Is another postmaster already running on port 5432? If not, wait a few seconds and retry.
LOG: database system was shut down at 2023-04-14 06:23:25 UTC
LOG: MultiXact member wraparound protections are now enabled
LOG: autovacuum launcher started
LOG: database system is ready to accept connections
FATAL: role "root" does not exist
/var/run/postgresql:5432 - accepting connections
Starting guacamole client...
NOTE: Picked up JDK_JAVA_OPTIONS: --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
14-Apr-2023 06:23:32.100 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version name: Apache Tomcat/9.0.65
14-Apr-2023 06:23:32.108 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server built: Jul 14 2022 12:28:53 UTC
14-Apr-2023 06:23:32.110 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version number: 9.0.65.0
14-Apr-2023 06:23:32.112 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Name: Linux
14-Apr-2023 06:23:32.122 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Version: 4.4.180+
14-Apr-2023 06:23:32.122 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Architecture: amd64
14-Apr-2023 06:23:32.127 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Java Home: /usr/local/openjdk-11
14-Apr-2023 06:23:32.128 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Version: 11.0.16+8
14-Apr-2023 06:23:32.131 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Vendor: Oracle Corporation
14-Apr-2023 06:23:32.131 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_BASE: /usr/local/tomcat
14-Apr-2023 06:23:32.136 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_HOME: /usr/local/tomcat
14-Apr-2023 06:23:32.159 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.lang=ALL-UNNAMED
14-Apr-2023 06:23:32.159 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.io=ALL-UNNAMED
14-Apr-2023 06:23:32.160 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.util=ALL-UNNAMED
14-Apr-2023 06:23:32.160 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.util.concurrent=ALL-UNNAMED
14-Apr-2023 06:23:32.160 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
14-Apr-2023 06:23:32.160 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.config.file=/usr/local/tomcat/conf/logging.properties
14-Apr-2023 06:23:32.161 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
14-Apr-2023 06:23:32.161 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djdk.tls.ephemeralDHKeySize=2048
14-Apr-2023 06:23:32.161 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.protocol.handler.pkgs=org.apache.catalina.webresources
14-Apr-2023 06:23:32.162 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.catalina.security.SecurityListener.UMASK=0027
14-Apr-2023 06:23:32.162 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dignore.endorsed.dirs=
14-Apr-2023 06:23:32.162 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.base=/usr/local/tomcat
14-Apr-2023 06:23:32.162 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.home=/usr/local/tomcat
14-Apr-2023 06:23:32.163 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.io.tmpdir=/usr/local/tomcat/temp
14-Apr-2023 06:23:32.178 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Loaded Apache Tomcat Native library [1.2.35] using APR version [1.7.0].
14-Apr-2023 06:23:32.178 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR capabilities: IPv6 [true], sendfile [true], accept filters [false], random [true], UDS [true].
14-Apr-2023 06:23:32.178 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR/OpenSSL configuration: useAprConnector [false], useOpenSSL [true]
14-Apr-2023 06:23:32.183 INFO [main] org.apache.catalina.core.AprLifecycleListener.initializeSSL OpenSSL successfully initialized [OpenSSL 1.1.1n 15 Mar 2022]
14-Apr-2023 06:23:32.757 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-8080"]
14-Apr-2023 06:23:32.795 INFO [main] org.apache.catalina.startup.Catalina.load Server initialization in [1003] milliseconds
14-Apr-2023 06:23:32.883 INFO [main] org.apache.catalina.core.StandardService.startInternal Starting service [Catalina]
14-Apr-2023 06:23:32.883 INFO [main] org.apache.catalina.core.StandardEngine.startInternal Starting Servlet engine: [Apache Tomcat/9.0.65]
14-Apr-2023 06:23:32.910 INFO [main] org.apache.catalina.startup.HostConfig.deployWAR Deploying web application archive [/usr/local/tomcat/webapps/ROOT.war]
14-Apr-2023 06:23:34.987 INFO [main] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.
06:23:35.682 [main] INFO o.a.g.environment.LocalEnvironment - GUACAMOLE_HOME is "/config/guacamole".
06:23:35.870 [main] INFO o.a.g.GuacamoleServletContextListener - Read configuration parameters from "/config/guacamole/guacamole.properties".
06:23:35.873 [main] INFO o.a.g.rest.auth.HashTokenSessionMap - Sessions will expire after 60 minutes of inactivity.
06:23:36.434 [main] ERROR o.a.g.extension.ProviderFactory - authentication provider extension failed to start: Property postgresql-database is required.
06:23:36.436 [main] ERROR o.a.g.extension.ProviderFactory - authentication provider extension failed to start: Property postgresql-database is required.
06:23:36.548 [main] INFO o.a.g.extension.ExtensionModule - Extension "PostgreSQL Authentication" (postgresql) loaded.
06:23:36.767 [main] INFO o.a.g.t.w.WebSocketTunnelModule - Loading JSR-356 WebSocket support...
06:23:37.607 [main] WARN o.g.jersey.server.wadl.WadlFeature - JAXBContext implementation could not be found. WADL feature is disabled.
14-Apr-2023 06:23:37.913 INFO [main] org.apache.catalina.startup.HostConfig.deployWAR Deployment of web application archive [/usr/local/tomcat/webapps/ROOT.war] has finished in [5,003] ms
14-Apr-2023 06:23:37.918 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-8080"]
14-Apr-2023 06:23:37.936 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in [5140] milliseconds
06:23:38.382 [http-nio-8080-exec-7] WARN o.a.g.e.AuthenticationProviderFacade - Authentication attempt ignored because the relevant authentication provider could not be loaded. Please check for errors earlier in the logs.
06:23:38.383 [http-nio-8080-exec-7] WARN o.a.g.e.AuthenticationProviderFacade - Authentication attempt ignored because the relevant authentication provider could not be loaded. Please check for errors earlier in the logs.
06:23:48.458 [http-nio-8080-exec-9] WARN o.a.g.e.AuthenticationProviderFacade - Authentication attempt ignored because the relevant authentication provider could not be loaded. Please check for errors earlier in the logs.
06:23:48.458 [http-nio-8080-exec-9] WARN o.a.g.e.AuthenticationProviderFacade - Authentication attempt ignored because the relevant authentication provider could not be loaded. Please check for errors earlier in the logs.
06:23:48.459 [http-nio-8080-exec-9] WARN o.a.g.r.auth.AuthenticationService - Authentication attempt from 192.168.208.1 for user "guacadmin" failed.

Describe The Bug:

To Reproduce:

install guac on mac mini docker container (amd64)
connect (ok), login (ok), create connection (ok)
then use it

Expected behavior:

expect ssh session...
works from same quac system to amd64 system..

can ssh directly.. from phone or amd system

Logs:

guacd[1123]: INFO:	Creating new client for protocol "ssh"
01/23/2024
11:14:07 AM
guacd[1123]: INFO:	Connection ID is "$1bb5d0b8-e5d3-48e8-9393-6fb65d479617"
01/23/2024
11:14:07 AM
guacd[1545]: INFO:	User "@bfa82027-22b1-48e9-8018-71b185ae2d8c" joined connection "$1bb5d0b8-e5d3-48e8-9393-6fb65d479617" (1 users now present)
01/23/2024
11:14:07 AM
17:14:07.946 [http-nio-8080-exec-5] INFO  o.a.g.tunnel.TunnelRequestService - User "sam" connected to connection "4".
01/23/2024
11:14:08 AM
guacd[1545]: ERROR:	SSH handshake failed.
01/23/2024
11:14:08 AM
guacd[1545]: INFO:	User "@bfa82027-22b1-48e9-8018-71b185ae2d8c" disconnected (0 users remain)

Screenshots:

01/23/2024
11:12:13 AM
17:12:13.369 [http-nio-8080-exec-10] INFO o.a.g.r.auth.AuthenticationService - User "sam" successfully authenticated from [50.24.194.29, 192.168.65.1].
01/23/2024
11:12:20 AM
guacd[1123]: INFO: Creating new client for protocol "ssh"
01/23/2024
11:12:20 AM
guacd[1123]: INFO: Connection ID is "$6508023c-9137-46c1-b6ea-619077bed9f8"
01/23/2024
11:12:20 AM
guacd[1435]: INFO: User "@1da299e1-fd30-4ef5-b161-b0f56f77d40e" joined connection "$6508023c-9137-46c1-b6ea-619077bed9f8" (1 users now present)
01/23/2024
11:12:20 AM
17:12:20.719 [http-nio-8080-exec-2] INFO o.a.g.tunnel.TunnelRequestService - User "sam" connected to connection "4".
01/23/2024
11:12:21 AM
guacd[1435]: ERROR: SSH handshake failed.
01/23/2024
11:12:35 AM
guacd[1435]: ERROR: User is not responding. // -------- this is the first time connecting over this interface

Environment:

• Guacamole Version:
• Guacamole proxy daemon (guacd) version 1.5.4 started
• Operating System:
  macos Sonoma 14.0. arm64, m1

I did see a banner on the lower right,

the network connection to the guacamole server appears to be unsafe
this is connecting to the same machine that the docker container is running on .

Describe Your Problem:
i would like to repport a security issue. But i don't think the email linked in the "Security Reporting" afrea is still valid.

Please provide actual contact information

Greetings,

Thanks for taking care of this image.

Just wanted to confirm, I have been using the old original image from Onzu. # https://github.com/oznu/docker-guacamole

Docker Compose.

version: '3.3'
services:
    guacamole:
        image: oznu/guacamole
        container_name: rds_guacamole_stack
        ports:
            - '8106:8080'
        volumes:
            - '/volume1/docker/containers/guacamole/stack:/config'
        environment:
            - 'EXTENSIONS=auth-duo'

Can I just simply replace the image in the compose:
FROM
image: oznu/guacamole
TO
image: jwetzell/guacamole

And existing should work?

Thanks!

Hello

With this (photon 4 updated)

docker run -p 8433:8080 -v ./config/:/config -e "EXTENSIONS=auth-ldap,auth-duo,auth-totp" jwetzell/guacamole

It hangs indefinitly on this

18-Aug-2022 13:20:08.448 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in [9719] milliseconds

Thanks for help

Describe Your Problem:
This version of Guac only supports DSS and RSA protocols for SSH connectivity. This should be fixed in later versions of the guac 1.4.0 github.
https://issues.apache.org/jira/browse/GUACAMOLE-1655

When trying to connect to a modern OS, like Ubuntu 2204 (Jammy), you are not able to connect via SSH.

Logs:

guacd[371]: ERROR: SSH handshake failed.

Screenshots:
N/A

Environment:

• Guacamole Version: 1.4.0
• Operating System: Docker

@jwetzell Please bump guacamole to the new version 1.5.5

Hi,

Just to let you know that I had to delete my local config directory when I updated your image to 1.5.1.
I faced this error : pg_isready no found

Thanks for this image ! :)

Make sure extension support is complete.
Things look like they might have changed with respect to extensions. There seem to be some more like auth-jdbc (mysql,postgresql,sqlserver) and auth-sso (replacing auth-cas,auth-openid)

Hi,

Would it be possible to have a lighter version without DB but with the default user-mapping.xml ?

For small installation like mine it would be more than enough as my authentication is done upfront (with authelia) and would save some precious resources in RAM

https://guacamole.apache.org/doc/gug/configuring-guacamole.html

Cheers

Hi, I have no idea what it's doing.
I installed it in portrainer using a script:

version: "2" services: guacamole: image: jwetzell/guacamole container_name: guacamole-new volumes: - /volume1/docker/guacamole:/config ports: - 8082:8080 environment: EXTENSIONS: auth-ldap,auth-totp volumes: postgres: driver: local

I created both RDP and VNC. Neither connection works. The session always connects and disconnects immediately, saying that the "guacamole server" is unavailable.
I deleted the whole thing and reinstalled it, all of a sudden there was a two-factor authentication that wasn't there before. Anyway, same error.

Then when I clicked Reconnect, it logged me out every time. It was like it had a life of its own.
Is there any way to install an older version ??

Hi, i am trying to run Guacamole Arm32v7 on Ubuntu 24 LTS with Portainer 19.5 with Docker 26.1.1 on a Raspberry Pi 4. I get no running container but this error in my logs:

s6-svscan: warning: unable to iopause: Function not implemented
s6-svscan: warning: executing into .s6-svscan/crash
s6-supervise s6-fdholderd: fatal: unable to iopause: Function not implemented
s6-svscan panicked! Dropping to a root shell.
/bin/sh: 0: can't access tty; job control turned off
# 
s6-svscan: warning: unable to iopause: Function not implemented
s6-svscan: warning: executing into .s6-svscan/crash
s6-supervise s6-fdholderd: fatal: unable to iopause: Function not implemented
s6-svscan panicked! Dropping to a root shell.

What goes wrong?

Environment:

• Guacamole Version:
• Operating System:

Hello,

I'm trying to access homeassistant by gacamole with ecdsa private key but not work "due to HA openssh not support RSA anymore"
I tried use xshell to connect the homeassistant with ecdsa pk is work, so my ha openssh config should be ok

and I noticed that the Gacamole 1.5 is ECC supported, which mean the ecdsa openssh private key should be work
however I still unable to connect to HomeAssistant
but this times is better, previous 1.4 version is no connection action with HA, however this times the HA got the connection but said
no matching host key type found. Their offer: ssh-rsa,ssh-dss [preauth]
seem the Gacamole 1.5 is accept ecdsa open ssh pk cert. but haven't use this to commuicate with the HA openssh server

Any idea to fix it?

Thank you so much~

Describe Your Problem:
As of March 2024, DUO has deprecated the use of the Traditional prompt for authenticating their services. I am just now setting up the DUO extension, so will be undoing it until there is an update, but wanted to reach out. The documentation I could find regarding making the update should be able to be found here. I don't know enough about this process to provide more detail. I don't believe I have any logs for this issue outside of the error messages received in the screenshots below, but let me know if you need anything else from me to move forward. Thank you!

Logs:

Screenshots:

Environment:

• Guacamole Version: jwetzell/guacamole:latest
• Operating System: Docker

Describe The Bug:
With the latest version 1.5.0 I had to fix the version in the docker compose file (jwetzell/guacamole:1.5.0-arm64), because there is a mismatch of the architecture in the Docker Image file (jwetzell/guacamole:arm64)

To Reproduce:
Dockerfile jwetzell/guacamole:arm64 line 27:amd64 (instead of arm64)
Dockerfile jwetzell/guacamole:1.5.0-arm64 line 27 armhf is correct.

Expected behavior:
Dockerfile jwetzell/guacamole:arm64 line 27:armhf or arm64

Environment:

• Guacamole Version: 1.5.0 (docker arm64)
• Operating System: Linux ssch1 5.10.0-20-arm64 #1 SMP Debian 5.10.158-2 (2022-12-13) aarch64 GNU/Linux

@jwetzell Please bump guacamole to the new version 1.5.4

Describe Your Problem:

I've been using this container successfully for the past year or so, I created my wife as a second user, now my user says "Invalid Login"

Logs:

13-Dec-2023 02:46:00.489 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version name:   Apache Tomcat/9.0.65
13-Dec-2023 02:46:00.496 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server built:          Jul 14 2022 12:28:53 UTC
13-Dec-2023 02:46:00.497 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version number: 9.0.65.0
13-Dec-2023 02:46:00.497 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Name:               Linux
13-Dec-2023 02:46:00.497 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Version:            5.10.0-26-amd64
13-Dec-2023 02:46:00.497 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Architecture:          amd64
13-Dec-2023 02:46:00.497 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Java Home:             /usr/local/openjdk-11
13-Dec-2023 02:46:00.498 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Version:           11.0.16+8
13-Dec-2023 02:46:00.498 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Vendor:            Oracle Corporation
13-Dec-2023 02:46:00.498 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_BASE:         /usr/local/tomcat
13-Dec-2023 02:46:00.498 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_HOME:         /usr/local/tomcat
13-Dec-2023 02:46:00.549 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.lang=ALL-UNNAMED
13-Dec-2023 02:46:00.549 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.io=ALL-UNNAMED
13-Dec-2023 02:46:00.549 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.util=ALL-UNNAMED
13-Dec-2023 02:46:00.549 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.util.concurrent=ALL-UNNAMED
13-Dec-2023 02:46:00.550 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
13-Dec-2023 02:46:00.550 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.config.file=/usr/local/tomcat/conf/logging.properties
13-Dec-2023 02:46:00.550 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
13-Dec-2023 02:46:00.550 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djdk.tls.ephemeralDHKeySize=2048
13-Dec-2023 02:46:00.550 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.protocol.handler.pkgs=org.apache.catalina.webresources
13-Dec-2023 02:46:00.551 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.catalina.security.SecurityListener.UMASK=0027
13-Dec-2023 02:46:00.551 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dignore.endorsed.dirs=
13-Dec-2023 02:46:00.551 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.base=/usr/local/tomcat
13-Dec-2023 02:46:00.551 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.home=/usr/local/tomcat
13-Dec-2023 02:46:00.551 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.io.tmpdir=/usr/local/tomcat/temp
13-Dec-2023 02:46:00.599 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Loaded Apache Tomcat Native library [1.2.35] using APR version [1.7.0].
13-Dec-2023 02:46:00.599 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR capabilities: IPv6 [true], sendfile [true], accept filters [false], random [true], UDS [true].
13-Dec-2023 02:46:00.600 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR/OpenSSL configuration: useAprConnector [false], useOpenSSL [true]
13-Dec-2023 02:46:00.634 INFO [main] org.apache.catalina.core.AprLifecycleListener.initializeSSL OpenSSL successfully initialized [OpenSSL 1.1.1n  15 Mar 2022]
13-Dec-2023 02:46:01.624 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-8080"]
13-Dec-2023 02:46:01.711 INFO [main] org.apache.catalina.startup.Catalina.load Server initialization in [1847] milliseconds
13-Dec-2023 02:46:01.834 INFO [main] org.apache.catalina.core.StandardService.startInternal Starting service [Catalina]
13-Dec-2023 02:46:01.834 INFO [main] org.apache.catalina.core.StandardEngine.startInternal Starting Servlet engine: [Apache Tomcat/9.0.65]
13-Dec-2023 02:46:01.872 INFO [main] org.apache.catalina.startup.HostConfig.deployWAR Deploying web application archive [/usr/local/tomcat/webapps/ROOT.war]
13-Dec-2023 02:46:04.666 INFO [main] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.
02:46:05.242 [main] INFO  o.a.g.environment.LocalEnvironment - GUACAMOLE_HOME is "/config/guacamole".
02:46:05.392 [main] INFO  o.a.g.GuacamoleServletContextListener - Read configuration parameters from "/config/guacamole/guacamole.properties".
02:46:05.394 [main] INFO  o.a.g.rest.auth.HashTokenSessionMap - Sessions will expire after 60 minutes of inactivity.
02:46:06.131 [main] INFO  o.a.g.extension.ExtensionModule - Multiple extensions are installed and will be loaded in order of decreasing priority:
02:46:06.131 [main] INFO  o.a.g.extension.ExtensionModule -  - [postgresql] "PostgreSQL Authentication" (/config/guacamole/extensions/guacamole-auth-jdbc-postgresql-1.5.3.jar)
02:46:06.131 [main] INFO  o.a.g.extension.ExtensionModule -  - [totp] "TOTP TFA Authentication Backend" (/config/guacamole/extensions/guacamole-auth-totp-1.5.3.jar)
02:46:06.131 [main] INFO  o.a.g.extension.ExtensionModule - To change this order, set the "extension-priority" property or rename the extension files. The default priority of extensions is dictated by the sort order of their filenames.
02:46:07.699 [main] INFO  o.a.g.extension.ExtensionModule - Extension "PostgreSQL Authentication" (postgresql) loaded.
02:46:07.972 [main] INFO  o.a.g.extension.ExtensionModule - Extension "TOTP TFA Authentication Backend" (totp) loaded.
02:46:08.149 [main] INFO  o.a.g.t.w.WebSocketTunnelModule - Loading JSR-356 WebSocket support...
02:46:09.056 [main] WARN  o.g.jersey.server.wadl.WadlFeature - JAXBContext implementation could not be found. WADL feature is disabled.
13-Dec-2023 02:46:09.484 INFO [main] org.apache.catalina.startup.HostConfig.deployWAR Deployment of web application archive [/usr/local/tomcat/webapps/ROOT.war] has finished in [7,612] ms
13-Dec-2023 02:46:09.491 INFO [main] org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler ["http-nio-8080"]
13-Dec-2023 02:46:09.537 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in [7823] milliseconds

Screenshots:

Environment:

• Guacamole Version: 1.5.3
• Operating System: Docker on Debian 11 host.

Describe Your Problem:
Guacamole isn't accessible after updating my Ubuntu and docker, I get a 404 error (screenshot attached below). I last updated 2 weeks ago and everything was working fine but something broke when I updated today. I know Docker Engine updated to version 26, possibly related to that?
Appreciate any help with this!

Here's my compose file:

  guacamole:
    container_name: guacamole
    image: jwetzell/guacamole:latest
    restart: always
    ports:
      - 8002:8080
    volumes:
      - /singularity/guacamole/config:/config

Logs:

[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] 30-defaults.sh: executing... 
[cont-init.d] 30-defaults.sh: exited 0.
[cont-init.d] 40-postgres.sh: executing... 
Database already configured
[cont-init.d] 40-postgres.sh: exited 0.
[cont-init.d] 50-extensions.sh: executing... 
Cleaning Extensions from previous Guacamole versions
Cleaning Extensions
[cont-init.d] 50-extensions.sh: exited 0.
[cont-init.d] done.
[services.d] starting services
Starting guacamole guacd...
Starting postgres...
/tmp:5432 - no response
Waiting for postgres to come up...
[services.d] done.
guacd[269]: INFO:       Guacamole proxy daemon (guacd) version 1.5.4 started
guacd[269]: INFO:       Listening on host 127.0.0.1, port 4822
LOG:  database system was shut down at 2024-03-24 19:30:04 UTC
LOG:  MultiXact member wraparound protections are now enabled
LOG:  database system is ready to accept connections
LOG:  autovacuum launcher started
FATAL:  role "root" does not exist
/tmp:5432 - accepting connections
Starting guacamole client...
NOTE: Picked up JDK_JAVA_OPTIONS:  --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
24-Mar-2024 19:30:19.579 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version name:   Apache Tomcat/9.0.85
24-Mar-2024 19:30:19.585 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server built:          Jan 5 2024 08:28:07 UTC
24-Mar-2024 19:30:19.586 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version number: 9.0.85.0
24-Mar-2024 19:30:19.586 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Name:               Linux
24-Mar-2024 19:30:19.587 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Version:            5.15.0-101-generic
24-Mar-2024 19:30:19.587 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Architecture:          amd64
24-Mar-2024 19:30:19.587 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Java Home:             /opt/java/openjdk
24-Mar-2024 19:30:19.588 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Version:           11.0.22+7
24-Mar-2024 19:30:19.588 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Vendor:            Eclipse Adoptium
24-Mar-2024 19:30:19.589 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_BASE:         /usr/local/tomcat
24-Mar-2024 19:30:19.589 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_HOME:         /usr/local/tomcat
24-Mar-2024 19:30:19.609 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.lang=ALL-UNNAMED
24-Mar-2024 19:30:19.609 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.io=ALL-UNNAMED
24-Mar-2024 19:30:19.610 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.util=ALL-UNNAMED
24-Mar-2024 19:30:19.610 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.util.concurrent=ALL-UNNAMED
24-Mar-2024 19:30:19.610 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
24-Mar-2024 19:30:19.610 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.config.file=/usr/local/tomcat/conf/logging.properties
24-Mar-2024 19:30:19.610 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
24-Mar-2024 19:30:19.611 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djdk.tls.ephemeralDHKeySize=2048
24-Mar-2024 19:30:19.611 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.protocol.handler.pkgs=org.apache.catalina.webresources
24-Mar-2024 19:30:19.611 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.catalina.security.SecurityListener.UMASK=0027
24-Mar-2024 19:30:19.611 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dignore.endorsed.dirs=
24-Mar-2024 19:30:19.611 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.base=/usr/local/tomcat
24-Mar-2024 19:30:19.612 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.home=/usr/local/tomcat
24-Mar-2024 19:30:19.612 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.io.tmpdir=/usr/local/tomcat/temp
24-Mar-2024 19:30:19.615 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent Loaded Apache Tomcat Native library [1.2.39] using APR version [1.7.0].
24-Mar-2024 19:30:19.615 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR capabilities: IPv6 [true], sendfile [true], accept filters [false], random [true], UDS [true].
24-Mar-2024 19:30:19.615 INFO [main] org.apache.catalina.core.AprLifecycleListener.lifecycleEvent APR/OpenSSL configuration: useAprConnector [false], useOpenSSL [true]
24-Mar-2024 19:30:19.618 INFO [main] org.apache.catalina.core.AprLifecycleListener.initializeSSL OpenSSL successfully initialized [OpenSSL 3.0.2 15 Mar 2022]
24-Mar-2024 19:30:21.761 INFO [main] org.apache.coyote.AbstractProtocol.init Initializing ProtocolHandler ["http-nio-8080"]
24-Mar-2024 19:30:21.927 INFO [main] org.apache.catalina.startup.Catalina.load Server initialization in [3258] milliseconds
24-Mar-2024 19:30:22.478 INFO [main] org.apache.catalina.core.StandardService.startInternal Starting service [Catalina]
24-Mar-2024 19:30:22.486 INFO [main] org.apache.catalina.core.StandardEngine.startInternal Starting Servlet engine: [Apache Tomcat/9.0.85]
24-Mar-2024 19:30:22.709 INFO [main] org.apache.catalina.startup.HostConfig.deployWAR Deploying web application archive [/usr/local/tomcat/webapps/ROOT.war]

Screenshots:

Environment:

• Guacamole Version: sha256:4b3e3e31ddee205dd3de0f9aaff7f772f837be2b09c94cbc7dc83cc87eee64c1
• Operating System: Ubuntu 22.04.4 LTS x86_64

Client: Docker Engine - Community
Version: 26.0.0
API version: 1.45
Go version: go1.21.8
Git commit: 2ae903e
Built: Wed Mar 20 15:17:48 2024
OS/Arch: linux/amd64
Context: default

Server: Docker Engine - Community
Engine:
Version: 26.0.0
API version: 1.45 (minimum version 1.24)
Go version: go1.21.8
Git commit: 8b79278
Built: Wed Mar 20 15:17:48 2024
OS/Arch: linux/amd64
Experimental: false

containerd:
Version: 1.6.28
GitCommit: ae07eda36dd25f8a1b98dfbf587313b99c0190bb

runc:
Version: 1.1.12
GitCommit: v1.1.12-0-g51d5e94

docker-init:
Version: 0.19.0
GitCommit: de40ad0

Hi there,

Is there an update coming to the docker image for 1.5.1? Or can I update the current docker container from the terminal?

Thanks!

Truth be told, I've never had sound but gave up whenever I saw the onzu build had been discontinued. I found this, updated just the image to be:

guacamole: # External web vnc
container_name: guacamole
image: jwetzell/guacamole:latest
restart: unless-stopped
ports:
- 8080:8080
volumes:
- ./guacamole/data:/config
environment:
- EXTENSIONS=auth-totp
networks:
- gate

I have a sound adapter and a volume slider, just no sound emits from the browser. Everything else works.

Here are logs, NOTE: The rejection was because I didn't actually log out then back in after changing the image, once I did that it was fine.

guaclogs.txt

Describe Your Problem:
Predictions for update 1.5.0 ?

Logs:

Remove any sensative information.

Screenshots:

Environment:

• Guacamole Version: 1.4.0
• Operating System: Docker

the link I used for amd64
jwetzell/guacamole got me a AMD64 warning

Describe Your Problem:
Sorry for my ignorance. Where do I find the version number of my current install.
I installed the "latest" docker compose several months ago and want to ensure I have the latest version.

Logs:

Screenshots:

Environment:

• Guacamole Version:
• Operating System: Ubuntu

Describe Your Problem:
I am using traefik with your guacamole setup.

When I configure an ssh connection I get the following errors:

From WebUI:

An internal error has occurred within the Guacamole server, and the connection has been terminated. If the problem persists, please notify your system administrator, or check your system logs.

From docker logs:

guacamole  | 13:44:12.204 [http-nio-8080-exec-8] ERROR o.a.g.w.GuacamoleWebSocketTunnelEndpoint - Creation of WebSocket tunnel to guacd failed: javax.net.ssl.SSLException: Unsupported or unrecognized SSL message
guacamole  | 13:44:12.308 [http-nio-8080-exec-8] ERROR o.a.g.s.GuacamoleHTTPTunnelServlet - HTTP tunnel request failed: javax.net.ssl.SSLException: Unsupported or unrecognized SSL message

Docker Compose is fairly straightforward, here are the traefik labels I'm trying to use:

    labels:
      - traefik.enable=true
      - traefik.http.routers.guacamole.entrypoints=websecure
      - traefik.http.routers.guacamole.rule=Host(`guacamole.example.com`)
      - traefik.http.services.guacamole.loadbalancer.server.port=8080

Logs:

See above.

Screenshots:

Environment:

• Guacamole Version:

services:
  guacamole:
    image: jwetzell/guacamole:latest

The main traefik config:

networks:
  traefik:
    name: traefik

# https://hub.docker.com/_/traefik

services:
  traefik:
    image: traefik:${TRAEFIK_DOCKER_TAG:-2.10} # replace with traefik:latest if you are feeling frisky
    container_name: ${TRAEFIK_CONTAINER_NAME:-traefik}
    restart: ${TRAEFIK_RESTART:-unless-stopped}
    mem_limit: ${TRAEFIK_MEM_LIMIT:-100m}
    networks:
      - traefik
    extra_hosts:
      - host.docker.internal:172.17.0.1
    ports:
      - 80:80
      - 443:443
    env_file:
      - .env
    volumes:
      - ./etc/traefik/letsencrypt:/letsencrypt
      - ./etc/traefik/enabled:/enabled
      - /etc/localtime:/etc/localtime:ro
      - /usr/share/zoneinfo:/usr/share/zoneinfo:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
    command:
      - --api
      - --api.dashboard=${TRAEFIK_DASHBOARD_ENABLE:-true}
      - --log.level=${TRAEFIK_LOG_LEVEL:-ERROR}
      - --accesslog=${TRAEFIK_ACCESSLOG:-false}
      - --entryPoints.metrics.address=:8082
      - --metrics.prometheus.entryPoint=metrics
      - --providers.docker
      - --providers.file.watch=true
      - --providers.file.directory=/enabled
      - --entrypoints.web.address=:80
      - --entrypoints.websecure.address=:443
      - --entrypoints.web.http.redirections.entrypoint.to=websecure
      - --entrypoints.web.http.redirections.entrypoint.scheme=https
      - --entrypoints.websecure.http.tls=true
      - --entrypoints.websecure.http.tls.certResolver=letsencrypt
      - --entrypoints.websecure.http.tls.domains[0].main=${HOST_DOMAIN}
      - --entrypoints.websecure.http.tls.domains[0].sans=*.${HOST_DOMAIN}
      - --serverstransport.insecureskipverify=true
      - --certificatesresolvers.letsencrypt.acme.dnschallenge=true
      - --certificatesresolvers.letsencrypt.acme.dnschallenge.provider=${DNS_CHALLENGE_PROVIDER:-cloudflare}
      - --certificatesresolvers.letsencrypt.acme.email=${DNS_CHALLENGE_API_EMAIL}
      - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
      - --certificatesResolvers.letsencrypt.acme.dnsChallenge.delayBeforeCheck=${CF_RESOLVER_WAITTIME:-60}
      - --certificatesresolvers.letsencrypt.acme.dnschallenge.resolvers=1.1.1.1:53,1.0.0.1:53
      - --certificatesresolvers.letsencrypt.acme.caserver=${ACME_CASERVER:-https://acme-v02.api.letsencrypt.org/directory}
    labels:
      - joyride.host.name=${HOST_NAME}.${HOST_DOMAIN}
      - traefik.enable=true
      - traefik.http.routers.traefik.entrypoints=websecure
      - traefik.http.routers.traefik.service=api@internal
      - traefik.http.routers.traefik.rule=Host(`${HOST_NAME}.${HOST_DOMAIN}`)  && (PathPrefix(`/traefik`) || PathPrefix(`/api`))
      - traefik.http.routers.traefik.middlewares=traefik_strip
      - traefik.http.middlewares.traefik_strip.stripprefix.prefixes=/traefik

• Operating System:

Ubuntu Server 22.04

Describe The Bug:
Freshly setup with rootless podman shuts down automatically when there's no login/activity for some time.

To Reproduce:
Use this docker-compose.yaml file with podman-compose on Fedora 39 in rootless mode.

version: '3 '
services:
  guacamole:
    image: jwetzell/guacamole
    container_name: guacamole
    volumes:
      - ./postgres:/config
    ports:
      - 8080:8080
    restart: always
volumes:
  postgres:
    driver: local

Expected behavior:
Should stay runnning even when there is no activity.

Logs:

guacd[1911]: INFO:      Internal VNC client disconnected
guacd[266]: INFO:       Connection "$0a0e9b7c-3510-467b-b491-7fb0f7d54cd9" removed.
guacd[266]: INFO:       Creating new client for protocol "vnc"
guacd[266]: INFO:       Connection ID is "$7b33e5c8-006f-4db6-8ed4-45a07d51e6f5"
guacd[2380]: INFO:      Cursor rendering: local
guacd[2380]: INFO:      User "@5445b174-0a82-4168-b23c-b12a18396e7b" joined connection "$7b33e5c8-006f-4db6-8ed4-45a07d51e6f5" (1 users now present)
06:33:37.859 [http-nio-8080-exec-4] INFO  o.a.g.tunnel.TunnelRequestService - User "ziadarafat" connected to connection "3".
guacd[2380]: INFO:      User "@5445b174-0a82-4168-b23c-b12a18396e7b" disconnected (0 users remain)
guacd[2380]: INFO:      Last user of connection "$7b33e5c8-006f-4db6-8ed4-45a07d51e6f5" disconnected
Exception in thread "Thread-29" java.lang.IllegalStateException: Message will not be sent because the WebSocket session has been closed
        at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.writeMessagePart(WsRemoteEndpointImplBase.java:442)
        at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:314)
        at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendMessageBlock(WsRemoteEndpointImplBase.java:254)
        at org.apache.tomcat.websocket.WsRemoteEndpointImplBase.sendString(WsRemoteEndpointImplBase.java:195)
        at org.apache.tomcat.websocket.WsRemoteEndpointBasic.sendText(WsRemoteEndpointBasic.java:37)
        at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.sendInstruction(GuacamoleWebSocketTunnelEndpoint.java:152)
        at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint.access$200(GuacamoleWebSocketTunnelEndpoint.java:53)
        at org.apache.guacamole.websocket.GuacamoleWebSocketTunnelEndpoint$2.run(GuacamoleWebSocketTunnelEndpoint.java:253)
06:33:58.998 [http-nio-8080-exec-10] INFO  o.a.g.tunnel.TunnelRequestService - User "ziadarafat" disconnected from connection "3". Duration: 21138 milliseconds
guacd[266]: INFO:       Creating new client for protocol "vnc"
guacd[266]: INFO:       Connection ID is "$adcb203e-d51c-4df4-90ad-5edf7c381afc"
guacd[2479]: INFO:      Cursor rendering: local
guacd[2479]: INFO:      User "@5965ef7b-1e1b-47d3-941a-b269b5594239" joined connection "$adcb203e-d51c-4df4-90ad-5edf7c381afc" (1 users now present)
06:33:59.567 [http-nio-8080-exec-2] INFO  o.a.g.tunnel.TunnelRequestService - User "ziadarafat" connected to connection "3".
guacd[2380]: INFO:      Internal VNC client disconnected
guacd[266]: INFO:       Connection "$7b33e5c8-006f-4db6-8ed4-45a07d51e6f5" removed.
07:25:01.783 [http-nio-8080-exec-9] INFO  o.a.g.tunnel.TunnelRequestService - User "ziadarafat" disconnected from connection "3". Duration: 3062215 milliseconds
guacd[2479]: ERROR:     User is not responding.
guacd[2479]: INFO:      User "@5965ef7b-1e1b-47d3-941a-b269b5594239" disconnected (0 users remain)
guacd[2479]: INFO:      Last user of connection "$adcb203e-d51c-4df4-90ad-5edf7c381afc" disconnected
guacd[2479]: INFO:      Internal VNC client disconnected
guacd[266]: INFO:       Connection "$adcb203e-d51c-4df4-90ad-5edf7c381afc" removed.
LOG:  autovacuum launcher shutting down
LOG:  received smart shutdown request
FATAL:  terminating connection due to administrator command
FATAL:  terminating connection due to administrator command
FATAL:  terminating connection due to administrator command
LOG:  shutting down
08-Feb-2024 07:41:10.568 INFO [Thread-2] org.apache.coyote.AbstractProtocol.pause Pausing ProtocolHandler ["http-nio-8080"]
08-Feb-2024 07:41:10.583 INFO [Thread-2] org.apache.catalina.core.StandardService.stopInternal Stopping service [Catalina]
[cont-finish.d] executing container finish scripts...
[cont-finish.d] done.
[s6-finish] waiting for services.
08-Feb-2024 07:41:10.618 INFO [Thread-2] org.apache.coyote.AbstractProtocol.stop Stopping ProtocolHandler ["http-nio-8080"]
LOG:  database system is shut down
08-Feb-2024 07:41:10.625 INFO [Thread-2] org.apache.coyote.AbstractProtocol.destroy Destroying ProtocolHandler ["http-nio-8080"]
[s6-finish] sending all processes the TERM signal.
[s6-finish] sending all processes the KILL signal and exiting.

Screenshots:
N/A

Environment:

podman-compose version: 1.0.6
['podman', '--version', '']
using podman version: 4.9.0
podman-compose version 1.0.6
podman --version 
podman version 4.9.0

• Guacamole Version: The version in the current image
• Operating System: Fedora 39

I downloaded the latest version of dockerfile, and trying build the dockerfile rather than building the image and when my dockerfile is built and running, and try to access the apache guacamole with default ID and password "guacadmin" , it gives an incorrect password. Althought the init.sql file is already present inside the guacamole folder. I am very new to apache guacamole

Describe The Bug:
When launching the container the postgres uid is set to 103. On my system 103 is already mapped to tss which makes the postgres folder unreachable by postgres inside the container.

To Reproduce:
Launch the container on a system where 103 is mapped to tss

Expected behavior:
I would really like it if there was an environment variable to specify a uid for the postgres user created in the startup script to prevent local conflicts like this.

Logs:
guacamole_guacamole.1.q85oee0mwiqv@shammel | Starting postgres...
guacamole_guacamole.1.q85oee0mwiqv@shammel | postgres: could not access directory "/config/postgres": Permission denied
guacamole_guacamole.1.q85oee0mwiqv@shammel | /var/run/postgresql:5432 - no response
guacamole_guacamole.1.q85oee0mwiqv@shammel | Waiting for postgres to come up...
guacamole_guacamole.1.q85oee0mwiqv@shammel | Starting postgres...
guacamole_guacamole.1.q85oee0mwiqv@shammel | postgres: could not access directory "/config/postgres": Permission denied
guacamole_guacamole.1.q85oee0mwiqv@shammel | /var/run/postgresql:5432 - no response
guacamole_guacamole.1.q85oee0mwiqv@shammel | Waiting for postgres to come up...
guacamole_guacamole.1.q85oee0mwiqv@shammel | Starting postgres...
guacamole_guacamole.1.q85oee0mwiqv@shammel | postgres: could not access directory "/config/postgres": Permission denied
guacamole_guacamole.1.q85oee0mwiqv@shammel | /var/run/postgresql:5432 - no response
guacamole_guacamole.1.q85oee0mwiqv@shammel | Waiting for postgres to come up...
guacamole_guacamole.1.q85oee0mwiqv@shammel | Starting postgres...
guacamole_guacamole.1.q85oee0mwiqv@shammel | postgres: could not access directory "/config/postgres": Permission denied
guacamole_guacamole.1.q85oee0mwiqv@shammel | /var/run/postgresql:5432 - no response
guacamole_guacamole.1.q85oee0mwiqv@shammel | Waiting for postgres to come up...
guacamole_guacamole.1.q85oee0mwiqv@shammel | Starting postgres...
guacamole_guacamole.1.q85oee0mwiqv@shammel | postgres: could not access directory "/config/postgres": Permission denied
guacamole_guacamole.1.q85oee0mwiqv@shammel | /var/run/postgresql:5432 - no response
guacamole_guacamole.1.q85oee0mwiqv@shammel | Waiting for postgres to come up...
guacamole_guacamole.1.q85oee0mwiqv@shammel | Starting postgres...
guacamole_guacamole.1.q85oee0mwiqv@shammel | postgres: could not access directory "/config/postgres": Permission denied

Screenshots:
N/A

Environment:

• Guacamole Version: latest docker version
• Operating System: Ubuntu / Docker

Describe The Bug:
When i rebuild the docker compose file the database is destroyed and new created

To Reproduce:

Expected behavior:
database should stay
Logs:

Remove any sensative information.

Screenshots:

**Environment:**
version: "3"
services:
  guacd:
    image: linuxserver/guacd
    container_name: guacd
    hostname: guacd
    restart: unless-stopped
    volumes:
      - /portainer/Files/AppData/Config/guacamole/drive:/drive:rw
      - /portainer/Files/AppData/Config/guacamole/record:/record:rw
    networks:
      - guacamole_network

  guacamole:
    image: jwetzell/guacamole:arm64
    container_name: guacamole
    hostname: guacamole
    restart: unless-stopped
    depends_on:
      - guacd
      - guacamole-db
    environment:
      GUACD_HOSTNAME: guacd
      MYSQL_HOSTNAME: guacamole-db
      MYSQL_DATABASE: guacamole_db
      MYSQL_USER: guacamole_user
      MYSQL_PASSWORD: ***
      TOTP_ENABLED: 'true'
    links:
      - guacd
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=traefik-backend"
      - "traefik.http.routers.guacamole-secure.entrypoints=websecure"
      - "traefik.http.routers.guacamole-secure.rule=Host(`******)"
      #- "traefik.http.routers.guacamole-secure.middlewares=authelia@docker"
      #- "traefik.http.middlewares.guacamole-https.redirectscheme.scheme=https"
      #- "traefik.http.routers.guacamole.tls=true"
      #- "traefik.http.routers.guacamole.tls.certresolver=letsencrypt"
      #- "traefik.http.routers.guacamole.tls.domains[0].main=*.${DOMAIN}"
      #- "traefik.http.routers.guacamole.tls.options=myTLSOptions@file"
      - "traefik.http.routers.guacamole-secure.service=guacamole"
      #- "traefik.http.routers.guacamole.middlewares=guacamoleMdl"
      #- "traefik.http.middlewares.guacamoleMdl.addprefix.prefix=/guacamole"
      - "traefik.http.services.guacamole.loadBalancer.server.port=8080"

    networks:
      - guacamole_network
      - traefik-backend

  guacamole-db:
    image: mysql/mysql-server
    container_name: guacamole-db
    hostname: guacamole-db
    environment:
      MYSQL_USER: guacamole_user
      MYSQL_PASSWORD: ***
      MYSQL_DATABASE: guacamole_db
    restart: unless-stopped
    volumes:
      #- /portainer/Files/AppData/Config/guacamole/initdb.sql:/initdb.sql				#DB configuration file
      - /portainer/Files/AppData/Config/guacamole/database:/var/lib/mysql/:rw
    networks:
      - guacamole_network

      
networks:
  traefik-backend:
    external:
      name: traefik-backend
  guacamole_network:
    external: false

CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE INDEX
CREATE INDEX
CREATE INDEX
CREATE INDEX
CREATE INDEX
CREATE TABLE
CREATE INDEX
CREATE INDEX
CREATE INDEX
CREATE INDEX
CREATE TABLE
CREATE INDEX
INSERT 0 1
INSERT 0 1
INSERT 0 6
INSERT 0 3
Starting guacamole client...

Hello, since the update 1.5.4 our jar branding file to change the logo etc ... no longer works.
If we put it in the extensions folder and turn on our docker it is automatically deleted. If we put it in extensions-available it is not taken into account at startup.
I've added :

environment:
  EXTENSION: branding

Without success. Do you have a solution?
Sincerely