Startseite Erkunden Hilfe
Anmelden
sra
/
firedock
1
0
Fork 0
Dateien Issues 0 Pull-Requests 0 Wiki

Keine Beschreibung

Struktur: 50971c934c
Branches Tags
firedock
ZIP TAR.GZ
Rob Austein 50971c934c Flash, feh vor 5 Jahren
.dockerignore 60eee0111d First public version vor 5 Jahren
.gitignore 27d1b74e64 Hack for JavaSE instead of OpenJDK vor 5 Jahren
Dockerfile 43c41cc3c2 Switch back to Debian vor 5 Jahren
Makefile f03f999dd7 Try switching to Ubuntu for icedtea-plugin vor 5 Jahren
README.md 50971c934c Flash, feh vor 5 Jahren
create.sh f03f999dd7 Try switching to Ubuntu for icedtea-plugin vor 5 Jahren
handlers.json 08b13cc74d Horrible kludge to preconfigure jnlp application vor 5 Jahren
icewm.menu d0eb10aebb Working, ish vor 5 Jahren
ratpoisonrc 52bd9bb98c Switch to ratpoison vor 5 Jahren
run.sh f03f999dd7 Try switching to Ubuntu for icedtea-plugin vor 5 Jahren
startup.sh 08b13cc74d Horrible kludge to preconfigure jnlp application vor 5 Jahren

README.md

Fireduck

Waterfox running under Xvnc inside a Docker container, a demented tool to solve a demented problem.

Occasionally one needs to run dangerous code in a web brower, eg, some dodgy Java app which is the only available interface to some critical resource. Running this in one's normal web browser is a bad idea.

So what one really wants here is a burner web browser. Here you go.

See create.sh and run.sh for ways one might use the image.

Something along the lines of the run.sh formulation might work well as the command portion of a tunneling ssh -L 5900:127.0.0.1:5900 command.

This version is based on Ubuntu rather than Debian, because I was trying to get the icedtea-web Java Plugin stuff to work. Didn't work, but then I tried a recipe for getting Java SE instead of OpenJDK, and that does seem to work. Might work equally well on Debian.

Sadly, this approach requires one to download JRE directly from Oracle, get an account, and check through a license agreement, so I can't just give it away, you'll have to download the JRE yourself.

Kate's reference on installing Java

Even with this, Java still whines a lot when dealing with the kind of crappy old IPMI consoles that require this insanity in the first place. Among other things, Java whines that the crappy Java app supplied by IPMI isn't signed properly (true), and therefore refuses to run it (why were we doing this again?). Once one gets past that, one has to argue with Waterfox a bit to get it to believe that you want to use javaws as the launcher for jnlp files.

You can bypass the Java whining by prepopulating /root/.java/deployment/security/exception.sites with a URL whitelist. The format appears to be one URL per line, no comments or other formatting. Example:

https://ipmi.foo.example.org
https://ipmi.bar.example.org

The hack for preconfiguring Waterfox's MIME handler to run /usr/bin/javaws for jnlp files is particularly disgusting, but none of the rest of this is particularly nice either. Whatever.

If you really need Flash for something on top of all this insanity, the path that works with Waterfox appears to be

https://wiki.debian.org/PepperFlashPlayer/Installing