diff --git a/CREDITS.md b/CREDITS.md index aa8bd9c..863af64 100644 --- a/CREDITS.md +++ b/CREDITS.md @@ -26,3 +26,7 @@ These credits refer to the contributors to this repository: [@jimdigriz](https://github.com/jimdigriz) - Epic fixes: image size, shellisms, fallback2kvm, unprivileged mode https://github.com/sickcodes/Docker-OSX/pull/82 +[@NickZhouNan](https://github.com/NickZhouNan) - Bug fix with changed WORKDIR + +[@MrBenFTW](https://github.com/MrBenFTW) - Added IP forwarding hot tips, useful for boosting bridged networking in remote environments. + diff --git a/Dockerfile b/Dockerfile index d952856..17954eb 100644 --- a/Dockerfile +++ b/Dockerfile @@ -71,8 +71,9 @@ RUN tee -a /etc/pacman.conf <<< '[community-testing]' \ && tee -a /etc/pacman.conf <<< 'Include = /etc/pacman.d/mirrorlist' RUN pacman -Syu --noconfirm \ - && pacman -S sudo git make automake gcc python go autoconf cmake pkgconf alsa-utils fakeroot --noconfirm \ + && pacman -S sudo git make automake gcc python go autoconf cmake pkgconf alsa-utils fakeroot vim nano --noconfirm \ && yes | pacman -Scc \ + && ln -s /bin/vim /bin/vi \ && useradd arch -p arch \ && tee -a /etc/sudoers <<< 'arch ALL=(ALL) NOPASSWD: ALL' \ && mkdir /home/arch \ diff --git a/README.md b/README.md index 500c1c8..e70716f 100644 --- a/README.md +++ b/README.md @@ -26,32 +26,40 @@ Upstream Credits: OSX-KVM project among many others: https://github.com/kholia/O Docker Hub: https://hub.docker.com/r/sickcodes/docker-osx +### Other cool Docker-QEMU based projects: + +[Run iOS in a Docker with Docker-eyeOS](https://github.com/sickcodes/Docker-eyeOS) - [https://github.com/sickcodes/Docker-eyeOS](https://github.com/sickcodes/Docker-eyeOS) + Pull requests, suggestions very welcome! ```bash docker pull sickcodes/docker-osx:latest -docker run --device /dev/kvm --device /dev/snd -v /tmp/.X11-unix:/tmp/.X11-unix sickcodes/docker-osx:latest +docker run --device /dev/kvm \ + --device /dev/snd \ + -v /tmp/.X11-unix:/tmp/.X11-unix \ + -e "DISPLAY=${DISPLAY:-:0.0}" \ + sickcodes/docker-osx:latest # press ctrl G if your mouse gets stuck # scroll down to troubleshooting if you have problems -# need more RAM and SSH on 0.0.0.0:50922? +# need more RAM and SSH on localhost -p 50922? docker run --device /dev/kvm \ ---device /dev/snd \ --e RAM=4 \ --p 50922:10022 \ --v /tmp/.X11-unix:/tmp/.X11-unix \ -sickcodes/docker-osx:latest + -e "DISPLAY=${DISPLAY:-:0.0}" \ + --device /dev/snd \ + -e RAM=4 \ + -p 50922:10022 \ + -v /tmp/.X11-unix:/tmp/.X11-unix \ + sickcodes/docker-osx:latest ssh fullname@localhost -p 50922 ``` - # Requirements: KVM on the host Need to turn on hardware virtualization in your BIOS, very easy to do. @@ -69,16 +77,38 @@ sudo yum install libvirt qemu-kvm -y # then run sudo systemctl enable libvirtd.service sudo systemctl enable virtlogd.service + sudo modprobe kvm -# enable network forwarding -nano /etc/sysctl.conf -Uncomment or add this line: -net.ipv4.ip_forward=1 +# reboot +``` +# How to Enable Network Forwarding + +Allow ipv4 forwarding for bridged networking connections: + +This is not required for LOCAL installations and may cause containers behind [VPN's to leak host IP](https://sick.codes/cve-2020-15590/). + +If you are connecting to a REMOTE Docker-OSX, e.g. a "Mac Mini" in a datacenter, then this may boost networking: + +```bash +# enable for current session +sudo sysctl -w net.ipv4.ip_forward=1 + +# OR +# sudo tee /proc/sys/net/ipv4/ip_forward <<< 1 + +# enable permanently +sudo touch /etc/sysctl.conf + +sudo tee -a /etc/sysctl.conf <