kali-linux

fd5ef31d-ls135

kali-linux - is an Advanced Penetration Testing Linux distribution used for Penetration Testing, Ethical Hacking and network security assessments. KALI LINUX ™ is a trademark of OffSec.

docker pull lscr.io/linuxserver/kali-linux:latest

Quick start

Generated from the image's own configuration. Replace the /path/to folders with real paths on your host.

---
services:
  kali-linux:
    image: lscr.io/linuxserver/kali-linux:latest
    container_name: kali-linux
    volumes:
      - /path/to/data:/config
    ports:
      - 3000:3000
      - 3001:3001
    shm_size: 1gb
    restart: unless-stopped

Parameters

Ports
Port	Function	Required
3000:3000	Web Desktop GUI	required
3001:3001	Web Desktop GUI HTTPS	required

Volumes
Path	Function	Required
/config	abc users home directory	required

Other settings
Setting	Function	Required
shm_size: 1gb	Recommended for all desktop images.	required

Architectures

Pulling :latest picks the right one for your host automatically.

x86_64amd64-latest
arm64arm64v8-latest

Changelog

29 Mar 2026
Make Wayland default disable with PIXELFLUX_WAYLAND=false.
28 Dec 2025
Add Wayland init logic.
19 Jun 2025
Rebase to Selkies baseimage.

Browse all

webtop

3d3463cb-ls321

webtop - Alpine, Ubuntu, Fedora, and Arch based containers containing full desktop environments in officially supported flavors accessible via any modern web browser.

1.6M4.4Karm64

rustdesk

1.5.0-ls130

RustDesk is a full-featured open source remote control alternative for self-hosting and security with minimal configuration.

566K67arm64

kasm Workspaces is a docker container streaming platform for delivering browser-based access to desktops, applications, and web services. Kasm uses devops-enabled Containerized Desktop Infrastructure (CDI) to create on-demand, disposable, docker containers that are accessible via web browser. Example use-cases include Remote Browser Isolation (RBI), Data Loss Prevention (DLP), Desktop as a Service (DaaS), Secure Remote Access Services (RAS), and Open Source Intelligence (OSINT) collections. The rendering of the graphical-based containers is powered by the open-source project KasmVNC.

228K492arm64

fail2ban

1.1.0-r2-ls46

fail2ban is a daemon to ban hosts that cause multiple authentication errors.

181K101arm64