Sealskin is a self-hosted browser isolation and remote application streaming platform. It runs desktop applications in isolated containers on a server you control and streams them to any browser or phone. Clients include a browser extension, mobile apps, and a web app served by the server itself. Each turns links, files, downloads, and text selections into something you open remotely instead of locally, so nothing from the web runs on the device in front of you.
Generated from the image's own configuration. Replace the /path/to folders with real paths on your host.
---
services:
sealskin:
image: lscr.io/linuxserver/sealskin:latest
container_name: sealskin
environment:
- HOST_URL=IP or subdomain.domain.com # optional
volumes:
- /path/to/sealskin/config:/config
- /path/to/sealskin/storage:/storage
- /var/run/docker.sock:/var/run/docker.sock
ports:
- 8443:8443
- 8000:8000 # optional
- 8444:8444 # optional
restart: unless-stopped| Port | Function | Required |
|---|---|---|
| 8443:8443 | HTTPS Sessions and API communication port. | required |
| 8000:8000 | HTTP fallback API port, only needed by the Chrome extension with a self-signed certificate. | optional |
| 8444:8444 | Peer listener, only needed to join several servers into a cluster. | optional |
| Variable | Function | Required |
|---|---|---|
| HOST_URL=IP or subdomain.domain.com | On initial setup this will be used to fill in the default admin configuration file in the `/config` directory, if unset the string HOST_URL will need to be replaced. | optional |
| Path | Function | Required |
|---|---|---|
| /config | All configuration files and metadata for the application. | required |
| /storage | All file storage for home directories and ephemeral mounts. | required |
| /var/run/docker.sock | Docker socket, required to spin up application containers. | required |
Pulling :latest picks the right one for your host automatically.
amd64-latestarm64v8-latest:latestStable releasesUpdate docs and installer for the 0.4.0 release: web app and root key sign in, reverse proxy support, cluster peer port.
Install Sealskin from the upstream Python wheel, rebase to Alpine 3.24.
Rebase to Alpine 3.23.
Writing
30 min read
Let me start with the TLDR because this one is long, and I mean long even by my standards. Selkies 2.0.0 shipped on September 24th. Every LinuxServer.io Selkies based container…
8 min read
Let me just start with the TLDR as I have a tendency to write too much, all of our Selkies based images can now be launched into a Wayland mode using the env var -e…
9 min read
It has been a long journey from our first experiments with Taisun to the polished desktop containers we maintain today. We started by simply trying to put a desktop in a browser…
Related
1.19.0-ls154
kasm Workspaces is a docker container streaming platform for delivering browser-based access to desktops, applications, and web services. Kasm uses devops-enabled Containerized Desktop Infrastructure (CDI) to create on-demand, disposable, docker containers that are accessible via web browser. Example use-cases include Remote Browser Isolation (RBI), Data Loss Prevention (DLP), Desktop as a Service (DaaS), Secure Remote Access Services (RAS), and Open Source Intelligence (OSINT) collections. The rendering of the graphical-based containers is powered by the open-source project KasmVNC.
3d3463cb-ls321
webtop - Alpine, Ubuntu, Fedora, and Arch based containers containing full desktop environments in officially supported flavors accessible via any modern web browser.
1.5.0-ls130
RustDesk is a full-featured open source remote control alternative for self-hosting and security with minimal configuration.
v4.7.3-ls387
netbox is an IP address management (IPAM) and data center infrastructure management (DCIM) tool. Initially conceived by the network engineering team at DigitalOcean, NetBox was developed specifically to address the needs of network and infrastructure engineers. It is intended to function as a domain-specific source of truth for network operations.