microvm-desktop - GitLite

KO | EN

gitlite — search

#markdown #api #devops #ui #rag #openai #pytorch #ios #csharp #security

microvm-desktop

(★ 9)

AWS Amplify + Lambda MicroVMs = A Serverless Linux Desktop!

File Explorer

ZIP Download

- - resource.ts
- backend.ts
- tsconfig.json
- architecture.mmd
- architecture.png
- architecture.svg
- [email protected]
- microvms-image-1.png
- microvms-image-2.png
- rdp.gif
- - Dockerfile
  - entrypoint.sh
- - Dockerfile
  - entrypoint.sh
- - Dockerfile
  - entrypoint.sh
- hooks_server.py
- package.sh
- - microvms.ts
- - microvmImages.ts
- App.tsx
- main.tsx
- novnc.d.ts
- styles.css
- vite-env.d.ts
.gitignore
amplify.yml
index.html
LICENSE
package.json
pnpm-lock.yaml
pnpm-workspace.yaml
README.md
tsconfig.app.json
tsconfig.json
tsconfig.node.json
vite.config.ts

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Version

File

Link

Example

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

![](https://raw.githubusercontent.com/Kanahiro/microvm-desktop/main/docs/rdp.gif)

Run isolated Linux desktops on AWS Lambda MicroVMs and connect with noVNC.

This is a small proof of concept, not a production remote-desktop service.

![Architecture](https://raw.githubusercontent.com/Kanahiro/microvm-desktop/main/docs/architecture.png)

## What is included

- Amplify Gen 2 authentication and IAM policy
- React client that starts and stops one MicroVM
- noVNC connection using a short-lived MicroVM auth token
- Ubuntu, Debian, and Fedora MicroVM images with Xvfb, XFCE, and x11vnc

## Prerequisites

- Node.js 20 or newer and pnpm
- AWS credentials configured for Amplify and Lambda MicroVMs

## 1. Package Docker images

```bash
./microvm-image/package.sh
```

This packages all distributions and writes the ZIP files to
`microvm-image/microvm-<distribution>.zip`.

To package only one distribution:

```bash
DISTRO=debian ./microvm-image/package.sh
```

## 2. Build MicroVMs image

Upload zip files to S3

![](https://raw.githubusercontent.com/Kanahiro/microvm-desktop/main/docs/microvms-image-1.png)

Set up MicroVMs image

![](https://raw.githubusercontent.com/Kanahiro/microvm-desktop/main/docs/microvms-image-2.png)

## 3. Configure and run the web app

Replace the placeholder image ARNs in `src/config/microvmImages.ts`, then install
the dependencies and start the sandbox:

```bash
pnpm install
pnpm sandbox
```

`pnpm sandbox` creates `amplify_outputs.json`. Keep it running, then start Vite in another terminal:

```bash
pnpm dev
```

Open the printed local URL, sign in with an administrator-created account, and
choose **Start desktop**.

The selectable image dictionary is defined in `src/config/microvmImages.ts`.
Replace the placeholder account ID in each image ARN. Keep `enabled` set to
`false` until the image build reaches the `CREATED` state, then change it to
`true` to make the image selectable.

## Deploy with Amplify

Connect this repository to an Amplify Hosting app. The included `amplify.yml` deploys
the auth backend and frontend.

## Security and cost notes

- The authenticated Cognito role can call the three MicroVM lifecycle actions. `amplify/backend.ts` uses `resources: ['*']` for portability; restrict it to the image ARN when the service supports resource-level permissions for these actions.
- The VNC server has no password. Access is instead protected by the short-lived MicroVM proxy token. Do not expose port 8080 through another path.
- A disconnect requests immediate termination. The idle policy is a fallback and terminates abandoned sessions later.
- Each signed-in user can create billable resources. Add quotas, audit logging, and server-side authorization before using this beyond an experiment.

Delete the Amplify sandbox when finished:

```bash
pnpm sandbox:delete
```

## License

MIT