microvm-desktop - GitLite

KO | EN

gitlite — search

#graphql #database #generative-ai #shell #python #javascript #linux #kubernetes #self-hosted #electron

microvm-desktop

(★ 9)

AWS Amplify + Lambda MicroVMs = A Serverless Linux Desktop!

파일 탐색기

ZIP 다운로드

- - resource.ts
- backend.ts
- tsconfig.json
- architecture.mmd
- architecture.png
- architecture.svg
- [email protected]
- microvms-image-1.png
- microvms-image-2.png
- rdp.gif
- - Dockerfile
  - entrypoint.sh
- - Dockerfile
  - entrypoint.sh
- - Dockerfile
  - entrypoint.sh
- hooks_server.py
- package.sh
- - microvms.ts
- - microvmImages.ts
- App.tsx
- main.tsx
- novnc.d.ts
- styles.css
- vite-env.d.ts
.gitignore
amplify.yml
index.html
LICENSE
package.json
pnpm-lock.yaml
pnpm-workspace.yaml
README.md
tsconfig.app.json
tsconfig.json
tsconfig.node.json
vite.config.ts

# CDN으로 사용하기

jsDelivr

jsDelivr는 공개 GitHub 리포지토리를 별도 설정 없이 CDN으로 즉시 서빙합니다. 버전과 파일을 고르면 웹페이지에 바로 붙일 수 있는 링크와 예시 코드가 만들어집니다.

버전

파일

링크

예시

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

![](https://raw.githubusercontent.com/Kanahiro/microvm-desktop/main/docs/rdp.gif)

Run isolated Linux desktops on AWS Lambda MicroVMs and connect with noVNC.

This is a small proof of concept, not a production remote-desktop service.

![Architecture](https://raw.githubusercontent.com/Kanahiro/microvm-desktop/main/docs/architecture.png)

## What is included

- Amplify Gen 2 authentication and IAM policy
- React client that starts and stops one MicroVM
- noVNC connection using a short-lived MicroVM auth token
- Ubuntu, Debian, and Fedora MicroVM images with Xvfb, XFCE, and x11vnc

## Prerequisites

- Node.js 20 or newer and pnpm
- AWS credentials configured for Amplify and Lambda MicroVMs

## 1. Package Docker images

```bash
./microvm-image/package.sh
```

This packages all distributions and writes the ZIP files to
`microvm-image/microvm-<distribution>.zip`.

To package only one distribution:

```bash
DISTRO=debian ./microvm-image/package.sh
```

## 2. Build MicroVMs image

Upload zip files to S3

![](https://raw.githubusercontent.com/Kanahiro/microvm-desktop/main/docs/microvms-image-1.png)

Set up MicroVMs image

![](https://raw.githubusercontent.com/Kanahiro/microvm-desktop/main/docs/microvms-image-2.png)

## 3. Configure and run the web app

Replace the placeholder image ARNs in `src/config/microvmImages.ts`, then install
the dependencies and start the sandbox:

```bash
pnpm install
pnpm sandbox
```

`pnpm sandbox` creates `amplify_outputs.json`. Keep it running, then start Vite in another terminal:

```bash
pnpm dev
```

Open the printed local URL, sign in with an administrator-created account, and
choose **Start desktop**.

The selectable image dictionary is defined in `src/config/microvmImages.ts`.
Replace the placeholder account ID in each image ARN. Keep `enabled` set to
`false` until the image build reaches the `CREATED` state, then change it to
`true` to make the image selectable.

## Deploy with Amplify

Connect this repository to an Amplify Hosting app. The included `amplify.yml` deploys
the auth backend and frontend.

## Security and cost notes

- The authenticated Cognito role can call the three MicroVM lifecycle actions. `amplify/backend.ts` uses `resources: ['*']` for portability; restrict it to the image ARN when the service supports resource-level permissions for these actions.
- The VNC server has no password. Access is instead protected by the short-lived MicroVM proxy token. Do not expose port 8080 through another path.
- A disconnect requests immediate termination. The idle policy is a fallback and terminates abandoned sessions later.
- Each signed-in user can create billable resources. Add quotas, audit logging, and server-side authorization before using this beyond an experiment.

Delete the Amplify sandbox when finished:

```bash
pnpm sandbox:delete
```

## License

MIT