Guacamole VM in existing VNet
This template deploys a VM with Guacamole, the open source HTML5 RDP/VNC proxy.
You will need an existing Virtual Network, and you will need the name of the VNet and a subnet in that VNet. This template deploys Guacamole and MariaDB using Docker containers, and it's based on CoreOS (channel "stable").
This template requires you to provide a SSH RSA public key.
Linux and Mac users can use the built-in
ssh-keygen command line utility, which is pre-installed in OSX and most Linux distributions. Execute the following command, and when prompted save to the default location (
$ ssh-keygen -t rsa -b 4096
Your public key will be located in
Windows users can generate compatible keys using PuTTYgen, as shown in this article. Please make sure you select "SSH-2 RSA" as type, and use 4096 bits as size for best security.
Once the template has been deployed, wait around 5 minutes for Guacamole to be executed. Then open a web browser and point it at:
The default credentials are:
- Consider changing the Guacamole admin account credentials as soon as possible to restrict unauthorized access.
- The MySQL database is configured with simple passwords (that can be seen in the scripts in this repository). However, the MariaDB (MySQL) container is not exposed on the network, so only containers directly linked to it and running on the same host can connect to the database.
- The web server is configured to use HTTP only. You may want to configure Tomcat to use HTTPS, or put a proxy in front which does SSL/TLS offloading (for example Azure Application Gateway).
If you're having issues starting a RDP or VNC session, you can get detailed log information by running:
$ sudo docker logs some-guacd
Tags: Microsoft.Network/publicIPAddresses, Microsoft.Network/networkSecurityGroups, Microsoft.Network/networkInterfaces, Microsoft.Compute/virtualMachines, Microsoft.Network/virtualNetworks