在Docker容器中转发GUI应用程序的X11-X11forwardingofGUIappinDockercontainer

1  

To be able to communicate with the X server, the user you run the app has to be allowed to communicate with the X server. So I think you have two options:

为了能够与X服务器通信,必须允许运行应用程序的用户与X服务器通信。所以我认为你有两个选择:

1) Allow the user you have in the container to connect to the X server. If your app is run with user root inside the container, you can use:

1)允许容器中的用户连接到X服务器。如果您的应用程序在容器内使用root用户运行,则可以使用:

$ xhost +SI:localuser:root

(I don't know the security implications of this, but root should be able to connect either way...)

(我不知道这个的安全含义,但root应该能够以任何一种方式连接......)

2) Add an user in the container that matches your user session. If the user you are using in the host system has UID = 1000, you can create a dummy user inside the container:

2)在容器中添加与用户会话匹配的用户。如果您在主机系统中使用的用户具有UID = 1000,则可以在容器内创建虚拟用户:

$ useradd -u 1000 my_user

And then use that user to run your app inside the container. This don't requires any change in the accpeted hosts (as user 1000 is already capable of connection).

然后使用该用户在容器内运行您的应用程序。这不需要对受到攻击的主机进行任何更改(因为用户1000已经能够连接)。

Looking at the two options, the second seems better, because it does not require any change in the host system, and if you need to use this container in other systems that the main user could not match UID=1000, you can make the container receive the correct uid from an env var, and then setup the correct user (useradd + chown program files).

看看这两个选项,第二个似乎更好,因为它不需要在主机系统中进行任何更改,并且如果您需要在主用户无法匹配UID = 1000的其他系统中使用此容器,则可以创建容器从env var接收正确的uid,然后设置正确的用户(useradd + chown程序文件)。