Design spec for hardened KubeVirt remote desktop + Guacamole gateway

Shipped

July 7, 2026 at 7:57 PM UTC

Author

Kamo

Commit

7cb2553

KubeVirt Kubuntu VM (16Gi/500Gi Longhorn) behind Apache Guacamole HTML5, exposed at desktop.kamocrm.com via Traefik (TLS + rate-limit + IP-ban). Adds LAN Windows PC (192.168.4.44) with Guacamole native Wake-on-LAN via a hostNetwork guacd on k1m1. Credentials: user 'sage'; password injected from CI secret DESKTOP_PASSWORD at deploy time, never committed.