Lead Image © denis cristo, 123RF.com

Virtualize Browsers, Apps, and Desktops

Disposable

Article from ADMIN 93/2026

By Christian Knermann

Neko virtualizes browsers, applications, and desktops on Linux, supporting local or network-based access. We describe the technical platform and show you how to get started.

Isolated remotely controllable browser environments are a good choice for a variety of practical use cases, whether this be secure surfing with a focus on privacy and protection against malware, developing and testing web applications with different browsers, or even collaborating on websites. Almost 20 years ago, the German Federal Office for Information Security (BSI) coined the term "remote-controlled browser system" (ReCoBS). The security experts behind this original approach envisaged specially secured terminal servers surrounded by additional components such as firewalls and security gateways.

Of course, installing and running a terminal server farm with secure access is expensive in terms of both time and resources. The open source Neko project [1] enters the scene at this point, bundling browsers and other Linux applications and desktops into Docker containers in a resource-saving way and streaming their graphical user interfaces by Web Real-Time Communication (WebRTC). The driving force behind the project is developer Miroslav Sediv'y, who also manages the Neko repository on GitHub [2].

Pre-Built Browser Images

Neko, which is sometimes also referred to as n.eko (see the "Neko Is Not Crypto" box), is a good choice for a variety of use cases, but primarily for secure web browsing in isolated environments where admins can give users access to temporary browser sessions without compromising local systems. As a rule, these sessions are not persistent: When the container is closed, the disposable browser does not leave personal data behind. Other scenarios include shared remote access to web applications for training or support, as well as kiosk and terminal operation of secure browsers in public or restricted environments.

...

Use one of the options below to read the full article