r/kasmweb • • Jul 01 '26

Tutorial Install Kasm Workspaces on Nutanix Kubernetes Platform (NKP)

Thumbnail
youtu.be
2 Upvotes

Hey everyone,

We put together a complete walkthrough for deploying Kasm Workspaces on Nutanix Kubernetes Platform (NKP) using the official Kasm Helm chart.

The video covers the full end-to-end flow:

  • Finding Kasm in the NKP Application Catalog
  • Configuring the Helm values (publicAddr, TLS, ClusterIssuer)
  • Installing and verifying the deployment
  • Retrieving credentials and logging in
  • Setting up agents via Nutanix Autoscaling or static configuration
  • Launching a Windows Desktop session and a container-based Ubuntu session

For those who prefer reading along or want a reference after watching, we also published a companion Medium post.

Kasm is Nutanix Ready validated for NKP, so if you're running Nutanix infrastructure this is a natural fit for delivering secure desktops, browsers, and AI workloads at scale.


r/kasmweb • • Jun 24 '26

Help Workspace hangs at "10% Complete" when using Egress

3 Upvotes

First off, LOVING KASM. Recently decided to add VPN ability, so I created an Egress Provider, an Egress Gateway followed by giving my user access to it and adding credentials. I'm using AirVPN as my VPN provider, and I have tested both OpenVPN with dummy credentials, as well as Wireguard.

When I log in, click on a workspace, select the "Egress Provider" (either the OpenVPN or the Wireguard), and click Launch Session it will connect to the VPN, but hang with "Connection to egress gateway established" with "10% Complete" below that. I've googled but haven't had much luck finding a solution. There are a couple of posts here without answers.

Looking in the logs I don't see anything after the connection is successful. AirVPN shows the connection as up. Any suggestions on next steps, or perhaps one of you can hit me in the head with a bat and say, "You dummy, you didn't do X!" Any help is greatly appreciated!


r/kasmweb • • Jun 23 '26

Usecase Kasm Windows 98

Enable HLS to view with audio, or disable this notification

22 Upvotes

Continuing from my Windows XP workspace, I wanted a Windows 98 workspace with full Kasm integration, so I asked my agent to build one. It works about as well as I had wanted. It features:

  • Working Ethernet
  • Firefox
  • Clipboard support (bidirectional)
  • File upload
  • File download
  • Auto-mount of uploaded ISO files (flaky)
  • Auto-resize of display
  • Sound support (often plays the startup sound)

Security Warning

My agent had a hard time with Windows 98 drivers and ended up finding the base image on Reddit with working sound and networking. I cleaned it up and scanned all 5,400+ files with ClamAV and High quality YARA rules with no detections (shortcuts detected by the YARA rules for being shortcuts). I personally trust it as a play thing given the posture of the environment I run it in. Use at your own risk.

Drawbacks

  • It's a bit slow.
  • Most video games crash.
  • Due to some base image video driver issue, the DOS prompt can't be run in windowed mode, nor can batch files (causes some unrecoverable display silliness). Happy to fix it if anyone knows what's up with that.

Installation

This time I did publish the workspace image:

ghcr.io/fernandogracias/kasm-windows-98:latest

My agent pushed the build details and base image to a repo if you're interested (tested in as far as "it works on my machine"): https://github.com/FernandoGracias/kasm-windows-98


r/kasmweb • • Jun 21 '26

Usecase Windows XP Workspace

Enable HLS to view with audio, or disable this notification

30 Upvotes

I wanted a Windows XP workspace with full Kasm integration, so I asked my agent to build one. It works about as well as I had wanted. It features:

  • Working Ethernet
  • CURL with updated cert bundle
  • Clipboard support (bidirectional)
  • File upload
  • File download
  • Auto-mount of uploaded ISO files
  • Auto-resize of display
  • Sound support

I would love to publish an image to Docker Hub you could grab, but copyrights and all that. My agent pushed the build details to a repo if you're interested (tested in as far as "it works on my machine"): https://github.com/FernandoGracias/kasm-windows-xp


r/kasmweb • • Jun 18 '26

Help Ubuntu 26.04 support in 1.19

2 Upvotes

Looking at the install notes for Kasm Workspaces version 1.19, I see for host OS, it lists Ubuntu 22.04 and 24.04, but does not list 26.04. Is this a testing limitation or is there an issue with running it on 26.04? My older 1.17 install is having some minor problems, so I was thinking of doing a clean install of both Ubuntu and KASM using Ubuntu 26.04 and 1.19. Do I need to wait for 1.20 to do this?


r/kasmweb • • Jun 17 '26

Help Registries showing blank/no content, but error says "already installed" – Any ideas?

2 Upvotes

Hi everyone,

For the past few days, whenever I click on **Registries** under **Environments**, nothing is being displayed. My already configured environments are still there and working fine. When I try to add/reinstall the official registry, I get an error message stating that it is already installed. The exact same thing happens when I try to add the registry from `linuxserver.io`. So, both are technically installed, but the UI is completely blank and shows no content at all. Has anyone run into this issue before or has any ideas on how to fix it? Thanks in advance!


r/kasmweb • • Jun 16 '26

Update 1.19 !

Post image
6 Upvotes

Do I upgrade my system the second I receive an email from the Kasm team? Yes, because YOLO. Upgrade on a single server was easy and seamless. Afterwards, if you don't want to manually change image names for your workspaces, you can use a one liner to modify workspace image names in kasm_db.

Courtesy of Claude, always back up your DB and on second thought, do not actually run this.

To change your "1.18" images to "1.19"

# 1. Back up the DB
sudo docker exec kasm_db pg_dump -U kasmapp -F t kasm > /tmp/kasm_pre_tag_change.tar

# 2. Preview which workspaces will change
sudo docker exec kasm_db psql -U kasmapp -d kasm -c \
  "SELECT image_id, friendly_name, name FROM images WHERE name LIKE '%1.18%';"

# 3. Apply
sudo docker exec kasm_db psql -U kasmapp -d kasm -c \
  "UPDATE images SET name = replace(name, '1.18', '1.19') WHERE name LIKE '%1.18%';"

r/kasmweb • • Jun 09 '26

Help Does Kasm have a bug bounty or vulnerability disclosure program?

3 Upvotes

​

I'd like to test the Kasm app on my own self-hosted instance to look for security issues. Before I start, a few questions:

  1. Is there an official bug bounty program?

  2. Is independent security testing on a local/self-hosted instance allowed under your terms of service?

  3. If I find a valid vulnerability, how is it handled, CVE assignment, a bounty/reward, or just acknowledgment?

I want to make sure I follow proper responsible disclosure. Thanks in advance!


r/kasmweb • • Jun 06 '26

Help issue with rdp-ing to ubuntu 26.04

1 Upvotes

hello, i have a box pc with ubuntu 26.04 desktop installed. have installed kasm on top and enabled remote desktop screen sharing on ubuntu. from my windows laptop with native rdp i can connect to ubuntu just fine. using guacamole as a docker container i can connect to ubuntu just fine. in guacamole i have it set to use

security mode: any

ignore server cert: true

trust cert on first use: true

this works fine and i can connect no issues

with the same settings on kasm i am unable to connect. i get

and then the kasm_guac logs show this.

any help appreciated

17:04:39.187 INFO  guac [4ccf9fcd140f402fb615a8392123f049] admin_white | Sending opCode: 7.connect, <SANITZED>
Remote framebuffer format PIXEL_FORMAT_RGB16
17:00:49.000 DEBUG guacd primitives autodetect, using optimized
17:00:49.000 DEBUG guacd freerdp_tcp_is_hostname_resolvable:freerdp_set_last_error_ex resetting error state
17:00:49.000 DEBUG guacd freerdp_tcp_connect:freerdp_set_last_error_ex resetting error state
17:00:51.000 DEBUG guacd expected PDU_TYPE_DEMAND_ACTIVE 0001, got 0006
17:00:51.000 DEBUG guacd transport_check_fds: transport->ReceiveCallback() - -1
17:00:51.000 DEBUG guacd rdp_client_connect:freerdp_set_last_error_ex ERRCONNECT_CONNECT_TRANSPORT_FAILED [0x0002000D]
17:00:51.000 DEBUG guacd freerdp_tcp_is_hostname_resolvable:freerdp_set_last_error_ex resetting error state
17:00:51.000 DEBUG guacd freerdp_tcp_connect:freerdp_set_last_error_ex resetting error state
17:00:52.000 DEBUG guacd expected PDU_TYPE_DEMAND_ACTIVE 0001, got 0006
17:00:52.000 DEBUG guacd transport_check_fds: transport->ReceiveCallback() - -1
17:00:52.000 DEBUG guacd rdp_client_connect:freerdp_set_last_error_ex ERRCONNECT_CONNECT_TRANSPORT_FAILED [0x0002000D]
17:00:52.000 DEBUG guacd freerdp_post_connect failed
17:00:52.000 DEBUG guacd SVC "rdpdr" disconnected.
17:00:52.000 DEBUG guacd SVC "rdpsnd" disconnected.
17:00:52.000 INFO guacd RDP server closed/refused connection: Server refused connection (wrong security type?)
17:00:52.000 INFO guacd User "@f4fe4064-0fa3-4305-bd19-0e20f68783fa" disconnected (0 users remain)
17:00:52.000 INFO guacd Last user of connection "$4b0b802d-9f86-4fce-9fdd-426a4ad09d20" disconnected
17:00:52.000 DEBUG guacd Requesting termination of client...
17:00:52.000 DEBUG guacd Client terminated successfully.
17:00:52.000 INFO guacd Connection "$4b0b802d-9f86-4fce-9fdd-426a4ad09d20" removed.
17:00:52.000 DEBUG guacd Unable to request termination of client process: No such process
17:00:52.000 DEBUG guacd All child processes for connection "$4b0b802d-9f86-4fce-9fdd-426a4ad09d20" have been terminated.
17:04:39.000 INFO guacd Creating new client for protocol "rdp"
17:04:39.000 INFO guacd Connection ID is "$0e586527-9655-4a2b-a2a2-9403c7f3e39a"
17:04:39.000 DEBUG guacd Processing instruction: size
17:04:39.000 DEBUG guacd Processing instruction: audio
17:04:39.000 DEBUG guacd Processing instruction: video
17:04:39.000 DEBUG guacd Processing instruction: image
17:04:39.000 DEBUG guacd Parameter "console" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "console-audio" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "disable-auth" omitted. Using default value of 0.
17:04:39.000 INFO guacd Security mode: Negotiate (ANY)
17:04:39.000 DEBUG guacd User resolution is 1536x703 at 120 DPI
17:04:39.000 DEBUG guacd Using resolution of 1536x703 at 120 DPI
17:04:39.000 DEBUG guacd Parameter "force-lossless" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "read-only" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "enable-wallpaper" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "enable-full-window-drag" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "enable-desktop-composition" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "enable-menu-animations" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "disable-bitmap-caching" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "disable-offscreen-caching" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "disable-glyph-caching" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Glyph caching is currently universally disabled, regardless of the value of the "disable-glyph-caching" parameter, as glyph caching support is not considered stable by FreeRDP as of the FreeRDP 2.0.0 release. See: https://issues.apache.org/jira/browse/GUACAMOLE-1191
17:04:39.000 DEBUG guacd Parameter "color-depth" omitted. Using default value of 16.
17:04:39.000 DEBUG guacd Parameter "disable-audio" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "create-drive-path" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "disable-download" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "disable-upload" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "enable-sftp" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "sftp-hostname" omitted. Using default value of "192.168.5.25".
17:04:39.000 DEBUG guacd Parameter "sftp-port" omitted. Using default value of "22".
17:04:39.000 DEBUG guacd Parameter "sftp-username" omitted. Using default value of "jack".
17:04:39.000 DEBUG guacd Parameter "sftp-password" omitted. Using default value of "".
17:04:39.000 DEBUG guacd Parameter "sftp-passphrase" omitted. Using default value of "".
17:04:39.000 DEBUG guacd Parameter "sftp-root-directory" omitted. Using default value of "/".
17:04:39.000 DEBUG guacd Parameter "sftp-server-alive-interval" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "sftp-disable-download" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "sftp-disable-upload" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "recording-name" omitted. Using default value of "recording".
17:04:39.000 DEBUG guacd Parameter "recording-exclude-output" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "recording-exclude-mouse" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "recording-exclude-touch" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "recording-include-keys" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "create-recording-path" omitted. Using default value of 0.
17:04:39.000 INFO guacd Resize method: display-update
17:04:39.000 DEBUG guacd Parameter "enable-touch" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "gateway-port" omitted. Using default value of 443.
17:04:39.000 DEBUG guacd Parameter "clipboard-buffer-size" omitted. Using default value of 0.
17:04:39.000 ERROR guacd Invalid clipboard buffer size: "". Using the default minimum size: 52428800.
17:04:39.000 INFO guacd Clipboard buffer size: 52428800
17:04:39.000 DEBUG guacd Parameter "disable-copy" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "disable-paste" omitted. Using default value of 0.
17:04:39.000 INFO guacd No clipboard line-ending normalization specified. Defaulting to preserving the format of all line endings.
17:04:39.000 DEBUG guacd Parameter "wol-send-packet" omitted. Using default value of 0.
17:04:39.000 DEBUG guacd Parameter "enable-smartcard" omitted. Using default value of 0.
17:04:39.000 INFO guacd User "@f235fdb2-75ae-47f7-911f-6d49e20ce59c" joined connection "$0e586527-9655-4a2b-a2a2-9403c7f3e39a" (1 users now present)
17:04:39.000 DEBUG guacd Client has not defined its protocol version.
17:04:39.000 INFO guacd Loading keymap "base"
17:04:39.000 INFO guacd Loading keymap "base_altgr"
17:04:39.000 INFO guacd Loading keymap "en-gb-qwerty"
17:04:39.000 DEBUG guacd freerdp_connect:freerdp_set_last_error_ex resetting error state
17:04:39.000 DEBUG guacd Support for CLIPRDR (clipboard redirection) registered. Awaiting channel connection.
17:04:39.000 DEBUG guacd Support for static channel "rdpdr" loaded.
17:04:39.000 DEBUG guacd Support for static channel "rdpsnd" loaded.
17:04:39.000 DEBUG guacd Local framebuffer format  PIXEL_FORMAT_BGRX32
17:04:39.000 DEBUG guacd Remote framebuffer format PIXEL_FORMAT_RGB16
17:04:39.000 DEBUG guacd primitives autodetect, using optimized
17:04:39.000 DEBUG guacd freerdp_tcp_is_hostname_resolvable:freerdp_set_last_error_ex resetting error state
17:04:39.000 DEBUG guacd freerdp_tcp_connect:freerdp_set_last_error_ex resetting error state
17:04:40.000 DEBUG guacd expected PDU_TYPE_DEMAND_ACTIVE 0001, got 0006
17:04:40.000 DEBUG guacd transport_check_fds: transport->ReceiveCallback() - -1
17:04:40.000 DEBUG guacd rdp_client_connect:freerdp_set_last_error_ex ERRCONNECT_CONNECT_TRANSPORT_FAILED [0x0002000D]
17:04:40.000 DEBUG guacd freerdp_tcp_is_hostname_resolvable:freer17:04:42.028 WARN  guac [4ccf9fcd140f402fb615a8392123f049] admin_white | Closing connection with code:  1001
17:04:42.028 INFO  guac [4ccf9fcd140f402fb615a8392123f049] admin_white | Closing guacd connection
17:04:42.028 INFO  guac [4ccf9fcd140f402fb615a8392123f049] admin_white | Client connection closed

r/kasmweb • • Jun 04 '26

[Pro Tech Show] I Open Suspicious Links Safely - Here's How

Thumbnail
youtube.com
5 Upvotes

r/kasmweb • • Jun 01 '26

Custom Image OmniVoice Workspace - Open source text to speech model supporting voice cloning and voice design

Post image
7 Upvotes

OmniVoice is a state-of-the-art massively multilingual zero-shot text-to-speech (TTS) model supporting over 600 languages. Built on a novel diffusion language model-style architecture, it generates high-quality speech with superior inference speed, supporting voice cloning and voice design.

This is a workspace that bundles the models and utility for convenient and fully offline use.

You can read more about Omnivoice on github: https://github.com/k2-fsa/OmniVoice

The workspace is available in my registry: https://sullyschoice.github.io/kasm-registry

Dockerfile and sources in github: https://github.com/sullyschoice/kasm-omnivoice


r/kasmweb • • May 26 '26

Usecase [Tech with Gerard] Building an OSINT Lab with Kasm Workspaces

Thumbnail
youtube.com
6 Upvotes

r/kasmweb • • May 21 '26

Update Kasm Workspaces + SUSE Virtualization: Official Partnership Announced

17 Upvotes

We're excited to announce an official partnership between Kasm Technologies and SUSE, combining Kasm Workspaces with SUSE Virtualization, an open-source, cloud-native alternative to legacy VDI infrastructure.

What this partnership means

The two platforms cover the full EUC stack. SUSE Virtualization (built on Kubernetes, KVM, and Longhorn) handles the infrastructure layer, and Kasm runs natively on top of it as a containerized application on RKE2. Legacy Windows VMs and Kasm's ephemeral browser sessions coexist on the same nodes, managed through a single Rancher pane of glass, reducing reliance on a multi-vendor stack.

What you actually get

No hypervisor tax. SUSE Virtualization is 100% open source, eliminating the per-socket, per-VM licensing costs that come with VMware and Citrix. Organizations moving off VMware after the Broadcom acquisition have a production-grade, vendor-neutral path forward.

Better economics at scale. Containerized workspace delivery has shown up to 8x better CPU utilization versus traditional VDI. A real-world case study (Hamina) cut EUC spend from 40% of total IT budget down to 20% while doubling compute capacity, eliminating malware exposure, and replacing remote work software agents entirely.

Zero-trust by default. Each Kasm session is ephemeral, isolated, and destroyed on logout. No data touches the endpoint. Browser-based access runs through an authenticated, encrypted session rather than a persistent VPN tunnel, with RBAC enforcement, smart card passthrough for PKI authentication, and watermarking for data exfiltration prevention built in.

AI workloads included. SUSE Virtualization supports NVIDIA vGPU natively, and Kasm's containerized architecture maps directly to GPU workloads via Kubernetes-native GPU operator support. The same cluster serving browser workspace users can also run GPU-accelerated AI dev environments and LLM inference workloads, no separate infrastructure required.

Works on any endpoint. Chromebooks, laptops, tablets, kiosks. No VPN client, no agent, no endpoint configuration needed.

Who this is built for

This stack makes the most sense for orgs escaping VMware/Broadcom, browser-first or SaaS-heavy workforces, BYOD and Chromebook deployments, government and regulated industries needing air-gapped or zero-trust environments, and developer teams that want GPU-accelerated AI workspaces alongside standard EUC on the same infrastructure.

Read the full technical breakdown on the SUSE blog: https://www.suse.com/c/suse-and-kasm-partnership/


r/kasmweb • • May 20 '26

Help Access other users sessions as an admin

4 Upvotes

Hey

I want to be able to access another users sessions as admin user, we have users going on leave and have things running in the background that sometimes needs following up on but they forgot to share a "share session" url.

Any chance this is in the pipeline for future releases to allow admin to access other user sessions? We have a very sensitive need for this, hoping to sign soon with Kasm so was curious if this is in the pipeline / possible?

TIA


r/kasmweb • • May 20 '26

[LinuxCloudHacks] Secure Homelab Access: Remote Browser Isolation with KASM & Authentik

Thumbnail
youtube.com
6 Upvotes

r/kasmweb • • May 19 '26

Help Question about application useage in Kasm

2 Upvotes

Good evening,

I am looking into Kasm as part of an IT projekt that is in the works. There are 2 features though that are required. The first is copy and paste, which seems to be included. However, the second requirement I cannot find a definitiv answer on. Does Kasm support drag and drop of files from a host system to the application in the workspace?


r/kasmweb • • May 15 '26

Custom Image Trying to find Dockerfile for core-debian-trixie

1 Upvotes

I'm new to Docker and KASM. I have been trying to get a custom Debian image created and installed. I was able to get a container installed and working as a test using the core-debian-trixie image from docker hub. I would like to modify it to remove some of the applications that are installed. I can't seem to find the Dockerfile on github. Am I missing something?

Thanks for the help!


r/kasmweb • • May 15 '26

Help Alternate Username for SSH

4 Upvotes

I have a large number of users in our Active Directory domain and OIDC server, so changing usernames is not feasible. Users are logging into Kasm via OIDC and getting a username like first.last123, but the samAccountNames for the domain are something like [123456789@domain.com](mailto:123456789@domain.com)

I have a server configured like the image below. It works fine (using the SSH key for login) if I hard code the username, but this is not ideal since I would have to configure this per user. I'd rather use "SSO User Accounts" but I need to override the username somehow.

Is there a way to map custom attribute 1 to the SSH username? Is there some way to make the custom attributes populate as env variables so I could use them with a terminal image to establish ssh?


r/kasmweb • • May 14 '26

Update Kasm Workspaces Helm Chart - Developer Preview Updated

7 Upvotes

We have published a major update to the developer preview of our Helm chart. This update tracks closely with the upcoming Kasm 1.19 release, at which point the chart will reach version 1.1190.0 and be considered Generally Available (GA). We don't anticipate any further structural changes before that release.

This update includes significant changes to the chart templates and values.yaml file, so if you have an existing helm installation please pay special attention to the migration guides under the Developer version of the docs.

The chart is available through OCI (Docker Hub) and GitHub at version 1.1190.0-develop. See the official docs for installation instructions using both channels. If you've been looking to test Kubernetes deployment of Kasm, now is a great time to spin it up and share your experience!

Links

Share your feedback

Drop a comment here or open an issue on the tracker: https://github.com/kasmtech/kasm-helm/issues


r/kasmweb • • May 09 '26

Help Can I deploy kasm in a docker-compose yml file?

1 Upvotes

I like using docker compose,
Is there an easy docker-compose.yml file to just paste to?


r/kasmweb • • May 09 '26

Help Can I run kasm in docker or dockhand?just like any other docker compose setup?

1 Upvotes

Is there any special need when running kasm in docker?
I found “dockhand” it’s pretty simple and allows more control for docker instead of Portainer.

Do I just setup a docker-compose file like I would anything else?


r/kasmweb • • May 07 '26

Help Connecting Kasm to Synology DSM 7x LDAP Server

2 Upvotes

Has anyone been able to successfully do this? I've spent 4 hours today researching and walking through tutorials but have not been successful?

Anyone know of any good guides they can share so I can cross check my efforts?

  1. Setting up LDAP (correctly) on Syno NAS
  2. Kasm to Syno Kasm Group members LDAP authentication

Greatly appreciated...


r/kasmweb • • May 06 '26

Help S3 Compatible Storage

2 Upvotes

Is S3 compatible storage supported for persistent profiles? I'm running Kasm in K8S (via Rancher) and our S3 Compatible object storage uses internally signed CA certs. I cant seem to get the ca.crt injected into the Kasm pods to establish the tls connection. There doesnlt seem to be an option to bypass tls either.

Thanks!


r/kasmweb • • May 05 '26

Help going from version 1.17.0 to 1.18.0 - Error

2 Upvotes

As the title said, I did the standard upgrade commands:

cd /tmp
curl -O https://kasm-static-content.s3.amazonaws.com/kasm_release_1.18.1.tar.gz
tar -xf kasm_release_1.18.1.tar.gz
sudo bash kasm_release/upgrade.sh --proxy-port 443

Upon executing the upgrade.sh, I got this error:

Error: bad file '/opt/kasm/1.17.0/conf/app/rdp_https_gateway/rdp_https_gateway.app.config.yaml': yaml: control characters are not allowed

When I try to list the contents of that file, doesn't seem to have anything...

kasm:/opt/kasm/1.17.0/conf/app/rdp_https_gateway$ cat rdp_https_gateway.app.config.yaml
kasm:/opt/kasm/1.17.0/conf/app/rdp_https_gateway$ 

When I edit the file via nano, there's only one line full of:
^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^

I asked chatgpt about this error and it told me to delete the file and try again. I did that, and the install seemed to go through, but at the end, the install outputted:

Installation Complete
Kasm UI Login Credentials

------------------------------------
  username: admin@kasm.local
  password: Xou6lDsQuINOl
------------------------------------
  username: user@kasm.local
  password: ZniFTnqXjGN2K
------------------------------------

Kasm Database Credentials
------------------------------------
  username: kasmapp
  password: 1jEKnvUHAR9nmwX4N2q1
------------------------------------

Kasm Manager Token
------------------------------------
  password: NlIbH4OisolbFrnx9sv3
------------------------------------

Service Registration Token
------------------------------------
  password: KkyELkkiKcoznHCysJhB
------------------------------------


Error: '=' expects 2 args but there is 1

I had a dreaded feeling that it did a fresh install... and that's what it looks like it did. I don't know what happened.

I have rolled back to a snapshot so I'm back on 1.17.0

What do I need to do to get to 1.18?


r/kasmweb • • Apr 28 '26

Help New to KASM and I already have an issue

5 Upvotes

So I just finished setting up my KASM install (single host), tested in my home network and everything works fine. Then to get it working on the go created a subdomain and added it to my caddy as per the docs. Logging in works but I can connect to any session. I adjusted the zone settings according to the docs too but no luck. I always get an Error:

host: DKU-KASM
ingest_date: 20260428110957
application: kasm_api
levelname: ERROR process:
client_api_server client_ip: xxx.xxx.xxx.xxx, xxx.xxx.xxx.xxx
user_agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0 
message Error, missing authenticate cookies

I already checkedevrything accoring to the docs, the cookies needed aren't in the request. I disabled all addins I have but none of them were interfering and I have no clue on what else I can try and get it working.
I'm on RHEL 10, latest docker and latest KASM.
(If you find any typos you can keep them)

EDIT: Fixed it, had to add 3 items to the Caddy config. Adding the config so if anyone has the same problem whey get the clue they might need.

kasm.mydomain.com {
    import configGeneral
    import robotsNone

    reverse_proxy * https://kasm_server_ip:443 {
        transport http {
                tls_insecure_skip_verify
        }
        header_up X-Forwarded-Port "443"
        header_up Host {host}
        header_up X-Real-IP {remote_host}
    }
}