{"id":24797404,"url":"https://github.com/germanaizek/docker-sandbox-windows","last_synced_at":"2026-05-11T07:22:47.234Z","repository":{"id":232842022,"uuid":"784718029","full_name":"GermanAizek/docker-sandbox-windows","owner":"GermanAizek","description":"Sandbox zum testen verdächtiger software auf schädliche aktivitäten","archived":false,"fork":false,"pushed_at":"2024-05-03T15:44:26.000Z","size":1136,"stargazers_count":1,"open_issues_count":1,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-09-08T19:33:13.138Z","etag":null,"topics":["docker","malware-analysis","malware-analyzer","malware-detection","malware-dev","malware-developing","malware-research","windows","wine"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/GermanAizek.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-04-10T12:20:31.000Z","updated_at":"2024-05-03T15:44:29.000Z","dependencies_parsed_at":"2024-04-11T19:44:53.860Z","dependency_job_id":"10771f90-0a86-4626-9541-960f0c96073f","html_url":"https://github.com/GermanAizek/docker-sandbox-windows","commit_stats":null,"previous_names":["germanaizek/docker-sandbox-windows"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/GermanAizek/docker-sandbox-windows","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GermanAizek%2Fdocker-sandbox-windows","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GermanAizek%2Fdocker-sandbox-windows/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GermanAizek%2Fdocker-sandbox-windows/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GermanAizek%2Fdocker-sandbox-windows/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/GermanAizek","download_url":"https://codeload.github.com/GermanAizek/docker-sandbox-windows/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/GermanAizek%2Fdocker-sandbox-windows/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":274231437,"owners_count":25245585,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-08T02:00:09.813Z","response_time":121,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["docker","malware-analysis","malware-analyzer","malware-detection","malware-dev","malware-developing","malware-research","windows","wine"],"created_at":"2025-01-30T01:28:19.160Z","updated_at":"2026-05-11T07:22:47.205Z","avatar_url":"https://github.com/GermanAizek.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Docker Wine Sandbox for Windows\n\n## Architecture (future plan)\n\n![Sandbox Docker Wine for exe in Windows](https://github.com/GermanAizek/docker-sandbox-windows/assets/21138600/f5763f84-d7aa-4921-8e3d-8fddbbecf081)\n\n## More information\n\n[![build](https://github.com/scottyhardy/docker-wine/actions/workflows/build.yml/badge.svg)](https://github.com/scottyhardy/docker-wine/actions/workflows/build.yml)\n[![Docker Pulls](https://img.shields.io/docker/pulls/scottyhardy/docker-wine.svg?style=social)](https://hub.docker.com/r/scottyhardy/docker-wine)\n[![Docker Stars](https://img.shields.io/docker/stars/scottyhardy/docker-wine.svg?style=social)](https://hub.docker.com/r/scottyhardy/docker-wine)\n[![GitHub forks](https://img.shields.io/github/forks/scottyhardy/docker-wine.svg?style=social)](https://github.com/scottyhardy/docker-wine/network)\n[![GitHub stars](https://img.shields.io/github/stars/scottyhardy/docker-wine.svg?style=social)](https://github.com/scottyhardy/docker-wine/stargazers)\n\n\u003cimg align=\"right\" height=\"300\" width=\"300\" src=\"https://raw.githubusercontent.com/scottyhardy/docker-wine/master/images/logo.png\" \u003e\n\n\u003eDocker image that includes Wine and Winetricks for running Windows applications on Linux and macOS\n\nThe docker-wine container can either be run with X11 forwarding or as an RDP server to suit your use case.  The default is to use X11 forwarding which utilizes your machine's X server to render graphics directly into your current session and play sounds through pulseaudio (audio redirection on Linux only).\n\nUsing docker-wine with an RDP server allows the container to be run on a headless machine or a machine that may not be running an X server. You can then use a Remote Desktop client to connect to the container which may be located either on your local or a remote machine.  This is currently the only solution if you require sound on macOS.\n\n---\n\n## Getting Started\n\nUsing the `docker-wine` script is the easiest way to get started and should be all you need for Linux, macOS and Windows (WSL2 - sounds is broken).\n\n### Download the `docker-wine` script\n\nOn WSL2:\n\n```bash\napt update \u0026\u0026 apt install docker xauth pulseaudio\n```\n\nWhen Docker Desktop starts, go to `Settings \u003e Resources \u003e WSL Integration`.\n\nThe Docker-WSL integration is enabled on the default WSL distribution, which is Ubuntu\n\nTo change your default WSL distro, run:\n\n```bash\nwsl --set-default \u003cdistro name\u003e\n```\n\nInstalling `docker-wine` and run rdp access\n\n```bash\nwget https://raw.githubusercontent.com/cihuuy/docker-wine/master/docker-wine \u0026\u0026 chmod +x docker-wine \u0026\u0026 ./docker-wine --rdp\n```\n\nOn Linux:\n\n```bash\nwget https://raw.githubusercontent.com/cihuuy/docker-wine/master/docker-wine \u0026\u0026 chmod +x docker-wine \u0026\u0026 ./docker-wine --rdp\n```\n## Run `docker-wine` with X11 forwarding\n\nRunning the script with no other arguments will start an interactive bash session:\n\n```bash\n./docker-wine\n```\n\nYou can override the default interactive bash session by adding `wine`, `winetricks`, `winecfg` or any other valid commands with their associated arguments:\n\n```bash\n./docker-wine wine notepad\n```\n\n![Screenshot of Notepad](https://raw.githubusercontent.com/scottyhardy/docker-wine/master/images/screenshot_1.png)\n\n## Run `docker-wine` with Xvfb\n\nStarts up a frame buffer display defaulting to: Xvfb :95 -screen 0 320x200x8\nExports DISPLAY to the server number :95\n\n```bash\n./docker-wine --xvfb\n```\n\n### Customizable options\n\n```bash\n./docker-wine --xvfb=:95,0,320x200x8\n```\n\n## Run `docker-wine` attached with notty\n\n```bash\n./docker-wine --notty\n```\n\n## Run `docker-wine` with RDP server\n\nRun with the `--rdp` option to start the RDP server with an interactive bash session:\n\n```bash\n./docker-wine --rdp\n```\n\nOr, you can run the container as a detached daemon that runs in the background.  To start the daemon:\n\n```bash\n./docker-wine --rdp=start\n```\n\nThen to stop the daemon:\n\n```bash\n./docker-wine --rdp=stop\n```\n\n## Connecting with an RDP client\n\nAll Windows desktops and servers come with the Remote Desktop Connection client pre-installed and macOS users can download the Microsoft Remote Desktop application for free from the App Store. For Linux users, I'd suggest using the Remmina Remote Desktop client.\n\nFor the hostname, use `localhost` if the container is hosted on the same machine you're running your Remote Desktop client on and for remote connections just use the name or IP address of the machine you are connecting to.\nNOTE: To connect to a remote machine, it will require TCP port 3389 to be exposed through the firewall.\n\nTo log in, use the following default user account details:\n\n```bash\nUsername: wineuser\nPassword: wineuser\n```\n\n![Screenshot of login prompt](https://raw.githubusercontent.com/scottyhardy/docker-wine/master/images/screenshot_2.png)\n\n![Screenshot of XFCE desktop](https://raw.githubusercontent.com/scottyhardy/docker-wine/master/images/screenshot_3.png)\n\n## Additional options when running `docker-wine`\n\nStart the container as root:\n\n```bash\n./docker-wine --as-root\n```\n\nOr start the container as yourself with the same username, UID, GID and home path (especially useful when binding to local file system):\n\n```bash\n./docker-wine --as-me\n```\n\nYou can combine options:\n\n```bash\n./docker-wine --as-root --rdp\n```\n\nYou can also use standard docker syntax to add as many additional environment variables, devices and volumes as you need:\n\n```bash\n./docker-wine --env=\"MY_ENV_VAR=some_value\" --device=/dev/snd --volume=\"myvol:/some/path:ro\" --volume=\"/usr/data:data\"\n```\n\nSee the `docker-wine` help for a full list of options:\n\n```bash\n./docker-wine --help\n```\n\n## Securing your password\n\nThe default password is `wineuser` and it will change to your own username by default if you use the `--as-me` argument.  You can override the default password by using `--password=\"your_password\"` but even though this password is encrypted before passing it to the container, your password still appears in plain text in the process list for any other user connected to the same host machine. Depending on your use case, this could be a problem.\n\nOne solution is to use `--password-prompt` and be prompted to enter the user password when you instantiate the docker-wine container. This will prevent your password from appearing in your machine's process list, but does require manually entering the password each time.\n\nIf prompting is undesirable, the solution is to encrypt your password _before_ passing it to the `docker-wine` script, using `openssl`.  This command will produce an MD5 encrypted hash of your password with a random salt which means each run will produce a different hash:\n\n```bash\nopenssl passwd -1 -salt $(openssl rand -base64 6) \"your_password\"\n\n```\n\nOne method of using this secure string would be to store it to disk:\n\n```bash\necho $(openssl passwd -1 -salt $(openssl rand -base64 6) \"your_password\") \u003e ~/.docker-wine\n```\n\nThen simply `cat` the file when using the `docker-wine` script:\n\n```bash\n./docker-wine --rdp --as-me --secure-password=\"$(cat ~/.docker-wine)\"\n```\n\n## Build and run locally on your own computer\n\nFirst, clone the repository from GitHub:\n\n```bash\ngit clone https://github.com/scottyhardy/docker-wine.git\ncd docker-wine\n```\n\nTo build the container, simply run:\n\n```bash\n./build\n```\n\nTo run the your locally built container, use `docker-wine` with the `--local` switch:\n\n```bash\n./docker-wine --local wine notepad\n```\n\n## Volume container winehome\n\nWhen the docker-wine container is instantiated with the `docker-wine` script, a volume container named `winehome` is created and is mapped to the user's home within the container.  Using a volume container allows the docker-wine container to be safely removed after every execution as user data will persist as long as the `winehome` volume is not removed.  This effectively allows the `docker-wine` image to be swapped out for a newer version at anytime.\n\nYou can manually create the `winehome` volume container by running:\n\n```bash\ndocker volume create winehome\n```\n\nIf you don't want the volume container, you can delete it by using:\n\n```bash\ndocker volume rm winehome\n```\n\n## Troubleshooting\n\nTo test video, try opening Notepad:\n\n```bash\n./docker-wine wine notepad\n```\n\nTo test sound, try using `pacat`:\n\n```bash\n./docker-wine pacat -vv /dev/urandom\n```\n## Uninstalling\n\nIt simple, just execute for removing container:\n\n```\nsudo docker rmi -f docker-wine\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgermanaizek%2Fdocker-sandbox-windows","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgermanaizek%2Fdocker-sandbox-windows","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgermanaizek%2Fdocker-sandbox-windows/lists"}