https://github.com/psyb0t/docker-mediaproc
Containerized media processing tools over SSH. Drop files in, run ffmpeg/sox/imagemagick over SSH, get your shit out. No shell access, no bullshit - just a locked-down Python wrapper that only lets you run what you're supposed to run.
https://github.com/psyb0t/docker-mediaproc
audio-processing cli-tool containerized devops docker ffmpeg fonts frei0r image-processing imagemagick ladspa locked-down media-processing python-wrapper remote-execution secure-shell sox ssh sshd video-processing
Last synced: about 1 month ago
JSON representation
Containerized media processing tools over SSH. Drop files in, run ffmpeg/sox/imagemagick over SSH, get your shit out. No shell access, no bullshit - just a locked-down Python wrapper that only lets you run what you're supposed to run.
- Host: GitHub
- URL: https://github.com/psyb0t/docker-mediaproc
- Owner: psyb0t
- License: wtfpl
- Created: 2026-02-05T05:23:40.000Z (about 1 month ago)
- Default Branch: main
- Last Pushed: 2026-02-12T22:41:54.000Z (about 1 month ago)
- Last Synced: 2026-02-12T22:54:14.249Z (about 1 month ago)
- Topics: audio-processing, cli-tool, containerized, devops, docker, ffmpeg, fonts, frei0r, image-processing, imagemagick, ladspa, locked-down, media-processing, python-wrapper, remote-execution, secure-shell, sox, ssh, sshd, video-processing
- Language: Shell
- Homepage:
- Size: 35.2 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# docker-mediaproc
[](https://hub.docker.com/r/psyb0t/mediaproc)
Containerized media processing tools over SSH. Drop files in, run ffmpeg/sox/imagemagick over SSH, get your shit out.
Built on top of [psyb0t/lockbox](https://github.com/psyb0t/docker-lockbox) - see that repo for the security model, file operations, path sandboxing, and all the SSH lockdown details.
## Features
- **FFmpeg 7.1** with frei0r, LADSPA, and LV2 plugins - video effects, audio effects, all the good shit
- **Sox** - audio processing swiss army knife
- **ImageMagick** - image manipulation, conversion, thumbnails, whatever
- **2200+ fonts** - emoji, CJK, Arabic, Thai, Indic, monospace, you fuckin' name it
## Quick Start
### install.sh (Recommended)
```bash
curl -fsSL https://raw.githubusercontent.com/psyb0t/docker-mediaproc/main/install.sh | sudo bash
```
This sets up `~/.mediaproc/` with the docker-compose file, authorized_keys, and work directory, then drops a `mediaproc` command into `/usr/local/bin`. Uses your UID/GID so you don't end up with shit permissions on files like some fuckin' animal.
Add your SSH key and start it:
```bash
cat ~/.ssh/id_rsa.pub >> ~/.mediaproc/authorized_keys
mediaproc start -d
ssh -p 2222 mediaproc@localhost "ffmpeg -version"
```
```bash
mediaproc start # foreground
mediaproc start -d # detached
mediaproc start -d -p 22 # custom port (default 2222)
mediaproc start -d -c 4 # limit to 4 CPUs
mediaproc start -d -r 4g # limit to 4GB RAM
mediaproc start -d -s 2g # limit swap to 2GB
mediaproc start -d -f /path/to/fonts # custom fonts directory
mediaproc stop # stop
mediaproc upgrade # pull latest image, asks to stop/restart if running
mediaproc uninstall # stop and remove everything
mediaproc status # show status
mediaproc logs # show logs
```
### docker run
If you just wanna run it raw without the install script:
```bash
docker pull psyb0t/mediaproc
cat ~/.ssh/id_rsa.pub > authorized_keys
mkdir -p work host_keys
docker run -d \
--name mediaproc \
--restart unless-stopped \
-p 2222:22 \
-e "LOCKBOX_UID=$(id -u)" \
-e "LOCKBOX_GID=$(id -g)" \
-v $(pwd)/authorized_keys:/etc/lockbox/authorized_keys:ro \
-v $(pwd)/host_keys:/etc/lockbox/host_keys \
-v $(pwd)/work:/work \
psyb0t/mediaproc
ssh -p 2222 mediaproc@localhost "ffmpeg -version"
```
## Allowed Commands
That's it. That's the list. Everything else gets a nice "not allowed" message.
| Command | Description |
| ---------- | -------------------------------------------- |
| `ffmpeg` | Video/audio encoding, transcoding, filtering |
| `ffprobe` | Media file analysis |
| `sox` | Audio processing |
| `soxi` | Audio file info |
| `convert` | Image conversion/manipulation |
| `identify` | Image file info |
| `magick` | ImageMagick CLI |
### File Operations
All file paths are relative to `/work`. Traversal attempts get blocked, absolute paths get remapped under `/work`.
| Command | Description |
| ---------------------- | ------------------------------------------------- |
| `put` | Upload file from stdin |
| `get` | Download file to stdout |
| `list-files` | List directory (plain names, `--json` for detailed) |
| `remove-file` | Delete a file |
| `create-dir` | Create directory (recursive) |
| `remove-dir` | Remove empty directory |
| `remove-dir-recursive` | Remove directory and everything in it recursively |
| `move-file` | Rename or move a file |
| `copy-file` | Copy a file |
| `file-info` | Get file metadata as JSON |
| `file-exists` | Check if file exists (exits 0 or 1) |
| `file-hash` | Get SHA256 hash of a file |
| `disk-usage` | Get bytes used in path or all of `/work` |
| `search-files` | Search for files matching a glob pattern |
| `append-file` | Append stdin to a file |
## Usage Examples
```bash
# Upload a file, process it, download the result
ssh mediaproc@host "put input.mp4" < input.mp4
ssh mediaproc@host "ffmpeg -i /work/input.mp4 -c:v libx264 /work/output.mp4"
ssh mediaproc@host "get output.mp4" > output.mp4
# Get video info as JSON
ssh mediaproc@host "ffprobe -v quiet -print_format json -show_format /work/video.mp4"
# Apply frei0r glow effect
ssh mediaproc@host "ffmpeg -i /work/in.mp4 -vf frei0r=glow:0.5 /work/out.mp4"
# Convert audio format
ssh mediaproc@host "sox /work/input.wav /work/output.mp3"
# Resize image
ssh mediaproc@host "convert /work/input.png -resize 50% /work/output.png"
# Create thumbnail
ssh mediaproc@host "convert /work/input.jpg -thumbnail 200x200 /work/thumb.jpg"
# List files
ssh mediaproc@host "list-files"
ssh mediaproc@host "list-files --json"
# Manage files
ssh mediaproc@host "create-dir project1"
ssh mediaproc@host "move-file old.mp4 new.mp4"
ssh mediaproc@host "remove-file output.mp4"
ssh mediaproc@host "remove-dir-recursive project1"
```
## Fonts
Over 2200 fonts covering pretty much every script and use case:
- **Core**: DejaVu, Liberation, Ubuntu, Roboto, Open Sans
- **Emoji & CJK**: Noto Color Emoji, Noto Sans CJK (Chinese, Japanese, Korean)
- **Monospace**: Fira Code, Hack, Inconsolata
- **International**: Arabic, Thai, Khmer, Lao, Tibetan, Indic scripts
Need more? Mount your custom fonts to `/usr/share/fonts/custom` and the container will pick them up on startup. Font cache gets rebuilt automatically.
## SSH Client Config
Stop typing port numbers like it's 1995. Add this kinda shit to `~/.ssh/config`:
```
Host mediaproc
HostName localhost
Port 2222
User mediaproc
```
Then just: `ssh mediaproc "ffmpeg -version"`
## Building
```bash
make build # build Docker image
make test # build + run integration tests
make installer # generate install.sh from installer.yaml
```
## License
This project is licensed under [WTFPL](LICENSE) - Do What The Fuck You Want To Public License.