Run MeshCentral for remote computer management in Docker

MeshCentral is a self-hosted web site for managing and controlling computers on a LAN or over the Internet. This adaptation keeps the i12bretro order: one MongoDB container, one MeshCentral container, separated data directories, and HTTPS on port 8086.¹

Install Docker on Linux

Log into Linux with sudo access and run the source command set:

# install prerequisitessudo apt install apt-transport-https ca-certificates git curl software-properties-common gnupg-agent -y# add docker gpg keycurl -fsSL https://download.docker.com/linux/$(awk -F'=' '/^ID=/{ print $NF }' /etc/os-release)/gpg | sudo apt-key add -# add docker software repositorysudo add-apt-repository "deb [arch=$(dpkg --print-architecture)] https://download.docker.com/linux/$(awk -F'=' '/^ID=/{ print $NF }' /etc/os-release) $(lsb_release -cs) stable"# install dockersudo apt install docker-ce docker-compose containerd.io -y# enable and start docker servicesudo systemctl enable docker && sudo systemctl start docker# add the current user to the docker groupsudo usermod -aG docker $USER# reauthenticate for the new group membership to take effectsu - $USER

For a current distribution, check the current Docker installation documentation because apt-key is deprecated. Re-authenticate so the Docker group takes effect.¹

Run MongoDB and MeshCentral

1. Create the data directories and shared network, then start MongoDB and MeshCentral:

# create working directoriesmkdir ~/docker/meshcentral/{data,user_files} -p && mkdir ~/docker/mongodb -p# set owner of working directoriessudo chown "$USER":"$USER" ~/docker -R# create docker networkdocker network create containers# run mongodb containerdocker run -d --name=mongodb --network containers -v ~/docker/mongodb:/data/db --restart=unless-stopped mongo# run meshcentral container# update the HOSTNAME variabledocker run -d --name=meshcentral --network containers -p 8086:443 -e HOSTNAME=ubuntuserver.local -e REVERSE_PROXY=false -e IFRAME=false -e ALLOW_NEW_ACCOUNTS=false -e WEBRTC=false -e NODE_ENV=production -v ~/docker/meshcentral/data:/opt/meshcentral/meshcentral-data -v ~/docker/meshcentral/user_files:/opt/meshcentral/meshcentral-files --restart=unless-stopped typhonragewind/meshcentral:mongodb-latest# update the config filesed -Ei 's/("NewAccounts": "false",)/"NewAccounts": "false",\n\t"allowedOrigin": true,/' ~/docker/meshcentral/data/config.json# restart the containerdocker restart meshcentral

Replace HOSTNAME=ubuntuserver.local with the hostname/DNS name that clients will use. Do not put a real password in the command or commit a credential-bearing config.json.¹

2. Open https://DNSorIP:8086.
3. Accept the certificate warning if the default certificate is in use.
4. Click the account-creation link.
5. Enter a private username, email, and password, then click Create Account.
6. Sign in and verify MeshCentral is working.

Verification and security

Check docker ps, the container logs, and ~/docker/meshcentral/data before exposing the service. Put MeshCentral behind a trusted HTTPS reverse proxy outside the LAN; keep ALLOW_NEW_ACCOUNTS=false after creating the administrator, and never expose MongoDB to the Internet.¹

Source and video

• Original tutorial: i12bretro 0963
• Original video: Run MeshCentral - Remote Management Site - in Docker

Sources