[{"_1":2,"_197":-5,"_198":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_169":170},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":11,"_17":11,"_18":19,"_20":11},"username","isBillingDecouplingSeatCount","isSearchBoxExperimentEnabled","isAskGordonEnabled",true,"isUsingNewTemplate","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_95":96,"_118":119,"_162":-5,"_163":11,"_164":11,"_165":11,"_166":-5,"_167":168},"canonicalUrl","https://hub.docker.com/r/dockurr/chromeos/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","dockurr","reponame","chromeos","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_49":50,"_52":53,"_54":55,"_56":11,"_57":58,"_59":60,"_61":62,"_39":31,"_28":29,"_64":65,"_66":51,"_67":68,"_69":68,"_70":71,"_72":-5,"_73":74,"_75":76,"_77":11,"_78":79,"_80":81,"_86":11,"_87":88,"_92":29,"_93":94},"categories",[38,43,46],{"_39":40,"_41":42},"name","Security","slug","security",{"_39":44,"_41":45},"Developer tools","developer-tools",{"_39":47,"_41":48},"Operating systems","operating-systems","content_types",[51],"image","date_registered","2026-07-03T01:54:27.089322Z","description","ChromeOS Flex inside a Docker container.","is_private","last_updated","2026-07-13T20:07:47.282201Z","last_modified","2026-07-14T00:02:11.326701Z","media_types",[63],"application/vnd.docker.container.image.v1+json","pull_count",4711,"repository_type","star_count",1,"status","status_description","active","source","collaborator_count",0,"full_description","

ChromeOS
\n
\n $\"Logo\"$ \n
\n
\n\n[![Build]][build_url]\n[![Version]][tag_url]\n[![Size]][tag_url]\n[![Package]][pkg_url]\n[![Pulls]][hub_url]\n\n

\n\nChromeOS Flex in a Docker container.\n\n## Features ✨\n\n- Runs ChromeOS Flex inside a Docker container\n- Automatic download of the recovery image\n- Web-based viewer for controlling the VM\n- Near-native performance with KVM acceleration\n- Customizable CPU, memory, and storage allocation\n- Auto-detects Intel, AMD, and Nvidia GPUs\n- Dynamic memory allocation with memory ballooning\n- Supports audio streaming to the browser\n- USB passthrough and host folder sharing\n- Supports NAT, user-mode, macvlan, and macvtap networking\n\n## Usage 🐳\n\n##### Docker Compose:\n\n```yaml\nservices:\n chromeos:\n image: dockurr/chromeos\n container_name: chromeos\n environment:\n VERSION: \"stable\"\n GPU: \"Y\"\n FORCE_HOST_CURSOR: \"Y\"\n KEEP_AWAKE: \"N\"\n devices:\n - /dev/kvm\n - /dev/net/tun\n device_cgroup_rules:\n - \"c 226:* rwm\"\n cap_add:\n - NET_ADMIN\n ports:\n - 8006:8006\n - 5900:5900/tcp\n - 5900:5900/udp\n volumes:\n - ./chromeos:/storage\n - /dev/dri:/dev/dri:rw\n restart: always\n stop_grace_period: 2m\n```\n\n##### Docker CLI:\n\n```bash\ndocker run -it --rm --name chromeos -e \"VERSION=stable\" -p 8006:8006 --device=/dev/kvm --device=/dev/net/tun --device-cgroup-rule=\"c 226:* rwm\" --cap-add NET_ADMIN -v \"${PWD:-.}/chromeos:/storage\" -v /dev/dri:/dev/dri --stop-timeout 120 docker.io/dockurr/chromeos\n```\n\n##### Kubernetes:\n\n```shell\nkubectl apply -f https://raw.githubusercontent.com/dockur/chromeos/master/kubernetes.yml\n```\n\n##### GitHub Codespaces:\n\n[![Open in GitHub Codespaces](https://github.com/codespaces/badge.svg)](https://codespaces.new/dockur/chromeos)\n\n## Requirements ⚙️\n\n- Docker or Podman on a Linux host with KVM support.\n- Docker Desktop or Podman (Desktop) on Windows 11 with nested virtualization enabled.\n- At least 4 GB of available RAM.\n- At least 64 GB of free disk space.\n\n> [!NOTE]\n> Docker Desktop on Linux, macOS, and Windows 10 does not currently provide KVM access to containers and is therefore not supported.\n\n> [!IMPORTANT]\n> For best performance, run on a host with a GPU and `/dev/dri/` exposed. GPU acceleration uses the QEMU egl-headless path: Intel and AMD render nodes go through the open-source Mesa driver, Nvidia through its proprietary driver (see the FAQ). Without a usable GPU it falls back to software rendering, which works but is slow.\n\n## FAQ 💬\n\n### How do I use it?\n\n Very simple! These are the steps:\n\n - Start the container and connect to [port 8006](http://127.0.0.1:8006/) using your web browser.\n\n - The container downloads the current Flex recovery image and lands you in Flex's installer.\n\n - Click through the installer to install Flex to the persistent disk, then run through OOBE.\n\n Enjoy your brand new machine, and don't forget to star this repo!\n\n### How do I select the channel?\n\n By default, the stable channel is installed. But you can add the `VERSION` environment variable to your compose file, in order to specify an alternative channel to be downloaded:\n\n ```yaml\n environment:\n VERSION: \"ltr\"\n ```\n\n Select from the values below:\n\n | **Value** | **Channel** | **Cadence** |\n |---|---|---|\n | `stable` | Stable | ~4 weeks |\n | `beta` | Beta | ~weekly |\n | `ltc` | Long-Term Channel | ~6 months |\n | `ltr` | Long-Term Release | ~18 months |\n\n### How do I install a custom image?\n\n In order to download an unsupported image, specify its URL in the `VERSION` environment variable:\n\n ```yaml\n environment:\n VERSION: \"https://example.com/chromeos.bin.zip\"\n ```\n\n Alternatively, you can also skip the download and use a local file instead, by binding it in your compose file in this way:\n\n ```yaml\n volumes:\n - ./example.bin:/boot.img\n ```\n\n Replace the example path `./example.bin` with the filename of your desired image. The value of `VERSION` will be ignored in this case.\n\n### How do I change the storage location?\n\n To change the storage location, include the following bind mount in your compose file:\n\n ```yaml\n volumes:\n - ./chromeos:/storage\n ```\n\n Replace the example path `./chromeos` with the desired storage folder or named volume.\n\n### How do I change the size of the disk?\n\n To expand the default size of 64 GB, add the `DISK_SIZE` setting to your compose file and set it to your preferred capacity:\n\n ```yaml\n environment:\n DISK_SIZE: \"256G\"\n ```\n\n> [!TIP]\n> This can also be used to resize an existing disk to a larger capacity without any data loss.\n>\n> However afterwards you will need to run the following command from the host, with the container stopped:\n>\n> `sudo ./tools/resize.sh ./chromeos`\n>\n> to allocate this additional space.\n\n### How do I change the amount of CPU or RAM?\n\n By default, ChromeOS Flex will be allowed to use 2 CPU cores and 4 GB of RAM.\n\n If you want to adjust this, you can specify the desired amount using the following environment variables:\n\n ```yaml\n environment:\n RAM_SIZE: \"8G\"\n CPU_CORES: \"4\"\n ```\n\n### How do I password-protect the viewer?\n\n By default the viewer on port 8006 is open to anyone who can reach it. Set `PROTECT` to require a login (HTTP basic auth). The default credentials are `Docker` / `admin`, so override them with `USERNAME` and `PASSWORD`:\n\n ```yaml\n environment:\n PROTECT: \"Y\"\n USERNAME: \"admin\"\n PASSWORD: \"your-password\"\n ```\n\n### How do I let the host reclaim unused memory?\n\n By default the VM holds the full `RAM_SIZE` for its entire lifetime. Set `BALLOONING` to enable dynamic memory ballooning, which lets the host reclaim guest RAM that isn't in use:\n\n ```yaml\n environment:\n BALLOONING: \"Y\"\n ```\n\n The target can be tuned with `BALLOONING_MIN_MEM` (default `33%`) and `BALLOONING_RAM_THRESHOLD` (default `80.0`).\n\n### How does GPU acceleration work?\n\n The container expects the host's `/dev/dri/` to be bind-mounted in. At startup, the entrypoint scans for a usable render node and hands it to QEMU as the VirGL backend (`-display egl-headless,rendernode=...` + `virtio-vga-gl`). Both the `volumes: - /dev/dri:/dev/dri:rw` mount and the `device_cgroup_rules: - \"c 226:* rwm\"` rule in the example compose are required for this. Intel and AMD render nodes work out of the box; for Nvidia see below. If no usable render node is found, the container falls back to software rendering.\n\n The `GPU` setting accepts:\n\n | Value | Effect |\n |-------|--------|\n | `Y` / `auto` | Auto-detect (default); prefers a ready Nvidia node, otherwise Intel/AMD |\n | `N` | Off — software rendering (3–15 fps) |\n | `intel` / `amd` / `nvidia` | Force a specific vendor, useful on multi-GPU hosts |\n\n For finer control, set `RENDERNODE` to a specific node (e.g. `/dev/dri/renderD128`). On a miss the container logs exactly what was found and what to fix, then falls back to software rendering.\n\n### How do I use an Nvidia GPU?\n\n Nvidia cards render through the same egl-headless path, with two extra requirements:\n\n - The host must load `nvidia-drm` with `modeset=1` (add `options nvidia_drm modeset=1` to a file in `/etc/modprobe.d/`, run `update-initramfs -u`, then reboot). Without it the card is invisible to the GBM/EGL backend the container uses.\n - Run the container with the Nvidia runtime and the `graphics` capability so the driver's EGL libraries are injected:\n\n ```yaml\n services:\n chromeos:\n image: dockurr/chromeos\n runtime: nvidia\n environment:\n GPU: \"Y\"\n NVIDIA_VISIBLE_DEVICES: \"all\"\n NVIDIA_DRIVER_CAPABILITIES: \"all\"\n device_cgroup_rules:\n - \"c 226:* rwm\"\n volumes:\n - /dev/dri:/dev/dri:rw\n ```\n\n Or with the CLI: add `--gpus all -e NVIDIA_DRIVER_CAPABILITIES=all`. The render node is auto-detected by vendor, so no card-specific configuration is needed. If both an Nvidia and an Intel/AMD GPU are present, the Nvidia card is preferred once its EGL libraries are available; force the choice either way with `GPU: \"nvidia\"` / `GPU: \"intel\"`, or pin a node with `RENDERNODE`.\n\n### How does the cursor work?\n\n ChromeOS Flex sees the input device as a touchscreen and doesn't render a cursor. noVNC has an optional \"Show dot when no cursor\" setting, but the dot is small and easy to miss. By default the container overrides this with a CSS rule so the browser's normal cursor shows through:\n\n ```yaml\n environment:\n FORCE_HOST_CURSOR: \"Y\"\n ```\n\n Set it to `\"N\"` to disable the override.\n\n### How do I right-click?\n\n ChromeOS treats the input device as a touchscreen, so right-click events are ignored. To open a context menu, **left-click and hold for about half a second**. The touch UI interprets a long-press as a context-menu gesture.\n\n### How do I get a native cursor and native right-click instead?\n\n By default the container exposes the guest as a touchscreen (`usb-tablet`) so that noVNC's absolute click coordinates land exactly where you click, at the cost of no native cursor (the host cursor is shown instead) and no right-click button (use a long-press). If you would rather have ChromeOS's native cursor and native right-click, switch to mouse mode:\n\n ```yaml\n environment:\n TABLET: \"N\"\n FORCE_HOST_CURSOR: \"N\"\n ```\n\n This swaps the tablet for a `usb-mouse`, so ChromeOS shows its own cursor and right-click works. The trade-off is pointer tracking: ChromeOS scales the relative movements noVNC sends, so the cursor drifts away from the real pointer position over distance and clicks land off-target. This mode suits a direct VNC client more than the browser viewer; for noVNC, the default tablet mode is recommended.\n\n### How do I stop the display from going to sleep?\n\n ChromeOS Flex blanks the display after ~8 minutes of inactivity and can be hard to wake from the browser viewer. To prevent this, set:\n\n ```yaml\n environment:\n KEEP_AWAKE: \"Y\"\n ```\n\n This sends a no-op `pause` key event to the VM every 4 minutes, keeping the idle timer reset. Alternatively, install the \"Keep Awake\" extension from the Chrome Web Store inside Flex.\n\n### How do I enable audio?\n\n Audio is disabled by default. To stream it to the browser, add the following environment variable:\n\n ```yaml\n environment:\n AUDIO: \"Y\"\n ```\n\n Then enable **Audio** under **Settings → Advanced** in the web viewer. The stream is only active while this option is enabled, so it uses no extra bandwidth otherwise.\n\n### How do I reduce bandwidth for remote noVNC sessions?\n\n Enable lossy VNC encoding to let QEMU's Tight encoder use JPEG for color regions:\n\n ```yaml\n environment:\n LOSSY: \"Y\"\n ```\n\n Trade-off: slight blurring on photos and gradients (invisible on UI text). Most useful when accessing the container over WAN or on bandwidth-constrained networks.\n\n### How do I enable developer mode?\n\n Add `DEV_MODE: \"Y\"` to your compose file:\n\n ```yaml\n environment:\n DEV_MODE: \"Y\"\n ```\n\n On the next boot the container switches the data disk's bootloader from `chromeos-vhd.A` (verified, read-only rootfs) to `chromeos-hd.A` (unverified, read-write rootfs). Inside Flex, open crosh with `Ctrl+Alt+T` and type `shell` to get a bash prompt. `sudo -i` for root.\n\n An \"OS verification is OFF\" banner appears at every boot, and Flex's in-VM auto-update is disabled (the container's `VERSION` env handles the channel anyway). To turn dev mode back off, set `DEV_MODE: \"N\"` and restart the container. The next boot flips the default back to `chromeos-vhd.A`.\n\n### How do I install Linux packages?\n\n Enable developer mode (above), then use [chromebrew](https://github.com/chromebrew/chromebrew), a package manager for ChromeOS, from inside the guest:\n\n ```bash\n bash <(curl -L git.io/vddgY) && . ~/.bashrc\n ```\n\n It installs to `/usr/local/tmp/crew` on the stateful partition, so it survives reboots. This runs inside ChromeOS, not the container; on ChromeOS M117+ the installer requires a VT-2 terminal (`Ctrl+Alt+F2`) rather than crosh.\n\n### How do I assign an individual IP address to the container?\n\n By default, the container uses bridge networking, which shares the IP address with the host. If you want to assign an individual IP address to the container, you can create a macvlan network as follows:\n\n ```bash\n docker network create -d macvlan \\\n --subnet=192.168.0.0/24 \\\n --gateway=192.168.0.1 \\\n --ip-range=192.168.0.100/28 \\\n -o parent=eth0 vlan\n ```\n\n Then add this to your compose file:\n\n ```yaml\n networks:\n default:\n name: vlan\n external: true\n ```\n\n This way the container becomes part of the LAN as a separate device, reachable by its own IP. Note that some routers don't allow the host and the container to communicate over the macvlan, so check first.\n\n### How can ChromeOS Flex acquire an IP address from my router?\n\n After configuring the container for [macvlan](#how-do-i-assign-an-individual-ip-address-to-the-container), it is possible for ChromeOS to be a part of your home network by requesting an IP from your router, just like a real PC. To enable this mode, add the following to your compose file:\n\n ```yaml\n environment:\n DHCP: \"Y\"\n devices:\n - /dev/vhost-net\n device_cgroup_rules:\n - 'c *:* rwm'\n ```\n\n### How do I pass through a USB device?\n\n To pass through a USB device, first look up its vendor and product IDs via the `lsusb` command, then add them to your compose file like this:\n\n ```yaml\n environment:\n ARGUMENTS: \"-device usb-host,vendorid=0x1234,productid=0x1234\"\n devices:\n - /dev/bus/usb\n ```\n\n### How do I verify that KVM is available?\n\n First, make sure your platform and container runtime meet the [requirements](#requirements-️) listed above.\n\n On a Linux host, install `cpu-checker` and run:\n\n ```bash\n sudo apt install cpu-checker\n sudo kvm-ok\n ```\n\n A working configuration should report:\n\n ```text\n KVM acceleration can be used\n ```\n\n You can also verify that the KVM device exists:\n\n ```bash\n ls -l /dev/kvm\n ```\n\n If KVM is unavailable, check whether:\n\n - Hardware virtualization (`Intel VT-x` or `AMD-V`) is enabled in your BIOS or UEFI.\n - Nested virtualization is enabled when the host itself is a virtual machine.\n - Your VPS or cloud provider supports nested virtualization.\n\n If `kvm-ok` succeeds but the container still reports that KVM is unavailable, you can temporarily add `privileged: true` to your Compose file to rule out a permission or device-access issue.\n\n### How do I run Windows in a container?\n\n You can use [dockur/windows](https://github.com/dockur/windows) for that. It shares many of the same features and conventions.\n\n### How do I run macOS in a container?\n\n You can use [dockur/macos](https://github.com/dockur/macos) for that. It shares many of the same features and conventions.\n\n### How do I run a Linux desktop in a container?\n\n You can use [qemus/qemu](https://github.com/qemus/qemu) for that, which is the QEMU base this project is built on.\n\n### Is this project legal?\n\n Yes, this project contains only open-source code and does not distribute any copyrighted material. Every recovery image is downloaded directly from Google's CDN, under your own licensing relationship with Google. \n\n ## Acknowledgements 🙏\n\nSpecial thanks to [forkymcforkface](https://github.com/forkymcforkface), this project would not exist without his invaluable work.\n\n## Stars 🌟\n[![Stargazers](https://raw.githubusercontent.com/star-stats/stars/refs/heads/data/charts/dockur-chromeos.svg)](https://github.com/dockur/chromeos/stargazers)\n\n## Disclaimer ⚖️\n\n*The product names, logos, brands, and other trademarks referred to within this project are the property of their respective trademark holders. This project is not affiliated, sponsored, or endorsed by Google LLC.*\n\n[build_url]: https://github.com/dockur/chromeos/\n[hub_url]: https://hub.docker.com/r/dockurr/chromeos/\n[tag_url]: https://hub.docker.com/r/dockurr/chromeos/tags\n[pkg_url]: https://github.com/dockur/chromeos/pkgs/container/chromeos\n\n[Build]: https://github.com/dockur/chromeos/actions/workflows/build.yml/badge.svg?v=1\n[Size]: https://img.shields.io/docker/image-size/dockurr/chromeos/latest?color=066da5&label=size&v=1\n[Pulls]: https://img.shields.io/docker/pulls/dockurr/chromeos.svg?style=flat&label=pulls&logo=docker&v=1\n[Version]: https://img.shields.io/docker/v/dockurr/chromeos/latest?arch=amd64&sort=semver&color=066da5&v=1\n[Package]: https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fipitio.github.io%2Fbackage%2Fdockur%2Fchromeos%2Fchromeos.json&query=%24.downloads&logo=github&style=flat&color=066da5&label=pulls\n","has_starred","hub_user","kroese","immutable_tags_settings",{"_82":11,"_83":84},"enabled","rules",[85],".*","is_automated","permissions",{"_89":19,"_90":11,"_91":11},"read","write","admin","user","storage_size",234766940,"orgData",{"_97":98,"_99":100,"_101":102,"_103":29,"_104":105,"_106":107,"_108":107,"_109":107,"_110":111,"_112":113,"_114":107,"_115":116,"_117":19},"id","18b2f7bf5f27499e83911012c734ce3b","uuid","18b2f7bf-5f27-499e-8391-1012c734ce3b","type","organization","orgname","full_name","Dockurr","location","","company","profile_url","date_joined","2023-05-15T10:12:47.195513Z","gravatar_url","https://www.gravatar.com/avatar/ff3def1dc71fbf46afb51eb43fb4be3e?s=80&r=g&d=mm","gravatar_email","badge","open_source","is_active","recentTags",[120,156],{"_121":51,"_122":123,"_124":125,"_126":127,"_97":128,"_129":130,"_57":145,"_146":123,"_147":79,"_148":63,"_39":149,"_150":151,"_152":136,"_153":145,"_154":71,"_155":19},"content_type","creator",18704648,"digest","sha256:b6148fcee44c287fd18de565145d12208391816d372f6cc01e9b48b5e11a64c2","full_size",123285661,1232049700,"images",[131],{"_132":133,"_124":125,"_134":107,"_135":136,"_137":138,"_139":140,"_141":107,"_142":-5,"_143":127,"_69":71,"_144":-5},"architecture","amd64","features","last_pulled","2026-07-16T19:11:33.065959284Z","last_pushed","2026-07-13T20:07:45.433255685Z","os","linux","os_features","os_version","size","variant","2026-07-13T20:07:47.198476Z","last_updater","last_updater_username","media_type","latest","repository",31651781,"tag_last_pulled","tag_last_pushed","tag_status","v2",{"_121":51,"_122":123,"_124":125,"_126":127,"_97":157,"_129":158,"_57":160,"_146":123,"_147":79,"_148":63,"_39":161,"_150":151,"_152":136,"_153":160,"_154":71,"_155":19},1232049678,[159],{"_132":133,"_124":125,"_134":107,"_135":136,"_137":138,"_139":140,"_141":107,"_142":-5,"_143":127,"_69":71,"_144":-5},"2026-07-13T20:07:45.73448Z","1.00","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":171,"_181":182,"_167":195,"_196":11},{"_36":172,"_49":176,"_52":53,"_54":55,"_56":11,"_57":58,"_59":60,"_61":177,"_39":31,"_28":29,"_64":65,"_66":51,"_67":68,"_69":68,"_70":71,"_72":-5,"_73":74,"_75":76,"_77":11,"_78":79,"_80":178,"_86":11,"_87":180,"_92":29,"_93":94},[173,174,175],{"_39":40,"_41":42},{"_39":44,"_41":45},{"_39":47,"_41":48},[51],[63],{"_82":11,"_83":179},[85],{"_89":19,"_90":11,"_91":11},"tags",{"_183":184,"_185":-5,"_186":-5,"_187":188},"count",2,"next","previous","results",[189,192],{"_121":51,"_122":123,"_124":125,"_126":127,"_97":128,"_129":190,"_57":145,"_146":123,"_147":79,"_148":63,"_39":149,"_150":151,"_152":136,"_153":145,"_154":71,"_155":19},[191],{"_132":133,"_124":125,"_134":107,"_135":136,"_137":138,"_139":140,"_141":107,"_142":-5,"_143":127,"_69":71,"_144":-5},{"_121":51,"_122":123,"_124":125,"_126":127,"_97":157,"_129":193,"_57":160,"_146":123,"_147":79,"_148":63,"_39":161,"_150":151,"_152":136,"_153":160,"_154":71,"_155":19},[194],{"_132":133,"_124":125,"_134":107,"_135":136,"_137":138,"_139":140,"_141":107,"_142":-5,"_143":127,"_69":71,"_144":-5},[],"canDeleteTags","actionData","errors"]

ChromeOS\n\n\n\n\n\n[![Build]][build_url]\n[![Version]][tag_url]\n[![Size]][tag_url]\n[![Package]][pkg_url]\n[![Pulls]][hub_url]\n\n

ChromeOS
\n
\n $\"Logo\"$ \n
\n
\n\n[![Build]][build_url]\n[![Version]][tag_url]\n[![Size]][tag_url]\n[![Package]][pkg_url]\n[![Pulls]][hub_url]\n\n

dockurr/chromeos

Tags for dockurr/chromeos