Skip to main content

Kasm Workspaces

kasm-thumbnail.png Streaming containerized apps and desktops to end-users. The Secure Workspaces platform provides enterprise-class orchestration, data loss prevention, and web streaming technology to enable the delivery of containerized workloads to your browser.

You can learn more about Kasm or purchase their SaaS offerings, visit their website.

Webnestify have partnered up with Kasm Technologies, so we can help you to deploy and manage your own Kasm Workspaces server and provide training, demo session and support. For more information, please visit our dedicated page.

For more information about various security threats or how can Secure Workspaces protect you and your business, you can read The Evolving Threat: Understanding Today’s Digital Security Landscape and Safeguarding Digital Assets: The Power of Secure Workspaces articles on our blog.

Installation

Prerequisites

  • VPS server - at least 2x CPU cores, 4GB Ram, 50GB Disk.

You can get 20€ in cloud credits using this link for Hetzner Cloud. Webnestify recommends Hetzner for all of your projects.

  • Access to the domain. Ideally, in Cloudflare for integrations.
  • Secured server.

Before you continue with the installation, you need to make sure that your server is secured. Visit security guides section. Do not deploy any applications on an unsecured server. Otherwise, you can risk a potential data breach.

Webnestify can help you to secure your server to your specific needs and compliance. Just get in touch.

Video Walkthrough

Docker Engine

First, we will need to install docker engine on our brand new server.

Quick Installation script:

curl -sSL https://get.docker.com/ | CHANNEL=stable sh
# After the installation process is finished, you may need to enable the service and make sure it is started (e.g. CentOS 7)
systemctl enable --now docker

Visit official installation guide.

Never install docker from other sources or custom repositiories.

Kasm Workspaces

Kasm offers more ways on how you can deploy your workspaces. This guide is for single server online deployment.

  1. Navigate to /tmp folder
cd /tmp
  1. Download the latest packages
curl -O https://kasm-static-content.s3.amazonaws.com/kasm_release_1.14.0.3a7abb.tar.gz

Always check the latest release.

  1. Extract archive
tar -xf kasm_release_1.14.0.3a7abb.tar.gz
  1. Proceed with installation - default port
sudo bash kasm_release/install.sh
  1. Proceed with installation - custom port (more secure)
sudo bash kasm_release/install.sh -L [your own port]

Caddy

Caddy serve as reverse proxy for your server, so you can access your workspaces via https connection from anywhere in the world. You could also use Cloudflare Tunnels for extra protection.

You can visit also Caddy installation page.

  1. Install Caddy repos and software
sudo apt install -y debian-keyring debian-archive-keyring apt-transport-https curl && curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | sudo gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg && curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' | sudo tee /etc/apt/sources.list.d/caddy-stable.list && sudo apt update && sudo apt install caddy
  1. Edit the Caddyfile
sudo nano /etc/caddy/Caddyfile
  1. Paste config
 kasm.example.com {
	reverse_proxy https://127.0.0.1:8443 {
		transport http {
			tls_insecure_skip_verify
		}
	}
}

Make sure to replace kasm.example.com and default port 8443 to your own value you installed on.

  1. Restart Caddy
sudo systemctl reload caddy

About Webnestify

Established in the heart of Slovakia in 2021. Webnestify is more than just a cloud solutions provider – it's your strategic partner in digital transformation. We believe that businesses, irrespective of size, deserve the best when it comes to technology. And, we're here to ensure that your company doesn't just keep up with the digital age but thrives in it.

Read our reviews on Trustpilot!

Subscribe to our YouTube channel!

Join Webnestify, and let's redefine success together. Apply today for exclusive access.

Back to top