docker run -itd \
  --name vx \
  --shm-size=2g \
  --device=/dev/dri:/dev/dri \
  -p 3001:3001 \
  -p 3000:3000 \
  -e AUTO_START_WECHAT=false \
  -e AUTO_START_QQ=false \
  -e TITLE='Online PC admin' \
  -e CUSTOM_USER='admin' \
  -e PASSWORD='admin' \
  -e LC_ALL=en_US.UTF-8 \
  -e TZ="$(curl -s https://ipinfo.io/timezone)" \
  -v "$(pwd)/config:/config" \
  --log-opt max-size=100m \
  --log-opt max-file=3 \
  --restart unless-stopped \
  --security-opt=no-new-privileges=false \
  nickrunning/wechat-selkies:latest  

docker run -itd \
  --name vx \
  --net=host \
  --device=/dev/dri:/dev/dri \
  -e AUTO_START_WECHAT=false \
  -e AUTO_START_QQ=false \
  -e TITLE='Online PC 2028' \
  -e CUSTOM_USER='admin' \
  -e PASSWORD='admin' \
  -e LC_ALL=en_US.UTF-8 \
  -e TZ="$(curl -s https://ipinfo.io/timezone)" \
  -v "$(pwd)/config:/config" \
  --log-opt max-size=100m \
  --log-opt max-file=3 \
  --restart unless-stopped \
  --security-opt=no-new-privileges=false \
  docker.cnb.cool/a202508/feedback:latest

apt install -y vim-tiny gedit flameshot fonts-noto-cjk pcmanfm
apt install -y terminator

# ech client
https://github.com/byJoey/ech-wk/releases
chmod +x ech-workers
chmod +x ECHWorkersGUI  # 如果使用 GUI

# start ech client
./ech-workers \
  -f your-worker.workers.dev:443 \
  -l 0.0.0.0:30001 \
  -token your-token \
  -ip saas.sin.fan \
  -dns dns.alidns.com/dns-query \
  -ech cloudflare-ech.com \
  -routing bypass_cn

# test
google-chrome --proxy-server="socks5://127.0.0.1:30001"
curl --socks5 127.0.0.1:30001 http://www.google.com

# set env
export ALL_PROXY=socks5://127.0.0.1:30001
export HTTP_PROXY=socks5://127.0.0.1:30001
export HTTPS_PROXY=socks5://127.0.0.1:30001

docker run -itd \
  --name webtop \
  --shm-size=8g \
  -p 6080:3000 \
  -e PUID=1000 \
  -e PGID=1000 \
  -e TZ="$(curl -s https://ipinfo.io/timezone)" \
  -v "$(pwd)/data/webtop:/config" \
  --security-opt=no-new-privileges=false \
  --restart unless-stopped \
  linuxserver/webtop:ubuntu-kde

docker run -itd \
  --net=host \
  --shm-size=1gb \
  --security-opt=no-new-privileges=false \
  -e USER_PASSWD=password123 \
  --name alpine-desktop \
  runoneall/tiny-alpine-desktop

ssh -fN -L 8899:127.0.0.1:3389 cnb-33g-1jgj5l58v-001.fd624a0a-d2f8-405c-835f-7ceb8078f935-hkg@cnb.space