Remote CTRL 1.0.2

docker compose pull
docker compose up -d

Or pull it directly: docker pull ghcr.io/umberto-casaburi/remote-ctrl:1.0.2

Fixed

• Connection error dialog. When a VNC or RDP connection failed or ended, the dialog offered a Logout button that signed you out of the remote desktop service, and a Home button. It now offers Reconnect and Close tab, which closes the tab in Remote CTRL.

• VNC to macOS with a VNC password. macOS Screen Sharing offers Apple's username and password sign-in first, so a Mac set up with a VNC password could not be reached. When that sign-in fails, Remote CTRL now retries with the VNC password.

  To use it, turn on VNC viewers may control screen with password in the Mac's Screen Sharing settings, then enter the Mac username and the VNC password (up to 8 characters) in the host.

Remote CTRL 1.0.1

docker compose pull
docker compose up -d

Or pull it directly: docker pull ghcr.io/umberto-casaburi/remote-ctrl:1.0.1

New

• ARM64 images. The image is now published for linux/arm64 as well as linux/amd64: it runs on ARM servers, Raspberry Pi 4 and 5 with a 64-bit system, and Apple Silicon Macs. Docker picks the right one on its own.
• Personal plan. A license for one user is shown as Personal in About: one user with every paid feature, including AI agents through MCP and the built-in VPN.

Fixed

• Built-in VPN. The VPN could not start and showed "fopen: No such device or address". It now starts and devices connect through the tunnel.

To use the VPN, uncomment the VPN lines in docker-compose.yml (port 51820/udp and NET_ADMIN), then enable it in Management > VPN.

Remote CTRL 1.0.0

First public release of Remote CTRL.

docker pull ghcr.io/umberto-casaburi/remote-ctrl:1.0.0

Follow the install steps to set it up with Docker Compose.

What's in it

• SSH terminals with command suggestions, snippets and saved password insertion
• SFTP browser with resumable uploads of any size
• Embedded RDP and VNC sessions through Apache Guacamole 1.6
• Jump hosts, folders, favorites and team sharing
• Enterprise: multiple users, AI agents through MCP, built-in WireGuard VPN

Security

• SSH host keys are trusted on first use. If a host later presents a different key, the connection is refused until a user who can open the host accepts the new key.
• Hosts owned by non-admin users cannot reach the server's own addresses or link-local and cloud metadata addresses.
• Each user signs in to Guacamole with their own account, limited to the desktops they can open, and gets their own shared drive.
• Signing out, changing a password or role, or deleting an account ends that account's sessions, including open terminals.
• Remote CTRL refuses to start while a required secret is still set to its CHANGE_ME placeholder.