Hi Joachim I would need to know more about how it works, but UI extensions like that probably arent' that easy to do. Extending the code to work with some other API for the address book might work tho. I'm happy to have PRs Dave
On Tue, 10 Feb 2026 at 08:08, Joachim Lindenberg <[email protected]> wrote: > Hi Dave, > > my Guacamole setup uses an extension that reads destinations from another > service that instruments VMs based on users authorizations, even manages VM > lifecycle. > > Would it be feasible to have an extension concept similar to Guacamole? > Are you supporting also UI extensions? > > The current java based Guacamole is kind of heavy, and moving to Rust > could also be interesting just to learn the language. > > Regards, > > Joachim > > > > *Von:* Dave Kempe <[email protected]> > *Gesendet:* Montag, 9. Februar 2026 20:29 > *An:* [email protected] > *Betreff:* Re: Introducing rustguac - a guacamole-client replacement > written in rust > > > > Hi Joachim, > > the address book feature is backed by hashicorp vault or openbao. So you > need to set that up first if you want to use the address book. I realise > that is a kinda heavy lift for some people, but I'm aiming to have this be > security focused and that means not having credentials to remote machines > stored on disk or on the same machine even. Once you have vault setup, its > pretty easy - you give rustguac an approle, and it will connect to vault > and manage your address book entries. It works without vault for adhoc > entries, so you can give it a go with just adhoc sessions. > > > > > https://github.com/sol1/rustguac/blob/main/docs/integrations.md#vault--openbao-address-book > > > > A neat side effect of this approach is that you can have multiple rustguac > instances use a shared address book, and still have instance specific > addresses. Vault is just like a super secure database. > > > > Dave > > > > > > On Tue, 10 Feb 2026 at 05:38, Joachim Lindenberg <[email protected]> > wrote: > > Hi Dave, > > where do you maintain the “targets” guacd is supposed to connect to? in > Apache Guacamole this is usually in a database or via some extension > plugin. Anything similar? > > Thanks, > > Joachim > > > > *Von:* Dave Kempe <[email protected]> > *Gesendet:* Samstag, 7. Februar 2026 03:55 > *An:* [email protected] > *Betreff:* Introducing rustguac - a guacamole-client replacement written > in rust > > > > Hi everyone, > > I have been using Guacamole for years, and I want to thank the dev team > for all the hard work they have put in not only writing a great product > that I and my business rely on, but in support and docs and planning and > all that thankless stuff. Well done. > > > > I have wanted to change out the frontend of guacamole for years, and I > knew it was possible, and kinda managed to do that. I suspect there are > other commercial products that have kinda done the same thing as I have > done with this little project. > > > > So I had a crack and here we are: > > https://github.com/sol1/rustguac > > > > Lightweight Rust replacement for Apache Guacamole — browser-based SSH, > RDP, and web sessions via guacd > > I have added a few very opinionated choices and features: > > * Hashicorp Vault is the only address book backend > > * OIDC is the only authentication method for users - API first for machines > > * Web sessions are a browser URL and VNC > > * No VNC support at this stage (can add it if someone asks) > > * Lots of other security first features, like TLS everywhere, LUKS for > drives, etc. > > > > I'm currently running some fuzzing on the codebase, so development is > ongoing, but there are packages and docker images ready to go. > > > > Anyway, I hope I'm not overstepping by sharing this here. I am happy to > have feedback and again, thanks for all the great work you do. Hopefully > rustguac becomes a little cousin to guacamole, and is eventually invited > for family dinner. > > > > Dave Kempe > > > >
