WebKVM turns any existing Linux server (Ubuntu, Debian, Fedora, Arch, AlmaLinux, Rocky) into a fast, private cloud virtualization platform in 1 minute without reformatting or hijacking the operating system.

Built in Go with CGO bindings to libvirt and an embedded Svelte 5 single-page web app, WebKVM compiles down to a single ~14 MB static executable. It consumes around 15 MB of RAM at idle and provides unified management for full QEMU/KVM Virtual Machines and lightweight Incus/LXC System Containers.

┌─────────────────────────────────────────────────────────────────────────┐
│                              WebKVM Web UI                              │
│                 Svelte 5 • Tailwind v4 • WebGL Terminal                 │
└────────────────────────────────────┬────────────────────────────────────┘
                                     │ HTTPS / WSS / REST
┌────────────────────────────────────▼────────────────────────────────────┐
│                    WebKVM Server (Single Go Binary)                    │
│   Auth / JWT • WebSocket Proxy • Image Hub • Firewall • Storage Pools   │
└──────────────────┬──────────────────────────────────┬───────────────────┘
                   │ CGO / Unix Socket                │ REST / Unix Socket
┌──────────────────▼──────────────┐ ┌─────────────────▼───────────────────┐
│          QEMU / KVM             │ │            Incus / LXD              │
│    Hardware Virtualization      │ │       LXC System Containers         │
│  (Ubuntu, Windows, FreeBSD...)  │ │     (Alpine, Debian, Ubuntu...)     │
└─────────────────────────────────┘ └─────────────────────────────────────┘

Run the unattended installer on your server as root:

curl -fsSL https://raw.githubusercontent.com/Slaker19/webkvm/main/scripts/install-webkvm.sh | sudo bash

The installer auto-detects your package manager (apt, dnf, pacman), installs required virtualization packages (qemu-kvm, libvirt-daemon-system), configures dual bridge/NAT networking, generates TLS certificates, and registers the webkvm.service systemd unit.

Access the Web UI:

• URL: https://<YOUR-SERVER-IP>:8080 (or https://localhost:8080 if running locally)
• Initial credentials are displayed at the end of the installation and stored at /opt/webkvm/admin-password.initial.

If you prefer running WebKVM in a container against your host's libvirt socket:

curl -fsSL https://raw.githubusercontent.com/Slaker19/webkvm/main/scripts/install-docker.sh -o /tmp/webkvm-docker-install.sh && sudo bash /tmp/webkvm-docker-install.sh

(See docs/DOCKER.md for custom volume mounts and security privileges).

• Manage hardware-virtualized VMs (Windows, Linux, BSD) and sub-second LXC system containers under a single unified dashboard.
• Real-time CPU, RAM, Disk, and Network telemetry via Server-Sent Events (SSE).
• Live hot-plug disk resizing without guest downtime.

• Pre-curated official cloud images (.qcow2) for Ubuntu, Debian, Alpine, Fedora, Rocky, and AlmaLinux.
• Deploy instances in under 5 seconds using Copy-On-Write (COW) backing files.
• Inject SSH public keys, usernames, passwords, and custom #cloud-config scripts automatically on boot.

• Powered by modern @xterm/xterm with GPU WebGL acceleration and Unicode 11 for flawless rendering of btop, htop, mc, nano, and yazi.
• Dedicated TUI toolbar with function keys (F1–F12), Esc, Tab, and Ctrl+C.
• Background Persistence: Navigating between sections in WebKVM preserves active shell sessions without disconnecting.
• Secure system PAM authentication (no insecure automatic root logins).

• Real-time download rate smoothing (e.g. 52.4 MB/s · 120 MB / 1.8 GB · ETA 25s (45%)).
• Globally tracked in the bottom dockable Task Drawer (Ctrl+J / ⌘J).

• Monitor and interact with multiple running VM graphical consoles simultaneously in a customizable live grid.

• Ephemeral Single-Use Tickets: WebSockets authenticate using 30-second single-use RAM tickets. No long-lived JWTs are ever leaked in query strings.
• Anti-SSRF Safe Dialer: Remote image downloads validate and block private/loopback/link-local IPv4 and IPv6 address ranges with strict redirect re-validation.
• Firewall Safe-Apply: Host firewall changes include an automated 30-second rollback timer to prevent accidental lockouts.

WebKVM includes a full-featured CLI tool (webkvm-cli) designed for automation, scripting, and SSH administration.

When run on the host as root, it requires zero tokens or login steps (auto-authenticates via local key):

# List all virtual machines and containers
webkvm-cli vms list

# Deploy a new Debian 12 VM in 5 seconds
webkvm-cli vms create --name debian-prod --ram 2048 --vcpus 2 --disk 20 --image debian-12

# Create a lightweight Alpine Incus container
webkvm-cli vms create --name alpine-ct --ram 512 --vcpus 1 --type container --image images:alpine/3.21

# Download an official cloud image
webkvm-cli images pull-cloud ubuntu-24.04

# Scripting with jq (--json flag)
webkvm-cli --json vms list | jq '.[] | select(.state=="running") | .name'

(See docs/CLI.md for full syntax and examples).

Prerequisites: Go ≥ 1.26, Node.js ≥ 20, libvirt-dev, gcc.

# Clone the repository
git clone https://github.com/Slaker19/webkvm.git
cd webkvm

# Build complete single binary (compiles Svelte frontend and embeds into backend/webkvm)
make build

# Run unit tests
go test ./...
cd frontend && npm test

WebKVM is open-source software licensed under the GNU Affero General Public License v3.0 (AGPLv3).